last executing test programs: 1m12.189260297s ago: executing program 0 (id=6536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)="f242d72f369babc1046bc51a047edb28622fef5cc87adcd8f25244edaa4241", &(0x7f0000000140), 0x1000, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x7, r0}, 0x38) 1m11.635654377s ago: executing program 0 (id=6538): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x40000000, 0x0, 0x7, 0x40000001, 0x4b4d564b, 0x564b4d56, 0x4d}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x8c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a310000000008000300000000063000048008"], 0xb0}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x3c, &(0x7f0000000000), &(0x7f0000000040)=0x8) 1m10.805029527s ago: executing program 0 (id=6541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a20060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) 1m10.339462799s ago: executing program 0 (id=6544): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000740)={[0x9, 0x1]}, 0x0, 0x0, 0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(r2, &(0x7f00000001c0)='\x00', 0x89901) move_mount(r3, &(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00') sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x128, 0x0, 0xfa6d5a8bf08ea755, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xc8, 0xa8, @random="c2f43ae7134f8bbeac60d2f2168cde3bc3d2db6a1787df0b67001b43ec4fdbba476191df38686e8eb09e8fc10a7fd2dac43089191cd7777079f38707b77230c6c71bf511d5824e14859e1b931fa54b10174e37a527089da522589e13452a6511e0ee0323375a8721cb71dfd6b0194be87f0f02d0177565376ab1c9ca1991fd7b661a0f70cd6fa2ff1c74865f39b82d6b86483a75e5132606cd16dc129483798e3f76e77edbb48d1a1f92c54c233a3ba4af9a3366f25546484d4c2b4d33177c854ddf3963"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x128}, 0x1, 0x0, 0x0, 0x404c810}, 0x4c840) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x2, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0xfffc, 0x6, 0x5, 0x9}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "d3749ac7f14be31f80e43244113f5455"}) 1m9.355201845s ago: executing program 0 (id=6549): move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000340), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0xd) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x6, 0xd) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) r2 = syz_open_dev$video(&(0x7f0000000680), 0x7fff, 0x40d00) ustat(0x0, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000006c0)={0x4, @raw_data="b9389c544c3e9891768b3b1633dd7e9d1c9d544e20539f15eb227a1d4d7754026dff01e7b23c361c79bf4d7a353f9fb18b2fb2ff231c2b0d20cb0bd9bd37241693fb621903dea90ad91b01c52ccf21840f85855a543801c83bfe8a75a27a808a9dc5eb3115b4e1dcea5297b422a94a6e116ac9734fbc80ee7188e48a9e405c48ac1da6a9771f3013f1482f57100716415f5bbef214b76feca943bd90e860167dea53f4cda002fae20035b6ffae18abb53eaa193cd1c0222d53ddcf0111cc9ee83e397b6afaacc9ae"}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd70000000000004000000040012000c0009800800ae00", @ANYRES32=r0, @ANYBLOB="26cd70681bf4e475a175d933d1a377e36c9e528998a4b16744c2ff849502ff0e2b8b9e970fc42c6cc95c170eb9210ad701c47f324c659294ba967a3cc56af6d7da85c8d0ba041be606e7a1c75d4f3e8b0fba088e6d5e5393f3c74fa4227d37588b3a6ab2a23eb1a452575845e4edb0ef5bbca84979b45a13a6c0a5492ca7a51ace12fa977bc5c2c7902a9624a93ab0cdb13da8ffffffff5dcbb88d6bf5bf589eabb92d488e25b4445bad965891174c0cf11a21f12250f243f73689022b"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4084) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x861}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c824}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x33, 0x4}, 0x20) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@proc={0x10, 0x0, 0x25dfdbf8, 0x2}, 0xa00, 0x0, 0x0, 0x0, 0x204, 0x0, 0x2}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x84, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x7}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x40) 1m8.867414902s ago: executing program 0 (id=6551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000010000104000000000000000006000000", @ANYRES32=0x0, @ANYBLOB="258101000000000014000300697036746e6c300000000000000000002c0012800b000100697036746e6c00001c0002800800080000000400080014"], 0x60}}, 0x0) 1m8.097587542s ago: executing program 32 (id=6551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000010000104000000000000000006000000", @ANYRES32=0x0, @ANYBLOB="258101000000000014000300697036746e6c300000000000000000002c0012800b000100697036746e6c00001c0002800800080000000400080014"], 0x60}}, 0x0) 6.687023858s ago: executing program 5 (id=6806): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000440)={0x0, 0x186a0}, 0x10) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/10, 0x10}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x14, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001540), 0x2000, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0xa, 0x3, 0x87) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000280)={@local, 0x40, r7}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xfe, r7}, [@IFA_FLAGS={0x8, 0x8, 0x320}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001400)={0x1, &(0x7f0000001440)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001480)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002900)={&(0x7f0000001580)={0x12b0, 0x14, 0x800, 0x70bd26, 0x25dfdbff, {0x27, 0xfb}, [@INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "3ed91ec7618917fc6ef609c39ec2b02125fc3911c88a6b6b9a934710f71ccde694a10b5a87846e52fd355ca76aee6255313b76d81af2532e248c39b39cece13b5e2267d40812051b1589eaaa1b54885aaf6c808fbdfdaa1e4d59d1cc33ab6721b6cf0c4dfc298a6e82c81665f8a9530ab4e1cb57d7b11ad47072944c3a35a73457bbeff9787ff9bc0cfb55ec57c35785831cb75d8ae6f9d11d9b481211af5762037c3639995bd847c50d4136f3882fa843eefb755b237d515069d6c4c69007881845e4b59e75571ee13b2bab389dcebb1d9b894b"}, @INET_DIAG_REQ_BYTECODE={0x17, 0x1, "df7922807e74377fa17e4626a44c17d6f49f75"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "cbad31d19c8e9de047e2c06cc5f9f44dfd04231c43b72ca544627f5de0f568a35f8a33e714cd7b5b3ee952ed23d289792069495837499b732468285efd59b3e537042cd720fbfee422"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "34190744577c13f742ae16bd19e8531e35cf38e4f38d2eb7ffe18f1901c7f032fde4d929beb424ccddca34c0ad956a2aa851dab4bbe3fd17ff1bb9461dabe83ce899ca9f8515b27c54e2d5455de487ab347f"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "5ae461e0b332f1d0d5501fb8279e59e2c6a6a89fb6384a8a9d619fda780d6d401e8782e02b14328395c5e22d5b2bca994524c2568782c03040d49515f4fcb42015072b1864151525c7c1e88cea9620c206a076a96e84c0aad3d86b5b46d9049662d0cc6435eb222edada0f87b552e38d41a7d4b854020ea3628314bdd40c3259e008584f660fb05ba503cf7cf4894a0e55219cbe630aa32cb619009591197907e00a56b3d94c5546d8edd341aea7f58e67e2dac53c7d3ad3a587e9df623830ae1380650a9257c272e5975950e16184387a9da3403b27c42a43c66e459458476bddd4e601a641"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "958be41a80d7442aed0d405076071522"}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x4}, 0x240008c4) clock_settime(0x17, &(0x7f0000000000)={0x77359400}) sendmsg$key(r9, 0x0, 0x0) 6.406396282s ago: executing program 5 (id=6809): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00ef0010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 6.157581368s ago: executing program 3 (id=6811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601020000000000000000000000001c0007800800124000060000080008400000003708001340000000ed0900020073797a3200000000050005000a00000005000400000000000900020073000000000000000500010007000000"], 0x60}}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x225c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file3\x00', 0x1c2) open(&(0x7f0000000100)='./file1\x00', 0x0, 0x121) userfaultfd(0x80001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000280), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRESDEC=r3, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x60048058) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000580)=@gcm_128={{0x304}, "baac6c0b0f05a1e2", "34a3d9f0e95f96b8f6892a34257396dc", "d30d4e9e", "170cd569e7d750e2"}, 0x28) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf252e00000008000300", @ANYRES32=r5, @ANYBLOB="00340077025155bcacfa4698650cf7f09a4251f2df1378c82477336958122e52d410f80639531bbe88763f9ee718da9f26c30426af166fa49f130a6274f686ed82cf1198876175a2baa6fd9323881aaac4116f4974f7905350f054ae9bb69ba6d18027792770be0d8e72fbf941023446041268d0f18a503d5eaabdef59ad623ca964d22bd05f63ed3cdffa82880b0fe2df65c876fe4a65fa7a7f05e1d86ce6ce26ec7dfe460e03e80d1955e5ca60e733"], 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000400)={0xa0, r6, 0xa8caff1f7eacb6e5, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x78}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_SETUP={0x30, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x8}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7fff}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48881}, 0x15) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) 5.8979456s ago: executing program 5 (id=6812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000003000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010001000000000000010040000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000140000000140800034000000002080002400000001208000800000000000900010073797a30"], 0x108}}, 0x0) 5.632630391s ago: executing program 5 (id=6816): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='9', 0x1}], 0x1) 5.465025932s ago: executing program 5 (id=6819): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3, 0x81, 0x51, 0xfffffffd}, {0x36e, 0x5, 0x7}, {0x1, 0x7, 0x4, 0x59d3}, {0x1, 0x4, 0x7f, 0xe}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x8001, 0xf, 0x0, 0x2}, {0x8, 0x6, 0x50, 0x2}]}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000001c0)={0x10001, 0x480c, 0x6, 0x94, 0x6}) r1 = dup2(r0, r0) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3e21}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x20048090) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28044040}, 0x1) mq_open(&(0x7f0000000580)='\x00', 0x80, 0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x800}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000600)) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000640), 0x100, 0x0) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000680)) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x89) mlock(&(0x7f0000ff8000/0x8000)=nil, 0x8000) r7 = openat$uhid(0xffffff9c, &(0x7f0000000840), 0x2, 0x0) write$UHID_INPUT(r7, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x3000)=nil) dup(r5) r8 = syz_usb_connect$cdc_ecm(0x3, 0x8f, &(0x7f00000018c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x1, 0x4, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "77aabd"}, {0x5, 0x24, 0x0, 0xab}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xb, 0x800}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x97}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x6, 0xec, 0x80, 0x8, 0x4}, @country_functional={0xc, 0x24, 0x7, 0x8, 0x6, [0x27d2, 0xfff7, 0x2]}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x6, 0xa}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x7f, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xc2, 0xf2, 0x4}}}}}]}}]}}, &(0x7f0000001e40)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x0, 0xd3, 0xfc, 0x0, 0x10, 0x8}, 0x3f, &(0x7f00000019c0)={0x5, 0xf, 0x3f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x0, 0xd}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0xfe, 0x9, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "aab58180cf8b18c26b9cee45874821d4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2, 0x63, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x51, 0x3, 0x40, 0x7fff, 0x2}]}, 0x9, [{0x3f, &(0x7f0000001a00)=@string={0x3f, 0x3, "e29c6dab7cdaecdb44bb90172271ab5036dce82aadf6cc348d0a5770cebc0ac58d0dcc34d2c4f1b720d99a68b1fa35f987b11f854e7899bdcde8a40066"}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x44a}}, {0xf3, &(0x7f0000001ac0)=@string={0xf3, 0x3, "ed739ff47f70e2ee1e16d24785695e50c2f06fa707c109774fb347f0325ac9fffca80fc6834845b0f60a4becc11e30c5cc549bb35e31797b16173fb0f0f6e81a427b276d033898c84fb46da56dc5c4b1454bb3c4981f64968ef329746b623a43b41b3f6ce1ac03103bb36bd41d9cc2f86b9f354e6b0ec7d564e4f80c28a2374ffd9ba86e5755cb23605c3fe8ff60df9009c96d5b23e1bd2f19f343b4f70843cabc63d338621e7d0a8288a434b868a14598a241191fcc5ec8feb2649c8c6017d029daff858fa7679a63d88f13f7d0c93903c45fe7fd5b282db8fe5edfcf07c5c5de80890cafe76da29a1d36ece434da5d35"}}, {0xce, &(0x7f0000001bc0)=@string={0xce, 0x3, "72bcf000e3f6952baa4a3a6a6f15cb49d2b4fe6c03f1d50618cdf0919703456eb008a4ec587935ecd5d61c9e90f2ae1a7c57804189478894238503602a31ee1e14005e1a21bf6e4fd069481a8192ca8164430e3f7ec246c902faaedcb7c12d2c6bcf3582c6900cd22ea181051458b2af7265d63aa94b3afad45a3dde4a0cb255955124c9b0fba6efe05d92d608f66c7933933b0a0480476df2964c28aab44844831bb54b8d6a3bfcfdb9cd06dcca7915cd963eafe87f5c7662a4321043abf50db2f8da9732eab5da0f91e60e"}}, {0x3, &(0x7f0000001cc0)=@string={0x3, 0x3, 'A'}}, {0x6b, &(0x7f0000001d00)=@string={0x6b, 0x3, "00af7340b4cc34b2e3b09ffcacef74926046351d65efdb3b42a9901d2c40128ba78efae7c9bdb6015c20cb80d43bf51f93be23769ada1e51960505b557a8a328b166a982b09e724c0b8276c6aca1dab0bf81ec298a7840c873ec6f1ca6d4d97a63d0a6bb92e0e12c9d"}}, {0x5c, &(0x7f0000001d80)=@string={0x5c, 0x3, "48386163e2f0451dbbfce7db51746c8c9a1ce709646eb6c9da43811ce8c1758b683219da563a3f49e7227cac409d0e5aed4c550d1676307e637274bc5f74b8e9b48a82997d95c4d457e5ed118ffa9a45482e149cbcc420a529e7"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000001fc0)={0xc, &(0x7f0000001ec0)={0x20, 0x6, 0xa5, {0xa5, 0x22, "b9a1629979632532d85deabeb1a5594e50b08da110c2348e020608529d07fd85430a136ff517ab3168b42852aa90b268dc203b066b200c4cb37a60a715ae6fb84896668a4d4c4534563f9f963eb18520893abe3e488b57c39a544b27c4bc337d5f6bb6d1647e565a08c53dc6c053d97871d19b2add61107a6ac4b752b6628d3ca0af704798495fd2375932d86b8070616b394ca64f8fdb666e4e4817caa3537e1b2953"}}, &(0x7f0000001f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000020c0)={0x10, &(0x7f0000002000)={0x40, 0xb, 0x27, "7674f76c24eee16e082fda7e25c11af1a5b34646c68afaeb4c4c1df46422d7dbcc392a3ed10a2e"}, &(0x7f0000002040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002080)={0x0, 0x8, 0x1, 0x6d}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002100)={'vcan0\x00'}) r9 = openat$cuse(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) write$FUSE_GETXATTR(r9, 0xfffffffffffffffe, 0x0) r10 = syz_create_resource$futex(&(0x7f0000002180)=0x2) futex(r10, 0xa, 0x1, &(0x7f00000021c0)={0x77359400}, 0x0, 0x1) 5.251805142s ago: executing program 3 (id=6822): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = gettid() sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000009c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304856755200db549e13d64a3489bfc1961cc504fc1175ce7e3335c86d231c5d64829c1ebfac649a1787882b454975a71a18ece31ee6f69e99707e2a13f4f826a57837744a810058f73e25119f8e0b8787ed2f318a1df960df58a7c091b9a7a60e5a2f546d0fe807dab278a08cb2056295185213037adcec5da72763d52734d7dfd51c27", 0xcf}, {&(0x7f0000000ac0)="e8700e444d50a969ff67247cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece98ad3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfe67}], 0x3, &(0x7f0000000bc0)}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/81, 0x7ffff000}, {&(0x7f0000000d00)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0x8dff}, 0x0) 5.121219297s ago: executing program 4 (id=6824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000280)) r3 = syz_open_dev$loop(&(0x7f0000000480), 0xb7c8, 0xa8182) r4 = memfd_create(&(0x7f00000004c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x6, &(0x7f0000002b00)=[{&(0x7f0000002b40)="1800000072006bcd9e3fe3dc6e0800a6070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000002b80)="00112233445500aabbccddee080045000028000100004006f9d37f", 0x1b, 0x0, &(0x7f0000002bc0)={0x11, 0x300, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 4.978874758s ago: executing program 3 (id=6825): close(0x3) fanotify_init(0x200, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x16, 0x0, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x20, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4.533995319s ago: executing program 3 (id=6827): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$sg(0x0, 0x7, 0x90003) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x257}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x80000, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x8080362, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7b, 0x0, 0x0}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) 3.989913596s ago: executing program 4 (id=6831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000020a0101000000000000000000000003140000001100010000000000000000000100000a9a47fccfc9539b8f1175b4fc93e7113e16b1793602c08c45f08c5cfb379183dc86c55f5a77438a706b5582d2b8576414ce3547d6c1e2ff1e47b34e9f"], 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32}]}, 0x24}}, 0x0) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x8417f, 0x3f00) r4 = syz_create_resource$binfmt(&(0x7f0000000300)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) openat$drirender128(0xffffffffffffff9c, 0x0, 0x20000, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=@newtfilter={0x5c3c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xe, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4200, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x8f}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0xc17}}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0x8}}, @TCA_U32_ACT={0x41b4, 0x7, [@m_tunnel_key={0xf0, 0x5, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0xa91, 0xffffffffffffffff, 0x0, 0xe3c1}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x10, 0x8, 0x4, 0x1f, 0xd}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x20000000, 0xfffffc01}, 0x1}}]}, {0x6a, 0x6, "9a69b43fe4a267260a7240f73a3a24fa24194f8536b718f5ca1b3d1eae9c84d066c7af42365ab93d5fe2ab8689b17c41e73b7a316b4162e71f4350541882ddf5951c1906127188ff7e921efe8cc64156a68bbbab0e916069fc725e52da662219d03eca8dd5aa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0xf0, 0x0, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1e92, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x2, 0x3, 0x5d7729e2, 0x5d3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x5, 0x3, 0x9, 0x20000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x9, 0x4, 0x0, 0x45b}}, @TCA_GACT_PARMS={0x18, 0x2, {0x57, 0xe6cb, 0x8, 0x1, 0x5}}]}, {0x57, 0x6, "40e204a362564446c6d40bae861f80a8f4aef6b60c53512a08eb064f3624d690aeafee60f90b724a1bb3b75d48e7d82f2e2dabe86cf1764543259f706f42656c43049a52ffc0e7025f2cbbe4cdb2bd65e9a1e8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_connmark={0x11c, 0xf, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x0, 0x0, 0x6}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x8, 0x3, 0x3ff, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x1, 0x3, 0x3ff, 0x3}, 0x92}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0xffffffffffffffff, 0xfffffff8, 0x9}, 0x2}}]}, {0x7c, 0x6, "b9ee5bfc4bc30e8e17abf5f1f5b851125d4747705ffb8ad3c93de530c28a3fe6cef47bf7835c0094f45a2aa34b3083a3084af7f9f4e1ae2a4014846a024aea7e700b39e5349b5b7fbd01089b9c5d771e2e85297bb2ed978d01acbfdb01c5f6371f503883063d05136032bdd2a993fca55826ba0951b103bc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x180, 0x1e, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x8, 0xff, 0x4}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x9, 0x4, 0x7ff, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x556d4dc7, 0x6, 0x5, 0xea6d, 0x7fffffff}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x7, 0x8, 0xe13, 0x7}, 0x8}}]}, {0xdd, 0x6, "576f41a36c69f8da353bcb34054d35c4b2cea26bc8b0c91ef62df62bba8e29495136ca5459c6a4497e6e64a9000c609d85edfbb732251d78ae94673811b3346ab0fbcd233418ecb89b16c869207695b69e0f45ccc828dcfb4fd41aec2a89a30c71765a4be92c75baafe38183ebbf8c7901009b1340e20c06aada6427fa6527c5efcf1a562d718069c51822fc4f55e99da822271e4789f56aa81ddea1ceb8461aeaf3ce96e4332145ede3f9c4850f99b237fb35844e60a61576452a1e343b16191968060b86133a7176f77101307fe1d92034c435e7f9b586d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0x3ae0, 0x1f, 0x0, 0x0, {{0xa}, {0x3a04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x3, 0x9, 0x10000000, 0x2, 0x200}, 0xf, 0x7, [{0x1, 0x9, 0xff, 0x40, 0x90}, {0x0, 0x1, 0x1, 0x1, 0x100, 0x80}, {0x8, 0x0, 0x2, 0x9, 0x0, 0xcb79}, {0x4, 0x1, 0xe4, 0x40, 0x6, 0x5}, {0xffffffff, 0x80000001, 0x4, 0x0, 0xe, 0x5}, {0x2, 0x2, 0xffffffb1, 0x41114d21, 0xfffffff8}, {0x2, 0x8, 0x400, 0x3bf, 0xa, 0x101}, {0xb3, 0x8, 0x5, 0x3, 0x401, 0x6}]}, [{0x7f, 0x3ff, 0x3, 0x8, 0x6, 0x8449}, {0x9, 0xb, 0x7, 0xffffff46, 0xac9, 0x8}, {0x2, 0x7, 0x3, 0x4, 0x5}, {0x2, 0x10, 0x4000, 0x6, 0x8, 0x3}, {0x2, 0x1, 0x5, 0xf, 0x5, 0xf3}, {0xffff, 0x10, 0x1, 0x133c, 0xd, 0xd}, {0x3c, 0x100, 0x1, 0x6, 0x33, 0xfff}, {0x4, 0x3ff, 0x8, 0x4, 0xff, 0x484}, {0x6, 0x7f, 0x5f7, 0x9, 0x4, 0x3}, {0xfffffff9, 0x8910, 0x100, 0x3, 0x7fff, 0xa08}, {0x2, 0x0, 0x80000000, 0xa, 0x9, 0x8}, {0x5e22381a, 0x6, 0x5, 0x5, 0x7, 0xb}, {0x5, 0x7d, 0x80000001, 0x5, 0x9, 0x932}, {0x0, 0x6055979a, 0xffffffff, 0x1, 0x9, 0x173}, {0x2, 0x2, 0x52d, 0x98, 0x2, 0x5}, {0x1, 0x101, 0x0, 0x7f, 0x6, 0x80000000}, {0x0, 0x7, 0x6, 0x4, 0x9, 0x5}, {0x10001, 0x80, 0xd, 0x2, 0xd59, 0x3}, {0x1, 0x63, 0x9, 0x8, 0x5, 0x7}, {0x8, 0xffff, 0x7, 0x8001, 0x7, 0x8}, {0x10, 0x0, 0xffffffff, 0x1, 0x81}, {0x7, 0x2, 0xe, 0x8, 0x7, 0x2}, {0x101, 0x5, 0x6, 0xc0, 0x1ff, 0x1000}, {0x8001, 0x5, 0x8, 0x7, 0x3, 0xe}, {0x1ff, 0x7, 0x4, 0x5, 0x10001, 0x2}, {0x64ac, 0x4, 0x10, 0x7f, 0x1, 0x7}, {0xc, 0x0, 0x0, 0xa61, 0x38000, 0x12}, {0x8000, 0xfff, 0x400, 0x23, 0xb, 0x2}, {0x1, 0x7, 0x0, 0x1, 0x80, 0xff}, {0x8, 0x1, 0x10, 0x59, 0x2, 0xb}, {0xfffffffd, 0x4, 0x6, 0x7ff, 0x4, 0x7}, {0x4, 0x5, 0x9, 0x5, 0x5, 0x6b5}, {0x5, 0x3ff, 0xf8, 0xc2f, 0x8001, 0x5}, {0x8, 0x0, 0x0, 0x2, 0xbc5}, {0x80000001, 0x1, 0xfff, 0x4, 0x8001, 0x6}, {0xdda, 0x2, 0xfffffffc, 0x4, 0xff, 0xb}, {0xcd1, 0x5, 0x7665, 0xfc8, 0x6, 0x4}, {0x8, 0x2, 0xe4, 0x8, 0x6, 0x4c77}, {0x7, 0x4098fd24, 0x6, 0x1, 0x1, 0x5}, {0x5, 0x2cd, 0x200, 0x800, 0x100}, {0x6, 0x9, 0x3, 0x0, 0xf, 0x1}, {0x7, 0x10000, 0x7, 0x9, 0xe, 0x8}, {0x1, 0x1, 0xfffffffa, 0x86, 0xffff731d, 0x8000}, {0xd2, 0x2, 0xfffff001, 0xfffffffd, 0x2, 0x3ff}, {0x5, 0x4, 0xe, 0xfffffff1, 0x0, 0x2}, {0xf, 0x3, 0xdb, 0x0, 0x9, 0x897}, {0x20000000, 0x7, 0x4, 0x101, 0x5, 0x9}, {0x2, 0xf, 0x9, 0x0, 0x4dc, 0x7}, {0x1, 0x6, 0x5, 0x0, 0x7, 0x8932}, {0x5, 0x6, 0x8004, 0x0, 0x2, 0x2}, {0xe968, 0x7, 0x8000, 0x2, 0x7, 0x7}, {0x9, 0x401, 0x23a, 0x8000, 0x1, 0x8}, {0x8, 0xc649, 0xffff, 0x4, 0x1, 0x7}, {0x4, 0x8, 0x3, 0x401, 0x1, 0x9}, {0x40, 0x6, 0x8, 0xed3, 0x1, 0x800}, {0x5, 0x0, 0x7fff, 0x40000000, 0x3, 0x200}, {0x2, 0x7ff, 0x9, 0x5, 0x10000, 0x5}, {0xd, 0x5, 0x6, 0x7, 0xeeb, 0x18000000}, {0x0, 0x3, 0x81, 0x2, 0x8, 0xa}, {0x2, 0x6, 0xf222, 0xcb, 0x6, 0x9}, {0x5, 0x200, 0xd, 0xfffffffd, 0x5, 0xb9b3}, {0x3, 0x7, 0x4, 0x3, 0x797}, {0x6, 0x0, 0x4, 0x0, 0x52c, 0x1}, {0x7f, 0x7f, 0xfffffff7, 0x0, 0x7fffffff, 0x1}, {0x2, 0x4, 0x1, 0xfffffff5, 0x8, 0x17a067ac}, {0x7, 0x739, 0x400, 0xba9, 0x6, 0x3}, {0x7ff, 0x7fff, 0x800, 0xf17, 0xfff, 0x6}, {0x3, 0x5, 0x7, 0x4, 0x3ff, 0x10001}, {0x2, 0xe, 0x8, 0x9000000, 0x118000, 0xfffffffd}, {0x40, 0x8000, 0x1, 0xf81, 0x81, 0x80000000}, {0x8, 0x10000, 0xb7, 0x7d20, 0xf5f, 0x6}, {0x9, 0x7, 0x42, 0x8, 0x898, 0x8}, {0x5, 0x2a, 0x4, 0x7, 0xe, 0x7}, {0xfffffff7, 0x8, 0x6, 0x9, 0x3, 0x200}, {0x7, 0x80000000, 0x8, 0xffffff00, 0xd, 0x4}, {0x4, 0x40, 0x1, 0x2, 0x9a, 0x7}, {0x4, 0x1, 0xa, 0xcaf6, 0x9, 0xffffffff}, {0x6, 0x1, 0x6, 0x1, 0x7, 0x3}, {0x1, 0x1ff, 0x5, 0x2, 0x6, 0xfffffffa}, {0x2, 0x3, 0x9, 0x2d13, 0xb156, 0x6}, {0x2, 0xffff, 0x1, 0xd, 0x0, 0x4}, {0xc017, 0x5ece, 0xfffffffe, 0x8, 0x1, 0xff}, {0xb, 0x6c, 0x9, 0x200000, 0x6, 0x800}, {0xffff, 0x7fff, 0x3, 0x1, 0x1, 0xffff7fff}, {0x9, 0x3ff, 0x3, 0x4b, 0x7, 0xc}, {0x5, 0x6, 0xde2, 0x5, 0xf0, 0x5}, {0x3, 0x4, 0xb4a, 0x6, 0x74a7, 0x9}, {0x80000000, 0xb, 0xee, 0x4, 0x7, 0x10000}, {0x80, 0x8, 0xfffffc01, 0xd1ce}, {0x0, 0x80000000, 0x5, 0x80000001, 0x4, 0x1}, {0xcf, 0x1, 0x0, 0xff, 0x4, 0x80}, {0x80000000, 0xffffffff, 0x101, 0xfffff9cd, 0x0, 0x6}, {0xffff8f86, 0x7, 0x3, 0x8, 0xfffffea1, 0xffffffff}, {0x8, 0x2d, 0xd778, 0xfffffff9, 0x80, 0x4}, {0x3, 0xd, 0x8f, 0x9, 0x4b6, 0x9}, {0x25, 0x400000, 0x6, 0xc1, 0x4, 0x4}, {0x1000, 0x697c, 0x2, 0x9, 0x3, 0x1}, {0x3, 0xffffffff, 0x8000, 0x1, 0x6, 0x4}, {0xa32, 0x6, 0x6, 0x5, 0x0, 0x1}, {0x4, 0x7, 0x4, 0x6, 0x8, 0xb6b}, {0x1, 0xffff, 0xb, 0xf31, 0x2, 0x10000}, {0x7fffffff, 0x9, 0xa0a, 0x1, 0x9, 0xb5}, {0x4, 0x0, 0x0, 0x80000000, 0x800, 0x7}, {0xffffffff, 0x9, 0xe, 0x2, 0x5, 0x4}, {0xc, 0x2, 0x0, 0x80000000, 0x3ff, 0x6}, {0x0, 0x55f, 0x1, 0xfffffff9, 0xfffff323, 0x3}, {0x1, 0x3, 0x0, 0xffff, 0x5, 0x5}, {0x8, 0x299, 0x3, 0x8, 0x4, 0x2}, {0x1, 0x5, 0xb5, 0x2, 0x4, 0x9}, {0x9, 0x2, 0x800, 0x1, 0xe45, 0xbf5}, {0x609b, 0x80000001, 0x4, 0x6, 0x1ff, 0x100}, {0x5, 0xc9c, 0x81, 0xfffff65e, 0xfff, 0x3}, {0xc5cd, 0x7, 0xa6, 0x40, 0x9, 0xb89}, {0x4, 0xffffffff, 0x40, 0x51e, 0x3, 0x5}, {0x1000, 0x8000, 0x4, 0x73e, 0x1, 0x3}, {0x1, 0x6, 0xe, 0x7, 0x5, 0x6}, {0x3, 0x4, 0x50, 0xc9, 0x0, 0x2}, {0xfffffff4, 0x1, 0x7, 0x10, 0x0, 0x9}, {0x3, 0x1000, 0x100, 0x8, 0x5, 0x7}, {0x1, 0x1, 0xfffffffe, 0x80000001, 0x4, 0x4}, {0x5, 0x5, 0x7f, 0x10, 0x1000, 0x8}, {0x8, 0x9d12, 0x8, 0x1, 0x2, 0xb23a}, {0xf, 0x2, 0x6, 0x7f, 0x5, 0x83}, {0x5, 0x0, 0xac32, 0xe, 0x3, 0x7}, {0x0, 0xffff, 0x1000, 0x81, 0x400, 0x6af}, {0x1c79, 0xe0e3, 0x3, 0xe, 0x7, 0xb}, {0x101, 0x65, 0x5, 0x974f, 0x5, 0x2}, {0xfff, 0x4, 0x4, 0x3, 0xd, 0x7}], [{0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x4}, {0x5}, {}, {0x4, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {}, {0x2}, {0x4}, {0x4}, {0x4}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {0x4, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x1}, {}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x2}, {0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0xe9, 0x6, 0x5, 0x3, 0x5}, 0x6, 0x0, [{0x5, 0x3, 0x100000, 0x1, 0x4, 0x10001}, {0x8, 0x1885, 0xfffffff9, 0xffff, 0x10, 0x8001}, {0x10000, 0xfffffaf1, 0x2, 0x10001, 0x8, 0x8d4a}, {0x8, 0x7f, 0x46e, 0x10, 0x6, 0x1}]}, [{0x5, 0x0, 0xfffffff2, 0x7fffffff, 0x5a6, 0x7f}, {0x79, 0x4, 0x4, 0x2, 0xffff, 0x2}, {0x2, 0x9, 0x4, 0x4, 0x88, 0xa1}, {0x7, 0x4, 0xa, 0x3, 0xb, 0x9}, {0x6, 0xffffff9a, 0xffff, 0x1, 0x100, 0xfffffffd}, {0x100, 0x72, 0x4, 0x7, 0x6, 0x7}, {0x5e02, 0x6, 0x8af, 0x4, 0xf}, {0xffff, 0x4, 0x6, 0x800, 0x6, 0x2}, {0xa, 0x1, 0x2, 0x800, 0x5}, {0x1000, 0xf, 0x1, 0x101, 0x4f06, 0x401}, {0x8, 0xc5d, 0x10000, 0x6, 0x1, 0xd}, {0x6c, 0x5, 0x10, 0x6, 0x3, 0x1ff}, {0x5, 0x3, 0x9, 0x8, 0x6, 0x6}, {0x400, 0x6, 0x1ff, 0x6, 0x3, 0x1}, {0xfffffffd, 0xffffffff, 0x101, 0xffffffff, 0x0, 0x1}, {0x3, 0x46f136f1, 0x5, 0x8492, 0x5, 0x80000001}, {0x5, 0x57c930cd, 0xfffffffb, 0x1, 0x2}, {0x0, 0xf, 0xfffffff7, 0x0, 0x7ff, 0x4}, {0x1, 0xdc, 0x6, 0x2, 0xffff, 0xaf38}, {0x7, 0xffffff01, 0x4efb7791, 0x1, 0x81, 0x1}, {0xffffffe3, 0x400, 0x9, 0x8, 0x7fffffff, 0x4}, {0x1, 0xf, 0xb, 0x80000001, 0x6, 0x2}, {0x0, 0x0, 0x7, 0x6, 0x99, 0x2b}, {0x2, 0x4, 0x5, 0x47b, 0x40, 0xbf6}, {0xd, 0xffffffff, 0x401, 0x2, 0x809d, 0x101}, {0x2, 0x3, 0x9, 0x4, 0x2}, {0x1ff, 0x3, 0x3, 0x3, 0xffffbe08, 0x7}, {0x3, 0x4, 0x5, 0x401, 0x5, 0xfffff801}, {0x9, 0xfffffff8, 0x0, 0xffff7533, 0x2, 0xe00000}, {0xffff, 0x2, 0x8, 0x1, 0x616, 0xb6d1323}, {0x0, 0x40008000, 0x8, 0x200, 0x9, 0x48e}, {0x0, 0x90, 0x8, 0x8927, 0xfffffff9, 0x19bf8f2d}, {0x9, 0x3, 0x6, 0x1, 0x3, 0xffff}, {0x9, 0x1, 0x307ba0be, 0x40, 0x0, 0x8}, {0x1, 0x4, 0x2, 0x4, 0x8, 0x85}, {0x5, 0x1, 0x3, 0x4829, 0x242, 0xffffffff}, {0x800, 0x3, 0x5, 0x2, 0x4, 0x9750}, {0x1eae, 0x2, 0x8, 0x5, 0x878e, 0x8}, {0xe75d, 0x5, 0x7fffffff, 0xc, 0x1, 0x2}, {0x3ff, 0x3, 0x5, 0xa71, 0xcd, 0x9}, {0x7f, 0x9, 0xfff, 0x2, 0x1, 0x4}, {0xc04, 0x3, 0x5, 0x1000, 0x3, 0x3}, {0x5e, 0x5, 0x3, 0x4, 0x4, 0x7}, {0x5, 0xb38, 0xfffffffb, 0x2, 0x2, 0xf}, {0x1, 0xc0, 0x7, 0x9, 0x7, 0x7fff}, {0xd6e, 0x40, 0x58, 0x80000001, 0x81, 0x8}, {0x1, 0x5, 0x812f, 0x1, 0x44, 0x7}, {0x7ff, 0x7, 0x6, 0xc, 0x5, 0x3a}, {0x6, 0x4, 0x6, 0x0, 0x2, 0x1}, {0x8, 0x7, 0x7, 0x1, 0x4, 0x6f}, {0x10, 0x9, 0xfffffffd, 0x1, 0x0, 0x66}, {0x80, 0x4, 0x1000, 0x6, 0x10001, 0xad8}, {0x10, 0x0, 0x0, 0x2, 0x0, 0x1}, {0x4, 0x0, 0x2f49bece, 0x7f, 0x1ff, 0x2}, {0x5, 0x4, 0x0, 0x0, 0x1b, 0x4}, {0xfffffff7, 0x132, 0x3, 0x7, 0x1, 0x10}, {0x5, 0x20, 0x56, 0xffffff37, 0x7ffc, 0x7}, {0x2, 0x7, 0x0, 0xffffffff, 0x1, 0x8}, {0x7ff, 0x2, 0xb, 0x5, 0xe9, 0xfff}, {0x101, 0x5, 0x10, 0x7fffffff, 0x4, 0x2}, {0x9, 0x0, 0xa046, 0x80000001, 0xf05, 0xff}, {0x40, 0xa, 0x2, 0x0, 0x10000, 0x3ff}, {0x8, 0x200, 0x3, 0x2, 0x3, 0x2}, {0x8, 0x26, 0x0, 0x81, 0x7, 0xffffff80}, {0x6, 0x100, 0x2, 0x7, 0xfffffffe, 0x7fff}, {0x6, 0x4fa7, 0x3, 0x80000000, 0x22d8, 0xf05}, {0x10, 0x9, 0x4, 0x3, 0x2, 0x5}, {0x4, 0x7, 0x5, 0x8, 0x6, 0x73}, {0x200, 0x0, 0xe8, 0x5, 0x0, 0x81}, {0xfffffffa, 0x1, 0x6a, 0x5, 0x9, 0x9}, {0x6, 0xc95, 0x1fe, 0x8, 0x4e1d3009, 0x4}, {0xe4b1, 0x81, 0x6, 0x651f, 0x5, 0x9}, {0x7ff, 0x5898, 0x5, 0x3, 0x0, 0x10}, {0x1, 0x0, 0xff, 0xfad, 0x2, 0x4ba}, {0x0, 0x6, 0xdf, 0xa, 0x3, 0x1}, {0x5, 0x8, 0x5, 0xe783d2f, 0x4}, {0x9, 0x101, 0xffffff81, 0x8, 0x4}, {0x5, 0x9, 0x10001, 0x0, 0x10000, 0x4}, {0x7f, 0x5, 0x4, 0x9, 0x1, 0x3}, {0x1, 0x800000, 0x0, 0x9, 0x7fffffff, 0x3}, {0x3, 0x5, 0x1, 0x9, 0xb, 0x7fffffff}, {0x81, 0x7, 0x1ff, 0x7, 0x7724, 0x1}, {0x9, 0x3ff, 0x2, 0x40000, 0x5, 0x7ff}, {0x5, 0x80aa, 0xb34c, 0x8, 0x8001}, {0x3, 0x1, 0x1, 0x4, 0x7, 0x4}, {0x7, 0x0, 0x100, 0xa6, 0xffffffff, 0x7ff}, {0x0, 0x2, 0x4, 0x5, 0x0, 0x4}, {0x8, 0x100, 0xd, 0x6, 0x9, 0x8}, {0x1, 0xfffffff7, 0x3c0, 0x4cf8, 0x1, 0xffff}, {0x80000000, 0x1, 0x7, 0x7, 0x3, 0x3}, {0x7fff, 0x1, 0x3, 0x5, 0x4, 0x2}, {0x9, 0x5, 0xf7, 0xffff, 0x800, 0x4}, {0x80000000, 0xfffffffc, 0xc, 0x2, 0x4, 0x3}, {0x8001, 0x8, 0x5, 0x4, 0x6, 0x9}, {0x4, 0x4, 0x2, 0x400, 0x4, 0x400}, {0x3, 0x3, 0x6, 0x4, 0x48, 0x1}, {0xdb, 0xfff, 0x6, 0xbb, 0xf, 0xffffffff}, {0x3ff, 0x2, 0x7, 0x7, 0x8}, {0x0, 0x4, 0x2, 0x5, 0x9, 0x8}, {0x5, 0xffffff5f, 0x3, 0x7, 0x402, 0x2}, {0x6497, 0x72, 0xe1d1, 0x3, 0xfdcc, 0xd}, {0x8, 0x9, 0x4, 0xfffffff7, 0x3, 0x6}, {0x4, 0x5, 0x7fffffff, 0xb3, 0x9, 0x2}, {0xc1, 0x0, 0xe, 0x1, 0xb, 0x800}, {0x5, 0x1, 0x6, 0xed, 0x0, 0x5}, {0x5, 0x44d, 0x3b, 0x2, 0x2, 0x1}, {0x7ff, 0x5, 0x800, 0xfffffff9, 0xfe0, 0x169}, {0xffffffff, 0x13a, 0x6, 0x3, 0xfffffffa, 0x6}, {0x41a5ab0f, 0x9, 0x6, 0x0, 0x3, 0x7}, {0x3, 0x3, 0x3, 0x4e, 0x1, 0x1ff}, {0xff, 0x9, 0x4, 0xffffffc0, 0xfff, 0xffffffff}, {0x3, 0x9, 0x4, 0x1, 0x4, 0x1}, {0x7, 0x2, 0x1, 0xb, 0x3, 0x7ff}, {0x100, 0x7, 0x4, 0x862, 0x1, 0x4}, {0x800, 0x4, 0x10001, 0xfffffff9, 0x6, 0x5}, {0x7f, 0x59, 0x1, 0x0, 0x8, 0x8b}, {0x4, 0x7, 0x6, 0xfffffff7, 0x10001, 0x924}, {0x3, 0x837, 0x0, 0xe9e1, 0x3, 0x1}, {0x0, 0x101, 0x6, 0x6, 0xf, 0x6}, {0x5, 0x8, 0x0, 0x2, 0x101, 0x7}, {0x3, 0x5, 0xa, 0x7, 0x1, 0x1c89}, {0x101, 0x3, 0x5, 0x2, 0x7f, 0x3e59}, {0x8, 0x6, 0x4, 0x1, 0x7, 0x8}, {0xfffffffb, 0x81, 0xf, 0x1, 0x9, 0x6}, {0x10000000, 0x10000, 0x4, 0x81, 0x9, 0x4}, {0x8, 0x5, 0x3, 0xfffffff8, 0x4ed, 0x2}, {0x6, 0x3, 0x2, 0x5, 0xe86, 0x5}, {0x5, 0xb6, 0x0, 0x3, 0x3f80, 0x5}], [{0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4}, {}, {0x3, 0x1}, {0x56ab633e47091ff9, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x3d4f8232d8d0476f}, {0x4, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x5}, {}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x4}, {0x1}, {0x4}, {}, {0x4, 0x1}, {0x2}, {0x5}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {}, {0x2}, {0x1, 0x1}, {0x1}, {0x4}, {0x5}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x3}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x3}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x1, 0x5, 0xffffffffffffffff, 0x9, 0x9}, 0x6d, 0x4, [{0x1ff, 0x0, 0x10001, 0x80, 0x8, 0xfffffffd}, {0x41822cf7, 0x7, 0xffffff81, 0x7, 0x1, 0x4}, {0x4, 0x9, 0xffff, 0x8, 0x5, 0x2}]}, [{0xfffffff7, 0x90, 0x6a56, 0xfffffff9, 0x6, 0x4}, {0x9, 0xd, 0x7, 0x3, 0x5, 0x8}, {0x7ff, 0x8, 0x0, 0xfffffffb, 0x8, 0x800}, {0x114, 0x0, 0x8, 0x2, 0x182c, 0x3}, {0x9, 0x4, 0x7ed940d1, 0x1, 0xe}, {0x1, 0x9b3e, 0xc, 0x1, 0xd5, 0x3}, {0x9, 0x8, 0x5f7, 0x81, 0x3ff, 0x1ff}, {0x2, 0x2a599820, 0x6, 0xfffff820, 0x40, 0x4}, {0x800, 0x7, 0x9, 0x13, 0x8, 0x7}, {0xffff, 0xfffffffc, 0x5, 0xfffffffc, 0x1, 0x6}, {0x1f07, 0x4, 0x600000, 0x6, 0x7, 0x1}, {0x2bfa49e, 0x0, 0x37, 0x4, 0xfffffff7}, {0x5, 0x9b6, 0x8, 0x1, 0x80000001, 0x8}, {0xc, 0x10, 0x4, 0x0, 0x5, 0x12000000}, {0x5, 0x4, 0x6, 0xd, 0x1, 0x8}, {0x0, 0x0, 0x9, 0x2, 0x4, 0x6}, {0xbf1, 0x10001, 0x6, 0x1, 0xfffffff9, 0x8}, {0x1, 0x33, 0x2f73, 0xffffffff, 0x0, 0x9}, {0x3, 0x8, 0x80, 0x8, 0xf, 0x1}, {0x0, 0x9, 0x9151, 0x0, 0x2, 0x2}, {0x6, 0x200, 0x4, 0x6, 0x101, 0xff}, {0x0, 0x1, 0xa, 0x5, 0x7, 0xcd24}, {0x3, 0x7, 0xbf04, 0x10000, 0x3, 0x7}, {0xffffffff, 0x2, 0x1ff, 0x8, 0x1, 0x36a}, {0x0, 0x64e, 0x2, 0xf, 0xfffffff7}, {0x7, 0x9, 0x4, 0x4, 0x7, 0x6}, {0x4, 0x2, 0x6, 0x8, 0x5dc2, 0x3}, {0x800, 0x45, 0x7, 0x5c}, {0x400, 0x120, 0xfa, 0x0, 0xa, 0xff}, {0x8001, 0x1ce5, 0xfff, 0x6, 0x8, 0x6dd}, {0x9, 0x1000, 0x200, 0x1, 0x4, 0x7}, {0x2, 0x0, 0x25b, 0x81, 0x3e000000, 0xc91}, {0x8001, 0x7, 0x0, 0x7, 0x87f1, 0x2}, {0x4, 0x2197, 0x3, 0x7, 0x7fff, 0x6}, {0x5, 0xf, 0x8, 0x8, 0x6, 0x4}, {0x4, 0xffff99a1, 0x9, 0x40, 0xd8}, {0x5, 0x1000, 0x3, 0xff, 0x8, 0x80000000}, {0x6, 0x0, 0xfffffc00, 0xd97, 0xfffffffa, 0x4}, {0x3, 0x1, 0x7, 0x80000000, 0xa0000, 0x1}, {0xfffffffa, 0x9, 0x7, 0x5, 0x0, 0xfffffffb}, {0x7, 0x0, 0x3, 0x7fffffff, 0x10, 0x2}, {0x1ff, 0x3, 0x36a, 0x5, 0x0, 0x1000}, {0x4, 0x9, 0x800, 0x2, 0x0, 0xe}, {0x9, 0x9a5, 0x0, 0x5, 0xfffffbff}, {0x7, 0xc8, 0x3, 0x8001, 0x2193, 0x3}, {0x2, 0x3ff, 0xc, 0x8, 0x3, 0x100}, {0x2, 0x3, 0x7, 0x6, 0xe, 0x2}, {0x400, 0x1, 0x9, 0xc1, 0x7, 0x1}, {0x401, 0x8, 0x3, 0x4, 0x100, 0x9}, {0x1ff, 0x17, 0x1, 0x3, 0x2, 0x80000001}, {0x6, 0x1, 0x7f, 0x9, 0xfffffff9}, {0x7946, 0x6, 0x140, 0x6, 0x6, 0x9}, {0x9, 0xbf4, 0x0, 0x0, 0x4, 0x8001}, {0x3, 0x101, 0x7, 0x100, 0xff, 0x81}, {0xa27, 0x7, 0x5, 0xfffffffe, 0x0, 0x763b8f89}, {0xffffffff, 0x9, 0x8, 0x7fff, 0xffff64a4, 0x2}, {0x7fffffff, 0x1, 0x3, 0x6, 0x41a, 0x8001}, {0x8, 0xfff, 0xfffffe01, 0xb1d, 0x6, 0x1}, {0x2, 0x2, 0x0, 0x8, 0x9, 0x10000}, {0xfffffffa, 0x3, 0x0, 0x5, 0x5, 0xceacaf23}, {0x1, 0x5, 0xfffffffe, 0xb, 0x6, 0x7}, {0x1000, 0x1c, 0xec, 0x1c, 0x8, 0x3}, {0x2, 0x4, 0xee, 0x4, 0x3, 0x3}, {0xfff, 0x1, 0x4, 0x400, 0x2, 0x8}, {0xe, 0x6, 0xacbf, 0xfffffffc, 0xfffffffa, 0x2}, {0x1, 0x12d2, 0x7fff, 0x80000000, 0xe, 0x82ff}, {0x4000, 0x7fff, 0xf, 0x9, 0x4, 0x143}, {0x4, 0x4, 0xffff, 0x0, 0x5, 0x7}, {0x4, 0x1, 0x4, 0x0, 0x49, 0xb485}, {0x1, 0x2, 0x7, 0x2, 0x0, 0x1}, {0x101, 0x9, 0x8, 0xfffffffc, 0x8, 0xa89b}, {0x88000000, 0x6, 0x0, 0xd, 0x2, 0x80000000}, {0x8001, 0x76, 0x6, 0xe70b, 0x0, 0xbe47}, {0x3, 0x40, 0x5, 0x8, 0x6, 0x1}, {0x2, 0xd89a, 0x8000, 0x4, 0x6, 0xde}, {0xfffffffc, 0x3, 0x80000000, 0x2, 0x19e7, 0x7}, {0x9, 0x5, 0x0, 0x6, 0x4, 0x68}, {0x9, 0x9, 0xe, 0x0, 0x1, 0x4}, {0x8000, 0x6, 0x0, 0x6, 0x2, 0x99}, {0x44, 0x5, 0x8, 0x1000, 0x2, 0x7f}, {0xf, 0x2, 0x6, 0x4b60, 0x7, 0x211}, {0xfff, 0x8000, 0x7, 0x6, 0x1, 0x7fffffff}, {0x7, 0x8001, 0x7, 0x1, 0x9, 0x7}, {0xb, 0x8, 0xfffffffa, 0x1, 0x2, 0xfffffffc}, {0x7, 0x2b8, 0x8, 0x946c3d29, 0xa31e, 0xfffffffc}, {0x8000, 0x7, 0xfffffffc, 0x7, 0x7, 0x3}, {0x4, 0x6ded4aa9, 0x9, 0x4, 0x2c78, 0xffff8ea4}, {0x6ed, 0xffff, 0xb8, 0xff, 0x1, 0x8000}, {0x2, 0x8, 0x2, 0x8, 0x8, 0x9}, {0x3, 0xf, 0x0, 0x5, 0xdcb, 0x9}, {0x7, 0x3, 0x7822, 0x3, 0x8, 0x9}, {0x5, 0x1, 0x5, 0x2, 0x8, 0x10001}, {0x7f, 0x8000, 0x2, 0x81, 0x3ff, 0x1}, {0x0, 0x7727, 0x3ff, 0xffffffff, 0x3, 0x101}, {0x7, 0xfffffffb, 0x7c6, 0x5, 0x9, 0x1}, {0x5, 0x7, 0x80000001, 0x40, 0x6}, {0x40000000, 0x7, 0x4, 0x4, 0x1, 0x4}, {0x8fb, 0x10000, 0xffffffff, 0xfffffff8, 0x4c, 0x8}, {0x4, 0x8, 0xa, 0x9, 0x8}, {0x1, 0x5, 0x4, 0xfff, 0xd, 0x8}, {0x6, 0xd9, 0x71, 0x2, 0x200, 0x580}, {0xffffffff, 0x9, 0x7, 0x8, 0x7ff, 0x600}, {0x9, 0x5, 0x1de, 0x63d, 0x4, 0x6a1f}, {0x10001, 0xfffffff9, 0xffffffff, 0xe, 0x7, 0x8}, {0x3, 0xb, 0x2, 0x7, 0x6, 0x401}, {0x28b, 0x7fffffff, 0xfff, 0x1, 0x4, 0x2}, {0x1, 0x2, 0x2, 0x7, 0x0, 0x3}, {0x6, 0x5, 0x3, 0x3, 0x7ff}, {0x401, 0x400, 0xfff, 0xcb3, 0xb, 0xf077}, {0x2d, 0x60be, 0xffffff11, 0x4, 0x1}, {0x5, 0x5, 0xa66b, 0x8, 0xc, 0x8f44}, {0x200, 0x7fffffff, 0x9, 0x7, 0x3ff, 0x7}, {0x3, 0x1ff, 0x5, 0xfe95, 0x3, 0x9}, {0xadcc, 0x7, 0x2, 0x8000, 0x0, 0x4}, {0x40, 0x3, 0x1, 0x8, 0xffffffff, 0x1}, {0x6, 0x8, 0xff0, 0xac1, 0x3, 0xb}, {0x2e67, 0xbbd0, 0x1, 0x3, 0x7ff, 0x6b2}, {0x4, 0x9, 0x1, 0x2, 0x6, 0x10000}, {0xf, 0x7, 0x1, 0x2, 0x80000000, 0x4}, {0x5, 0x4, 0x3, 0x2, 0xb5, 0x1}, {0x1, 0x2, 0x1, 0x8, 0x8001, 0x5}, {0x0, 0xffffffa0, 0x80, 0x8, 0x7fffffff, 0x9}, {0x9, 0x3, 0x9, 0x9c58, 0x6, 0xa0}, {0x40, 0x5, 0x68de4307, 0x3, 0x558e02f2, 0x5}, {0x5, 0x50, 0x80000001, 0xe877, 0x7, 0x100}, {0x2, 0x2, 0x5, 0xae03, 0x1ff, 0x9}, {0x2, 0x6, 0xe, 0x3, 0x3ff, 0x101}, {0x400, 0x1000, 0xd93d, 0x0, 0x4, 0x164}], [{0x3, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x9e5419ad7fa663db, 0x1}, {0x3}, {0x5}, {0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x1}, {}, {0x4}, {0x0, 0x1}, {0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x5}, {0x2}, {}, {0x0, 0xae7eca2c4f91eb25}, {0x4}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x6, 0x1}, {0x4}, {0x6}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x80000001, 0xd, 0x10000000, 0xf5d1, 0x4}, 0x2, 0x5, [{0x7, 0x1, 0x3, 0xb, 0x5, 0x3}]}, [{0xdfe, 0x8, 0x40, 0x5, 0xc, 0x2}, {0xd, 0xf, 0x7, 0xe4, 0x4, 0x6}, {0x2, 0xabd, 0x3, 0x6, 0x6, 0x9}, {0x4, 0x1, 0x8, 0xbe6, 0x63, 0xfff}, {0x0, 0xc349, 0x3, 0x1, 0x4, 0x4}, {0x3, 0xaec, 0x8, 0x9, 0x0, 0x3}, {0xb46, 0x7ff, 0x3, 0x3ff, 0x3}, {0x0, 0x81, 0x7, 0xe, 0x2}, {0x6, 0x0, 0x6, 0x80000001, 0xfffffcd3, 0x3}, {0x5, 0x3, 0xff, 0xff, 0xcd6, 0x891f}, {0x8, 0x100, 0x81, 0x100, 0x4, 0x2}, {0xfffffffd, 0xd, 0x1, 0x8, 0xff, 0x7}, {0x80000001, 0x1, 0x7fff, 0x80000000, 0x3, 0x3}, {0x8, 0xfffffffe, 0x400, 0x5, 0x233, 0x101}, {0x101, 0x6, 0x0, 0x1, 0x4a, 0x3ff}, {0x9, 0x8, 0x4, 0x2, 0x94e, 0x1}, {0x3, 0x1, 0x2, 0x4, 0xdf, 0x878a}, {0xfffffffd, 0x8, 0x0, 0x1, 0x9, 0x401}, {0x200, 0x3, 0x2, 0x22, 0x1000, 0x1000}, {0xfffffffc, 0x9, 0xffff0001, 0x8e5f, 0x3, 0x3}, {0x1, 0x1, 0x200, 0x1d1, 0x4, 0x3}, {0x6, 0x9, 0x6, 0x80000001, 0x60000, 0x80000000}, {0x5, 0xb1, 0x6, 0x1, 0x0, 0x7e2}, {0x4, 0x4, 0x8, 0x4, 0x7ff, 0x10000}, {0xd6bb, 0x0, 0x79d, 0x7ff, 0x6, 0x2}, {0x10001, 0x20a, 0xd2d, 0x6, 0x7ff, 0x400}, {0x6, 0x18000, 0x9, 0x100, 0x7, 0x9}, {0x7, 0x3, 0x101, 0x68, 0x9, 0x6}, {0x6, 0x10001, 0x0, 0x81, 0x401, 0xfff}, {0x196, 0x3, 0x0, 0x7, 0x6, 0x8}, {0x7, 0x1, 0xffffff00, 0x3, 0x8}, {0x5, 0x9, 0xfffffe70, 0x1, 0xff, 0x3}, {0x9, 0x8, 0x1ff, 0x4, 0x7, 0x757}, {0xf, 0x7, 0x2, 0x7966, 0x1, 0xffffffdf}, {0x40, 0x0, 0x50e8, 0x9, 0x9, 0x3}, {0x4, 0x80000001, 0x41edf83d, 0x1, 0x3a7a5f23, 0x9}, {0xc09, 0xffff0000, 0x75e, 0x4, 0x3, 0x2}, {0x7, 0xe7, 0x1, 0x4, 0x8, 0x1}, {0x2, 0x7, 0x929, 0xd, 0x3, 0x3}, {0x8, 0x6, 0x2, 0x180, 0xffffffff, 0x7ff}, {0x7, 0x1, 0x3, 0xf, 0x8, 0x2}, {0x7, 0xf0a2, 0x6, 0x8, 0x9f, 0xc}, {0x0, 0x2, 0x8, 0xaf, 0xc, 0x3ff}, {0x1ff, 0xfffffc81, 0xe, 0xfffffe01, 0x1000, 0x4}, {0x100, 0x6, 0x0, 0x0, 0x19, 0xfffffffe}, {0xb0000, 0x7, 0x6, 0xc00f, 0xff}, {0x9, 0x0, 0xd9, 0x8, 0x200, 0x3}, {0x6, 0x6e16, 0xfffffffa, 0x800, 0x8, 0x1}, {0x6, 0x5, 0x2, 0x3, 0x5, 0x1}, {0x10001, 0xffffffe7, 0x756, 0x8, 0x4, 0x1}, {0x3, 0x0, 0x10000, 0x80000, 0x2, 0x35c6}, {0x4, 0x8f, 0x3, 0x7fff, 0x7, 0x5}, {0x3, 0x6, 0x81, 0x5, 0x4, 0x6}, {0xfedf, 0x1, 0x4, 0xfffffff9, 0x3, 0x31e4}, {0x8, 0x6, 0x6, 0x7, 0x7, 0x7}, {0x7311, 0x7, 0x3, 0xffff, 0x7, 0x401}, {0x7, 0x1bfbc753, 0xaf6b, 0xe, 0x1, 0xffff8000}, {0x9214, 0x3, 0x81, 0x8001, 0x9, 0x4}, {0x80000001, 0xfffffff7, 0x6, 0xe4000000, 0x3, 0x1}, {0x10, 0x2, 0x4, 0x21e0, 0x2, 0xffffffc0}, {0xa, 0x80, 0x8, 0x12, 0x1ff, 0x9}, {0x2, 0x5, 0x1b, 0x7ff, 0xfb, 0xa3ee}, {0x5, 0x6, 0x4, 0xc, 0xe, 0x2}, {0xfffff8a9, 0xf8, 0x3, 0x9, 0xe, 0x7fffffff}, {0x8001, 0x101, 0x3200, 0x1d70, 0x0, 0x3}, {0x32, 0x3, 0xe5, 0x0, 0x1, 0x9}, {0x3, 0x6e6b, 0x7fffffff, 0x3, 0x7, 0x1}, {0x6, 0x4, 0x2c, 0xd, 0x5, 0x7}, {0x0, 0x1, 0x7, 0x164d, 0xd, 0x5}, {0x1ff, 0x8001, 0x6, 0x0, 0x300, 0x6}, {0x7, 0xfffffffa, 0x6, 0x7, 0x4, 0x8001}, {0x4da1, 0x4, 0xbb5, 0x800, 0x6, 0x8000}, {0x3, 0x3, 0x80000001, 0xe, 0x8, 0x86f6}, {0x1ff, 0x24a2, 0x80000001, 0xd, 0x6, 0x8}, {0x6, 0xdc9c, 0x8, 0x9, 0x800, 0xc}, {0xffffffca, 0x4, 0x1, 0x3, 0x2, 0x4}, {0x3, 0x400, 0x2, 0xa, 0x4, 0xc0b1}, {0x1, 0x8, 0x5, 0x6, 0x8001, 0x5}, {0x3, 0xd, 0xd, 0x800, 0xb5a}, {0x738, 0x9, 0x0, 0x4, 0x9bf, 0xc811}, {0x9, 0x101, 0x5, 0x8, 0xfffffffc, 0x401}, {0x5, 0xe, 0x9, 0xfe60, 0xb5, 0x4}, {0x3, 0x7, 0x80, 0x4, 0x0, 0x4}, {0x200, 0xa66, 0x8, 0x4, 0x1, 0xa620}, {0xfffffffe, 0xffffffff, 0x2, 0x6, 0x698, 0x9337}, {0x3, 0x9, 0x44b75054, 0x5b23, 0x2, 0x80000001}, {0x5, 0x80000001, 0xf, 0x2, 0x0, 0x4}, {0x1, 0x3ff, 0xb135, 0x7, 0x2f6, 0x1}, {0xcf2, 0x9, 0x0, 0xd16, 0xa2, 0x81}, {0x1, 0x101, 0x6, 0x6, 0x6fcd5172, 0xff}, {0x5, 0x7, 0x5, 0x0, 0x10000, 0x93c}, {0x9, 0x8, 0x9, 0x6, 0x3, 0x2}, {0x3, 0x579, 0x6, 0x1000, 0x4, 0x3234}, {0x5, 0x2, 0x1, 0xfffffe01, 0x9, 0x8001}, {0x8000, 0x40, 0x7, 0xf, 0x7, 0xd5700000}, {0xff, 0xb4, 0x3, 0xf, 0x5}, {0x3, 0x3, 0x2, 0xe, 0x400, 0x7f}, {0x1000, 0x5, 0x5, 0x4}, {0x1, 0x9, 0x9875, 0x7de, 0x1, 0x3}, {0x368, 0x1580000, 0x4, 0x7, 0x80000001, 0xa}, {0x6, 0x6, 0xd, 0x4, 0x4, 0x2}, {0x3, 0x5, 0x3, 0xe5ff, 0x52, 0xffffffff}, {0x8001, 0x7, 0x60c, 0x2, 0xffffffc0, 0x8}, {0x1, 0x1, 0x2, 0x0, 0x8001, 0x1ff}, {0xc, 0x400, 0x3ff, 0xe, 0x6e, 0xfffffff8}, {0x9, 0x9, 0x3342, 0x3, 0x3, 0x10001}, {0x5a, 0x40, 0x6, 0x7, 0x800, 0x6}, {0xfffff000, 0x8, 0x10, 0xffffdff9, 0x9, 0xfff}, {0xa, 0x401, 0x3ff, 0x4, 0x9, 0xe93}, {0x5, 0x9, 0x6, 0xf, 0x9, 0x5}, {0x3ff, 0x5, 0x200, 0x5, 0x8000, 0xfa}, {0x0, 0x9, 0xfff, 0x7, 0x9, 0x7f}, {0xfffffffb, 0x1, 0x6, 0x0, 0x1, 0x98}, {0x1, 0x9, 0x4, 0x8, 0x404d, 0x8001}, {0xa, 0x0, 0x5, 0x0, 0x44, 0xe}, {0x5839, 0x3, 0x31, 0x9, 0x4, 0xa97}, {0xc, 0x8, 0x5, 0x1, 0x2, 0x7}, {0xffff, 0x2a, 0xb5, 0x7, 0x35f2, 0x3}, {0x1, 0x7, 0x7, 0x6, 0x0, 0x400}, {0x0, 0x8, 0x7fff, 0x4e, 0x209d, 0x100}, {0x8, 0x706, 0x7, 0x3, 0x7, 0x6}, {0x3, 0x1000, 0xff, 0x6, 0x6, 0x3}, {0x0, 0x3, 0x3, 0x956, 0x4, 0x7}, {0x9, 0xb, 0x7ff, 0x9, 0x62ec3c85, 0x2}, {0x3, 0x5, 0x1, 0x8001, 0x2, 0x3ff}, {0x6, 0xfffff001, 0xfff, 0x40, 0x2, 0xffff8001}, {0x5, 0x10001, 0x7, 0x200, 0x0, 0xd7d6}, {0x101, 0xe, 0x7, 0x5669, 0x5, 0xbb}], [{0x4, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {}, {0xab40bae87f2562ec, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}], 0x1}}]}, {0xb4, 0x6, "02a4293a8b6eb207440fb9f9aa6dcc98fdf40021dc6e4f5b5f0b734f805bc61d72b6fdff5f6e12c98fdc6beba8544d5f346564b4aa44eaf5e20482212ac94b2dd8edac50628a21a9ac23f51c503ff8fbe11e6cdbe34f0dc0fda7f21cb56a141bac6c892d583c7ef026fdb92b7ae0538131f702a410999299861ccf5cd19fc475ae5f753334779b79a8e667e5a95b5cb0e9da57f9c7e7320c3e1662ba872753913a00affc1aff25349aa5bf05a7215cc0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x108, 0xc, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="ccb8f3e62480"}]}, {0xd2, 0x6, "e850596af25c45a50ca14a2c652b28c154ab4a202dd0bf35edcc0a123c6d90ce48bb0d10c8dc1bed923eb4f994a3e107ef67d0a0c0d8fa2caa921adfbb3d907600cde9ea60aeae9e8afb860e53fd0485e98b5319faabfca1c7ee81a67f468cbff99801cac9b90e396114314d917606ff3792ce1c89a956870aa94c7ac5f83ecbefa797e753a915f9dff171791c484c7727b8703517c1b720294a86dbf73c7c376be885aaa7ba18dcf5798ef3a70eb4823b308af8ddcc7e5e6a4e9cccf8794b8a17c45cc48a43e52bfa74e0e65d1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x14c, 0x7, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0xb, 0x6, 0x5, 0xeae}}, @TCA_CT_ZONE={0x6, 0x4, 0xfff}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_ZONE={0x6, 0x4, 0x6}]}, {0xc3, 0x6, "f46631599e5f56d3797fab7599aca36c17bb32edf994030951fa753686a7375514532affc6615f42051d9de57073fac0a74bda340b075bcb13838fa8f6752d44552623613342592c3a925fe10de5f816f7d63e825e25e48edda2fbe7b314be14e669d7f61c7580e222a6ae47e0990ad6d7ca2435f83cb1147e883f6a97665cf27784f7f7adaefc479db57db7a7e6ad77ec0158c434908c59098cba9ec6e1eaa6eef5e6bb244f7309f946c3a06e4d0554e2c157639fdfb41226429f53f4bb4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0xf8}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @filter_kind_options=@f_cgroup={{0xb}, {0x19ec, 0x2, [@TCA_CGROUP_ACT={0x16d4, 0x1, [@m_bpf={0x58, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file1/file0\x00'}]}, {0x10, 0x6, "d545b673323e468170b453a9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x234, 0x13, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x29, 0x2, 0x6, 0x4, 0xe}, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x3a}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3a, 0x6, 0x7ff, 0xfffffffe}, @local, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x3, 0x0, 0x5, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x191, 0x7, 0x0, 0x2, 0x1}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xfd, 0x7, 0x8}, @broadcast, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xf90, 0xffffffffffffffff, 0xf, 0x7f}, @broadcast, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0x5, 0x7fff, 0x1}, @rand_addr=0x64010101, @private=0xa010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x101, 0x20000000, 0x9}, @multicast1, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4, 0x20000000, 0xb0, 0xdfb}, @remote, @rand_addr=0x64010100, 0xff000000}}]}, {0xa4, 0x6, "140d793c1680b53e16b7d3b4915acf79c4c80b6ff42132619901d7a6c00fde75156a8e0efd035a1840d34e572346c7802dc0ade01db592dde4ee7c5c545e81d5c13f5fb12058ae567b29b75f03fc9744b9e739987e5c098578d36233a3da7fde4c4d2c967dda40a16a6affcac1aa3a460e5718b7db1d537547d63f381a5aed4ba49e275ba8f4b8c787fd1009b90e112833b8c24f8373180d4150f3b6eede1e61"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x70, 0x12, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x16f}]}, {0x32, 0x6, "0127e47ebe8925dc08e662d0ac16fb646efbb32adf9d1c5e393183a5c23029b6e9f27850f41f48fd1c0cdfdcf3d6"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0xdc, 0x3, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x55ef}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x220}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x5, 0x1, 0x8000, 0x80000001, {0x6, 0x0, 0x6, 0x9, 0x9}, {0x5b, 0x1, 0x3, 0x1000, 0x4, 0x4}, 0x0, 0x80000001, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}]]}, {0x30, 0x6, "f2d6b18d89ea3d588e93ec54320f63d961df229a043fe6f9ef35c32129a2bd030f7eac2b99b8c0778374ca9d"}, {0xc}, {0xc}}}, @m_ct={0x8c, 0x1, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x38}, @TCA_CT_MARK_MASK={0x8}]}, {0x51, 0x6, "a80f918adc64b586b6ad4076ed51984102fdbe99fd419302accb8b6e0ba5067c4480185f0f737790d0f5f2891f94d575c1165d18e04523956944d1f15eb4dfee51573236a359acc4985f81fadc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x1068, 0x1c, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1, 0x0, 0x0, 0x8}, {0x7, 0x9, 0x0, 0x6}, {0x6, 0x81, 0x80, 0x9}, {0x5, 0x0, 0x0, 0x1a936cce}, {0x28cb, 0x16, 0x7, 0x1}, {0x7, 0x8, 0x32, 0x3ff}, {0x6, 0x9, 0x6, 0x6}]}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x74, 0xa, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x75b, 0xeb7, 0x10000000, 0x7fff, 0x4}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xfff2}}]}, {0x25, 0x6, "4bae4f9d410da447355e5229546319f51ffd41f46dd7f311ec2c58ae6d9950ced9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x5c, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x30, 0x6, "392a5d97257a8a72b0ae57eeddfdb9b15982d0388c920af7500b04c5a7b6051db7a479841e68bfee0d39b34b"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x134, 0xb, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x200, 0x3, 0x8, 0x8000}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff9, 0x40, 0x4, 0x8, 0x2}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xfffffffc, 0x5, 0x2, 0x4}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2972, 0x6, 0x1, 0xf, 0x5}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf6ce, 0x7fff, 0x7, 0xffffffff, 0x5}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xdfe8, 0x5, 0x3, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x5, 0x7, 0x6}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x10, 0x5, 0x81, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x400, 0x0, 0x3, 0x9}, 0x6}}]}, {0x7, 0x6, "bffe7c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_ACT={0x25c, 0x1, [@m_vlan={0xc4, 0xe, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x323}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x504}]}, {0x7e, 0x6, "306144e07122b7fa4f5dbad9d5996c274f59be9ba4af553561a37258fe6a36f04ad47d717e2a63e7ccadaf2a66955ec15f86193a8dd34a61c44120cc2b4d0b0b411c7fc227960a113442f1355a535ed71b4d7cf4437674fb271229cc6e69915cdbd83265cbd4d5688693bbac2551a19f316f3f41e52a0f09823d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0x7c, 0x2, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2800, 0xf8b4, 0x7b9694efe3b05ca7, 0x8, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0xb, 0x6, "b8e0813de5a971"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x118, 0x13, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x65, 0xffffffffffffffff, 0x8, 0x477}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x2, 0x8, 0x4}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1668d668, 0xff, 0x10000000, 0x4, 0xaf}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x9f, 0x20000000, 0xfffff3ea, 0x2}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbe, 0x1, 0x8, 0x6, 0x5}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x20000000, 0x40, 0x7fff}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0xfffffffffffffffa, 0x7f, 0x6d0}, 0x9}}]}, {0x25, 0x6, "7d4be3011964492b927522a5476ae1632585f1625d916db5ccbb38ec8a3debd65e"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0xb0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdb4}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x7}, {0x6, 0x7, 0x2, "859c621d21039e"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6}, {0x6, 0x2, 0x4, 0x3, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xff}, "9e3ad305f101015cd101b8c32778d05ee6e22eab0775a03e31343c2e695f43295c53ffba896639a3"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x32a}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}]}, @TCA_CGROUP_POLICE={0x4}]}}]}, 0x5c3c}}, 0x8050) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000006680), 0xa0602, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000066c0), 0x600120, 0x0) writev(r6, &(0x7f0000006700)=[{&(0x7f0000006740)="94", 0xf000}, {0x0, 0xff2b}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.4320986s ago: executing program 3 (id=6832): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x3, 0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000200), 0x1004) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) unshare(0x8040480) syz_ublk_setup_io_uring(0x5be2, 0x0, 0x0, 0x0, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0xfffe}) fchown(r1, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140120a01000000010203010902360002010080000904000003e00101000705810310000107050202000200070582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) 2.967130506s ago: executing program 4 (id=6833): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="d3fdff0018010000180a00000000000000000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x4, 0xc, &(0x7f0000000680)=""/195}, 0x23) 2.966447035s ago: executing program 2 (id=6834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0x2c, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, [@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ldst={0x2, 0x2, 0x4, 0x9, 0x8, 0xffffffffffffffc0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @map_fd={0x18, 0xc}, @ldst={0x0, 0x1, 0x4, 0xb, 0x0, 0x40, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x80}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000240)='syzkaller\x00', 0x382d, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x10, 0xffff, 0x134}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x5, 0x5, 0x4, 0xd}, {0x4, 0x1, 0xc, 0x8}, {0x2, 0x3, 0x1, 0x7}, {0x5, 0x5, 0x5, 0x4}, {0x4, 0x5, 0x5, 0xb}, {0x0, 0x2, 0x3, 0x4}, {0x5, 0x3, 0x1, 0x8}, {0x4, 0x2, 0xd, 0xb}], 0x10, 0x3059}, 0x94) ppoll(&(0x7f0000000480)=[{r0, 0x2}, {r0, 0x2}, {r1, 0x10}], 0x3, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)={[0x1, 0x200]}, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000c40)={0x0, 0x13, 0xfa00, {0x1, &(0x7f0000000c80)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000cc0)={0x13, 0x10, 0xfa00, {0x0, r4, 0x2}}, 0x18) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa7b}]}, 0x2c}}, 0x810) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000000)=0x7f, 0x4) bind$inet(r5, &(0x7f0000000540)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000580)=0x7f, 0x4) bind$inet(r7, &(0x7f00000005c0)={0x2, 0x4e20, @multicast2}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000800)="ebe301e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}, {&(0x7f0000000840)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}, {&(0x7f0000000940)="e7c4a6e597cc7e8b95de55bc84f821a2a9844814391e7c66b854f436d622ee02daae0c61de8735b7c5bd9540c552524539dec5081252c56f1009992539ecabe72653027c6c1493e7bff0df50a27985df8294e6c71b2b733666dd4cad621da1c7cb496e6ee040430551b9b8265c12cfe9b90b77c0dee89b97b8630eff0eb9265b5cc424", 0x83}], 0x4, &(0x7f0000000a00)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x1}], 0x1, 0x40800) recvmsg(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/81, 0x7ffff000}, {&(0x7f0000000b40)=""/83, 0x20000253}], 0x2}, 0x0) listen(r7, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') open_by_handle_at(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r10], 0x0) 2.89297669s ago: executing program 4 (id=6835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000004000000000500000a20000000000a01040000000000000000050000000900010073797a30000000004c000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000020000480080001000000000008000200000000000c00030073797a5f74756e00"], 0xe8}}, 0x4010) 2.769856874s ago: executing program 4 (id=6836): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000009c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304856755200db549e13d64a3489bfc1961cc504fc1175ce7e3335c86d231c5d64829c1ebfac649a1787882b454975a71a18ece31ee6f69e99707e2a13f4f826a57837744a810058f73e25119f8e0b8787ed2f318a1df960df58a7c091b9a7a60e5a2f546d0fe807dab278a08cb2056295185213037adcec5da72763d52734d7dfd51c27", 0xcf}, {&(0x7f0000000ac0)="e8700e444d50a969ff67247cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece98ad3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfe67}], 0x3, &(0x7f0000000bc0)}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/81, 0x7ffff000}, {&(0x7f0000000d00)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xffffff8d}, 0x0) 2.664510382s ago: executing program 4 (id=6838): capset(&(0x7f0000000c80)={0x19980330}, &(0x7f0000000cc0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x80102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x42) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000d00)={'ip6gre0\x00', 0x0}) clock_adjtime(0x3, &(0x7f0000001140)={0x335d, 0x6, 0x2, 0x9, 0x6b, 0x7, 0x10, 0x7, 0x1000007, 0x3, 0x77, 0x9, 0x2, 0x3, 0xfffffffffffffff8, 0x401, 0xffffffffffffffff, 0x7ff, 0x3, 0x6, 0x4000003, 0x6, 0x400, 0x3, 0xffffffffffffff9b, 0xffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r5, @ANYBLOB="5d5b0000000000001c001a8018000a801400c299fe8000000000000000000000000000ff"], 0x3c}}, 0x0) r6 = syz_usb_connect$uac2(0x1, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3ff, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0xffff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbb, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r6, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="00000000c38e6427000000ad"]}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x62, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x5, 0x3, 0xfa, 0x0, 0x9, 0x5}}, {0x4}}]}]}, 0x58}}, 0x0) syz_usb_ep_read(r6, 0x5b, 0x43, &(0x7f0000001000)=""/67) r10 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) lsetxattr$security_capability(&(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000021c0), &(0x7f0000002200)=@v1={0x1000000, [{0x5, 0xa}]}, 0xc, 0x2) r11 = syz_io_uring_setup(0x34b8, &(0x7f0000000d40)={0x0, 0xcf0b, 0x0, 0x2, 0x11}, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)=0x0, &(0x7f0000000e40)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000e80)=@IORING_OP_SEND_ZC={0x2f, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000f00)="af0f4d3f", 0x0, 0x27, 0x40c0004, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r11, 0x1, 0x1, 0x1, 0x0, 0x0) fsync(r8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000f40)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000f80)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6, 0xf, 0x100, 0x8000, 0x40000, r15}) syz_usb_control_io(r10, &(0x7f0000000740)={0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="20217600000076006b43d4146619076cacc0e3df2a1f99039d492c314d75bee53fb71dc87168abae2305e5581029b088ba371bff3c8bf46bb8d858564c913a0827e394b3a061863976483eae1e7ad19e3e45d3ecf727e8e4d6bb270ce331f0dd15d33f43b5f84949c3212e91a4ce7bc938483c9847a764fb298e5028"], &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x18, 0x32, 0xc, "9c8ba9ca", "1a749018"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x7, 0x9, 0xe5, 0x2, 0x2}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000780)={0x20, 0x15, 0xae, "139ebb7f99d574e7ca867198e38c69e49ff77d9a48ce057279beedfd8e91ee9166d4f19a8a7bb9a2407118b7a30454b04c53106830d47d844da8065f55d6d80e834d267e3151aaa92d2eac96579b96a680c9ee50cb9a467c98b1ddbbf35c323009ec2eb5b16b4bfe071f00ea0d9b5083bfccbece2ee83d7ccbf391e219b3be8bc7a1b55688992d00911c39a43b4dcbfb23b4b01f1c76c1d715cbf91b9e29db0961e2c433d5c62ff9ab95e73a5f94"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xcd}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x0, 0x0, [0xf000]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0xbc8}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "e51a"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000040)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @local}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, 'M\"'}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000000b40)={0x40, 0x1c, 0x1}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0) 2.445769112s ago: executing program 5 (id=6839): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x400, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x7}, {0xa, 0x7}, {0xd, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x48c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x8) connect$inet6(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000000480), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r5, 0x0, 0x4ffe2, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x10a, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x2, 0x8, @l2={'ib', 0x3a, 'dvmrp1\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2.443543777s ago: executing program 2 (id=6840): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000200)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="2703022b590200330011002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844120000080000000019b0fb0bba", 0x41}, {&(0x7f0000000380)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000440)="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", 0x1a1}, {&(0x7f0000000600)="6fe4dd9eeba3271dc700b581440284", 0x60a3}], 0x4}, 0x0) 2.33887118s ago: executing program 2 (id=6841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbff, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000280)) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xb7c8, 0xa8182) r3 = memfd_create(&(0x7f00000004c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x6, &(0x7f0000002b00)=[{&(0x7f0000002b40)="1800000072006bcd9e3fe3dc6e0800a6070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000002b80)="00112233445500aabbccddee080045000028000100004006f9d37f", 0x1b, 0x0, &(0x7f0000002bc0)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.663471074s ago: executing program 2 (id=6845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r2, 0x4, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)='%', 0x1a000}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe23}]) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0xc}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000000)=""/16, &(0x7f0000000040)=0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ttynull(0xffffff9c, &(0x7f0000005b00), 0x103840, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000005b40)='mountinfo\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000005b80)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000005bc0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000005c00)={0x0, 0x0, 0xf58b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x20000) timer_settime(0x0, 0x1, &(0x7f0000005c40)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000b2b000/0x4000)=nil, 0x4000, 0x100000b, 0x10, 0xffffffffffffffff, 0xb320a000) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x3c) syz_open_procfs(0x0, &(0x7f0000005c80)='net/rt_acct\x00') r7 = inotify_init1(0x0) read(r7, 0x0, 0x0) close(r7) openat(0xffffffffffffff9c, &(0x7f0000005cc0)='./file1\x00', 0x101042, 0x80) pipe2$watch_queue(&(0x7f0000005d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r8, r5, 0x0, 0x7ffffffd) 1.522793521s ago: executing program 1 (id=6847): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4, 0x56}]}}}}}}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=ANY=[@ANYBLOB="021008060025bd7000fddbdf251d50cbcedfd6f1cd5e46189bc5bb58dbcd026a65ff000000d1de9435b7554d73e3b9221fd89dfefea7c5e988a66b44dd5b47c8470a831d5e105f3243d5e06cf25c308496c70ea7e9a589e8df6a096ba8e5c5d74dee2a7de63f70add09e95f8f773f493225717f865fd9943e36e87221fc718b618ba126272f7889c519c71e1e52eb60c5a3b1d4dfd892a2ec69a1548c0c3a3f0a19db1c9bf6f236f46b7d5578eb28b4d63fe108a1e9ec53dbbdae084520b2e11929c20674337c3c5acbe93673321fb0684738554e821126e354c62a7512b9e41ee9e092f43"], 0x10}}, 0x0) sendmsg$rds(r1, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0xc363ac0399f6d33e, 0x2000, 0x1, 0x2, 0x1, 0x1}, 0x10) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x18, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f00000003c0)={0x0, 0x17, 0x5b, "f20839faee5d4b1999d8a8dff0a6bbfbfa70e422ea12b5bcfb1dd8aa4cb0258ca71a0b4a272ca6c362987921757bbc0b579dfe9e0d7c37329f60428c1ab60b1a4cf761fb5c48a5fe255c4d76e099a6ec964002b313f2403f4f2d68"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7a}, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x1}}) 875.692625ms ago: executing program 1 (id=6848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0xeb}}}, 0x118) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000200)={0xb7e2, 0x252, "bc9ab73a2fbcae42db986ee6aef2dde082c6074f87d021a84237e6c4020fd542", 0x9, 0x8d4, 0x98}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300240000102400000008000240000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 803.041237ms ago: executing program 1 (id=6849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000006000000000000000000aaff02000000000000000000000000000106", @ANYRES8], 0xffe) 640.577302ms ago: executing program 2 (id=6850): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400282, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) fcntl$getown(r0, 0x9) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x5]}, 0x8, 0x800) io_setup(0x2, &(0x7f00000002c0)=0x0) r5 = openat$mice(0xffffff9c, &(0x7f0000000300), 0x400000) r6 = openat$sw_sync_info(0xffffff9c, &(0x7f00000016c0), 0x101900, 0x0) io_submit(r4, 0x4, &(0x7f0000001740)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x9, r5, &(0x7f0000000400)="c7117b8adaa7493451c4b3253aa89001514f726bc9262511c4c52fe812c24a4aaa4f6dca83132a4a30b4bb319cd4df61db32306d0aef59ae00f4371cc8159eec3d7e820157be60214e4fb036037abc4c7f6d175c403c4ea74e583c93ca005663f0c1381ccb2874942bdd7caec8994ae42df5aa6436f5c216be93e95278039db18484a0b6337ca6b3d5a2a703ad919bedeef5bc27fbb094d07f418fc24fb3403e844752081a5b3b3d1366bd093b8dd8f9645e4493c11076573c604492798e37514f46871691dd8dc787f80d8c28fe086cb4acd479a2b86bcb560749a970414f616f50865823fa53102b228ea55223d2450c828457baada00be11935a231058c", 0xff, 0x2, 0x0, 0x1, r3}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x2800, r1, &(0x7f0000003800)="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", 0x106d, 0x8000000000000000, 0x0, 0x1, r5}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000001580)="7f03e1cca596178ce546ceba6f5638a0c04bdb4dde222ff337ad", 0x1a, 0x0, 0x0, 0x0, r5}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x7f, r5, &(0x7f0000001600)="f7bd83b11547e43c0a0758898f4ca16e56c7797fdc35d55b16b3d56c6ace59f107b2fa6450223500266623a4a8cf2b71cfc77df782def8178fea60cbc484022cbd12132be7b67deacf375c1646597496d935942660a41bd3179dfdd1f6d0f07577e756104c45a13d32acc082a6098e8891f650d7e164815424db65c3361c422b43a453bfa2a6fffaef31797d8e3d0c796ff8b31d31debf29568a7a02dd89437853eae5dc82f0d4a4c3965faee4d31d6289e5", 0xb2, 0x9, 0x0, 0x2, r6}]) r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f0000000380)={0x28, 0xfffffff7}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xfffffe99) fcntl$notify(r2, 0x402, 0x30) close(r2) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="2f030000000000000004"], 0x28) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f00000000c0)={0x8, 0xcf}) r8 = fsopen(&(0x7f0000000340)='tracefs\x00', 0x1) r9 = fcntl$dupfd(r8, 0x0, r8) creat(&(0x7f0000000640)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES8, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000048c0)={0x2020}, 0xfffffffffffffe9c) open(&(0x7f00000037c0)='./file0\x00', 0x109281, 0x0) r11 = fsopen(&(0x7f0000004880)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x0, 0x0) 491.393895ms ago: executing program 1 (id=6851): move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000340), 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0xd) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x6, 0xd) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) ustat(0x0, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000006c0)={0x4, @raw_data="b9389c544c3e9891768b3b1633dd7e9d1c9d544e20539f15eb227a1d4d7754026dff01e7b23c361c79bf4d7a353f9fb18b2fb2ff231c2b0d20cb0bd9bd37241693fb621903dea90ad91b01c52ccf21840f85855a543801c83bfe8a75a27a808a9dc5eb3115b4e1dcea5297b422a94a6e116ac9734fbc80ee7188e48a9e405c48ac1da6a9771f3013f1482f57100716415f5bbef214b76feca943bd90e860167dea53f4cda002fae20035b6ffae18abb53eaa193cd1c0222d53ddcf0111cc9ee83e397b6afaacc9ae"}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd70000000000004000000040012000c0009800800ae00", @ANYRES32=r0, @ANYBLOB="26cd70681bf4e475a175d933d1a377e36c9e528998a4b16744c2ff849502ff0e2b8b9e970fc42c6cc95c170eb9210ad701c47f324c659294ba967a3cc56af6d7da85c8d0ba041be606e7a1c75d4f3e8b0fba088e6d5e5393f3c74fa4227d37588b3a6ab2a23eb1a452575845e4edb0ef5bbca84979b45a13a6c0a5492ca7a51ace12fa977bc5c2c7902a9624a93ab0cdb13da8ffffffff5dcbb88d6bf5bf589eabb92d488e25b4445bad965891174c0cf11a21f12250f243f73689022b"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4084) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x861}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c824}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x33, 0x4}, 0x20) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@proc={0x10, 0x0, 0x25dfdbf8, 0x2}, 0xa00, 0x0, 0x0, 0x0, 0x204, 0x0, 0x2}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x84, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x7}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x40) 232.384215ms ago: executing program 3 (id=6852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x400, 0x4, 0x1b, 0xfe}, {0x9, 0x5, 0x8, 0x2, 0x10, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) 167.506931ms ago: executing program 2 (id=6853): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_async', 0xc2103, 0x20) lseek(r0, 0x0, 0x3) r1 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b00010000000009049c000201035100090503130000fdffff06254c760000020905"], 0x0) syz_usb_ep_write(r1, 0x1c, 0x91, &(0x7f0000000000)="7de41b609801c086b7d49cc7286eeee681c08d303af7315c0d87d37d756bc37215f173eec9ef736d74bf62e30a3ad8287f8a1ae4c42d42989e145a0fa50bf344d29f0dfb31150350bc5991b158d909009453d7dfd32b43525c501591a4eddcb07be201e69896eedb32659e14702b537997ce94ae37db7452e876c3ed7efa9be305b18f391bf6c36e80036eb7b77d7a6299") 38.934319ms ago: executing program 1 (id=6854): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000300)=""/4100, &(0x7f0000001340)=0x1004) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000200)=0x10000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r3 = syz_ublk_setup_io_uring(0x2261, &(0x7f00000000c0)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r4, r5, &(0x7f0000001380)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001400), 0x1, 0x40, 0x1}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, 0x0, 0x1) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000001600)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001680)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001780)="db", 0x1}], 0x1}, 0x41) recvmsg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r9, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r8, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x61) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0xfff5, &(0x7f0000000080)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendto$packet(r1, &(0x7f0000000140)="330320000a00140000007ef52f555f2a0c090000000088a800f786dd372ef780af7042195e00000045c3", 0xfffffffffffffe4e, 0x4000800, &(0x7f00000002c0)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @broadcast}, 0x14) 0s ago: executing program 1 (id=6855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbff, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000280)) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xb7c8, 0xa8182) r3 = memfd_create(&(0x7f00000004c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x6, &(0x7f0000002b00)=[{&(0x7f0000002b40)="1800000072006bcd9e3fe3dc6e0800a6070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000002b80)="00112233445500aabbccddee080045000028000100004006f9d37f", 0x1b, 0x0, &(0x7f0000002bc0)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) kernel console output (not intermixed with test programs): rocess `syz.4.6339'. [ 1364.470837][T10314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.470877][T10314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1364.603934][ T5625] Bluetooth: hci3: command tx timeout [ 1365.298445][T27111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.298543][T27111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.298655][T27111] bridge_slave_0: entered allmulticast mode [ 1365.300064][T27111] bridge_slave_0: entered promiscuous mode [ 1365.302308][T27111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.302403][T27111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.302525][T27111] bridge_slave_1: entered allmulticast mode [ 1365.304079][T27111] bridge_slave_1: entered promiscuous mode [ 1365.438569][T27111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.489067][T27111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.571326][T27111] team0: Port device team_slave_0 added [ 1365.574123][T27111] team0: Port device team_slave_1 added [ 1365.640730][T27111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.640749][T27111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.640775][T27111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.642622][T27111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.642643][T27111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.642669][T27111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.718104][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1365.718161][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.749440][T27111] hsr_slave_0: entered promiscuous mode [ 1365.750377][T27111] hsr_slave_1: entered promiscuous mode [ 1365.751028][T27111] debugfs: 'hsr0' already exists in 'hsr' [ 1365.751047][T27111] Cannot create hsr debugfs directory [ 1366.626927][ T5625] Bluetooth: hci3: command tx timeout [ 1367.047324][T10314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.047349][T10314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1367.063078][T27135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6343'. [ 1367.621686][T10314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.621724][T10314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1368.339570][T10314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.339608][T10314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1368.417762][T21167] usb 4-1: USB disconnect, device number 109 [ 1368.643335][T27149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.677127][T27149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.678741][T27149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.679031][T27149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.744629][ T5625] Bluetooth: hci3: command tx timeout [ 1368.796298][T27151] team0: entered promiscuous mode [ 1368.796331][T27151] team_slave_0: entered promiscuous mode [ 1368.796529][T27151] team_slave_1: entered promiscuous mode [ 1368.796693][T27151] team0: entered allmulticast mode [ 1368.796707][T27151] team_slave_0: entered allmulticast mode [ 1368.796718][T27151] team_slave_1: entered allmulticast mode [ 1368.880350][T27151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6348'. [ 1368.880373][T27151] openvswitch: netlink: Flow actions attr not present in new flow. [ 1369.186978][T27155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6350'. [ 1369.188952][T27155] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6350'. [ 1369.399312][T10314] pimreg: left allmulticast mode [ 1369.827447][T27168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6352'. [ 1370.552398][T10314] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1370.727643][T10314] bond0 (unregistering): Released all slaves [ 1370.734911][T10314] bond1 (unregistering): Released all slaves [ 1370.754553][T10314] bond2 (unregistering): Released all slaves [ 1370.812348][ T5625] Bluetooth: hci3: command tx timeout [ 1370.967241][T27163] netlink: 'syz.3.6349': attribute type 1 has an invalid length. [ 1371.082850][T27183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6349'. [ 1371.207932][T27188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6349'. [ 1371.305367][T27183] bond1: entered allmulticast mode [ 1371.480313][T27184] bond1: (slave bridge3): making interface the new active one [ 1371.480339][T27184] bridge3: entered allmulticast mode [ 1371.565489][T27184] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 1371.565823][T10314] tipc: Disabling bearer [ 1371.601436][T10314] tipc: Disabling bearer [ 1371.601552][T10314] tipc: Left network mode [ 1371.763268][T27185] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 1371.798232][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1371.904187][T27199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6354'. [ 1371.952614][T10314] IPVS: stopping backup sync thread 18944 ... [ 1373.001539][T27224] netlink: 'syz.2.6359': attribute type 9 has an invalid length. [ 1374.033365][T27218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6357'. [ 1374.179929][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1374.179949][ T30] audit: type=1326 audit(1792063710.344:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27215 comm="syz.3.6357" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742f0ec code=0x7ffc0000 [ 1374.261135][ T30] audit: type=1326 audit(1792063710.394:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27215 comm="syz.3.6357" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742f0ec code=0x7ffc0000 [ 1374.327715][ T30] audit: type=1326 audit(1792063710.474:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27215 comm="syz.3.6357" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf742f0ec code=0x7ffc0000 [ 1374.327767][ T30] audit: type=1326 audit(1792063710.474:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27215 comm="syz.3.6357" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742f0ec code=0x7ffc0000 [ 1374.327809][ T30] audit: type=1326 audit(1792063710.474:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27215 comm="syz.3.6357" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742f0ec code=0x7ffc0000 [ 1374.331569][ T30] audit: type=1326 audit(1792063710.494:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27215 comm="syz.3.6357" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742f0ec code=0x7ffc0000 [ 1374.331613][ T30] audit: type=1326 audit(1792063710.494:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27215 comm="syz.3.6357" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742f0ec code=0x7ffc0000 [ 1374.331660][ T30] audit: type=1326 audit(1792063710.494:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27215 comm="syz.3.6357" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742f0ec code=0x7ffc0000 [ 1374.331694][ T30] audit: type=1326 audit(1792063710.494:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27215 comm="syz.3.6357" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742f0ec code=0x7ffc0000 [ 1374.331717][ T30] audit: type=1326 audit(1792063710.494:10060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27215 comm="syz.3.6357" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742f0ec code=0x7ffc0000 [ 1374.909137][ T4984] Dev loop8: unable to read RDB block 1 [ 1374.909167][ T4984] loop8: unable to read partition table [ 1374.909338][ T4984] loop8: partition table beyond EOD, truncated [ 1375.299526][T27248] input: syz1 as /devices/virtual/input/input161 [ 1375.336110][T27250] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6362'. [ 1376.178322][T10314] hsr_slave_0: left promiscuous mode [ 1376.270005][T10314] hsr_slave_1: left promiscuous mode [ 1376.272417][T10314] veth1_vlan: left promiscuous mode [ 1376.272531][T10314] veth0_vlan: left promiscuous mode [ 1378.313557][T27111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1378.388572][T27111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1378.393197][T27111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1378.652531][T27314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6372'. [ 1378.752502][T27111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1378.814173][T27111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1378.834176][T27111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1378.834827][T27111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1378.875931][T27111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1379.329666][T27111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.421006][T27111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.452301][ T9505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.452421][ T9505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.509555][ T9624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.509626][ T9624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.551341][ T4984] Dev loop8: unable to read RDB block 1 [ 1379.551382][ T4984] loop8: unable to read partition table [ 1379.551646][ T4984] loop8: partition table beyond EOD, truncated [ 1379.959010][T27007] syz.3.6306 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1379.959054][T27007] CPU: 0 UID: 0 PID: 27007 Comm: syz.3.6306 Tainted: G L syzkaller #0 PREEMPT(full) [ 1379.959081][T27007] Tainted: [L]=SOFTLOCKUP [ 1379.959089][T27007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1379.959100][T27007] Call Trace: [ 1379.959110][T27007] [ 1379.959120][T27007] dump_stack_lvl+0xe8/0x150 [ 1379.959162][T27007] dump_header+0xd3/0x4b0 [ 1379.959194][T27007] oom_kill_process+0x3ab/0x9e0 [ 1379.959230][T27007] out_of_memory+0x1064/0x1480 [ 1379.959265][T27007] ? try_charge_memcg+0xc32/0x15e0 [ 1379.959307][T27007] ? __pfx_out_of_memory+0x10/0x10 [ 1379.959332][T27007] ? do_raw_spin_unlock+0xf5/0x200 [ 1379.959372][T27007] try_charge_memcg+0xcdf/0x15e0 [ 1379.959420][T27007] ? __pfx_try_charge_memcg+0x10/0x10 [ 1379.959468][T27007] ? charge_memcg+0x47/0x310 [ 1379.959498][T27007] charge_memcg+0x1dd/0x310 [ 1379.959528][T27007] __mem_cgroup_charge+0x25/0x80 [ 1379.959556][T27007] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 1379.959596][T27007] ? filemap_get_entry+0xcd/0x3f0 [ 1379.959636][T27007] ? __pfx_filemap_get_entry+0x10/0x10 [ 1379.959665][T27007] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1379.959700][T27007] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 1379.959730][T27007] shmem_get_folio_gfp+0x5da/0x16d0 [ 1379.959774][T27007] shmem_write_begin+0x16c/0x330 [ 1379.959812][T27007] generic_perform_write+0x2d5/0x8f0 [ 1379.959845][T27007] ? __pfx_generic_perform_write+0x10/0x10 [ 1379.959865][T27007] ? __mark_inode_dirty+0x4e7/0x13b0 [ 1379.959893][T27007] ? mnt_put_write_access_file+0xc3/0x100 [ 1379.959924][T27007] ? file_update_time_flags+0x3ab/0x440 [ 1379.959949][T27007] shmem_file_write_iter+0xf8/0x120 [ 1379.959978][T27007] __kernel_write_iter+0x44a/0x8f0 [ 1379.960005][T27007] ? __pfx___kernel_write_iter+0x10/0x10 [ 1379.960025][T27007] ? get_dump_page+0x1e6/0x410 [ 1379.960065][T27007] ? __asan_memset+0x22/0x50 [ 1379.960083][T27007] ? iov_iter_bvec+0xb8/0x180 [ 1379.960102][T27007] dump_user_range+0xc19/0x12c0 [ 1379.960148][T27007] ? __pfx_dump_user_range+0x10/0x10 [ 1379.960184][T27007] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 1379.960220][T27007] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 1379.960245][T27007] elf_core_dump+0x387b/0x4050 [ 1379.960280][T27007] ? __pfx_elf_core_dump+0x10/0x10 [ 1379.960307][T27007] ? coredump_write+0x394/0x1960 [ 1379.960341][T27007] ? irqentry_exit+0x218/0x920 [ 1379.960363][T27007] ? lockdep_hardirqs_on+0x7b/0x110 [ 1379.960375][T27007] ? irqentry_exit+0x218/0x920 [ 1379.960387][T27007] ? mas_ascend+0x2f9/0x8b0 [ 1379.960404][T27007] ? __lock_acquire+0x747/0x2de0 [ 1379.960439][T27007] ? lock_acquire+0x115/0x350 [ 1379.960479][T27007] coredump_write+0x1290/0x1960 [ 1379.960517][T27007] ? __pfx_coredump_write+0x10/0x10 [ 1379.960543][T27007] ? unshare_files+0xab/0x140 [ 1379.960570][T27007] vfs_coredump+0x3764/0x4520 [ 1379.960619][T27007] ? __pfx_vfs_coredump+0x10/0x10 [ 1379.960648][T27007] ? is_bpf_text_address+0x26/0x2b0 [ 1379.960672][T27007] ? __lock_acquire+0x747/0x2de0 [ 1379.960688][T27007] ? __lock_acquire+0x747/0x2de0 [ 1379.960707][T27007] ? lock_acquire+0x115/0x350 [ 1379.960726][T27007] ? lock_acquire+0x115/0x350 [ 1379.960757][T27007] ? is_bpf_text_address+0x26/0x2b0 [ 1379.960789][T27007] ? is_bpf_text_address+0x292/0x2b0 [ 1379.960813][T27007] ? is_bpf_text_address+0x26/0x2b0 [ 1379.960830][T27007] ? kernel_text_address+0xa5/0xe0 [ 1379.960844][T27007] ? __kernel_text_address+0xd/0x30 [ 1379.960856][T27007] ? unwind_get_return_address+0x4d/0x90 [ 1379.960947][T27007] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1379.960971][T27007] ? arch_stack_walk+0xfb/0x150 [ 1379.960990][T27007] ? stack_trace_save+0xa9/0x100 [ 1379.961001][T27007] ? __pfx_stack_trace_save+0x10/0x10 [ 1379.961013][T27007] ? stack_depot_save_flags+0x33/0x7f0 [ 1379.961031][T27007] ? __lock_acquire+0x660/0x2de0 [ 1379.961058][T27007] ? kasan_save_track+0x4f/0x80 [ 1379.961086][T27007] ? kasan_save_track+0x3e/0x80 [ 1379.961108][T27007] ? kasan_save_free_info+0x40/0x50 [ 1379.961123][T27007] ? __kasan_slab_free+0x5c/0x80 [ 1379.961135][T27007] ? kmem_cache_free+0x182/0x650 [ 1379.961148][T27007] ? get_signal+0x9e7/0x12c0 [ 1379.961161][T27007] ? arch_do_signal_or_restart+0xbb/0x860 [ 1379.961195][T27007] ? irqentry_exit+0x2c0/0x920 [ 1379.961216][T27007] ? asm_exc_page_fault+0x26/0x30 [ 1379.961277][T27007] ? proc_coredump_connector+0x187/0x4e0 [ 1379.961387][T27007] ? _raw_spin_unlock_irq+0x29/0x50 [ 1379.961411][T27007] get_signal+0x1094/0x12c0 [ 1379.961443][T27007] arch_do_signal_or_restart+0xbb/0x860 [ 1379.961461][T27007] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1379.961493][T27007] irqentry_exit+0x2c0/0x920 [ 1379.961515][T27007] ? trace_irq_disable+0x3b/0x140 [ 1379.961544][T27007] asm_exc_page_fault+0x26/0x30 [ 1379.961563][T27007] RIP: 0023:0x0 [ 1379.961581][T27007] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1379.961598][T27007] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 1379.961617][T27007] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1379.961630][T27007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1379.961641][T27007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1379.961652][T27007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1379.961665][T27007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1379.961696][T27007] [ 1379.965141][T27007] memory: usage 307200kB, limit 307200kB, failcnt 20020 [ 1379.965161][T27007] memory+swap: usage 432072kB, limit 9007199254740988kB, failcnt 0 [ 1379.965174][T27007] kmem: usage 6388kB, limit 9007199254740988kB, failcnt 0 [ 1379.965185][T27007] Memory cgroup stats for /syz3: [ 1380.002473][T27007] cache 307609600 [ 1380.002487][T27007] rss 401408 [ 1380.002494][T27007] rss_huge 0 [ 1380.002501][T27007] shmem 307605504 [ 1380.002509][T27007] mapped_file 0 [ 1380.002518][T27007] dirty 0 [ 1380.002525][T27007] writeback 0 [ 1380.002532][T27007] workingset_refault_anon 408 [ 1380.002540][T27007] workingset_refault_file 6684 [ 1380.002548][T27007] swap 127868928 [ 1380.002556][T27007] swapcached 130457600 [ 1380.002564][T27007] pgpgin 744854 [ 1380.002571][T27007] pgpgout 674766 [ 1380.002580][T27007] pgfault 462205 [ 1380.002587][T27007] pgmajfault 2395 [ 1380.002595][T27007] inactive_anon 214134784 [ 1380.002603][T27007] active_anon 93892608 [ 1380.002611][T27007] inactive_file 0 [ 1380.002618][T27007] active_file 0 [ 1380.002626][T27007] unevictable 0 [ 1380.002633][T27007] hierarchical_memory_limit 314572800 [ 1380.002642][T27007] hierarchical_memsw_limit 9223372036854771712 [ 1380.002651][T27007] total_cache 307609600 [ 1380.002658][T27007] total_rss 401408 [ 1380.002666][T27007] total_rss_huge 0 [ 1380.002674][T27007] total_shmem 307605504 [ 1380.002682][T27007] total_mapped_file 0 [ 1380.002689][T27007] total_dirty 0 [ 1380.002698][T27007] total_writeback 0 [ 1380.002706][T27007] total_workingset_refault_anon 409 [ 1380.002714][T27007] total_workingset_refault_file 6684 [ 1380.002722][T27007] total_swap 127868928 [ 1380.002730][T27007] total_swapcached 130465792 [ 1380.002737][T27007] total_pgpgin 747576 [ 1380.002744][T27007] total_pgpgout 677488 [ 1380.002752][T27007] total_pgfault 464941 [ 1380.002760][T27007] total_pgmajfault 2396 [ 1380.002768][T27007] total_inactive_anon 214134784 [ 1380.002776][T27007] total_active_anon 93892608 [ 1380.002784][T27007] total_inactive_file 0 [ 1380.002792][T27007] total_active_file 0 [ 1380.002800][T27007] total_unevictable 0 [ 1380.002808][T27007] anon_cost 0 [ 1380.002816][T27007] file_cost 0 [ 1380.002824][T27007] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6306,pid=27016,uid=0 [ 1380.003788][T27007] Memory cgroup out of memory: Killed process 27016 (syz.3.6306) total-vm:98592kB, anon-rss:1164kB, file-rss:54580kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 1380.252456][T27341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.253582][T27341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.487975][T27111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.016518][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1381.024534][T27111] veth0_vlan: entered promiscuous mode [ 1381.073702][T27111] veth1_vlan: entered promiscuous mode [ 1381.079917][T27306] syz.3.6371 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 1381.079954][T27306] CPU: 0 UID: 0 PID: 27306 Comm: syz.3.6371 Tainted: G L syzkaller #0 PREEMPT(full) [ 1381.079970][T27306] Tainted: [L]=SOFTLOCKUP [ 1381.079974][T27306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1381.079981][T27306] Call Trace: [ 1381.079987][T27306] [ 1381.079994][T27306] dump_stack_lvl+0xe8/0x150 [ 1381.080026][T27306] dump_header+0xd3/0x4b0 [ 1381.080055][T27306] oom_kill_process+0x3ab/0x9e0 [ 1381.080097][T27306] out_of_memory+0x1064/0x1480 [ 1381.080121][T27306] ? try_charge_memcg+0xc32/0x15e0 [ 1381.080147][T27306] ? __pfx_out_of_memory+0x10/0x10 [ 1381.080166][T27306] ? do_raw_spin_unlock+0xf5/0x200 [ 1381.080207][T27306] try_charge_memcg+0xcdf/0x15e0 [ 1381.080252][T27306] ? __pfx_try_charge_memcg+0x10/0x10 [ 1381.080270][T27306] ? percpu_ref_tryget+0x15/0x180 [ 1381.080294][T27306] ? __obj_cgroup_charge+0x36/0x2c0 [ 1381.080311][T27306] __obj_cgroup_charge+0x1fd/0x2c0 [ 1381.080335][T27306] ? __obj_cgroup_charge+0x36/0x2c0 [ 1381.080363][T27306] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 1381.080402][T27306] ? alloc_buffer_head+0x2a/0x280 [ 1381.080434][T27306] kmem_cache_alloc_noprof+0x367/0x600 [ 1381.080447][T27306] ? alloc_buffer_head+0x2a/0x280 [ 1381.080463][T27306] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1381.080485][T27306] ? alloc_buffer_head+0x2a/0x280 [ 1381.080518][T27306] alloc_buffer_head+0x2a/0x280 [ 1381.080543][T27306] ? folio_alloc_buffers+0x186/0x630 [ 1381.080562][T27306] folio_alloc_buffers+0x1a4/0x630 [ 1381.080580][T27306] create_empty_buffers+0x3a/0x520 [ 1381.080598][T27306] __block_write_begin_int+0x3b6/0x1900 [ 1381.080625][T27306] ? __mark_inode_dirty+0x705/0x13b0 [ 1381.080659][T27306] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1381.080755][T27306] ? __pfx___block_write_begin_int+0x10/0x10 [ 1381.080799][T27306] block_page_mkwrite+0x309/0x3a0 [ 1381.080828][T27306] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1381.080857][T27306] ext4_page_mkwrite+0xcf4/0x1140 [ 1381.080876][T27306] ? __pfx_filemap_fault+0x10/0x10 [ 1381.080894][T27306] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1381.080914][T27306] do_page_mkwrite+0x147/0x310 [ 1381.080948][T27306] do_pte_missing+0x757/0x34b0 [ 1381.080984][T27306] ? handle_mm_fault+0xf1/0x3750 [ 1381.081012][T27306] handle_mm_fault+0x1a53/0x3750 [ 1381.081034][T27306] ? handle_mm_fault+0xf1/0x3750 [ 1381.081056][T27306] ? __pfx_handle_mm_fault+0x10/0x10 [ 1381.081102][T27306] ? lock_mm_and_find_vma+0xa7/0x340 [ 1381.081128][T27306] do_user_addr_fault+0x746/0x1340 [ 1381.081160][T27306] exc_page_fault+0x6a/0xc0 [ 1381.081175][T27306] asm_exc_page_fault+0x26/0x30 [ 1381.081186][T27306] RIP: 0023:0xf708fd00 [ 1381.081199][T27306] Code: f0 83 c7 01 83 eb 08 e8 6e 98 fe ff 8b 46 20 8b 4e 18 8d 50 f8 83 c1 08 89 56 20 8b 54 24 10 89 4e 18 89 4c 24 0c 8b 4c 24 14 <89> 50 f8 89 48 fc 8b 44 24 18 39 c7 73 7a 8b 45 24 99 03 03 13 53 [ 1381.081210][T27306] RSP: 002b:00000000f757fa30 EFLAGS: 00010202 [ 1381.081226][T27306] RAX: 0000000034423000 RBX: 00000000f6c4f240 RCX: 00000000ffffffff [ 1381.081241][T27306] RDX: 00000000818e653d RSI: 00000000f7f85610 RDI: 00000000000000d6 [ 1381.081255][T27306] RBP: 00000000f7454fe8 R08: 0000000000000000 R09: 0000000000000000 [ 1381.081267][T27306] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1381.081279][T27306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1381.081307][T27306] [ 1381.081313][T27306] memory: usage 307200kB, limit 307200kB, failcnt 20275 [ 1381.081320][T27306] memory+swap: usage 432072kB, limit 9007199254740988kB, failcnt 0 [ 1381.081328][T27306] kmem: usage 6388kB, limit 9007199254740988kB, failcnt 0 [ 1381.081334][T27306] Memory cgroup stats for /syz3: [ 1381.081484][T27306] cache 307609600 [ 1381.081490][T27306] rss 401408 [ 1381.081494][T27306] rss_huge 0 [ 1381.081498][T27306] shmem 307605504 [ 1381.081501][T27306] mapped_file 0 [ 1381.081505][T27306] dirty 0 [ 1381.081509][T27306] writeback 0 [ 1381.081513][T27306] workingset_refault_anon 408 [ 1381.081521][T27306] workingset_refault_file 6684 [ 1381.081529][T27306] swap 127868928 [ 1381.081536][T27306] swapcached 130457600 [ 1381.081544][T27306] pgpgin 744854 [ 1381.081551][T27306] pgpgout 674766 [ 1381.081559][T27306] pgfault 462205 [ 1381.081566][T27306] pgmajfault 2395 [ 1381.081573][T27306] inactive_anon 93892608 [ 1381.081581][T27306] active_anon 214134784 [ 1381.081589][T27306] inactive_file 0 [ 1381.081597][T27306] active_file 4096 [ 1381.081604][T27306] unevictable 0 [ 1381.081609][T27306] hierarchical_memory_limit 314572800 [ 1381.081613][T27306] hierarchical_memsw_limit 9223372036854771712 [ 1381.081618][T27306] total_cache 307609600 [ 1381.081622][T27306] total_rss 401408 [ 1381.081626][T27306] total_rss_huge 0 [ 1381.081630][T27306] total_shmem 307605504 [ 1381.081634][T27306] total_mapped_file 0 [ 1381.081638][T27306] total_dirty 0 [ 1381.081641][T27306] total_writeback 0 [ 1381.081645][T27306] total_workingset_refault_anon 409 [ 1381.081650][T27306] total_workingset_refault_file 6684 [ 1381.081654][T27306] total_swap 127868928 [ 1381.081658][T27306] total_swapcached 130465792 [ 1381.081662][T27306] total_pgpgin 747576 [ 1381.081667][T27306] total_pgpgout 677488 [ 1381.081674][T27306] total_pgfault 464941 [ 1381.081682][T27306] total_pgmajfault 2396 [ 1381.081690][T27306] total_inactive_anon 93892608 [ 1381.081698][T27306] total_active_anon 214134784 [ 1381.081706][T27306] total_inactive_file 0 [ 1381.081714][T27306] total_active_file 4096 [ 1381.081721][T27306] total_unevictable 0 [ 1381.081729][T27306] anon_cost 0 [ 1381.081736][T27306] file_cost 0 [ 1381.081744][T27306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6306,pid=27026,uid=0 [ 1381.082309][T27306] Memory cgroup out of memory: Killed process 27026 (syz.3.6306) total-vm:98724kB, anon-rss:1232kB, file-rss:51804kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 1381.173871][T27111] veth0_macvtap: entered promiscuous mode [ 1381.333143][T27111] veth1_macvtap: entered promiscuous mode [ 1381.346217][T27111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1381.464489][T27111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1381.630644][T27011] syz.3.6306 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1381.630681][T27011] CPU: 0 UID: 0 PID: 27011 Comm: syz.3.6306 Tainted: G L syzkaller #0 PREEMPT(full) [ 1381.630707][T27011] Tainted: [L]=SOFTLOCKUP [ 1381.630715][T27011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1381.630732][T27011] Call Trace: [ 1381.630741][T27011] [ 1381.630750][T27011] dump_stack_lvl+0xe8/0x150 [ 1381.630782][T27011] dump_header+0xd3/0x4b0 [ 1381.630810][T27011] oom_kill_process+0x3ab/0x9e0 [ 1381.630841][T27011] out_of_memory+0x1064/0x1480 [ 1381.630866][T27011] ? try_charge_memcg+0xc32/0x15e0 [ 1381.630906][T27011] ? __pfx_out_of_memory+0x10/0x10 [ 1381.630930][T27011] ? do_raw_spin_unlock+0xf5/0x200 [ 1381.630970][T27011] try_charge_memcg+0xcdf/0x15e0 [ 1381.631016][T27011] ? __pfx_try_charge_memcg+0x10/0x10 [ 1381.631062][T27011] ? charge_memcg+0x47/0x310 [ 1381.631091][T27011] charge_memcg+0x1dd/0x310 [ 1381.631121][T27011] __mem_cgroup_charge+0x25/0x80 [ 1381.631147][T27011] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 1381.631175][T27011] ? filemap_get_entry+0xcd/0x3f0 [ 1381.631211][T27011] ? __pfx_filemap_get_entry+0x10/0x10 [ 1381.631238][T27011] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1381.631273][T27011] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 1381.631306][T27011] shmem_get_folio_gfp+0x5da/0x16d0 [ 1381.631353][T27011] shmem_write_begin+0x16c/0x330 [ 1381.631390][T27011] generic_perform_write+0x2d5/0x8f0 [ 1381.631425][T27011] ? __pfx_generic_perform_write+0x10/0x10 [ 1381.631444][T27011] ? down_write+0x16b/0x200 [ 1381.631469][T27011] ? generic_write_checks_count+0x41a/0x520 [ 1381.631503][T27011] ? file_update_time_flags+0x2d5/0x440 [ 1381.631531][T27011] shmem_file_write_iter+0xf8/0x120 [ 1381.631563][T27011] __kernel_write_iter+0x44a/0x8f0 [ 1381.631592][T27011] ? __pfx___kernel_write_iter+0x10/0x10 [ 1381.631611][T27011] ? get_dump_page+0x1e6/0x410 [ 1381.631641][T27011] ? __asan_memset+0x22/0x50 [ 1381.631664][T27011] ? iov_iter_bvec+0xb8/0x180 [ 1381.631695][T27011] dump_user_range+0xc19/0x12c0 [ 1381.631746][T27011] ? __pfx_dump_user_range+0x10/0x10 [ 1381.631780][T27011] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 1381.631805][T27011] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 1381.631829][T27011] ? elf_core_dump+0x2ccb/0x4050 [ 1381.631864][T27011] elf_core_dump+0x387b/0x4050 [ 1381.631913][T27011] ? __pfx_elf_core_dump+0x10/0x10 [ 1381.631940][T27011] ? coredump_write+0x394/0x1960 [ 1381.631966][T27011] ? irqentry_exit+0x2c0/0x920 [ 1381.631987][T27011] ? asm_exc_page_fault+0x26/0x30 [ 1381.632018][T27011] ? mas_ascend+0x2f9/0x8b0 [ 1381.632051][T27011] ? __lock_acquire+0x747/0x2de0 [ 1381.632101][T27011] ? lock_acquire+0x115/0x350 [ 1381.632141][T27011] coredump_write+0x1290/0x1960 [ 1381.632186][T27011] ? __pfx_coredump_write+0x10/0x10 [ 1381.632233][T27011] ? unshare_files+0xab/0x140 [ 1381.632264][T27011] vfs_coredump+0x3764/0x4520 [ 1381.632311][T27011] ? __pfx_vfs_coredump+0x10/0x10 [ 1381.632337][T27011] ? is_bpf_text_address+0x26/0x2b0 [ 1381.632369][T27011] ? __lock_acquire+0x747/0x2de0 [ 1381.632399][T27011] ? __lock_acquire+0x747/0x2de0 [ 1381.632436][T27011] ? lock_acquire+0x115/0x350 [ 1381.632463][T27011] ? lock_acquire+0x115/0x350 [ 1381.632494][T27011] ? is_bpf_text_address+0x26/0x2b0 [ 1381.632524][T27011] ? is_bpf_text_address+0x292/0x2b0 [ 1381.632548][T27011] ? is_bpf_text_address+0x26/0x2b0 [ 1381.632577][T27011] ? kernel_text_address+0xa5/0xe0 [ 1381.632601][T27011] ? __kernel_text_address+0xd/0x30 [ 1381.632622][T27011] ? unwind_get_return_address+0x4d/0x90 [ 1381.632646][T27011] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1381.632667][T27011] ? arch_stack_walk+0xfb/0x150 [ 1381.632703][T27011] ? stack_trace_save+0xa9/0x100 [ 1381.632731][T27011] ? __pfx_stack_trace_save+0x10/0x10 [ 1381.632754][T27011] ? stack_depot_save_flags+0x33/0x7f0 [ 1381.632781][T27011] ? __lock_acquire+0x660/0x2de0 [ 1381.632807][T27011] ? kasan_save_track+0x4f/0x80 [ 1381.632829][T27011] ? kasan_save_track+0x3e/0x80 [ 1381.632850][T27011] ? kasan_save_free_info+0x40/0x50 [ 1381.632868][T27011] ? __kasan_slab_free+0x5c/0x80 [ 1381.632890][T27011] ? kmem_cache_free+0x182/0x650 [ 1381.632912][T27011] ? get_signal+0x9e7/0x12c0 [ 1381.632935][T27011] ? arch_do_signal_or_restart+0xbb/0x860 [ 1381.632962][T27011] ? irqentry_exit+0x2c0/0x920 [ 1381.632982][T27011] ? asm_exc_page_fault+0x26/0x30 [ 1381.633041][T27011] ? proc_coredump_connector+0x187/0x4e0 [ 1381.633081][T27011] ? _raw_spin_unlock_irq+0x23/0x50 [ 1381.633104][T27011] get_signal+0x1094/0x12c0 [ 1381.633150][T27011] arch_do_signal_or_restart+0xbb/0x860 [ 1381.633181][T27011] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1381.633230][T27011] irqentry_exit+0x2c0/0x920 [ 1381.633250][T27011] ? trace_irq_disable+0x3b/0x140 [ 1381.633278][T27011] asm_exc_page_fault+0x26/0x30 [ 1381.633297][T27011] RIP: 0023:0x0 [ 1381.633313][T27011] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1381.633323][T27011] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 1381.633341][T27011] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1381.633354][T27011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1381.633365][T27011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1381.633377][T27011] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1381.633388][T27011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1381.633419][T27011] [ 1381.657413][T27011] memory: usage 307200kB, limit 307200kB, failcnt 20488 [ 1381.657435][T27011] memory+swap: usage 432048kB, limit 9007199254740988kB, failcnt 0 [ 1381.657450][T27011] kmem: usage 6376kB, limit 9007199254740988kB, failcnt 0 [ 1381.657462][T27011] Memory cgroup stats for /syz3: [ 1381.657576][T27011] cache 307634176 [ 1381.657584][T27011] rss 376832 [ 1381.657591][T27011] rss_huge 0 [ 1381.657597][T27011] shmem 307630080 [ 1381.657605][T27011] mapped_file 0 [ 1381.657611][T27011] dirty 0 [ 1381.657618][T27011] writeback 0 [ 1381.657626][T27011] workingset_refault_anon 408 [ 1381.657633][T27011] workingset_refault_file 6684 [ 1381.657640][T27011] swap 127844352 [ 1381.657646][T27011] swapcached 130457600 [ 1381.657654][T27011] pgpgin 744860 [ 1381.657661][T27011] pgpgout 674772 [ 1381.657669][T27011] pgfault 462205 [ 1381.657677][T27011] pgmajfault 2395 [ 1381.657684][T27011] inactive_anon 219435008 [ 1381.657692][T27011] active_anon 88592384 [ 1381.657699][T27011] inactive_file 0 [ 1381.657707][T27011] active_file 4096 [ 1381.657714][T27011] unevictable 0 [ 1381.657722][T27011] hierarchical_memory_limit 314572800 [ 1381.657730][T27011] hierarchical_memsw_limit 9223372036854771712 [ 1381.657738][T27011] total_cache 307634176 [ 1381.657746][T27011] total_rss 376832 [ 1381.657753][T27011] total_rss_huge 0 [ 1381.657760][T27011] total_shmem 307630080 [ 1381.657767][T27011] total_mapped_file 0 [ 1381.657775][T27011] total_dirty 0 [ 1381.657782][T27011] total_writeback 0 [ 1381.657789][T27011] total_workingset_refault_anon 409 [ 1381.657798][T27011] total_workingset_refault_file 6684 [ 1381.657806][T27011] total_swap 127844352 [ 1381.657813][T27011] total_swapcached 130465792 [ 1381.657821][T27011] total_pgpgin 747582 [ 1381.657829][T27011] total_pgpgout 677494 [ 1381.657837][T27011] total_pgfault 464941 [ 1381.657844][T27011] total_pgmajfault 2396 [ 1381.657852][T27011] total_inactive_anon 219435008 [ 1381.657860][T27011] total_active_anon 88592384 [ 1381.657867][T27011] total_inactive_file 0 [ 1381.657875][T27011] total_active_file 4096 [ 1381.657883][T27011] total_unevictable 0 [ 1381.657890][T27011] anon_cost 0 [ 1381.657897][T27011] file_cost 0 [ 1381.657906][T27011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6306,pid=27022,uid=0 [ 1381.660193][T27011] Memory cgroup out of memory: Killed process 27022 (syz.3.6306) total-vm:98724kB, anon-rss:1232kB, file-rss:51804kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 1381.868491][T27007] syz.3.6306 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1381.868523][T27007] CPU: 0 UID: 0 PID: 27007 Comm: syz.3.6306 Tainted: G L syzkaller #0 PREEMPT(full) [ 1381.868538][T27007] Tainted: [L]=SOFTLOCKUP [ 1381.868543][T27007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1381.868550][T27007] Call Trace: [ 1381.868557][T27007] [ 1381.868566][T27007] dump_stack_lvl+0xe8/0x150 [ 1381.868601][T27007] dump_header+0xd3/0x4b0 [ 1381.868631][T27007] oom_kill_process+0x3ab/0x9e0 [ 1381.868659][T27007] out_of_memory+0x1064/0x1480 [ 1381.868674][T27007] ? try_charge_memcg+0xc32/0x15e0 [ 1381.868696][T27007] ? __pfx_out_of_memory+0x10/0x10 [ 1381.868711][T27007] ? do_raw_spin_unlock+0xf5/0x200 [ 1381.868750][T27007] try_charge_memcg+0xcdf/0x15e0 [ 1381.868798][T27007] ? __pfx_try_charge_memcg+0x10/0x10 [ 1381.868823][T27007] ? charge_memcg+0x47/0x310 [ 1381.868839][T27007] charge_memcg+0x1dd/0x310 [ 1381.868855][T27007] __mem_cgroup_charge+0x25/0x80 [ 1381.868879][T27007] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 1381.868910][T27007] ? filemap_get_entry+0xcd/0x3f0 [ 1381.868947][T27007] ? __pfx_filemap_get_entry+0x10/0x10 [ 1381.868963][T27007] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1381.868981][T27007] ? shmem_allowable_huge_orders+0x34c/0x6c0 [ 1381.869000][T27007] shmem_get_folio_gfp+0x5da/0x16d0 [ 1381.869048][T27007] shmem_write_begin+0x16c/0x330 [ 1381.869084][T27007] generic_perform_write+0x2d5/0x8f0 [ 1381.869109][T27007] ? __pfx_generic_perform_write+0x10/0x10 [ 1381.869120][T27007] ? __mark_inode_dirty+0x4e7/0x13b0 [ 1381.869135][T27007] ? mnt_put_write_access_file+0xc3/0x100 [ 1381.869150][T27007] ? file_update_time_flags+0x3ab/0x440 [ 1381.869171][T27007] shmem_file_write_iter+0xf8/0x120 [ 1381.869204][T27007] __kernel_write_iter+0x44a/0x8f0 [ 1381.869232][T27007] ? __pfx___kernel_write_iter+0x10/0x10 [ 1381.869250][T27007] ? get_dump_page+0x1e6/0x410 [ 1381.869269][T27007] ? __asan_memset+0x22/0x50 [ 1381.869282][T27007] ? iov_iter_bvec+0xb8/0x180 [ 1381.869300][T27007] dump_user_range+0xc19/0x12c0 [ 1381.869339][T27007] ? __pfx_dump_user_range+0x10/0x10 [ 1381.869375][T27007] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 1381.869399][T27007] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 1381.869418][T27007] elf_core_dump+0x387b/0x4050 [ 1381.869445][T27007] ? __pfx_elf_core_dump+0x10/0x10 [ 1381.869460][T27007] ? coredump_write+0x394/0x1960 [ 1381.869493][T27007] ? irqentry_exit+0x218/0x920 [ 1381.869516][T27007] ? lockdep_hardirqs_on+0x7b/0x110 [ 1381.869537][T27007] ? irqentry_exit+0x218/0x920 [ 1381.869553][T27007] ? mas_ascend+0x2f9/0x8b0 [ 1381.869571][T27007] ? __lock_acquire+0x747/0x2de0 [ 1381.869597][T27007] ? lock_acquire+0x115/0x350 [ 1381.869626][T27007] coredump_write+0x1290/0x1960 [ 1381.869671][T27007] ? __pfx_coredump_write+0x10/0x10 [ 1381.869707][T27007] ? unshare_files+0xab/0x140 [ 1381.869725][T27007] vfs_coredump+0x3764/0x4520 [ 1381.869751][T27007] ? __pfx_vfs_coredump+0x10/0x10 [ 1381.869774][T27007] ? is_bpf_text_address+0x26/0x2b0 [ 1381.869808][T27007] ? __lock_acquire+0x747/0x2de0 [ 1381.869838][T27007] ? __lock_acquire+0x747/0x2de0 [ 1381.869862][T27007] ? lock_acquire+0x115/0x350 [ 1381.869877][T27007] ? lock_acquire+0x115/0x350 [ 1381.869894][T27007] ? is_bpf_text_address+0x26/0x2b0 [ 1381.869913][T27007] ? is_bpf_text_address+0x292/0x2b0 [ 1381.869938][T27007] ? is_bpf_text_address+0x26/0x2b0 [ 1381.869967][T27007] ? kernel_text_address+0xa5/0xe0 [ 1381.869991][T27007] ? __kernel_text_address+0xd/0x30 [ 1381.870006][T27007] ? unwind_get_return_address+0x4d/0x90 [ 1381.870024][T27007] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1381.870036][T27007] ? arch_stack_walk+0xfb/0x150 [ 1381.870055][T27007] ? stack_trace_save+0xa9/0x100 [ 1381.870075][T27007] ? __pfx_stack_trace_save+0x10/0x10 [ 1381.870098][T27007] ? stack_depot_save_flags+0x33/0x7f0 [ 1381.870124][T27007] ? __lock_acquire+0x660/0x2de0 [ 1381.870149][T27007] ? kasan_save_track+0x4f/0x80 [ 1381.870162][T27007] ? kasan_save_track+0x3e/0x80 [ 1381.870173][T27007] ? kasan_save_free_info+0x40/0x50 [ 1381.870183][T27007] ? __kasan_slab_free+0x5c/0x80 [ 1381.870195][T27007] ? kmem_cache_free+0x182/0x650 [ 1381.870208][T27007] ? get_signal+0x9e7/0x12c0 [ 1381.870232][T27007] ? arch_do_signal_or_restart+0xbb/0x860 [ 1381.870261][T27007] ? irqentry_exit+0x2c0/0x920 [ 1381.870281][T27007] ? asm_exc_page_fault+0x26/0x30 [ 1381.870321][T27007] ? proc_coredump_connector+0x187/0x4e0 [ 1381.870344][T27007] ? _raw_spin_unlock_irq+0x29/0x50 [ 1381.870356][T27007] get_signal+0x1094/0x12c0 [ 1381.870404][T27007] arch_do_signal_or_restart+0xbb/0x860 [ 1381.870437][T27007] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1381.870468][T27007] irqentry_exit+0x2c0/0x920 [ 1381.870480][T27007] ? trace_irq_disable+0x3b/0x140 [ 1381.870496][T27007] asm_exc_page_fault+0x26/0x30 [ 1381.870507][T27007] RIP: 0023:0x0 [ 1381.870523][T27007] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1381.870535][T27007] RSP: 002b:00000000800002d0 EFLAGS: 00010206 [ 1381.870553][T27007] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1381.870566][T27007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1381.870578][T27007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1381.870590][T27007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1381.870601][T27007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1381.870618][T27007] [ 1381.870623][T27007] memory: usage 307200kB, limit 307200kB, failcnt 20568 [ 1381.870631][T27007] memory+swap: usage 432004kB, limit 9007199254740988kB, failcnt 0 [ 1381.870638][T27007] kmem: usage 6352kB, limit 9007199254740988kB, failcnt 0 [ 1381.870645][T27007] Memory cgroup stats for /syz3: [ 1381.870760][T27007] cache 307675136 [ 1381.870767][T27007] rss 372736 [ 1381.870770][T27007] rss_huge 0 [ 1381.870774][T27007] shmem 307671040 [ 1381.870778][T27007] mapped_file 0 [ 1381.870782][T27007] dirty 0 [ 1381.870786][T27007] writeback 0 [ 1381.870789][T27007] workingset_refault_anon 408 [ 1381.870794][T27007] workingset_refault_file 6684 [ 1381.870798][T27007] swap 127799296 [ 1381.870802][T27007] swapcached 130445312 [ 1381.870806][T27007] pgpgin 744870 [ 1381.870813][T27007] pgpgout 674773 [ 1381.870820][T27007] pgfault 462205 [ 1381.870828][T27007] pgmajfault 2395 [ 1381.870835][T27007] inactive_anon 93921280 [ 1381.870843][T27007] active_anon 214142976 [ 1381.870851][T27007] inactive_file 0 [ 1381.870859][T27007] active_file 0 [ 1381.870866][T27007] unevictable 0 [ 1381.870874][T27007] hierarchical_memory_limit 314572800 [ 1381.870883][T27007] hierarchical_memsw_limit 9223372036854771712 [ 1381.870891][T27007] total_cache 307675136 [ 1381.870899][T27007] total_rss 372736 [ 1381.870903][T27007] total_rss_huge 0 [ 1381.870907][T27007] total_shmem 307671040 [ 1381.870911][T27007] total_mapped_file 0 [ 1381.870915][T27007] total_dirty 0 [ 1381.870919][T27007] total_writeback 0 [ 1381.870923][T27007] total_workingset_refault_anon 409 [ 1381.870928][T27007] total_workingset_refault_file 6684 [ 1381.870932][T27007] total_swap 127799296 [ 1381.870936][T27007] total_swapcached 130453504 [ 1381.870940][T27007] total_pgpgin 747592 [ 1381.870944][T27007] total_pgpgout 677495 [ 1381.870948][T27007] total_pgfault 464941 [ 1381.870953][T27007] total_pgmajfault 2396 [ 1381.870957][T27007] total_inactive_anon 93921280 [ 1381.870965][T27007] total_active_anon 214142976 [ 1381.870972][T27007] total_inactive_file 0 [ 1381.870980][T27007] total_active_file 0 [ 1381.870988][T27007] total_unevictable 0 [ 1381.870996][T27007] anon_cost 0 [ 1381.871003][T27007] file_cost 0 [ 1381.871017][T27007] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6306,pid=27017,uid=0 [ 1381.871088][T27007] Memory cgroup out of memory: Killed process 27017 (syz.3.6306) total-vm:98724kB, anon-rss:1232kB, file-rss:51804kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 1383.052300][T10314] IPVS: stop unused estimator thread 0... [ 1383.356726][ T9624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.360209][ T9505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.360284][ T9505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.360349][ T9505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.471915][T27360] input: syz1 as /devices/virtual/input/input162 [ 1383.526374][T27361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6391'. [ 1383.992100][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.992123][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.018215][ T32] oom_reaper: reaped process 27017 (syz.3.6306), now anon-rss:0kB, file-rss:51796kB, shmem-rss:0kB [ 1384.556214][T27026] syz.3.6306 (27026) used greatest stack depth: 15872 bytes left [ 1384.872027][ T9625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.872050][ T9625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1385.128679][T27384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6388'. [ 1385.590542][T27392] fuse: Invalid gid '00000000000000000003' [ 1385.800634][ T4984] Dev loop8: unable to read RDB block 1 [ 1385.800679][ T4984] loop8: unable to read partition table [ 1385.800917][ T4984] loop8: partition table beyond EOD, truncated [ 1385.857311][T27366] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1386.021820][T27022] syz.3.6306 (27022) used greatest stack depth: 15360 bytes left [ 1386.046605][T27399] netlink: Failed to add @ helper -22 [ 1386.046668][T27399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1386.334040][T27366] usb 1-1: Using ep0 maxpacket: 32 [ 1386.376721][T27401] tipc: Started in network mode [ 1386.376740][T27401] tipc: Node identity , cluster identity 4711 [ 1386.376754][T27401] tipc: Failed to obtain node identity [ 1386.376779][T27401] tipc: Enabling of bearer rejected, failed to enable media [ 1386.386157][T27399] syzkaller0: entered promiscuous mode [ 1386.386218][T27399] syzkaller0: entered allmulticast mode [ 1386.491810][T27366] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1386.798621][T27366] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 1386.798641][T27366] usb 1-1: config 4 has no interface number 0 [ 1386.798675][T27366] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.798701][T27366] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.798740][T27366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.957128][T27366] hub 1-1:4.128: USB hub found [ 1387.241310][T27366] hub 1-1:4.128: 6 ports detected [ 1387.241411][T27366] hub 1-1:4.128: Using single TT (err -22) [ 1387.242071][T27366] hub 1-1:4.128: insufficient power available to use all downstream ports [ 1387.470559][T27392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.471148][T27392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.504167][T27392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.534759][T27392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.693686][T27366] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 1387.727875][T27366] usb 1-1: USB disconnect, device number 42 [ 1388.173249][T27414] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1388.503405][T27422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6397'. [ 1388.503444][T27422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6397'. [ 1388.503459][T27422] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6397'. [ 1388.714366][T27425] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6399'. [ 1389.036125][T21165] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1389.142079][T27429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.152693][T27429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.512177][T21165] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1389.514723][T21165] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1389.514761][T21165] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1389.521183][T21165] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1389.521242][T21165] usb 1-1: Product: syz [ 1389.521281][T21165] usb 1-1: Manufacturer: syz [ 1389.521342][T21165] usb 1-1: SerialNumber: syz [ 1389.530677][T21165] usb 1-1: config 0 descriptor?? [ 1389.577588][T27429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.578333][T27429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.591931][T21165] usb 1-1: selecting invalid altsetting 0 [ 1389.632526][T27429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.633946][T27429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.635715][T27436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1390.080056][ T25] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 1390.146254][T27442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6404'. [ 1390.227285][ T25] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1390.228689][ T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1390.228715][ T25] usb 4-1: config 168 has 1 interface, different from the descriptor's value: 6 [ 1390.228791][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1390.228818][ T25] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1390.228842][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1390.228865][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1390.230167][ T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1390.230190][ T25] usb 4-1: config 168 has 1 interface, different from the descriptor's value: 6 [ 1390.230232][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1390.230283][ T25] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1390.230306][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1390.230323][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1390.231610][ T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1390.231635][ T25] usb 4-1: config 168 has 1 interface, different from the descriptor's value: 6 [ 1390.231703][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1390.231730][ T25] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1390.231764][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1390.231791][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1390.439705][ T25] usb 4-1: string descriptor 0 read error: -22 [ 1390.439866][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.468937][ T25] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1390.640240][T21165] usb 1-1: USB disconnect, device number 43 [ 1390.998248][T27366] usb 4-1: USB disconnect, device number 110 [ 1391.041513][T27440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1391.041611][T27440] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1391.423912][T27440] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1391.425898][T27440] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1391.485170][T27440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1391.485217][T27440] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1391.551256][T27440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1391.551280][T27440] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1392.053406][T27462] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6410'. [ 1392.416044][T27472] netlink: 'syz.1.6412': attribute type 9 has an invalid length. [ 1394.246043][T27496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.263458][T27496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.946573][T27507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.946959][T27507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.160582][T21165] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1395.190427][T27509] syzkaller0: entered promiscuous mode [ 1395.190449][T27509] syzkaller0: entered allmulticast mode [ 1395.202159][T27510] netlink: Failed to add @ helper -22 [ 1395.202215][T27510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1395.218988][T27509] tipc: Enabled bearer , priority 0 [ 1395.430780][T27515] syzkaller0: entered promiscuous mode [ 1395.430805][T27515] syzkaller0: entered allmulticast mode [ 1395.450182][T27515] tipc: Started in network mode [ 1395.450201][T27515] tipc: Node identity 52591dd6590a, cluster identity 4711 [ 1395.453800][T27515] tipc: Enabled bearer , priority 0 [ 1395.477284][T27515] tipc: Resetting bearer [ 1395.490258][T27514] tipc: Resetting bearer [ 1395.528286][T27514] tipc: Disabling bearer [ 1395.571064][T21165] usb 1-1: New USB device found, idVendor=14e1, idProduct=6009, bcdDevice= 0.00 [ 1395.588634][T21165] usb 1-1: config 0 interface 0 altsetting 8 bulk endpoint 0x81 has invalid maxpacket 241 [ 1395.588686][T21165] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1395.588753][T21165] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1395.588826][T21165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.596171][T21165] usb 1-1: config 0 descriptor?? [ 1395.635380][T27502] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1395.673718][T21165] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1396.078961][T27529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.079420][T27529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.326653][ T25] tipc: Node number set to 2108488330 [ 1397.019617][T27538] netlink: 'syz.1.6432': attribute type 1 has an invalid length. [ 1397.280826][T27540] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6432'. [ 1397.662842][T27549] openvswitch: netlink: Key type 9220 is out of range max 32 [ 1399.355422][T21158] usb 1-1: USB disconnect, device number 44 [ 1400.178976][T27568] batadv0: entered promiscuous mode [ 1400.179002][T27568] batadv0: entered allmulticast mode [ 1400.486922][T27572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6444'. [ 1400.490243][T27571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.490821][T27571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.511821][T27571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6445'. [ 1400.553524][T27574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.553909][T27574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.914543][T26750] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1401.384243][T26750] usb 1-1: Using ep0 maxpacket: 8 [ 1401.388216][T26750] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1401.397282][T26750] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1401.397351][T26750] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1401.397420][T26750] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1401.397445][T26750] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1401.397459][T26750] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1401.397523][T26750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.809628][T27594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.828184][T27594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.903886][T26750] usb 1-1: usb_control_msg returned -32 [ 1401.903970][T26750] usbtmc 1-1:16.0: can't read capabilities [ 1402.009978][T27596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.036276][T27596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.737167][T27604] usb usb1: usbfs: process 27604 (syz.3.6454) did not claim interface 0 before use [ 1403.238159][T27612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6456'. [ 1403.538762][T27622] netlink: 'syz.2.6457': attribute type 9 has an invalid length. [ 1403.794475][T27631] program syz.4.6460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1404.819055][T27651] netlink: 'syz.4.6464': attribute type 9 has an invalid length. [ 1405.942826][T27664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6469'. [ 1406.366699][ T49] IPVS: starting estimator thread 0... [ 1406.576409][T27679] IPVS: using max 52 ests per chain, 124800 per kthread [ 1407.368737][T27598] usbtmc 1-1:16.0: stb usb_control_msg returned -110 [ 1407.458549][T26750] usb 1-1: USB disconnect, device number 45 [ 1407.706748][T27698] netlink: 'syz.1.6476': attribute type 9 has an invalid length. [ 1407.967415][T21158] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1408.351743][T21158] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1408.353456][T21158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.353530][T21158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.413028][T21158] usb 4-1: config 0 descriptor?? [ 1408.834960][T21158] usbhid 4-1:0.0: can't add hid device: -71 [ 1408.835103][T21158] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1408.916671][T21158] usb 4-1: USB disconnect, device number 111 [ 1409.098709][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6482'. [ 1409.606412][ T25] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1409.793915][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 1409.795106][ T25] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1409.795138][ T25] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1409.795188][ T25] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1409.795214][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1409.795245][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.827394][T27670] syz.4.6470 (27670): drop_caches: 2 [ 1410.047109][ T25] usb 4-1: config 0 descriptor?? [ 1410.103220][T27737] netlink: 'syz.2.6487': attribute type 1 has an invalid length. [ 1410.126651][T27732] netlink: 'syz.1.6486': attribute type 9 has an invalid length. [ 1410.260005][T27735] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6487'. [ 1410.312156][T27702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.312483][T27702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.266850][T27751] syzkaller0: entered promiscuous mode [ 1411.266866][T27751] syzkaller0: entered allmulticast mode [ 1411.358393][T27751] tipc: Enabled bearer , priority 0 [ 1411.470076][T27755] netlink: 'syz.0.6490': attribute type 9 has an invalid length. [ 1411.677402][T27748] tipc: Resetting bearer [ 1412.003752][T27748] tipc: Disabling bearer [ 1412.743966][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 1412.744103][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1412.844764][ T25] usb 4-1: USB disconnect, device number 112 [ 1412.918535][T27773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.919090][T27773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.017433][T27773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.075727][T27773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.059834][ T25] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1414.228008][ T25] usb 1-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 1414.251691][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.251762][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.278515][ T25] usb 1-1: config 0 descriptor?? [ 1414.474486][T27786] netlink: 'syz.1.6499': attribute type 1 has an invalid length. [ 1414.582340][T27786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1414.619400][T27788] bond1: (slave gretap1): making interface the new active one [ 1414.634495][T27790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6500'. [ 1414.645011][T27788] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1414.751502][T27790] usb usb7: usbfs: process 27790 (syz.3.6500) did not claim interface 0 before use [ 1414.937849][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 1414.937991][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1414.941749][ T25] usb 1-1: USB disconnect, device number 46 [ 1415.478377][T27809] netlink: 'syz.1.6504': attribute type 9 has an invalid length. [ 1415.656487][T27812] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6506'. [ 1416.277211][T27830] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6512'. [ 1416.456430][T27834] netlink: 'syz.0.6513': attribute type 1 has an invalid length. [ 1416.812063][T27844] program syz.4.6515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1416.985367][ T25] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 1416.997078][ T25] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1417.399087][T27856] netlink: 'syz.0.6518': attribute type 9 has an invalid length. [ 1417.736633][ T25] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1417.781712][T27868] Set syz1 is full, maxelem 2 reached [ 1417.918265][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 1417.918303][ T25] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1417.923807][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.923835][ T25] usb 4-1: Product: syz [ 1417.923850][ T25] usb 4-1: Manufacturer: syz [ 1417.923864][ T25] usb 4-1: SerialNumber: syz [ 1417.992996][ T25] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 1418.050236][ T25] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1418.077909][ T25] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1418.117553][ T25] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1418.168580][ T25] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1418.385933][T21165] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1418.613797][T21165] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1418.653281][T21165] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1418.653378][T21165] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1418.653452][T21165] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.520102][ C1] usb 4-1: malformed indat packet [ 1419.520413][ C1] usb 4-1: malformed indat packet [ 1419.520693][ C1] usb 4-1: malformed indat packet [ 1419.520969][ C1] usb 4-1: malformed indat packet [ 1419.521245][ C1] usb 4-1: malformed indat packet [ 1419.521525][ C1] usb 4-1: malformed indat packet [ 1419.521798][ C1] usb 4-1: malformed indat packet [ 1419.522099][ C1] usb 4-1: malformed indat packet [ 1419.795487][ T25] usb 4-1: USB disconnect, device number 113 [ 1419.825751][ T25] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1419.863115][ T25] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1419.908536][ T25] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1419.937399][ T25] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1419.957648][ T25] keyspan 4-1:1.0: device disconnected [ 1420.480181][T27891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.481740][T27891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.583502][T27891] bond2: option lacp_rate: invalid value (5) [ 1420.608470][T27891] bond2 (unregistering): Released all slaves [ 1420.687018][T27894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6530'. [ 1420.690575][T27894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.691186][T27894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.699649][T27890] fuse: fd is not a fuse device [ 1421.042576][T27903] FAULT_INJECTION: forcing a failure. [ 1421.042576][T27903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.042603][T27903] CPU: 1 UID: 0 PID: 27903 Comm: syz.3.6533 Tainted: G L syzkaller #0 PREEMPT(full) [ 1421.042619][T27903] Tainted: [L]=SOFTLOCKUP [ 1421.042623][T27903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1421.042630][T27903] Call Trace: [ 1421.042635][T27903] [ 1421.042644][T27903] dump_stack_lvl+0xe8/0x150 [ 1421.042668][T27903] should_fail_ex+0x410/0x560 [ 1421.042689][T27903] _copy_from_user+0x2d/0xb0 [ 1421.042708][T27903] __sys_bpf+0x2e7/0xd90 [ 1421.042728][T27903] ? __pfx___sys_bpf+0x10/0x10 [ 1421.042742][T27903] ? ksys_write+0x1e6/0x270 [ 1421.042758][T27903] ? __mutex_unlock_slowpath+0x731/0x900 [ 1421.042783][T27903] ? fput+0xa0/0xd0 [ 1421.042797][T27903] ? ksys_write+0x242/0x270 [ 1421.042811][T27903] __ia32_sys_bpf+0xba/0xd0 [ 1421.042824][T27903] __do_fast_syscall_32+0x27a/0x6b0 [ 1421.042838][T27903] ? do_fast_syscall_32+0x33/0x70 [ 1421.042851][T27903] ? asm_int80_emulation+0x1a/0x20 [ 1421.042862][T27903] ? do_int80_emulation+0x299/0x500 [ 1421.042873][T27903] ? trace_irq_disable+0x3b/0x140 [ 1421.042889][T27903] do_fast_syscall_32+0x33/0x70 [ 1421.042901][T27903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1421.042921][T27903] RIP: 0023:0xf742f0ec [ 1421.042933][T27903] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1421.042942][T27903] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1421.042955][T27903] RAX: ffffffffffffffda RBX: 000000000000001b RCX: 0000000080000180 [ 1421.042963][T27903] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 1421.042969][T27903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1421.042975][T27903] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1421.042982][T27903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1421.042997][T27903] [ 1421.415651][T26941] usb 1-1: USB disconnect, device number 47 [ 1421.831046][T27912] netlink: 'syz.3.6534': attribute type 9 has an invalid length. [ 1422.153176][T27921] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6538'. [ 1423.148587][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6541'. [ 1423.937642][T27940] fuse: Bad value for 'rootmode' [ 1424.454153][T27945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.455009][T27945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.816677][ T4984] Dev loop8: unable to read RDB block 1 [ 1424.816723][ T4984] loop8: unable to read partition table [ 1424.817005][ T4984] loop8: partition table beyond EOD, truncated [ 1425.012905][T27945] vivid-004: ================= START STATUS ================= [ 1425.012970][T27945] vivid-004: Radio HW Seek Mode: Bounded [ 1425.013001][T27945] vivid-004: Radio Programmable HW Seek: false [ 1425.013022][T27945] vivid-004: RDS Rx I/O Mode: Block I/O [ 1425.013042][T27945] vivid-004: Generate RBDS Instead of RDS: false [ 1425.013062][T27945] vivid-004: RDS Reception: true [ 1425.013085][T27945] vivid-004: RDS Program Type: 0 inactive [ 1425.013132][T27945] vivid-004: RDS PS Name: inactive [ 1425.013155][T27945] vivid-004: RDS Radio Text: inactive [ 1425.013178][T27945] vivid-004: RDS Traffic Announcement: false inactive [ 1425.013203][T27945] vivid-004: RDS Traffic Program: false inactive [ 1425.013226][T27945] vivid-004: RDS Music: false inactive [ 1425.013276][T27945] vivid-004: ================== END STATUS ================== [ 1425.859671][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1425.873222][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1425.879353][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1425.883843][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1425.885296][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1426.002227][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1426.003901][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1426.004486][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1426.005968][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1426.038518][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1426.130051][T10314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.330966][T27945] bond1: (slave bond_slave_1): Device is not our slave [ 1426.335537][T27945] bond1: option active_slave: invalid value (bond_slave_1) [ 1426.442327][T27945] bond1 (unregistering): Released all slaves [ 1426.512583][T10314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.770569][T10314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.977970][T10314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.149659][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.149796][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.164598][T27962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.164774][T27962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.164906][T27962] bridge_slave_0: entered allmulticast mode [ 1427.166547][T27962] bridge_slave_0: entered promiscuous mode [ 1427.169236][T27962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.169336][T27962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.169456][T27962] bridge_slave_1: entered allmulticast mode [ 1427.171118][T27962] bridge_slave_1: entered promiscuous mode [ 1427.201905][T27962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.205270][T27962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.282147][T27962] team0: Port device team_slave_0 added [ 1427.287522][T27962] team0: Port device team_slave_1 added [ 1427.386904][T27962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1427.386922][T27962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.386948][T27962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1427.388804][T10314] bridge_slave_1: left allmulticast mode [ 1427.388828][T10314] bridge_slave_1: left promiscuous mode [ 1427.389023][T10314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.392327][T10314] bridge_slave_0: left allmulticast mode [ 1427.392349][T10314] bridge_slave_0: left promiscuous mode [ 1427.392666][T10314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.958913][T10314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.982404][T10314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.996906][T10314] bond0 (unregistering): Released all slaves [ 1428.023128][T27962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.023145][T27962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.023172][T27962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.181971][ T54] Bluetooth: hci0: command tx timeout [ 1428.193988][T28010] netlink: 'syz.1.6561': attribute type 9 has an invalid length. [ 1428.403292][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1428.448155][T27962] hsr_slave_0: entered promiscuous mode [ 1428.449240][T27962] hsr_slave_1: entered promiscuous mode [ 1428.449931][T27962] debugfs: 'hsr0' already exists in 'hsr' [ 1428.449974][T27962] Cannot create hsr debugfs directory [ 1428.966213][T28024] syzkaller0: entered promiscuous mode [ 1428.966238][T28024] syzkaller0: entered allmulticast mode [ 1429.045369][T10314] hsr_slave_0: left promiscuous mode [ 1429.046211][T10314] hsr_slave_1: left promiscuous mode [ 1429.063925][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1429.063950][T10314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.088751][ T4984] Dev loop8: unable to read RDB block 1 [ 1429.088791][ T4984] loop8: unable to read partition table [ 1429.088990][ T4984] loop8: partition table beyond EOD, truncated [ 1429.089315][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1429.089335][T10314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.164755][T10314] veth1_macvtap: left promiscuous mode [ 1429.164800][T10314] veth0_macvtap: left promiscuous mode [ 1429.164927][T10314] veth1_vlan: left promiscuous mode [ 1429.165996][T10314] veth0_vlan: left promiscuous mode [ 1429.406149][T28042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6567'. [ 1429.913034][T10314] team0 (unregistering): Port device team_slave_1 removed [ 1429.930604][T10314] team0 (unregistering): Port device team_slave_0 removed [ 1430.093944][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1430.160196][T28062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.163097][T28062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.241737][T28056] syzkaller0: entered promiscuous mode [ 1430.241765][T28056] syzkaller0: entered allmulticast mode [ 1430.313464][ T54] Bluetooth: hci0: command tx timeout [ 1430.562918][T28073] netlink: 'syz.4.6574': attribute type 9 has an invalid length. [ 1430.762298][T28074] fuse: Unknown parameter 'hser_id' [ 1432.295846][T28079] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6575'. [ 1432.384579][ T54] Bluetooth: hci0: command tx timeout [ 1432.434011][T28080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1433.580552][ T4984] udevd[4984]: worker [24987] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 1433.580708][ T4984] udevd[4984]: worker [24904] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 1434.467194][ T54] Bluetooth: hci0: command tx timeout [ 1435.279824][T27962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1435.283040][T27962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1435.336666][T27962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1435.354503][T27962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1435.371220][T27962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1435.449676][T27962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1435.450821][T27962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1435.476247][T27962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1435.735101][T28100] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6578'. [ 1435.806164][T27962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.932465][T27962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.982613][ T9624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.982714][ T9624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1436.011481][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.011586][ T9607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.185293][T28126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.185652][T28126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.776997][T21167] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1436.926614][T21167] usb 4-1: Using ep0 maxpacket: 32 [ 1436.928153][T21167] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1436.928250][T21167] usb 4-1: no configurations [ 1436.928266][T21167] usb 4-1: can't read configurations, error -22 [ 1436.932721][T27962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.112054][T21167] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1437.163429][T27962] veth0_vlan: entered promiscuous mode [ 1437.205183][T27962] veth1_vlan: entered promiscuous mode [ 1437.323106][T27962] veth0_macvtap: entered promiscuous mode [ 1437.327311][T27962] veth1_macvtap: entered promiscuous mode [ 1437.332280][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1437.532047][T27962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1437.554953][T21167] usb 4-1: Using ep0 maxpacket: 32 [ 1437.601712][T27962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.646419][T26592] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.646593][T26592] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.646733][T26592] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.646766][T26592] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.663818][T21167] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1437.663859][T21167] usb 4-1: no configurations [ 1437.663872][T21167] usb 4-1: can't read configurations, error -22 [ 1437.664414][T21167] usb usb4-port1: attempt power cycle [ 1437.757408][T28149] netlink: 'syz.4.6587': attribute type 9 has an invalid length. [ 1438.054321][T21167] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1438.238359][T26592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.238374][T26592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.365278][T21167] usb 4-1: Using ep0 maxpacket: 32 [ 1438.371015][ T9607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.371034][ T9607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.520547][T21167] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1438.520593][T21167] usb 4-1: no configurations [ 1438.520606][T21167] usb 4-1: can't read configurations, error -22 [ 1438.752876][T21167] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1438.996538][T21167] usb 4-1: Using ep0 maxpacket: 32 [ 1438.998234][T21167] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1438.998311][T21167] usb 4-1: no configurations [ 1438.998368][T21167] usb 4-1: can't read configurations, error -22 [ 1438.998895][T21167] usb usb4-port1: unable to enumerate USB device [ 1439.086707][T21158] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1439.216537][T21158] usb 6-1: device descriptor read/64, error -71 [ 1439.254264][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1439.456480][T21158] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1439.586584][T21158] usb 6-1: device descriptor read/64, error -71 [ 1439.696996][T21158] usb usb6-port1: attempt power cycle [ 1440.034777][T28186] fuse: Unknown parameter 'use00000000000000000000' [ 1440.053343][T21158] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1440.074621][T21158] usb 6-1: device descriptor read/8, error -71 [ 1440.118422][T28196] syzkaller0: left promiscuous mode [ 1440.118446][T28196] syzkaller0: left allmulticast mode [ 1440.163370][T28196] tc action pedit offset must be on 32 bit boundaries [ 1440.237680][T28201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.238035][T28201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.306491][T21158] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1440.327181][T21158] usb 6-1: device descriptor read/8, error -71 [ 1440.367224][T21167] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 1440.443382][T21158] usb usb6-port1: unable to enumerate USB device [ 1440.988330][T21167] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1441.027707][T28213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.028259][T28213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.227551][T21167] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1441.227607][T21167] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.227647][T21167] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1441.227698][T21167] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1441.227734][T21167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.234330][T21167] usb 4-1: config 0 descriptor?? [ 1441.543039][ T4984] Dev loop8: unable to read RDB block 1 [ 1441.543143][ T4984] loop8: unable to read partition table [ 1441.543774][ T4984] loop8: partition table beyond EOD, truncated [ 1441.776860][T21167] input: HID 17ef:6047 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6047.0040/input/input163 [ 1441.800925][T28222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.805783][T28222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.943621][T28222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6604'. [ 1442.112707][T21167] lenovo 0003:17EF:6047.0040: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 1442.322537][T28227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.325228][T28227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.445012][T28230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6605'. [ 1442.521497][T28226] macsec1: entered allmulticast mode [ 1442.521523][T28226] veth1_macvtap: entered allmulticast mode [ 1442.638189][T28230] veth1_macvtap (unregistering): left allmulticast mode [ 1443.175577][T28244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.176209][T28244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.460005][ T4984] Dev loop8: unable to read RDB block 1 [ 1443.460081][ T4984] loop8: unable to read partition table [ 1443.460330][ T4984] loop8: partition table beyond EOD, truncated [ 1444.051549][T13659] usb 4-1: USB disconnect, device number 118 [ 1444.256722][T13659] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1444.446368][T13659] usb 4-1: Using ep0 maxpacket: 16 [ 1444.451837][T13659] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1444.453220][T13659] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1444.484741][T13659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.484769][T13659] usb 4-1: Product: syz [ 1444.484783][T13659] usb 4-1: Manufacturer: syz [ 1444.484797][T13659] usb 4-1: SerialNumber: syz [ 1444.657107][T13659] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1444.657173][T13659] r8152-cfgselector 4-1: config 0 descriptor?? [ 1444.661438][ T4984] Dev loop8: unable to read RDB block 1 [ 1444.661481][ T4984] loop8: unable to read partition table [ 1444.661702][ T4984] loop8: partition table beyond EOD, truncated [ 1445.389318][T28159] r8152-cfgselector 4-1: USB disconnect, device number 119 [ 1445.692238][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6622'. [ 1446.020946][T28295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6624'. [ 1446.328632][T28159] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1446.336075][T28304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6626'. [ 1446.417544][T28306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6626'. [ 1447.177130][T21158] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1447.177436][ T4984] Dev loop8: unable to read RDB block 1 [ 1447.177475][ T4984] loop8: unable to read partition table [ 1447.177684][ T4984] loop8: partition table beyond EOD, truncated [ 1447.277865][T28159] usb 6-1: device descriptor read/all, error -61 [ 1447.357412][T21158] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1447.358766][T21158] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.358791][T21158] usb 4-1: config 0 has no interfaces? [ 1447.358868][T21158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.362474][T21158] usb 4-1: config 0 descriptor?? [ 1447.439176][T28159] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1447.755925][T28159] usb 6-1: device descriptor read/64, error -71 [ 1447.792531][T28331] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1447.927257][T28159] usb usb6-port1: attempt power cycle [ 1447.964425][T21165] hid-generic 0002:0004:0009.0041: unknown main item tag 0x0 [ 1447.964469][T21165] hid-generic 0002:0004:0009.0041: unknown main item tag 0x0 [ 1447.964497][T21165] hid-generic 0002:0004:0009.0041: unknown main item tag 0x0 [ 1447.964525][T21165] hid-generic 0002:0004:0009.0041: unknown main item tag 0x0 [ 1447.964557][T21165] hid-generic 0002:0004:0009.0041: unknown main item tag 0x0 [ 1447.964588][T21165] hid-generic 0002:0004:0009.0041: unknown main item tag 0x0 [ 1447.964619][T21165] hid-generic 0002:0004:0009.0041: unknown main item tag 0x0 [ 1447.964646][T21165] hid-generic 0002:0004:0009.0041: unknown main item tag 0x0 [ 1447.964678][T21165] hid-generic 0002:0004:0009.0041: unknown main item tag 0x0 [ 1447.964709][T21165] hid-generic 0002:0004:0009.0041: unknown main item tag 0x0 [ 1447.967981][T21165] hid-generic 0002:0004:0009.0041: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1447.973260][T28337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6630'. [ 1448.163706][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1448.163728][ T30] audit: type=1800 audit(1792063784.284:10074): pid=28340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6635" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1448.305162][T28159] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1448.319287][T28159] usb 6-1: device descriptor read/8, error -71 [ 1448.556592][T28159] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1448.577859][T28159] usb 6-1: device descriptor read/8, error -71 [ 1448.688492][T28159] usb usb6-port1: unable to enumerate USB device [ 1450.014857][T28159] usb 4-1: USB disconnect, device number 120 [ 1450.470305][T28375] trusted_key: encrypted_key: insufficient parameters specified [ 1450.790408][T28159] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 1450.997343][T28387] input: syz1 as /devices/virtual/input/input165 [ 1451.136498][T28159] usb 4-1: Invalid ep0 maxpacket: 32 [ 1451.267865][T28159] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 1451.427026][T28159] usb 4-1: Invalid ep0 maxpacket: 32 [ 1451.428114][T28159] usb usb4-port1: attempt power cycle [ 1451.736343][T28396] ip6gre1: entered allmulticast mode [ 1451.741580][T26592] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1451.848797][T28159] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 1451.849100][T28400] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6652'. [ 1451.882033][T28159] usb 4-1: Invalid ep0 maxpacket: 32 [ 1451.924941][T28400] bridge8: entered promiscuous mode [ 1451.924992][T28400] bridge8: entered allmulticast mode [ 1452.006544][T28159] usb 4-1: new low-speed USB device number 124 using dummy_hcd [ 1452.252571][T28159] usb 4-1: Invalid ep0 maxpacket: 32 [ 1452.252879][T28159] usb usb4-port1: unable to enumerate USB device [ 1452.260013][T28406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'. [ 1452.416893][T28411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6654'. [ 1452.895808][T28159] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1453.062528][T28159] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1453.063872][T28159] usb 6-1: config 0 has no interfaces? [ 1453.073317][T28159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.073407][T28159] usb 6-1: Product: syz [ 1453.073439][T28159] usb 6-1: Manufacturer: syz [ 1453.073471][T28159] usb 6-1: SerialNumber: syz [ 1453.127379][T28159] usb 6-1: config 0 descriptor?? [ 1454.694766][T21158] usb 6-1: USB disconnect, device number 10 [ 1455.102494][T28457] bridge9: entered promiscuous mode [ 1455.185878][T28461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.210349][T28461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.240588][T28461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.241029][T28461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.510712][T28159] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1456.134541][T28159] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1456.211222][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1456.764779][T28159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.764873][T28159] usb 4-1: Product: syz [ 1456.764894][T28159] usb 4-1: Manufacturer: syz [ 1456.764903][T28159] usb 4-1: SerialNumber: syz [ 1456.771358][T28159] usb 4-1: config 0 descriptor?? [ 1458.170104][T28491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.176001][T28491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.675624][T28159] usb 4-1: f81604_write: reg: 105 data: a1 failed: -EPROTO [ 1458.675788][T28159] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1458.675834][T28159] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 1458.747844][T28159] usb 4-1: USB disconnect, device number 125 [ 1461.554162][T28159] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1461.876874][T28159] usb 6-1: Using ep0 maxpacket: 8 [ 1461.881788][T28159] usb 6-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 1461.890398][T28159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.890440][T28159] usb 6-1: Product: syz [ 1461.890471][T28159] usb 6-1: Manufacturer: syz [ 1461.890532][T28159] usb 6-1: SerialNumber: syz [ 1462.888929][T21167] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1463.183548][T28560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.183894][T28560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.299827][T21167] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1463.302013][T21167] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1463.302057][T21167] usb 4-1: config 0 has no interface number 0 [ 1463.306418][T21167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.306715][T21167] usb 4-1: Product: syz [ 1463.306749][T21167] usb 4-1: Manufacturer: syz [ 1463.306809][T21167] usb 4-1: SerialNumber: syz [ 1463.348188][T21167] usb 4-1: config 0 descriptor?? [ 1463.570002][T21167] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1463.645171][T21167] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1463.645788][T21167] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1463.650169][T21167] usb 4-1: media controller created [ 1463.876343][T21167] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1463.910761][T28573] fuse: Unknown parameter 'groupid' [ 1464.409457][T28159] usb 6-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1464.409487][T28159] usb 6-1: found format II with max.bitrate = 5, frame size=255 [ 1464.409506][T28159] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1464.498661][T28159] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1464.547748][T28159] usb 6-1: unit 5 not found! [ 1464.580758][T28589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.589814][T28589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.593139][T28159] usb 6-1: USB disconnect, device number 11 [ 1464.680557][T25357] udevd[25357]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1465.256286][T28159] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1465.550178][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1465.666391][T28159] usb 6-1: Using ep0 maxpacket: 16 [ 1465.974447][T26941] usb 4-1: USB disconnect, device number 126 [ 1466.017684][T28159] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1466.017817][T28159] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 1466.019294][T28159] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1466.019394][T28159] usb 6-1: can't read configurations, error -71 [ 1466.527181][T28615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.527627][T28615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.062500][T28629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.062844][T28629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.182292][T28644] syz_tun: entered allmulticast mode [ 1468.319149][T28646] syzkaller0: entered promiscuous mode [ 1468.319201][T28646] syzkaller0: entered allmulticast mode [ 1473.811619][T28664] ip6tnl1: entered promiscuous mode [ 1473.924307][T28680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6722'. [ 1473.930922][ T30] audit: type=1326 audit(1792063810.094:10075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28679 comm="syz.1.6722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 1473.931167][ T30] audit: type=1326 audit(1792063810.094:10076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28679 comm="syz.1.6722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 1473.931622][ T30] audit: type=1326 audit(1792063810.094:10077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28679 comm="syz.1.6722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 1473.931830][ T30] audit: type=1326 audit(1792063810.094:10078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28679 comm="syz.1.6722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 1473.932049][ T30] audit: type=1326 audit(1792063810.094:10079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28679 comm="syz.1.6722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 1473.932342][ T30] audit: type=1326 audit(1792063810.094:10080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28679 comm="syz.1.6722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 1473.932561][ T30] audit: type=1326 audit(1792063810.094:10081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28679 comm="syz.1.6722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 1473.932771][ T30] audit: type=1326 audit(1792063810.094:10082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28679 comm="syz.1.6722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 1473.933107][ T30] audit: type=1326 audit(1792063810.094:10083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28679 comm="syz.1.6722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 1473.933485][ T30] audit: type=1326 audit(1792063810.094:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28679 comm="syz.1.6722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f490ec code=0x7ffc0000 [ 1473.965177][T28683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6723'. [ 1474.061426][T28684] CUSE: info not properly terminated [ 1474.312637][T28690] netlink: 964 bytes leftover after parsing attributes in process `syz.1.6726'. [ 1474.312685][T28690] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1474.332537][T28693] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6725'. [ 1474.513971][T28703] netlink: 'syz.1.6731': attribute type 32 has an invalid length. [ 1474.513999][T28703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6731'. [ 1474.514037][T28703] netlink: 'syz.1.6731': attribute type 32 has an invalid length. [ 1474.720898][T28715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6737'. [ 1475.064428][T28728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.064997][T28728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.109024][T28727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.113878][T28727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.537010][T21158] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1475.728256][T21158] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1475.731059][T21158] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.731108][T21158] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1475.731191][T21158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.735118][T21158] usb 6-1: config 0 descriptor?? [ 1475.739112][T28742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6747'. [ 1475.740450][T28742] netlink: 'syz.2.6747': attribute type 1 has an invalid length. [ 1475.742884][T21158] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1475.833879][T28746] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1475.884648][T28742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1475.937665][T21158] usb 6-1: USB disconnect, device number 14 [ 1475.988466][T28745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1475.988757][T28745] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1475.990725][T28745] bond1: (slave gre1): Error -95 calling set_mac_address [ 1476.048357][T28742] gretap1: entered promiscuous mode [ 1476.081511][T28742] bond1: (slave gretap1): making interface the new active one [ 1476.106940][T28742] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1476.194893][T28742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1476.207507][T28742] bond1: (slave bond2): Enslaving as an active interface with a down link [ 1476.439166][T28758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6750'. [ 1476.466803][T21158] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1476.657031][T21158] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1476.669556][T21158] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.669606][T21158] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 34, changing to 9 [ 1476.669652][T21158] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1476.672915][T21158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.672963][T21158] usb 6-1: Product: syz [ 1476.672978][T21158] usb 6-1: Manufacturer: syz [ 1476.672993][T21158] usb 6-1: SerialNumber: syz [ 1476.984444][T28749] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6744'. [ 1476.984687][T28749] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6744'. [ 1477.057775][T28768] FAULT_INJECTION: forcing a failure. [ 1477.057775][T28768] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.057814][T28768] CPU: 1 UID: 0 PID: 28768 Comm: syz.4.6753 Tainted: G L syzkaller #0 PREEMPT(full) [ 1477.057844][T28768] Tainted: [L]=SOFTLOCKUP [ 1477.057852][T28768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1477.057864][T28768] Call Trace: [ 1477.057874][T28768] [ 1477.057885][T28768] dump_stack_lvl+0xe8/0x150 [ 1477.057922][T28768] should_fail_ex+0x410/0x560 [ 1477.057955][T28768] should_failslab+0xa8/0x100 [ 1477.057987][T28768] __kmalloc_cache_noprof+0xa3/0x600 [ 1477.058012][T28768] ? io_ring_ctx_alloc+0x54/0xb80 [ 1477.058031][T28768] ? io_ring_ctx_alloc+0x54/0xb80 [ 1477.058056][T28768] io_ring_ctx_alloc+0x54/0xb80 [ 1477.058076][T28768] ? io_prepare_config+0x8c8/0xc70 [ 1477.058108][T28768] io_uring_create+0x50/0x990 [ 1477.058142][T28768] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1477.058168][T28768] ? __fget_files+0x2a/0x420 [ 1477.058196][T28768] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1477.058234][T28768] ? ksys_write+0x242/0x270 [ 1477.058267][T28768] __do_fast_syscall_32+0x27a/0x6b0 [ 1477.058295][T28768] ? do_fast_syscall_32+0x33/0x70 [ 1477.058319][T28768] ? asm_int80_emulation+0x1a/0x20 [ 1477.058338][T28768] ? do_int80_emulation+0x299/0x500 [ 1477.058366][T28768] do_fast_syscall_32+0x33/0x70 [ 1477.058390][T28768] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1477.058414][T28768] RIP: 0023:0xf7fc30ec [ 1477.058432][T28768] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1477.058449][T28768] RSP: 002b:00000000f547643c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1477.058471][T28768] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 1477.058486][T28768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1477.058498][T28768] RBP: 00000000f54764fc R08: 0000000000000000 R09: 0000000000000000 [ 1477.058510][T28768] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1477.058523][T28768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1477.058552][T28768] [ 1477.286528][T21158] snd-usb-6fire 6-1:1.0: can't set first interface. [ 1477.286559][T21158] snd-usb-6fire 6-1:1.0: probe with driver snd-usb-6fire failed with error -5 [ 1477.302198][T21158] usb 6-1: USB disconnect, device number 15 [ 1477.586847][ T25] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1477.777215][ T25] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1477.778614][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.778665][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1477.778712][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 1477.781334][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.781359][ T25] usb 4-1: Product: syz [ 1477.781373][ T25] usb 4-1: Manufacturer: syz [ 1477.781411][ T25] usb 4-1: SerialNumber: syz [ 1478.000733][T28776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.001338][T28776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.011705][T28776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.012280][T28776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.029831][T28776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.034559][T28776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.048282][T28776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.051388][T28776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.088811][T28788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.089582][T28788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.193515][ T25] ttusb_dec_send_command: command bulk message failed: error -71 [ 1478.193925][ T25] ttusb-dec 4-1:1.0: probe with driver ttusb-dec failed with error -71 [ 1478.213049][ T25] usb 4-1: USB disconnect, device number 127 [ 1478.294799][T28159] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1478.917274][T28159] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1479.032112][T28798] usb usb8: usbfs: process 28798 (syz.2.6763) did not claim interface 0 before use [ 1479.229947][T28159] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.657326][T28822] netlink: 'syz.2.6769': attribute type 9 has an invalid length. [ 1479.858141][T28159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.858171][T28159] usb 6-1: Product: syz [ 1479.858186][T28159] usb 6-1: Manufacturer: syz [ 1479.858201][T28159] usb 6-1: SerialNumber: syz [ 1480.015426][T28159] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1480.015476][T28159] dvb-usb: bulk message failed: -22 (3/0) [ 1480.098802][T28159] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1480.174978][T28159] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1480.175039][T28159] usb 6-1: media controller created [ 1480.187047][T28159] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1480.305890][T28828] __nla_validate_parse: 66 callbacks suppressed [ 1480.305905][T28828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6771'. [ 1480.418829][T28159] DVB: Unable to find symbol mt352_attach() [ 1480.418850][T28159] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1480.444997][T28792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.446021][T28792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.546571][T28832] input: syz0 as /devices/virtual/input/input166 [ 1480.568371][T28159] dvb-usb: bulk message failed: -22 (3/0) [ 1480.586848][T28159] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1480.642423][T28159] usb 6-1: USB disconnect, device number 16 [ 1481.025262][T28159] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1482.137196][T28858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6782'. [ 1482.143857][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 1482.143877][ T30] audit: type=1326 audit(1792063818.294:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28857 comm="syz.2.6782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1482.143926][ T30] audit: type=1326 audit(1792063818.294:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28857 comm="syz.2.6782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1482.144401][ T30] audit: type=1326 audit(1792063818.294:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28857 comm="syz.2.6782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1482.144616][ T30] audit: type=1326 audit(1792063818.294:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28857 comm="syz.2.6782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1482.144844][ T30] audit: type=1326 audit(1792063818.294:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28857 comm="syz.2.6782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1482.145598][ T30] audit: type=1326 audit(1792063818.294:10171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28857 comm="syz.2.6782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1482.145647][ T30] audit: type=1326 audit(1792063818.294:10172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28857 comm="syz.2.6782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1482.145688][ T30] audit: type=1326 audit(1792063818.294:10173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28857 comm="syz.2.6782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1482.146055][ T30] audit: type=1326 audit(1792063818.294:10174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28857 comm="syz.2.6782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1482.146496][ T30] audit: type=1326 audit(1792063818.294:10175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28857 comm="syz.2.6782" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1482.215440][T26750] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1482.236619][T28861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.238501][T28861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.691746][T26750] usb 6-1: Using ep0 maxpacket: 32 [ 1482.846708][T26750] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1483.013742][T28880] vimc link validate: Sensor A:src:640x480 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1483.159106][T26750] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.159124][T26750] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1483.159156][T26750] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1483.159198][T26750] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1483.159235][T26750] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1483.159250][T26750] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1483.724331][T28883] FAULT_INJECTION: forcing a failure. [ 1483.724331][T28883] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.724357][T28883] CPU: 0 UID: 0 PID: 28883 Comm: syz.3.6788 Tainted: G L syzkaller #0 PREEMPT(full) [ 1483.724374][T28883] Tainted: [L]=SOFTLOCKUP [ 1483.724382][T28883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1483.724394][T28883] Call Trace: [ 1483.724403][T28883] [ 1483.724412][T28883] dump_stack_lvl+0xe8/0x150 [ 1483.724447][T28883] should_fail_ex+0x410/0x560 [ 1483.724474][T28883] should_failslab+0xa8/0x100 [ 1483.724490][T28883] ? dst_alloc+0x105/0x170 [ 1483.724517][T28883] kmem_cache_alloc_noprof+0xa1/0x600 [ 1483.724535][T28883] ? lock_acquire+0x115/0x350 [ 1483.724560][T28883] ? dst_alloc+0x105/0x170 [ 1483.724591][T28883] dst_alloc+0x105/0x170 [ 1483.724620][T28883] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1483.724662][T28883] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1483.724680][T28883] ip_route_output_key_hash+0x18d/0x2a0 [ 1483.724712][T28883] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1483.724746][T28883] ? trace_contention_end+0x3d/0x140 [ 1483.724771][T28883] ? __mutex_lock+0x30b/0x1550 [ 1483.724787][T28883] ip_route_output_flow+0x2a/0x150 [ 1483.724804][T28883] arp_req_set+0x1bd/0xce0 [ 1483.724819][T28883] ? arp_ioctl+0x387/0x490 [ 1483.724841][T28883] ? __pfx_arp_req_set+0x10/0x10 [ 1483.724889][T28883] arp_ioctl+0x396/0x490 [ 1483.724916][T28883] ? __pfx_arp_ioctl+0x10/0x10 [ 1483.724940][T28883] inet_ioctl+0x3c4/0x560 [ 1483.724957][T28883] ? __pfx_inet_ioctl+0x10/0x10 [ 1483.724970][T28883] ? kasan_quarantine_put+0xbb/0x1f0 [ 1483.725010][T28883] ? do_vfs_ioctl+0x116f/0x1530 [ 1483.725046][T28883] sock_do_ioctl+0x101/0x320 [ 1483.725074][T28883] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1483.725096][T28883] compat_sock_ioctl+0xbb9/0xcc0 [ 1483.725113][T28883] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1483.725132][T28883] ? __fget_files+0x3a2/0x420 [ 1483.725151][T28883] ? __fget_files+0x2a/0x420 [ 1483.725173][T28883] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1483.725198][T28883] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1483.725221][T28883] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1483.725235][T28883] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1483.725248][T28883] ? __fget_files+0x3a2/0x420 [ 1483.725261][T28883] ? fput+0xa0/0xd0 [ 1483.725280][T28883] ? ksys_write+0x242/0x270 [ 1483.725313][T28883] __do_fast_syscall_32+0x27a/0x6b0 [ 1483.725338][T28883] ? do_fast_syscall_32+0x33/0x70 [ 1483.725361][T28883] ? asm_int80_emulation+0x1a/0x20 [ 1483.725373][T28883] ? do_int80_emulation+0x299/0x500 [ 1483.725385][T28883] ? trace_irq_disable+0x3b/0x140 [ 1483.725399][T28883] do_fast_syscall_32+0x33/0x70 [ 1483.725412][T28883] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1483.725427][T28883] RIP: 0023:0xf742f0ec [ 1483.725447][T28883] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1483.725464][T28883] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1483.725486][T28883] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008955 [ 1483.725500][T28883] RDX: 0000000080000c80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1483.725512][T28883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1483.725518][T28883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1483.725525][T28883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1483.725541][T28883] [ 1483.798448][T26750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.798476][T26750] usb 6-1: Product: syz [ 1483.798490][T26750] usb 6-1: Manufacturer: syz [ 1483.798505][T26750] usb 6-1: SerialNumber: syz [ 1484.052748][T28887] input: syz0 as /devices/virtual/input/input168 [ 1484.107204][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1484.211395][T26750] usb 6-1: selecting invalid altsetting 0 [ 1484.213039][T26750] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 1484.213949][T26750] usb 6-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1484.377554][T26750] usb 6-1: USB disconnect, device number 17 [ 1484.416138][T24985] udevd[24985]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1484.701208][T28895] input: syz0 as /devices/virtual/input/input169 [ 1485.086848][T26942] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1485.267051][T26942] usb 4-1: Using ep0 maxpacket: 32 [ 1485.273811][T26942] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1485.275110][T26942] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.275154][T26942] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1485.275170][T26942] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1485.275200][T26942] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1485.327082][T26942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.327110][T26942] usb 4-1: Product: syz [ 1485.327124][T26942] usb 4-1: Manufacturer: syz [ 1485.327139][T26942] usb 4-1: SerialNumber: syz [ 1485.375377][T26942] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1485.375434][T26942] imon 4-1:155.0: unable to initialize intf0, err -19 [ 1485.375461][T26942] imon:imon_probe: failed to initialize context! [ 1485.375468][T26942] imon 4-1:155.0: unable to register, err -19 [ 1485.396810][T13659] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1485.559312][T13659] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1485.560284][T13659] usb 6-1: not running at top speed; connect to a high speed hub [ 1485.560318][T13659] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice= 0.40 [ 1485.566796][T13659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.566822][T13659] usb 6-1: Product: syz [ 1485.566836][T13659] usb 6-1: Manufacturer: syz [ 1485.566870][T13659] usb 6-1: SerialNumber: syz [ 1486.051332][T13659] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1486.051661][T13659] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1486.062932][T13659] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1486.064554][T13659] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1486.072528][T13659] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1486.129567][T26750] usb 4-1: USB disconnect, device number 2 [ 1486.184821][T28916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6800'. [ 1486.187979][T13659] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1486.234457][T13659] usb 6-1: USB disconnect, device number 18 [ 1486.309078][T25357] udevd[25357]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1487.129217][T28937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6806'. [ 1487.376340][T28948] netlink: 'syz.5.6809': attribute type 1 has an invalid length. [ 1487.457821][T28953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6809'. [ 1487.614530][T28948] bond1: entered promiscuous mode [ 1487.614804][T28948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1487.615576][T28953] bond1: entered allmulticast mode [ 1488.011749][T28967] batadv_slave_1: entered promiscuous mode [ 1488.240923][T28980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6820'. [ 1488.426135][T28987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.427006][T28983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6821'. [ 1488.435454][T28987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.437312][T28985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6821'. [ 1488.473219][T28987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.475422][T28987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.551207][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1488.551291][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.551894][T21165] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1489.101365][T21165] usb 6-1: Using ep0 maxpacket: 32 [ 1489.157780][T28998] syzkaller1: entered promiscuous mode [ 1489.157806][T28998] syzkaller1: entered allmulticast mode [ 1489.294517][T21165] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1489.305142][ T4984] Dev loop8: unable to read RDB block 1 [ 1489.305188][ T4984] loop8: unable to read partition table [ 1489.305449][ T4984] loop8: partition table beyond EOD, truncated [ 1489.591120][T21165] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16 [ 1489.591155][T21165] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1489.591177][T21165] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1489.904680][T21165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.904744][T21165] usb 6-1: Product: ъ [ 1489.904777][T21165] usb 6-1: Manufacturer: Л [ 1489.904815][T21165] usb 6-1: SerialNumber: 班灿ᘞ䟒榅偞ꝯ섇眉덏娲￉꣼옏䢃끅૶ề씰哌뎛ㅞ筹᜖뀿᫨筂洧㠃좘둏ꕭ앭뇄䭅쒳ᾘ除琩扫䌺᮴氿곡ဃ댻푫鰝齫丵๫헇೸ꈨ伷鯽溨啗⏋屠惿郟줉孭⾽둃ࣷ쩃掼㣓Ṣ੽袂㒤梸䖡ꊘ᥁찟졞닾鱤悌퀗藿ꞏ驧ᎏ탷㧉쐃寽⴨ﺸߏ업胞ಉꉭᶚ㓤巚 [ 1490.064103][T28978] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1490.064254][T28978] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1490.701287][T21165] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1490.711698][T21165] usb 6-1: USB disconnect, device number 19 [ 1490.775826][T26750] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1491.001062][T29031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.005160][T29031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.088932][T26750] usb 4-1: device descriptor read/64, error -71 [ 1491.306771][T29044] bridge_slave_0: left allmulticast mode [ 1491.306790][T29044] bridge_slave_0: left promiscuous mode [ 1491.308955][T29044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.311779][T29044] bridge_slave_1: left allmulticast mode [ 1491.311795][T29044] bridge_slave_1: left promiscuous mode [ 1491.311942][T29044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.354381][T29044] bond0: (slave bond_slave_0): Releasing backup interface [ 1491.371008][T29044] bond0: (slave bond_slave_1): Releasing backup interface [ 1491.378377][T29044] team0: Port device team_slave_0 removed [ 1491.383211][T29044] team0: Port device team_slave_1 removed [ 1491.383979][T29044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1491.384729][T29044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1491.389055][T29044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1491.389076][T29044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1491.393271][T29044] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1491.412960][T26750] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1491.604055][T29047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6839'. [ 1491.627560][T29047] vxlan0: entered promiscuous mode [ 1491.647857][T28619] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.647904][T28619] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.647962][T28619] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.647996][T28619] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1491.723793][T26750] usb 4-1: device descriptor read/64, error -71 [ 1491.786090][ T4984] Dev loop8: unable to read RDB block 1 [ 1491.786154][ T4984] loop8: unable to read partition table [ 1491.786473][ T4984] loop8: partition table beyond EOD, truncated [ 1491.901566][T26750] usb usb4-port1: attempt power cycle [ 1491.983476][T29054] netlink: 'syz.1.6844': attribute type 1 has an invalid length. [ 1491.983501][T29054] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6844'. [ 1492.181337][T29063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.182616][T29063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.283415][T26750] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1492.298841][T26750] usb 4-1: device descriptor read/8, error -71 [ 1492.536814][T26750] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1492.557428][T26750] usb 4-1: device descriptor read/8, error -71 [ 1492.666903][T26750] usb usb4-port1: unable to enumerate USB device [ 1493.037463][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 1493.037523][ T30] audit: type=1326 audit(1792063829.204:10261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29069 comm="syz.2.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1493.037661][ T30] audit: type=1326 audit(1792063829.204:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29069 comm="syz.2.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1493.038158][ T30] audit: type=1326 audit(1792063829.204:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29069 comm="syz.2.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1493.038284][ T30] audit: type=1326 audit(1792063829.204:10264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29069 comm="syz.2.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1493.038511][ T30] audit: type=1326 audit(1792063829.204:10265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29069 comm="syz.2.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1493.039427][ T30] audit: type=1326 audit(1792063829.204:10266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29069 comm="syz.2.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1493.040045][ T30] audit: type=1326 audit(1792063829.204:10267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29069 comm="syz.2.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1493.040477][ T30] audit: type=1326 audit(1792063829.204:10268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29069 comm="syz.2.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=306 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1493.040832][ T30] audit: type=1326 audit(1792063829.204:10269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29069 comm="syz.2.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1493.041033][ T30] audit: type=1326 audit(1792063829.204:10270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29069 comm="syz.2.6850" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x7ffc0000 [ 1493.049627][T29070] fuse: Bad value for 'user_id' [ 1493.049644][T29070] fuse: Bad value for 'user_id' [ 1493.260809][T29076] netlink: 'syz.1.6851': attribute type 9 has an invalid length. [ 1493.512118][T29081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.513024][T29081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.736161][ T31] INFO: task kworker/1:6:5710 blocked for more than 143 seconds. [ 1493.736189][ T31] Tainted: G L syzkaller #0 [ 1493.736200][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1493.736209][ T31] task:kworker/1:6 state:D stack:13856 pid:5710 tgid:5710 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1493.736254][ T31] Workqueue: events_freezable usb_stor_scan_dwork [ 1493.736373][ T31] Call Trace: [ 1493.736380][ T31] [ 1493.736390][ T31] __schedule+0x17db/0x58f0 [ 1493.736432][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1493.736467][ T31] ? __pfx___schedule+0x10/0x10 [ 1493.736495][ T31] ? schedule+0x90/0x2b0 [ 1493.736515][ T31] schedule+0x164/0x2b0 [ 1493.736537][ T31] schedule_preempt_disabled+0x13/0x30 [ 1493.736555][ T31] __mutex_lock+0x7c1/0x1550 [ 1493.736583][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1493.736608][ T31] ? usb_stor_scan_dwork+0xec/0x2c0 [ 1493.736637][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1493.736667][ T31] ? lock_acquire+0x115/0x350 [ 1493.736699][ T31] usb_stor_scan_dwork+0xec/0x2c0 [ 1493.736730][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1493.736765][ T31] process_scheduled_works+0xc3d/0x1630 [ 1493.736823][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1493.736857][ T31] ? assign_work+0x3cf/0x5d0 [ 1493.736889][ T31] worker_thread+0xa47/0xfb0 [ 1493.736931][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1493.736970][ T31] kthread+0x38b/0x480 [ 1493.736996][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1493.737021][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.737043][ T31] ret_from_fork+0x514/0xb70 [ 1493.737080][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1493.737100][ T31] ? __switch_to+0xc89/0x1420 [ 1493.737127][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.737149][ T31] ret_from_fork_asm+0x1a/0x30 [ 1493.737183][ T31] [ 1493.737225][ T31] INFO: task kworker/0:10:21168 blocked for more than 143 seconds. [ 1493.737244][ T31] Tainted: G L syzkaller #0 [ 1493.737255][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1493.737265][ T31] task:kworker/0:10 state:D stack:22592 pid:21168 tgid:21168 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1493.737321][ T31] Workqueue: events_freezable usb_stor_scan_dwork [ 1493.737352][ T31] Call Trace: [ 1493.737359][ T31] [ 1493.737372][ T31] __schedule+0x17db/0x58f0 [ 1493.737412][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1493.737444][ T31] ? __pfx___schedule+0x10/0x10 [ 1493.737469][ T31] ? schedule+0x90/0x2b0 [ 1493.737491][ T31] schedule+0x164/0x2b0 [ 1493.737511][ T31] schedule_preempt_disabled+0x13/0x30 [ 1493.737531][ T31] __mutex_lock+0x7c1/0x1550 [ 1493.737560][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1493.737585][ T31] ? usb_stor_scan_dwork+0xec/0x2c0 [ 1493.737615][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1493.737645][ T31] ? lock_acquire+0x115/0x350 [ 1493.737679][ T31] usb_stor_scan_dwork+0xec/0x2c0 [ 1493.737707][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1493.737735][ T31] process_scheduled_works+0xc3d/0x1630 [ 1493.737793][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1493.737828][ T31] ? assign_work+0x3cf/0x5d0 [ 1493.737860][ T31] worker_thread+0xa47/0xfb0 [ 1493.737902][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1493.737941][ T31] kthread+0x38b/0x480 [ 1493.737962][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1493.737988][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.738010][ T31] ret_from_fork+0x514/0xb70 [ 1493.738034][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1493.738053][ T31] ? load_gs_index+0x97/0xc0 [ 1493.738087][ T31] ? __switch_to+0xc89/0x1420 [ 1493.738118][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.738141][ T31] ret_from_fork_asm+0x1a/0x30 [ 1493.738177][ T31] [ 1493.738274][ T31] [ 1493.738274][ T31] Showing all locks held in the system: [ 1493.738286][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1493.738314][ T31] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1493.738407][ T31] locks held by getty/5375: 2, on CPU#0: [ 1493.738420][ T31] #0: ffff8880340950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1493.738536][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1493.738591][ T31] locks held by kworker/1:6/5710: 3, on CPU#1: [ 1493.738604][ T31] #0: ffff88801c06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1493.738653][ T31] #1: ffffc90004ce7c40 ((work_completion)(&(&us->scan_dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1493.738706][ T31] #2: ffff888034c88ef0 (&us_interface_key[i]){+.+.}-{4:4}, at: usb_stor_scan_dwork+0xec/0x2c0 [ 1493.738760][ T31] locks held by kworker/1:9/13659: 6, on CPU#1: [ 1493.738774][ T31] #0: ffff888022e84540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1493.738826][ T31] #1: ffffc90003c9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1493.738874][ T31] #2: ffff888022b0a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1493.738940][ T31] #3: ffff888022b0e568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1493.738993][ T31] #4: ffff88802b0e8b60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1493.739044][ T31] #5: ffffffff90afed08 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 1493.739109][ T31] locks held by kworker/0:6/16477: 6, on CPU#0: [ 1493.739124][ T31] #0: ffff888022e84540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1493.739177][ T31] #1: ffffc90004497c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1493.739232][ T31] #2: ffff888022b451d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1493.739287][ T31] #3: ffff88802c7111d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1493.739392][ T31] #4: ffff8880271dc1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1493.739448][ T31] #5: ffff88807c8a0ef0 (&us_interface_key[i]){+.+.}-{4:4}, at: ene_ub6250_probe+0x34e/0x5f0 [ 1493.739499][ T31] locks held by kworker/1:13/21160: 6, on CPU#1: [ 1493.739514][ T31] #0: ffff888022e84540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1493.739568][ T31] #1: ffffc9000dae7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1493.739612][ T31] #2: ffff888022f9b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1493.739663][ T31] #3: ffff88807aef71d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1493.739714][ T31] #4: ffff88802c7841a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1493.739772][ T31] #5: ffff888034c88ef0 (&us_interface_key[i]){+.+.}-{4:4}, at: ene_ub6250_probe+0x34e/0x5f0 [ 1493.739811][ T31] locks held by kworker/0:10/21168: 3, on CPU#0: [ 1493.739823][ T31] #0: ffff88801c06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1493.739875][ T31] #1: ffffc90004e2fc40 ((work_completion)(&(&us->scan_dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1493.739925][ T31] #2: ffff88807c8a0ef0 (&us_interface_key[i]){+.+.}-{4:4}, at: usb_stor_scan_dwork+0xec/0x2c0 [ 1493.739981][ T31] locks held by udevd/24904: 4, on CPU#0: [ 1493.739996][ T31] #0: ffff888054738998 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1493.740046][ T31] #1: ffff8880336aa080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1493.740140][ T31] #2: ffff888075e83008 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1493.740197][ T31] #3: ffff88807aef71d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1493.740251][ T31] locks held by udevd/24987: 4, on CPU#0: [ 1493.740266][ T31] #0: ffff888055f501b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1493.740315][ T31] #1: ffff8880335e7080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1493.740368][ T31] #2: ffff88807799b878 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1493.740425][ T31] #3: ffff88802c7111d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1493.740494][ T31] locks held by syz.1.6855/29085: 3, on CPU#1: [ 1493.740508][ T31] #0: ffff88802823c430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0xc2/0xd50 [ 1493.740647][ T31] #1: ffff888027d8e6d0 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: loop_set_status+0x2ce/0xd50 [ 1493.740699][ T31] #2: ffff888027d8e708 (&q->q_usage_counter(queue)#9){+.+.}-{0:0}, at: loop_set_status+0x2ce/0xd50 [ 1493.740749][ T31] locks held by syz.1.6855/29086: 1, last CPU#1: [ 1493.740762][ T31] #0: ffff88807b2f3440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1493.740820][ T31] [ 1493.740830][ T31] ============================================= [ 1493.740830][ T31] [ 1493.740844][ T31] NMI backtrace for cpu 0 [ 1493.740860][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1493.740884][ T31] Tainted: [L]=SOFTLOCKUP [ 1493.740892][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1493.740902][ T31] Call Trace: [ 1493.740911][ T31] [ 1493.740919][ T31] dump_stack_lvl+0xe8/0x150 [ 1493.740948][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1493.740976][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1493.741018][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1493.741050][ T31] sys_info+0x135/0x170 [ 1493.741083][ T31] watchdog+0xfd7/0x1030 [ 1493.741114][ T31] ? watchdog+0x1c7/0x1030 [ 1493.741142][ T31] kthread+0x38b/0x480 [ 1493.741164][ T31] ? __pfx_watchdog+0x10/0x10 [ 1493.741184][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.741205][ T31] ret_from_fork+0x514/0xb70 [ 1493.741226][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1493.741244][ T31] ? __switch_to+0xc89/0x1420 [ 1493.741273][ T31] ? __pfx_kthread+0x10/0x10 [ 1493.741292][ T31] ret_from_fork_asm+0x1a/0x30 [ 1493.741322][ T31] [ 1493.741330][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1493.741443][ C1] NMI backtrace for cpu 1 [ 1493.741460][ C1] CPU: 1 UID: 0 PID: 29086 Comm: syz.1.6855 Tainted: G L syzkaller #0 PREEMPT(full) [ 1493.741486][ C1] Tainted: [L]=SOFTLOCKUP [ 1493.741493][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1493.741503][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 1493.741528][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d f4 bf ab 0c 48 89 de 5b e9 23 5e 65 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 88 ff cd 12 65 48 8b 15 88 ff [ 1493.741544][ C1] RSP: 0018:ffffc90000a18e80 EFLAGS: 00000006 [ 1493.741561][ C1] RAX: ffffffff81b4699a RBX: ffff8880b8528280 RCX: ffff88801ef58000 [ 1493.741582][ C1] RDX: 0000000001000001 RSI: 0000015bc1cd8071 RDI: 0000015bc1cdce2c [ 1493.741596][ C1] RBP: ffff8880b85282e8 R08: 0000000001000001 R09: 0000000000000001 [ 1493.741608][ C1] R10: dffffc0000000000 R11: fffff520001431a8 R12: 0000015bc1cdce2c [ 1493.741621][ C1] R13: dffffc0000000000 R14: 0000015bc1cd8071 R15: ffff888022bfd410 [ 1493.741635][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0063) knlGS:00000000f53d5b40 [ 1493.741652][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1493.741665][ C1] CR2: 0000000080002a40 CR3: 0000000043cba000 CR4: 00000000003526f0 [ 1493.741681][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1493.741693][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1493.741706][ C1] Call Trace: [ 1493.741714][ C1] [ 1493.741720][ C1] hrtimer_interrupt+0x86f/0xaa0 [ 1493.741767][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1493.741790][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1493.741809][ C1] [ 1493.741816][ C1] [ 1493.741823][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1493.741844][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 1493.741880][ C1] Code: ff ff ff e8 f0 4c 45 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 52 a7 f2 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 07 45 da [ 1493.741895][ C1] RSP: 0018:ffffc900059cef60 EFLAGS: 00000296 [ 1493.741910][ C1] RAX: 4a65f9c60e963f00 RBX: 0000000000000000 RCX: 0000000000000046 [ 1493.741922][ C1] RDX: 00000000bca828ff RSI: ffffffff8e6f1b7c RDI: ffffffff8c6ddb80 [ 1493.741935][ C1] RBP: ffff88801ef58000 R08: ffffffff8243109a R09: 0000000000000000 [ 1493.741948][ C1] R10: ffff88801ef58920 R11: ffffffff81b2c5d0 R12: ffffffff8fd5c8e0 [ 1493.741961][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1493.741974][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1493.741994][ C1] ? __update_page_owner_handle+0x5a/0x580 [ 1493.742026][ C1] ? __update_page_owner_handle+0x5a/0x580 [ 1493.742048][ C1] __update_page_owner_handle+0x77/0x580 [ 1493.742069][ C1] ? __update_page_owner_handle+0x5a/0x580 [ 1493.742092][ C1] ? __do_fast_syscall_32+0x27a/0x6b0 [ 1493.742116][ C1] __set_page_owner+0x10a/0x4c0 [ 1493.742140][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1493.742160][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 1493.742187][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1493.742209][ C1] post_alloc_hook+0x1f9/0x250 [ 1493.742229][ C1] get_page_from_freelist+0x2209/0x2280 [ 1493.742256][ C1] ? lock_acquire+0x115/0x350 [ 1493.742288][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1493.742311][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1493.742334][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 1493.742363][ C1] alloc_pages_mpol+0x21e/0x390 [ 1493.742389][ C1] folio_alloc_mpol_noprof+0x39/0x160 [ 1493.742414][ C1] shmem_alloc_and_add_folio+0x43e/0xf60 [ 1493.742440][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 1493.742468][ C1] ? filemap_map_pages+0x1d1/0x2170 [ 1493.742485][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 1493.742509][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1493.742536][ C1] ? shmem_allowable_huge_orders+0x61e/0x6c0 [ 1493.742563][ C1] shmem_get_folio_gfp+0x5da/0x16d0 [ 1493.742600][ C1] shmem_fault+0x179/0x390 [ 1493.742628][ C1] __do_fault+0x138/0x2a0 [ 1493.742647][ C1] ? do_pte_missing+0x140c/0x34b0 [ 1493.742666][ C1] do_pte_missing+0x2215/0x34b0 [ 1493.742690][ C1] ? handle_mm_fault+0xf1/0x3750 [ 1493.742717][ C1] handle_mm_fault+0x1a53/0x3750 [ 1493.742747][ C1] ? handle_mm_fault+0xf1/0x3750 [ 1493.742776][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1493.742801][ C1] ? follow_page_pte+0x748/0xf10 [ 1493.742829][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 1493.742859][ C1] __get_user_pages+0x1675/0x2750 [ 1493.742898][ C1] populate_vma_page_range+0x2be/0x3c0 [ 1493.742923][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1493.742949][ C1] ? down_read+0x2be/0x330 [ 1493.742971][ C1] __mm_populate+0x25f/0x390 [ 1493.742994][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1493.743022][ C1] vm_mmap_pgoff+0x353/0x4e0 [ 1493.743047][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1493.743068][ C1] ? rcu_is_watching+0x16/0xb0 [ 1493.743092][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 1493.743121][ C1] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 1493.743147][ C1] __do_fast_syscall_32+0x27a/0x6b0 [ 1493.743168][ C1] ? do_fast_syscall_32+0x33/0x70 [ 1493.743189][ C1] ? irqentry_exit+0x10f/0x920 [ 1493.743210][ C1] do_fast_syscall_32+0x33/0x70 [ 1493.743230][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1493.743251][ C1] RIP: 0023:0xf7f490ec [ 1493.743264][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1493.743277][ C1] RSP: 002b:00000000f53d550c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 1493.743295][ C1] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 1493.743308][ C1] RDX: 0000000006ebbeea RSI: 0000000000008031 RDI: 00000000ffffffff [ 1493.743320][ C1] RBP: 0000000028f43000 R08: 0000000000000000 R09: 0000000000000000 [ 1493.743331][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1493.743343][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1493.743363][ C1] [ 1493.743420][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1495.288704][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1495.299378][ T31] Tainted: [L]=SOFTLOCKUP [ 1495.303690][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1495.313741][ T31] Call Trace: [ 1495.317016][ T31] [ 1495.319938][ T31] vpanic+0x56d/0xa60 [ 1495.323929][ T31] ? __pfx_vpanic+0x10/0x10 [ 1495.328432][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 1495.334002][ T31] panic+0xc5/0xd0 [ 1495.337737][ T31] ? __pfx_panic+0x10/0x10 [ 1495.342157][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 1495.347179][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1495.353343][ T31] watchdog+0x1030/0x1030 [ 1495.357678][ T31] ? watchdog+0x1c7/0x1030 [ 1495.362104][ T31] kthread+0x38b/0x480 [ 1495.366168][ T31] ? __pfx_watchdog+0x10/0x10 [ 1495.370836][ T31] ? __pfx_kthread+0x10/0x10 [ 1495.375424][ T31] ret_from_fork+0x514/0xb70 [ 1495.380011][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.385116][ T31] ? __switch_to+0xc89/0x1420 [ 1495.389798][ T31] ? __pfx_kthread+0x10/0x10 [ 1495.394383][ T31] ret_from_fork_asm+0x1a/0x30 [ 1495.399149][ T31] [ 1495.402591][ T31] Kernel Offset: disabled [ 1495.406958][ T31] Rebooting in 86400 seconds..