last executing test programs: 4m10.561506704s ago: executing program 3 (id=3261): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x2d, 0x301, 0x270bd26, 0x25dfdbfa, {0x6}}, 0x14}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, r4}, 0x94) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/157) 4m7.911868216s ago: executing program 3 (id=3270): io_submit(0x0, 0xfffffffffffffcf9, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000240)={"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"}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) socket$key(0xf, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf5b}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4004010) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="110725bd7000fbdbc12504"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0xfffe, 0xd, 0x3d7a, 0x3}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4m6.849232344s ago: executing program 3 (id=3273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x25e6d9e3, 0x100}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@subsystem='blkio'}, {@subsystem='cpuacct'}, {@subsystem='memory'}, {}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x5}) setxattr$incfs_size(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=0x3, 0x8, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xe4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x400001) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/wireless\x00') preadv(r9, &(0x7f0000001580)=[{&(0x7f0000001500)=""/27, 0x1b}], 0x1, 0xb537, 0x9c) 4m1.156220562s ago: executing program 3 (id=3290): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x52, 0x1, 0x0, "3ad38eff230c00000000202900000004100000410000000000000300"}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[@wr_drn={0x6e, 0x20, {0x3, 0x100000000}}, @wr_drn={0x6e, 0x20, {0x1, 0x400}}, @out_dx={0xaa, 0x28, {0x6631, 0x7, 0x8}}, @out_dx={0xaa, 0x28, {0x3a20, 0x5, 0x8}}, @in_dx={0x82, 0x20, {0x6001, 0x6}}, @wr_crn={0x46, 0x20, {0x8, 0x100}}, @set_irq_handler={0xbe, 0x20, {0x20, 0x1}}], 0xf0}) ioctl$KVM_GET_SREGS2(r1, 0x8140aecc, &(0x7f0000000600)) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x29, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2bf9c14, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) unshare(0x40000000) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) close(0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x4b, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 3m55.327231109s ago: executing program 3 (id=3308): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010000009500200c00"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010100}}, 0x24) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89ef, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtfilter={0x8a48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8a14, 0x2, [@TCA_MATCHALL_ACT={0x240, 0x2, [@m_xt={0x80, 0xd, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x29, 0x6, "cf3c487c431827e96824716d129914411c9548539908385f4f2fa0b08b818eef0ed9507f26"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x70, 0x16, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7c64}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8f72}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}]}, {0x11, 0x6, "89583ed8985982e69ecf2b4768"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0xffffffffffffffff, 0x8, 0x8}, 0x1, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x8000, 0xb74456bbaa1b1a52, 0x2, 0xa98}, 0x2, r11}}]}, {0x48, 0x6, "dbc92d954ad1f6d5b3b4f09388c8ae16eddc9cc0b235db19d0201bd6216bcd9cd937b47daf7c64b3f0973421a3b66bc964933d44ff5c15944ab16803ca4c163fecaec082"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x98, 0x1c, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1179, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1951, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7, 0x0, 0x10001}}]}, {0x3b, 0x6, "7f5bfdba429baa42e2825d91edb9ed8208d72c9b71d7e3bfdc7310bce01cf71d7979b769ec7475b8fe0fbad7e727201c58a7667c596a2e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x8}}, @TCA_MATCHALL_ACT={0x87a8, 0x2, [@m_pedit={0x59cc, 0x19, 0x0, 0x0, {{0xa}, {0x58d4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x3ff, 0xfe90, 0x5, 0x74, 0x95}, 0x2, 0xaa, [{0x7f, 0x6, 0x3, 0x3, 0x7, 0x4}]}, [{0xd, 0x4, 0x8, 0x3, 0x7, 0x43}, {0x1, 0x2, 0x6, 0x1, 0xfffff397, 0x401}, {0xfffffffe, 0x4, 0x5, 0x5, 0x4000000, 0x3}, {0x7fffffff, 0x7, 0x0, 0x7, 0xffc0, 0xfffffffa}, {0x1, 0x7fffffff, 0x7, 0x9, 0x800, 0x2}, {0x0, 0x101, 0x5, 0xf0, 0xc, 0x616}, {0x2, 0x5, 0x100, 0xfffffff9, 0x44, 0x2}, {0x0, 0x8, 0xc, 0x0, 0x9, 0x7}, {0x80000000, 0x1, 0x7, 0x9, 0x8, 0x7}, {0xfffffff8, 0x8, 0x2, 0x5, 0x6, 0x3}, {0x5, 0x3, 0x3ff000, 0x9, 0x9, 0xffff}, {0x1, 0xbb5, 0x10000, 0x3, 0x2, 0x6}, {0x0, 0xa, 0x0, 0xff, 0x101, 0x3}, {0x80000001, 0x4, 0x1400000, 0x2, 0x6, 0x30fc}, {0x4, 0x0, 0x7f, 0x17, 0x9, 0xd5a}, {0xb, 0x8, 0x1, 0x800, 0x101, 0x5}, {0x8, 0x5, 0x5, 0x4b, 0xffffff7f, 0x3}, {0x3d, 0x2, 0xd, 0x7fff, 0x7, 0xa7}, {0x2, 0x800, 0x5c1b8214, 0x5, 0xf, 0x1}, {0x9ad3, 0x8, 0x7fff, 0x8, 0x3, 0x81}, {0x0, 0x401, 0x3, 0x3, 0xffffffff, 0x7}, {0x32, 0xb, 0x7, 0x88, 0x4}, {0x4, 0x2a5, 0x100, 0xbb8, 0xfffffff7, 0x3}, {0x101, 0x101, 0x5, 0xffff0000, 0x7ff}, {0x6, 0x8, 0xffffffff, 0x9, 0xfffffbff, 0x101}, {0x2b8b, 0xf0f, 0x8, 0x64d, 0x95, 0x2}, {0x5, 0x7, 0x1, 0x3, 0x37097e44, 0x5}, {0x4, 0x934, 0x7fffffff, 0x2, 0xb0a, 0xe6}, {0x2, 0x0, 0x9ce, 0x7, 0x4, 0x54e}, {0x3, 0x8, 0x100, 0x6, 0x52a, 0xc}, {0x5, 0x1, 0xffffff7e, 0x6fbf, 0xfffffffa, 0x6}, {0x1, 0x20000000, 0xfffffff8, 0x4d0, 0x0, 0x2}, {0x4, 0xc, 0x400, 0x5, 0xbd09, 0x4}, {0xf0a, 0x5, 0x96be, 0x401, 0x6, 0x1}, {0x3ff, 0x7, 0x400, 0xffffffff, 0x80}, {0x32e0, 0x5, 0x7fff, 0x8, 0x79f7, 0x8}, {0x3, 0x7, 0x1, 0x6, 0x7, 0x353}, {0x2, 0xfffffff0, 0x10000, 0x9, 0x6, 0x8}, {0x4, 0xfff, 0x9, 0xd58, 0x5, 0x12}, {0x9, 0x2, 0x690, 0x401, 0x2, 0x5}, {0x7, 0xfff, 0x7, 0x3, 0x7fff, 0x7}, {0xff, 0x0, 0xf, 0xc0000, 0x5, 0x40}, {0x0, 0x2c0b, 0x200, 0x1, 0x9cc, 0x100}, {0xfffffffc, 0xee3b, 0xc69, 0x3e15, 0xd, 0x80}, {0xfffffffc, 0x2, 0x410e, 0x3, 0x4, 0xc326}, {0xfffffff8, 0x1, 0xc68, 0xd7c, 0x4, 0x2}, {0x7, 0x4, 0x101, 0x2, 0x4, 0x7f}, {0x9, 0x9, 0x5, 0x9, 0xfffffff7, 0xd}, {0x0, 0x1, 0x4, 0x9, 0x5, 0xfffff000}, {0xb88, 0xcac, 0x18e4, 0x7fff, 0x4, 0x7}, {0x4, 0x20000, 0x4, 0x80000001, 0x4, 0x7}, {0x7fffffff, 0x6, 0x7, 0x8, 0x0, 0xfffffffc}, {0x91c, 0x51, 0x6, 0x0, 0xa06e, 0x6}, {0x1, 0xe, 0x973f, 0x0, 0x5bb3, 0x3}, {0x10, 0x6, 0x10, 0x81, 0x9, 0xfff}, {0x5, 0x2, 0x5, 0x6, 0x4, 0xfffffff9}, {0x7fff, 0xb8, 0xc5d, 0x7, 0x9, 0x8}, {0x800000, 0x807, 0x36001a1d, 0x9, 0x9, 0x9}, {0x7, 0x2, 0x1c, 0x470c2eed, 0x3, 0xfffffffe}, {0xffff, 0x0, 0x0, 0x4, 0x5, 0x5}, {0x3, 0x7ff, 0x101, 0xc, 0x3e, 0x10}, {0xe42, 0xe, 0xff, 0xc, 0x7, 0x7}, {0x6, 0x5, 0x4, 0xfffffffd, 0x800, 0x2}, {0x2, 0x4309db20, 0xfffffff8, 0x1, 0xff, 0x8}, {0xfffffff9, 0x6, 0x7f, 0x4, 0x2fb, 0x5}, {0x319, 0xf, 0xbce, 0x6, 0x7ff, 0x1b6d}, {0x3, 0x9, 0x5, 0x5, 0x3ff, 0x8000}, {0x2, 0x0, 0xc00, 0xf0, 0x63b, 0x6cceacae}, {0x6, 0xd, 0x9, 0x7, 0x976, 0x5}, {0x3, 0x8, 0x9, 0x3, 0x4}, {0x1, 0xa, 0xd021, 0x6, 0x9, 0xaa3b}, {0x9, 0x4, 0xfffffff1, 0x4, 0x1, 0x5}, {0x4, 0xe, 0x1, 0xe8, 0x4, 0x1}, {0x8, 0xfffffffc, 0x2, 0x9, 0x9, 0x3}, {0x4, 0x4, 0xf, 0x43, 0x28, 0xffc00000}, {0x2, 0x3fd, 0x0, 0x1ff, 0x3, 0x5}, {0x6, 0x3, 0x8, 0x7fffffff, 0xb, 0x7}, {0x3, 0x1, 0x4, 0x8000, 0x94, 0xdd}, {0xffffffff, 0x1, 0x80, 0x5, 0x6, 0x7}, {0x7, 0x0, 0x6, 0xe, 0x0, 0x8}, {0x7, 0x3, 0x3, 0x3, 0x40, 0xe61e}, {0x2, 0x6d5, 0xdcf, 0x502, 0x1, 0x401}, {0x4, 0x400, 0x6, 0x6, 0x7fff, 0x81}, {0x5, 0x5, 0xfd80, 0xfffffffc, 0x1, 0x6}, {0xb, 0x5, 0x0, 0x6, 0x2, 0x4}, {0xfffffffe, 0x8, 0x80000001, 0xd, 0x4, 0x9}, {0x7, 0x2, 0x6, 0x5, 0x5, 0x7}, {0x6, 0x5, 0x0, 0x7, 0xff, 0x8}, {0x4, 0xe0, 0x4, 0x5, 0x4, 0x80000000}, {0x7, 0x8, 0x96e1, 0x0, 0x6, 0x5}, {0x1, 0x9, 0x10, 0x1, 0xffff, 0x4}, {0x8, 0x9, 0x7fff, 0x80000000, 0xb1a, 0xd1}, {0x3, 0x7, 0x7, 0x25a, 0x3565, 0x8001}, {0x20000, 0x8, 0x283d, 0x200, 0x5, 0xff}, {0x6, 0x2, 0xa3, 0x7, 0x6, 0x7}, {0xfce1, 0x3, 0x1286fbfa, 0xfffffff8, 0x80000000, 0x1000}, {0x7, 0xfffffffb, 0x0, 0x2, 0x225, 0x2}, {0x1, 0x4, 0x33c2, 0x10001, 0x910d, 0x3}, {0x7, 0x1000, 0x2, 0x7, 0x5699, 0x5dfd}, {0x0, 0x80000001, 0x40, 0x28d9, 0x0, 0x8}, {0xf, 0x1000, 0x9, 0x2, 0x43a, 0x9}, {0x0, 0x8001, 0x6, 0x10, 0x7, 0x4adb}, {0x4, 0x0, 0x9, 0xa00000, 0x1ff, 0x6}, {0x0, 0x8, 0x0, 0x2a, 0xfff, 0x5}, {0x3f7, 0x10, 0x6, 0xee0, 0x2, 0x6}, {0x8, 0xd43a, 0x2, 0x7ff}, {0x9, 0x4e0, 0x1, 0x4, 0x8001, 0x2}, {0x5, 0x2, 0xffffff81, 0x6, 0x4, 0xc2}, {0x8, 0x27, 0x101, 0x1000, 0x6, 0x800}, {0x3, 0x8, 0x9, 0x9b63, 0xffffffff, 0x2}, {0x3, 0xc1a, 0x8, 0x4, 0x10001, 0xfffffe78}, {0x81, 0xb, 0x100, 0x101, 0x3ff, 0x80000000}, {0x81, 0xec, 0x9, 0x3, 0xf4, 0x6}, {0x3, 0x6, 0x80000001, 0x3, 0x74, 0x3}, {0xfffffff9, 0xf, 0xfffffff8, 0x7f, 0xfffffff8, 0x5}, {0xffff, 0x8, 0x1000, 0x0, 0x6c0, 0x1ff}, {0x100010, 0x4, 0xc, 0x5, 0x8, 0x10000000}, {0x5, 0xa99c, 0x0, 0x100, 0x4, 0x700000}, {0x80000001, 0x1, 0xfffffff8, 0x9, 0x2, 0x1}, {0x2, 0x0, 0x0, 0x0, 0x7, 0x5}, {0xc29, 0x9, 0x0, 0x4, 0x4, 0x3}, {0x74, 0x7fffffff, 0x2, 0x8, 0x7fff, 0x2}, {0x401, 0x6, 0x2, 0x1000, 0x6}, {0xfff, 0x7fff, 0x6e, 0x6, 0x1, 0x86d}, {0x6, 0x6, 0x33, 0x914, 0x4, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x4, 0x80}, {0x7fff, 0xc00, 0x6, 0x35ace6a9, 0x6, 0x2}, {0x5, 0x0, 0x0, 0x0, 0x10001, 0x1}], [{0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x7}, {0x0, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x2}, {0x3}, {0x1}, {0x4}, {0x4}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x2, 0x1}, {0x3}, {}, {0xecb0efe4aa56293c}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {}, {0x1, 0x1}, {0x7}, {0x5}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x358743020cfb1002, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x6, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3}, {0x2}, {0x1}, {0x4}, {0x2}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x1, 0x9, 0x10000000, 0x7, 0x2}, 0x1, 0x4, [{0xfffffffa, 0xfffffffc, 0x1, 0x9, 0xffff, 0x4f3}]}, [{0x1, 0x9, 0xa, 0xb9c, 0x1, 0x101}, {0x3f5c105d, 0x100, 0x8, 0xc78, 0x0, 0xcd29}, {0x4306, 0x10, 0x6, 0xd, 0xb, 0x80000000}, {0xf3b, 0x7, 0x7, 0x3, 0x6}, {0x1, 0x4, 0xb39, 0x28, 0xf8f9, 0x1000}, {0x4, 0x9, 0x8, 0x2, 0x9, 0x10}, {0x9, 0x4, 0x1, 0xd, 0x4, 0x3}, {0x4, 0x8, 0x7ff, 0x1, 0xa000000, 0x80000000}, {0x0, 0x6, 0xdc6, 0x7ff, 0x5, 0x1}, {0x8, 0xf6, 0x800, 0x5, 0x9c, 0x4}, {0x80000001, 0x80, 0xfffff99d, 0x5, 0xa, 0xfc4}, {0x7, 0x4, 0x6, 0x8, 0xffffffff, 0x5}, {0xe, 0x6, 0x9, 0x7, 0x81, 0xe4}, {0x8001, 0xffffb7e7, 0x432, 0xa, 0xffff, 0x3}, {0x80000001, 0x4, 0xea, 0xd, 0x401, 0x7}, {0x715, 0x1, 0x3, 0x8, 0x401, 0x9}, {0x1, 0x6811, 0x1ff, 0x5b, 0x4, 0x8}, {0xe8, 0x0, 0x19, 0x7, 0x8001}, {0x2, 0x2a4d, 0x81, 0x4, 0x80000000, 0x2}, {0x0, 0x4, 0x16503543, 0x39c7, 0x9, 0x9}, {0x4, 0x5, 0x5, 0x1, 0x8000, 0x6}, {0x2, 0x5, 0x401, 0x8f63, 0x7fffffff, 0x5}, {0x7fffffff, 0xfffffbd0, 0x2, 0x4, 0x1, 0x6}, {0x8001, 0x6, 0x0, 0x80, 0x7, 0x2}, {0x12d2df6d, 0x0, 0x2, 0x0, 0x0, 0xd4a}, {0x3, 0x87, 0xc1, 0xffff5811, 0xb1, 0x1}, {0x0, 0xf1d, 0x4, 0x621, 0x0, 0x9}, {0x8, 0x0, 0x0, 0x94, 0xc, 0x1}, {0x9, 0x22, 0xfffffffb, 0x4, 0x6, 0x1}, {0x6411, 0x2, 0x2, 0x5, 0x8, 0x7}, {0xc, 0x5, 0x4, 0x2, 0x0, 0x83d}, {0x9, 0x7, 0x5, 0x85, 0xffffffff, 0x40}, {0x3ff, 0x49, 0x7, 0x1be9, 0x1, 0x7ff}, {0x8001, 0x7, 0x6, 0x9, 0x7ff, 0x1}, {0x8, 0xa538, 0x800, 0xc, 0x3, 0x6721c253}, {0x0, 0x1f9, 0x101, 0x8, 0x4, 0x8}, {0x100, 0x6, 0x0, 0x8, 0x57, 0x1}, {0x6, 0x3, 0x8, 0x2, 0xc54c, 0x1}, {0xfb, 0x0, 0x5, 0x1, 0x2, 0x9}, {0xffff, 0xea5, 0x7, 0x8, 0x9}, {0x5, 0x3, 0x4373b67f, 0x8, 0x4, 0x8000}, {0x80000000, 0xc, 0x8, 0x4, 0x7fff, 0x7fffffff}, {0x80000000, 0xfffffffe, 0x1c0, 0x3, 0xce52, 0x3}, {0xe8, 0x1, 0x10, 0xa, 0x0, 0xfffffffd}, {0x3, 0xf, 0xc, 0x0, 0xc, 0x1}, {0x5, 0x6, 0x8, 0x2, 0x3ec, 0xbb63}, {0x5, 0x82, 0x1, 0x7fff, 0x3a6e, 0x80}, {0x4, 0x3, 0x6, 0x2, 0x7fffffff, 0x8}, {0x7, 0x2, 0x8, 0x2, 0x9, 0x1}, {0x3, 0xf9b3, 0x9, 0x3b, 0x86, 0xffffffff}, {0x7ff, 0x1, 0x400, 0x81, 0x9, 0x7}, {0x4, 0x7f, 0xf1d5, 0x10, 0xa4c, 0x806}, {0x40, 0x4, 0xba, 0x8c, 0x3, 0x4}, {0xf, 0x2be, 0x10000, 0x1a, 0x0, 0x6}, {0x200, 0x4, 0x1, 0xfffffffe, 0x5, 0x5}, {0x8000, 0x73, 0x17, 0x4, 0x7, 0x4}, {0x7, 0x3, 0x9, 0x74}, {0x800, 0x5d, 0x5, 0x6, 0x81, 0x9}, {0x2, 0xc57c, 0x240000, 0x77, 0x6, 0x6}, {0x9, 0x3, 0x0, 0x5, 0x1ff, 0x8}, {0x7, 0x3ff, 0x8, 0x2, 0x3, 0x6}, {0x8, 0x1, 0x1, 0x9, 0x3, 0x8}, {0x6, 0x8, 0x7, 0x6, 0x99f7, 0xb8e}, {0xff, 0x1, 0x8, 0x80000000, 0x2, 0x5}, {0x9, 0x5, 0xffffff43, 0x10001, 0x81, 0x7fffffff}, {0x6, 0x80000000, 0x40, 0x4, 0x7, 0x5}, {0x80000001, 0x1a3, 0x5, 0x8, 0x8}, {0x1ff, 0x8001, 0x4, 0x0, 0x7fff, 0x5}, {0x40, 0xfffffffa, 0x6, 0xac, 0xfff, 0x558113a}, {0x5, 0x6, 0x4, 0x6, 0x27b0, 0x4}, {0x185, 0x200000, 0xc, 0xcd, 0x401, 0x8001}, {0x2, 0x7fff, 0xda, 0x9, 0x6, 0x2}, {0x8000, 0x1, 0xc99, 0x0, 0x7fff, 0x3}, {0x8, 0x50d, 0x6f, 0x9, 0x1, 0x1}, {0xc, 0x713c, 0x4, 0x1000}, {0x7f, 0x204000, 0x2, 0xe, 0x5, 0x33}, {0x0, 0x2, 0xfffffff5, 0x2, 0x4, 0x879}, {0x6, 0x2, 0xb, 0x2, 0x5, 0xfff}, {0x9, 0x8000, 0x0, 0x8, 0x8, 0x101}, {0x8, 0x3, 0xfffffff8, 0x9, 0xfff}, {0x60b, 0x5, 0x2800, 0x8, 0x9, 0x80000001}, {0x0, 0x9, 0xe, 0x8, 0x200000, 0x5}, {0x1, 0xa000, 0x2, 0x9, 0x84, 0x10000}, {0x81, 0x0, 0x3, 0x0, 0xfffffffe, 0x7}, {0x3, 0x7, 0x1, 0x3, 0x4, 0x4}, {0x3, 0xfffffffd, 0x5, 0x8, 0x40, 0xb}, {0x9, 0x3, 0x6, 0x6, 0x9, 0x10cb}, {0x672b, 0xfffffff9, 0x7f, 0x101, 0x1, 0x3}, {0x9, 0x0, 0xfffffffe, 0xf, 0x3, 0xc}, {0xe1c, 0x6, 0xffffff81, 0x458b237f, 0x6, 0xb}, {0x2, 0x7, 0x7fffffff, 0x9, 0x2, 0xd6e}, {0x1, 0x7, 0x0, 0x89, 0x4, 0x9}, {0x0, 0xc, 0x5, 0x2, 0xd4, 0x7}, {0x3ff, 0x2, 0x9651, 0x188, 0x5}, {0x7, 0x4, 0x6b, 0x7, 0x3ff, 0x5}, {0xff, 0x8, 0x8, 0xdb0a0000, 0x5, 0x1ff}, {0x8, 0x101, 0x3, 0x2, 0x1, 0x7}, {0x0, 0x0, 0xfffffffb, 0x6, 0x5, 0x8020}, {0x9, 0x434c, 0x5, 0x5f3, 0x4, 0x9}, {0x5, 0x7, 0x72, 0x10000000, 0x4b8056bf, 0x1}, {0x7ff, 0xff, 0x3, 0xc, 0x0, 0x7f}, {0x5, 0x0, 0x9, 0xb38, 0x3, 0xfffffffa}, {0x5, 0x4, 0x7, 0x3, 0x6, 0x4}, {0x7, 0x7, 0x4, 0x822, 0x1, 0x9}, {0x8, 0x8, 0xc9a, 0x8, 0x1, 0x3}, {0x1, 0x0, 0x1, 0x5, 0x5, 0x7}, {0x6, 0x81, 0xfff, 0x8, 0x3, 0x40}, {0x401, 0x2, 0x7c4fefe, 0x30, 0x5, 0x5}, {0x0, 0xfffffc01, 0xe01, 0x2, 0x1, 0xffffffeb}, {0x1, 0x1, 0x4, 0x8, 0x1, 0x73b2}, {0x2, 0x3, 0xfffffff3, 0x23c, 0x11, 0x2}, {0x1000, 0x1ff, 0x7fff, 0x34, 0x910, 0x5a}, {0x1, 0xff, 0x1, 0x9, 0x0, 0xfffffffb}, {0x7ff, 0x5, 0x10, 0x0, 0x3, 0x8}, {0xfff, 0x6298b2a2, 0x8000, 0x0, 0x3fe0, 0x1ff}, {0x4, 0x0, 0x3, 0x5, 0x6f, 0x5}, {0x0, 0x9, 0x14, 0x10, 0x5e7, 0x10000}, {0x2c82, 0xbc0f, 0x7e9d05, 0x984, 0x3, 0x6}, {0x3, 0xa27, 0xec2, 0x8ab, 0x9, 0x5}, {0x0, 0xfffffffb, 0x3ff, 0xf90, 0x7fffffff}, {0x7, 0x0, 0x3ff, 0xfffeffff, 0x3, 0x9}, {0x5, 0xfffffffd, 0x9, 0x9, 0x7, 0x942}, {0x0, 0x2, 0x7, 0xffb, 0x4, 0x3}, {0xe9c3, 0x4, 0x40000000, 0x7, 0x80, 0xfffffffc}, {0x3, 0x9, 0x7f, 0x4, 0x43, 0x379}, {0x3, 0x3800, 0x8, 0x7ff, 0x5, 0x1}, {0x9, 0x5, 0x1e147c6d, 0x6, 0x80000000, 0x7f}, {0x100, 0xa835, 0x2, 0x6, 0x10001, 0x1}], [{0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x2}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x2}, {0x2}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x5}, {0x2, 0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x6}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {}, {0x3, 0x1}, {0x4}, {0x3}, {0x3}, {0x4, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1}, {0x5}, {0x3}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x74, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x520, 0x36, 0x8, 0x0, 0x6}, 0xfb, 0x6, [{0x9, 0x80, 0x9, 0x4, 0x4, 0x2}, {0x7, 0x7f04f096, 0x2, 0xe, 0x8, 0x3}, {0x10000, 0x7, 0x1, 0x3800, 0x4}]}, [{0x7, 0xe93, 0x80000001, 0xfffffff8, 0x2, 0x5}, {0xfffffce3, 0xe27b, 0xf131, 0x10000, 0x8, 0xfff}, {0x84, 0x3b, 0x7, 0x101, 0x69c, 0x7f8a}, {0x8, 0x0, 0x9, 0xffffffff, 0x7f4, 0x5}, {0x0, 0x2, 0xffff0000, 0x0, 0x2, 0x4}, {0x2, 0x9, 0x3, 0x3ff, 0x9, 0x174}, {0x3e2, 0x6, 0x9, 0x5, 0x6, 0x2}, {0xd, 0xfffffff9, 0x7, 0x73, 0x3, 0x2}, {0x9, 0x224f64a, 0x5, 0x8, 0xfffffff8, 0x80000000}, {0xa, 0x7, 0x2, 0x40, 0x971}, {0x3, 0x7f, 0x288, 0xb3, 0xffff, 0x6}, {0xc0, 0xfffffffd, 0x2000, 0xa, 0x10, 0x99f}, {0x2, 0x7f, 0x5a, 0x0, 0x86ec, 0x1}, {0x5, 0x1932, 0xb083, 0x1292, 0x40000000, 0x10}, {0xa, 0xd697, 0xfffffff7, 0x1, 0x2, 0x88}, {0x1000, 0xffc00000, 0xffff, 0xe, 0x7fffffff, 0x7}, {0x4, 0x4, 0x5, 0xdb2, 0x5, 0x99c5}, {0x80000000, 0x7, 0x4ef1f366, 0xb9, 0x2}, {0x9, 0x2, 0x0, 0xffffff81, 0x8001, 0x6}, {0x5, 0x80, 0x2, 0x1, 0xccf9, 0x27}, {0xffff, 0x4, 0x8, 0x3, 0xa4, 0x1fffc0}, {0x7, 0xac2, 0x8, 0x836, 0x8, 0xa06}, {0x3, 0xd6c, 0x8, 0x9, 0x9, 0x8000}, {0x4, 0x0, 0x0, 0x6, 0x8000, 0x4}, {0x2, 0x9, 0x1, 0x1, 0x5, 0x4}, {0x2, 0x5, 0x6, 0xfffffffd, 0xd40, 0x8}, {0xcc19, 0x3, 0x1ff, 0x4, 0x40, 0x3ff}, {0x8000, 0x81, 0x5, 0x5, 0x5, 0x80}, {0x2, 0x400, 0xcd0, 0x4cbef93c, 0x10000, 0x400}, {0x9, 0x5, 0x8001, 0xc, 0xfffffc00, 0x928}, {0xa447, 0x5, 0x0, 0x40, 0x5, 0x91}, {0x4, 0x3, 0x1, 0x81, 0x8, 0x400}, {0x4b, 0x8, 0x8001, 0x2, 0xc, 0x1}, {0x101, 0x69ec, 0x3, 0x0, 0x36f5, 0x2}, {0x2, 0xf, 0x800, 0x9, 0x8888, 0x1ff}, {0x0, 0x5, 0x9, 0xa, 0x3, 0x3}, {0x4, 0x0, 0x9, 0x5, 0xe6b, 0x4}, {0x289c, 0x0, 0x1000, 0x40, 0x80, 0x6}, {0x9, 0x8, 0xf, 0xa, 0xffffffff, 0xc6e3}, {0x401, 0xfffffff9, 0x0, 0xffff, 0x2, 0x4}, {0x4, 0x2, 0x7fffffff, 0x3ff, 0x6, 0x100}, {0xfffffffd, 0x2, 0x8, 0x8, 0x5, 0x3758}, {0xffffffff, 0x1, 0x5, 0x2, 0x66a}, {0x7, 0x579, 0x0, 0x5, 0xfffffff2, 0x74c}, {0x80, 0x0, 0x8, 0x5, 0x5, 0x2}, {0x6, 0x6, 0xfffffff7, 0x7, 0xfffffffa, 0x656}, {0x81, 0xffff, 0x4, 0x6, 0xd, 0x7}, {0x1000, 0xfffffff6, 0x1, 0x6, 0x400, 0x401}, {0x0, 0x8, 0x4, 0x7fff8, 0x4, 0x3329}, {0x8, 0x7, 0x4, 0x4, 0x3, 0x3}, {0x8, 0x3, 0xa, 0x0, 0x9549, 0x100000}, {0x7f88, 0x0, 0xfff, 0x9, 0xee86, 0x60}, {0x4, 0xe8b, 0x2, 0x5, 0xdbc, 0x8}, {0xe, 0x1, 0x80000000, 0x8, 0x0, 0x9}, {0x1, 0x101, 0x968d, 0x8, 0xc141, 0xfff}, {0xc, 0xc, 0x3, 0x7, 0x73d49ada, 0x9}, {0xfffffffe, 0x101, 0x8, 0x0, 0x1, 0x1}, {0xd, 0x0, 0x8000, 0x7f, 0x6, 0xe}, {0x5, 0xfa, 0x80000001, 0x0, 0x9d, 0xffff8001}, {0xa78, 0x1, 0x7f, 0x5, 0x3a92c3d1, 0x4}, {0xef, 0x9, 0x3, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x9, 0x6, 0x1000, 0x8001}, {0x9, 0x40, 0x7ff, 0x7, 0x0, 0x9}, {0x1, 0x0, 0x66a, 0x958f, 0x823, 0x8f8}, {0xc, 0x5, 0x7414, 0x5546, 0x5, 0x5}, {0xf8, 0x0, 0x4, 0x9, 0x2, 0x5}, {0xf39, 0xe6, 0x10001, 0x5, 0xfffffffa, 0x3}, {0x7, 0x7, 0x4, 0x1, 0xdf07, 0x1}, {0x8001, 0x7fff, 0x4, 0x4, 0xe3e, 0xb}, {0xfffffbff, 0x9, 0x7ff, 0x0, 0x5, 0x4}, {0x3, 0x5, 0x9, 0xbfb4, 0x1, 0xd}, {0x2, 0x5, 0xfff, 0x7, 0x10001, 0x6}, {0x0, 0x6, 0x6, 0x9a, 0x6, 0x9}, {0x0, 0x40000000, 0xe, 0x8, 0xf, 0x9}, {0xfff, 0x8, 0x3, 0x3, 0xffffffff, 0x8}, {0xfffffffc, 0x5, 0x0, 0x3, 0xfffffff8, 0x9}, {0x3, 0x6, 0xfffff05f, 0x800, 0x5, 0x10001}, {0x4, 0xfffffffd, 0x2c52, 0x7, 0x7, 0xa}, {0x1, 0x9, 0x8, 0x5a6333c6, 0x9, 0x1e}, {0x5, 0xc09, 0x1b1c, 0x3, 0x5, 0x6}, {0xfffffffe, 0xb, 0xbf, 0x0, 0x81, 0x6}, {0x8, 0x5, 0x7, 0x7, 0x0, 0x10}, {0x7, 0x2, 0x178, 0x1, 0xfffffffb}, {0x10000, 0x1000, 0x6, 0x2, 0xfee, 0x4}, {0x9, 0xf, 0x6, 0x3, 0x3, 0x3}, {0x9, 0x7f, 0xffff, 0x9, 0x401, 0x3}, {0x2, 0x9, 0xd, 0x1, 0x6, 0xe}, {0x8, 0xa, 0x3ff, 0x5, 0x4, 0x1}, {0x7, 0x7, 0x40100000, 0x8, 0x3ff, 0xfffffff9}, {0x10000, 0x4, 0x2, 0x2, 0xc, 0x2}, {0x9, 0x1, 0x2, 0x1, 0x1, 0xc1}, {0x0, 0x33a7de66, 0x9, 0x1400, 0x2, 0x5}, {0xff, 0x7, 0x6, 0x9, 0xffff5840, 0x7}, {0x8, 0x0, 0x0, 0x800, 0x45, 0x7}, {0x8, 0xd32, 0x3, 0xad56, 0xfffffffc, 0xc86}, {0x96, 0x40, 0x2, 0x81, 0x0, 0x5}, {0x7fffffff, 0x4, 0x8, 0x9, 0x8001, 0x7ff}, {0x4fa0, 0x31ac, 0x2, 0x2, 0x10001, 0x6}, {0x40, 0x3, 0xf, 0x7fff, 0x2, 0x10}, {0x10001, 0x60, 0xe4, 0x8000, 0x40, 0xfffffff7}, {0x4, 0x10, 0x4, 0x80, 0x8, 0x3}, {0x46eb, 0xfffffffd, 0x5, 0x6, 0x4, 0x3}, {0x800, 0xfffffff8, 0x7, 0x101, 0xc920, 0x800}, {0x5, 0x1, 0x9f, 0x8, 0x2, 0x55}, {0x0, 0x5, 0x4, 0x7, 0xe, 0x8}, {0x8, 0x5a63, 0x90, 0x2, 0x4, 0x4}, {0x10000, 0xf502, 0xfffffffd, 0x2, 0xe73, 0x6}, {0x100, 0x80000001, 0x7f, 0x1, 0x9f, 0x3}, {0xbb3, 0x8, 0x0, 0x8000, 0x42f, 0xcd}, {0x5, 0x5, 0x7d82, 0x7, 0x3ff, 0x7fffffff}, {0x0, 0x51c9, 0x100, 0x4e62, 0x280000, 0x7}, {0x4, 0x6, 0x6b, 0xfffffffa, 0x8, 0x7}, {0xce03b5b5, 0x0, 0x5, 0x1000, 0x9, 0x6}, {0x1, 0x5, 0x6, 0x5, 0xa14b, 0x7}, {0x9, 0xd, 0x9, 0x3, 0x2, 0x7}, {0x5, 0xba29, 0x80000001, 0x47, 0xfffffffb, 0x8}, {0x1, 0x6, 0x5, 0x7, 0x9, 0x4}, {0x3, 0xd, 0xa1b, 0x6, 0x5, 0x1}, {0x8, 0x2, 0x1ff, 0x5, 0x39a8000, 0x7}, {0x4, 0x3, 0x5, 0xffffff7f, 0x4, 0xd}, {0x3, 0xf, 0xfffff373, 0xa9a, 0x8, 0xbcbf}, {0xe9, 0x5, 0x93, 0x1000, 0x18, 0x1}, {0x10000, 0xf, 0x8001, 0x800, 0x81, 0x1ca}, {0x1, 0xff, 0x6, 0x3, 0x7, 0x9}, {0x80000000, 0x1, 0x5, 0x8, 0x9f18, 0x1aa8}, {0x10, 0x8000000, 0x8, 0xe07, 0x0, 0x2}, {0x0, 0x6, 0x4, 0x9, 0x8}, {0x4, 0x0, 0x4, 0x1, 0x0, 0xfffff000}], [{0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x0, 0x6ea22f095afdeb5a}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x5}, {0x3, 0x1}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x7}, {0x5, 0x1}, {0x84a10766d9a1529c, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x6, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x1, 0x1}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x5, 0x2}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x178, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x5c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x3, 0x212, 0x0, 0x4, 0x80}, 0x4, 0x8, [{0x81, 0x2, 0x9, 0x1000, 0x0, 0x1}, {0x80000001, 0x2b, 0x8, 0x6, 0x0, 0x1}]}, [{0xaf, 0x0, 0x11aba01b, 0x6, 0x8, 0x7fffffff}, {0x4, 0x4, 0x0, 0x8, 0xba, 0xd}, {0xb, 0x3, 0x7, 0x7, 0x0, 0xa104}, {0x23aa4023, 0xff, 0x9, 0x4, 0x4, 0xe58}, {0x7, 0xffffffff, 0x91c6, 0xf5, 0x0, 0x4}, {0x7, 0x1e, 0xbd2, 0x8, 0x8, 0xc2}, {0x9, 0x5, 0x5d02, 0x5, 0xb4, 0x3ff}, {0x5, 0x8001, 0x627a, 0x81, 0x5, 0x4}, {0x0, 0x6e, 0xb, 0x6, 0x9, 0x7fffffff}, {0xffffffff, 0x5, 0x9, 0xbd4994b, 0x9, 0x7c9464b}, {0xfffffffc, 0x0, 0x24, 0x3, 0x401, 0x5}, {0x0, 0x5, 0x101, 0x7fffffff, 0x401, 0x4}, {0x9e, 0x10e, 0x4, 0x2, 0x13f, 0x80000000}, {0x5, 0x0, 0x0, 0x89a7, 0x2, 0xf38}, {0x85, 0x22, 0x1, 0x5, 0x80000001, 0x9b}, {0x200, 0x0, 0x3fc, 0x2, 0x0, 0x7}, {0x4, 0x3ff, 0x40, 0x0, 0x50, 0x3ff}, {0x32, 0x8, 0x10001, 0x1d, 0x7, 0xe}, {0x8, 0x0, 0x9, 0x9, 0x5, 0xd2}, {0x8, 0x1, 0x1, 0x2d, 0xd9, 0x5}, {0x3, 0x81, 0x401, 0x7fffffff, 0x1, 0x7f}, {0x7, 0x7, 0x3, 0x8, 0xa, 0x60}, {0x8, 0x10, 0x0, 0xffff9ea9, 0x3, 0xffffffff}, {0x6, 0x7ff, 0x7, 0xdc, 0xffffffff, 0x5a966d8}, {0x0, 0x8000, 0x3, 0xb, 0x1}, {0x9, 0x2, 0x3, 0xd, 0x6, 0x8}, {0xfff, 0x7, 0x9, 0x1000, 0xbf2f, 0x3}, {0x8, 0xf, 0x1, 0x4, 0x7, 0x2}, {0x291a, 0x9, 0xfffffff7, 0xc, 0x4d3, 0x6}, {0x9, 0xfe49, 0x7, 0x1e, 0x3, 0x2}, {0x2, 0x80, 0x9c, 0x6, 0x3, 0x1e}, {0x2, 0x2, 0x8fa4, 0x7fffffff, 0x400, 0xa79}, {0x2, 0x8, 0x0, 0x1, 0x7, 0x1}, {0x187, 0x5, 0x5, 0x685e, 0xef22, 0x7ff}, {0x86, 0x5bd0, 0x5, 0x7f, 0x8, 0x10001}, {0x8, 0xc26, 0x7fffffff, 0x7fff, 0x9d0c, 0x9086}, {0x1400000, 0x80, 0xfff, 0x5, 0x4, 0x2}, {0xffff, 0x1, 0x3ff, 0x8, 0x9c5, 0xfffffff8}, {0x1, 0x6, 0x6, 0x5a, 0x4be0, 0x72}, {0x800, 0x5, 0x7, 0xe41, 0x8, 0xff}, {0xfffffd5d, 0x3, 0x8, 0xef6, 0x0, 0x983c}, {0x8, 0xfffffff7, 0x7, 0x3, 0x12, 0x2}, {0x279, 0xf0000000, 0x5, 0x0, 0x10000}, {0x6, 0x1, 0x8, 0x0, 0xb, 0x40}, {0x7, 0x9, 0xa4, 0x7f, 0x100, 0x7}, {0x10000, 0x1a000000, 0xd, 0x7fffffff, 0x6, 0x7fffffff}, {0x9, 0x3, 0x80, 0x5, 0xfffffffc, 0x4}, {0xffffdc79, 0xfffffff9, 0xccc381b, 0x6, 0x400, 0xbc000000}, {0xc54, 0x2, 0xb, 0x331, 0x7, 0x6}, {0x200, 0x8, 0x5, 0x6, 0x2, 0x2}, {0x7, 0x7, 0x8, 0x7205, 0x1, 0x9dc}, {0x7, 0x7, 0x7fff, 0x3f1f, 0x8}, {0x4, 0x1, 0x8, 0x2, 0x9, 0xfffffff4}, {0x2, 0x9802, 0xffff, 0x44, 0x3, 0x2e}, {0x4, 0xf5, 0x7, 0x3, 0x2, 0x101}, {0x800, 0x8, 0xc7aa38c, 0xc, 0x5d, 0x6}, {0x5, 0x9, 0x81, 0x3, 0x5, 0xc0f}, {0x9, 0x1, 0x36f, 0x10, 0x7, 0xd3f}, {0x80000001, 0x5, 0x8001, 0x4, 0x4, 0xdb}, {0xf75e, 0x8, 0x2, 0x9, 0x1, 0x4d404f9a}, {0x5, 0x8, 0x1, 0x1, 0x0, 0x5}, {0x4, 0x7, 0x5, 0x3, 0x0, 0x3}, {0x4, 0x800, 0x0, 0x6, 0x5}, {0x6, 0x100, 0xf, 0x6, 0x4, 0x78a696a7}, {0xa33, 0x4, 0x8, 0x93fe, 0x200, 0x3}, {0x8, 0x8b3b, 0x2, 0x3, 0x4, 0xfffeffff}, {0x6e2, 0xfff, 0x1, 0x3, 0x1, 0x6}, {0x9, 0x5, 0x7, 0x4, 0x0, 0x100}, {0x0, 0x8, 0x200, 0x1, 0x5, 0x7}, {0x4, 0x6, 0x6, 0xff, 0x6, 0x84}, {0x2, 0x6, 0x200, 0x7, 0xad1, 0x1}, {0x1, 0x2, 0x0, 0x4, 0x6, 0x2}, {0x10, 0x1, 0x7, 0x2df6, 0x5, 0x8029}, {0x80000000, 0x0, 0x10001, 0x3, 0xb3, 0x10001}, {0x5f7, 0x50e3adf4, 0x4, 0x9, 0x0, 0x4}, {0x2, 0x5, 0x8, 0x0, 0x80000000, 0x8}, {0xe, 0x0, 0x1, 0xfffffffd, 0x100, 0x1ff}, {0x3ff, 0x5, 0x6, 0xa, 0x1, 0x7}, {0xdc64, 0x8a, 0x0, 0xffffffff, 0x1, 0x7fffffff}, {0x5, 0x0, 0x8, 0x7, 0x2, 0x3}, {0x5, 0x7, 0x9, 0x3, 0x1, 0xa15}, {0x5, 0x4, 0x92a, 0x4, 0x4, 0x1}, {0x4, 0xab, 0x0, 0x7, 0xfffffffa, 0x5}, {0xffffffff, 0xbf5, 0x80000001, 0x1a7, 0xff, 0xfffffffa}, {0x4, 0x40, 0x3, 0xff, 0x5, 0x2}, {0x9, 0x7, 0xdd, 0x5, 0x1, 0x728305f5}, {0x3, 0x8, 0x2, 0x9, 0x0, 0x8}, {0x8, 0xd713, 0x4, 0x4, 0xd, 0x3}, {0xfffffff8, 0x6, 0xffffc90a, 0x3800, 0x6, 0x743b}, {0x2, 0x1000, 0x9, 0x7, 0x8001, 0xfff}, {0x7, 0xd78, 0x1, 0xfffffffe, 0x4, 0xfffffffe}, {0x3, 0x77ae221, 0x6a, 0x6, 0x100, 0x7ff}, {0x3ff, 0x37, 0xffffffff, 0x2, 0x3, 0x2}, {0xfff, 0x86f1, 0x1ff, 0x9, 0x89ff, 0x7}, {0x2, 0x5, 0x6, 0x2, 0x6, 0xed}, {0x8, 0x10000, 0xff, 0x6, 0x0, 0x7ff}, {0x0, 0x5, 0x2, 0x4, 0x3, 0xa874}, {0x51, 0x80, 0x61, 0x5, 0x4, 0x8}, {0x4, 0x6, 0x80000001, 0x5, 0x8, 0x6}, {0x101, 0x3ff, 0x0, 0xccb, 0x8, 0xbb67}, {0x71, 0x921, 0x5, 0x8, 0x9, 0xe}, {0x6f, 0x9, 0x81, 0x200, 0x8, 0x6}, {0x7, 0x7, 0x9, 0x8, 0x3, 0xfffffaaa}, {0x3, 0xe7e, 0x1, 0x1, 0x5, 0x3000}, {0x6, 0x3, 0x2, 0x7, 0x5}, {0x41a2, 0x5, 0xfffffff7, 0x3, 0x1, 0x80}, {0x7, 0x80, 0x12, 0x2, 0x9d, 0x34d}, {0x8bb, 0x1, 0xa, 0x3, 0x8, 0x1}, {0x4f8b, 0x800, 0x1, 0x74, 0xd38, 0x9}, {0x2, 0x46, 0x1, 0xd20, 0x4, 0x5}, {0xb, 0x2, 0x3, 0xe6cf, 0x4, 0x6}, {0x3, 0x0, 0x380000, 0xff, 0xc, 0xb}, {0x0, 0x3, 0x100, 0x8, 0x200, 0x7}, {0x3, 0xff, 0x1000, 0x6, 0xfffffffb, 0x2}, {0x5, 0xfffffffa, 0x6, 0x0, 0xec, 0x7fffffff}, {0x8000, 0xfff, 0x2, 0x62, 0x4, 0x9}, {0x5, 0x5, 0x15, 0x7, 0x80, 0x4}, {0x8, 0x7f, 0x7, 0xf568, 0xa37}, {0x8, 0x5, 0xb3, 0x47b, 0x6, 0x1}, {0xffffffff, 0x1, 0x81, 0x1, 0x9, 0x3}, {0x48, 0xf, 0x1, 0x4f66e162, 0x9, 0x9}, {0x1, 0x8, 0x7, 0x2, 0x7, 0x6}, {0x7a26, 0x8, 0x3, 0x1, 0x0, 0x1}, {0x2, 0x8, 0x8, 0x0, 0x2, 0x7}, {0x10000, 0x86, 0x5, 0x52e2b658, 0xff, 0x1}, {0x6, 0x2, 0xfffffff7, 0x0, 0x200, 0x7}, {0x42a, 0xfffffffc, 0xffff, 0xfffffffa, 0x7fff, 0x2}, {0x5, 0x6, 0x200, 0x8000, 0x4, 0x6}], [{0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x3}, {0x5, 0x1}, {0x4}, {0x5}, {}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4}, {0x4}, {0x4}, {0x1, 0x1}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x840a1c1b2ab5176d}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x4}, {0x1}, {}, {0x2}, {0x0, 0x1}, {0x1}, {0x2}, {0x3}, {0x3, 0xf4fbb85073bc69c7}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x2}, {0x7, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x5}, {0x1}, {0x1}, {0x2, 0x2}, {0x4}, {0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0xc}, {0x3}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}]}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0xfffffff8, 0xbc8e, 0xffffffffffffffff, 0x5, 0x7}, 0x6, 0x5, [{0x1, 0x401, 0x3d, 0x0, 0x800, 0x5dda601}, {0x0, 0x2, 0x0, 0x999, 0x4, 0x86}, {0x2, 0x9, 0x6, 0xfffffff1, 0x7, 0x7}, {0x10, 0x80000000, 0x9, 0x6, 0x10000, 0x3}, {0x2, 0x6, 0xfffffffb, 0xfffffff4, 0xd072, 0x81}]}, [{0x7fff, 0xa5b, 0x4, 0x80000000, 0xb41, 0x2}, {0x2, 0x1000, 0xc, 0x8, 0x0, 0x8}, {0xfffffffd, 0xcbc, 0x200, 0xfffffffe, 0x6, 0x9}, {0x3fff8000, 0xfffffff7, 0x83d6, 0x400, 0x6, 0x5}, {0xfffffffb, 0x9, 0x80000000, 0x9, 0xa27b, 0x3}, {0x10000, 0x4, 0x5, 0xfffffffb, 0xffffffa4, 0x81}, {0x4, 0xffffffff, 0x5, 0x2, 0x401, 0x60000000}, {0x2f, 0x7e2d, 0x5, 0x1000, 0x0, 0x3}, {0x7, 0x3, 0x5, 0x5, 0x7, 0xfffffffa}, {0x0, 0x18144e4, 0x7, 0x6, 0xba, 0x6}, {0x6, 0x0, 0xda, 0x4, 0x62f, 0x8}, {0x0, 0x200, 0x6, 0xd, 0x7, 0x9}, {0x533, 0x8, 0xf1, 0xfffffff7, 0x7, 0x8}, {0x6, 0x5, 0x2, 0x40, 0x7f, 0x10001}, {0xffffffff, 0x3, 0x1, 0xfff, 0x14ad, 0x20000}, {0xb3eb892, 0x10001, 0x2, 0x8, 0x800, 0x1c000}, {0x8, 0x5, 0x5, 0x1, 0xc, 0x93f}, {0x9, 0x4, 0x3, 0x86, 0xfff, 0x1}, {0x4, 0x400, 0x6, 0x300000, 0x5, 0xfffffffc}, {0x9, 0x3, 0x1, 0x4, 0x3}, {0x0, 0x2, 0x4, 0x5, 0x7, 0x6a}, {0x4, 0xfffffff7, 0x0, 0x1, 0x400}, {0x4, 0x5, 0x6, 0xc6e3, 0x2, 0x2}, {0x3, 0xfffffffd, 0x9, 0x2, 0x80000001, 0x166}, {0x7, 0x2, 0x1, 0x1, 0x7, 0x3}, {0x9, 0x5, 0x6, 0x800, 0x4, 0x1000}, {0x7f, 0x7fff, 0x3, 0xc, 0xa, 0x1c7}, {0xcbf6, 0xa27, 0x3, 0xff, 0x83b3, 0x4}, {0xb, 0x1, 0xffffffff, 0x7965, 0x7, 0xae5a}, {0xa, 0xd32, 0x7, 0xe0, 0x6, 0x80000000}, {0x3, 0x0, 0x93d, 0x401, 0x1, 0x7f}, {0xffffffff, 0x4, 0x400, 0x9, 0x5, 0xf37}, {0x6, 0xfffffffd, 0x80000000, 0x8, 0x4, 0xc}, {0xe44, 0x7, 0x3, 0xd77, 0x1, 0x1e1}, {0x1, 0x800000, 0xb, 0xd5e9, 0xfffffff8, 0x4}, {0x2, 0x6, 0xff, 0x1, 0x7, 0x7}, {0xd, 0x4, 0x4, 0x10, 0x6, 0xb4}, {0x9, 0x480, 0x5, 0x5, 0x81, 0xff}, {0x6, 0x4, 0x2, 0xffffffe1, 0x9, 0xd935}, {0x6, 0x0, 0xf3f, 0x1, 0x3}, {0x7fff, 0x2, 0x698a, 0x1ff, 0x8, 0x3}, {0xfffffffa, 0x0, 0x0, 0x3ff, 0x7, 0x5}, {0x1, 0x1, 0x2, 0x7fff, 0x5, 0x6}, {0x81, 0xe24, 0xf, 0x73f, 0x8, 0xbf4ecd0}, {0xb6, 0xa7, 0x6, 0x0, 0x4, 0x10}, {0x3, 0x95, 0x5, 0x2, 0x7ff, 0x2}, {0x1, 0x4, 0x400, 0x1, 0x9, 0x7}, {0xc, 0x6, 0xb33, 0x76, 0x17, 0x1}, {0xff, 0xad, 0x7, 0x2, 0x2, 0x100}, {0x3, 0x48c, 0x5, 0xe, 0x8, 0x9}, {0x33, 0x3, 0x1a, 0x5, 0x1000, 0x81}, {0x101, 0x10000, 0x1, 0x7, 0x10, 0x8}, {0x2cd6, 0x9, 0x8, 0xdc, 0x7, 0x7}, {0x7, 0x7, 0xb, 0x8, 0x5, 0x5}, {0x4, 0x100, 0x1, 0x3, 0x4, 0x9}, {0x0, 0xd34, 0x40, 0x8d92, 0xb, 0x55c00000}, {0x9, 0x7fff, 0x1, 0x9, 0x7, 0x5b}, {0xa61, 0x9, 0x5effa551, 0x1, 0x400, 0xfffffec7}, {0x2, 0x4, 0x80000, 0x7fff, 0x0, 0x80000000}, {0xfffffff4, 0x0, 0x6, 0x0, 0x2, 0x1}, {0xff, 0x731, 0x9, 0x8000, 0xfffffffb, 0x9a57}, {0x9, 0x9, 0x2b5, 0x5, 0x3, 0xc0a}, {0x1, 0x6, 0x7, 0x1000, 0xffffffff, 0x40}, {0x0, 0x2, 0x6a53, 0x4, 0x7, 0x100}, {0xff, 0x0, 0xfffffff9, 0x1, 0xd329, 0xfffffffd}, {0xfffff001, 0x7, 0xff, 0x266, 0x3, 0x5256}, {0x2, 0x7, 0x1ff, 0x87fe, 0xf393, 0x2}, {0x7, 0x6, 0x4, 0xe, 0xffffffff, 0x3}, {0x98, 0x5, 0x7ff, 0x2, 0xfffff2a8, 0x8}, {0x710, 0x7, 0xfff, 0x719, 0xd0f, 0xfffffbff}, {0x81, 0x6, 0x8, 0xc9cc5bc, 0x8, 0x3}, {0x4, 0xffff, 0x1, 0xfff, 0x481d, 0x27}, {0x1, 0x80000001, 0x3, 0x9, 0x0, 0x2}, {0x2, 0x3ff, 0x9, 0xfffffffd, 0x14ada3be, 0x3}, {0x1a1519a, 0x1, 0x10, 0x2d2, 0x1, 0x1}, {0x100000, 0x9, 0x5, 0xfffffffc, 0x7, 0x8}, {0x7, 0xf, 0x4, 0x14d57e23, 0x3, 0x3ff}, {0x5, 0xff, 0x14b, 0xb, 0x6, 0xd}, {0x6, 0x3, 0x6, 0x9, 0x4, 0x4}, {0x2, 0xe72, 0x3, 0x2, 0xb, 0x7fff}, {0x1, 0x4, 0xc33, 0xd4, 0x1d, 0x6}, {0x4, 0x9, 0xa7, 0x3d5d, 0x1, 0x8}, {0x8, 0x4, 0x5d, 0x1, 0x1000, 0x5}, {0x1, 0xffff, 0xffff0000, 0x3, 0x6, 0x400}, {0x10001, 0x1ff, 0x7, 0x0, 0x6, 0x5}, {0x9, 0x4, 0x2, 0x0, 0x3, 0x4}, {0x9, 0x11630e55, 0xf, 0x8, 0xa, 0x8000}, {0x0, 0x9, 0x80000000, 0x0, 0x2, 0x6}, {0x3ff, 0x501, 0x9, 0x400, 0x0, 0x10000}, {0x7, 0x5, 0x6, 0x3, 0x9, 0x7}, {0x9, 0xa, 0x1bef, 0x0, 0x3, 0x7ff}, {0x6, 0x5, 0x2, 0x2, 0x8, 0x4}, {0x0, 0xff, 0xb, 0x9, 0x1, 0x8}, {0x8, 0x4, 0x7, 0x5, 0xaf4d, 0x6}, {0xffff, 0x5, 0x8, 0x5, 0x1, 0x6}, {0x3, 0x6, 0xa14908d8, 0xc566, 0x5, 0x1000}, {0x8, 0xffff0000, 0x3ff, 0x2, 0x0, 0xbd20}, {0x5, 0x7, 0x0, 0x8d64, 0x0, 0x6}, {0xe, 0x2, 0x9, 0x7, 0xb0a8, 0x9}, {0x3, 0x8, 0xd, 0xc57, 0x5, 0x800000}, {0x5, 0x5, 0x7, 0xffffff59, 0x8, 0x6022}, {0x3fca5d34, 0x2d, 0x4, 0x6, 0x2, 0x5}, {0x578d, 0x401, 0x7fffffff, 0x6, 0xffffffff, 0x3}, {0x2, 0x8, 0x6, 0x3, 0x0, 0x93f}, {0x7, 0x4, 0x2, 0x5, 0xfffffff1, 0xd}, {0x3, 0x2, 0x196b, 0x3, 0x1000, 0x4}, {0xde, 0x1, 0x2, 0x93c, 0x2, 0x4}, {0x3, 0x9, 0x80, 0x8, 0x200, 0x101}, {0xd9, 0x1ff, 0xb5, 0x1, 0x962, 0x3}, {0x7, 0x0, 0x1a3, 0xfffffffb, 0x4}, {0x6, 0x149, 0x6, 0x7fff, 0xc17, 0x1}, {0xfffffff8, 0x4, 0x0, 0x8001, 0x6, 0xa1}, {0x2, 0x80000001, 0x29d4, 0x1, 0x0, 0xff}, {0x4, 0x1, 0x1, 0x80000000, 0x10000, 0x4}, {0x10001, 0x6, 0x3, 0x2, 0x1, 0xffff3053}, {0x2, 0x517d, 0x10000, 0x81, 0xfff, 0x7ff}, {0x9, 0x8, 0x8, 0x1000, 0x8, 0x5aa9}, {0x9, 0xa2, 0x9, 0x6, 0x7251, 0xffffffff}, {0x8, 0x1ff, 0xcc6, 0x22a, 0x1, 0xe}, {0x1, 0x2ba, 0x617, 0xf, 0x6, 0xfffffff8}, {0x1, 0x1, 0x2, 0x2, 0x9990, 0x9}, {0x0, 0xe, 0x1000, 0x9, 0x2a0, 0x3}, {0x7, 0xd, 0x80000000, 0x8, 0x8, 0x8}, {0x1, 0x10, 0x8, 0x9, 0x3, 0x80}, {0x1, 0x1, 0x7, 0x9, 0x8, 0xfffffe42}, {0x5, 0xffff3e5f, 0x80, 0x400, 0x40, 0x10}, {0x7b, 0x0, 0x370, 0xa, 0x5, 0xfff}, {0xcaf, 0x6, 0x8000, 0x6, 0x9}], [{0x4}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0xa49ef9e16b40f44}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x2}, {0x11bd56c1c19cd671, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {}, {}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x1}, {0x90f247d34b3b2943}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x5}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x6, 0x8001, 0x7, 0x7, 0x2}, 0x0, 0x9e, [{0x10, 0x2, 0x4080, 0x77b, 0x2, 0x2}, {0x4, 0xd, 0xffff8001, 0x4, 0x7, 0x3}, {0x5, 0x6, 0x1000000, 0xa, 0x6, 0x6}, {0x5, 0x20000000, 0x8001, 0x1224, 0x62c, 0x5}, {0xc3d2cab, 0xfffffffd, 0x4c, 0x0, 0x6, 0xffffffff}, {0x1, 0xffff, 0x7, 0x8, 0x7}, {0x8, 0x6, 0x8, 0x4, 0x2, 0x4}]}, [{0x5, 0x9, 0x1000, 0xb4, 0xffffffd7, 0x8}, {0x4, 0x80f, 0x4, 0x40, 0x9, 0x80000001}, {0x0, 0x1, 0x9, 0x3, 0x120, 0x80000001}, {0x7ee0, 0x62a9, 0x2, 0x4, 0x4, 0x7ff}, {0x4, 0xffff356f, 0xc92, 0x3, 0x6, 0x800}, {0xe7c9, 0x9, 0x2, 0x6, 0x100, 0x9f}, {0x2, 0x633d, 0x6, 0x5, 0x10, 0x3}, {0x9f85, 0x1, 0x1, 0x7, 0x7, 0x8}, {0x4, 0x200, 0x0, 0x7, 0x4, 0x4}, {0x9, 0x6, 0x8001, 0x9, 0x5, 0x401}, {0x4, 0x400, 0x1, 0x9, 0xd8a7, 0x8000}, {0xec2, 0x800, 0x8, 0x10001, 0xbd, 0xff}, {0x3, 0x6, 0x5, 0x2800, 0x9, 0x7ff}, {0x8, 0x9, 0x7, 0x9, 0x10000, 0x5}, {0xaa, 0xfff, 0x8, 0x1, 0x0, 0x4}, {0x9, 0x2f, 0x6, 0xb9, 0x4, 0xac}, {0x6, 0xfff, 0x80, 0x1, 0xd, 0x7}, {0x8, 0x51f2, 0x200, 0x3, 0x80000001, 0x101}, {0xd, 0x3, 0x9, 0x200, 0x9, 0xff}, {0x1, 0x2, 0x74, 0x80000001, 0x3, 0x10}, {0x9, 0xfffffffa, 0x40, 0x56, 0x7ff, 0x2}, {0x8, 0x7, 0x8, 0x0, 0x92, 0x8682}, {0x9, 0x101, 0x5, 0x7ff, 0x81, 0x6}, {0xfffffff9, 0x80000000, 0x2, 0x1, 0xb9, 0x4}, {0x93, 0xd2, 0x0, 0xc, 0x74, 0x1}, {0x1000, 0x8000, 0x4, 0x1000, 0x9, 0x200}, {0x44, 0x1909, 0xb94f, 0xffffffff, 0x8, 0x5e}, {0x0, 0x885a, 0xb, 0x9, 0x9, 0x8}, {0xfffffe00, 0x7, 0x200, 0x800, 0x8e2, 0x7ff}, {0x5, 0x6, 0xd, 0x7fff, 0x3f4, 0x8}, {0x1, 0x3ff, 0xa6, 0xc3b, 0xba6, 0x7fffffff}, {0x7, 0x0, 0xa75, 0xc46, 0x5, 0x4}, {0x9, 0x64, 0x86a7c7a, 0xe19, 0x2, 0x9}, {0x0, 0x7f, 0xfffffffa, 0x6, 0x461f}, {0xfffffffd, 0x9, 0x3ff, 0xe9d, 0x5, 0x25}, {0x6, 0x8, 0x3, 0x2, 0xfffffffb, 0x5}, {0x1, 0x20, 0x5, 0x400, 0x4000000, 0xf184ed08}, {0x2, 0x9, 0x57b, 0x2, 0x2, 0x10}, {0x4de, 0x81, 0x7, 0xfff, 0x8, 0xf}, {0x3, 0x7, 0x7, 0x3, 0x9, 0x2f}, {0x5, 0x0, 0x2, 0x2, 0xfffffff9, 0xaab}, {0x52, 0x3, 0x9, 0x10000, 0x800, 0x1}, {0x0, 0x8, 0x300, 0x4, 0x8001, 0x5}, {0x6, 0xf5fe, 0x6, 0x7, 0xbd6, 0x5}, {0x0, 0x4, 0x3e71, 0x7, 0xfffffa95, 0x1}, {0x1, 0x7, 0x5, 0x4, 0x40, 0x19}, {0x6e, 0x1, 0x4, 0xfffff376}, {0x10001, 0xff, 0x6, 0x5eb9, 0x6, 0x1}, {0x1, 0x6, 0x0, 0x0, 0x3, 0x3}, {0xfffffffb, 0xc89a, 0x8001, 0x5, 0x1}, {0x80, 0x0, 0x7, 0x708, 0x73da, 0xc}, {0x80, 0x4, 0x9, 0x9, 0x0, 0xffdb}, {0x7, 0x16, 0x101, 0x0, 0xffffffff, 0x5}, {0x6, 0x401, 0x3, 0x7, 0x4, 0x7}, {0x40, 0x100, 0x0, 0x4, 0xffffffff, 0x9}, {0x8, 0x6, 0x44af, 0x6, 0xfffff296, 0x7}, {0x0, 0xd6, 0x9, 0x2, 0xf6, 0x6}, {0x7a, 0x64, 0xe, 0x10001, 0x5, 0x2}, {0xc, 0x9, 0x9, 0x8, 0x7, 0x2}, {0x7, 0x9, 0x9e, 0x1, 0x400, 0xff}, {0x3, 0x4, 0x6, 0x4, 0x2e, 0x977}, {0xbdc, 0x1, 0x1, 0x7, 0x4, 0x3b3}, {0x0, 0x2d28, 0xec5a, 0xcb, 0xf74, 0x10}, {0x8, 0x6, 0x5, 0x0, 0x7f, 0xa76d}, {0x2, 0x2, 0xdf33, 0x1, 0xf, 0x7fffffff}, {0x7, 0x5, 0x8, 0x8, 0x3, 0x3}, {0xfffffffb, 0x2, 0xf, 0x5, 0x4, 0x1}, {0x1d, 0x6, 0x5, 0x0, 0x74ffc3b9, 0x1}, {0xb07f, 0x9, 0x3, 0x6, 0x6, 0x4}, {0x8, 0x1000, 0x5377, 0x9, 0x0, 0x8001}, {0x0, 0x800, 0x8, 0x80000000, 0x7, 0x7fffffff}, {0x2, 0x3, 0x100, 0x2, 0x1, 0x6}, {0x7, 0x7, 0x3, 0x8, 0x66d5, 0xfff}, {0x0, 0x4, 0x6, 0xfffffff7, 0xb6, 0xe}, {0x1, 0x5, 0x1, 0x4, 0xf9, 0x80000000}, {0x4, 0x0, 0x8, 0x8, 0x8, 0x728e}, {0x80000001, 0x1, 0x8, 0x3, 0xe, 0x3413}, {0xeaca, 0x5, 0x5, 0x180, 0x6d2d, 0xfa2}, {0xf90, 0x2, 0x1dfa, 0x6, 0x1b, 0x7fffffff}, {0x10, 0x172a, 0x10002, 0x5, 0x3, 0x9}, {0x9, 0x8, 0x8449, 0x7, 0x365, 0x6}, {0xfc, 0x2, 0x6, 0x8001, 0xb2e8}, {0x1, 0xc, 0xc1a7, 0x5, 0x3, 0x9}, {0x10, 0x8, 0xd, 0x200, 0x8, 0x8}, {0x5, 0x9, 0x6, 0x7, 0x4, 0xe455}, {0x0, 0x5, 0x5, 0x1000, 0x1, 0xbdf9}, {0x3, 0xdb26, 0x2, 0x200, 0x80000001, 0x6}, {0x80000001, 0x3, 0x8, 0xffff, 0x7}, {0x2, 0x0, 0x7, 0x1, 0xfff, 0x1}, {0x5, 0x2f0, 0x8, 0xffd, 0x0, 0x15}, {0x3, 0xb5c0, 0xfffffff7, 0x3, 0x7, 0x7ff}, {0xc, 0x7ff, 0x0, 0x10, 0x6, 0x2}, {0x9d3f, 0x8, 0x9, 0x0, 0xffffffff, 0xffff}, {0x2, 0x7, 0x4, 0x0, 0x3190, 0x4}, {0x6, 0x5, 0x8, 0x7f, 0x7, 0x3}, {0x3, 0x20000000, 0xe, 0x3, 0x0, 0x5}, {0x9829, 0x7, 0x80, 0x1, 0x6, 0x4}, {0x6, 0x10000, 0x1, 0x5, 0x8001, 0x3a}, {0x8, 0x2, 0xedb, 0x8, 0x8, 0x3}, {0x4, 0x3, 0x38c, 0x6, 0xffffd804, 0x80000000}, {0x6, 0xd, 0x1, 0x6, 0x10001, 0xfffffffc}, {0x80, 0x9, 0x3ff, 0xbfe, 0xfffffff7, 0x7}, {0xbf, 0x4, 0x0, 0x4, 0x5, 0x2}, {0x2, 0x8, 0x97, 0x0, 0xfa, 0x10001}, {0x8, 0x6, 0xb, 0x3, 0x3a1, 0x5}, {0x3ff, 0x8, 0x6, 0x1, 0x4, 0x4}, {0x7, 0x7fffffff, 0x9, 0x4, 0x1, 0x401}, {0x6, 0x0, 0xd7a, 0x7, 0xec, 0x5}, {0x8, 0x5, 0x0, 0x2, 0x8, 0x4}, {0x7, 0x7, 0x0, 0x0, 0x2, 0xa03a}, {0x8000, 0x10, 0x92, 0xd, 0x7, 0x4}, {0x80, 0x5, 0x5, 0x6, 0x3, 0x3}, {0x1ff, 0x4, 0xc35, 0xffffffff, 0x0, 0x3ff}, {0x86a6, 0x5, 0x200, 0x80, 0x5, 0x3}, {0xffff0001, 0x0, 0x0, 0x0, 0x800, 0x4}, {0x2, 0x0, 0x7, 0x6, 0xe958, 0x5}, {0xfffffffa, 0xfffffff9, 0xc, 0x40000, 0x7, 0xff}, {0x0, 0x6, 0x80000000, 0x7, 0x0, 0x8}, {0x0, 0x3, 0x5003, 0xff, 0x400, 0x7}, {0x6, 0x8000, 0x9, 0x1000, 0x8, 0x7ff}, {0x1, 0x10001, 0x7, 0x6, 0x5, 0x10001}, {0x40, 0x0, 0x8, 0xfa2d, 0x3a800000, 0x6}, {0x6, 0x3384, 0x64a0, 0x3, 0x7, 0x6}, {0x80, 0x0, 0x8, 0x3, 0x1, 0x7}, {0xce6, 0x7, 0xfff, 0x3, 0xc, 0xffffffff}, {0xfffffff9, 0x3, 0x0, 0x0, 0x1, 0x7}, {0x2, 0xc, 0x9, 0xc9a, 0x3, 0x4}, {0x7d, 0x4, 0x7984, 0x354, 0x0, 0x3ff}], [{0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x5, 0x2}, {0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5959cb9539402f00}, {0x1}, {}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}]}}]}, {0xd0, 0x6, "578d5a7c54d547e19e163c39398df603c0062f980418e5e1f8043cd3733fd2f4fd6525c969a8dbd62078daaaf540c56947539b440a165f8dda17cc802ae6bf85a28cd8641af61d6f748fb2069df13679543fe7d9512d6023137f9a78fa545d077f17830e9b2dc33573a9a571b02bfc59bdd555c706918a53b8083d00cf69d79989ea51e9eb8c4413158fce5686352c9949920df06bdfcf34effe41e4b0ac8af0ebea14d60d291973f8839ab22102ed9166ce5b5e318b55ba072482db86051bb3c447b28d77992b7c32bd1075"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_sample={0x88, 0x18, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}]}, {0x44, 0x6, "24b9d45c75c352435174a3a65128ddb117bd56bf27bac7e25a3a9a0c9779e75b1376ff4b9a2aa4b2ed0ef601f21e900763b5612ee30aa10e66ec25c951b31242"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x1e58, 0x12, 0x0, 0x0, {{0xa}, {0x1dbc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb8, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x9bf2414cd93f911a}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x9, 0x2, 0x1, 0x7f, 0x5}, 0x4, 0x7, [{0x3, 0x1c0, 0x3, 0x3ff, 0x7fffffff}, {0x0, 0x3, 0x9275, 0x0, 0x3, 0x6}, {0x9, 0x4, 0x0, 0x2, 0x0, 0x8}, {0x9, 0xb3a9, 0x3, 0x6, 0xffff, 0x1}, {0xfff, 0xcfc, 0xff, 0x8, 0x100, 0x2}, {0x2, 0x3, 0xf, 0x6, 0x7}]}, [{0x6, 0x5, 0x1, 0xfff, 0x0, 0xffffff4b}, {0x4, 0x6, 0x6, 0xffffffff, 0x6, 0xf9a}, {0x1, 0xfffffffe, 0x9, 0x7, 0x4, 0x7}, {0x7ff, 0x2, 0x8001, 0xffffffff, 0x1, 0x4}, {0x125ce049, 0xfffeffff, 0x44c, 0xbe0, 0x8, 0xfffffe00}, {0x0, 0x1, 0x6, 0xffffffff, 0x7f}, {0x0, 0x0, 0x4, 0x3}, {0x9, 0x1, 0xffffffff, 0x9, 0x8a1a, 0xff}, {0x4, 0x5b3, 0x7111, 0x0, 0x7, 0x4000000}, {0xfffff889, 0x1, 0x2, 0x9, 0xfffffffc, 0x3a}, {0x8, 0x800, 0x6, 0x8, 0x401, 0x800}, {0x5, 0x8, 0x6b1, 0x8001, 0x6, 0x7fffffff}, {0xbc, 0x1000, 0x2, 0x9, 0xd60a, 0x401}, {0x8000, 0xfffffff5, 0xa3a, 0x0, 0xfffffff7, 0x3}, {0x10, 0x1, 0x8, 0x3, 0x5, 0x7}, {0x800, 0x7fff, 0x80000001, 0x8, 0x9, 0x3}, {0xfeff, 0x7, 0xcf8, 0x4, 0x5, 0x10000}, {0x3, 0xd, 0x7, 0x786, 0x3463a64c, 0x3}, {0x51a990db, 0x2, 0x2, 0x1, 0x2, 0x1}, {0x3, 0xffffffff, 0x7, 0x9, 0x6}, {0x7fffffff, 0xba, 0x3, 0x4, 0x4, 0x6}, {0x0, 0x400, 0xbd91, 0x8, 0x60, 0xe1}, {0x8, 0x8, 0xffffffff, 0x7f, 0x0, 0xfffffff7}, {0x3, 0x1, 0x4, 0x7, 0x8, 0x7}, {0x9, 0x2, 0x5, 0xb59e, 0xf, 0x28e8}, {0x3, 0x9d, 0x6, 0x5, 0x4, 0x7}, {0x5, 0x3, 0x1, 0xfffffff8, 0x5, 0x3}, {0x9, 0x3, 0x400, 0x7fff, 0xd79, 0x5}, {0x0, 0x5, 0x3, 0x4, 0x8baf}, {0x4, 0x2, 0x8, 0x200, 0x42f9}, {0x100, 0x929, 0x3, 0x677, 0x1, 0x9}, {0x849, 0x4e9, 0x6, 0x5, 0xfffffffe, 0x7f}, {0x0, 0x0, 0x47, 0x9, 0x4, 0x5}, {0x7fff, 0x6, 0x100, 0x1, 0x1, 0xa3f}, {0x401, 0x9, 0x2, 0x7fff, 0x0, 0x5}, {0x1, 0x7, 0x2, 0x4, 0x2, 0x93e}, {0xffff7818, 0x3, 0x6dd, 0x6, 0x4f419e32, 0x2}, {0x1, 0xfffffffa, 0x1, 0x3, 0x6808c26b}, {0x10, 0x3fbaa685, 0x4, 0x9, 0xa5, 0x7ff}, {0x5, 0x6, 0x4, 0x4, 0x80000000, 0xfffffffe}, {0x5, 0x5ecc, 0x1, 0x4, 0x10001, 0x2}, {0x3, 0xffffffff, 0xfffffff9, 0x8, 0x4, 0x4}, {0x8000, 0x7, 0xbaa, 0x7bafeb54, 0xd, 0x7fff}, {0x5, 0x40, 0x8, 0x5, 0x7, 0xb6}, {0x3, 0x9, 0x6, 0xffffffff, 0x1, 0x10100000}, {0x0, 0xfffff001, 0x57, 0x4, 0x8000, 0x3}, {0x7, 0x4, 0x10000, 0x9, 0x80000000, 0x5}, {0x3, 0x3, 0x5, 0x1, 0x3, 0x1}, {0xd, 0x9, 0xbad, 0x9, 0x8, 0x5}, {0x0, 0x100, 0x2, 0x7, 0x9}, {0x77c, 0x1, 0x1000000, 0x4, 0x9, 0xfffffffa}, {0xffffffff, 0x0, 0x7fffffff, 0x3, 0x8, 0x7}, {0x9d, 0x9, 0x5, 0xf8000000, 0x8580, 0x8}, {0x9, 0x308f, 0x7, 0x4, 0xffffffff, 0x9}, {0x7, 0x4, 0x6, 0x7, 0xbe, 0x732f}, {0x4, 0x7, 0x9, 0x80, 0xffff9101, 0xa}, {0x1, 0x3, 0x3, 0x6, 0x9, 0x8001}, {0x8, 0x100, 0xc1fe, 0x7fffffff, 0x4, 0x100}, {0x80000000, 0x6, 0xfffffff8, 0x9, 0x100, 0xc}, {0x6, 0x9, 0x95ab, 0x7, 0x0, 0xba40}, {0x2, 0x7, 0xb, 0x8a7, 0x0, 0x3}, {0x3, 0x0, 0x3, 0x2, 0x1dc00}, {0xa, 0x8, 0xf, 0x0, 0x3, 0x9}, {0x92f, 0x1, 0x7fffffff, 0x0, 0x80, 0x8}, {0x7, 0x0, 0xfffffffc, 0x5, 0x56a8, 0x7}, {0x7f, 0xd3c9931, 0x0, 0x0, 0x2e0, 0x3}, {0x5, 0x0, 0xb0, 0x1c3c, 0x0, 0x9}, {0x8, 0xfb1a, 0x2, 0x8, 0xe4, 0x3ff}, {0xfffffc00, 0x8, 0x8, 0x4d1a, 0x2, 0xf00}, {0x3, 0x7, 0x400, 0x5, 0x1, 0x10}, {0x2, 0x0, 0x2, 0x9, 0x2, 0x3}, {0x1, 0x2, 0x200, 0x74, 0x1, 0x40000}, {0x0, 0x3, 0x5, 0x2a1, 0x3, 0x4}, {0x3587e7a, 0x10001, 0xc, 0x7, 0xf11f5b91, 0xfffffff7}, {0x84f, 0x100, 0x1, 0x5, 0x0, 0x2}, {0x0, 0xd8, 0x80, 0x3, 0x6, 0x80000000}, {0x5, 0x1, 0x2, 0x2, 0x0, 0x3}, {0x3, 0x5, 0x548, 0x8000, 0xdef}, {0x4, 0x8, 0x100, 0xb2b1, 0x2, 0x80000000}, {0x3, 0xf, 0x4, 0x97ae, 0x1, 0x100}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x953}, {0x5, 0xd54c, 0xfffffffd, 0x80000000, 0x8aa, 0xfffffff7}, {0x2, 0x4, 0x2, 0x0, 0x7fa, 0xca}, {0x1, 0xfb3, 0x3, 0x7, 0x7, 0xfffffff0}, {0x2, 0xdea4, 0xf8d, 0x46a, 0xff, 0xd}, {0x9, 0x4, 0xffffff01, 0x401, 0x3, 0x6}, {0x78000, 0x4, 0x7fffffff, 0x75c1, 0x3, 0x6}, {0xb6e4, 0x80000001, 0x2, 0x17, 0x3a54, 0x4}, {0x6, 0x2, 0x3, 0xf3, 0x9, 0x6}, {0x10000, 0x519b3d62, 0x7, 0x3, 0x2, 0x8000}, {0x0, 0x10001, 0x8, 0x7fff, 0x9, 0x2}, {0xffffffff, 0x82, 0xe1, 0xb47, 0xd, 0x9}, {0x5, 0x3, 0x2, 0x8, 0x5, 0x3}, {0x6, 0x3, 0xfffffffa, 0x6, 0x80, 0xffffffeb}, {0x5e92, 0x7cc, 0x7, 0x4, 0x31f9, 0x1}, {0x8, 0x1, 0x9f2b, 0x4a6b, 0x0, 0x9}, {0x8000000, 0x200, 0x7, 0x5, 0x89, 0xffff}, {0x5, 0x4, 0xa, 0x7, 0x4, 0x200}, {0x7, 0x7134, 0x1aaee63, 0xffffffff, 0x3, 0x3}, {0x4, 0x3, 0x8, 0x7, 0x7, 0x9}, {0x2, 0xb07d, 0x2, 0x10001, 0x2, 0xfffffffb}, {0x7, 0x3, 0x7fffffff, 0x3, 0x20}, {0x4, 0xfffffffd, 0x2, 0x0, 0x7, 0x9}, {0x8, 0x4, 0x800000, 0x200, 0x1, 0x7}, {0xffffffff, 0x3, 0x8, 0xdfe, 0x0, 0xfff}, {0x7f, 0x800000, 0x6, 0x7fff, 0x996b, 0x4}, {0x6, 0xfffffffe, 0x5, 0x80000001, 0x10000, 0x9}, {0x8, 0x9, 0x6, 0xffff, 0xffff0000, 0x8}, {0x7, 0xed, 0x1, 0x5, 0x4, 0x80}, {0x6, 0x6, 0x7fff, 0x100, 0x3ff, 0x4}, {0x9, 0x3, 0x5, 0x9, 0x0, 0x3}, {0x7, 0x0, 0x40, 0x7ff, 0x400, 0x10001}, {0xead6, 0x53c, 0x8, 0x0, 0xfff, 0x7}, {0x7fffffff, 0xfffff000, 0x8722, 0x6, 0xfffff001}, {0xd, 0x7, 0x5, 0xd, 0x1, 0x4}, {0x9, 0x76a, 0x3, 0x3, 0x4, 0x3}, {0x7fffffff, 0x1, 0x6, 0x4d, 0x8, 0xd}, {0xfffffff7, 0x39be, 0x8ce, 0x6, 0xf9f, 0x6}, {0x3, 0x1, 0x0, 0x4, 0x3000, 0x8}, {0x2, 0x5, 0xe2, 0xd, 0x10, 0x7ff}, {0x4, 0x9, 0xcde9, 0x9, 0x1, 0x5}, {0x4, 0x7, 0xff, 0xc0000000, 0xfa0, 0x80000001}, {0x9, 0x9, 0x6, 0x7, 0x7f, 0xb98c}, {0x3, 0x3, 0xce, 0x2, 0x0, 0x1}, {0x6, 0x44d, 0xe, 0x40, 0xbb}, {0x7, 0xe4, 0x0, 0x80000001, 0x4, 0x6}, {0x18000, 0xae4, 0x1, 0x2, 0x7, 0xfffffffe}, {0x2, 0xddd9, 0x7, 0x4, 0x5, 0x2}], [{0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x1}, {0x3}, {}, {0x1}, {0x6}, {0x5}, {0x4, 0x1}, {0x3}, {0x2}, {0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0xceb02b969b86697b}, {0x3}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x0, 0x2}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5, 0xfe8b79ceb7ac186e}, {0x4}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x5}, {0x5}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x7}, {0x5, 0x1}, {0x5}, {0x1}, {0x3}, {0x5}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x40, 0x7, 0x5, 0x86fa, 0x2a4f}, 0xff, 0xb0, [{0x4, 0x5, 0x8000, 0x95b0, 0x3, 0x6}, {0xfffffffd, 0x6028dc3, 0xb541, 0x4, 0x9, 0xa}]}, [{0xa9f, 0x7, 0xca, 0x0, 0x800000, 0x9}, {0xe, 0x3ff, 0x1, 0x81, 0x1}, {0x7, 0x6, 0x9, 0x4, 0x8, 0x2}, {0x486a6fdc, 0x7f, 0xfffffffb, 0x8, 0x4, 0x9}, {0xffff, 0x8, 0x86, 0x1006ff25, 0x7ff, 0xb6f6}, {0x9, 0x7, 0x4, 0x5, 0x1, 0x3}, {0x4, 0x80000000, 0xf6, 0x2, 0x6, 0x7}, {0xfff, 0x2e, 0x3, 0xffff, 0x7, 0x7ff}, {0x9, 0x4, 0x4, 0x2, 0x3, 0x7}, {0x1, 0x8001, 0x5, 0x3, 0xff}, {0xa, 0x5, 0x8, 0x8, 0x7, 0x4}, {0x800, 0x6, 0x4, 0xc5, 0x6, 0x2}, {0x8, 0x1ba2, 0x7ff, 0x7ff, 0x5, 0xfbc7d769}, {0x5, 0x2, 0x5, 0x4e, 0x10000, 0x43985db0}, {0x80000000, 0x1, 0x7, 0xe, 0x5, 0xc9}, {0x8001, 0x0, 0x10001, 0x6, 0x5, 0xe9}, {0x9, 0x5, 0x2836, 0xce6, 0xfffff000, 0x7fffffff}, {0x7f, 0x0, 0x6, 0x8, 0x9}, {0x8, 0x7ff, 0x71, 0x7, 0x4, 0x3}, {0x2cf, 0x0, 0x7f, 0x0, 0x7, 0xd32}, {0x55f, 0xfe0, 0x8, 0x1000, 0x80, 0x2}, {0xd2, 0x7, 0xa8, 0x6, 0x8, 0x7269}, {0x1, 0x200, 0xe01, 0x2, 0x400, 0xef5}, {0x6, 0xffd7, 0x600000, 0xfffeffff, 0x5, 0x5}, {0xd, 0x8, 0xfffffffe, 0xffffffff, 0x4, 0x10000}, {0xd, 0xb, 0x2, 0x5, 0x5, 0x4}, {0x800000, 0x8, 0x69e, 0x9, 0x5, 0x9}, {0xe, 0x97, 0x0, 0x9, 0x0, 0x1}, {0x0, 0xfffffffd, 0x3, 0x9, 0x10000, 0x8}, {0xfffffff9, 0xfffffff7, 0x5, 0xfffffff8, 0x1, 0x9}, {0x5, 0x400, 0xc, 0x2, 0x2, 0xfff}, {0x9, 0x3, 0x1c8f, 0x9, 0x1, 0x90d6}, {0x291f, 0x7, 0x0, 0x2, 0x5, 0x41}, {0x81, 0x8d998ed2, 0x4219f092, 0x3c, 0x0, 0x3}, {0xc464, 0x5, 0x9, 0x5, 0x7, 0x4}, {0x81, 0x8, 0xb6a, 0x6, 0x1000, 0x9}, {0x8, 0x0, 0x80000000, 0x9, 0x9, 0x3}, {0x8001, 0x80000001, 0x9, 0x978e, 0xfff, 0x613}, {0x1, 0x9, 0x7, 0xffff, 0x3, 0x3}, {0x3, 0x1c6, 0xe3d, 0x101, 0x5, 0x7}, {0x2, 0x3, 0x5456, 0x2, 0x3, 0x6}, {0x9, 0x0, 0x3, 0x10, 0x8, 0xb35d}, {0x4, 0x50a, 0x5, 0x0, 0x180000, 0x9}, {0x3ff, 0x8, 0x8001, 0x6, 0x5, 0xfffff001}, {0x6, 0x64f, 0x3, 0x340, 0x9, 0x5}, {0x200, 0x8ca, 0x1, 0x7103f496, 0x8000, 0x400}, {0x7, 0x5, 0x7, 0x9, 0x1, 0x1}, {0x9, 0xdc, 0x8, 0xfffffff8, 0x6, 0xe}, {0x24e, 0x5, 0x3, 0x8, 0x7, 0x3}, {0x5, 0x4c5b, 0x8001, 0x100, 0x6}, {0x400, 0x8, 0x101, 0x2f53, 0x3, 0x4}, {0xffffff08, 0x4, 0x8, 0x10001, 0xffffffff, 0xfffffffa}, {0x4, 0x7, 0x10001, 0xfffffffb, 0x3, 0x6}, {0x0, 0x800, 0x3, 0x69, 0x6, 0x5}, {0x8, 0x0, 0x0, 0x30, 0x1ff, 0x10}, {0x487de4c3, 0x101, 0xe, 0x7fffffff, 0x7fff, 0x10000}, {0x8, 0x5, 0x0, 0x2, 0x2, 0x6}, {0x25, 0x3, 0x4, 0xffff, 0x3, 0xf}, {0x8, 0xdea, 0x7, 0x9, 0x9}, {0x3, 0x80, 0x7f, 0x80, 0xfffffffc, 0x1189}, {0x401, 0xa, 0x8, 0x9}, {0x7fff, 0x10000, 0x9, 0x445d, 0x4, 0x5}, {0x5, 0xaf, 0xfffffffc, 0x2, 0x6, 0xc7d}, {0x1, 0x1b9, 0x10000, 0x8, 0x8, 0x7f}, {0xfffffffe, 0x2, 0x1, 0x1, 0x45a, 0x400}, {0x7fffffff, 0x7, 0x4, 0x5, 0x6, 0x3ca55cbe}, {0x0, 0x9, 0x9, 0xfffffffc, 0x2, 0x19}, {0xcf2, 0x8, 0x5, 0xfffffffd, 0x10, 0x4}, {0x3, 0x1fbd, 0x0, 0x9, 0x1, 0x4}, {0x8, 0x3, 0x2c, 0x80, 0x400, 0x6}, {0x3, 0x200, 0x9, 0x4, 0x8, 0x2400}, {0x9, 0xfffff000, 0x5, 0x100, 0x75596640, 0x45bb}, {0x6dab, 0x0, 0x6, 0x52a3, 0x5}, {0x8, 0x1, 0x40, 0x87, 0xfffffffe, 0x8}, {0xf, 0x4, 0xe, 0x6, 0x81, 0x7f}, {0x5, 0xfff, 0x4, 0x1, 0x5, 0x7fffffff}, {0x136, 0x6000, 0x2, 0x5, 0xfffffff8, 0x7}, {0xfffffff8, 0x9, 0x5, 0x4, 0x4, 0x36}, {0xf1, 0x6, 0x8, 0x8, 0x80000000, 0x7f}, {0x3000000, 0x3, 0x2, 0x800, 0x8, 0xffff7fff}, {0x7, 0x1ff, 0x2d32, 0xcdd3, 0x6, 0x8}, {0xdba, 0xa, 0x6, 0x806, 0x81, 0x4}, {0x80000001, 0x3, 0xfffffffd, 0xe28, 0x9, 0x3}, {0x2ef7, 0xffffffc0, 0x0, 0x2, 0x1, 0xfffffff2}, {0x68, 0x6, 0x8, 0xfffffff9, 0x9, 0x8000}, {0x6, 0x40, 0x1, 0x8, 0x8, 0x5}, {0x1, 0x7fff, 0x8c2, 0x6, 0x1ffe, 0x1c}, {0xc, 0x2, 0x0, 0x7, 0xd, 0x7}, {0x7, 0xc, 0x0, 0xee, 0x9, 0x7f}, {0x8000, 0x734a0000, 0x6, 0x2, 0x7ff, 0x4}, {0x0, 0x5, 0xc, 0x2, 0x401, 0x1}, {0x4d946148, 0x4, 0x1, 0x9, 0xfff, 0x3}, {0xd, 0x8, 0x1, 0x7, 0x41ffabc, 0xb40}, {0x6, 0x9, 0xe47, 0x6, 0xdb, 0x70}, {0x8, 0x100, 0x1, 0xfffff838, 0x0, 0x2fe}, {0x0, 0x8afa0640, 0x6, 0x81, 0xfffffffb, 0x2}, {0x69b, 0x3, 0xfffffffe, 0x2, 0x8, 0xfffffffa}, {0x6ecf, 0xe1e, 0x6, 0x10000, 0xfb3a, 0x7c6c}, {0x7, 0x4, 0x49d, 0x7, 0x7fa8, 0x5}, {0x100, 0x1000, 0x9, 0x2, 0x6, 0x80000001}, {0x7, 0x8, 0x7, 0xfff, 0xffffffff, 0x3ae8}, {0xf, 0x4c9a, 0x7, 0x0, 0x4, 0x2}, {0x8, 0xe262, 0x9}, {0xa76, 0x5, 0x7, 0x4e1eb30, 0x10, 0x5}, {0xffff, 0x4aec, 0x3ff, 0x6, 0x8, 0x8000}, {0xa9, 0x7, 0x8, 0x1ff, 0x7, 0x6}, {0x7f94, 0x4, 0x5, 0x7, 0x5, 0x2}, {0x0, 0xe, 0x0, 0x9, 0xfffffffc, 0xffffffff}, {0x80, 0xfffffff9, 0x100, 0x8, 0x9, 0x8000}, {0x101, 0xfffff3d6, 0x10, 0x1, 0x659, 0xfffffff7}, {0x4, 0x6, 0x7ff, 0x0, 0x7f, 0x5}, {0x7, 0x0, 0x1, 0x9, 0x1, 0x5}, {0x200, 0x0, 0x7fff, 0x10001, 0x7fff, 0x80000001}, {0x780000, 0x5e0f, 0x5de, 0x6, 0x1}, {0x1, 0x101, 0x6, 0x0, 0x1, 0xfffffe00}, {0x6, 0x3, 0x6, 0x8001, 0x5, 0xf5d}, {0x7, 0x401, 0x7, 0x5, 0x1, 0xb}, {0x3ff, 0x23, 0x400, 0x7, 0x2, 0x9}, {0x4, 0x35, 0x0, 0x7, 0x2, 0x82}, {0x4, 0x6, 0x1cde, 0x5, 0xd9f, 0x2}, {0x4, 0x8, 0x4e00, 0x30a1, 0x9, 0x2}, {0x0, 0x40, 0x7, 0x3, 0x100, 0x5}, {0x9, 0x80000001, 0xdc7, 0xd22, 0x848, 0xe585}, {0x5, 0xfff, 0x81, 0x6, 0x3, 0x9}, {0x7, 0x3, 0x80000000, 0xd47, 0x2, 0x24a2}, {0x1, 0x0, 0x7, 0xfffffffd, 0x5, 0x2}, {0x400, 0x4, 0xd0, 0x80000001, 0x3, 0x6}, {0x7, 0x7fff, 0x8d, 0xfffffffd, 0x26f, 0x8001}], [{0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0xa, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {}, {0x5}, {0x3}, {0x5, 0x1}, {0x2}, {0x4}, {}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x2}, {0x5}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x1, 0xe511e5f70303116d}, {0x3, 0x1}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x741d20d603d0fe8, 0x1}, {0x2, 0x1}, {}, {0x1, 0xe866dda8997cce42}]}}]}, {0x72, 0x6, "44fa579635aada94f14eb5f498eca702b290c7e2753aa1fc7c233e916fa9938bfd3a8eba4e7dbf4c6b7d0472160e02b445f6477e0f6f29212758e5782fd93ba7fc5b0716d688b74f46af22954ad85a81dcd4fc6d8f6b2edadce975f02482004e2fd42b04b6f5e08bf7600b23836b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x94, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x5f, 0x6, "dd3ad7f5dff998d6e6fb3389302380441b51bed006e11d8221c125c58083ff17258f1c2a4eadae4d2a6e65e0261d718fa4b9448230347dcb848005382b615708fcbfb722ca4bfdc75f3511ebd7d7b05fe44ea326d98af0cdfb6409"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x960, 0xe, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x400, 0x5, 0x9, 0xe9c, 0x7, 0x7fffffff, 0x8, 0x9, 0x10, 0x3ff, 0x6f, 0x3, 0x4, 0x6, 0x5, 0x22, 0xfffffff7, 0x7f, 0x5, 0x8, 0x3, 0x9, 0x4, 0x6, 0x0, 0xe881, 0x25bc, 0x6, 0x73f, 0x8, 0x9, 0x0, 0x10000, 0x9, 0x4, 0x38, 0x84b, 0xb, 0x3, 0x2, 0x9, 0x4d, 0x5, 0x8, 0x4, 0x1, 0xceec, 0x101, 0x10001, 0xb1, 0x4381, 0x200, 0x8, 0x3, 0x9, 0x2, 0xf68, 0xfffffff7, 0xfffff001, 0x7, 0x401, 0x14, 0x40, 0x2612, 0xffffff6a, 0x4, 0x1, 0x67c3, 0x4, 0x8001, 0x0, 0x8, 0x10001, 0xd, 0x7fff, 0x2, 0x5, 0x7, 0xfffffffd, 0x1, 0x169, 0x2, 0x10000, 0x6, 0x5, 0xb3, 0x9, 0xf1, 0x2, 0x80000000, 0x81, 0xae99, 0x80000001, 0x31, 0xfff, 0x1ff, 0x7fff, 0xfffffff9, 0x5, 0x0, 0x8, 0xfffffffd, 0xb059, 0x0, 0x3, 0x100, 0xe3a4, 0x3af, 0x200, 0x7ff, 0x6, 0x8, 0x8, 0x0, 0x4, 0x8, 0x1, 0xae9, 0x80, 0x8, 0x10000, 0x10, 0x8, 0x6, 0x2, 0x1, 0x3, 0x101, 0x241, 0x9c, 0xe9, 0x4, 0x0, 0x0, 0x5, 0x0, 0xa2, 0x2, 0x80, 0xfff, 0x7, 0x8, 0x0, 0x7fff, 0x80000001, 0x400, 0x6, 0x8, 0x2, 0x5, 0xfffffff7, 0x3, 0x8, 0xfffff1f0, 0x6, 0x5, 0x8, 0x1, 0x1, 0x6, 0x8, 0x6f, 0x4, 0x7fff, 0x2, 0xc3d2, 0xff, 0xffff, 0x1000, 0x4, 0xe1, 0x3239, 0xde, 0x0, 0x401, 0x2, 0x9, 0x0, 0x5, 0x8, 0x8001, 0x700e, 0x7ff, 0x51a, 0x0, 0x6, 0x5, 0x101, 0x7, 0x2, 0x6, 0x1, 0x10000, 0x9, 0x9e4, 0x9, 0x7, 0x8f220, 0x3fb, 0x6, 0x43461ae0, 0x10, 0x3, 0x0, 0x6, 0x5, 0x1, 0x5, 0x0, 0x1c00, 0x722, 0x200, 0x8, 0x2, 0x3, 0x80000000, 0x7, 0x7, 0xb, 0x3, 0x1218, 0x101, 0xffff, 0x4, 0xfffffc7d, 0xe18, 0xfffffff9, 0x2, 0x9, 0x5, 0x9, 0x1, 0x4, 0x2, 0x9dd, 0xe2, 0x0, 0x4, 0x1, 0x200, 0xb, 0x3, 0x3, 0x6, 0x40, 0xf1a, 0xfffffffd, 0x6, 0x1ab4, 0x9, 0x0, 0xfff, 0x2, 0xae30]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x7, 0x80, 0xfffff103, 0x4, 0xa80, 0x5, 0x7, 0x80000000, 0x80000001, 0x4, 0x2, 0x9, 0x7, 0xf, 0x0, 0x7, 0x0, 0x4, 0x6d52b50b, 0xfffffffa, 0x7, 0x8, 0xffff7abe, 0x5, 0x5, 0x8, 0x2, 0x3, 0xfffffff7, 0x9, 0xfffffff9, 0x803, 0x1, 0x0, 0x81, 0x3, 0x0, 0x5, 0x5, 0x1ff, 0x5, 0x0, 0x200, 0x1, 0x8, 0x101, 0xffe, 0x6, 0x7, 0x5, 0x2, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x15b03fde, 0x5, 0x8, 0x4, 0x5, 0x24, 0x8, 0x7b3, 0x0, 0xb, 0x1, 0x8, 0x3, 0x81, 0xcb, 0x0, 0x1, 0x9, 0x400, 0x8000, 0x5, 0x3, 0x4e, 0x8, 0x7, 0x20000000, 0x8, 0x100, 0x885, 0x1000, 0x80, 0x401, 0x7, 0x2, 0x29, 0x81, 0x89, 0x1c0, 0x7, 0xff, 0x0, 0x0, 0xfff, 0x9, 0x9, 0x2, 0xffff1873, 0x25, 0x16357726, 0x71, 0x4, 0x7, 0x81, 0x1, 0x2, 0x172, 0xd, 0x0, 0x7fff, 0x1, 0xfffffffa, 0xd, 0x8, 0x1, 0xfffffffe, 0x5, 0xfffffffb, 0x81, 0xffffffff, 0x5d, 0x20918000, 0x8, 0x7, 0x0, 0x80000, 0x401, 0x0, 0x39, 0x677, 0x400, 0x9, 0xd, 0xf, 0x0, 0x8, 0x1e, 0x8, 0x3, 0xb, 0x3, 0x1e78, 0x9, 0x0, 0x100, 0x61e, 0x2, 0x8, 0xea44, 0x7, 0x1, 0x3, 0x2650, 0x0, 0xfffffffc, 0x9, 0x3, 0xfffffffd, 0x8, 0x4, 0x74, 0xc94, 0x4, 0x6, 0x352, 0x2, 0xa, 0xffffe506, 0x8, 0x8, 0xfd83, 0x4, 0x9, 0x14, 0x40, 0x7, 0x1, 0x77, 0x6, 0x8, 0x2, 0x2, 0xb4, 0x2, 0x9, 0xffffffff, 0x48, 0xfffffff1, 0xac, 0x1, 0x8, 0x9, 0x7bb, 0x5, 0xcea, 0x23, 0x1000, 0x5, 0x9, 0x8, 0x1, 0x3, 0x8, 0xe, 0x7, 0x6, 0x56f, 0x9, 0x3, 0x40, 0x0, 0x7ff, 0x8, 0xffffffb8, 0x3, 0x5, 0x841, 0x7720, 0x0, 0x5, 0x4, 0x800, 0x0, 0xe, 0xf5c, 0x8, 0x1abd, 0x8, 0x0, 0x7, 0x49d, 0x800, 0x2, 0xc, 0x9, 0x2, 0x401, 0x4, 0x80, 0x0, 0x6e5, 0x826b, 0xa, 0xf1, 0x5, 0x3, 0x6f, 0x2, 0xd, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5e, 0x7, 0x10, 0xf, 0x9, {0x4, 0x0, 0x8, 0xc58, 0x2, 0x7f}, {0x3, 0x2, 0x9, 0x7ff, 0x9, 0x6}, 0x3, 0x3, 0x8}}]]}, {0xef, 0x6, "a46ea87f031a0c117d47fbc66a9da6567abe8554960cfab691ad30f44ee1c8a94faf754381ce464001c6c8595ef4c83ca20f9b81ff4f02e40b92802b4e72e04de625115de9fcb8c1256ddbb8e43c17f0ccab35808ed83666f49b61593e9b2361d13368146f3b5f7410840e3ded4c846abb2b3ae233d7b4e3e7d4f91ff3b19c3a0c7d42667462c8de65d3662d79485803ca182078a3ceb891d4d5bba9946ac5620bc4e2d893d4fe86b420b673fc50c5c4854300227c8c376ead8974868496a63b4a3f560c956e1985522ab1bd025c2881593941f59caeb51d93a55542fa2820c66d746355b2deafb2e1447e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0xf0, 0x1d, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0xba, 0x6, "2c2246c455ed9ab28d6b07ba5065acc4eb180bb7d6fd57b0b17173262b5196fdfeabe5bec0f9be00bd1efd05b755974f7d10f34f72b2e229443e95b33651dc25ad66f5e9e3790128ee7f0c9dddddeb3d51b927faf885730a8c88c6f9b1bd8c3777f5e1c5ec5d36d636560124b8d87a65426b18b4dab36d62a19cd92f6e819532a949844b9f6d9859aa68915efe2e729e4d615a7c6273b672a67b939750290e001dc0cbe6c03e55de5e387568fa37e680e61983117206"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0xf4, 0x18, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x71d9}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x0, 0x1, 0xff, 0x200}, 0x2}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x3, 0x4, 0x4, 0xb86}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x55, 0x6, "9fb88da5daa401240be0af79e600c7d6f4cdc962926742e2d9add56a0170b1a3be2be54fc28b0b42d7d1a3b2bbb95d4890fa7382e53d9d5be3aff8e9e4d83309998e72b04a5a21d4d0e9be644f4eb5aafd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xe8, 0xa, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8001}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xe}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x7b, 0x6, "6c727431c6fabb127178c1f9170b86174fd02618718f43727bf0bb9e4a3e376c389ae7156d46a3461d5c3ee119b374564b9ff004e0b090356bc3f7b7c9af8a00c993f2e829b655016ba73f7ea4949b01a7cdef757b3d2b8525960d4fc28338b997900ff18f939f921f2c5a5fa2e0c6fb63d39c513bd5a6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0xb0, 0x1f, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x3ea6}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_LABELS={0x14, 0x7, "a1b0ae4f886b389d350d1385aec58935"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}]}, {0x44, 0x6, "d36f6d0f5c6d49983fca0b8214b7a5a70297ce596da80db74e31129db02e394f1f0db4df8f0201a69e44d9add32b9490a0ade891bc137c843d95c6e10d6951a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x188, 0xc, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x84c0, 0x8, 0x0, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x2b7, 0x2, 0xfff, 0x8000}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xbd, 0x20000000, 0x5754, 0x5}, 0x1}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x8a48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x5a, 0x13, 0x39, 0x20, 0x6cd, 0x10c, 0x7776, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xae, 0x1a, 0x1, 0xdc, 0xbe, 0x6b, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 3m51.32166028s ago: executing program 3 (id=3328): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="40210500000005306571cd9c7b93c4dcca29fe2c1a3a93e7876421bb2585689a4b63993f43506c74044503c7be414bd491e837dc98747d0338c819989b11a8c8f76ed21bca82974bab977d254281d77a046aa27a59cae34c75825dbcf74e6c2b2a1b421305baa4c62b6052e5f60c0c43907961d3a78b8525a3e7ae6c8438f1cd310baca732ba54d9cfe644b14a6332ec6147b9373aeea3e191cb13d017ecece82ce14f634cedbae0af728a2e4fcfda8f4045eda477ba041066db9fd5ebb2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0xfa) r2 = syz_open_dev$radio(&(0x7f00000001c0), 0x1, 0x2) io_setup(0x3, &(0x7f0000000240)=0x0) io_submit(r3, 0x0, &(0x7f0000000000)) (async) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) (async) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4) sendto$inet6(r1, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 3m51.186650136s ago: executing program 32 (id=3328): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="40210500000005306571cd9c7b93c4dcca29fe2c1a3a93e7876421bb2585689a4b63993f43506c74044503c7be414bd491e837dc98747d0338c819989b11a8c8f76ed21bca82974bab977d254281d77a046aa27a59cae34c75825dbcf74e6c2b2a1b421305baa4c62b6052e5f60c0c43907961d3a78b8525a3e7ae6c8438f1cd310baca732ba54d9cfe644b14a6332ec6147b9373aeea3e191cb13d017ecece82ce14f634cedbae0af728a2e4fcfda8f4045eda477ba041066db9fd5ebb2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0xfa) r2 = syz_open_dev$radio(&(0x7f00000001c0), 0x1, 0x2) io_setup(0x3, &(0x7f0000000240)=0x0) io_submit(r3, 0x0, &(0x7f0000000000)) (async) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) (async) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4) sendto$inet6(r1, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 12.389667151s ago: executing program 4 (id=4106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x1c}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 12.087752945s ago: executing program 2 (id=4109): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000800)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x2}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000300)="917a490b98b0f58e61f5e31bc9cad942ebd10a0bf6bcb4e9ca18b0dd50bbf01b111ba6bc93da06d0c36722aece8307dbb0de639d77b4d3a48d67beef70b369fb6820e573f11d2e55c5e1539bb8321ee054e6cfe5c50d69c4d6e910e087d9b4d4ff6c24fa2055bee644e8713c9295e6f008f4da3abf437a8efb28abc7e92677c515c6df005c3fe38d29d055fd20", 0x8d}, {&(0x7f00000003c0)="2c02a876cd944b591ccaff5a509e4bc6c9e4f4ef4de5cb015c4f6472ad7240bbaf4350c4fd52275085a9539def581514a6152e58c556d77567", 0x39}, {&(0x7f0000000400)}, {&(0x7f00000004c0)="0a6193de0101308ab6808df5c2bd25c7634db90fcafcde20b8cc88e2b96662a8a4756c1f050e78370298be3f265cfa438a3d51b81c71d07a263eceed7b21eac0c2cec907c88e8b3aa0d6c03eeb8c28cf858c8d303c67ec1bd838dd5b5e13837c35a6226e2a2c22e90dfad19a06a8d23b0482c457", 0x74}, {&(0x7f0000000540)="8f9394f1425e6ceafbc819d1e9c7c3a6b4635adbe64cd896853de4fa93363001c1327b3890082c83796aa8d42ce5f6dfed965ca4120d359a0962090fceb4f4801b08e0a41b9b7753d3fbefb6325f0aeaf590be919f8e76a6451db0eaf075edbaba4b09102a8417e9d2fa99fc040c0da0fdd36ce9f5aeab67ef91ae946ed00214cfaaecb2f679988d6c0c9089de4902db0dba79d201ce55bef208e46863a16923df59398769a6a121c33e18205e9d32bbcd906b35834bda4cd699c2a3c2e4e66113ef34b69e940d2cdf0897a7168f0582b00100f3a2ede745e4e0178caf4cb0ff", 0xe0}], 0x5, &(0x7f0000000700)="d34517281862d69a97958f295a838f0b4a19df849eb08b914d361e5adb3fc17f4994d10f842e1cb7bc72d10de4344838a5af5dca80f79cd0bc5e16286fa5010eeff6e9dda238bab5e11425bf138dc96592a818e9f3b54493733cb74b082f9ca48af59cd276c1623497dd8d7281d09cf6f138cee3d07e2dfe7700a25f66d7f4ac31aad06b6e0019a7568706598b5eddd10a2df47bedb235017bdc4a27816fe7ac607ffa2f9cf0f88866a22fd34a757931b0f398c783eca3c27e22f422ffb5fd169040be6f4093e8bd2dba235b504674f68db07d3ab6495b2a7f6e6ca7cab049d9d2180985", 0xe4, 0x840}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) syz_emit_ethernet(0x32, &(0x7f0000000840)=ANY=[@ANYBLOB="0400aaaaaaaa0180c2000000080500000000000000000087e6ef60ba9a8f82629078040014bbac14143589fa0b00"/58], 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000180)={0x2, @vbi={0x6, 0x7, 0x8, 0x3b372a45, [0x7, 0x35b], [0x3, 0x3], 0x108}}) ioctl$TCFLSH(r4, 0x400455c8, 0x0) 10.644469937s ago: executing program 0 (id=4114): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000180)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x15, 0x5, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./cgroup\x00', &(0x7f00000003c0)='hfsplus\x00', 0x8000, 0x0) 9.4707085s ago: executing program 2 (id=4116): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500), 0xc0202, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000740)) fcntl$dupfd(r2, 0x0, r1) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = msgget(0x0, 0x40) msgctl$MSG_INFO(r3, 0xc, &(0x7f00000000c0)=""/173) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x2, 0x3, 0x56b, 0xfffffffffffffffc}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$vhost_msg(r4, &(0x7f0000000480)={0x1, {&(0x7f0000000380)=""/1, 0x1, &(0x7f00000003c0)=""/192, 0x3, 0x3}}, 0x48) dup(0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.381844542s ago: executing program 5 (id=4118): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 8.374522706s ago: executing program 0 (id=4119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sendto$inet(r5, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}}, 0x0) 8.142117791s ago: executing program 5 (id=4121): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee2, &(0x7f0000000040)) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x58e2, 0xfde4, 0x20, &(0x7f0000000340)={[0x6]}, 0x8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="2fb59ffb44602ae36bd341bece505b6fd49c14a96a0fd598971c54ce159707157696533fcdef0281ad064d431c09f162f8bf2bae4ebe2e6f5e7d20a2883ed44c8111957fe17a882e6a4b37aa5440cc7370dd9e67d73cad19a8aac251dc65d8c9ad4cb2ea69eb0c602f51375f12fd8cba4557d35c0000000000", @ANYBLOB="040000000000000000000000fdffffffffffffff000000d200"], 0x50) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x3}, 0x10) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080009000b000000", 0x24) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) 7.021863592s ago: executing program 1 (id=4122): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x80800) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x82}, 0x1c, 0x0}, 0x24004800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0006401010900000000000000000000000000000000000000000a0000008700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) inotify_add_watch(r0, 0x0, 0x6400000c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x80000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000004000080004004400000008001b0000000000"], 0x30}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 6.922941282s ago: executing program 4 (id=4123): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x66) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00000010f9ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="800002000800000008001b0001000000"], 0x28}}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000840)=[{0x3, 0x6000, 0x8f, &(0x7f00000008c0)="74f2f0b618c985b53cb668ea6161e5041843c87830126f22589ce4a218ee4d7526e6ca00000000000000529c8e95a0d9834982f3e5c76592399d7ef260aa637cab4928fd57aa5c4c15182ecc11080dbed756b294cbfa1324691f26ba789a4b3a31cb578ddad277a41006a5b2fb06816b2f3af643f3c2e9180125ad74ec9863e6ad338d77e7996954baf5cc1189eaf6"}, {0x8, 0x401, 0x48, &(0x7f00000003c0)="1a3829900028c5809c9e7650e62db63292c05d2ac40424143e4bc7a7285ae7f9cc0893c1b0b826cca56f2ced157139b29424811214c77fa76a0f9de345d92ee1fbf7fbdfa851458a"}, {0x8000, 0x600, 0x60, &(0x7f0000000440)="5bf41d520234d862dcb83234c06430aad76be02e75c618fbdafe361ff46e1ec0b6db45a3651ebe57676d18575447c78e31e2aaf14c995cf8a4e29b10370158f8a9afb0803c24e4ee551972c30c517decbe06309eb658dda6cddbac16132b38af"}, {0x800, 0x800, 0x1, &(0x7f00000002c0)="f1"}, {0x68, 0x0, 0x8, &(0x7f0000000340)="1bc55d148f1f683a"}, {0x1, 0x0, 0x38, &(0x7f00000004c0)="16c41c5f8b93a97dafcd4f81809403e0fe5cc8e59a31e9b4a1c1110150393bc568809bb176219cbbc5f6c1598a7f658cf13491ddd435bb06"}, {0x7, 0x800, 0xd6, &(0x7f0000000740)="f5b1ec1dc0ec4a0d18900a3a752e587aec2cf96d382a109de4782e9937d4ce106259935a4dd5f369f19e9ad0931fa982ff3f07090bc1c0830d3ce12ca618236b39776ed2a258d182ff35a566345be4291dbcbadb18d769d0030f30c820de43b08ee805c27c7d2da1a209eb5b3be32042801f0c3972efe6d570fa6d712a98f7b62d28b609a839e3b25bc6cc86fdc3b9b1db82bef789cde82a601289cae65fd52bae85648a09dc41dace6930606fab80e5cdc89bb2330d41256873aeddd82e16c71c758ef5a86041a3d669454f4d2710a8d87b2f3c4859"}, {0x7ff, 0x2801, 0xa, &(0x7f0000000000)="afe90800000000000044"}], 0x8}) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r6, 0x25, 0x0, @val=@perf_event={0x9}}, 0x18) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x23}}, {0x1, 0x4e1f, 0x18, 0x0, @wg=@data={0x4, 0x236, 0xffffffffffffff80}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x4, &(0x7f0000000200)={0x6, 0x6}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x13, 0x0, &(0x7f0000000280)) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) writev(r8, &(0x7f0000000d00)=[{&(0x7f0000000980)="c38417ca3695208c7c9de28c1cf6bfdf5d31389db045d9e2c901c1e96eb1c147b1badd0fba6e8f18386e3e13cb7e16b3dbba6b9604417d3707504ca7a446539a1b7fea5c5e7143a0dd5d9396381c29acabb46452dd20cf8fac45e9ccd717a69e73b64d614a452e991c33229103d26bccd540dc2ccac10b84e2a38fba9ddbc9068b6be634d1222d132f3deabba57c31bae1802c4131e00afd323f64f3b99f75eea088d6a6f5e915f1009a9090575b9e0b06cf9e2cd03723", 0xb7}, {&(0x7f0000000580)="8aab60effe1692a9f72fb13524d9b3972e2f282bd49710e7390f8f6722503ace7b949dcd71e96dd92c8f4a55b5ddde36a39f1677f0ecabe6479471b0cb44cff0bb64c7737f0cbc229aa6a928ba5b3f33", 0x50}, {&(0x7f0000000a80)="dca5d1d339130d7397d6c363e5e232d9430668b8d86074e50a25976197fde68e5256a28bfb421e0c8ac25ead72b7ffad5b86557ada632c6a1f8a52127148ec809f4368cf72866e34b81880e803b0c339151a16680b068c36e26dfa8f4a6356ab0c244c9b42b0fdef2af98f31bd83a6f1ae4ae63884431ccca8bd784851468e821cf37838ded3d1fec8ef38437bf9da", 0x8f}, {&(0x7f0000000240)="c75abb0476a0261bc534", 0xa}, {&(0x7f0000000b40)="9f3b925ab6051a0f4373db769c63173cda7f59f6b6631cb445ff033576a80f61011383ca11a5cd614fd8ef9c73fed160fa80b9af69878b4a1635191d57bb39abcf941064ac57f22db5f7c9a276411d50d3a4efd885153a018a3ea812e21f15c7429b8509f6b361e0e4ac6a571cfc3242066fbf6454d9", 0x76}, {&(0x7f0000000bc0)="1175de717185ecea11d45dd6509ae841998749b137c615014f4fb785956315a9768b49e8b1c980fed44ae0546e4f7ea5a0f54a545e27f67a8a5606ece73dbc035444941dcb8fccb9f9f477", 0x4b}, {&(0x7f0000000c40)="b7d10fc537fc5034d1086c54d50679526a6c7e4231fd70d04f24076226a1a41a485e49dfc5c895f8ead5d6b60ff7233a31424169cc96d71132f7baeeb57cbf0ee1966fb6c80a1d2e858d46da061004666555720cf8a9bef51b0e464c2e36938fe7765184e5d90662ac3dcb190f35f8d99f837cec1eda5eba76dd2c3a9a3096c9bc2a21324b5cbcaef34a4483b0ed83fde716cbe9ca3c07d274ac71aff5a824420a39adac43636dcb", 0xa8}, {&(0x7f0000000240)}], 0x8) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 6.35202107s ago: executing program 4 (id=4124): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000027c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000002880)=@multiplanar_overlay={0x1f74, 0x2, 0x4, 0x0, 0x81, {}, {0x2, 0x2, 0x2, 0x38, 0xfb, 0x0, "2adf977a"}, 0x9, 0x3, {0x0}, 0x100}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8b}], 0x2, 0x10001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='logfs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = creat(&(0x7f0000000440)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syncfs(r4) open_by_handle_at(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="17000000fb"], 0x830200) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$P9_RREADDIR(r5, &(0x7f00000003c0)={0x2a, 0x29, 0x1, {0x200, [{{0x4, 0x4, 0x4}, 0x3, 0xff, 0x7, './file0'}]}}, 0x2a) 6.225574853s ago: executing program 0 (id=4125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x15, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) chdir(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) pread64(0xffffffffffffffff, 0x0, 0x0, 0xacab) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r7, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0xfff) write$cgroup_int(r7, &(0x7f0000000000)=0x101, 0x12) 6.061520748s ago: executing program 2 (id=4126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801242a0d746d001a698600"/21], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$COMEDI_BUFINFO(0xffffffffffffffff, 0xc02c640e, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(0x0, 0x0) r3 = open(0x0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, &(0x7f0000000180)={0x1, 0x4}) socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = gettid() r6 = syz_io_uring_setup(0x3380, &(0x7f0000000300)={0x0, 0x1c82, 0x10100, 0xffffffff, 0x228}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x10, 0x2, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) 4.702397959s ago: executing program 1 (id=4127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000b600620ac03febe9400eda43d726c0deade6357d72c3bf6c6010bfb3f2c62eed4d4576472835ff758f52174b473da9a5b952a00f97f43845bd0321f2f08157213212fdc181c32462cb8ad6078328b1c2d5dbe0d039b79fde89b06a58a7f85e2c8781accc7489b412b45797ba803e7dc9e9e30ced2a5c0929333ff79b45d0fe0e9aba6b18ed5c598904ac6b6fbad544b3a147227f2cd350fc842bc2928656fab9ada2e8f1878ee308d60025df81bcdb0b4fe90259c20e"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)={0x0, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x40440) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce17, 0x10100, 0x2, 0x2ea}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0xa0b0}, 0x3}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x9, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r7, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3f, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000100)={0x7, 0x23}) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800000000000056, 0x3) socket$kcm(0x10, 0x2, 0x10) 4.403931609s ago: executing program 4 (id=4128): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x5b) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) munlockall() sendmmsg$inet(r2, 0x0, 0x0, 0x20000890) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xffffffff, @local}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "8f3999f99a1af25f", "3912a658f8291082b5e05a138a9535ae94a0b8b46234dde78778bcf2bd5041c3", "4439cbec", "33050489f1ebab65"}, 0x38) 4.386632324s ago: executing program 5 (id=4129): pipe(0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1e, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast1}, 0x9}}, 0x26) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x325, 0x2000000, 0x0, {0x8}}, 0x14}}, 0x0) 3.958605013s ago: executing program 5 (id=4130): r0 = add_key$keyring(&(0x7f0000004b40), &(0x7f0000004b80)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000004bc0)='big_key\x00', 0x0) 3.956990091s ago: executing program 0 (id=4131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) prlimit64(0x0, 0x4, &(0x7f0000000340)={0x9, 0x4ccd84e6}, &(0x7f00000003c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r5, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6e}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044000) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r3, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r3, 0x0, &(0x7f0000000380)="ee", 0x1, 0x5}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) r8 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x10000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 3.828154677s ago: executing program 5 (id=4132): r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000240)) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000540), 0x9a000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003040), 0x400002, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8) getgroups(0x5, &(0x7f00000006c0)=[0x0, 0xee00, 0xee01, 0xee01, 0x0]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, 0xffffffffffffffff, 0x0, 0x3000}]) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fddbdf25120000005000018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1400020074756e6c30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800090007000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000081) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x1, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000003140)={&(0x7f0000003080), 0xc, &(0x7f0000003100)={&(0x7f00000030c0)=ANY=[@ANYBLOB="38000000031402002cbd7000fddbdf250900020073797a31dfffffff0700410073697714b53280a4354c8e766c616e310000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0xc) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) 3.479716992s ago: executing program 2 (id=4133): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) close_range(r1, r0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x4000010) open(&(0x7f0000000c00)='./file1\x00', 0x400000, 0x30) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x5, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0x0, 0xee01}}, './file0\x00'}) r7 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x100000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000bc0)={0xf0, 0x0, &(0x7f00000009c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0x100, 0x1}, @fd, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/191, 0xbf, 0x2, 0x8}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}, @free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000007c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/172, 0xac, 0x2, 0x11}, @flat=@binder={0x73622a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/67, 0x43, 0x2, 0x20}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x40}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x1, &(0x7f0000000840)=""/200, 0xc8, 0x2, 0x30}, @fda={0x66646185, 0x6, 0x1, 0x39}, @flat=@weak_binder={0x77622a85, 0x1100, 0x1}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}, 0x1000}], 0xd6, 0x0, &(0x7f0000000ac0)="7349b8ed31b61758d15ef87af198dad7e7224182b18dc218ed99f61c6696b6ae1ffb75bcaacc8a6c511111ceb97fa2a547578b4e740e523c59b50d543c4caf0ea68e8cabf80ae1069ca76e09c9e8606e64025c0006f170b16dcb1c78a41ed976f24f65acad47d5d1a2e77e6fceccb95f2e8fea2e023df3a9ff7a3b80fa7d8e4fed697ea745f22090e35a211999d69bf4f112a00694652efb48ad0e91feefe3616420ffd38a85f90307f430c247e5500bcbea7dcda1b00b85e5446498e6708220635096de2888324f8cf17ce78efe8057a6b2103a42a7"}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 3.444629826s ago: executing program 1 (id=4134): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x7, 0x2, 0x1, 0xaa, 0x10001}) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="ee936b8936649139431838702ad8a818b473f247f71d20a1f5dc59edcf7833062021e445dc112e2ef826978af9e45ce7f956d3c3d32b5204e335d8111cadfc8b42cb4de0ae08f88e5fd45d83813bd562e003f113d47cfbb66b5f3fa9e350edc3fc020312c46e8b78dbe9a2440805", @ANYRESDEC=0x0, @ANYBLOB="0100000000000000000001"], 0x90}}, 0x0) write$binfmt_misc(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x3) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x410002, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r3) ptrace$setregs(0xd, r3, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac1347a96822b77df7427a6c2dd3751a770eb046eda93dffffffff000000005ad4028dd63defb87d698be5c749450b350a789dcfc6b271f64247026d1e52f19274566d1d82f353dd65e330ebf71c5e823f2753c5fd76724828ef71b353e7") ptrace$cont(0x9, r3, 0x20, 0x10001) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) socket$kcm(0xa, 0x2, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000d00)) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) socket$kcm(0x10, 0x2, 0x0) 2.857574106s ago: executing program 2 (id=4135): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f100000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x3}) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000004c0)={r5, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={r5, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x7f, 0x0, 0x6, 0x36, 0x200}, 0x9c) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) syz_io_uring_setup(0x3877, &(0x7f0000000780)={0x0, 0x5a1b, 0x100, 0x2, 0x4d, 0x0, r6}, &(0x7f0000000340)=0x0, &(0x7f0000000680)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r10, 0x114, &(0x7f0000000700)=0x1, 0x0, 0x4) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) r11 = accept4$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x40000) bind$bt_l2cap(r11, &(0x7f0000000240)={0x1f, 0xfff7, @any, 0x7, 0x2}, 0xe) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001010070f9090400001702020009052406000005240004000cbf0801000000000100fcff50090581030000000504090582021000020600090503020004000000"], 0x0) 2.514071935s ago: executing program 1 (id=4136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000b600620ac03febe9400eda43d726c0deade6357d72c3bf6c6010bfb3f2c62eed4d4576472835ff758f52174b473da9a5b952a00f97f43845bd0321f2f08157213212fdc181c32462cb8ad6078328b1c2d5dbe0d039b79fde89b06a58a7f85e2c8781accc7489b412b45797ba803e7dc9e9e30ced2a5c0929333ff79b45d0fe0e9aba6b18ed5c598904ac6b6fbad544b3a147227f2cd350fc842bc2928656fab9ada2e8f1878ee308d60025df81bcdb0b4fe90259c20e"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)={0x0, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x40440) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce17, 0x10100, 0x2, 0x2ea}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0xa0b0}, 0x3}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x9, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r7, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3f, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000100)={0x7, 0x23}) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800000000000056, 0x3) socket$kcm(0x10, 0x2, 0x10) 2.115871772s ago: executing program 0 (id=4137): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) read(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {0x4}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[r1, r1], &(0x7f0000000580)}) 1.921606987s ago: executing program 5 (id=4138): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}}, 0x4004) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xe2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a44ff6"], 0x0) 1.578096728s ago: executing program 1 (id=4139): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000027c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000002880)=@multiplanar_overlay={0x1f74, 0x2, 0x4, 0x0, 0x81, {}, {0x2, 0x2, 0x2, 0x38, 0xfb, 0x0, "2adf977a"}, 0x9, 0x3, {0x0}, 0x100}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8b}], 0x2, 0x10001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='logfs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = creat(&(0x7f0000000440)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syncfs(r4) open_by_handle_at(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="17000000fb"], 0x830200) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$P9_RREADDIR(r5, &(0x7f00000003c0)={0x2a, 0x29, 0x1, {0x200, [{{0x4, 0x4, 0x4}, 0x3, 0xff, 0x7, './file0'}]}}, 0x2a) 592.767207ms ago: executing program 4 (id=4140): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4002841}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x2, 0x0, 0x2, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0x200, 0x4, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x10b, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff000b00000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000280)=0x5) (rerun: 32) 574.730929ms ago: executing program 0 (id=4141): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0xfff, 0x7fffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r3}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) getsockopt(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x10, 0x0, [{}]}}) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) 558.673693ms ago: executing program 1 (id=4142): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket(0x10, 0x80000, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x400004, 0x13900}, 0x0, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRES8], 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$netlink(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYRES8=r0, @ANYRESHEX=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x20000004) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000ef0800000000287c8869cee0cc80000081000000000000ff900b0000000000000200000000000000c47d916d116b108878a4c5e3893d23c804bce7ea25e560d93eabb079f66527ad8f821a7b4ded669d1d4ffd13b42ec92d18b26a15ae0f3e0de6024cb8ab78011b12c64238"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 429.722445ms ago: executing program 4 (id=4143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801242a0d746d001a698600"/21], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$COMEDI_BUFINFO(0xffffffffffffffff, 0xc02c640e, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(0x0, 0x0) r3 = open(0x0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, &(0x7f0000000180)={0x1, 0x4}) socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = gettid() r6 = syz_io_uring_setup(0x3380, &(0x7f0000000300)={0x0, 0x1c82, 0x10100, 0xffffffff, 0x228}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x10, 0x2, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) 0s ago: executing program 2 (id=4144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0xee00, 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) (fail_nth: 19) kernel console output (not intermixed with test programs): 53] genl_rcv+0x28/0x40 [ 1069.479576][T19453] netlink_unicast+0x5aa/0x870 [ 1069.479603][T19453] ? __pfx_netlink_unicast+0x10/0x10 [ 1069.479638][T19453] netlink_sendmsg+0x8c8/0xdd0 [ 1069.479668][T19453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1069.479703][T19453] ____sys_sendmsg+0xa98/0xc70 [ 1069.479732][T19453] ? copy_msghdr_from_user+0x10a/0x160 [ 1069.479753][T19453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1069.479793][T19453] ___sys_sendmsg+0x134/0x1d0 [ 1069.479817][T19453] ? __pfx____sys_sendmsg+0x10/0x10 [ 1069.479837][T19453] ? __lock_acquire+0x622/0x1c90 [ 1069.479894][T19453] __sys_sendmsg+0x16d/0x220 [ 1069.479917][T19453] ? __pfx___sys_sendmsg+0x10/0x10 [ 1069.479958][T19453] do_syscall_64+0xcd/0xfa0 [ 1069.479982][T19453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.480000][T19453] RIP: 0033:0x7f082258efc9 [ 1069.480015][T19453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.480031][T19453] RSP: 002b:00007f0823360038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.480049][T19453] RAX: ffffffffffffffda RBX: 00007f08227e5fa0 RCX: 00007f082258efc9 [ 1069.480061][T19453] RDX: 0000000020020000 RSI: 0000200000000b80 RDI: 0000000000000004 [ 1069.480072][T19453] RBP: 00007f0823360090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.480082][T19453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.480092][T19453] R13: 00007f08227e6038 R14: 00007f08227e5fa0 R15: 00007fff499ec958 [ 1069.480120][T19453] [ 1069.768643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1070.158086][T19460] input: syz0 as /devices/virtual/input/input73 [ 1070.160161][T19464] FAULT_INJECTION: forcing a failure. [ 1070.160161][T19464] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.187345][ T5928] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1070.194928][T19464] CPU: 0 UID: 0 PID: 19464 Comm: syz.4.3531 Not tainted syzkaller #0 PREEMPT(full) [ 1070.194949][T19464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1070.194958][T19464] Call Trace: [ 1070.194964][T19464] [ 1070.194970][T19464] dump_stack_lvl+0x16c/0x1f0 [ 1070.194995][T19464] should_fail_ex+0x512/0x640 [ 1070.195014][T19464] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1070.195039][T19464] should_failslab+0xc2/0x120 [ 1070.195064][T19464] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1070.195083][T19464] ? skb_clone+0x190/0x3f0 [ 1070.195109][T19464] ? skb_clone+0x190/0x3f0 [ 1070.195129][T19464] skb_clone+0x190/0x3f0 [ 1070.195152][T19464] netlink_deliver_tap+0xabd/0xd30 [ 1070.195180][T19464] netlink_unicast+0x64c/0x870 [ 1070.195206][T19464] ? __pfx_netlink_unicast+0x10/0x10 [ 1070.195239][T19464] netlink_sendmsg+0x8c8/0xdd0 [ 1070.195267][T19464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.195301][T19464] ____sys_sendmsg+0xa98/0xc70 [ 1070.195335][T19464] ? copy_msghdr_from_user+0x10a/0x160 [ 1070.195356][T19464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.195395][T19464] ___sys_sendmsg+0x134/0x1d0 [ 1070.195418][T19464] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.195436][T19464] ? __lock_acquire+0x622/0x1c90 [ 1070.195487][T19464] __sys_sendmsg+0x16d/0x220 [ 1070.195510][T19464] ? __pfx___sys_sendmsg+0x10/0x10 [ 1070.195549][T19464] do_syscall_64+0xcd/0xfa0 [ 1070.195573][T19464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.195590][T19464] RIP: 0033:0x7f3c91d8efc9 [ 1070.195606][T19464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.195623][T19464] RSP: 002b:00007f3c92c60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.195640][T19464] RAX: ffffffffffffffda RBX: 00007f3c91fe5fa0 RCX: 00007f3c91d8efc9 [ 1070.195652][T19464] RDX: 0000000000000000 RSI: 00002000000042c0 RDI: 0000000000000003 [ 1070.195663][T19464] RBP: 00007f3c92c60090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.195673][T19464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.195683][T19464] R13: 00007f3c91fe6038 R14: 00007f3c91fe5fa0 R15: 00007ffea4cfa8c8 [ 1070.195710][T19464] [ 1070.529659][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 1070.537836][ T5928] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 1070.558467][ T5928] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1070.668217][ T5928] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1070.685654][T19474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1070.727628][ T5928] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1070.846273][ T5928] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1070.875556][ T5928] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1070.898626][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.913305][ T5928] usb 6-1: Product: syz [ 1070.913546][T19479] FAULT_INJECTION: forcing a failure. [ 1070.913546][T19479] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.917811][ T5928] usb 6-1: Manufacturer: syz [ 1070.944084][ T5928] usb 6-1: SerialNumber: syz [ 1070.980788][T19479] CPU: 0 UID: 0 PID: 19479 Comm: syz.2.3537 Not tainted syzkaller #0 PREEMPT(full) [ 1070.980813][T19479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1070.980823][T19479] Call Trace: [ 1070.980828][T19479] [ 1070.980836][T19479] dump_stack_lvl+0x16c/0x1f0 [ 1070.980862][T19479] should_fail_ex+0x512/0x640 [ 1070.980885][T19479] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1070.980907][T19479] should_failslab+0xc2/0x120 [ 1070.980933][T19479] __kmalloc_cache_noprof+0x72/0x780 [ 1070.980953][T19479] ? snd_seq_port_connect+0x61/0x580 [ 1070.980982][T19479] ? snd_seq_port_connect+0x61/0x580 [ 1070.981006][T19479] snd_seq_port_connect+0x61/0x580 [ 1070.981029][T19479] ? _raw_read_unlock+0x28/0x50 [ 1070.981050][T19479] ? check_subscription_permission.isra.0+0xf5/0x240 [ 1070.981076][T19479] snd_seq_ioctl_subscribe_port+0x209/0x4b0 [ 1070.981106][T19479] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 1070.981128][T19479] ? __pfx___mutex_lock+0x10/0x10 [ 1070.981149][T19479] ? do_raw_spin_lock+0x12c/0x2b0 [ 1070.981184][T19479] call_seq_client_ctl+0x9f/0x110 [ 1070.981207][T19479] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1070.981230][T19479] snd_seq_oss_midi_open+0x507/0x720 [ 1070.981251][T19479] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 1070.981268][T19479] ? snd_seq_oss_midi_reset+0x180/0x530 [ 1070.981301][T19479] snd_seq_oss_synth_reset+0x437/0x810 [ 1070.981322][T19479] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 1070.981340][T19479] ? rcu_is_watching+0x12/0xc0 [ 1070.981356][T19479] ? trace_contention_end+0xdd/0x130 [ 1070.981378][T19479] ? __mutex_lock+0x1c5/0x1060 [ 1070.981405][T19479] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1070.981427][T19479] snd_seq_oss_reset+0x73/0x290 [ 1070.981455][T19479] snd_seq_oss_ioctl+0xc0b/0xda0 [ 1070.981472][T19479] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 1070.981487][T19479] ? hook_file_ioctl_common+0x145/0x410 [ 1070.981518][T19479] odev_ioctl+0x94/0x120 [ 1070.981539][T19479] ? __pfx_odev_ioctl+0x10/0x10 [ 1070.981563][T19479] __x64_sys_ioctl+0x18e/0x210 [ 1070.981584][T19479] do_syscall_64+0xcd/0xfa0 [ 1070.981612][T19479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.981628][T19479] RIP: 0033:0x7fbee858efc9 [ 1070.981642][T19479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.981658][T19479] RSP: 002b:00007fbee93ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1070.981675][T19479] RAX: ffffffffffffffda RBX: 00007fbee87e5fa0 RCX: 00007fbee858efc9 [ 1070.981685][T19479] RDX: 0000000000000000 RSI: 0000000000005100 RDI: 0000000000000003 [ 1070.981695][T19479] RBP: 00007fbee93ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.981704][T19479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.981714][T19479] R13: 00007fbee87e6038 R14: 00007fbee87e5fa0 R15: 00007ffd00c4b468 [ 1070.981739][T19479] [ 1071.399115][ T5928] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1071.420766][ T5928] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1071.427799][ T5928] usb 6-1: 2:1 : invalid channels 0 [ 1071.487035][ T5928] usb 6-1: USB disconnect, device number 6 [ 1071.980223][T19487] could not allocate digest TFM handle cryptd(blake2b-160) [ 1072.016863][T19501] netlink: 380 bytes leftover after parsing attributes in process `syz.1.3542'. [ 1072.034455][T19499] Cannot find add_set index 0 as target [ 1072.101907][ T30] audit: type=1326 audit(1760979912.345:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="syz.1.3543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f082258efc9 code=0x0 [ 1072.154759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1072.325141][T19513] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1072.325164][T19513] overlayfs: missing 'lowerdir' [ 1072.468842][ T30] audit: type=1400 audit(1760979912.691:4593): avc: denied { ioctl } for pid=19502 comm="syz.4.3540" path="socket:[73520]" dev="sockfs" ino=73520 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1072.493877][ C1] vkms_vblank_simulate: vblank timer overrun [ 1072.533742][T19481] tty tty20: ldisc open failed (-12), clearing slot 19 [ 1072.584237][T19518] netlink: 'syz.4.3540': attribute type 10 has an invalid length. [ 1072.719876][T19525] FAULT_INJECTION: forcing a failure. [ 1072.719876][T19525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.733366][T19525] CPU: 1 UID: 0 PID: 19525 Comm: syz.1.3547 Not tainted syzkaller #0 PREEMPT(full) [ 1072.733389][T19525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1072.733400][T19525] Call Trace: [ 1072.733406][T19525] [ 1072.733413][T19525] dump_stack_lvl+0x16c/0x1f0 [ 1072.733439][T19525] should_fail_ex+0x512/0x640 [ 1072.733465][T19525] _copy_from_iter+0x29f/0x1720 [ 1072.733493][T19525] ? __alloc_skb+0x200/0x380 [ 1072.733513][T19525] ? __pfx__copy_from_iter+0x10/0x10 [ 1072.733534][T19525] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1072.733557][T19525] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1072.733590][T19525] netlink_sendmsg+0x820/0xdd0 [ 1072.733617][T19525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1072.733649][T19525] ____sys_sendmsg+0xa98/0xc70 [ 1072.733677][T19525] ? copy_msghdr_from_user+0x10a/0x160 [ 1072.733697][T19525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1072.733737][T19525] ___sys_sendmsg+0x134/0x1d0 [ 1072.733760][T19525] ? __pfx____sys_sendmsg+0x10/0x10 [ 1072.733779][T19525] ? __lock_acquire+0x622/0x1c90 [ 1072.733833][T19525] __sys_sendmsg+0x16d/0x220 [ 1072.733854][T19525] ? __pfx___sys_sendmsg+0x10/0x10 [ 1072.733890][T19525] do_syscall_64+0xcd/0xfa0 [ 1072.733913][T19525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.733931][T19525] RIP: 0033:0x7f082258efc9 [ 1072.733945][T19525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.733961][T19525] RSP: 002b:00007f0823360038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.733978][T19525] RAX: ffffffffffffffda RBX: 00007f08227e5fa0 RCX: 00007f082258efc9 [ 1072.733989][T19525] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 1072.734000][T19525] RBP: 00007f0823360090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.734009][T19525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.734019][T19525] R13: 00007f08227e6038 R14: 00007f08227e5fa0 R15: 00007fff499ec958 [ 1072.734045][T19525] [ 1072.939671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1072.945657][ C1] hrtimer: interrupt took 190255779 ns [ 1073.045674][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.094501][T19518] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1073.485609][T19541] fuse: Unknown parameter '01777777777777777777777' [ 1073.524263][ T5808] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1073.693838][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 1073.790631][ T1206] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1074.078981][ T1206] usb 2-1: Using ep0 maxpacket: 32 [ 1074.086088][ T1206] usb 2-1: config 0 has no interfaces? [ 1074.095276][ T5808] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1074.104546][ T1206] usb 2-1: New USB device found, idVendor=12d1, idProduct=1c58, bcdDevice=80.57 [ 1074.116543][ T5808] usb 1-1: config 179 has no interface number 0 [ 1074.149562][ T5808] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1074.153777][T19544] sp0: Synchronizing with TNC [ 1074.166977][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.196962][ T1206] usb 2-1: Product: syz [ 1074.210882][ T5808] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1074.218227][T19547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3552'. [ 1074.222662][ T1206] usb 2-1: Manufacturer: syz [ 1074.237034][ T5808] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1074.250664][ T1206] usb 2-1: SerialNumber: syz [ 1074.390154][ T5808] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1074.420772][ T1206] usb 2-1: config 0 descriptor?? [ 1074.518544][ T5808] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1074.532185][ T5808] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1074.541866][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.549997][T19546] sp0: Found TNC [ 1074.569895][T19528] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1074.579490][T19554] netlink: 'syz.4.3555': attribute type 1 has an invalid length. [ 1074.611845][T19554] bond1: entered promiscuous mode [ 1074.617170][T19554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1074.880446][ T5898] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1075.225027][T19564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1075.307610][ T5928] usb 1-1: USB disconnect, device number 105 [ 1075.307613][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1075.307651][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1075.427105][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1075.448998][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.469603][ T5898] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1075.488238][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.507232][ T5898] usb 6-1: config 0 descriptor?? [ 1075.520510][ T5898] hub 6-1:0.0: USB hub found [ 1075.740584][ T5898] hub 6-1:0.0: 2 ports detected [ 1075.742122][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3559'. [ 1075.803968][T19573] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 1075.814018][T19573] ALSA: mixer_oss: invalid OSS volume '(' [ 1075.819803][T19573] ALSA: mixer_oss: invalid OSS volume '' [ 1075.825742][T19573] ALSA: mixer_oss: invalid OSS volume '' [ 1075.831440][T19573] ALSA: mixer_oss: invalid OSS volume '' [ 1075.837477][T19573] ALSA: mixer_oss: invalid OSS volume '' [ 1075.855913][ T30] audit: type=1400 audit(1760979915.862:4594): avc: denied { accept } for pid=19567 comm="syz.4.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1075.893514][T19573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.902244][T19573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.109982][ T5928] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1078.730167][T13502] usb 2-1: USB disconnect, device number 88 [ 1078.858340][ T5933] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 1078.894953][T19583] FAULT_INJECTION: forcing a failure. [ 1078.894953][T19583] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.909090][T19583] CPU: 0 UID: 0 PID: 19583 Comm: syz.1.3562 Not tainted syzkaller #0 PREEMPT(full) [ 1078.909114][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1078.909125][T19583] Call Trace: [ 1078.909131][T19583] [ 1078.909138][T19583] dump_stack_lvl+0x16c/0x1f0 [ 1078.909165][T19583] should_fail_ex+0x512/0x640 [ 1078.909191][T19583] should_failslab+0xc2/0x120 [ 1078.909216][T19583] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1078.909241][T19583] ? nf_tables_dump_set_start+0x40/0xa0 [ 1078.909267][T19583] ? kmemdup_noprof+0x29/0x60 [ 1078.909286][T19583] kmemdup_noprof+0x29/0x60 [ 1078.909307][T19583] nf_tables_dump_set_start+0x40/0xa0 [ 1078.909325][T19583] __netlink_dump_start+0x60e/0x990 [ 1078.909349][T19583] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 1078.909374][T19583] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 1078.909399][T19583] nf_tables_getsetelem+0x425/0x530 [ 1078.909424][T19583] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 1078.909450][T19583] ? __pfx_nf_tables_dump_set_start+0x10/0x10 [ 1078.909467][T19583] ? __pfx_nf_tables_dump_set+0x10/0x10 [ 1078.909488][T19583] ? __pfx_nf_tables_dump_set_done+0x10/0x10 [ 1078.909509][T19583] ? irqentry_exit+0x3b/0x90 [ 1078.909530][T19583] ? lockdep_hardirqs_on+0x7c/0x110 [ 1078.909556][T19583] ? __nla_parse+0x40/0x60 [ 1078.909583][T19583] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 1078.909609][T19583] nfnetlink_rcv_msg+0x583/0x1200 [ 1078.909640][T19583] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1078.909663][T19583] ? __pfx___schedule+0x10/0x10 [ 1078.909698][T19583] ? nfnetlink_rcv+0x198/0x430 [ 1078.909710][T19583] netlink_rcv_skb+0x158/0x420 [ 1078.909725][T19583] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1078.909737][T19583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1078.909758][T19583] ? ns_capable+0xd7/0x110 [ 1078.909776][T19583] nfnetlink_rcv+0x1b3/0x430 [ 1078.909787][T19583] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1078.909802][T19583] netlink_unicast+0x5aa/0x870 [ 1078.909818][T19583] ? __pfx_netlink_unicast+0x10/0x10 [ 1078.909838][T19583] netlink_sendmsg+0x8c8/0xdd0 [ 1078.909855][T19583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1078.909875][T19583] ____sys_sendmsg+0xa98/0xc70 [ 1078.909892][T19583] ? copy_msghdr_from_user+0x10a/0x160 [ 1078.909905][T19583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1078.909920][T19583] ? trace_sched_exit_tp+0xd1/0x120 [ 1078.909943][T19583] ___sys_sendmsg+0x134/0x1d0 [ 1078.909956][T19583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1078.909973][T19583] ? __lock_acquire+0x622/0x1c90 [ 1078.910005][T19583] __sys_sendmsg+0x16d/0x220 [ 1078.910018][T19583] ? __pfx___sys_sendmsg+0x10/0x10 [ 1078.910030][T19583] ? __pfx___schedule+0x10/0x10 [ 1078.910051][T19583] do_syscall_64+0xcd/0xfa0 [ 1078.910066][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.910077][T19583] RIP: 0033:0x7f082258efc9 [ 1078.910086][T19583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1078.910096][T19583] RSP: 002b:00007f082333f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1078.910107][T19583] RAX: ffffffffffffffda RBX: 00007f08227e6090 RCX: 00007f082258efc9 [ 1078.910114][T19583] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000009 [ 1078.910120][T19583] RBP: 00007f082333f090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.910126][T19583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.910133][T19583] R13: 00007f08227e6128 R14: 00007f08227e6090 R15: 00007fff499ec958 [ 1078.910148][T19583] [ 1078.910831][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 1079.612043][ T30] audit: type=1400 audit(1760979919.333:4595): avc: denied { bind } for pid=19587 comm="syz.0.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1079.703365][T13502] usb 6-1: USB disconnect, device number 7 [ 1079.744171][T19599] netlink: 'syz.4.3567': attribute type 6 has an invalid length. [ 1079.847720][ T5928] usb 3-1: device descriptor read/all, error -71 [ 1080.257827][ T1206] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1080.482548][ T1206] usb 6-1: Using ep0 maxpacket: 8 [ 1080.490812][ T1206] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1080.534147][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.559202][ T1206] usb 6-1: Product: syz [ 1081.615893][ T1206] usb 6-1: Manufacturer: syz [ 1081.627149][ T1206] usb 6-1: SerialNumber: syz [ 1081.628528][T17154] Bluetooth: hci1: command 0x0401 tx timeout [ 1081.634356][ T1206] usb 6-1: config 0 descriptor?? [ 1081.646317][ T1206] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1081.654690][ T1206] usb 6-1: setting power ON [ 1081.659751][ T1206] dvb-usb: bulk message failed: -22 (2/0) [ 1081.666763][ T1206] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1081.689402][ T1206] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1081.781750][ T1206] usb 6-1: media controller created [ 1081.881324][T19604] FAULT_INJECTION: forcing a failure. [ 1081.881324][T19604] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.913446][ T1206] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1081.931344][T19604] CPU: 0 UID: 0 PID: 19604 Comm: syz.5.3568 Not tainted syzkaller #0 PREEMPT(full) [ 1081.931371][T19604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1081.931383][T19604] Call Trace: [ 1081.931389][T19604] [ 1081.931397][T19604] dump_stack_lvl+0x16c/0x1f0 [ 1081.931426][T19604] should_fail_ex+0x512/0x640 [ 1081.931449][T19604] ? __kmalloc_noprof+0xca/0x880 [ 1081.931472][T19604] should_failslab+0xc2/0x120 [ 1081.931499][T19604] __kmalloc_noprof+0xdd/0x880 [ 1081.931517][T19604] ? avc_policy_seqno+0x9/0x20 [ 1081.931535][T19604] ? selinux_file_permission+0x126/0x660 [ 1081.931560][T19604] ? i2cdev_read+0xe4/0x280 [ 1081.931593][T19604] ? i2cdev_read+0xe4/0x280 [ 1081.931616][T19604] ? m920x_i2c_func+0x9/0x20 [ 1081.931642][T19604] i2cdev_read+0xe4/0x280 [ 1081.931667][T19604] ? __pfx_i2cdev_read+0x10/0x10 [ 1081.931695][T19604] vfs_read+0x1e4/0xcf0 [ 1081.931723][T19604] ? __pfx_vfs_read+0x10/0x10 [ 1081.931744][T19604] ? find_held_lock+0x2b/0x80 [ 1081.931762][T19604] ? __fget_files+0x204/0x3c0 [ 1081.931788][T19604] ? __fget_files+0x20e/0x3c0 [ 1081.931818][T19604] ksys_read+0x12a/0x250 [ 1081.931839][T19604] ? __pfx_ksys_read+0x10/0x10 [ 1081.931869][T19604] do_syscall_64+0xcd/0xfa0 [ 1081.931893][T19604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.931911][T19604] RIP: 0033:0x7f348998efc9 [ 1081.931927][T19604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.931944][T19604] RSP: 002b:00007f348a784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1081.931962][T19604] RAX: ffffffffffffffda RBX: 00007f3489be5fa0 RCX: 00007f348998efc9 [ 1081.931973][T19604] RDX: 000000000000004f RSI: 0000000000000000 RDI: 0000000000000009 [ 1081.931984][T19604] RBP: 00007f348a784090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.931995][T19604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.932006][T19604] R13: 00007f3489be6038 R14: 00007f3489be5fa0 R15: 00007ffd52b5ee08 [ 1081.932033][T19604] [ 1082.149466][ T1206] usb 6-1: selecting invalid altsetting 6 [ 1082.155552][ T1206] usb 6-1: digital interface selection failed (-22) [ 1082.162715][ T1206] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1082.172621][ T1206] usb 6-1: setting power OFF [ 1082.177221][ T1206] dvb-usb: bulk message failed: -22 (2/0) [ 1082.183170][ T1206] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1082.192460][ T1206] (NULL device *): no alternate interface [ 1082.212844][ T1206] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1082.231385][ T1206] usb 6-1: USB disconnect, device number 8 [ 1083.114855][ T30] audit: type=1400 audit(1760979922.635:4596): avc: denied { watch_mount } for pid=19649 comm="syz.2.3578" path="/124" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1083.529826][T19642] block nbd5: Device being setup by another task [ 1083.546659][T19642] block nbd5: shutting down sockets [ 1083.833498][T19661] netlink: 'syz.1.3577': attribute type 10 has an invalid length. [ 1083.850591][T19661] syz_tun: entered promiscuous mode [ 1084.287995][T19661] syz_tun: entered allmulticast mode [ 1084.300117][T19661] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1084.318483][ T5933] IPVS: starting estimator thread 0... [ 1084.416846][T19666] IPVS: using max 50 ests per chain, 120000 per kthread [ 1090.051189][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1090.631418][T19737] FAULT_INJECTION: forcing a failure. [ 1090.631418][T19737] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.644936][T19737] CPU: 0 UID: 0 PID: 19737 Comm: syz.0.3601 Not tainted syzkaller #0 PREEMPT(full) [ 1090.644960][T19737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1090.644969][T19737] Call Trace: [ 1090.644974][T19737] [ 1090.644979][T19737] dump_stack_lvl+0x16c/0x1f0 [ 1090.644997][T19737] should_fail_ex+0x512/0x640 [ 1090.645011][T19737] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1090.645025][T19737] should_failslab+0xc2/0x120 [ 1090.645040][T19737] __kmalloc_cache_noprof+0x72/0x780 [ 1090.645052][T19737] ? rtnl_newlink+0x11b/0x2000 [ 1090.645069][T19737] ? __pfx_rtnl_newlink+0x10/0x10 [ 1090.645081][T19737] ? rtnl_newlink+0x11b/0x2000 [ 1090.645094][T19737] rtnl_newlink+0x11b/0x2000 [ 1090.645107][T19737] ? irqentry_exit+0x3b/0x90 [ 1090.645124][T19737] ? __pfx_rtnl_newlink+0x10/0x10 [ 1090.645137][T19737] ? find_held_lock+0x2b/0x80 [ 1090.645148][T19737] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1090.645162][T19737] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1090.645180][T19737] ? irqentry_exit+0x3b/0x90 [ 1090.645193][T19737] ? lockdep_hardirqs_on+0x7c/0x110 [ 1090.645207][T19737] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1090.645220][T19737] ? __pfx_rtnl_newlink+0x10/0x10 [ 1090.645235][T19737] ? rtnetlink_rcv_msg+0xc33/0xe90 [ 1090.645248][T19737] ? find_held_lock+0x2b/0x80 [ 1090.645257][T19737] ? __pfx_rtnl_newlink+0x10/0x10 [ 1090.645270][T19737] ? __pfx_rtnl_newlink+0x10/0x10 [ 1090.645282][T19737] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1090.645297][T19737] ? __pfx_rtnl_newlink+0x10/0x10 [ 1090.645311][T19737] rtnetlink_rcv_msg+0x95e/0xe90 [ 1090.645326][T19737] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1090.645344][T19737] ? ref_tracker_free+0x37c/0x830 [ 1090.645360][T19737] netlink_rcv_skb+0x158/0x420 [ 1090.645375][T19737] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1090.645390][T19737] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1090.645410][T19737] ? netlink_deliver_tap+0x1ae/0xd30 [ 1090.645426][T19737] netlink_unicast+0x5aa/0x870 [ 1090.645442][T19737] ? __pfx_netlink_unicast+0x10/0x10 [ 1090.645462][T19737] netlink_sendmsg+0x8c8/0xdd0 [ 1090.645479][T19737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1090.645499][T19737] ____sys_sendmsg+0xa98/0xc70 [ 1090.645516][T19737] ? copy_msghdr_from_user+0x10a/0x160 [ 1090.645529][T19737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1090.645552][T19737] ___sys_sendmsg+0x134/0x1d0 [ 1090.645565][T19737] ? __pfx____sys_sendmsg+0x10/0x10 [ 1090.645577][T19737] ? __lock_acquire+0x622/0x1c90 [ 1090.645608][T19737] __sys_sendmsg+0x16d/0x220 [ 1090.645621][T19737] ? __pfx___sys_sendmsg+0x10/0x10 [ 1090.645643][T19737] do_syscall_64+0xcd/0xfa0 [ 1090.645657][T19737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.645668][T19737] RIP: 0033:0x7f5f06b8efc9 [ 1090.645677][T19737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.645687][T19737] RSP: 002b:00007f5f07a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1090.645698][T19737] RAX: ffffffffffffffda RBX: 00007f5f06de6090 RCX: 00007f5f06b8efc9 [ 1090.645705][T19737] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1090.645711][T19737] RBP: 00007f5f07a42090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.645717][T19737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.645723][T19737] R13: 00007f5f06de6128 R14: 00007f5f06de6090 R15: 00007ffff1fc7868 [ 1090.645738][T19737] [ 1091.100365][ T1332] nci: nci_rsp_packet: unknown rsp opcode 0x22 [ 1091.108880][ T5811] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 1091.230987][T19747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=19747 comm=syz.4.3606 [ 1092.380367][T19771] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1092.397012][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3612'. [ 1092.929311][T19775] fuse: Unknown parameter '01777777777777777777777' [ 1093.220262][ T1206] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1093.633084][ T1206] usb 1-1: Using ep0 maxpacket: 32 [ 1093.650975][ T1206] usb 1-1: config 0 has no interfaces? [ 1093.677492][ T1206] usb 1-1: New USB device found, idVendor=12d1, idProduct=1c58, bcdDevice=80.57 [ 1093.830565][T19791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3617'. [ 1093.847367][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.892396][ T1206] usb 1-1: Product: syz [ 1093.909309][ T1206] usb 1-1: Manufacturer: syz [ 1094.200471][ T1206] usb 1-1: SerialNumber: syz [ 1094.277663][ T1206] usb 1-1: config 0 descriptor?? [ 1094.379196][T19802] fuse: Bad value for 'user_id' [ 1094.384214][T19802] fuse: Bad value for 'user_id' [ 1094.458489][ T30] audit: type=1400 audit(1760979933.261:4597): avc: denied { open } for pid=19801 comm="syz.2.3618" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=75881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1094.545062][T19806] netlink: 'syz.4.3620': attribute type 3 has an invalid length. [ 1094.557545][T19806] netlink: 'syz.4.3620': attribute type 3 has an invalid length. [ 1094.565692][T19806] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.3620'. [ 1094.779554][T19821] netlink: 'syz.5.3626': attribute type 2 has an invalid length. [ 1094.790000][T19821] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3626'. [ 1095.042944][ T5933] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1095.716454][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 1095.724843][ T5933] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1095.734091][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.742150][ T5933] usb 3-1: Product: syz [ 1095.972898][ T5933] usb 3-1: Manufacturer: syz [ 1095.980899][ T5933] usb 3-1: SerialNumber: syz [ 1095.995331][ T5933] usb 3-1: config 0 descriptor?? [ 1096.071459][T16996] Bluetooth: hci3: Frame reassembly failed (-84) [ 1096.214134][ T1206] usb 1-1: USB disconnect, device number 106 [ 1096.440168][ T5933] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1096.508715][T11788] Bluetooth: hci4: Frame reassembly failed (-84) [ 1096.515210][T11788] Bluetooth: hci4: Frame reassembly failed (-84) [ 1096.625452][ T1206] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1096.796938][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 1096.803502][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1096.822737][ T1206] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1096.835597][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.860327][ T1206] usb 1-1: Product: syz [ 1096.864518][ T1206] usb 1-1: Manufacturer: syz [ 1096.869109][ T1206] usb 1-1: SerialNumber: syz [ 1096.878354][ T1206] usb 1-1: config 0 descriptor?? [ 1096.891705][ T1206] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1096.902555][ T1206] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1097.542848][ T1206] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1097.823525][ T5933] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1098.106547][ T1206] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1098.130428][ T1206] em28xx 1-1:0.0: board has no eeprom [ 1098.145382][ T10] usb 3-1: USB disconnect, device number 104 [ 1098.164667][ T5811] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1098.338207][T16996] nci: nci_rsp_packet: unknown rsp opcode 0x22 [ 1098.340210][ T5811] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 1098.678103][T17154] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1098.684812][ T5811] Bluetooth: hci4: command 0x1003 tx timeout [ 1099.287634][T19854] em28xx 1-1:0.0: writing to i2c device at 0x1020 failed (error=-5) [ 1099.715902][ T1206] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1099.723760][ T1206] em28xx 1-1:0.0: dvb set to bulk mode. [ 1100.149019][ T10] em28xx 1-1:0.0: Binding DVB extension [ 1100.167232][ T1206] usb 1-1: USB disconnect, device number 107 [ 1100.183975][ T1206] em28xx 1-1:0.0: Disconnecting em28xx [ 1100.289403][ T10] em28xx 1-1:0.0: Registering input extension [ 1100.297825][ T1206] em28xx 1-1:0.0: Closing input extension [ 1100.313166][ T1206] em28xx 1-1:0.0: Freeing device [ 1100.397293][T19902] No control pipe specified [ 1100.482091][T19905] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3654'. [ 1101.273992][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 1101.598340][T19910] ceph: No mds server is up or the cluster is laggy [ 1101.605690][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 1101.691584][T19905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.711065][T19905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.739257][T19905] bond0 (unregistering): Released all slaves [ 1101.746013][ T5933] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 1101.840686][T19911] tipc: Started in network mode [ 1101.845850][T19911] tipc: Node identity ac14140f, cluster identity 4711 [ 1101.853496][T19911] tipc: Enabled bearer , priority 10 [ 1101.931658][ T5933] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 1101.991911][ T5933] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1102.029998][ T5933] usb 1-1: config 150 has no interface number 0 [ 1102.045168][ T5933] usb 1-1: too many endpoints for config 150 interface 1 altsetting 112: 117, using maximum allowed: 30 [ 1102.056934][ T5933] usb 1-1: config 150 interface 1 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 117 [ 1102.085945][T19923] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1102.094272][ T5933] usb 1-1: config 150 interface 204 has no altsetting 0 [ 1102.107253][ T5933] usb 1-1: config 150 interface 1 has no altsetting 0 [ 1102.287416][ T5933] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1102.296613][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.305371][ T5933] usb 1-1: Product: syz [ 1102.309570][ T5933] usb 1-1: Manufacturer: syz [ 1102.314300][ T5933] usb 1-1: SerialNumber: syz [ 1102.323568][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1102.630327][ T5933] xr_serial 1-1:150.204: skipping garbage [ 1102.644835][ T5933] xr_serial 1-1:150.204: xr_serial converter detected [ 1102.825995][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1102.833099][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1102.845345][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1102.858411][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.879786][ T10] usb 6-1: Product: syz [ 1102.884161][ T10] usb 6-1: Manufacturer: syz [ 1102.897863][ T10] usb 6-1: SerialNumber: syz [ 1102.914398][ T10] usb 6-1: config 0 descriptor?? [ 1102.932673][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1102.945686][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1103.145962][ T5928] tipc: Node number set to 2886997007 [ 1103.591740][ T5933] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1103.596785][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1103.606115][ T5933] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1104.621219][ T10] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1104.667296][ T5933] usb 1-1: USB disconnect, device number 108 [ 1104.682178][ T5933] xr_serial 1-1:150.204: device disconnected [ 1104.688267][ T10] em28xx 6-1:0.0: board has no eeprom [ 1105.223142][T19954] netlink: 'syz.1.3670': attribute type 21 has an invalid length. [ 1105.235677][T19946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3669'. [ 1105.778209][T19924] em28xx 6-1:0.0: writing to i2c device at 0x1020 failed (error=-5) [ 1106.193628][ T30] audit: type=1400 audit(1760979944.214:4598): avc: denied { ioctl } for pid=19959 comm="syz.0.3673" path="socket:[75459]" dev="sockfs" ino=75459 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1106.805831][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1106.817797][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 1106.823405][T19149] em28xx 6-1:0.0: Binding DVB extension [ 1106.845839][ T10] usb 6-1: USB disconnect, device number 9 [ 1107.216132][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 1107.373118][T19149] em28xx 6-1:0.0: Registering input extension [ 1107.389928][ T10] em28xx 6-1:0.0: Closing input extension [ 1107.423925][ T10] em28xx 6-1:0.0: Freeing device [ 1108.117580][ T1206] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1108.192748][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1108.288645][ T1206] usb 2-1: device descriptor read/64, error -71 [ 1108.395803][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1108.425687][T11788] Bluetooth: hci3: Frame reassembly failed (-84) [ 1108.452409][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.466974][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.477435][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1108.486906][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.519828][ T10] usb 6-1: config 0 descriptor?? [ 1108.549315][T19994] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1108.577786][ T1206] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1108.584114][T19992] ./file0: Can't lookup blockdev [ 1108.797478][ T1206] usb 2-1: device descriptor read/64, error -71 [ 1108.974807][ T1206] usb usb2-port1: attempt power cycle [ 1109.248806][ T10] ft260 0003:0403:6030.0026: unknown main item tag 0x7 [ 1109.318158][T20001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3683'. [ 1109.482962][ T10] ft260 0003:0403:6030.0026: failed to retrieve chip version [ 1109.493898][ T10] ft260 0003:0403:6030.0026: probe with driver ft260 failed with error -71 [ 1109.515846][ T10] usb 6-1: USB disconnect, device number 10 [ 1109.764633][ T1206] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1109.786066][ T1206] usb 2-1: device descriptor read/8, error -71 [ 1110.470892][ T1206] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1110.514332][ T1206] usb 2-1: device descriptor read/8, error -71 [ 1110.567049][T17154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1110.630382][ T1206] usb usb2-port1: unable to enumerate USB device [ 1111.036580][ T1206] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1111.369345][ T1206] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 1111.369370][ T1206] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 1111.369384][ T1206] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 1111.369396][ T1206] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 1111.369417][ T1206] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1111.369429][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.371068][T20011] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1111.485102][ T5933] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 1111.623084][ T1206] ath6kl: Failed to submit usb control message: -71 [ 1111.637819][ T1206] ath6kl: unable to send the bmi data to the device: -71 [ 1111.645440][ T1206] ath6kl: Unable to send get target info: -71 [ 1111.656887][ T1206] ath6kl: Failed to init ath6kl core: -71 [ 1111.657565][ T5933] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 1111.679426][ T1206] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1111.688628][ T5933] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1111.704865][ T5933] usb 1-1: config 150 has no interface number 0 [ 1111.743168][ T5933] usb 1-1: too many endpoints for config 150 interface 1 altsetting 112: 117, using maximum allowed: 30 [ 1111.796998][ T5933] usb 1-1: config 150 interface 1 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 117 [ 1111.805091][ T1206] usb 6-1: USB disconnect, device number 11 [ 1111.877305][ T5933] usb 1-1: config 150 interface 204 has no altsetting 0 [ 1112.058570][ T5933] usb 1-1: config 150 interface 1 has no altsetting 0 [ 1112.065455][ T5928] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1112.080532][ T5933] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1112.089740][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.098017][ T5933] usb 1-1: Product: syz [ 1112.102231][ T5933] usb 1-1: Manufacturer: syz [ 1112.108126][ T5933] usb 1-1: SerialNumber: syz [ 1112.249046][ T5928] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1112.260248][ T5928] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1112.270789][ T5928] usb 3-1: config 150 has no interface number 0 [ 1112.361436][ T75] Bluetooth: hci3: Frame reassembly failed (-84) [ 1112.404014][ T5928] usb 3-1: too many endpoints for config 150 interface 1 altsetting 112: 117, using maximum allowed: 30 [ 1112.486579][ T5928] usb 3-1: config 150 interface 1 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 117 [ 1112.561521][ T5933] xr_serial 1-1:150.204: skipping garbage [ 1112.567599][ T5928] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1112.574681][ T5933] xr_serial 1-1:150.204: xr_serial converter detected [ 1112.582670][ T5928] usb 3-1: config 150 interface 1 has no altsetting 0 [ 1112.599160][ T5928] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1112.614869][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.630252][ T5928] usb 3-1: Product: syz [ 1112.683393][ T5928] usb 3-1: Manufacturer: syz [ 1112.693502][ T5928] usb 3-1: SerialNumber: syz [ 1113.181132][ T5928] xr_serial 3-1:150.204: skipping garbage [ 1113.187234][ T5928] xr_serial 3-1:150.204: xr_serial converter detected [ 1113.345552][ T5808] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1113.414464][ T5933] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1113.424361][ T5933] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1113.436826][ T5933] usb 1-1: USB disconnect, device number 109 [ 1113.444484][ T5933] xr_serial 1-1:150.204: device disconnected [ 1113.484322][ T5808] usb 6-1: device descriptor read/64, error -71 [ 1113.741065][ T5808] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1113.890550][ T5808] usb 6-1: device descriptor read/64, error -71 [ 1114.011890][ T5808] usb usb6-port1: attempt power cycle [ 1114.051583][ T5928] xr_serial ttyUSB1: Failed to set reg 0x0e: -71 [ 1114.057971][ T5928] xr_serial ttyUSB1: probe with driver xr_serial failed with error -71 [ 1114.081231][ T5928] usb 3-1: USB disconnect, device number 105 [ 1114.103084][ T5928] xr_serial 3-1:150.204: device disconnected [ 1114.478655][ T5808] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1114.499970][T17154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1115.206929][ T5808] usb 6-1: device descriptor read/8, error -71 [ 1115.259942][T20061] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1115.272707][T20061] ./file0: Can't lookup blockdev [ 1115.547656][ T75] nci: nci_rsp_packet: unknown rsp opcode 0x22 [ 1115.596627][ T5808] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1115.637670][ T5808] usb 6-1: device descriptor read/8, error -71 [ 1115.666696][T17154] Bluetooth: hci6: unexpected event for opcode 0x0403 [ 1115.684063][T20083] netlink: 380 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1115.761844][ T5808] usb usb6-port1: unable to enumerate USB device [ 1116.853697][T20093] FAULT_INJECTION: forcing a failure. [ 1116.853697][T20093] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.867115][T20093] CPU: 0 UID: 0 PID: 20093 Comm: syz.5.3711 Not tainted syzkaller #0 PREEMPT(full) [ 1116.867138][T20093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1116.867145][T20093] Call Trace: [ 1116.867151][T20093] [ 1116.867155][T20093] dump_stack_lvl+0x16c/0x1f0 [ 1116.867173][T20093] should_fail_ex+0x512/0x640 [ 1116.867189][T20093] should_failslab+0xc2/0x120 [ 1116.867206][T20093] __kmalloc_noprof+0xdd/0x880 [ 1116.867218][T20093] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1116.867233][T20093] ? __reuseport_alloc+0x1d/0x90 [ 1116.867249][T20093] ? __reuseport_alloc+0x1d/0x90 [ 1116.867261][T20093] __reuseport_alloc+0x1d/0x90 [ 1116.867273][T20093] reuseport_alloc+0x1eb/0x410 [ 1116.867287][T20093] udp_lib_get_port+0xa5f/0x1a90 [ 1116.867309][T20093] ? __pfx_udp_lib_get_port+0x10/0x10 [ 1116.867324][T20093] ? do_raw_spin_lock+0x12c/0x2b0 [ 1116.867339][T20093] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1116.867355][T20093] ? ipv6_portaddr_hash.isra.0+0xb9/0x250 [ 1116.867371][T20093] ? udp_v6_get_port+0x213/0x450 [ 1116.867384][T20093] __inet6_bind+0x58f/0x1b80 [ 1116.867403][T20093] inet6_bind+0xdb/0x120 [ 1116.867417][T20093] __sys_bind+0x1a7/0x260 [ 1116.867428][T20093] ? __pfx___sys_bind+0x10/0x10 [ 1116.867438][T20093] ? __fget_files+0x20e/0x3c0 [ 1116.867457][T20093] ? __pfx_ksys_write+0x10/0x10 [ 1116.867473][T20093] __x64_sys_bind+0x72/0xb0 [ 1116.867483][T20093] ? lockdep_hardirqs_on+0x7c/0x110 [ 1116.867496][T20093] do_syscall_64+0xcd/0xfa0 [ 1116.867510][T20093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.867521][T20093] RIP: 0033:0x7f348998efc9 [ 1116.867531][T20093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.867542][T20093] RSP: 002b:00007f348a784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1116.867552][T20093] RAX: ffffffffffffffda RBX: 00007f3489be5fa0 RCX: 00007f348998efc9 [ 1116.867559][T20093] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000004 [ 1116.867566][T20093] RBP: 00007f348a784090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.867573][T20093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.867580][T20093] R13: 00007f3489be6038 R14: 00007f3489be5fa0 R15: 00007ffd52b5ee08 [ 1116.867595][T20093] [ 1117.202919][ T30] audit: type=1400 audit(1760979954.532:4599): avc: denied { getopt } for pid=20097 comm="syz.0.3713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1117.238550][ T5933] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1117.285893][T20102] netlink: 'syz.0.3713': attribute type 12 has an invalid length. [ 1117.289744][T20102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=20102 comm=syz.0.3713 [ 1117.401709][ T5933] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1117.428680][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.474618][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.496846][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.565254][T15029] Bluetooth: hci3: Frame reassembly failed (-84) [ 1117.742311][T15029] Bluetooth: hci3: Frame reassembly failed (-84) [ 1117.761227][ T5933] usb 2-1: config 0 descriptor?? [ 1118.488212][T20120] netlink: 'syz.0.3719': attribute type 3 has an invalid length. [ 1118.573795][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'. [ 1119.478316][ T30] audit: type=1400 audit(1760979956.655:4600): avc: denied { remount } for pid=20128 comm="syz.0.3720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1119.629357][ T5933] pegasus 2-1:0.0: can't reset MAC [ 1119.634932][T17154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1119.643961][ T5933] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 1119.995545][ T5933] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1120.005901][T19149] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1120.030659][T20138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3723'. [ 1120.167765][T19149] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 1120.180527][T19149] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1120.199069][ T5933] usb 5-1: device descriptor read/64, error -71 [ 1120.219440][T19149] usb 6-1: config 150 has no interface number 0 [ 1120.237227][T19149] usb 6-1: too many endpoints for config 150 interface 1 altsetting 112: 117, using maximum allowed: 30 [ 1120.354691][T19149] usb 6-1: config 150 interface 1 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 117 [ 1120.368799][T19149] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1120.375856][T19149] usb 6-1: config 150 interface 1 has no altsetting 0 [ 1120.384905][T19149] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1120.394365][T19149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.403077][T19149] usb 6-1: Product: syz [ 1120.466541][T20147] fuse: Unknown parameter '017777777777777777777770000000000000000000000000000000000000000' [ 1120.506964][ T5933] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1120.809594][T19149] usb 6-1: Manufacturer: syz [ 1120.816620][T19149] usb 6-1: SerialNumber: syz [ 1120.973685][ T10] usb 2-1: USB disconnect, device number 93 [ 1120.979676][ T976] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1120.989208][ T5933] usb 5-1: device descriptor read/64, error -71 [ 1121.048597][T19149] xr_serial 6-1:150.204: skipping garbage [ 1121.058173][T19149] xr_serial 6-1:150.204: xr_serial converter detected [ 1121.075870][T19149] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1121.094437][T19149] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1121.107037][ T5933] usb usb5-port1: attempt power cycle [ 1121.109186][T19149] usb 6-1: USB disconnect, device number 16 [ 1121.125328][T19149] xr_serial 6-1:150.204: device disconnected [ 1121.167148][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 1121.179632][ T976] usb 1-1: config 0 has no interfaces? [ 1121.191320][ T976] usb 1-1: New USB device found, idVendor=12d1, idProduct=1c58, bcdDevice=80.57 [ 1121.212853][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.221094][ T976] usb 1-1: Product: syz [ 1121.225424][ T976] usb 1-1: Manufacturer: syz [ 1121.230017][ T976] usb 1-1: SerialNumber: syz [ 1121.241047][ T976] usb 1-1: config 0 descriptor?? [ 1121.681057][ T5933] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1121.705940][ T5933] usb 5-1: device descriptor read/8, error -71 [ 1121.725973][T20164] xt_l2tp: invalid flags combination: 0 [ 1121.983957][ T5933] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1122.090682][ T5933] usb 5-1: device descriptor read/8, error -71 [ 1122.242080][ T5933] usb usb5-port1: unable to enumerate USB device [ 1122.911801][T20175] /dev/nullb0: Can't open blockdev [ 1122.918301][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3735'. [ 1123.567410][T19149] usb 1-1: USB disconnect, device number 110 [ 1123.693737][T20181] netlink: 'syz.2.3734': attribute type 1 has an invalid length. [ 1123.725863][T20181] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3734'. [ 1124.060287][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1124.068085][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1124.522731][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1124.529668][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1124.652726][T17154] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 1124.935410][T20189] ceph: No mds server is up or the cluster is laggy [ 1125.099444][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 1125.806512][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 1126.026785][T20218] netlink: 380 bytes leftover after parsing attributes in process `syz.5.3744'. [ 1126.239685][T20226] tipc: Failed to obtain node identity [ 1126.245293][T20226] tipc: Enabling of bearer rejected, failed to enable media [ 1126.272843][ T10] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1126.464502][ T10] usb 1-1: device descriptor read/64, error -71 [ 1126.538213][T20237] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1126.556054][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3748'. [ 1127.114784][ T10] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1127.254055][ T10] usb 1-1: device descriptor read/64, error -71 [ 1127.528046][ T10] usb usb1-port1: attempt power cycle [ 1127.949892][ T10] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1127.981379][ T10] usb 1-1: device descriptor read/8, error -71 [ 1128.778453][ T10] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1128.815258][ T10] usb 1-1: device descriptor read/8, error -71 [ 1129.463770][ T30] audit: type=1400 audit(1760979965.541:4601): avc: denied { audit_write } for pid=20259 comm="syz.1.3756" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1129.551496][T20266] netlink: 380 bytes leftover after parsing attributes in process `syz.1.3758'. [ 1129.553761][ T30] audit: type=1107 audit(1760979965.541:4602): pid=20259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1129.617185][ T10] usb usb1-port1: unable to enumerate USB device [ 1130.449855][T20285] overlayfs: missing 'lowerdir' [ 1131.165016][T20295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1131.183578][T20295] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=20295 comm=syz.1.3767 [ 1131.349029][T20297] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 1132.102237][T20304] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3770'. [ 1132.130241][T20304] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3770'. [ 1132.492648][ T5928] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1132.547816][ T30] audit: type=1400 audit(1760979968.881:4603): avc: denied { lock } for pid=20313 comm="syz.2.3774" path="socket:[77527]" dev="sockfs" ino=77527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1132.717163][ T5928] usb 5-1: device descriptor read/64, error -71 [ 1133.261981][ T5928] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1133.600172][ T5928] usb 5-1: device descriptor read/64, error -71 [ 1133.731787][ T5928] usb usb5-port1: attempt power cycle [ 1134.301063][T20332] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3778'. [ 1134.577962][ T5928] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1134.667065][ T5928] usb 5-1: device descriptor read/8, error -71 [ 1134.700933][T11788] Bluetooth: (null): Invalid header checksum [ 1134.714917][T11788] Bluetooth: (null): Invalid header checksum [ 1134.951122][ T5928] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1135.009746][ T5928] usb 5-1: device descriptor read/8, error -71 [ 1135.159037][ T5928] usb usb5-port1: unable to enumerate USB device [ 1135.165038][ T30] audit: type=1400 audit(1760979971.313:4604): avc: denied { accept } for pid=20340 comm="syz.1.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1137.564418][T20367] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3791'. [ 1137.735184][T20364] loop8: detected capacity change from 0 to 8 [ 1137.902213][T20364] Dev loop8: unable to read RDB block 8 [ 1137.907864][T20364] loop8: unable to read partition table [ 1137.913814][T20364] loop8: partition table beyond EOD, truncated [ 1137.920019][T20364] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1138.013535][T17154] Bluetooth: hci6: unexpected event for opcode 0x0403 [ 1138.115652][ T5928] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1138.286841][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 1138.286856][ T5808] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1138.511874][ T5928] usb 2-1: config 8 has an invalid interface number: 199 but max is 3 [ 1138.534832][ T5928] usb 2-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 1138.543342][ T5808] usb 6-1: device descriptor read/64, error -71 [ 1138.640062][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3798'. [ 1138.751057][ T5928] usb 2-1: config 8 has an invalid interface number: 106 but max is 3 [ 1139.901254][ T5808] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1140.071859][ T5808] usb 6-1: device descriptor read/64, error -71 [ 1140.118878][ T5928] usb 2-1: config 8 has an invalid interface number: 75 but max is 3 [ 1140.132422][ T5928] usb 2-1: config 8 has an invalid interface number: 200 but max is 3 [ 1140.143384][ T5928] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1140.152450][ T5928] usb 2-1: config 8 has an invalid interface number: 184 but max is 3 [ 1140.191626][ T5808] usb usb6-port1: attempt power cycle [ 1140.585308][ T5808] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1141.039207][ T5928] usb 2-1: config 8 has 5 interfaces, different from the descriptor's value: 4 [ 1141.048348][ T5928] usb 2-1: config 8 has no interface number 0 [ 1141.054497][ T5928] usb 2-1: config 8 has no interface number 1 [ 1141.060769][ T5928] usb 2-1: config 8 has no interface number 2 [ 1141.087472][ T5928] usb 2-1: config 8 has no interface number 3 [ 1141.092619][ T5808] usb 6-1: device descriptor read/8, error -71 [ 1141.093786][ T5928] usb 2-1: config 8 has no interface number 4 [ 1141.433028][ T5928] usb 2-1: config 8 interface 199 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1141.478195][ T5928] usb 2-1: config 8 interface 199 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1141.523344][ T5928] usb 2-1: config 8 interface 75 altsetting 127 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1141.562026][ T5928] usb 2-1: config 8 interface 75 altsetting 127 has a duplicate endpoint with address 0xD, skipping [ 1141.579043][ T5928] usb 2-1: config 8 interface 75 altsetting 127 has a duplicate endpoint with address 0xA, skipping [ 1141.642469][ T5928] usb 2-1: config 8 interface 200 altsetting 2 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1141.670269][ T5928] usb 2-1: config 8 interface 200 altsetting 2 endpoint 0x83 has an invalid bInterval 94, changing to 10 [ 1141.849206][ T5928] usb 2-1: config 8 interface 200 altsetting 2 endpoint 0x83 has invalid maxpacket 42719, setting to 1024 [ 1141.893241][ T5928] usb 2-1: config 8 interface 200 altsetting 2 has an endpoint descriptor with address 0x65, changing to 0x5 [ 1141.963031][ T5928] usb 2-1: config 8 interface 200 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1142.044192][ T5928] usb 2-1: config 8 interface 200 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 1142.274197][ T5928] usb 2-1: config 8 interface 200 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1142.290969][ T5928] usb 2-1: config 8 interface 200 altsetting 2 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1142.293532][T20428] netlink: 'syz.5.3805': attribute type 1 has an invalid length. [ 1142.303190][ T5928] usb 2-1: config 8 interface 200 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 1142.322067][ T5928] usb 2-1: config 8 interface 200 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1142.384318][T20433] FAULT_INJECTION: forcing a failure. [ 1142.384318][T20433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.397476][T20433] CPU: 1 UID: 0 PID: 20433 Comm: syz.4.3806 Not tainted syzkaller #0 PREEMPT(full) [ 1142.397500][T20433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1142.397511][T20433] Call Trace: [ 1142.397518][T20433] [ 1142.397525][T20433] dump_stack_lvl+0x16c/0x1f0 [ 1142.397554][T20433] should_fail_ex+0x512/0x640 [ 1142.397582][T20433] _copy_from_user+0x2e/0xd0 [ 1142.397607][T20433] __sys_bpf+0x248/0x4980 [ 1142.397633][T20433] ? __pfx___sys_bpf+0x10/0x10 [ 1142.397651][T20433] ? finish_task_switch.isra.0+0x22a/0xc10 [ 1142.397684][T20433] ? rcu_is_watching+0x12/0xc0 [ 1142.397702][T20433] ? trace_sched_exit_tp+0xd1/0x120 [ 1142.397726][T20433] ? __schedule+0x11a3/0x5de0 [ 1142.397784][T20433] __x64_sys_bpf+0x78/0xc0 [ 1142.397804][T20433] ? lockdep_hardirqs_on+0x7c/0x110 [ 1142.397826][T20433] do_syscall_64+0xcd/0xfa0 [ 1142.397851][T20433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.397869][T20433] RIP: 0033:0x7f3c91d8efc9 [ 1142.397884][T20433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.397900][T20433] RSP: 002b:00007f3c92c1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1142.397918][T20433] RAX: ffffffffffffffda RBX: 00007f3c91fe6180 RCX: 00007f3c91d8efc9 [ 1142.397930][T20433] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1142.397941][T20433] RBP: 00007f3c92c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.397952][T20433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.397963][T20433] R13: 00007f3c91fe6218 R14: 00007f3c91fe6180 R15: 00007ffea4cfa8c8 [ 1142.397990][T20433] [ 1142.617201][ T5928] usb 2-1: config 8 interface 200 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1142.641419][ T5928] usb 2-1: too many endpoints for config 8 interface 184 altsetting 168: 237, using maximum allowed: 30 [ 1142.655170][ T5928] usb 2-1: config 8 interface 184 altsetting 168 has 0 endpoint descriptors, different from the interface descriptor's value: 237 [ 1142.668703][ T5928] usb 2-1: config 8 interface 199 has no altsetting 0 [ 1142.675564][ T5928] usb 2-1: config 8 interface 106 has no altsetting 0 [ 1142.682693][ T5928] usb 2-1: config 8 interface 75 has no altsetting 0 [ 1142.689406][ T5928] usb 2-1: config 8 interface 200 has no altsetting 0 [ 1142.696295][ T5928] usb 2-1: config 8 interface 184 has no altsetting 0 [ 1142.703547][ T5928] usb 2-1: string descriptor 0 read error: -71 [ 1142.710342][ T5928] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=f8.69 [ 1142.720424][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.730974][ T5928] usb 2-1: can't set config #8, error -71 [ 1142.756913][ T5928] usb 2-1: USB disconnect, device number 94 [ 1142.825120][T20428] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3805'. [ 1143.582202][ T30] audit: type=1107 audit(1760979979.198:4605): pid=20443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1144.369444][ T10] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1144.602096][ T10] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1144.610629][ T10] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1144.636542][T20461] tipc: Started in network mode [ 1144.665490][ T10] usb 5-1: config 150 has no interface number 0 [ 1144.688473][ T10] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1144.707933][ T10] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1144.718531][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.747780][ T10] usb 5-1: Product: syz [ 1144.755744][ T10] usb 5-1: Manufacturer: syz [ 1144.762941][ T10] usb 5-1: SerialNumber: syz [ 1144.772983][T20461] tipc: Node identity a64f0d6da91d, cluster identity 4711 [ 1144.784984][T20461] tipc: Enabled bearer , priority 0 [ 1144.795590][T20464] syzkaller0: entered promiscuous mode [ 1144.806948][T20464] syzkaller0: entered allmulticast mode [ 1144.821131][T20461] tipc: Resetting bearer [ 1144.831333][T20458] tipc: Resetting bearer [ 1145.001729][T20458] tipc: Disabling bearer [ 1145.333122][ T10] xr_serial 5-1:150.204: skipping garbage [ 1145.347309][ T10] xr_serial 5-1:150.204: xr_serial converter detected [ 1146.229079][ T30] audit: type=1107 audit(1760979981.677:4606): pid=20482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1146.699376][T20488] binder_alloc: 20485: binder_alloc_buf, no vma [ 1146.768633][ T10] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 1146.953233][ T5928] usb 5-1: USB disconnect, device number 97 [ 1147.026368][ T5928] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1147.052368][ T5928] xr_serial 5-1:150.204: device disconnected [ 1147.265803][T20502] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1147.291044][T20502] ./file0: Can't lookup blockdev [ 1148.223887][T20508] fuse: Bad value for 'fd' [ 1150.009109][T20540] FAULT_INJECTION: forcing a failure. [ 1150.009109][T20540] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.054517][T20540] CPU: 0 UID: 0 PID: 20540 Comm: syz.0.3835 Not tainted syzkaller #0 PREEMPT(full) [ 1150.054535][T20540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1150.054541][T20540] Call Trace: [ 1150.054545][T20540] [ 1150.054549][T20540] dump_stack_lvl+0x16c/0x1f0 [ 1150.054572][T20540] should_fail_ex+0x512/0x640 [ 1150.054585][T20540] ? __kmalloc_noprof+0xca/0x880 [ 1150.054598][T20540] should_failslab+0xc2/0x120 [ 1150.054615][T20540] __kmalloc_noprof+0xdd/0x880 [ 1150.054626][T20540] ? kernfs_fop_write_iter+0x237/0x570 [ 1150.054643][T20540] ? kernfs_fop_write_iter+0x237/0x570 [ 1150.054656][T20540] kernfs_fop_write_iter+0x237/0x570 [ 1150.054673][T20540] iter_file_splice_write+0xa24/0x12e0 [ 1150.054698][T20540] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1150.054715][T20540] ? __pfx_copy_splice_read+0x10/0x10 [ 1150.054737][T20540] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1150.054752][T20540] direct_splice_actor+0x192/0x6c0 [ 1150.054768][T20540] splice_direct_to_actor+0x345/0xa30 [ 1150.054783][T20540] ? __pfx_direct_splice_actor+0x10/0x10 [ 1150.054800][T20540] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1150.054813][T20540] ? get_pid_task+0xfc/0x250 [ 1150.054831][T20540] do_splice_direct+0x174/0x240 [ 1150.054845][T20540] ? __pfx_do_splice_direct+0x10/0x10 [ 1150.054859][T20540] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1150.054875][T20540] ? rw_verify_area+0xcf/0x6c0 [ 1150.054889][T20540] do_sendfile+0xb06/0xe50 [ 1150.054904][T20540] ? __pfx_do_sendfile+0x10/0x10 [ 1150.054917][T20540] ? __fget_files+0x20e/0x3c0 [ 1150.054936][T20540] __x64_sys_sendfile64+0x1d8/0x220 [ 1150.054951][T20540] ? ksys_write+0x1ac/0x250 [ 1150.054964][T20540] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1150.054985][T20540] do_syscall_64+0xcd/0xfa0 [ 1150.054999][T20540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.055010][T20540] RIP: 0033:0x7f5f06b8efc9 [ 1150.055020][T20540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.055030][T20540] RSP: 002b:00007f5f07a63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1150.055041][T20540] RAX: ffffffffffffffda RBX: 00007f5f06de5fa0 RCX: 00007f5f06b8efc9 [ 1150.055048][T20540] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1150.055054][T20540] RBP: 00007f5f07a63090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.055060][T20540] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 1150.055066][T20540] R13: 00007f5f06de6038 R14: 00007f5f06de5fa0 R15: 00007ffff1fc7868 [ 1150.055082][T20540] [ 1152.280489][ T5933] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1152.302347][ T5928] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1152.334234][ T1206] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1152.443063][ T5933] usb 1-1: device descriptor read/64, error -71 [ 1152.457105][T20577] tipc: Started in network mode [ 1152.462090][T20577] tipc: Node identity c6fe89363982, cluster identity 4711 [ 1152.469437][T20577] tipc: Enabled bearer , priority 0 [ 1152.479916][T20577] syzkaller0: entered promiscuous mode [ 1152.486084][T20577] syzkaller0: entered allmulticast mode [ 1152.486242][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1152.497697][T20577] tipc: Resetting bearer [ 1152.508498][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.508543][ T5928] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1152.508564][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.515161][ T5928] usb 3-1: config 0 descriptor?? [ 1152.548022][ T5928] hub 3-1:0.0: USB hub found [ 1152.548924][ T1206] usb 6-1: Using ep0 maxpacket: 8 [ 1152.559725][T20576] tipc: Resetting bearer [ 1152.567065][ T1206] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 1152.576060][ T1206] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1152.585061][ T1206] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1152.602091][ T1206] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1152.613464][ T1206] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1152.614090][T20576] tipc: Disabling bearer [ 1152.624944][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1152.624971][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1152.624995][ T1206] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1152.627510][ T1206] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1152.677913][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.685902][ T1206] usb 6-1: Product: syz [ 1152.690542][ T1206] usb 6-1: Manufacturer: syz [ 1152.695128][ T1206] usb 6-1: SerialNumber: syz [ 1152.701962][ T1206] usb 6-1: config 0 descriptor?? [ 1152.707572][T20575] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1152.708106][ T5933] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1152.719422][ T1206] hub 6-1:0.0: bad descriptor, ignoring hub [ 1152.729851][ T1206] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1152.755826][ T1206] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input77 [ 1152.789879][ T5928] hub 3-1:0.0: 2 ports detected [ 1152.891676][ T5933] usb 1-1: device descriptor read/64, error -71 [ 1153.021772][ T5933] usb usb1-port1: attempt power cycle [ 1154.299377][ T5808] usb 6-1: USB disconnect, device number 21 [ 1154.481842][ T5933] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1155.053351][ T5933] usb 1-1: device descriptor read/8, error -71 [ 1155.316618][ T5933] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1155.472945][ T5928] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 1155.488684][ T5933] usb 1-1: device descriptor read/8, error -71 [ 1155.519460][T20596] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3851'. [ 1155.554398][ T1206] usb 3-1: USB disconnect, device number 106 [ 1155.606033][ T5933] usb usb1-port1: unable to enumerate USB device [ 1155.624313][T20609] binder_alloc: 20604: binder_alloc_buf, no vma [ 1156.724497][ T30] audit: type=1400 audit(1760979991.499:4607): avc: denied { getopt } for pid=20622 comm="syz.4.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1156.789741][T17154] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 1157.055376][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'. [ 1157.091331][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'. [ 1157.244575][T20629] netlink: 'syz.0.3861': attribute type 11 has an invalid length. [ 1157.253864][T20633] overlayfs: overlapping lowerdir path [ 1157.265128][T20629] netlink: 'syz.0.3861': attribute type 13 has an invalid length. [ 1157.303803][T20633] overlayfs: failed to verify upper (143/file0, ino=829, err=-116) [ 1157.315625][T20633] overlayfs: failed to verify index dir 'upper' xattr [ 1157.332316][T20633] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1158.577537][ T5933] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1159.670812][ T5933] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1159.679986][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.833963][T11788] Bluetooth: hci3: Frame reassembly failed (-84) [ 1159.841372][ T5933] usb 3-1: Product: syz [ 1159.845537][ T5933] usb 3-1: Manufacturer: syz [ 1159.895964][ T5933] usb 3-1: SerialNumber: syz [ 1159.959048][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 1159.965403][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 1160.004759][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 1160.016286][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 1160.051840][ T30] audit: type=1326 audit(1760979994.604:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20659 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348998efc9 code=0x7ffc0000 [ 1160.075864][ T30] audit: type=1326 audit(1760979994.604:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20659 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348998efc9 code=0x7ffc0000 [ 1160.099596][ T30] audit: type=1326 audit(1760979994.604:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20659 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f348998efc9 code=0x7ffc0000 [ 1160.125673][T20670] netlink: 'syz.4.3872': attribute type 1 has an invalid length. [ 1160.127429][ T30] audit: type=1326 audit(1760979994.604:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20659 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348998efc9 code=0x7ffc0000 [ 1160.157157][T20670] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3872'. [ 1160.168229][ T30] audit: type=1326 audit(1760979994.604:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20659 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f348998efc9 code=0x7ffc0000 [ 1160.191989][ T976] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1160.193174][ T30] audit: type=1326 audit(1760979994.623:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20659 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348998efc9 code=0x7ffc0000 [ 1160.223482][ T30] audit: type=1326 audit(1760979994.623:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20659 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f348998efc9 code=0x7ffc0000 [ 1160.247640][ T30] audit: type=1326 audit(1760979994.623:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20659 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348998efc9 code=0x7ffc0000 [ 1160.256009][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 1160.272129][ T30] audit: type=1326 audit(1760979994.623:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20659 comm="syz.5.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348998efc9 code=0x7ffc0000 [ 1160.278129][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 1160.307272][T13502] libceph: connect (1)[c::]:6789 error -101 [ 1160.313409][T13502] libceph: mon0 (1)[c::]:6789 connect error [ 1160.364194][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1160.373263][T20649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.375277][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.384233][T20649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.393430][ T976] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1160.408170][T20649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.410224][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.428915][T20649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.430576][ T976] usb 1-1: config 0 descriptor?? [ 1160.447060][ T976] hub 1-1:0.0: USB hub found [ 1160.475652][ T5933] rtl8150 3-1:1.0: couldn't reset the device [ 1160.482029][ T5933] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1160.493308][ T5933] usb 3-1: USB disconnect, device number 107 [ 1160.662115][ T976] hub 1-1:0.0: 2 ports detected [ 1160.816971][T20663] ceph: No mds server is up or the cluster is laggy [ 1160.826010][T20667] ceph: No mds server is up or the cluster is laggy [ 1160.856508][ T5933] libceph: connect (1)[c::]:6789 error -101 [ 1160.915565][ T5933] libceph: mon0 (1)[c::]:6789 connect error [ 1161.039953][T20677] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1161.050925][T20677] SELinux: failed to load policy [ 1161.966700][T17154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1162.769293][ T976] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 1162.952668][T20693] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1162.972178][T20693] ./file0: Can't lookup blockdev [ 1164.009036][T19149] usb 1-1: USB disconnect, device number 119 [ 1165.218261][T20715] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3884'. [ 1166.603129][ T75] Bluetooth: hci3: Frame reassembly failed (-84) [ 1166.659336][ T976] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1166.819980][ T976] usb 1-1: device descriptor read/64, error -71 [ 1167.076619][ T976] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1167.322428][ T976] usb 1-1: device descriptor read/64, error -71 [ 1167.414451][T20740] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1167.433740][T20740] ./file0: Can't lookup blockdev [ 1167.902460][ T976] usb usb1-port1: attempt power cycle [ 1168.050949][T20744] FAULT_INJECTION: forcing a failure. [ 1168.050949][T20744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.066269][T20744] CPU: 1 UID: 0 PID: 20744 Comm: syz.5.3892 Not tainted syzkaller #0 PREEMPT(full) [ 1168.066293][T20744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1168.066304][T20744] Call Trace: [ 1168.066311][T20744] [ 1168.066319][T20744] dump_stack_lvl+0x16c/0x1f0 [ 1168.066346][T20744] should_fail_ex+0x512/0x640 [ 1168.066374][T20744] _copy_from_user+0x2e/0xd0 [ 1168.066400][T20744] copy_msghdr_from_user+0x98/0x160 [ 1168.066425][T20744] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1168.066452][T20744] ? kfree+0x252/0x6d0 [ 1168.066470][T20744] ? __pfx__kstrtoull+0x10/0x10 [ 1168.066498][T20744] ___sys_sendmsg+0xfe/0x1d0 [ 1168.066522][T20744] ? __pfx____sys_sendmsg+0x10/0x10 [ 1168.066570][T20744] ? __pfx___might_resched+0x10/0x10 [ 1168.066595][T20744] __sys_sendmmsg+0x200/0x420 [ 1168.066621][T20744] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1168.066666][T20744] ? fput+0x9b/0xd0 [ 1168.066684][T20744] ? ksys_write+0x1ac/0x250 [ 1168.066714][T20744] __x64_sys_sendmmsg+0x9c/0x100 [ 1168.066737][T20744] ? lockdep_hardirqs_on+0x7c/0x110 [ 1168.066759][T20744] do_syscall_64+0xcd/0xfa0 [ 1168.066784][T20744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.066802][T20744] RIP: 0033:0x7f348998efc9 [ 1168.066818][T20744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.066834][T20744] RSP: 002b:00007f348a763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1168.066851][T20744] RAX: ffffffffffffffda RBX: 00007f3489be6090 RCX: 00007f348998efc9 [ 1168.066863][T20744] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000004 [ 1168.066874][T20744] RBP: 00007f348a763090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.066885][T20744] R10: 000000000000ffd8 R11: 0000000000000246 R12: 0000000000000001 [ 1168.066895][T20744] R13: 00007f3489be6128 R14: 00007f3489be6090 R15: 00007ffd52b5ee08 [ 1168.066923][T20744] [ 1168.316743][ T976] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1168.351534][ T976] usb 1-1: device descriptor read/8, error -71 [ 1168.637564][ T976] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1168.722822][T17154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1169.244294][ T976] usb 1-1: device descriptor read/8, error -71 [ 1169.954645][T20761] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1170.303481][ T976] usb usb1-port1: unable to enumerate USB device [ 1170.338406][T20761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22548 sclass=netlink_route_socket pid=20761 comm=syz.5.3897 [ 1171.345270][T20787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3904'. [ 1172.158126][ T30] audit: type=1107 audit(1760980005.577:4617): pid=20793 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1174.232205][ T30] audit: type=1400 audit(1760980007.878:4618): avc: denied { read } for pid=20808 comm="syz.0.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1174.572893][T20815] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1175.330098][T19149] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 1175.379342][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3917'. [ 1175.503126][T19149] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1175.512927][T20826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3917'. [ 1175.514173][T19149] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1175.522031][T20826] netlink: 'syz.5.3917': attribute type 11 has an invalid length. [ 1175.537960][T20826] netlink: 'syz.5.3917': attribute type 13 has an invalid length. [ 1175.978496][ T30] audit: type=1107 audit(1760980009.187:4619): pid=20827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1175.991906][T19149] usb 3-1: config 0 has no interface number 0 [ 1176.017775][T19149] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1176.120811][T19149] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1176.135672][T19149] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1176.166098][T19149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.197759][T19149] usb 3-1: config 0 descriptor?? [ 1176.519495][T17154] Bluetooth: hci5: unexpected event for opcode 0x0403 [ 1176.521889][T15029] nci: nci_rsp_packet: unknown rsp opcode 0x22 [ 1177.042127][T19149] usb 3-1: USB disconnect, device number 108 [ 1177.428727][T20848] netlink: 'syz.4.3921': attribute type 4 has an invalid length. [ 1177.928982][T20852] netlink: 'syz.4.3921': attribute type 4 has an invalid length. [ 1178.912621][T17154] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 1179.016805][ T3492] Bluetooth: hci3: Frame reassembly failed (-84) [ 1179.724741][T20876] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1179.742155][T20876] ./file0: Can't lookup blockdev [ 1180.981674][T20885] ubi: mtd0 is already attached to ubi31 [ 1181.209396][ T5811] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1181.651456][T20891] input: syz0 as /devices/virtual/input/input79 [ 1181.798024][T20893] netlink: 755 bytes leftover after parsing attributes in process `syz.2.3932'. [ 1183.094552][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.101076][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.370256][ T30] audit: type=1400 audit(1760980017.353:4620): avc: denied { ioctl } for pid=20922 comm="syz.0.3940" path="socket:[80095]" dev="sockfs" ino=80095 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1184.662545][ T5808] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1184.860214][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 1184.892916][ T5808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.920178][ T5808] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1184.960444][ T5808] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1184.972917][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.980985][ T5808] usb 5-1: Product: syz [ 1184.985396][ T5808] usb 5-1: Manufacturer: syz [ 1184.990045][ T5808] usb 5-1: SerialNumber: syz [ 1184.997081][ T5808] usb 5-1: config 0 descriptor?? [ 1187.892625][ T976] usb 5-1: USB disconnect, device number 98 [ 1189.322055][T20988] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1189.333917][T20988] SELinux: failed to load policy [ 1189.668280][T21004] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1189.911747][ T30] audit: type=1107 audit(1760980022.545:4621): pid=21010 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1190.650251][T21019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3964'. [ 1191.098483][ T5808] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1191.356265][ T5808] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1191.374892][ T5808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1191.448401][ T5808] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1191.496512][ T5808] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1191.605458][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.799816][ T5808] usb 2-1: Product: syz [ 1191.814448][ T1206] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1191.876198][T21047] fuse: Unknown parameter '01777777777777777777777' [ 1191.997210][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 1192.349121][ T5808] usb 2-1: Manufacturer: syz [ 1192.419251][ T5808] usb 2-1: SerialNumber: syz [ 1192.447971][ T5808] usb 2-1: config 0 descriptor?? [ 1192.453497][T21026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1192.475152][ T1206] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1192.476319][T21026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1192.502752][ T5808] usb 2-1: ucan: probing device on interface #0 [ 1192.588831][ T1206] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1192.629036][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.658760][ T1206] usb 5-1: Product: syz [ 1192.679101][ T1206] usb 5-1: Manufacturer: syz [ 1192.684059][ T1206] usb 5-1: SerialNumber: syz [ 1192.692432][T13254] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1192.801581][ T1206] usb 5-1: config 0 descriptor?? [ 1192.866034][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 1192.872452][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 1192.968992][T13254] usb 3-1: Using ep0 maxpacket: 32 [ 1192.977355][T13254] usb 3-1: config 0 has no interfaces? [ 1192.985600][T13254] usb 3-1: New USB device found, idVendor=12d1, idProduct=1c58, bcdDevice=80.57 [ 1192.994899][T13254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.003309][T13254] usb 3-1: Product: syz [ 1193.007541][T13254] usb 3-1: Manufacturer: syz [ 1193.012498][T13254] usb 3-1: SerialNumber: syz [ 1193.023173][T13254] usb 3-1: config 0 descriptor?? [ 1193.036114][T21026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.044994][T21026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.268140][ T30] audit: type=1400 audit(1760980025.678:4622): avc: denied { getopt } for pid=21024 comm="syz.1.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1193.368456][ T30] audit: type=1107 audit(1760980025.781:4623): pid=21060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1193.678444][T21026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1193.679223][ T5808] ucan 2-1:0.0 can0: registered device [ 1193.691766][ T5808] ucan 2-1:0.0 can0: firmware string: [ 1193.912319][ T5808] usb 2-1: USB disconnect, device number 95 [ 1194.726813][ T5808] usb 5-1: USB disconnect, device number 99 [ 1194.745329][ T13] nci: nci_rsp_packet: unknown rsp opcode 0x22 [ 1194.764104][ T5811] Bluetooth: hci5: unexpected event for opcode 0x0403 [ 1194.824091][ T1206] usb 3-1: USB disconnect, device number 109 [ 1195.079508][ T5811] Bluetooth: hci3: command 0x1003 tx timeout [ 1195.087158][T17154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1195.454599][ T30] audit: type=1107 audit(1760980027.717:4624): pid=21091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1197.345840][ T30] audit: type=1107 audit(1760980029.495:4625): pid=21122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1198.166666][ T30] audit: type=1400 audit(1760980030.271:4626): avc: denied { name_connect } for pid=21132 comm="syz.1.3993" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1198.191418][ T5933] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1198.200403][ T30] audit: type=1400 audit(1760980030.299:4627): avc: denied { write } for pid=21132 comm="syz.1.3993" lport=57352 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1198.273945][ T30] audit: type=1400 audit(1760980030.299:4628): avc: denied { setopt } for pid=21132 comm="syz.1.3993" lport=57352 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1198.474848][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 1198.501945][T21137] set match dimension is over the limit! [ 1198.585934][ T1206] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1198.614691][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1198.701450][ T5933] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1198.742584][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.752333][ T5933] usb 5-1: Product: syz [ 1198.758732][ T5933] usb 5-1: Manufacturer: syz [ 1198.764251][ T5933] usb 5-1: SerialNumber: syz [ 1198.772293][ T5933] usb 5-1: config 0 descriptor?? [ 1198.774304][ T1206] usb 6-1: Using ep0 maxpacket: 32 [ 1198.784375][ T1206] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1198.793489][ T1206] usb 6-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 1198.804623][ T1206] usb 6-1: config 0 has no interface number 0 [ 1198.811632][ T1206] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1198.824079][ T1206] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1198.835515][ T1206] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1198.836562][T21144] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1198.854600][ T1206] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1198.855384][T21144] overlayfs: failed to set xattr on upper [ 1198.866231][ T1206] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1198.873958][T21144] overlayfs: ...falling back to redirect_dir=nofollow. [ 1198.882765][ T1206] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1198.890930][T21144] overlayfs: ...falling back to uuid=null. [ 1198.901652][ T1206] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 118, changing to 10 [ 1198.907421][T21144] overlayfs: conflicting lowerdir path [ 1198.919055][ T1206] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 25956, setting to 1024 [ 1198.936071][ T1206] usb 6-1: config 0 interface 239 has no altsetting 0 [ 1198.945122][ T1206] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1198.954277][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.962815][ T1206] usb 6-1: Product: syz [ 1198.969009][ T1206] usb 6-1: Manufacturer: syz [ 1198.973654][ T1206] usb 6-1: SerialNumber: syz [ 1198.980870][ T1206] usb 6-1: config 0 descriptor?? [ 1198.986576][T21131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1198.994147][T21131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1199.005505][T21131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1199.236415][T21131] 9pnet_fd: Insufficient options for proto=fd [ 1199.245755][T17154] Bluetooth: hci3: BCM: Reset failed (-71) [ 1199.245914][ T5933] usb 6-1: USB disconnect, device number 22 [ 1199.865112][T21162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4002'. [ 1200.650661][T21175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4005'. [ 1201.161112][T17154] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 1201.230526][ T1206] usb 5-1: USB disconnect, device number 100 [ 1201.313471][T21194] tipc: Enabled bearer , priority 0 [ 1201.322268][T21194] syzkaller0: entered promiscuous mode [ 1201.327863][T21194] syzkaller0: entered allmulticast mode [ 1201.353161][T21194] tipc: Resetting bearer [ 1201.366008][T21193] tipc: Resetting bearer [ 1201.403597][T21193] tipc: Disabling bearer [ 1202.602159][T21216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4017'. [ 1202.780685][T21219] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4016'. [ 1202.856850][T21220] ubi: mtd0 is already attached to ubi31 [ 1203.170292][T21218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4016'. [ 1203.179488][T21218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4016'. [ 1203.380023][T21216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4017'. [ 1203.418575][T21216] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4017'. [ 1203.446774][T21216] netlink: 'syz.0.4017': attribute type 6 has an invalid length. [ 1203.459173][T21216] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4017'. [ 1204.289195][T21248] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1204.310905][T21248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4026'. [ 1204.664132][ T1206] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 1204.683123][ T1206] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 1204.693319][ T1206] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 1204.714180][ T1206] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 1204.721972][ T1206] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 1204.729855][ T1206] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 1204.737334][ T1206] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 1204.745267][ T1206] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 1204.753000][ T1206] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 1204.788895][ T1206] hid-generic 0003:0004:0000.0027: unknown main item tag 0x0 [ 1204.813066][ T1206] hid-generic 0003:0004:0000.0027: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1206.979346][ T30] audit: type=1400 audit(1760980038.512:4629): avc: denied { write } for pid=21272 comm="syz.0.4033" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1207.036420][T21279] 9pnet_fd: Insufficient options for proto=fd [ 1207.211650][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 1207.240438][ T30] audit: type=1400 audit(1760980038.736:4630): avc: denied { read } for pid=21285 comm="syz.5.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1207.870280][T17154] Bluetooth: hci6: unexpected event for opcode 0x0403 [ 1208.478773][T21299] ieee802154 phy0 wpan0: encryption failed: -90 [ 1210.325250][T21338] netlink: 696 bytes leftover after parsing attributes in process `syz.1.4045'. [ 1210.855544][T21333] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 1210.940125][ T30] audit: type=1400 audit(1760980042.188:4631): avc: denied { read write } for pid=17153 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1211.083127][ T30] audit: type=1400 audit(1760980042.188:4632): avc: denied { open } for pid=17153 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1211.160124][ T30] audit: type=1400 audit(1760980042.188:4633): avc: denied { ioctl } for pid=18558 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1211.204668][ T30] audit: type=1400 audit(1760980042.244:4634): avc: denied { create } for pid=21339 comm="syz.5.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1211.238926][ T30] audit: type=1400 audit(1760980042.244:4635): avc: denied { module_request } for pid=21339 comm="syz.5.4053" kmod="net-pf-10-proto-0-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1211.263985][T21348] FAULT_INJECTION: forcing a failure. [ 1211.263985][T21348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1211.277426][T21348] CPU: 0 UID: 0 PID: 21348 Comm: syz.2.4057 Not tainted syzkaller #0 PREEMPT(full) [ 1211.277451][T21348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1211.277462][T21348] Call Trace: [ 1211.277468][T21348] [ 1211.277475][T21348] dump_stack_lvl+0x16c/0x1f0 [ 1211.277502][T21348] should_fail_ex+0x512/0x640 [ 1211.277529][T21348] strncpy_from_user+0x3b/0x2e0 [ 1211.277553][T21348] __do_sys_add_key+0xce/0x470 [ 1211.277574][T21348] ? __pfx___do_sys_add_key+0x10/0x10 [ 1211.277592][T21348] ? ksys_write+0x1ac/0x250 [ 1211.277625][T21348] do_syscall_64+0xcd/0xfa0 [ 1211.277655][T21348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.277673][T21348] RIP: 0033:0x7fbee858efc9 [ 1211.277688][T21348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.277704][T21348] RSP: 002b:00007fbee93ed038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1211.277721][T21348] RAX: ffffffffffffffda RBX: 00007fbee87e5fa0 RCX: 00007fbee858efc9 [ 1211.277733][T21348] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000200000000600 [ 1211.277744][T21348] RBP: 00007fbee93ed090 R08: ffffffffffffffff R09: 0000000000000000 [ 1211.277755][T21348] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1211.277765][T21348] R13: 00007fbee87e6038 R14: 00007fbee87e5fa0 R15: 00007ffd00c4b468 [ 1211.277791][T21348] [ 1211.555272][ T30] audit: type=1400 audit(1760980042.787:4636): avc: denied { prog_load } for pid=21346 comm="syz.4.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1211.583433][ T30] audit: type=1400 audit(1760980042.796:4637): avc: denied { read } for pid=21350 comm="syz.2.4059" dev="nsfs" ino=4026533895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1211.649598][ T30] audit: type=1400 audit(1760980042.796:4638): avc: denied { open } for pid=21350 comm="syz.2.4059" path="net:[4026533895]" dev="nsfs" ino=4026533895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1211.892131][T21366] FAULT_INJECTION: forcing a failure. [ 1211.892131][T21366] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.905269][T21366] CPU: 0 UID: 0 PID: 21366 Comm: syz.5.4060 Not tainted syzkaller #0 PREEMPT(full) [ 1211.905295][T21366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1211.905306][T21366] Call Trace: [ 1211.905313][T21366] [ 1211.905320][T21366] dump_stack_lvl+0x16c/0x1f0 [ 1211.905348][T21366] should_fail_ex+0x512/0x640 [ 1211.905371][T21366] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1211.905401][T21366] should_failslab+0xc2/0x120 [ 1211.905427][T21366] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1211.905452][T21366] ? led_tg_check+0x200/0x4c0 [ 1211.905484][T21366] ? kstrdup+0x53/0x100 [ 1211.905504][T21366] kstrdup+0x53/0x100 [ 1211.905526][T21366] led_tg_check+0x200/0x4c0 [ 1211.905551][T21366] ? __pfx_led_tg_check+0x10/0x10 [ 1211.905578][T21366] xt_check_target+0x27c/0xa40 [ 1211.905599][T21366] ? __pfx_xt_check_target+0x10/0x10 [ 1211.905615][T21366] ? xt_find_target+0x156/0x290 [ 1211.905648][T21366] ? strcmp+0x50/0xb0 [ 1211.905675][T21366] ? xt_find_target+0x1f2/0x290 [ 1211.905709][T21366] find_check_entry.constprop.0+0x82f/0xa20 [ 1211.905745][T21366] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 1211.905783][T21366] ? lockdep_hardirqs_on+0x7c/0x110 [ 1211.905810][T21366] ? kfree+0x2b8/0x6d0 [ 1211.905826][T21366] ? translate_table+0xc0e/0x17b0 [ 1211.905849][T21366] translate_table+0xd0b/0x17b0 [ 1211.905877][T21366] ? __pfx_translate_table+0x10/0x10 [ 1211.905903][T21366] do_ip6t_set_ctl+0x570/0xb00 [ 1211.905920][T21366] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1211.905953][T21366] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1211.905973][T21366] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1211.906012][T21366] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1211.906042][T21366] nf_setsockopt+0x8d/0xf0 [ 1211.906070][T21366] ipv6_setsockopt+0x135/0x170 [ 1211.906101][T21366] tcp_setsockopt+0xa7/0x100 [ 1211.906122][T21366] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1211.906152][T21366] do_sock_setsockopt+0xf3/0x1d0 [ 1211.906181][T21366] __sys_setsockopt+0x1a0/0x230 [ 1211.906207][T21366] __x64_sys_setsockopt+0xbd/0x160 [ 1211.906227][T21366] ? do_syscall_64+0x91/0xfa0 [ 1211.906248][T21366] ? lockdep_hardirqs_on+0x7c/0x110 [ 1211.906271][T21366] do_syscall_64+0xcd/0xfa0 [ 1211.906295][T21366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.906312][T21366] RIP: 0033:0x7f348998efc9 [ 1211.906327][T21366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.906344][T21366] RSP: 002b:00007f348a742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1211.906362][T21366] RAX: ffffffffffffffda RBX: 00007f3489be6180 RCX: 00007f348998efc9 [ 1211.906373][T21366] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 1211.906384][T21366] RBP: 00007f348a742090 R08: 0000000000000460 R09: 0000000000000000 [ 1211.906395][T21366] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.906406][T21366] R13: 00007f3489be6218 R14: 00007f3489be6180 R15: 00007ffd52b5ee08 [ 1211.906434][T21366] [ 1212.368894][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1212.368911][ T30] audit: type=1400 audit(1760980043.544:4659): avc: denied { create } for pid=21370 comm="syz.0.4063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1212.829809][ T30] audit: type=1400 audit(1760980043.778:4660): avc: denied { prog_run } for pid=21370 comm="syz.0.4063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1213.017177][ T30] audit: type=1400 audit(1760980043.788:4661): avc: denied { ioctl } for pid=21370 comm="syz.0.4063" path="socket:[83116]" dev="sockfs" ino=83116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1213.043781][ T30] audit: type=1400 audit(1760980043.797:4662): avc: denied { open } for pid=21370 comm="syz.0.4063" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1213.070034][ T30] audit: type=1400 audit(1760980043.816:4663): avc: denied { create } for pid=21370 comm="syz.0.4063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1213.091398][ T30] audit: type=1400 audit(1760980044.152:4664): avc: denied { write } for pid=21375 comm="syz.5.4064" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1213.115471][ T30] audit: type=1400 audit(1760980044.152:4665): avc: denied { ioctl } for pid=21375 comm="syz.5.4064" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1213.243980][ T30] audit: type=1400 audit(1760980044.368:4666): avc: denied { read } for pid=21385 comm="syz.2.4069" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1213.283220][ T1206] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1213.294172][ T30] audit: type=1400 audit(1760980044.368:4667): avc: denied { open } for pid=21385 comm="syz.2.4069" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1213.320498][ T30] audit: type=1400 audit(1760980044.386:4668): avc: denied { ioctl } for pid=21385 comm="syz.2.4069" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1213.441297][ T5808] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1213.458345][T21389] binder: BINDER_SET_CONTEXT_MGR already set [ 1213.466848][T21389] binder: 21387:21389 ioctl 4018620d 200000000100 returned -16 [ 1213.489168][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1213.500657][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.511144][ T1206] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1213.520322][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.543591][ T1206] usb 6-1: config 0 descriptor?? [ 1213.554891][ T1206] hub 6-1:0.0: USB hub found [ 1213.614316][ T5808] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1213.632757][ T5808] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1213.694911][ T5808] usb 5-1: config 150 has no interface number 0 [ 1213.716493][ T5808] usb 5-1: too many endpoints for config 150 interface 1 altsetting 112: 117, using maximum allowed: 30 [ 1213.737074][ T5808] usb 5-1: config 150 interface 1 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 117 [ 1213.751242][ T5808] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1213.759326][ T5808] usb 5-1: config 150 interface 1 has no altsetting 0 [ 1213.777878][ T5808] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1213.800930][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.817353][ T5808] usb 5-1: Product: syz [ 1213.821940][ T1206] hub 6-1:0.0: 2 ports detected [ 1213.827465][ T5808] usb 5-1: Manufacturer: syz [ 1213.832585][ T5808] usb 5-1: SerialNumber: syz [ 1214.089370][ T5808] xr_serial 5-1:150.204: skipping garbage [ 1214.096262][ T5808] xr_serial 5-1:150.204: xr_serial converter detected [ 1214.261900][ T1206] usb 6-1: USB disconnect, device number 23 [ 1215.050419][ T5808] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 1215.239018][ T5808] usb 5-1: USB disconnect, device number 101 [ 1215.255246][ T5808] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1215.302706][ T5808] xr_serial 5-1:150.204: device disconnected [ 1216.050137][ T976] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1216.291973][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1216.305523][T21442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4083'. [ 1216.316120][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.330433][ T976] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1216.356867][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.370190][ T976] usb 3-1: config 0 descriptor?? [ 1216.382618][ T976] hub 3-1:0.0: USB hub found [ 1216.568274][T21450] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4084'. [ 1216.825405][ T976] hub 3-1:0.0: 2 ports detected [ 1217.048466][T21454] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1217.062962][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4085'. [ 1217.385870][ T976] usb 3-1: USB disconnect, device number 110 [ 1217.804052][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1217.804068][ T30] audit: type=1400 audit(1760980048.642:4717): avc: denied { create } for pid=21456 comm="syz.5.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1217.876913][ T30] audit: type=1400 audit(1760980048.698:4718): avc: denied { connect } for pid=21456 comm="syz.5.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1218.014038][ T30] audit: type=1400 audit(1760980048.829:4719): avc: denied { bind } for pid=21456 comm="syz.5.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1218.139468][ T30] audit: type=1400 audit(1760980048.923:4720): avc: denied { setopt } for pid=21456 comm="syz.5.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1218.492711][ T30] audit: type=1400 audit(1760980048.923:4721): avc: denied { accept } for pid=21456 comm="syz.5.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1218.563472][ T30] audit: type=1400 audit(1760980048.923:4722): avc: denied { write } for pid=21456 comm="syz.5.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1218.587208][ T30] audit: type=1400 audit(1760980048.942:4723): avc: denied { read } for pid=21456 comm="syz.5.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1218.872973][T21479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4091'. [ 1218.882005][T21479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4091'. [ 1218.913459][T21479] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4091'. [ 1218.994673][T21480] ubi: mtd0 is already attached to ubi31 [ 1219.230029][ T30] audit: type=1400 audit(1760980049.671:4724): avc: denied { create } for pid=21471 comm="syz.0.4091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1219.254783][ T30] audit: type=1400 audit(1760980049.671:4725): avc: denied { write } for pid=21471 comm="syz.0.4091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1219.526343][ T30] audit: type=1400 audit(1760980049.737:4726): avc: denied { connect } for pid=21471 comm="syz.0.4091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1220.048322][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 1220.219435][ T5933] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 1220.625450][ T5933] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1220.637999][ T5933] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1220.650116][ T5933] usb 3-1: config 0 has no interface number 0 [ 1220.656259][ T5933] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1220.666654][ T5933] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1220.676672][ T5933] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1220.685822][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.699339][ T5933] usb 3-1: config 0 descriptor?? [ 1221.257104][T21501] hsr0: entered promiscuous mode [ 1221.265174][T21501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4100'. [ 1221.278340][T21501] hsr_slave_0: left promiscuous mode [ 1221.285631][T21501] hsr_slave_1: left promiscuous mode [ 1221.342744][T21501] hsr0 (unregistering): left promiscuous mode [ 1221.484633][ T5933] usb 3-1: USB disconnect, device number 111 [ 1222.685962][ T976] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1222.693748][ T5933] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1222.930432][ T5933] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 1223.188510][ T1092] Bluetooth: hci3: Frame reassembly failed (-84) [ 1223.202397][ T976] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1223.211974][ T5933] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.222217][ T976] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1223.234497][ T5933] usb 2-1: config 8 has no interface number 0 [ 1223.240632][ T976] usb 5-1: config 150 has no interface number 0 [ 1223.247166][ T5933] usb 2-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1223.259023][ T976] usb 5-1: too many endpoints for config 150 interface 1 altsetting 112: 117, using maximum allowed: 30 [ 1223.270290][ T5933] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1223.281141][ T976] usb 5-1: config 150 interface 1 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 117 [ 1223.304707][ T5933] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1223.319631][ T976] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1223.329337][ T5933] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 1223.342887][ T976] usb 5-1: config 150 interface 1 has no altsetting 0 [ 1223.366129][ T5933] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1223.379214][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.389176][ T976] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1223.403799][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.403825][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1223.403838][ T30] audit: type=1400 audit(1760980053.871:4748): avc: denied { connect } for pid=21531 comm="syz.5.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1223.412160][ T976] usb 5-1: Product: syz [ 1223.445353][ T5933] usb 2-1: NFC: intf ffff8880504c4000 id ffffffff8f2f1640 [ 1223.461656][ T976] usb 5-1: Manufacturer: syz [ 1223.466375][ T976] usb 5-1: SerialNumber: syz [ 1223.477133][ T30] audit: type=1400 audit(1760980053.871:4749): avc: denied { bind } for pid=21531 comm="syz.5.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1223.496428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1223.523650][ T30] audit: type=1400 audit(1760980053.871:4750): avc: denied { write } for pid=21531 comm="syz.5.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1223.543722][ T30] audit: type=1400 audit(1760980053.871:4751): avc: denied { read } for pid=21531 comm="syz.5.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1223.895159][ T976] xr_serial 5-1:150.204: skipping garbage [ 1223.915949][ T976] xr_serial 5-1:150.204: xr_serial converter detected [ 1223.982053][T13254] usb 2-1: USB disconnect, device number 96 [ 1225.103604][T17154] Bluetooth: hci3: command 0x1003 tx timeout [ 1225.110591][ T5811] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1225.267791][ T976] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 1226.346164][ T976] usb 5-1: USB disconnect, device number 102 [ 1226.506320][ T30] audit: type=1400 audit(1760980056.752:4752): avc: denied { getopt } for pid=21557 comm="syz.2.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1226.518218][ T976] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1226.594771][ T976] xr_serial 5-1:150.204: device disconnected [ 1226.728598][ T30] audit: type=1400 audit(1760980056.977:4753): avc: denied { bind } for pid=21569 comm="syz.1.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1228.495284][T21587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1228.521128][ T30] audit: type=1400 audit(1760980058.660:4754): avc: denied { read write } for pid=21567 comm="syz.5.4121" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1228.835781][T21593] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1228.850724][T21593] ./file0: Can't lookup blockdev [ 1229.680891][ T30] audit: type=1400 audit(1760980058.660:4755): avc: denied { open } for pid=21567 comm="syz.5.4121" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1229.825608][ T30] audit: type=1400 audit(1760980058.689:4756): avc: denied { ioctl } for pid=21567 comm="syz.5.4121" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1229.911432][ T30] audit: type=1400 audit(1760980058.735:4757): avc: denied { create } for pid=21585 comm="syz.4.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1229.993290][ T30] audit: type=1400 audit(1760980058.735:4758): avc: denied { read } for pid=21585 comm="syz.4.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1230.071581][ T30] audit: type=1400 audit(1760980058.932:4759): avc: denied { unlink } for pid=21585 comm="syz.4.4124" name="#86" dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1230.097543][ T30] audit: type=1400 audit(1760980058.941:4760): avc: denied { mount } for pid=21585 comm="syz.4.4124" name="/" dev="overlay" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1230.325950][ T30] audit: type=1400 audit(1760980060.307:4761): avc: denied { unmount } for pid=17153 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1230.632674][ T30] audit: type=1400 audit(1760980060.606:4762): avc: denied { execute } for pid=21589 comm="syz.2.4126" path="/248/cpu.stat" dev="tmpfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1230.659820][ T30] audit: type=1400 audit(1760980060.606:4763): avc: denied { connect } for pid=21604 comm="syz.5.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1230.952469][ T30] audit: type=1400 audit(1760980060.924:4764): avc: denied { mount } for pid=21614 comm="syz.0.4131" name="/" dev="ocfs2_dlmfs" ino=83677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1231.444204][T21626] ip6gre1: entered allmulticast mode [ 1232.695351][ T976] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1232.887775][ T976] usb 3-1: Using ep0 maxpacket: 16 [ 1232.894287][ T976] usb 3-1: config 1 has an invalid descriptor of length 80, skipping remainder of the config [ 1232.910742][ T976] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 1232.933493][ T976] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1232.957488][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1232.970404][ T976] usb 3-1: SerialNumber: syz [ 1233.048984][ T1206] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1233.209827][ T1206] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1233.217929][ T976] cdc_acm 3-1:1.0: skipping garbage [ 1233.278832][T21652] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1233.294488][T21652] ./file0: Can't lookup blockdev [ 1234.050442][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1234.074400][ T976] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1234.079824][ T1206] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1234.091911][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.128024][ T976] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 1234.144377][ T1206] usb 6-1: config 0 descriptor?? [ 1234.160097][ T976] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1234.183467][ T976] usb 3-1: USB disconnect, device number 112 [ 1234.370093][ T1206] ath6kl: Failed to submit usb control message: -71 [ 1234.377358][ T1206] ath6kl: unable to send the bmi data to the device: -71 [ 1234.384441][ T1206] ath6kl: Unable to send get target info: -71 [ 1234.398746][ T1206] ath6kl: Failed to init ath6kl core: -71 [ 1234.407155][ T1206] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1234.421809][ T1206] usb 6-1: USB disconnect, device number 24 [ 1234.470181][T13254] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1234.651899][T13254] usb 2-1: Using ep0 maxpacket: 32 [ 1234.662941][T13254] usb 2-1: config 0 has no interfaces? [ 1234.668544][T13254] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1234.681139][T13254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.701336][T13254] usb 2-1: config 0 descriptor?? [ 1234.918133][T21673] FAULT_INJECTION: forcing a failure. [ 1234.918133][T21673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1234.919816][T21673] [ 1234.919821][T21673] ====================================================== [ 1234.919825][T21673] WARNING: possible circular locking dependency detected [ 1234.919829][T21673] syzkaller #0 Not tainted [ 1234.919834][T21673] ------------------------------------------------------ [ 1234.919838][T21673] syz.2.4144/21673 is trying to acquire lock: [ 1234.919843][T21673] ffffffff8e2d1680 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 1234.919875][T21673] [ 1234.919875][T21673] but task is already holding lock: [ 1234.919878][T21673] ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1234.919905][T21673] [ 1234.919905][T21673] which lock already depends on the new lock. [ 1234.919905][T21673] [ 1234.919908][T21673] [ 1234.919908][T21673] the existing dependency chain (in reverse order) is: [ 1234.919911][T21673] [ 1234.919911][T21673] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1234.919924][T21673] _raw_spin_lock_nested+0x31/0x40 [ 1234.919935][T21673] raw_spin_rq_lock_nested+0x29/0x130 [ 1234.919950][T21673] task_rq_lock+0xcf/0x490 [ 1234.919959][T21673] cgroup_move_task+0x81/0x2a0 [ 1234.919969][T21673] css_set_move_task+0x288/0x5f0 [ 1234.919982][T21673] cgroup_post_fork+0x201/0x9d0 [ 1234.919991][T21673] copy_process+0x602d/0x76a0 [ 1234.920001][T21673] kernel_clone+0xfc/0x930 [ 1234.920009][T21673] user_mode_thread+0xc8/0x110 [ 1234.920019][T21673] rest_init+0x23/0x2b0 [ 1234.920027][T21673] start_kernel+0x3f6/0x4e0 [ 1234.920037][T21673] x86_64_start_reservations+0x18/0x30 [ 1234.920048][T21673] x86_64_start_kernel+0x130/0x190 [ 1234.920058][T21673] common_startup_64+0x13e/0x148 [ 1234.920071][T21673] [ 1234.920071][T21673] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1234.920083][T21673] _raw_spin_lock_irqsave+0x3a/0x60 [ 1234.920094][T21673] try_to_wake_up+0xb7/0x1870 [ 1234.920108][T21673] __wake_up_common+0x135/0x1f0 [ 1234.920120][T21673] __wake_up+0x31/0x60 [ 1234.920129][T21673] tty_port_default_wakeup+0x47/0x60 [ 1234.920139][T21673] serial8250_tx_chars+0x68e/0x860 [ 1234.920149][T21673] serial8250_handle_irq+0x761/0xcb0 [ 1234.920159][T21673] serial8250_default_handle_irq+0x9e/0x270 [ 1234.920170][T21673] serial8250_interrupt+0xf8/0x1d0 [ 1234.920181][T21673] __handle_irq_event_percpu+0x236/0x920 [ 1234.920191][T21673] handle_irq_event+0xab/0x1e0 [ 1234.920199][T21673] handle_edge_irq+0x3ca/0x9e0 [ 1234.920213][T21673] __common_interrupt+0xd0/0x2f0 [ 1234.920223][T21673] common_interrupt+0x61/0xe0 [ 1234.920238][T21673] asm_common_interrupt+0x26/0x40 [ 1234.920248][T21673] handle_softirqs+0x1dd/0x8e0 [ 1234.920262][T21673] __irq_exit_rcu+0x109/0x170 [ 1234.920270][T21673] irq_exit_rcu+0x9/0x30 [ 1234.920278][T21673] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1234.920290][T21673] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1234.920300][T21673] console_flush_all+0x9a2/0xc60 [ 1234.920314][T21673] console_unlock+0xd8/0x210 [ 1234.920329][T21673] vprintk_emit+0x3d7/0x680 [ 1234.920337][T21673] _printk+0xc7/0x100 [ 1234.920348][T21673] kauditd_hold_skb+0x205/0x250 [ 1234.920361][T21673] kauditd_send_queue+0x239/0x290 [ 1234.920372][T21673] kauditd_thread+0x623/0xa70 [ 1234.920385][T21673] kthread+0x3c5/0x780 [ 1234.920402][T21673] ret_from_fork+0x675/0x7d0 [ 1234.920414][T21673] ret_from_fork_asm+0x1a/0x30 [ 1234.920424][T21673] [ 1234.920424][T21673] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1234.920437][T21673] _raw_spin_lock_irqsave+0x3a/0x60 [ 1234.920448][T21673] __wake_up+0x1c/0x60 [ 1234.920457][T21673] tty_port_default_wakeup+0x47/0x60 [ 1234.920465][T21673] serial8250_tx_chars+0x68e/0x860 [ 1234.920475][T21673] serial8250_handle_irq+0x761/0xcb0 [ 1234.920485][T21673] serial8250_default_handle_irq+0x9e/0x270 [ 1234.920496][T21673] serial8250_interrupt+0xf8/0x1d0 [ 1234.920507][T21673] __handle_irq_event_percpu+0x236/0x920 [ 1234.920515][T21673] handle_irq_event+0xab/0x1e0 [ 1234.920523][T21673] handle_edge_irq+0x3ca/0x9e0 [ 1234.920537][T21673] __common_interrupt+0xd0/0x2f0 [ 1234.920546][T21673] common_interrupt+0xba/0xe0 [ 1234.920561][T21673] asm_common_interrupt+0x26/0x40 [ 1234.920570][T21673] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1234.920581][T21673] uart_write+0x2a4/0xb30 [ 1234.920589][T21673] n_tty_write+0x41e/0x11e0 [ 1234.920599][T21673] file_tty_write.constprop.0+0x503/0x9b0 [ 1234.920614][T21673] redirected_tty_write+0xd4/0x150 [ 1234.920628][T21673] vfs_write+0x7d3/0x11d0 [ 1234.920640][T21673] ksys_write+0x12a/0x250 [ 1234.920652][T21673] do_syscall_64+0xcd/0xfa0 [ 1234.920663][T21673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.920672][T21673] [ 1234.920672][T21673] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1234.920684][T21673] _raw_spin_lock_irqsave+0x3a/0x60 [ 1234.920695][T21673] serial8250_console_write+0x181/0x1890 [ 1234.920706][T21673] console_flush_all+0x801/0xc60 [ 1234.920720][T21673] console_unlock+0xd8/0x210 [ 1234.920735][T21673] vprintk_emit+0x3d7/0x680 [ 1234.920743][T21673] _printk+0xc7/0x100 [ 1234.920754][T21673] register_console+0xc2d/0x11b0 [ 1234.920763][T21673] univ8250_console_init+0x5f/0x90 [ 1234.920775][T21673] console_init+0x152/0x680 [ 1234.920786][T21673] start_kernel+0x29f/0x4e0 [ 1234.920795][T21673] x86_64_start_reservations+0x18/0x30 [ 1234.920805][T21673] x86_64_start_kernel+0x130/0x190 [ 1234.920815][T21673] common_startup_64+0x13e/0x148 [ 1234.920828][T21673] [ 1234.920828][T21673] -> #0 (console_owner){-.-.}-{0:0}: [ 1234.920840][T21673] __lock_acquire+0x126f/0x1c90 [ 1234.920852][T21673] lock_acquire+0x179/0x350 [ 1234.920863][T21673] console_lock_spinning_enable+0x72/0x80 [ 1234.920878][T21673] console_flush_all+0x7aa/0xc60 [ 1234.920892][T21673] console_unlock+0xd8/0x210 [ 1234.920906][T21673] vprintk_emit+0x3d7/0x680 [ 1234.920914][T21673] _printk+0xc7/0x100 [ 1234.920926][T21673] should_fail_ex+0x4e7/0x640 [ 1234.920938][T21673] strncpy_from_user+0x3b/0x2e0 [ 1234.920948][T21673] strncpy_from_user_nofault+0x7f/0x180 [ 1234.920961][T21673] bpf_probe_read_compat_str+0xe8/0x180 [ 1234.920976][T21673] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 1234.920983][T21673] bpf_trace_run4+0x252/0x5b0 [ 1234.920992][T21673] __bpf_trace_sched_switch+0x145/0x190 [ 1234.921006][T21673] __traceiter_sched_switch+0x6f/0xc0 [ 1234.921020][T21673] __schedule+0x183b/0x5de0 [ 1234.921030][T21673] preempt_schedule_notrace+0x62/0xe0 [ 1234.921042][T21673] preempt_schedule_notrace_thunk+0x16/0x30 [ 1234.921054][T21673] rcu_is_watching+0x8e/0xc0 [ 1234.921063][T21673] lock_release+0x201/0x2f0 [ 1234.921074][T21673] touch_atime+0x210/0x5d0 [ 1234.921084][T21673] step_into+0x1b02/0x21a0 [ 1234.921095][T21673] walk_component+0xfc/0x5b0 [ 1234.921106][T21673] link_path_walk+0x627/0xe20 [ 1234.921117][T21673] path_lookupat+0x15a/0x6d0 [ 1234.921128][T21673] filename_lookup+0x224/0x5f0 [ 1234.921140][T21673] user_path_at+0x3a/0x60 [ 1234.921152][T21673] __x64_sys_mount+0x1fb/0x310 [ 1234.921166][T21673] do_syscall_64+0xcd/0xfa0 [ 1234.921177][T21673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.921187][T21673] [ 1234.921187][T21673] other info that might help us debug this: [ 1234.921187][T21673] [ 1234.921189][T21673] Chain exists of: [ 1234.921189][T21673] console_owner --> &p->pi_lock --> &rq->__lock [ 1234.921189][T21673] [ 1234.921203][T21673] Possible unsafe locking scenario: [ 1234.921203][T21673] [ 1234.921206][T21673] CPU0 CPU1 [ 1234.921209][T21673] ---- ---- [ 1234.921212][T21673] lock(&rq->__lock); [ 1234.921218][T21673] lock(&p->pi_lock); [ 1234.921224][T21673] lock(&rq->__lock); [ 1234.921231][T21673] lock(console_owner); [ 1234.921237][T21673] [ 1234.921237][T21673] *** DEADLOCK *** [ 1234.921237][T21673] [ 1234.921239][T21673] 5 locks held by syz.2.4144/21673: [ 1234.921245][T21673] #0: ffff888033480420 (sb_writers#6){.+.+}-{0:0}, at: step_into+0x1b02/0x21a0 [ 1234.921270][T21673] #1: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1234.921298][T21673] #2: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 1234.921318][T21673] #3: ffffffff8e3b1ac0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1234.921342][T21673] #4: ffffffff8e3b1b30 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 1234.921369][T21673] [ 1234.921369][T21673] stack backtrace: [ 1234.921374][T21673] CPU: 0 UID: 0 PID: 21673 Comm: syz.2.4144 Not tainted syzkaller #0 PREEMPT(full) [ 1234.921386][T21673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1234.921392][T21673] Call Trace: [ 1234.921399][T21673] [ 1234.921403][T21673] dump_stack_lvl+0x116/0x1f0 [ 1234.921416][T21673] print_circular_bug+0x275/0x350 [ 1234.921429][T21673] check_noncircular+0x14c/0x170 [ 1234.921443][T21673] __lock_acquire+0x126f/0x1c90 [ 1234.921458][T21673] lock_acquire+0x179/0x350 [ 1234.921470][T21673] ? console_lock_spinning_enable+0x61/0x80 [ 1234.921487][T21673] ? console_lock_spinning_enable+0x4a/0x80 [ 1234.921504][T21673] console_lock_spinning_enable+0x72/0x80 [ 1234.921519][T21673] ? console_lock_spinning_enable+0x61/0x80 [ 1234.921534][T21673] console_flush_all+0x7aa/0xc60 [ 1234.921551][T21673] ? __pfx_console_flush_all+0x10/0x10 [ 1234.921570][T21673] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1234.921582][T21673] console_unlock+0xd8/0x210 [ 1234.921597][T21673] ? __pfx_console_unlock+0x10/0x10 [ 1234.921612][T21673] ? do_raw_spin_unlock+0x170/0x230 [ 1234.921627][T21673] ? _printk+0xc7/0x100 [ 1234.921640][T21673] ? __down_trylock_console_sem+0xb0/0x140 [ 1234.921654][T21673] vprintk_emit+0x3d7/0x680 [ 1234.921667][T21673] ? __pfx_vprintk_emit+0x10/0x10 [ 1234.921677][T21673] ? rcu_is_watching+0x12/0xc0 [ 1234.921688][T21673] _printk+0xc7/0x100 [ 1234.921700][T21673] ? __pfx__printk+0x10/0x10 [ 1234.921714][T21673] ? __pfx____ratelimit+0x10/0x10 [ 1234.921727][T21673] should_fail_ex+0x4e7/0x640 [ 1234.921740][T21673] strncpy_from_user+0x3b/0x2e0 [ 1234.921752][T21673] strncpy_from_user_nofault+0x7f/0x180 [ 1234.921765][T21673] bpf_probe_read_compat_str+0xe8/0x180 [ 1234.921781][T21673] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 1234.921789][T21673] bpf_trace_run4+0x252/0x5b0 [ 1234.921798][T21673] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1234.921808][T21673] ? __lock_acquire+0xb8a/0x1c90 [ 1234.921821][T21673] ? xfs_dir2_leafn_split+0xd57/0x10c0 [ 1234.921838][T21673] __bpf_trace_sched_switch+0x145/0x190 [ 1234.921854][T21673] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1234.921870][T21673] ? lock_acquire+0x179/0x350 [ 1234.921883][T21673] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 1234.921902][T21673] __traceiter_sched_switch+0x6f/0xc0 [ 1234.921916][T21673] ? set_next_task_rt+0x403/0x6a0 [ 1234.921929][T21673] __schedule+0x183b/0x5de0 [ 1234.921944][T21673] ? __pfx___schedule+0x10/0x10 [ 1234.921957][T21673] ? mark_held_locks+0x49/0x80 [ 1234.921969][T21673] ? irqentry_exit+0x3b/0x90 [ 1234.921981][T21673] ? lockdep_hardirqs_on+0x7c/0x110 [ 1234.921994][T21673] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1234.922007][T21673] preempt_schedule_notrace+0x62/0xe0 [ 1234.922019][T21673] ? step_into+0x1b02/0x21a0 [ 1234.922031][T21673] preempt_schedule_notrace_thunk+0x16/0x30 [ 1234.922044][T21673] ? mnt_put_write_access+0x54/0x80 [ 1234.922054][T21673] rcu_is_watching+0x8e/0xc0 [ 1234.922064][T21673] lock_release+0x201/0x2f0 [ 1234.922077][T21673] touch_atime+0x210/0x5d0 [ 1234.922088][T21673] step_into+0x1b02/0x21a0 [ 1234.922101][T21673] ? __pfx_step_into+0x10/0x10 [ 1234.922114][T21673] ? lookup_fast+0x156/0x610 [ 1234.922126][T21673] walk_component+0xfc/0x5b0 [ 1234.922139][T21673] link_path_walk+0x627/0xe20 [ 1234.922153][T21673] path_lookupat+0x15a/0x6d0 [ 1234.922166][T21673] filename_lookup+0x224/0x5f0 [ 1234.922180][T21673] ? __pfx_filename_lookup+0x10/0x10 [ 1234.922199][T21673] ? getname_flags.part.0+0x1c5/0x550 [ 1234.922212][T21673] user_path_at+0x3a/0x60 [ 1234.922225][T21673] __x64_sys_mount+0x1fb/0x310 [ 1234.922240][T21673] ? __pfx___x64_sys_mount+0x10/0x10 [ 1234.922257][T21673] do_syscall_64+0xcd/0xfa0 [ 1234.922270][T21673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.922280][T21673] RIP: 0033:0x7fbee858efc9 [ 1234.922288][T21673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.922298][T21673] RSP: 002b:00007fbee93ab038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1234.922308][T21673] RAX: ffffffffffffffda RBX: 00007fbee87e6180 RCX: 00007fbee858efc9 [ 1234.922314][T21673] RDX: 00002000000004c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 1234.922321][T21673] RBP: 00007fbee93ab090 R08: 0000200000000080 R09: 0000000000000000 [ 1234.922327][T21673] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 1234.922333][T21673] R13: 00007fbee87e6218 R14: 00007fbee87e6180 R15: 00007ffd00c4b468 [ 1234.922343][T21673] [ 1236.190218][T21673] CPU: 0 UID: 0 PID: 21673 Comm: syz.2.4144 Not tainted syzkaller #0 PREEMPT(full) [ 1236.190233][T21673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1236.190239][T21673] Call Trace: [ 1236.190245][T21673] [ 1236.190250][T21673] dump_stack_lvl+0x116/0x1f0 [ 1236.190266][T21673] should_fail_ex+0x512/0x640 [ 1236.190280][T21673] strncpy_from_user+0x3b/0x2e0 [ 1236.190292][T21673] strncpy_from_user_nofault+0x7f/0x180 [ 1236.190307][T21673] bpf_probe_read_compat_str+0xe8/0x180 [ 1236.190324][T21673] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 1236.190333][T21673] bpf_trace_run4+0x252/0x5b0 [ 1236.190342][T21673] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1236.190352][T21673] ? __lock_acquire+0xb8a/0x1c90 [ 1236.190365][T21673] ? xfs_dir2_leafn_split+0xd57/0x10c0 [ 1236.190387][T21673] __bpf_trace_sched_switch+0x145/0x190 [ 1236.190404][T21673] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1236.190420][T21673] ? lock_acquire+0x179/0x350 [ 1236.190434][T21673] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 1236.190452][T21673] __traceiter_sched_switch+0x6f/0xc0 [ 1236.190467][T21673] ? set_next_task_rt+0x403/0x6a0 [ 1236.190479][T21673] __schedule+0x183b/0x5de0 [ 1236.190496][T21673] ? __pfx___schedule+0x10/0x10 [ 1236.190509][T21673] ? mark_held_locks+0x49/0x80 [ 1236.190521][T21673] ? irqentry_exit+0x3b/0x90 [ 1236.190533][T21673] ? lockdep_hardirqs_on+0x7c/0x110 [ 1236.190546][T21673] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1236.190560][T21673] preempt_schedule_notrace+0x62/0xe0 [ 1236.190573][T21673] ? step_into+0x1b02/0x21a0 [ 1236.190584][T21673] preempt_schedule_notrace_thunk+0x16/0x30 [ 1236.190598][T21673] ? mnt_put_write_access+0x54/0x80 [ 1236.190608][T21673] rcu_is_watching+0x8e/0xc0 [ 1236.190618][T21673] lock_release+0x201/0x2f0 [ 1236.190631][T21673] touch_atime+0x210/0x5d0 [ 1236.190642][T21673] step_into+0x1b02/0x21a0 [ 1236.190656][T21673] ? __pfx_step_into+0x10/0x10 [ 1236.190668][T21673] ? lookup_fast+0x156/0x610 [ 1236.190681][T21673] walk_component+0xfc/0x5b0 [ 1236.190694][T21673] link_path_walk+0x627/0xe20 [ 1236.190708][T21673] path_lookupat+0x15a/0x6d0 [ 1236.190721][T21673] filename_lookup+0x224/0x5f0 [ 1236.190735][T21673] ? __pfx_filename_lookup+0x10/0x10 [ 1236.190754][T21673] ? getname_flags.part.0+0x1c5/0x550 [ 1236.190767][T21673] user_path_at+0x3a/0x60 [ 1236.190780][T21673] __x64_sys_mount+0x1fb/0x310 [ 1236.190795][T21673] ? __pfx___x64_sys_mount+0x10/0x10 [ 1236.190813][T21673] do_syscall_64+0xcd/0xfa0 [ 1236.190826][T21673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.190837][T21673] RIP: 0033:0x7fbee858efc9 [ 1236.190845][T21673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.190856][T21673] RSP: 002b:00007fbee93ab038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1236.190866][T21673] RAX: ffffffffffffffda RBX: 00007fbee87e6180 RCX: 00007fbee858efc9 [ 1236.190872][T21673] RDX: 00002000000004c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 1236.190879][T21673] RBP: 00007fbee93ab090 R08: 0000200000000080 R09: 0000000000000000 [ 1236.190885][T21673] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 1236.190891][T21673] R13: 00007fbee87e6218 R14: 00007fbee87e6180 R15: 00007ffd00c4b468 [ 1236.190902][T21673] [ 1236.515814][T21663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.524313][T21663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.539628][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1236.539642][ T30] audit: type=1400 audit(1760980066.134:4781): avc: denied { read write } for pid=21662 comm="syz.1.4142" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1236.575639][ T30] audit: type=1400 audit(1760980066.134:4782): avc: denied { open } for pid=21662 comm="syz.1.4142" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1236.602866][ T30] audit: type=1400 audit(1760980066.219:4783): avc: denied { mounton } for pid=21670 comm="syz.2.4144" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 1236.706146][ T5928] usb 2-1: USB disconnect, device number 97