last executing test programs: 6m38.727531239s ago: executing program 3 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt(r3, 0xff, 0x1, 0x0, &(0x7f0000000040)) 6m38.539182289s ago: executing program 3 (id=1371): lsm_set_self_attr(0x65, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x4, 0x5}, &(0x7f0000000240)=0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) prlimit64(r1, 0x2, &(0x7f0000000140)={0x0, 0x100000000000008b}, 0x0) r2 = socket(0x28, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r7, r9, 0x25, 0x2, @void}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 6m35.929665278s ago: executing program 3 (id=1380): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x8a15, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) 6m34.808778615s ago: executing program 3 (id=1381): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2081, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x80000, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[], 0x594}, 0x1, 0x0, 0x0, 0x80}, 0x8004) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/40, 0x28}], 0x2}, 0x0) 6m33.600519299s ago: executing program 3 (id=1385): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x0, 0x6}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7e, 0x5, 0x4e, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5b, 0x1, 0x4, 0x9, 0x3, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0x407, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x2, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2b, 0xe, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x24, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x40005, 0x9, 0x8, 0x800000d, 0x6, 0x2007, 0xd, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0xacf9], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x800003, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x6, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x8000007, 0x2bf, 0x3, 0x200, 0x10000, 0x2]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0xb744, @empty, 0xfffffffb}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect(0x4, 0x822, &(0x7f0000000e40)=ANY=[@ANYBLOB], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000400)=ANY=[]}) r10 = syz_open_dev$ndb(0x0, 0x0, 0x280200) ioctl$BLKSECDISCARD(r10, 0x127d, 0x0) readv(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="042f"], 0x200) 6m32.592475241s ago: executing program 3 (id=1389): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000380)={0x6, 0x1c, 0x1, 0x3, 0x1a, "0300000001000000000000000000be00"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) sendmmsg$unix(r0, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20, 0x4180}}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), 0x0, 0x12, &(0x7f0000000280), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000280), 0x8, 0x9c, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd}) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) 6m31.223015175s ago: executing program 32 (id=1389): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000380)={0x6, 0x1c, 0x1, 0x3, 0x1a, "0300000001000000000000000000be00"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) sendmmsg$unix(r0, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20, 0x4180}}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), 0x0, 0x12, &(0x7f0000000280), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000280), 0x8, 0x9c, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd}) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) 3m50.719310818s ago: executing program 4 (id=1843): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (fail_nth: 7) 3m50.635927444s ago: executing program 4 (id=1845): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000040)={'ipvlan0\x00', @remote}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100)=[{0x3, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x2}, 0xff, 0xfe}], 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2203, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x7) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, 0x0) 3m49.186293968s ago: executing program 4 (id=1848): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000100)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x3}}, {@llc={0x4, {@snap={0x45981bc0afd98cf9, 0xab, "8a99", "74f3a5", 0x15c}}}}}, &(0x7f0000000140)={0x0, 0x1, [0x768, 0x276, 0xac4, 0xa]}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x80000) dup2(r4, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3m47.66521881s ago: executing program 4 (id=1855): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000002c0)={0xf, 0x400011, 0x17, 0x55, 0x7, 0x2, 0x3, 0x16, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000300)=0x8001, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) socket(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001100)=ANY=[@ANYBLOB='L\x00@\x00', @ANYRES16=r5, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990008000000fdffffff24000e001c04fc00380075180000000000000c00176c173aa1c5d7f7349d6e1638423c50"], 0x4c}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x230b, 0x400000000000005}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x225a, &(0x7f0000000640)={0x0, 0x79a9, 0x20000, 0x1, 0x5000033f}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0x5, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0000}}, 0x7}, &(0x7f0000000200)=0x90) 3m46.373496557s ago: executing program 4 (id=1857): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x20002) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200407bd, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x4, 0x8000, 0x6}, &(0x7f0000000300)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 3m46.024817429s ago: executing program 4 (id=1861): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000540)="bbfb1830", 0x7fec}], 0x1, 0x8, 0x7, 0x17) 3m30.686158724s ago: executing program 33 (id=1861): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000540)="bbfb1830", 0x7fec}], 0x1, 0x8, 0x7, 0x17) 2m38.805750806s ago: executing program 6 (id=2073): mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) 2m38.22992067s ago: executing program 6 (id=2075): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x284800, 0x30) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r0}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x6d5) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000140019"], 0x28}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f000001f240)=[{{&(0x7f0000000240)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f0000000540)=""/92, 0x5c}], 0x5, &(0x7f0000000740)=""/9, 0x9}, 0x5}, {{&(0x7f0000000780)=@generic, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)=""/223, 0xdf}], 0x1}, 0x400}, {{&(0x7f0000000940)=@l2, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000a80)=""/8, 0x8}, {&(0x7f0000000ac0)=""/101, 0x65}, {&(0x7f0000000b40)=""/225, 0xe1}, {&(0x7f0000000c40)=""/61, 0x3d}, {&(0x7f0000000c80)=""/19, 0x13}], 0x6, &(0x7f0000000d40)=""/180, 0xb4}, 0xf}, {{&(0x7f0000000e00)=@alg, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000e80)=""/140, 0x8c}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/97, 0x61}, 0x5b9}, {{&(0x7f000001b000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f000001b340)=[{0x0}, {&(0x7f000001b100)=""/148, 0x94}, {&(0x7f000001b1c0)=""/199, 0xc7}, {&(0x7f000001b2c0)=""/3, 0x3}, {&(0x7f000001b300)=""/24, 0x18}], 0x5, &(0x7f000001b3c0)=""/177, 0xb1}, 0x1ea7}, {{&(0x7f000001b480)=@generic, 0x80, &(0x7f000001b580)=[{0x0}], 0x1}, 0x6}, {{&(0x7f000001b5c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000001b7c0)=[{&(0x7f000001b640)=""/130, 0x82}, {&(0x7f000001b700)=""/176, 0xb0}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f000001cd40)=[{&(0x7f000001b800)=""/165, 0xa5}, {&(0x7f000001b8c0)=""/139, 0x8b}, {&(0x7f000001b980)=""/194, 0xc2}, {&(0x7f000001ba80)=""/4096, 0x1000}, {&(0x7f000001f4c0)=""/237, 0xed}, {&(0x7f000001cb80)=""/234, 0xea}, {&(0x7f000001cc80)=""/82, 0x52}, {&(0x7f000001cd00)=""/48, 0x30}], 0x8, &(0x7f000001cdc0)=""/229, 0xe5}, 0x100}, {{&(0x7f000001cec0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @netrom, @default, @netrom, @bcast, @rose, @bcast]}, 0x80, &(0x7f000001d140)}, 0xe}, {{&(0x7f000001d180)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000001e200)=[{0x0}], 0x1, &(0x7f000001e240)=""/4096, 0x1000}, 0x2}], 0xa, 0x0, 0x0) 2m37.134023215s ago: executing program 6 (id=2080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000240)={@mcast2, r5}, 0x14) close(r1) 2m37.0389583s ago: executing program 6 (id=2081): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f000000c000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f00000004c0)={[0x2, 0x1000, 0x4, 0xf000], 0x50, 0x41, 0x10}) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) ptrace$ARCH_SHSTK_ENABLE(0x1e, r8, 0x2, 0x5001) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[@ANYRES64=r9], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 2m36.571821793s ago: executing program 6 (id=2082): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x20002) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200407bd, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x4, 0x8000, 0x6}, &(0x7f0000000300)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 2m34.750941282s ago: executing program 6 (id=2088): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) pselect6(0x0, 0x0, &(0x7f0000000180)={0x2, 0xff, 0x7, 0xef8, 0x8, 0x8001, 0x8, 0xe}, &(0x7f00000001c0)={0xfffffffffffffffc, 0x20000000001, 0x2, 0x9, 0x7c1, 0x8, 0x1, 0x8}, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) sync() add_key$user(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) 2m19.664781568s ago: executing program 34 (id=2088): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) pselect6(0x0, 0x0, &(0x7f0000000180)={0x2, 0xff, 0x7, 0xef8, 0x8, 0x8001, 0x8, 0xe}, &(0x7f00000001c0)={0xfffffffffffffffc, 0x20000000001, 0x2, 0x9, 0x7c1, 0x8, 0x1, 0x8}, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) sync() add_key$user(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) 7.463610536s ago: executing program 7 (id=2623): openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x521}, 0x0, 0x0) 6.837664878s ago: executing program 2 (id=2625): r0 = open(&(0x7f0000000140)='./file0\x00', 0x14400, 0x1) r1 = syz_io_uring_setup(0x6c4f, &(0x7f00000000c0)={0x0, 0xad1c, 0x3180, 0x8000, 0x400254, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x365cf, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x14400, 0x1) (async) syz_io_uring_setup(0x6c4f, &(0x7f00000000c0)={0x0, 0xad1c, 0x3180, 0x8000, 0x400254, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x365cf, 0x0, 0x0, 0x1}) (async) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async) 6.632752621s ago: executing program 2 (id=2626): openat$tun(0xffffff9c, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000000)="d5db83aa1d3451ccd13675a34859f629b37e1cc1d1885d9213e4128b7bdde2aa1011891b81c2c5e608e9d48f0f4a61499b8d70", &(0x7f00000000c0)="f75c7baa39914f7177a5007e6e0781f2e62526fd09b87d715787bcd06fcbc754d5f559f50bb8b4774b82844a7c20161a9667e7308d4197f2d2b954431471539ceb66f4e0eb6d7c9dd3f91837f283ac7a369d3cc02d6c771cef9415f568d7e9cb3d4735116973924b3f1e8c"}}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x6, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x88c4}, 0x48040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0xd, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x3, 0x1, 0x7}}, 0xe4) chdir(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 6.085611401s ago: executing program 7 (id=2629): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x284800, 0x30) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r0}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x6d5) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) recvmmsg(r4, &(0x7f000001f240)=[{{&(0x7f0000000240)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f0000000540)=""/92, 0x5c}], 0x5, &(0x7f0000000740)=""/9, 0x9}, 0x5}, {{&(0x7f0000000780)=@generic, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)=""/223, 0xdf}], 0x1}, 0x400}, {{&(0x7f0000000940)=@l2, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000a80)=""/8, 0x8}, {&(0x7f0000000ac0)=""/101, 0x65}, {&(0x7f0000000b40)=""/225, 0xe1}, {&(0x7f0000000c40)=""/61, 0x3d}, {&(0x7f0000000c80)=""/19, 0x13}], 0x6, &(0x7f0000000d40)=""/180, 0xb4}, 0xf}, {{&(0x7f0000000e00)=@alg, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000e80)=""/140, 0x8c}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/97, 0x61}, 0x5b9}, {{&(0x7f000001b000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f000001b340)=[{0x0}, {&(0x7f000001b100)=""/148, 0x94}, {&(0x7f000001b1c0)=""/199, 0xc7}, {&(0x7f000001b2c0)=""/3, 0x3}, {&(0x7f000001b300)=""/24, 0x18}], 0x5, &(0x7f000001b3c0)=""/177, 0xb1}, 0x1ea7}, {{&(0x7f000001b480)=@generic, 0x80, &(0x7f000001b580)=[{0x0}], 0x1}, 0x6}, {{&(0x7f000001b5c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000001b7c0)=[{&(0x7f000001b640)=""/130, 0x82}, {&(0x7f000001b700)=""/176, 0xb0}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f000001cd40)=[{&(0x7f000001b800)=""/165, 0xa5}, {&(0x7f000001b8c0)=""/139, 0x8b}, {&(0x7f000001b980)=""/194, 0xc2}, {&(0x7f000001ba80)=""/4096, 0x1000}, {&(0x7f000001f4c0)=""/237, 0xed}, {&(0x7f000001cb80)=""/234, 0xea}, {&(0x7f000001cc80)=""/82, 0x52}, {&(0x7f000001cd00)=""/48, 0x30}], 0x8, &(0x7f000001cdc0)=""/229, 0xe5}, 0x100}, {{&(0x7f000001cec0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @netrom, @default, @netrom, @bcast, @rose, @bcast]}, 0x80, &(0x7f000001d140)}, 0xe}, {{&(0x7f000001d180)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000001e200)=[{0x0}], 0x1, &(0x7f000001e240)=""/4096, 0x1000}, 0x2}], 0xa, 0x0, 0x0) 5.587923543s ago: executing program 5 (id=2630): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0), 0x2}, 0x2002) 5.436227772s ago: executing program 2 (id=2631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x6, @pix={0x0, 0x0, 0x38416761, 0x0, 0x1, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.148753418s ago: executing program 5 (id=2632): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00'}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000000080)=0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000300)=0xf, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x76bc, 0x1000, 0x0, 0x80003a6}, 0x0, 0x0) close(0x3) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x1, 0x7, 0x53, 0x4}]}) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r8, @ANYBLOB="020000000000000000000000000000000040000053fc8d24f5cbc0c681c58854818a51", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="04000000040000000100"/28], 0x50) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xf4}}, 0x0) 5.103920284s ago: executing program 7 (id=2633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c0002800600010004000000080005", @ANYRES32=r5, @ANYBLOB="080004"], 0x4c}}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000240)={@mcast2, r5}, 0x14) close(r1) 5.084188515s ago: executing program 2 (id=2634): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.159498094s ago: executing program 2 (id=2636): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x3c}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000780)={0x40, 0x17, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a087027ddffffff01020301090212000100000000090400000091b0e200"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x22, 0x62, {0x62, 0x27, "93ade36627168ff5a42cf26abfa506913e97da42204f785146bbb1a2944203231e471a366f0b29865f85237beb2a63b73759b3dff71c3fe187047c2f7f105f2d1a7feb629e78f96f96375af1e394ca8c2618c8a4566d5ab0781ec8e5155397a4"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, &(0x7f0000000280)={0x34, &(0x7f0000000140)={0x20, 0x2, 0x30, "9d62b0b24fcda964dd94047273277cfec5404f086ba925b321cdcd09e0e8d01db123fbf6fb65fdabd4ea82d90a359e21"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xf6}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x0, 0xd4, {0xd2, "e6820663d2982da2efbb2a413a5c80579a5ace9e25a6880a6feca2b790952cacbab9f510a95b1e65782c9b6ff93e8d5bce24ad1795826f2cc6fa9f9e0b0d38c2282b25416756eca85325e8c38d554bc0cb5f260a43341f5ae5978204a2efd321a776ba1406cc06f424bf695f24bc52ae670753c80ee9f89c229d34ffaecb79181c98f4e841cc77e19daf3f438f2ad798dedf51f624365e2e5f6a0d09ff281afb6bc44481b0474c027f9259abe0b139db87a416c3a8dcac279e6d3106fed3d65ee8d0ebf9c7b10a36d6e110bef6d21984bf95"}}, &(0x7f0000000200)={0x20, 0x1, 0x1, 0x4f}, &(0x7f0000000240)={0x20, 0x0, 0x1, 0xff}}) dup(0xffffffffffffffff) 3.999274085s ago: executing program 5 (id=2638): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f3066baf80cb8b58eb48aef66bafc0cec0fe72d16da0000c4c37d054e0000b93c090000b80000c0feba000000000f30df180f20583e650f01c9660fdcd42e0f78dc", 0x4e}], 0x1, 0x90, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000bd390bd0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, 0x0, &(0x7f0000000180)) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000109010400000000000000000500c750110c708dc191000808000640000000000900010073797a31000000020c0004800800014000000077084000000002"], 0x44}}, 0x400d0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xe, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r1], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3bdfcecaf2c0000000005400001400350077673200f90ebffbdb0bffffffff100055365569a8393761cbb7bd2b88495d3ae50ecbe17943a43827078bf3b4eafdb2136e608f62018fd267170d3e3f8050bad7799f4d8d6e64ebd24de96250205226c52cec12b5ca879f889418aa9bec8dd1d40359b7af477bcdbf084b9e448f0eed769f1e116262a2bacdb3da5764efd5e43892e0b8cc0ae50cb159615ea1d27e0d5cf2b705fa4c7f1c205fc1ac95d3a69de9a36796d922"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.975007079s ago: executing program 7 (id=2640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x1}, 'syz1\x00', 0x5}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000000c0)={'veth1_to_team\x00', 0x1000}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000240), 0x47e6d48, 0xb401d7a41ac08cb) connect$inet(r7, &(0x7f0000000300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x200}) 3.2358592s ago: executing program 1 (id=2641): io_setup(0xffff0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0xc4042, 0x1f7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e0007012bbd7000fdffffff017c0000040042800c00018006000600800a00000c0002800800148004000580"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0xcbd71eeefd8ad8b9, 0x0, 0x2, 0x3, 0x4}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtfilter={0x6224, 0x2c, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c}}, [@filter_kind_options=@f_flow={{0x9}, {0x61f4, 0x2, [@TCA_FLOW_ACT={0x61cc, 0x9, 0x0, 0x1, [@m_nat={0xfc, 0x1d, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab8b, 0x6d, 0x0, 0x2, 0x9}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4, 0x4, 0x3, 0x7}, @multicast1, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x4, 0x0, 0x0, 0x4}, @multicast1, @remote, 0xffffffff}}]}, {0x5a, 0x6, "5410ae4b210ad1ea1a3cc6f8974982a8c74c221548d44963ad4e44b550222c15daa43348c0ac5c1284746b6c13235e0aca8bba595af93c796fa11c5dcadc061a0d5d7740305e08b4bbae04e73b2fd0e6d053f5b4a362"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x4abc, 0xd, 0x0, 0x0, {{0xa}, {0x49d8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xff, 0x6b7a97ef, 0x8, 0x5, 0xb}, 0x83, 0x5, [{0x2, 0x743b, 0x80000001, 0x8001, 0x80000000, 0x8}, {0x0, 0xfffffffc, 0x8, 0x7, 0x0, 0x1}, {0x8, 0x8, 0x3, 0xffff, 0x1, 0x1}, {0x3, 0x2, 0x495e, 0x40, 0x2, 0x70000}, {0x7, 0x5922, 0x0, 0x5, 0x2}]}, [{0x81, 0x2, 0x1, 0x0, 0x5, 0x1d8}, {0x5, 0x1d9, 0x679a, 0xffff, 0xf11, 0x8}, {0xdd6, 0x1c, 0xd, 0x7, 0x7f, 0xffff8001}, {0x0, 0x7, 0x6, 0x5, 0x9, 0xffff}, {0xfffffffc, 0x7fffffff, 0x5, 0x1, 0xc0000000, 0x359}, {0xe, 0x9, 0x829, 0x267, 0xbb, 0xaa6}, {0x4, 0x3ff, 0x4, 0x400, 0x8, 0x1}, {0x7f, 0x7ff, 0xf9df, 0x8001, 0x6, 0x100}, {0xfffffffd, 0x2, 0x8, 0xffffffff, 0x6, 0x9}, {0x1e9, 0x4, 0x9, 0xfffff801, 0xfffff0ef, 0x8}, {0x4, 0x64, 0x9, 0x7fff, 0x0, 0x5}, {0x5, 0x1ff, 0x100, 0x6, 0x9, 0x80000000}, {0x3ff, 0xd, 0xb, 0x800, 0x6, 0x8001}, {0x5, 0x2, 0x1, 0x1000, 0x5, 0x100}, {0x9, 0x0, 0x10001, 0x94d0, 0xb}, {0x7, 0x8, 0x80000000, 0x9, 0x80000001, 0xc}, {0x7, 0x80000000, 0x6, 0x8, 0x6, 0x5}, {0x4, 0xfffffff8, 0xffc0000, 0xffff8001, 0x1, 0x9}, {0xd, 0xb1, 0x80000001, 0xde12, 0x9, 0xbb7}, {0x101, 0x1, 0x8, 0x10, 0xff, 0x5}, {0x59a, 0x1ff, 0x1, 0x5, 0x5, 0x8}, {0x9, 0x3, 0x2, 0x82dd, 0x7, 0x6}, {0x6, 0x95, 0x4, 0x7, 0x6, 0x3}, {0x3ff, 0x5, 0x4, 0x8, 0x1, 0x6}, {0x200, 0x8c, 0x7, 0xff, 0x8, 0x6}, {0x859, 0xffffc92c, 0x2, 0x7f, 0x778, 0x80000000}, {0x6bd39a00, 0x2, 0x7, 0x1, 0xeb3cc842, 0x7}, {0x100, 0x2, 0x8, 0x6, 0xce, 0x2}, {0x4, 0x6, 0x1, 0x1a, 0x1, 0x8}, {0x67726070, 0x800, 0x27ce, 0x800, 0xffffff7a, 0x6}, {0x0, 0xffffffff, 0x9, 0x2648, 0x7, 0x8}, {0x13, 0x8, 0x7fffffff, 0x6, 0x9, 0x10000}, {0x7, 0x3, 0x80000000, 0x5, 0xb, 0x8601dfa4}, {0x1, 0x3, 0xfc84, 0x8, 0x1, 0xc}, {0x690000, 0x3, 0x3, 0x34, 0xff}, {0x81, 0x3, 0x5, 0x10000, 0xc, 0x2}, {0x6, 0xeb, 0x6, 0x978eddf, 0x4, 0x8}, {0x5, 0x1fe0, 0xfffffffc, 0x9, 0x3, 0x4}, {0xf642, 0xb, 0x7, 0x1384, 0x6, 0x6}, {0xfff, 0x9, 0x42, 0xfffffff6, 0x4, 0x6}, {0x4, 0x10, 0x81, 0x79d, 0x3, 0x5}, {0x5, 0x8000, 0x7fff, 0x6, 0x1, 0x1}, {0x1, 0x401, 0x97c3, 0x4, 0x8f, 0x6}, {0x3, 0x400, 0x2, 0x0, 0x10000, 0x4}, {0x9, 0x3, 0x7f, 0x1b5fb3db, 0x4, 0x800}, {0x3, 0x2, 0x5, 0x80000000, 0x3, 0x926}, {0x3ff, 0x9, 0x9, 0x8, 0x9, 0x101}, {0xa4b, 0x4, 0x221, 0xffff, 0x8d, 0x7}, {0xff, 0xff, 0x6, 0x5, 0x4, 0x2}, {0xe94, 0x3, 0xfffffff8, 0x8, 0x6, 0x10000}, {0x5, 0x8, 0x800a, 0xfea9, 0xfffffbff, 0xdd9}, {0x10001, 0xbe, 0x9, 0xffff9ed9, 0x47, 0x3}, {0x7, 0xafac, 0x3, 0x40, 0x9, 0x4}, {0x4, 0x5, 0xfef, 0x2, 0x0, 0x10001}, {0xd2, 0x9, 0x7, 0x1e9, 0xf6a, 0x8}, {0x6, 0x1, 0x4, 0x7, 0x8, 0x2}, {0x80000001, 0x8000, 0x9, 0x0, 0x26, 0x9}, {0x7, 0x7fffffff, 0x1, 0x0, 0x2, 0x8}, {0x5, 0x3, 0x2, 0x7f, 0x2, 0x4b1}, {0x6, 0xffffffff, 0x3, 0x8, 0x8, 0xff00000}, {0xa1d, 0x4, 0x4590, 0x8, 0xfffffff5}, {0x100, 0x9, 0x1da3f5b3, 0x2, 0x2, 0x7ff}, {0x2, 0x8, 0x5, 0x8, 0x1, 0x2}, {0xd268, 0x1, 0x3ff, 0x2, 0x1ff, 0x3}, {0xb20, 0x10000, 0x7, 0xf5, 0x3, 0x4}, {0xbe8, 0x6, 0x6, 0x1, 0xe75f}, {0xfffffff1, 0x40, 0x7, 0x787, 0x7e32, 0x4}, {0x2, 0xc0, 0x80, 0x2, 0x1, 0x1ff}, {0x7, 0x7ff, 0x6, 0x529d00df, 0x2, 0x3}, {0x5, 0x3ff, 0x20, 0x0, 0x1, 0x1}, {0x575f, 0x4, 0x2, 0x2, 0x10000, 0x2}, {0xb73, 0x5, 0x5, 0x0, 0x5, 0x9}, {0x5, 0x1, 0x1, 0x9a, 0x5c25, 0x3}, {0x0, 0x9ac00, 0x9, 0x5, 0x7, 0x3cb4}, {0xfffffffb, 0x8, 0x0, 0x9, 0x401, 0x2}, {0xf, 0x40bdb6b0, 0xfffffff3, 0xf, 0x6, 0x1}, {0xc0000000, 0xfffffff7, 0x8001, 0x101, 0x2e8}, {0xf46, 0x9, 0x1, 0x10, 0x34d, 0x5}, {0x7, 0xfffffffb, 0x0, 0xe, 0x800, 0x5}, {0x7756, 0x4, 0x3, 0x4, 0x6, 0xffffffff}, {0x7, 0x7, 0xffffffff, 0x1, 0x0, 0x3}, {0x7f, 0x81, 0x5, 0xf3, 0x6, 0xc}, {0x800, 0x4afe, 0x2, 0x1, 0xfffffffa, 0x3}, {0x1ae, 0x690, 0x7}, {0x40, 0x6, 0xffff8000, 0x6, 0x813, 0x432}, {0x100, 0x81, 0x8, 0xfffffff7, 0x6423, 0xdd9}, {0x7, 0x101, 0x5, 0x1, 0x4, 0x2}, {0x3, 0x7, 0x3, 0xffffffc0, 0x6ab, 0x9}, {0xd60, 0xffffffff, 0x2fb96b9a, 0x8, 0xf, 0x6f}, {0x0, 0x8, 0x6, 0x2, 0x6f2e, 0x2}, {0x8, 0x4, 0x5a1, 0xffff, 0x1, 0x4113}, {0xfff, 0x200, 0x8054, 0x8001, 0x6, 0x9}, {0xff, 0x6, 0x2720, 0xfe26, 0x8, 0xff}, {0x77c, 0x6, 0x7, 0x553, 0x4, 0x4}, {0x6, 0xdf, 0xf6cc, 0x3, 0xfffffffc, 0x3ff}, {0x7, 0x1ff, 0x1, 0xfffffe00, 0xe993, 0x9}, {0x3, 0x6, 0x2, 0x3, 0xfff, 0xca6}, {0x4, 0x5, 0x40, 0x32dc2560, 0x4, 0x10000}, {0x1, 0xffffffff, 0x90, 0x3, 0x10000, 0x5}, {0x6, 0x9, 0x9, 0x7fffffff, 0x94, 0x8}, {0xba5f, 0x7, 0xfff, 0x5, 0x2, 0x81}, {0x9, 0x6, 0x8, 0x0, 0x1, 0x9}, {0x5, 0x114, 0x8, 0x4, 0xd4, 0x1}, {0x8, 0xbe, 0x80, 0x9043, 0x6ed, 0x4}, {0x7, 0x8, 0x401, 0xffffb397, 0xec, 0x8}, {0x3, 0x81, 0xa3, 0x9, 0x0, 0x1e00}, {0x4, 0x2, 0x7fff, 0xf9, 0x8001, 0x900}, {0x3, 0x10000, 0xff, 0x7, 0xd1, 0x81}, {0x2, 0x8, 0xa, 0x25b944ed, 0x4, 0x6}, {0x10001, 0x2, 0x5, 0x2, 0xe, 0xb4}, {0x5, 0x8, 0x6, 0x7, 0x9, 0x7}, {0xb, 0x3, 0x7, 0x6, 0x4, 0xf1}, {0x0, 0x7, 0xe, 0x2, 0x7, 0xffff}, {0x5, 0x8, 0x1, 0xfffffff7, 0x1, 0xe5}, {0x0, 0x9, 0x800, 0x8001, 0xf91b, 0x1}, {0x824, 0x3, 0x8, 0xfffffffa, 0x0, 0x800}, {0xff, 0x10b8, 0x80000000, 0x0, 0x401, 0xc5000000}, {0x0, 0x2, 0x8, 0x4000, 0x8, 0x8}, {0x0, 0x10001, 0x8, 0x7, 0x7, 0x1}, {0x4, 0x7, 0x3, 0x10, 0x40, 0x6}, {0x7, 0xfffffff8, 0x2d, 0x80000001, 0x7fff, 0x9e}, {0x4, 0x10001, 0x1, 0x9, 0x3, 0xb3}, {0x4, 0x1, 0x5, 0x5, 0x446, 0x2c}, {0xf, 0x8, 0x100, 0x5, 0x90bb, 0x2}, {0x1e, 0x10000, 0x8001, 0x80000000, 0x7f, 0x3}, {0x80, 0x2ca, 0x5, 0x6, 0x4, 0x6}, {0x101, 0x2, 0x6, 0x2, 0x10000}, {0x7, 0x80000000, 0x5, 0x401, 0x6, 0x7}], [{0x2}, {0x2}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x2}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5, 0x8cd5903e007f4696}, {0x0, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x2, 0xfc160b01908539b2}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x9, 0x100, 0x5, 0x101, 0x2}, 0x3, 0x8, [{0x80000001, 0x0, 0x6, 0xd, 0x5, 0x2}, {0x7, 0x7, 0x1, 0xb8, 0x8, 0x80000000}, {0x40, 0x3, 0x1, 0x0, 0x7, 0x8000}]}, [{0xffffffff, 0x9, 0xd, 0x3, 0x0, 0xc000000}, {0x9, 0x2, 0x7c5c4821, 0x3e92, 0xff, 0x6}, {0x80, 0xb94, 0x1, 0x4, 0x0, 0x8000}, {0x7e8, 0x745, 0xefea, 0x4, 0x4, 0x10001}, {0x7ff, 0xe5, 0x9, 0x0, 0x521, 0x9}, {0x7fff, 0x4, 0x6, 0xc0, 0x7fffffff, 0x3}, {0xf6c, 0x10, 0xfffe0000, 0x8, 0x7f, 0x1}, {0xffffffff, 0x10001, 0x331, 0x1, 0x9, 0x4}, {0x7f, 0x5, 0x16e, 0x6, 0xfffffffb, 0xa7c5}, {0x0, 0x3, 0x16, 0x1000, 0x2, 0x4}, {0x0, 0x7, 0xb, 0x0, 0x36, 0xfffffffe}, {0x4, 0x7fff, 0x7, 0xff, 0xa76, 0xb}, {0x81, 0x5, 0x2, 0x2, 0x1, 0x7}, {0x5e85, 0x1ff, 0xfffffffb, 0x32e0, 0xffffff54}, {0x8, 0x8000, 0x8, 0x0, 0x8, 0x42}, {0x9, 0x400, 0x1, 0xc5, 0x8, 0x4}, {0x3, 0x6, 0x128b, 0x10, 0x2, 0x200}, {0x5, 0x6, 0xfffffff9, 0x9, 0x9, 0x2}, {0x2, 0x3, 0x2f2dadf6, 0x8, 0xfffffffc, 0x7}, {0x7b, 0x6, 0x5, 0xffff, 0xa, 0x2}, {0xd9, 0x5, 0xe, 0x8, 0x0, 0x5}, {0xfffffffe, 0x1fc0000, 0x1, 0x3, 0x34, 0x80}, {0x4, 0x400, 0x5da, 0x0, 0x1, 0xbfe}, {0x6, 0x36, 0x0, 0x8, 0xe, 0x800}, {0xf29, 0x4, 0xfffffff7, 0x9, 0x3, 0x2}, {0x8005, 0xaa33, 0xe0000, 0x5, 0x6, 0x7}, {0x3c9b, 0x1ff, 0x0, 0x101, 0x0, 0x93}, {0x3a3, 0xe17, 0x0, 0x3, 0x8, 0x7}, {0x10001, 0x2, 0xf, 0x1, 0x7, 0xfffffff9}, {0x4, 0x1, 0x3ff, 0x2, 0xdf, 0x8}, {0x2f, 0x0, 0x75d, 0x5, 0x636, 0x4}, {0x3a, 0xf, 0x10, 0xfe4, 0x9, 0x9}, {0x3, 0x5, 0x3ff, 0x225f, 0x9, 0x7}, {0x4, 0x5263, 0xfffffffd, 0x400, 0x80, 0xde}, {0x5, 0x9a1, 0xfffffffc, 0x1, 0x9, 0xa}, {0x9, 0x8, 0x8, 0x1000, 0x2, 0x5}, {0x8, 0x200, 0x7, 0x101, 0x40, 0x1}, {0x3, 0x5, 0x1, 0x7, 0x2, 0xfffffff8}, {0xd, 0x5, 0x0, 0x5, 0xffff0000, 0x4}, {0xd, 0x9, 0x81, 0x4, 0x81b794da, 0x4}, {0x4, 0x5, 0x5, 0xf824, 0xc}, {0x6, 0x8, 0x4, 0x7, 0xcfd, 0x40}, {0x6b53, 0x80, 0xffff, 0xa4, 0x8, 0x2}, {0x100, 0x3ff, 0x1, 0xe86, 0x9, 0x55}, {0x7, 0x3ff, 0x8, 0x3ff, 0x800, 0x7}, {0x3, 0x6, 0x8, 0xffffffff, 0x7, 0xff}, {0x8, 0x9, 0x5, 0x40, 0xf, 0x81}, {0x4, 0x7, 0xc, 0x9, 0x0, 0x16d}, {0x4, 0x40f25c26, 0x9, 0x3ff, 0x6, 0x2}, {0x800, 0xffffd2fc, 0x7, 0x3, 0x0, 0x1}, {0xffffff2d, 0x3, 0xf31d, 0xae0, 0xe}, {0x77, 0x0, 0xf, 0x1, 0x80000001, 0x3}, {0x0, 0x5, 0x3, 0x0, 0x401, 0xfff}, {0xffff, 0x40, 0x2, 0x8, 0x7fffffff, 0xfffffffe}, {0x1, 0x234, 0x8, 0xa1, 0x10, 0x10001}, {0x8, 0x9, 0x3, 0x60, 0x0, 0x7ff}, {0x7f, 0x9, 0x4b6, 0x9, 0x65}, {0x5, 0x2, 0xfffffff8, 0x2bc5, 0x8, 0xfff}, {0x7fff, 0xfffffaa2, 0xe, 0x2, 0x4, 0x8}, {0x7fff, 0x200, 0x8, 0x1, 0x8b4c, 0xdec}, {0x6233, 0x8, 0x8, 0xfffffffb, 0x4, 0xffffffff}, {0x8a, 0x9c0, 0xe, 0x0, 0x2, 0xd0dd}, {0x6, 0xcca, 0xfffffe01, 0x6, 0x2, 0x1}, {0x8, 0x400, 0x1, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x4c, 0x7fff, 0x2, 0x2}, {0x9, 0x1, 0xd, 0x2, 0x5}, {0xfffffffb, 0x6, 0x1e, 0x8, 0x5, 0x7f}, {0x7, 0x861, 0x3ff, 0x81, 0x10000, 0x7}, {0x200, 0x1, 0x4, 0x8000, 0x6, 0x9c}, {0x3, 0xffffffff, 0xfffffff7, 0x5348, 0x52db, 0x4f33}, {0xd685, 0x0, 0x0, 0x0, 0xe189, 0x2}, {0x44f, 0x4, 0x6, 0xde5, 0xfffffff2, 0x9}, {0x9, 0x7f, 0xfa, 0x8, 0x0, 0x6}, {0x0, 0x6, 0xfff, 0x9, 0x0, 0x2}, {0x3b, 0x400, 0x2b7d1fc5, 0x3, 0x9, 0x1}, {0x9180, 0x400, 0x1446, 0x3, 0x9, 0x401}, {0x6, 0x9, 0x2, 0x81, 0x3, 0xceca}, {0x4, 0x2, 0x5, 0x7, 0x0, 0x40}, {0x680000, 0x1, 0x7, 0x200, 0x1400000, 0x6}, {0x7, 0x6, 0x2, 0x1, 0x401, 0xd}, {0x0, 0x80000001, 0x9, 0x59, 0x4, 0x9}, {0x10000, 0x4, 0xfff, 0x2, 0x80, 0x7}, {0x100, 0x1, 0x6b, 0x2, 0x9, 0x10001}, {0x5, 0x5, 0x2, 0x100, 0x1, 0xe7}, {0x1, 0x8001, 0x546, 0x7fff, 0xd, 0x40}, {0x6, 0x40ba, 0x3, 0x9, 0x5, 0x5}, {0x0, 0x1ff6, 0x1, 0x8, 0x6}, {0xee, 0x8, 0x9, 0x6, 0x2, 0x31800000}, {0xf9c, 0x6, 0x7, 0x6, 0x5, 0x4}, {0x101, 0x2, 0x8, 0xfda, 0x3, 0x8}, {0x54d815e9, 0x5, 0x2, 0x4, 0x9, 0x3b0a66e6}, {0x358, 0x0, 0x2, 0x86, 0x7, 0xa}, {0x1, 0x4, 0xb, 0x1, 0x401}, {0x44, 0x5b, 0x4, 0x5, 0x876, 0x6}, {0x6d2a, 0x3, 0x2, 0x16, 0x3, 0xbe}, {0x7, 0xb, 0x1, 0x8, 0x4, 0x1}, {0x9, 0x0, 0x5, 0x7, 0x2, 0xe150}, {0x6, 0xfff, 0x78000, 0x7, 0x6, 0x1}, {0x200, 0x0, 0x4, 0x1ff, 0x3a95, 0x4}, {0x6, 0x5, 0x5, 0x400, 0xa64, 0x4}, {0x5, 0x8, 0x5, 0x2, 0xfae, 0x8}, {0x7fffffff, 0x4, 0x0, 0x0, 0x6, 0xffff}, {0x7, 0x0, 0x4, 0x9bdfdc61, 0x0, 0x81}, {0xde36, 0x800, 0x4, 0x7, 0x4, 0x401}, {0x5, 0x1, 0x2, 0x2, 0x7, 0x1}, {0x8, 0x7a, 0x40, 0xb, 0xfc, 0x7fff}, {0xfff, 0x4, 0x6b2, 0x38b, 0x7fff, 0x4857}, {0x0, 0x9, 0x1, 0x6, 0xffff, 0x9}, {0x8001, 0xfffffff7, 0xfc1, 0xb1, 0x74f, 0x4}, {0x200, 0xfc8e, 0xf35, 0x7ff, 0x101, 0x7f}, {0xbf, 0x6, 0xa, 0x39, 0x2, 0x4}, {0x2, 0x401, 0x6, 0x17, 0x2, 0x8}, {0x10001, 0x4, 0x7fff, 0x80, 0x6, 0x3}, {0xa69a, 0x200, 0xfc, 0x8, 0x9, 0x6}, {0xff, 0x2, 0x7, 0x1000, 0x8, 0x5}, {0xaea, 0x5, 0x3ff, 0x8, 0x2, 0x4}, {0xfffffff9, 0x1ff, 0x9, 0x0, 0x6, 0x9}, {0x10, 0x7, 0x1, 0x1, 0x7, 0x1}, {0x3, 0xf61d, 0x5, 0x4, 0xd, 0x1}, {0xffffffff, 0x2, 0x6, 0x9, 0x100, 0x9}, {0x8, 0x80000001, 0x8, 0x3, 0x5, 0xfffff000}, {0x6, 0x3, 0x0, 0x7f, 0x1180000, 0x3}, {0x7, 0x10, 0x9, 0x400, 0x47, 0xff}, {0x8000000, 0x4, 0x1, 0x5, 0x5, 0x9}, {0x52, 0x9, 0x0, 0x3, 0x7, 0x100}, {0x3, 0xffff, 0x8, 0x4, 0x0, 0x7}, {0xfffffff9, 0x6, 0x9, 0x1, 0x4, 0x1}, {0x1, 0x100, 0x2, 0x8, 0x8, 0x9}], [{0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x65a0434a9fb98855}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x1825befe1354fd1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {}, {0x0, 0x1}, {0x1}, {0x5}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x7, 0x8a, 0x2, 0x3b9}, 0x6, 0x84, [{0xf4b, 0x7fffffff, 0x9, 0x404, 0x100, 0x7}]}, [{0x80, 0xfffeffff, 0x3, 0x4, 0x3, 0xffffffff}, {0x0, 0x0, 0x1, 0x6ec, 0xfffff801, 0x5}, {0xad, 0x385ce38c, 0x9, 0x6, 0x4, 0x200}, {0x1, 0xd8e, 0x5, 0x2, 0xd9bf668c, 0x3}, {0x81, 0xf8, 0xe72, 0x9, 0xfffffffc, 0x2ecb}, {0x10001, 0x2, 0x7f, 0x80, 0x600, 0x8}, {0x1, 0x2, 0xbcf, 0x4a, 0xffff, 0x5}, {0x320, 0x4, 0x0, 0xc000000, 0xb6e2, 0xa}, {0x3, 0x40, 0x8b, 0x0, 0x1, 0x81}, {0x8, 0x48fec832, 0x5, 0x3, 0x4, 0x9}, {0x9b2, 0x3, 0x9, 0xfffffff8, 0x7fffffff, 0x6}, {0x7, 0x200, 0x0, 0x80000000, 0x9}, {0xffff, 0x0, 0x4, 0x3, 0x0, 0x6}, {0x2, 0x4, 0x4, 0x8000, 0x8, 0x7fff}, {0xd, 0x3, 0x0, 0x4, 0x0, 0x9d8}, {0x7, 0xe, 0x84c00000, 0x7, 0x2, 0x8}, {0x5, 0x8, 0x9, 0xd5c3, 0xfffffff9, 0x2}, {0x1, 0x7, 0x4, 0x4, 0x8, 0x7fff}, {0x5, 0x400, 0x3, 0x2, 0x7, 0xf52f}, {0x6, 0x4, 0x5, 0x47749576, 0x6, 0x1}, {0xffffffff, 0xd9, 0x0, 0x1, 0x8, 0x6}, {0x0, 0x1520, 0x3, 0xc145, 0x3, 0x1ff}, {0x2, 0x4, 0xac, 0x2, 0xe4b, 0x2a1}, {0x5, 0xf1, 0x8000, 0xd, 0x80, 0x7}, {0x1, 0x0, 0x7db, 0x8, 0x8, 0x3}, {0x7, 0x4, 0x5, 0x7, 0x3}, {0x8, 0x4, 0xffff, 0x6, 0x0, 0x2}, {0x1, 0x1, 0x9, 0x732, 0x9, 0x4}, {0x0, 0x1, 0x1, 0x1, 0x401, 0x72}, {0x3, 0x2, 0x80, 0x42ed, 0x2019, 0x7}, {0xee, 0x3, 0x7fff, 0x7ff, 0xff, 0x4}, {0x5, 0x5, 0x365, 0xffff, 0x1ff, 0x3}, {0x8001, 0x5, 0x5, 0x3, 0xffffffff, 0xfffffff7}, {0xffffffff, 0x8000, 0x2, 0x1, 0x8, 0xcb}, {0x80, 0x0, 0x9, 0x55, 0x9, 0x7ff}, {0x4, 0x0, 0xfffffffe, 0x57b1, 0x2, 0x80}, {0xfffffc00, 0x996, 0x4, 0x6, 0x2, 0xd}, {0x6, 0x9, 0x6, 0x8, 0xa, 0x1}, {0xf, 0x9, 0x1000, 0x5, 0xfc7c, 0x3}, {0x2, 0xfffffffa, 0xfff, 0x2, 0x0, 0x8000}, {0x4, 0x1717, 0x200, 0x6, 0x8, 0x7}, {0x1, 0x1d, 0x2, 0xf8, 0x7, 0xfe}, {0x1, 0x8, 0x4c, 0x8, 0x3, 0xc121}, {0xe0, 0x6343, 0x2, 0x6, 0x8}, {0x8000, 0x2, 0x0, 0xbe7, 0x9, 0xa}, {0x3, 0x9, 0x9, 0x7fffffff, 0x6, 0x1}, {0x9, 0x4, 0x6, 0x38, 0x4, 0x7}, {0x1, 0x7, 0x1c0c, 0x65, 0x100, 0x2}, {0xa, 0x401, 0x5, 0x2, 0x40, 0x2}, {0x4, 0xfffffffc, 0x8, 0x9, 0x9, 0x44ccf24}, {0x8, 0x0, 0x75, 0x6, 0x1ff, 0x1}, {0x3, 0x0, 0x7, 0x0, 0xb, 0x950}, {0x81, 0x0, 0x3, 0x80, 0x80000000, 0x4338}, {0x9, 0x8, 0xc307, 0x3, 0x7, 0x5}, {0x73b, 0x726d, 0x876d, 0x4, 0x6, 0xfff}, {0x6, 0x17, 0x7, 0x3, 0x3, 0x7ff}, {0x6, 0x6, 0x2, 0x80000000, 0x6, 0x3}, {0x6, 0x2, 0x58cb, 0x3, 0x10001, 0x400}, {0x8, 0x1, 0x1, 0xfffff3d9, 0x1, 0xf273}, {0x968a, 0x6, 0x7, 0x8, 0x0, 0x4}, {0x4, 0xa, 0x6, 0x6, 0xe, 0x4}, {0x603a, 0x1, 0x3e29, 0x3, 0x885, 0xbf}, {0xd0c, 0x401, 0x6, 0xfffffff8, 0xfffffffc, 0xeb}, {0x6e2a, 0x4, 0xf, 0x2, 0x5, 0x2}, {0x61, 0x9, 0x8, 0x9a, 0x5, 0x8}, {0x23, 0x6, 0x7, 0x6000000, 0xffff1d0e, 0x3}, {0x400, 0x2d, 0x8, 0xffff, 0x7, 0x2}, {0x81, 0xffffffff, 0x6, 0x1, 0x8, 0x7fff}, {0x7, 0x5, 0x5, 0x7, 0x9, 0x10000}, {0x1, 0x0, 0x3800, 0x8001, 0x8, 0xffffffff}, {0x4, 0x9, 0x4, 0x4, 0x1, 0x99d}, {0x1, 0x4, 0xca, 0x58e1a8f6, 0xb, 0x8000}, {0x4, 0x652, 0x5, 0xffff, 0x8, 0x5}, {0xffffffff, 0x80000001, 0x6, 0x5, 0x88c, 0x1ff}, {0xfffffff9, 0x7f, 0x53, 0x9, 0x1, 0x9}, {0x101, 0x7fffffff, 0x0, 0x1, 0x4a3d, 0xb}, {0xb187, 0x2, 0x401, 0x7, 0x100, 0xa0}, {0x1, 0xffff, 0x4, 0x1, 0xaef, 0x2}, {0x3, 0xe, 0x3ff, 0x8, 0xb, 0x1000}, {0x5, 0x2, 0x0, 0x8001, 0xfffffff9, 0x4}, {0x8, 0x8, 0xfb, 0x2, 0xab, 0x3}, {0x6, 0x7, 0x9, 0x3, 0x5, 0x4}, {0xe, 0xfffff2e7, 0x5, 0x0, 0x7, 0x3}, {0xcf87, 0x3, 0xfffffff4, 0x0, 0x7fff, 0x21}, {0x2, 0x3, 0x3, 0x9, 0x284, 0x8}, {0x8000, 0x1, 0x7fff, 0x4, 0x5, 0x8}, {0x8, 0x80000001, 0x10, 0x3, 0xa, 0x6}, {0xb, 0x7e7, 0x1, 0x2, 0x1}, {0x2, 0x9, 0x980, 0x3, 0xfffffffb, 0x7}, {0x8001, 0x387, 0xc4d, 0x6ca7, 0x3ff, 0x81}, {0xda3e, 0x8000, 0x7, 0x0, 0xffffffff, 0x6}, {0x40, 0x5, 0x4, 0x9, 0x7, 0x5}, {0xfffffffd, 0x8, 0x5}, {0x6, 0xd6c3, 0x8, 0x2, 0x9, 0x8}, {0xa, 0xa74, 0x8, 0x4, 0x0, 0x80010}, {0x3, 0x10, 0x80000000, 0x7fff, 0xfff, 0x96}, {0x6c4f, 0xc0000000, 0xfffffeff, 0x4, 0x84df, 0x9}, {0xffffff80, 0x0, 0x2, 0x5, 0x8, 0x5}, {0xffff, 0x6, 0xd2e, 0x0, 0x3, 0x4}, {0x7f, 0x5, 0x1ff, 0x2, 0x7, 0x6}, {0x8, 0x2d3e1ba6, 0x4, 0xfffffff7, 0x7, 0x9}, {0x0, 0x3ff, 0x5, 0x9, 0x6, 0x9}, {0x7f, 0x6, 0xf, 0x5, 0x7, 0x50}, {0x7fffffff, 0x2, 0x0, 0x8f7, 0x4}, {0x8, 0x0, 0x7, 0x9, 0x3, 0x40}, {0xe550, 0x9d, 0xf402fe8, 0x0, 0x1, 0x8}, {0x8001, 0x3, 0x9, 0x0, 0x440f, 0x6}, {0x1, 0x0, 0x68, 0x6, 0x7, 0x80000001}, {0x0, 0x80000000, 0x76fd48b2, 0x6, 0x7fffffff, 0xfffffff2}, {0x7, 0x0, 0x6a375634, 0xa6, 0x10, 0x9}, {0xffffffff, 0x4, 0x0, 0x401, 0x9, 0x6}, {0x1000, 0xa, 0xd2, 0x39, 0x2c43, 0x400}, {0x0, 0x0, 0x9, 0x9, 0x81, 0x9}, {0x4, 0x4, 0x0, 0x4, 0x76, 0x1000}, {0x80, 0x6, 0x0, 0x5, 0x4d5, 0x9}, {0x400, 0xbf72, 0x7ff, 0x8000, 0x726e, 0x401}, {0x8, 0x800, 0x5, 0x2, 0x3, 0x8}, {0x3, 0x9, 0xffffffff, 0x40, 0x5, 0xc0e}, {0x905, 0x5, 0x5, 0x5f73800, 0x66, 0x1a0f}, {0xff, 0x2, 0x0, 0x3, 0x8, 0x6}, {0x7, 0x5, 0xf, 0x81, 0x4, 0x101}, {0x6, 0x7, 0x5, 0x5, 0x3, 0x7}, {0x81, 0x8, 0x5, 0x5, 0x0, 0x400}, {0x1f92d10b, 0x8, 0x80000000, 0x9, 0x5, 0x8000}, {0x100, 0x17d5, 0x2, 0x7, 0x8001, 0x9236}, {0xffffffff, 0x3, 0x64c, 0x10}, {0x4, 0x1, 0x1dd1, 0x2, 0x80000000, 0xb9}, {0x1, 0x7, 0x400, 0xb8, 0x8, 0x81}], [{0x4, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0xba571f7477412984}, {0x5dcccdd41498a9f2}, {0x9eb4193a330e8531}, {0x4, 0x1}, {0x3}, {0x1}, {0x3}, {0x5}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x573b2edbe10bfc27}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x1}, {}, {0x5}, {0x4, 0x1}, {0x6624c42688849596, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x2}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x5}, {}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x2, 0x681482556d9db47c}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x4}, {0x5, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x3}, {}, {0x4}, {0x0, 0x1}, {0xa}, {0x1}, {}, {0x3}, {0x5, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0xfffffff9, 0x5, 0x0, 0x80}, 0x6, 0x5, [{0x9, 0x7, 0x7, 0x1, 0x961, 0x1fc4000}, {0x1, 0x3, 0x2, 0x3, 0x0, 0x5}, {0x10, 0x383, 0x400, 0x7f, 0x5, 0x6}, {0xe, 0xa6be, 0x4, 0x10, 0x3e4, 0x80000000}, {0x10000, 0x2, 0x0, 0x1, 0x8, 0x80000001}, {0x7, 0x6, 0x1ff, 0x4, 0x20, 0x2}, {0x80, 0x2, 0x81, 0x1, 0x7, 0x7}]}, [{0xfffffffc, 0x9, 0x7, 0xb, 0x1, 0xffff}, {0x4, 0xe, 0x80, 0x0, 0x80000001, 0x7}, {0x9, 0x400, 0x1000, 0x892e, 0x7fff}, {0xaa1, 0x2, 0xde90, 0x8, 0x1, 0x3}, {0x4, 0x80000000, 0x9b11, 0x8, 0x6, 0x5}, {0x1, 0xfff, 0x8001, 0xcf, 0xa65a, 0x8}, {0x7b8, 0x8, 0x14000000, 0xadf, 0x6, 0x9}, {0xb, 0x3, 0x5be4, 0x8, 0x7, 0x3}, {0x7, 0x4, 0x4, 0x2, 0x2, 0x1}, {0x80000001, 0x5, 0x8, 0x1d, 0x101, 0x7}, {0x3, 0x10, 0x3, 0x401, 0x40, 0x8}, {0xfffffffe, 0x9, 0x9506f8ae, 0x10, 0x4, 0x8}, {0x0, 0x1, 0x800, 0x2, 0xd, 0x2f}, {0x10001, 0xffffffff, 0xffffff97, 0x9, 0x2, 0x9}, {0xffff, 0xffffff80, 0x2, 0x780, 0xfcf, 0x79183831}, {0x10001, 0x9, 0x401, 0x2, 0x11bc, 0x2}, {0x0, 0x1, 0xb37, 0x8d, 0xca4, 0x6}, {0x3, 0xb8, 0x10001, 0x3ff, 0xb090, 0x4d}, {0x0, 0x7000, 0xfffff801, 0x4, 0xb, 0x9b1}, {0x1, 0x3, 0x6, 0xfffffff9, 0x3, 0x4}, {0x1, 0x81, 0x9, 0x9, 0x2, 0x5}, {0x0, 0x5, 0xd6ce, 0xb, 0x1, 0x7}, {0x1, 0x9, 0x6, 0x6, 0x96}, {0x88b, 0xad, 0x10, 0x4, 0x17, 0x80}, {0xd, 0x8f5, 0x3, 0x7fffffff, 0x2, 0x81}, {0x8, 0x9, 0x8bf7, 0x8, 0x1, 0x9}, {0xf, 0x800, 0x4, 0x2, 0x400, 0x9}, {0xffff, 0x78c, 0xc, 0x1000, 0xfffffffd, 0x800}, {0xf, 0xe, 0x7, 0x9, 0x9, 0x9}, {0x9, 0x9, 0x7, 0x1ff, 0x9e, 0x6}, {0xfffffff8, 0x80000000, 0x7, 0x6, 0xfffff601, 0xf}, {0x9, 0x7, 0x1, 0x3, 0x3, 0xd}, {0x8, 0x80000001, 0x10000, 0x9, 0x9, 0x6}, {0x9, 0x9, 0x1000, 0x7fffffff, 0x4, 0xc5}, {0x0, 0x3, 0xff, 0x10001, 0x6be}, {0x7fffffff, 0x796, 0x7fff, 0x4, 0x3ff, 0xe86e}, {0xf, 0xebcf, 0x1, 0x9, 0x7, 0x9}, {0x5eff, 0x7, 0x9e7, 0x7, 0xf03, 0x8001}, {0x4, 0x5, 0x3, 0x6645, 0x7f, 0x2}, {0x80000000, 0x1, 0xfffff001, 0x2be, 0xf30, 0xffffefc7}, {0xef10, 0x86, 0x5, 0x9, 0x7, 0x8}, {0x7ff, 0x1ff, 0xfffffffc, 0x3, 0x10, 0x7}, {0x1000, 0x9, 0x4, 0x6, 0x80, 0x5306768}, {0x8, 0xe649, 0x3, 0x4, 0x1, 0x6}, {0x0, 0x8, 0x57e, 0x7fff, 0x4, 0x212b}, {0x7ff, 0x6, 0x240, 0x7fff, 0x80000001, 0x3}, {0x5, 0xffffffff, 0x8, 0x6, 0x59, 0xf3}, {0x7f, 0x4e64, 0xf3ff, 0x800, 0x1, 0x7}, {0x8, 0x7fffffff, 0x7fffffff, 0x1, 0x1, 0x7}, {0x8, 0x9, 0x7, 0x80, 0x6, 0x4}, {0x5, 0x9, 0x8, 0x8, 0x7, 0xc}, {0xfffffff7, 0x3, 0x8001, 0x6, 0x8, 0x6}, {0x13, 0x4, 0x2, 0x5, 0x6, 0x6}, {0xc, 0x5, 0x3, 0x9, 0x7, 0x21b7}, {0x327, 0x2b4, 0x2, 0x1, 0xaa, 0x4}, {0x3ff, 0x9, 0x80000001, 0x1000, 0x7}, {0x7, 0x4, 0x3, 0xec23, 0x539, 0x5}, {0x7, 0x3, 0x9, 0x3, 0x6, 0xb}, {0x7, 0x0, 0x3, 0x37b965cc, 0x4, 0xffffffff}, {0x7, 0x7, 0x7, 0x1, 0x2, 0x4}, {0x5, 0x9, 0x0, 0x5, 0x7, 0xffff}, {0x0, 0x0, 0x2, 0x6, 0x9, 0xfffffffa}, {0x3, 0x8, 0x9, 0xff, 0x2, 0xc}, {0x7f, 0xe, 0x8, 0x7, 0xe}, {0xffffffff, 0x8, 0x0, 0x3938a6f2, 0x26, 0x3}, {0x5, 0x4, 0x1, 0x6, 0x7, 0x7}, {0xfe21, 0xd, 0x5, 0xa, 0x2, 0xffffffff}, {0xc, 0x5, 0x81, 0x9a, 0x0, 0x3}, {0x9, 0x80000000, 0x40, 0x7fffffff, 0x137d, 0x9}, {0xffff8000, 0xfff, 0x10000, 0x2, 0x4, 0xfffffffa}, {0x4a, 0x5, 0x9, 0xc7, 0x3, 0x7fffffff}, {0x1, 0x7, 0xfffffffd, 0x3, 0x1}, {0x1, 0x7, 0x7, 0xf14, 0x9, 0x5}, {0x7, 0x1ff, 0x44eb, 0x8, 0x7ff}, {0x0, 0x5, 0x6, 0xcdc, 0x1, 0x1ff}, {0xa0f, 0x7b41, 0x8, 0x8, 0x0, 0x200}, {0x122, 0x500, 0xd90, 0x4, 0x5, 0x7ff}, {0x10, 0x2, 0x2, 0xfffffffb, 0xb0, 0x8001}, {0x10, 0xff, 0x0, 0x4, 0x7ff, 0x8f30}, {0x8, 0x2, 0x0, 0x7, 0x47, 0x3}, {0x0, 0x0, 0xe, 0x4fe5, 0xa, 0xc0ba}, {0x4, 0x8, 0x7, 0x4, 0x8, 0x7}, {0x7, 0x9, 0x3, 0x30, 0x4, 0x5}, {0x3, 0x3, 0x9, 0x5, 0x2bf, 0xfffffff6}, {0x3, 0xc, 0x40, 0x7, 0x6, 0x8}, {0x4, 0x1, 0x2, 0x8, 0x6, 0xab7}, {0xb, 0x7, 0xf, 0x2, 0x2, 0x7}, {0x0, 0x7, 0x7, 0x3ff, 0x6, 0x7}, {0x5, 0x7, 0x6c, 0x5, 0xffff, 0x6}, {0xd, 0x6, 0x4, 0x4, 0x3, 0x6}, {0x3, 0x10, 0xb8c0, 0x5, 0x8b51, 0x6}, {0x7, 0x7, 0x9, 0x8, 0x8fb2, 0x81}, {0xfff, 0x2, 0x401, 0xfffffffe, 0x7f, 0x8}, {0xfffffddc, 0x1, 0x6, 0x81, 0x7, 0x3}, {0x0, 0xc00000, 0xb287, 0x4, 0x5e90, 0x7}, {0xfff, 0x2, 0xf, 0xb, 0x7, 0x8}, {0xa5d4, 0x5, 0x8000, 0x2, 0x23c8, 0x2}, {0x5, 0x9, 0x10, 0x4, 0x3, 0xffffffff}, {0x7, 0x8, 0x8, 0x9, 0x40, 0x6}, {0x80000000, 0x5, 0x8, 0x1, 0x230e, 0x4}, {0x0, 0x1f4600, 0x7fd7, 0x800, 0x3, 0x1}, {0x0, 0x81, 0x1, 0x7, 0x10001, 0x6}, {0x0, 0x7fffffff, 0x1, 0xeb, 0xa0da, 0x2}, {0x5, 0x9, 0x10, 0x80000001, 0x0, 0x18000}, {0x6, 0x1, 0xd44, 0xffffffff, 0x2, 0xc}, {0xd, 0xf, 0x7e41, 0x0, 0x101, 0x2d28}, {0x7fff, 0x60, 0x9, 0x3, 0x7}, {0x5, 0x6, 0x7fa1, 0x9, 0xd7, 0x8}, {0x9dc4, 0x9, 0x4, 0xfffffeff, 0x2, 0x81}, {0x36a0000, 0x1, 0xfb8, 0x7, 0x6, 0x2}, {0xfffffffc, 0xf82, 0x4, 0xf6, 0x7, 0x4}, {0xba, 0x9, 0x0, 0x9, 0x1, 0x800}, {0xff, 0x4, 0x0, 0x7, 0xfffffffa, 0xe4ed}, {0x3, 0x4, 0x3, 0x7fff, 0x1}, {0x3, 0xec1f, 0x6e9, 0xffff, 0x0, 0x9}, {0x8, 0xb, 0x4, 0x7, 0x7, 0x7f}, {0xc, 0x5daf, 0x2, 0xccf, 0x0, 0x5}, {0x9, 0x8, 0x8, 0x6, 0xde, 0x6}, {0x401, 0xfffffffc, 0x39, 0xb1ba, 0x1, 0x7}, {0x8, 0x6, 0x800, 0x9, 0x2, 0x7}, {0x6, 0x3, 0x9, 0x7, 0x6, 0x10000}, {0x8, 0x6, 0x6, 0x4027, 0x80000001, 0x200}, {0x3, 0x7ff, 0x7fffffff, 0x4, 0xb3, 0x7}, {0x0, 0x4, 0x2, 0x2, 0x2, 0x1}, {0x50, 0x1, 0x8, 0x5, 0x4, 0x1}, {0x3, 0x0, 0x16c3, 0xf858, 0x9, 0x5}, {0xb, 0x59b7, 0x5, 0x44c, 0x1, 0x7}, {0x4, 0x78, 0x3, 0xf, 0xfffffff9, 0x238}], [{0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x8478131555cc6011}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4}, {0x4}, {0x5}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x0, 0x3}, {0x4}, {0x4}, {0x2}, {0x4}, {0x6}, {0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x0, 0xe4937c41072a44cb}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x5}, {0x4}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0xb, 0x0, 0x20000000, 0x10000, 0x5}, 0x7, 0x1, [{0x4, 0x7fffffff, 0x5, 0x8, 0x7, 0x9}, {0xe0, 0x5, 0x145b, 0x80000000, 0x9, 0x101}, {0xffff0000, 0x3, 0x4, 0x2, 0x7, 0x20f}, {0x6, 0x6, 0x2, 0x5, 0x3, 0xb5}, {0x40000, 0x5, 0x0, 0xdb7, 0x6, 0x10001}, {0x9, 0xc3, 0x5, 0x800, 0x2}, {0x5, 0x5, 0x92, 0x1, 0x933, 0x7a7}]}, [{0x5, 0x9, 0x1, 0x7, 0x1f1f8000, 0xfffffb3c}, {0x200, 0x100, 0x1, 0xe12, 0x200, 0x5}, {0x4, 0x401, 0x2, 0x8, 0x1000, 0x80}, {0x5, 0x1, 0xbf, 0x1, 0x8, 0x1}, {0x8d4, 0x1a2, 0x4, 0x7ff, 0x8, 0x4}, {0x4, 0x5, 0x12fd, 0x3, 0x0, 0x80}, {0x3, 0x1ff, 0x401, 0x0, 0xbe, 0x439}, {0x80000001, 0x9, 0x2, 0x401, 0xfffffbff, 0x1b8}, {0x1, 0x6, 0x1ce2, 0x2, 0x9ae, 0x8000}, {0x1, 0x3, 0x0, 0x8, 0xfffeffff, 0x6}, {0xff, 0x0, 0x3, 0x4, 0x0, 0x7}, {0x10, 0x101, 0x4, 0x7b4159dd, 0x4, 0x8001}, {0x0, 0x3, 0x1, 0x1, 0xffff5db9, 0xffff}, {0x721, 0x800, 0x7fffffff, 0x8, 0x90, 0x8}, {0xb, 0x75b9, 0x8, 0x6, 0x16d, 0x3}, {0xd, 0x3ff, 0x101, 0x1, 0x0, 0x4}, {0x9, 0x401, 0xe41c, 0x9bfb, 0x4}, {0x80, 0x0, 0x1, 0x8, 0x9, 0xbe}, {0x800, 0x2, 0xd11, 0x6, 0xfffffffc, 0x2}, {0x9, 0xf, 0x800, 0xfffffff4, 0x80000, 0xffffff81}, {0xfff, 0x400, 0x7, 0x9, 0x7ff, 0xc7}, {0x7fff, 0x37, 0x4, 0xffffffff, 0x81, 0xffff63fc}, {0x6b7, 0x1, 0x9a, 0x80, 0xa, 0x227}, {0x6, 0x0, 0x3, 0x4, 0x8, 0x509e}, {0x3, 0x4, 0x72c5, 0x9, 0xc25, 0x4}, {0x0, 0x6, 0x2, 0x8, 0xfff, 0x1}, {0x9, 0x1, 0x0, 0x300, 0x3, 0x6}, {0xe9b, 0x7, 0xc, 0x30, 0x1, 0xfffffff8}, {0x8, 0x7f, 0x2, 0x80000001, 0x9, 0x4}, {0x0, 0x8, 0x6, 0x10, 0x5, 0x8}, {0x10001, 0x10, 0x6, 0xfffffff7, 0x90bc, 0xf}, {0x5, 0x7ff, 0x14, 0x345, 0x2, 0x7}, {0x931, 0x5, 0x0, 0x5, 0x1, 0x1}, {0x10, 0x7fffffff, 0x4, 0x400, 0x7b613168, 0x2}, {0x1, 0x1000, 0x1, 0x828, 0x8, 0x7}, {0x7, 0x200, 0x80, 0x3, 0x80000001, 0x6}, {0xc24, 0x7fffffff, 0x7, 0x200, 0x2be7a32, 0x37d8}, {0x1dc, 0x7ff, 0x34a1, 0x3ff, 0x0, 0xfd}, {0x1, 0x1, 0x4, 0x7, 0xd17, 0x3}, {0x5, 0x6, 0x4, 0x2f0, 0x4c3, 0x80}, {0xfffffffc, 0x9, 0x1, 0xf71b6cd, 0x3}, {0x4, 0x5, 0xc823, 0x4, 0x8535, 0x4}, {0x243, 0x9, 0x101, 0x8, 0x10000, 0x7}, {0x200, 0x9, 0x8, 0x9, 0x1, 0xdf14}, {0x0, 0x1, 0x800, 0x2, 0x0, 0x7}, {0x0, 0xffff, 0x6, 0x1, 0x5, 0x4}, {0x5, 0x4, 0xc, 0x6, 0x10, 0x2}, {0x5c9, 0x3ff, 0x3, 0x7, 0xa, 0xaba2}, {0x4cf0, 0x0, 0x2, 0x2, 0x800, 0x8000}, {0x8, 0x8, 0x80000001, 0x3, 0x4033, 0x5}, {0x1, 0x5, 0x5, 0x3}, {0xe210, 0x2, 0x7b3b, 0x1c00000, 0x10, 0x5}, {0x2, 0x7ff, 0x0, 0x18, 0x8, 0x4}, {0x3, 0x80000000, 0x9, 0x5, 0x1}, {0x5, 0x7fff, 0xc90c, 0xa9, 0x2, 0xffffffff}, {0x2, 0x4, 0x4, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0x6, 0x8, 0x10}, {0x0, 0x9, 0x1, 0x100, 0xa, 0x80000000}, {0x851, 0x1, 0x60, 0x8, 0xe3, 0x7}, {0x9, 0x7, 0x10001, 0x1, 0x8, 0x1}, {0x7, 0xffff, 0x459, 0x142, 0x8, 0x40}, {0x100, 0x7, 0x0, 0x7, 0x8, 0x8000}, {0xd4, 0x6, 0x4, 0x60789973, 0x0, 0x80}, {0x1, 0x0, 0x1, 0x2, 0xfffffff7, 0x10000}, {0x3, 0x0, 0x8, 0x0, 0x8, 0x1}, {0x384, 0x4, 0x2, 0x2, 0x9, 0x20000}, {0x5, 0x46, 0x5, 0x1000, 0xfffffffb, 0x353f}, {0xb75, 0x6, 0x8, 0x101, 0xffffffff, 0x5}, {0x2a0, 0xeb72, 0xfff, 0x7, 0xd185, 0x1}, {0x0, 0x53, 0x8cc, 0xfffffff3, 0x0, 0x30}, {0xfffffffb, 0x8, 0xa0, 0x3, 0x3, 0x5}, {0x8000, 0x3, 0x100, 0xe, 0x3, 0x5}, {0x0, 0x3, 0x4, 0xc5b, 0xffffffff, 0x9}, {0x7, 0x7fffffff, 0x96f5, 0xd, 0x77, 0x9}, {0x4, 0x7, 0x100, 0x2, 0x8001, 0x8}, {0x3ff, 0x13, 0x7, 0x64, 0x2, 0xb7b9bdd}, {0x3, 0x9, 0x80, 0x1, 0x843e, 0x8}, {0x2, 0x9, 0x8, 0x0, 0x7, 0x800}, {0x10, 0x5, 0x622, 0x7, 0x8, 0x11ea}, {0x9, 0x2, 0x3, 0x6, 0x9, 0x7}, {0x5, 0x5, 0x10000, 0x800, 0x100, 0x5}, {0x0, 0x6, 0x3, 0x1ff, 0x6}, {0x1, 0x8, 0x5, 0x8, 0x6da30fc3, 0x9}, {0x1, 0x3, 0x80000001, 0x7f, 0x5, 0x800}, {0x9, 0x9, 0x40, 0x5, 0x1000, 0x7}, {0x1, 0xffffffff, 0x401, 0xff, 0xe104, 0x7}, {0x9, 0x1, 0x0, 0xb9, 0x80, 0xfffffff8}, {0x1, 0xfffffffa, 0x2, 0x1, 0x0, 0x7ff}, {0x8, 0x2, 0x1000, 0x7, 0x7, 0x7fffffff}, {0x8, 0x3, 0x6, 0xca81, 0x1, 0x1}, {0xffff, 0x1, 0x7, 0x32e, 0x7, 0x1b95}, {0xc47, 0x5, 0x7fffffff, 0x7, 0x7}, {0x8, 0x4000, 0x1, 0x30, 0x8, 0xb8}, {0xc591, 0x9a, 0x6, 0x2, 0x6, 0xebf0}, {0xe5b4, 0x5, 0x10000, 0xd, 0x599, 0x7}, {0x6, 0xc, 0x41d, 0x5, 0xa, 0x300000}, {0x80000001, 0x100, 0x6, 0x101, 0x0, 0x332b}, {0xfffffffb, 0x0, 0x200, 0x5, 0x0, 0x3}, {0x10001, 0x4, 0x10000, 0x6, 0x1, 0x9}, {0x8, 0x5, 0x81, 0xfffffffd, 0x4}, {0x0, 0x8, 0x9, 0x5, 0x3, 0x9a10}, {0xfff, 0x5, 0x2, 0xc, 0xfffffff4, 0x7}, {0x1, 0x46, 0xff, 0x5, 0x3f1, 0xa}, {0x200, 0x101, 0x9, 0x7, 0x7, 0x7}, {0x6, 0x0, 0x450, 0xc1, 0x5, 0xfffffe00}, {0x9, 0xffffffff, 0x5, 0x2, 0x80, 0x7}, {0x4, 0x8, 0x4, 0xffffffff, 0xfffffff7, 0x40}, {0xbb5, 0x7fffffff, 0x1, 0xfffffffe, 0x3, 0x80000000}, {0x80, 0x0, 0x6, 0xf1, 0x35, 0xffff}, {0x920, 0xfffffff8, 0x0, 0x5, 0xf72, 0x3}, {0x7fffffff, 0x92, 0x80, 0x65bb, 0x9, 0x2}, {0x3, 0xf4b5, 0xffff, 0x4b746fe3, 0x6}, {0xb2, 0x6, 0x10, 0x8f, 0x80000001, 0x3}, {0x0, 0xfffffffd, 0xe95, 0x6, 0x4676850c, 0xc61}, {0x3, 0x3, 0x0, 0x80000001, 0x2000000, 0x6}, {0x5, 0x8001, 0x15240000, 0x2000400, 0x4, 0xffffffff}, {0x3, 0x100, 0x7, 0x400, 0x2, 0x5}, {0x9, 0x7, 0x5, 0xac, 0x77bd5fbe, 0x3c}, {0xffff, 0x6, 0x0, 0x1}, {0x0, 0x4, 0xffffffff, 0x0, 0xb08e, 0x3}, {0x9, 0x8, 0x5, 0x3ff, 0x8fa, 0xc6}, {0x4, 0x3129, 0x6, 0x6, 0x5d, 0x3}, {0x7, 0x1, 0x401, 0x2, 0x9, 0x7bb}, {0x6, 0x10000, 0x9, 0x9, 0x9fb3, 0x3}, {0x2, 0x1, 0x7, 0x6, 0xce, 0xa76}, {0x2, 0x8, 0x13, 0xfd, 0x3, 0x3}, {0x87f, 0x568, 0xcd7, 0x7, 0x9, 0x8}, {0x9, 0x40, 0xfff, 0x3, 0x3, 0x7}], [{0x2}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4}, {0x4, 0x455937eba759e046}, {0x2}, {0xe7f6b4289705ce63, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x3}, {0x2, 0x3c52095f04389300}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3}, {0xe4346b31a0eb16c8}, {}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4d90608cd27810f7, 0x1}, {}, {0x5, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x4}, {0x5}, {0x2}, {0x4}, {0x5, 0x1}, {0x5}, {0x3}, {0x2}, {0x5}, {}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x3}, {0x4}, {}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x8}, {}, {0x4, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x36b9cbf96ee3bb06}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xb0, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0xb9, 0x6, "64ac3c92466f3cdd0292cac510f847ae3d23b38d77ab9103dfc46c9c78dad959aa3446ceba04a226b37b117e2aa1a975199a1a4733ae07d5889ae8deef7db66d37c5d8beb38cbb5ffa32c69266454cafcd1c45ae6af5e6c3758808e96d0418714fb8c5ef4344ba959fa44cf48fa5ff4a58ffc4075e0f7a30cab374b79c752271ec476e43556e1c63fe104c51466504ca54f1701708b1d9616c93d781178dca90516ab2beadfa71ecae4cd68f448edce20deb17a236"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x7c, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x5, 0x200, 0x7}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1a, 0x76, 0x1, 0x9, 0x2}, 0x25}}]}, {0x15, 0x6, "b84075b0b6b1d31e8a60f41a9ce45945ec"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x108, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0xca, 0x6, "4734b69ad4b654cc7bc5bcd6c1879a92072b9beb5f94424552cd1e1b2b8cb17065c27b8b86374e369ce5750ab4907270a0aaf33000368bc9902d9b065875438cbaf08b6f2b6faa2583b0e2e4976576ae50d2fad2b195b8da0857975bd0dbc07466e403e14176f8d72eeed51a51ae5efbbb91311cfa2624112f2f6c5be995842880caba8ab724458d9ddc4459dd91dc58f0adc367cbd45de0938d8a1f68a45669ec7e0d8be7281fe20f577b0702b106990860565dda5ccfa43ceaefa1ca5ef8a16754e932ac95"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x11e8, 0x5, 0x0, 0x0, {{0xb}, {0x11b4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffff8, 0x9236, 0x7c7, 0x1, 0x80000001, 0x10000, 0x2, 0x7, 0x7047facb, 0xffff, 0x462, 0x2, 0x92, 0x2, 0xfffffff6, 0xef4, 0xf, 0xa8, 0x9, 0x9, 0x40, 0x1, 0x40, 0x6, 0x10, 0x6, 0x4, 0xa902, 0x5, 0x7, 0x7, 0xc, 0x3, 0xc, 0xffffffc0, 0x6, 0x2, 0x6, 0x7, 0xf, 0xfffffffa, 0x2, 0x7, 0x200, 0x48c, 0x5, 0x1, 0x5, 0x0, 0x5, 0x10000, 0x6, 0x10000000, 0x8000, 0x0, 0xffffff36, 0xa, 0x6, 0x4, 0x1, 0x800, 0x7, 0x6, 0x3, 0x4, 0x5, 0x8, 0x3ff, 0xadc9, 0x6, 0x8, 0xfffff337, 0x0, 0x81, 0x3, 0x7, 0x2, 0xfffffffa, 0x9, 0x8b, 0x6, 0x0, 0x0, 0x401, 0xfffffc01, 0x6, 0x7, 0x5b, 0x25f7, 0x0, 0x3ff, 0x4, 0x8, 0x0, 0x80000001, 0x8, 0x2, 0x7fffffff, 0x2, 0x66cf, 0x4, 0x8, 0x9, 0x3, 0x76a, 0xc, 0xe8, 0x3, 0xcaa, 0x6, 0xd, 0x4, 0x6, 0x1e, 0x4, 0x7, 0x7, 0x7, 0x10000, 0x3, 0x101, 0x0, 0x1, 0x1, 0x1, 0x5845, 0x205d, 0x5, 0x9, 0xfff, 0x24000, 0x4, 0x8, 0x0, 0x5, 0x3, 0x6, 0xe, 0x6, 0xfffffff7, 0x9, 0x7, 0x8000, 0x4, 0x3ff, 0x8, 0x8, 0x0, 0x6, 0x4, 0x28a552c7, 0x7eaa94cb, 0x7, 0x4, 0x3a12, 0x1, 0x10000, 0x3, 0xe9, 0xe, 0xffffffff, 0x8, 0x9, 0xf877, 0x1, 0x4, 0x10, 0x0, 0x3, 0x7fffffff, 0xfffffffa, 0x7, 0x8, 0x7, 0x80, 0x7, 0x7dd9, 0xffffff7f, 0x8, 0x5, 0x2, 0x8, 0x5, 0x3ff, 0xe026, 0x80000000, 0x3, 0x4, 0x7fff, 0x4, 0x2, 0x5, 0xfff, 0x9, 0x40, 0xfffffffd, 0x1, 0x80000001, 0xfffffffc, 0x7, 0x7, 0x80000000, 0x80, 0x7, 0x7, 0x9, 0x1, 0x1ff, 0xfff, 0x6, 0x3000, 0xfffffff9, 0x1ad5, 0x80000000, 0x81, 0x0, 0x9, 0x80000001, 0x8, 0x7, 0x0, 0x35, 0xe, 0xd, 0xde2f, 0xf5c, 0x80000001, 0x1, 0x9, 0x3800, 0x8, 0x7, 0x0, 0x7e4c, 0x3ff, 0x3, 0x4, 0x7, 0x8, 0x8, 0xffffff66, 0x100, 0x5, 0xd69, 0xa7, 0x0, 0x3, 0x10000, 0xff, 0xfffffffa, 0xb76, 0x10000, 0x6, 0xfffffffa, 0x1, 0x9]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x5, 0x57, 0x1, {0x97, 0x0, 0x7e, 0x3, 0xfff8}, {0x2, 0x2, 0x8001, 0x1, 0x8, 0x101}, 0xa1b, 0x5b, 0xfc}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xcbc, 0x75, 0x3, 0x0, 0x5cd, 0xaa2, 0x3ff, 0xe, 0x0, 0x7, 0x6, 0xfffffffe, 0x2, 0xa56, 0xffffff81, 0x7, 0xda, 0x1000, 0x7ff, 0xff, 0x2, 0x8001, 0x4, 0x0, 0x7, 0x60, 0x10001, 0xeedf, 0x80, 0xe3, 0x3c, 0x0, 0x40, 0x7, 0x7fff, 0x7f, 0x3, 0xfffffffb, 0xa, 0x64, 0x7, 0x6, 0xe, 0x3, 0x376f8623, 0x4796, 0x3, 0x1, 0x1, 0x5, 0x8, 0x7, 0x0, 0x80000001, 0x6, 0xe, 0x7fff, 0x2, 0x79, 0xb08, 0xb, 0x1, 0x8, 0x7, 0x7, 0x4, 0x0, 0x7f, 0x0, 0x9, 0x86e, 0x401, 0xffffffff, 0x7c, 0x1000, 0x5, 0x4, 0x0, 0x2, 0x80, 0xd, 0x90, 0x20914, 0x7fff, 0xaa, 0x2, 0x80, 0xb, 0x4, 0x6, 0x0, 0x9, 0x7f, 0xfbd3, 0x7, 0x7, 0x2, 0x4, 0x7, 0x9, 0x5, 0x8160, 0x5, 0xff, 0x9, 0x400, 0x8, 0x9, 0x9, 0x9, 0x838, 0x1, 0xe9, 0x2, 0x1, 0x1, 0x47ae, 0x9, 0xfffffe00, 0x8c, 0x79, 0x9, 0x10, 0x6, 0x5, 0x9, 0x4, 0x10001, 0x4, 0x541, 0x7fff, 0x6, 0x7, 0x9, 0x200, 0xff, 0x9, 0xfffffffd, 0x0, 0x40, 0xfffffffe, 0x3, 0x80, 0xfffffffa, 0x9, 0x5, 0x3, 0x80000001, 0x3ff, 0x6, 0x84b, 0x81, 0x3, 0x1cad, 0x80000001, 0x8711, 0x43, 0x1, 0xfffffffa, 0x7, 0xfff, 0x2, 0x3, 0x8, 0x6, 0x200, 0x3, 0x8, 0x9, 0xfffffffc, 0x6, 0x544, 0x8, 0x1, 0x2, 0x8001, 0x3, 0x4, 0x2, 0x3, 0x4, 0x5, 0x6f2, 0x4, 0xfbda, 0x7, 0xffffff80, 0xe20, 0x4, 0x10, 0x2, 0x3, 0x8, 0x0, 0x791b, 0xc188, 0xff, 0x0, 0x7, 0x2, 0x0, 0xffff, 0x2, 0x7, 0x1, 0x7ff, 0x2, 0x65, 0x0, 0x3, 0x8, 0xd0a2, 0x3, 0x10000, 0x1, 0x1, 0x3, 0x4, 0x71, 0x5, 0x800, 0xb6f, 0x46, 0xd6b, 0x6, 0xfffffffb, 0x6, 0x9, 0x3, 0x5, 0x3ff, 0x9, 0xb4, 0x0, 0x38, 0x1, 0x0, 0x10001, 0x6, 0x8001, 0xc5, 0x6, 0x1, 0x4, 0xffffdf4e, 0x53, 0x100, 0x401, 0x2696, 0x4, 0x7, 0x0, 0x0, 0x2, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xffffffffffffffff, 0x39c0a34, 0x3, 0x3, {0x2, 0x2, 0x7, 0x4, 0x685, 0x1}, {0x6, 0x2, 0x3, 0x3, 0xc93d, 0x2}, 0xef, 0x4, 0x24}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x2, 0x3, 0x1, {0x5, 0x0, 0x0, 0x9, 0x6, 0x6}, {0x3, 0x0, 0x4, 0xa, 0x4, 0x5c3b}, 0xf, 0x393, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffeffffff9, 0x5, 0x8, 0x5, {0x4b, 0x1, 0x4e, 0x9, 0x9, 0xe8a}, {0x3, 0x1, 0x9, 0x1, 0x3, 0x7}, 0x8, 0x5, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0x0, 0x0, 0xe47c, 0xe4, 0x10, 0xb, 0x95fd, 0x7, 0x6, 0x5, 0x5, 0xffffffff, 0x8dd, 0x9, 0x1, 0x1, 0x0, 0x3, 0x5, 0xa, 0x5, 0x3, 0x9, 0x4, 0xac9, 0x80000001, 0x7f, 0x9, 0x0, 0xffffffff, 0x6, 0x1, 0x8, 0xc29, 0xff, 0x80000000, 0x40, 0xfc7, 0x6, 0x40fd, 0x400, 0x9, 0x8, 0xeb64, 0x64bb, 0x34, 0x3, 0x4, 0x9, 0x7ff, 0x5, 0x8, 0x75435372, 0x1000, 0x10001, 0x6, 0x4, 0x2, 0x5, 0x1, 0x1, 0xffffff3c, 0x3ff, 0x3, 0x0, 0x8, 0x8, 0x2, 0x5, 0x4, 0x4, 0xe, 0x4, 0x7fffffff, 0x1, 0x6, 0x40, 0x1, 0x6, 0xff, 0x5, 0x931b, 0xe, 0x0, 0x3ff, 0x4, 0x7, 0xfffffffd, 0x0, 0xfcc7, 0xfffffffe, 0xc7, 0x1000, 0x3, 0x7019, 0x5, 0xf16e, 0x6, 0x3, 0x7fffffff, 0x4, 0x9, 0xf3ae, 0x81, 0x200, 0x9, 0x8702, 0x5, 0x3, 0x7, 0x81, 0x0, 0x4, 0x2, 0x5, 0x7, 0x6, 0x0, 0x7, 0xffff, 0x81, 0x7, 0x5f, 0x3, 0x1, 0x3, 0x2, 0xa, 0x7fff, 0x1, 0x3, 0x8, 0x10, 0x8, 0x5, 0x8, 0x10001, 0x4, 0x3, 0x6b, 0x4, 0x101, 0x6, 0x1ff, 0x8, 0x3, 0x1, 0x2, 0xffff, 0x3, 0x5, 0x2af7, 0x8, 0x7ff, 0x1, 0x6, 0x5, 0x6, 0x6f, 0x2, 0x400, 0x1, 0x3, 0x6, 0x2, 0x3, 0x5, 0x2e1b, 0xffffff21, 0x8, 0x1, 0x12, 0x9, 0x7, 0x100, 0x8, 0x1, 0x8, 0x9, 0x0, 0x8, 0x1, 0xc, 0x101, 0x6, 0x4, 0x5, 0x1d, 0x6, 0x5, 0x9, 0xd, 0x1, 0xfffffffe, 0x5, 0x7fff, 0x7, 0x7d76c0a1, 0x8, 0x8, 0x4, 0x8, 0x5, 0x89, 0xa, 0x1, 0x0, 0x2, 0x9, 0x5, 0x8001, 0x5, 0xc1, 0xf, 0x6, 0x5, 0x9, 0x4, 0x7f, 0x7fffffff, 0x8001, 0x6, 0x5, 0x2, 0xb, 0x9, 0x1, 0x7d, 0x6, 0x9, 0x9, 0x7ff, 0x9, 0x1ff, 0xe12, 0x2, 0x3ff80, 0xf, 0x5, 0x9, 0x1, 0x9, 0xffffffbd, 0x1, 0x1, 0x6, 0x5, 0x9, 0x5, 0xfffffff8, 0xffffff4f, 0x2, 0x6, 0xc0000]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xf59}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x400}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x4, 0xff, 0x2, 0x10, 0xffffff80, 0x2, 0x4, 0x5, 0x80000000, 0x7, 0xc5, 0x1, 0x5, 0x3ff, 0x0, 0x0, 0x9, 0x7fffffff, 0x81, 0x9, 0x3, 0x800, 0xfff, 0x7, 0x14, 0x9, 0x4, 0x8, 0x80, 0xe, 0x9, 0xd8c, 0x3, 0x3ff, 0x0, 0x10001, 0x5, 0x1, 0x7, 0x7, 0x2, 0xf372, 0x6, 0x10000, 0xfbd, 0xc, 0x9, 0x9, 0xff800000, 0x8001, 0x7fff, 0x7ff, 0x7, 0x8, 0x200, 0x3, 0x101, 0x3ff, 0x0, 0x0, 0xfffff13f, 0x8, 0x2, 0x1200000, 0x8, 0x7f, 0x5, 0x2, 0x3, 0x4, 0xb, 0x8000, 0x2, 0x3, 0x0, 0x3, 0x2, 0x2, 0xe169, 0x7fff, 0xe, 0xfff, 0x10001, 0x1, 0x800, 0xfffffffe, 0x76e, 0x2, 0x101, 0xff, 0xfffffffc, 0x800, 0x7, 0x780, 0x8, 0xee, 0x4, 0x2, 0x5, 0x4, 0xa, 0x0, 0x1, 0x3, 0x6, 0xc5, 0xd3ee, 0x7, 0x7, 0xa7, 0xe1, 0xffff, 0x800, 0x4, 0x8, 0x5, 0x8, 0x7fff, 0x1, 0x7ff, 0x0, 0x84, 0x2, 0x5, 0x94, 0x0, 0xffff, 0x80000001, 0x800, 0x9, 0x2, 0x3, 0x9, 0x8, 0xf82a, 0x0, 0xfffff465, 0x8, 0xf6e, 0x9, 0x0, 0x5, 0xffffffff, 0x200, 0x1, 0x6, 0x8de3, 0x6, 0x7fffffff, 0xffffc187, 0x4, 0x6, 0x43cc, 0xff, 0x43e9da07, 0x0, 0x4, 0xd23, 0x0, 0x80000000, 0xfffffff8, 0x10000, 0x8, 0x1000000, 0x40, 0xffff0001, 0x2c, 0x3c, 0x1, 0x7b21, 0x4, 0x6, 0x3, 0x0, 0xffff8001, 0x4, 0x1, 0x6, 0xdee, 0x0, 0x1, 0x7, 0xd, 0x40, 0x5, 0x3, 0x6, 0xfa2, 0x3, 0x4, 0x8000, 0x9, 0x6, 0x0, 0x3, 0x200, 0xd87, 0x0, 0x5, 0xfffffff8, 0x1, 0x1, 0xa, 0x8, 0x1, 0x16e, 0x9, 0x3, 0x0, 0x1432, 0x200, 0xfff, 0x1, 0x34, 0x9, 0xffff0001, 0x7fff, 0x1, 0x8, 0x8, 0x7, 0x2, 0x2, 0x0, 0x12, 0x9, 0x8, 0x3ff, 0x8, 0x10001, 0x1, 0x7ff, 0x101, 0x4, 0xc50, 0x3, 0x29d5, 0x2, 0x4, 0x55e, 0x4, 0x0, 0xd, 0x400, 0x4, 0xbe, 0x8, 0x0, 0x4, 0x7, 0x1, 0x470c, 0x7f, 0x7, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9e, 0x0, 0x0, 0x81, 0x0, {0x9, 0x1, 0x1, 0x5, 0x3, 0x7ff}, {0x6, 0x2, 0x2, 0x7, 0xaec, 0x101}, 0xf0af, 0x0, 0x81}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x19e4}]]}, {0xc, 0x6, "4082de58a073f8ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x100, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0xd7, 0x6, "909883b7708633c2c26a6bc58f412bab2569c60f4df341b109de49a9447d24361324bc0ed9f2497e4c7d32d56ca300da3bbf2926424fa44ab31e2ea9e0dffa96f550a845b23a72be985bfc1f9b921d78f7f982b2966070090eca877851baec6d2a0c5a27d8648a34e571bd299b6b9b117c7b8c387c6af5e1a7c1be0a2cdca78981746df87fa8b09d83b3293f99ba42d9194f0bf4425738839951de958d2071e0db07c98bb93dfd33d51063a100e20f97f654d175ecdbb964cff308351a6c88cd6dbf080a7a4cd23ef257ed659dc85ed771b571"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xb8, 0xe, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xd}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1a}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x64, 0x6, "5837761c4337d175cde096e91e1a0f269288bf3d1e3d52eb5f4f1f23d62dd7c0b9060efb76ed43e1b2f3e1e6d9f6a615a98239c2935ce110fccb8322d75ed5e14512781fbfbf50d9b253708f5a2513da7ffa3a36e5a765c09a2067f7468018c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xec, 0x1e, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, {0x88, 0x6, "4fe10d4ff0cad82724a25b540a1b892da191a1e32eccfd46dae1aaece29483dc23d7c2d844e90a06b4c7ee42fb01a3595489e09e68bd34e4a6e44ca0dfa10029021fd71b3ddd3d211f32fb1dd3fc712d640bcb13b9a95c7482bd832460a11537410508b6c03fa86e6f67040214241209ea5745af6c9c723130685afb200b2976c2cef86a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x400}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}]}]}}]}, 0x6224}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40041) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x1000000, 0x0, 0xc7) 3.105126636s ago: executing program 1 (id=2642): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000002c0)={0xf, 0x400011, 0x17, 0x55, 0x7, 0x2, 0x3, 0x16, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000300)=0x8001, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) socket(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001100)=ANY=[@ANYBLOB='L\x00@\x00', @ANYRES16=r5, @ANYBLOB="010004000000fedbdf", @ANYRES32=0x0, @ANYBLOB="0c00990008000000fdffffff24000e001c04fc00380075180000000000000c00176c173aa1c5d7f7349d6e1638"], 0x4c}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x230b, 0x400000000000005}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x225a, &(0x7f0000000640)={0x0, 0x79a9, 0x20000, 0x1, 0x5000033f}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0x5, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0000}}, 0x7}, &(0x7f0000000200)=0x90) 2.999812032s ago: executing program 0 (id=2644): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000811000000020000000000000a193020000736d35ed9015a322883e1f935a000000b644206c0ae52f172f39f3e6a4f13008dc8204091972493dde534fab8bb168"], 0x1c}}, 0x48804) syz_open_dev$sndctrl(&(0x7f0000000100), 0x8000000000000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000003a40)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x4) semget(0x3, 0x1, 0x206) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x51, 0xb, @buffer={0x0, 0x0, &(0x7f00000004c0)=""/211}, &(0x7f0000000240)="8a8d7acda0", 0x0, 0xfffffff9, 0x0, 0x8, 0x0}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='[@%\'\x00', &(0x7f0000000400)='/dev/dri/card#\x00', &(0x7f0000000440)='/dev/snd/controlC#\x00']}, &(0x7f00000005c0)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='/dev/dri/card#\x00']}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 2.827340074s ago: executing program 0 (id=2645): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2f}}, 0xfffffff7, 0x200, 0x4, 0x126, 0xbc0}, &(0x7f0000000480)=0x98) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={r4, 0xc1e}, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 2.782277146s ago: executing program 1 (id=2646): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f00005a6000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 2.737334182s ago: executing program 7 (id=2647): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000002c0)={0xf, 0x400011, 0x17, 0x55, 0x7, 0x2, 0x3, 0x16, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000300)=0x8001, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) socket(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001100)=ANY=[@ANYBLOB='L\x00@\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c00990008000000fdffffff24000e001c04fc00380075180000000000000c00176c173aa1c5d7f7349d6e1638"], 0x4c}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x230b, 0x400000000000005}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x225a, &(0x7f0000000640)={0x0, 0x79a9, 0x20000, 0x1, 0x5000033f}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0x5, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0000}}, 0x7}, &(0x7f0000000200)=0x90) 2.003432892s ago: executing program 7 (id=2648): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 1.889769659s ago: executing program 5 (id=2649): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x20002) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200407bd, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x4, 0x8000, 0x6}, &(0x7f0000000300)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 1.725958343s ago: executing program 1 (id=2650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r5, @ANYBLOB="080004"], 0x4c}}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000240)={@mcast2, r5}, 0x14) close(r1) 1.587539022s ago: executing program 1 (id=2651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, r0, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) 1.454451882s ago: executing program 1 (id=2652): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904"], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x1f}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) lseek(r7, 0x10000000005, 0x0) 1.376332127s ago: executing program 0 (id=2653): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x104, &(0x7f00000007c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x73, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1=0xac1414aa}, {0x0, 0x0, 0xe2, 0x0, @opaque="41a53bc57d107c6ff061f03cf6bb904c78ef576fdf1a82582813d34772ce2518f6e064561bc8e7c4c3b88889ba6f28ff51a9fa5b94875a7f49e85b4bac7040c621fa1ab002461bb46e93c9f5664d16a8691bdff00d19f7d7fa1a06180e28c9c4ba89da8d2b37f8b0922eaf0298e2395e4b02c08e80b8dfbdfaf63d3c0cd02bc258452710b9ef5347ac7329042cbf02c5878b573d4abaeb9da781b320fd79d482302a8a531644f0d27c0bef42ed5444393fcb1886713b667dc79bd243ea971d9779b208dea2b767d07df0f49a807f9e23d1a8affe410311d17962"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) 1.3011232s ago: executing program 2 (id=2654): dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_setup(0x13b2, 0x0) tkill(0x0, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) getpid() syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000003280)={0x6c, 0xe, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8085}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x1000, 0xffffffff, {}, [@IFLA_OPERSTATE={0x5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32, @ANYBLOB="0800040000000000080003"], 0x2c}}, 0x0) 962.211354ms ago: executing program 0 (id=2655): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000811000000020000000000000a193020000736d35ed9015a322883e1f935a000000b644206c0ae52f172f39f3e6a4f13008dc8204091972493dde534fab8bb168"], 0x1c}}, 0x48804) syz_open_dev$sndctrl(&(0x7f0000000100), 0x8000000000000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000003a40)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x4) semget(0x3, 0x1, 0x206) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x51, 0xb, @buffer={0x0, 0x0, &(0x7f00000004c0)=""/211}, &(0x7f0000000240)="8a8d7acda0", 0x0, 0xfffffff9, 0x0, 0x8, 0x0}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='[@%\'\x00', &(0x7f0000000400)='/dev/dri/card#\x00', &(0x7f0000000440)='/dev/snd/controlC#\x00']}, &(0x7f00000005c0)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='/dev/dri/card#\x00']}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 834.258248ms ago: executing program 0 (id=2656): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x5, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8004, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000100)=0xffffffff, 0x4) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0xfffffffffffffd82) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0xfffffffffffffd82) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x8012, 0xffffffffffffffff, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x8012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000000c0)=0x79bc) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x81) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x81) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 380.279487ms ago: executing program 5 (id=2657): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000002c0)={0xf, 0x400011, 0x17, 0x55, 0x7, 0x2, 0x3, 0x16, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000300)=0x8001, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) socket(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001100)=ANY=[@ANYBLOB='L\x00@\x00', @ANYRES16=r5, @ANYBLOB="010004000000fedbdf", @ANYRES32=0x0, @ANYBLOB="0c00990008000000fdffffff24000e001c04fc00380075180000000000000c00176c173aa1c5d7f7349d6e1638"], 0x4c}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x230b, 0x400000000000005}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x225a, &(0x7f0000000640)={0x0, 0x79a9, 0x20000, 0x1, 0x5000033f}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0x5, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0000}}, 0x7}, &(0x7f0000000200)=0x90) 221.253069ms ago: executing program 0 (id=2658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0xfffffffe}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x2000004) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r7 = socket$netlink(0x10, 0x3, 0x9) r8 = dup(r7) r9 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r9, 0x200004) sendfile(r8, r9, 0x0, 0x80001d00c0d1) 0s ago: executing program 5 (id=2659): openat$mixer(0xffffffffffffff9c, 0x0, 0x20840, 0x0) socket$phonet(0x23, 0x2, 0x1) openat$kvm(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$MSR(0x0, 0x547, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x10000, 0x0, 0x36}, &(0x7f0000000180)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): t Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input80 [ 767.041427][ T93] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 767.081424][ T5913] usb 1-1: USB disconnect, device number 37 [ 767.101290][T18851] fido_id[18851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 767.118154][ T93] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 767.160821][ T93] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 767.218890][ T93] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 767.258687][ T93] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 767.314459][T18867] FAULT_INJECTION: forcing a failure. [ 767.314459][T18867] name failslab, interval 1, probability 0, space 0, times 0 [ 767.327232][T18867] CPU: 0 UID: 0 PID: 18867 Comm: syz.1.2003 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 767.327256][T18867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 767.327266][T18867] Call Trace: [ 767.327271][T18867] [ 767.327278][T18867] dump_stack_lvl+0x16c/0x1f0 [ 767.327300][T18867] should_fail_ex+0x512/0x640 [ 767.327318][T18867] ? __kvmalloc_node_noprof+0x124/0x620 [ 767.327336][T18867] should_failslab+0xc2/0x120 [ 767.327356][T18867] __kvmalloc_node_noprof+0x137/0x620 [ 767.327374][T18867] ? alloc_netdev_mqs+0xd2/0x1500 [ 767.327396][T18867] ? __pfx_ax_setup+0x10/0x10 [ 767.327416][T18867] ? alloc_netdev_mqs+0xd2/0x1500 [ 767.327431][T18867] alloc_netdev_mqs+0xd2/0x1500 [ 767.327448][T18867] ? security_capable+0x7e/0x260 [ 767.327470][T18867] mkiss_open+0xb4/0x9a0 [ 767.327492][T18867] ? __pfx_mkiss_open+0x10/0x10 [ 767.327513][T18867] tty_ldisc_open+0x9c/0x120 [ 767.327539][T18867] tty_set_ldisc+0x32b/0x780 [ 767.327568][T18867] tty_ioctl+0xc2e/0x1680 [ 767.327586][T18867] ? __pfx_tty_ioctl+0x10/0x10 [ 767.327604][T18867] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 767.327636][T18867] ? hook_file_ioctl_common+0x145/0x410 [ 767.327661][T18867] ? selinux_file_ioctl+0x180/0x270 [ 767.327683][T18867] ? selinux_file_ioctl+0xb4/0x270 [ 767.327708][T18867] ? __pfx_tty_ioctl+0x10/0x10 [ 767.327727][T18867] __x64_sys_ioctl+0x18b/0x210 [ 767.327756][T18867] do_syscall_64+0xcd/0x4c0 [ 767.327776][T18867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.327794][T18867] RIP: 0033:0x7fb40198ebe9 [ 767.327808][T18867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.327824][T18867] RSP: 002b:00007fb40281c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.327841][T18867] RAX: ffffffffffffffda RBX: 00007fb401bb6180 RCX: 00007fb40198ebe9 [ 767.327852][T18867] RDX: 0000200000000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 767.327862][T18867] RBP: 00007fb40281c090 R08: 0000000000000000 R09: 0000000000000000 [ 767.327872][T18867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.327882][T18867] R13: 00007fb401bb6218 R14: 00007fb401bb6180 R15: 00007fff9bf15998 [ 767.327905][T18867] [ 767.556975][ C0] vkms_vblank_simulate: vblank timer overrun [ 767.648402][ T93] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 767.663594][T18870] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2005'. [ 767.705073][ T5920] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 767.719956][ T93] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 767.765628][ T93] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 767.848060][ T93] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 767.940528][ T5920] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 767.984340][ T93] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 768.166018][ T1580] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 768.179035][ T93] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 768.197859][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.197935][ T93] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 768.217390][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.241056][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 768.261873][ T5920] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 768.310631][ T5920] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 768.324121][ T5920] usb 6-1: Manufacturer: syz [ 768.349743][ T5920] usb 6-1: config 0 descriptor?? [ 768.375133][ T1580] usb 1-1: Using ep0 maxpacket: 32 [ 768.383682][ T1580] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.418019][ T1580] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 768.427419][ T1580] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 768.447435][ T1580] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 768.460778][ T1580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.470966][ T1580] usb 1-1: Product: syz [ 768.479172][ T1580] usb 1-1: Manufacturer: syz [ 768.487984][ T1580] usb 1-1: SerialNumber: syz [ 768.504539][ T1580] cdc_ncm 1-1:1.0: skipping garbage [ 768.514229][ T1580] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 768.524403][ T1580] cdc_ncm 1-1:1.0: bind() failure [ 768.946789][T14563] usb 7-1: USB disconnect, device number 4 [ 769.346489][ T5920] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 769.396194][T18882] bond1: entered promiscuous mode [ 769.401235][T18882] bond1: entered allmulticast mode [ 769.406627][T18882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.488086][ T5920] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 769.593114][T18882] bond1 (unregistering): Released all slaves [ 769.675260][T18918] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2012'. [ 769.688504][ T5855] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 769.696366][ T5855] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 769.713438][ T1580] usb 1-1: USB disconnect, device number 38 [ 769.725912][ T5920] usb 6-1: USB disconnect, device number 10 [ 769.847757][T19010] FAULT_INJECTION: forcing a failure. [ 769.847757][T19010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.920895][T19010] CPU: 1 UID: 0 PID: 19010 Comm: syz.2.2014 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 769.920920][T19010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 769.920931][T19010] Call Trace: [ 769.920936][T19010] [ 769.920942][T19010] dump_stack_lvl+0x16c/0x1f0 [ 769.920965][T19010] should_fail_ex+0x512/0x640 [ 769.920987][T19010] _copy_from_user+0x2e/0xd0 [ 769.921014][T19010] input_event_from_user+0x133/0x3b0 [ 769.921039][T19010] ? __pfx_input_event_from_user+0x10/0x10 [ 769.921063][T19010] ? __pfx___might_resched+0x10/0x10 [ 769.921084][T19010] ? input_inject_event+0x1c0/0x3b0 [ 769.921111][T19010] evdev_write+0x37b/0x750 [ 769.921140][T19010] ? __pfx_evdev_write+0x10/0x10 [ 769.921166][T19010] ? bpf_lsm_file_permission+0x9/0x10 [ 769.921187][T19010] ? security_file_permission+0x71/0x210 [ 769.921214][T19010] ? rw_verify_area+0xcf/0x6c0 [ 769.921240][T19010] ? __pfx_evdev_write+0x10/0x10 [ 769.921262][T19010] vfs_write+0x29d/0x11d0 [ 769.921283][T19010] ? __pfx_vfs_write+0x10/0x10 [ 769.921297][T19010] ? find_held_lock+0x2b/0x80 [ 769.921319][T19010] ? __fget_files+0x204/0x3c0 [ 769.921340][T19010] ? __fget_files+0x20e/0x3c0 [ 769.921356][T19010] ? __x64_sys_openat+0x100/0x210 [ 769.921384][T19010] ksys_write+0x1f8/0x250 [ 769.921400][T19010] ? __pfx_ksys_write+0x10/0x10 [ 769.921422][T19010] do_syscall_64+0xcd/0x4c0 [ 769.921442][T19010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.921460][T19010] RIP: 0033:0x7ff3a898ebe9 [ 769.921474][T19010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.921491][T19010] RSP: 002b:00007ff3a988d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 769.921510][T19010] RAX: ffffffffffffffda RBX: 00007ff3a8bb6090 RCX: 00007ff3a898ebe9 [ 769.921521][T19010] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 769.921532][T19010] RBP: 00007ff3a988d090 R08: 0000000000000000 R09: 0000000000000000 [ 769.921543][T19010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.921553][T19010] R13: 00007ff3a8bb6128 R14: 00007ff3a8bb6090 R15: 00007fffc5f5e4b8 [ 769.921578][T19010] [ 770.163987][T19016] fido_id[19016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 770.190239][T18998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2013'. [ 770.649012][T19038] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2016'. [ 771.461312][ T30] audit: type=1400 audit(1755202326.125:758): avc: denied { bind } for pid=19026 comm="syz.5.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 773.755858][ T5855] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 773.764251][ T5855] Bluetooth: hci5: Injecting HCI hardware error event [ 773.784530][ T5851] Bluetooth: hci5: hardware error 0x00 [ 774.456522][T19107] mkiss: ax0: crc mode is auto. [ 774.467649][T19107] dlm: non-version read from control device 4096 [ 774.615190][ T5920] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 774.624859][T14563] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 774.773809][T19127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 774.825605][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 774.926341][T14563] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 774.938393][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.974874][T14563] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.988444][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 775.011757][T14563] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.035590][T19127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2030'. [ 775.129137][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 775.151366][T14563] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 775.174907][ T5920] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 775.184558][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 775.208504][T14563] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 775.217656][T14563] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 775.238531][T14563] usb 7-1: Manufacturer: syz [ 775.340160][T14563] usb 7-1: config 0 descriptor?? [ 775.366559][ T5920] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 775.515547][ T5920] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 775.535961][ T5920] usb 2-1: Manufacturer: syz [ 775.611577][ T5920] usb 2-1: config 0 descriptor?? [ 775.795607][T14563] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 775.816443][T14563] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 776.079098][T14563] usb 7-1: USB disconnect, device number 5 [ 776.285565][T19166] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2032'. [ 776.482759][T19158] fido_id[19158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 776.554986][ T5851] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 776.676707][ T30] audit: type=1400 audit(1755202331.395:759): avc: denied { bind } for pid=19177 comm="syz.5.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 776.804949][ T30] audit: type=1400 audit(1755202331.395:760): avc: denied { write } for pid=19177 comm="syz.5.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 776.844960][ T30] audit: type=1400 audit(1755202331.415:761): avc: denied { ioctl } for pid=19182 comm="syz.2.2034" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 776.998585][ T30] audit: type=1800 audit(1755202331.715:762): pid=19201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2038" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 777.040038][T19205] ptrace attach of "./syz-executor exec"[17746] was attempted by "./syz-executor exec"[19205] [ 777.056873][T19204] fuse: Unknown parameter 'fЦ▒╝E│j`оЦ0x0000000000000004' [ 777.066280][T19203] FAULT_INJECTION: forcing a failure. [ 777.066280][T19203] name failslab, interval 1, probability 0, space 0, times 0 [ 777.105166][T19203] CPU: 0 UID: 0 PID: 19203 Comm: syz.2.2037 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 777.105196][T19203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 777.105205][T19203] Call Trace: [ 777.105211][T19203] [ 777.105217][T19203] dump_stack_lvl+0x16c/0x1f0 [ 777.105240][T19203] should_fail_ex+0x512/0x640 [ 777.105258][T19203] ? __kmalloc_noprof+0xbf/0x510 [ 777.105283][T19203] ? ovl_fh_to_dentry+0x718/0xa70 [ 777.105300][T19203] should_failslab+0xc2/0x120 [ 777.105319][T19203] __kmalloc_noprof+0xd2/0x510 [ 777.105336][T19203] ? do_handle_open+0x545/0xc50 [ 777.105358][T19203] ovl_fh_to_dentry+0x718/0xa70 [ 777.105382][T19203] ? __pfx_ovl_fh_to_dentry+0x10/0x10 [ 777.105398][T19203] ? __kasan_kmalloc+0xaa/0xb0 [ 777.105413][T19203] ? __kmalloc_noprof+0x223/0x510 [ 777.105427][T19203] ? do_handle_open+0x545/0xc50 [ 777.105443][T19203] ? do_syscall_64+0xcd/0x4c0 [ 777.105458][T19203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.105482][T19203] exportfs_decode_fh_raw+0x167/0x7d0 [ 777.105500][T19203] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 777.105520][T19203] ? __pfx_ovl_fh_to_dentry+0x10/0x10 [ 777.105540][T19203] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 777.105589][T19203] do_handle_open+0x6e3/0xc50 [ 777.105608][T19203] ? __pfx_do_handle_open+0x10/0x10 [ 777.105632][T19203] ? ksys_write+0x1ac/0x250 [ 777.105657][T19203] ? do_syscall_64+0xcd/0x4c0 [ 777.105674][T19203] do_syscall_64+0xcd/0x4c0 [ 777.105692][T19203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.105709][T19203] RIP: 0033:0x7ff3a898ebe9 [ 777.105723][T19203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.105740][T19203] RSP: 002b:00007ff3a98ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 777.105757][T19203] RAX: ffffffffffffffda RBX: 00007ff3a8bb5fa0 RCX: 00007ff3a898ebe9 [ 777.105768][T19203] RDX: 0000000000830200 RSI: 00002000000001c0 RDI: 0000000000000003 [ 777.105778][T19203] RBP: 00007ff3a98ae090 R08: 0000000000000000 R09: 0000000000000000 [ 777.105788][T19203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.105798][T19203] R13: 00007ff3a8bb6038 R14: 00007ff3a8bb5fa0 R15: 00007fffc5f5e4b8 [ 777.105822][T19203] [ 777.105859][T19203] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-12) [ 777.475028][ T5961] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 777.545087][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2041'. [ 777.555037][T19225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2041'. [ 777.636552][ T5961] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.647204][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 777.795677][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 777.806837][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 777.817712][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.833188][ T5961] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 777.933478][T19230] o2cb: This node has not been configured. [ 777.939546][T19230] o2cb: Cluster check failed. Fix errors before retrying. [ 777.946733][T19230] (syz.0.2044,19230,1):user_dlm_register:674 ERROR: status = -22 [ 777.954850][T19230] (syz.0.2044,19230,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 777.973304][ T30] audit: type=1400 audit(1755202332.645:763): avc: denied { add_name } for pid=19226 comm="syz.0.2044" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 778.273095][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.281267][ T5961] usb 6-1: Product: syz [ 778.313364][ T5961] usb 6-1: Manufacturer: syz [ 778.434935][ T5961] usb 6-1: SerialNumber: syz [ 778.449342][ T5961] usb 6-1: config 0 descriptor?? [ 778.455878][ T30] audit: type=1400 audit(1755202332.645:764): avc: denied { create } for pid=19226 comm="syz.0.2044" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 778.479149][T19204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 778.517847][ T30] audit: type=1400 audit(1755202332.645:765): avc: denied { associate } for pid=19226 comm="syz.0.2044" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 778.578524][T19233] netlink: 'syz.2.2043': attribute type 1 has an invalid length. [ 778.704862][ T5920] rc_core: IR keymap rc-hauppauge not found [ 778.730126][ T5920] Registered IR keymap rc-empty [ 778.746686][T19239] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 778.765111][ T5961] rc_core: IR keymap rc-xbox-dvd not found [ 778.766306][T19239] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 778.797452][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 778.819450][ T5961] Registered IR keymap rc-empty [ 778.831811][ T5961] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 778.833314][T19233] gretap1: entered promiscuous mode [ 778.845037][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 778.863663][ T5961] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input83 [ 778.889105][ T5920] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 778.910786][T19233] bond2: (slave gretap1): making interface the new active one [ 778.962198][T19233] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 778.965248][ T5961] usb 6-1: USB disconnect, device number 11 [ 778.970853][ C0] xbox_remote 6-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 778.978992][T19239] macvlan2: entered promiscuous mode [ 778.986151][ T5920] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input84 [ 779.044885][T19239] macvlan2: entered allmulticast mode [ 779.066609][T19239] bond2: entered promiscuous mode [ 779.072314][T19239] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 779.143213][T19239] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 779.166742][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 779.192672][T19239] bond2: left promiscuous mode [ 779.206062][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 779.268683][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 779.333788][T19318] FAULT_INJECTION: forcing a failure. [ 779.333788][T19318] name failslab, interval 1, probability 0, space 0, times 0 [ 779.355180][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 779.355786][T19318] CPU: 1 UID: 0 PID: 19318 Comm: syz.6.2048 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 779.355809][T19318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 779.355818][T19318] Call Trace: [ 779.355824][T19318] [ 779.355831][T19318] dump_stack_lvl+0x16c/0x1f0 [ 779.355852][T19318] should_fail_ex+0x512/0x640 [ 779.355870][T19318] ? fs_reclaim_acquire+0xae/0x150 [ 779.355893][T19318] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 779.355915][T19318] should_failslab+0xc2/0x120 [ 779.355934][T19318] __kmalloc_noprof+0xd2/0x510 [ 779.355950][T19318] ? trace_kmalloc+0x2b/0xd0 [ 779.355967][T19318] ? __kmalloc_noprof+0x242/0x510 [ 779.355986][T19318] tomoyo_realpath_from_path+0xc2/0x6e0 [ 779.356011][T19318] ? tomoyo_fill_path_info+0x233/0x420 [ 779.356031][T19318] tomoyo_mount_acl+0x1ae/0x850 [ 779.356051][T19318] ? bpf_ksym_find+0x127/0x1c0 [ 779.356073][T19318] ? is_bpf_text_address+0x94/0x1a0 [ 779.356091][T19318] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 779.356110][T19318] ? __kernel_text_address+0xd/0x40 [ 779.356128][T19318] ? unwind_get_return_address+0x59/0xa0 [ 779.356154][T19318] ? arch_stack_walk+0xa6/0x100 [ 779.356195][T19318] ? tomoyo_domain+0xbb/0x150 [ 779.356209][T19318] ? tomoyo_profile+0x47/0x60 [ 779.356226][T19318] tomoyo_mount_permission+0x16d/0x420 [ 779.356247][T19318] ? tomoyo_mount_permission+0x14f/0x420 [ 779.356268][T19318] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 779.356303][T19318] security_sb_mount+0x9b/0x260 [ 779.356325][T19318] path_mount+0x15f/0x1fd0 [ 779.356351][T19318] ? __pfx_path_mount+0x10/0x10 [ 779.356372][T19318] ? kmem_cache_free+0x2d1/0x4d0 [ 779.356386][T19318] ? putname+0x154/0x1a0 [ 779.356410][T19318] ? putname+0x154/0x1a0 [ 779.356432][T19318] ? __x64_sys_mount+0x28d/0x310 [ 779.356450][T19318] __x64_sys_mount+0x28d/0x310 [ 779.356471][T19318] ? __pfx___x64_sys_mount+0x10/0x10 [ 779.356497][T19318] do_syscall_64+0xcd/0x4c0 [ 779.356516][T19318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.356532][T19318] RIP: 0033:0x7fa9ff38ebe9 [ 779.356546][T19318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.356561][T19318] RSP: 002b:00007faa0016a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 779.356577][T19318] RAX: ffffffffffffffda RBX: 00007fa9ff5b5fa0 RCX: 00007fa9ff38ebe9 [ 779.356587][T19318] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 779.356597][T19318] RBP: 00007faa0016a090 R08: 0000200000000180 R09: 0000000000000000 [ 779.356607][T19318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.356616][T19318] R13: 00007fa9ff5b6038 R14: 00007fa9ff5b5fa0 R15: 00007ffdb28e9568 [ 779.356638][T19318] [ 779.356645][T19318] ERROR: Out of memory at tomoyo_realpath_from_path. [ 779.477954][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 779.501346][T19319] input: syz1 as /devices/virtual/input/input85 [ 779.556339][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 779.750605][T19319] input: failed to attach handler leds to device input85, error: -6 [ 779.769981][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 779.796534][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 779.819042][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 779.839543][T19331] FAULT_INJECTION: forcing a failure. [ 779.839543][T19331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.853185][T19331] CPU: 1 UID: 0 PID: 19331 Comm: syz.2.2053 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 779.853210][T19331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 779.853222][T19331] Call Trace: [ 779.853228][T19331] [ 779.853235][T19331] dump_stack_lvl+0x16c/0x1f0 [ 779.853258][T19331] should_fail_ex+0x512/0x640 [ 779.853282][T19331] _copy_from_user+0x2e/0xd0 [ 779.853307][T19331] copy_msghdr_from_user+0x98/0x160 [ 779.853326][T19331] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 779.853348][T19331] ? __pfx__kstrtoull+0x10/0x10 [ 779.853379][T19331] ___sys_sendmsg+0xfe/0x1d0 [ 779.853397][T19331] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.853427][T19331] ? find_held_lock+0x2b/0x80 [ 779.853463][T19331] __sys_sendmmsg+0x200/0x420 [ 779.853482][T19331] ? __pfx___sys_sendmmsg+0x10/0x10 [ 779.853507][T19331] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 779.853537][T19331] ? fput+0x9b/0xd0 [ 779.853559][T19331] ? ksys_write+0x1ac/0x250 [ 779.853577][T19331] ? __pfx_ksys_write+0x10/0x10 [ 779.853600][T19331] __x64_sys_sendmmsg+0x9c/0x100 [ 779.853616][T19331] ? lockdep_hardirqs_on+0x7c/0x110 [ 779.853638][T19331] do_syscall_64+0xcd/0x4c0 [ 779.853658][T19331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.853676][T19331] RIP: 0033:0x7ff3a898ebe9 [ 779.853690][T19331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.853707][T19331] RSP: 002b:00007ff3a98ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 779.853723][T19331] RAX: ffffffffffffffda RBX: 00007ff3a8bb5fa0 RCX: 00007ff3a898ebe9 [ 779.853734][T19331] RDX: 0000000000000001 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 779.853745][T19331] RBP: 00007ff3a98ae090 R08: 0000000000000000 R09: 0000000000000000 [ 779.853756][T19331] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001 [ 779.853766][T19331] R13: 00007ff3a8bb6038 R14: 00007ff3a8bb5fa0 R15: 00007fffc5f5e4b8 [ 779.853789][T19331] [ 779.859058][ T5920] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 780.151091][ T5920] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 780.162699][ T5920] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 780.234924][ T5920] usb 2-1: USB disconnect, device number 53 [ 783.673962][ T30] audit: type=1400 audit(1755202338.345:766): avc: denied { write } for pid=19392 comm="syz.1.2065" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 783.728323][ T30] audit: type=1400 audit(1755202338.435:767): avc: denied { read } for pid=19386 comm="syz.6.2064" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 783.850783][T19406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2066'. [ 784.838149][ T30] audit: type=1326 audit(1755202339.555:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19386 comm="syz.6.2064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9ff38ebe9 code=0x0 [ 784.959760][T19412] fuse: Bad value for 'fd' [ 785.307759][T19431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.997117][T19444] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2069'. [ 786.560582][ T30] audit: type=1400 audit(1755202341.225:769): avc: denied { setattr } for pid=19452 comm="syz.1.2078" name="PACKET" dev="sockfs" ino=51275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 787.104931][ T5920] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 787.268331][ T5920] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 787.278354][ T5920] usb 3-1: config 0 has no interface number 0 [ 787.287952][ T5920] usb 3-1: too many endpoints for config 0 interface 196 altsetting 108: 192, using maximum allowed: 30 [ 787.299482][ T5920] usb 3-1: config 0 interface 196 altsetting 108 has 0 endpoint descriptors, different from the interface descriptor's value: 192 [ 787.317253][ T5920] usb 3-1: config 0 interface 196 has no altsetting 0 [ 787.332721][ T5920] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 787.552405][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.596840][ T5920] usb 3-1: Product: syz [ 787.622602][ T5920] usb 3-1: Manufacturer: syz [ 787.655783][ T5920] usb 3-1: SerialNumber: syz [ 787.705474][ T5920] usb 3-1: config 0 descriptor?? [ 787.742809][T19492] FAULT_INJECTION: forcing a failure. [ 787.742809][T19492] name failslab, interval 1, probability 0, space 0, times 0 [ 787.871532][T19492] CPU: 0 UID: 0 PID: 19492 Comm: syz.1.2084 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 787.871552][T19492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.871559][T19492] Call Trace: [ 787.871563][T19492] [ 787.871568][T19492] dump_stack_lvl+0x16c/0x1f0 [ 787.871583][T19492] should_fail_ex+0x512/0x640 [ 787.871596][T19492] ? fs_reclaim_acquire+0xae/0x150 [ 787.871613][T19492] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 787.871633][T19492] should_failslab+0xc2/0x120 [ 787.871647][T19492] __kmalloc_noprof+0xd2/0x510 [ 787.871658][T19492] ? trace_kmalloc+0x2b/0xd0 [ 787.871672][T19492] ? __kmalloc_noprof+0x242/0x510 [ 787.871685][T19492] tomoyo_realpath_from_path+0xc2/0x6e0 [ 787.871703][T19492] ? tomoyo_fill_path_info+0x233/0x420 [ 787.871717][T19492] tomoyo_mount_acl+0x1ae/0x850 [ 787.871732][T19492] ? bpf_ksym_find+0x127/0x1c0 [ 787.871748][T19492] ? is_bpf_text_address+0x94/0x1a0 [ 787.871762][T19492] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 787.871776][T19492] ? __kernel_text_address+0xd/0x40 [ 787.871790][T19492] ? unwind_get_return_address+0x59/0xa0 [ 787.871803][T19492] ? arch_stack_walk+0xa6/0x100 [ 787.871834][T19492] ? tomoyo_domain+0xbb/0x150 [ 787.871844][T19492] ? tomoyo_profile+0x47/0x60 [ 787.871856][T19492] tomoyo_mount_permission+0x16d/0x420 [ 787.871871][T19492] ? tomoyo_mount_permission+0x14f/0x420 [ 787.871887][T19492] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 787.871912][T19492] security_sb_mount+0x9b/0x260 [ 787.871928][T19492] path_mount+0x15f/0x1fd0 [ 787.871946][T19492] ? __pfx_path_mount+0x10/0x10 [ 787.871961][T19492] ? kmem_cache_free+0x2d1/0x4d0 [ 787.871971][T19492] ? putname+0x154/0x1a0 [ 787.871988][T19492] ? putname+0x154/0x1a0 [ 787.872004][T19492] ? __x64_sys_mount+0x28d/0x310 [ 787.872017][T19492] __x64_sys_mount+0x28d/0x310 [ 787.872032][T19492] ? __pfx___x64_sys_mount+0x10/0x10 [ 787.872052][T19492] do_syscall_64+0xcd/0x4c0 [ 787.872066][T19492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.872081][T19492] RIP: 0033:0x7fb40198ebe9 [ 787.872091][T19492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.872102][T19492] RSP: 002b:00007fb40285e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 787.872114][T19492] RAX: ffffffffffffffda RBX: 00007fb401bb5fa0 RCX: 00007fb40198ebe9 [ 787.872121][T19492] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 787.872128][T19492] RBP: 00007fb40285e090 R08: 0000200000000900 R09: 0000000000000000 [ 787.872135][T19492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.872141][T19492] R13: 00007fb401bb6038 R14: 00007fb401bb5fa0 R15: 00007fff9bf15998 [ 787.872156][T19492] [ 787.872172][T19492] ERROR: Out of memory at tomoyo_realpath_from_path. [ 789.678895][ T30] audit: type=1326 audit(1755202344.365:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19507 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ff38ebe9 code=0x7ffc0000 [ 789.702365][ C0] vkms_vblank_simulate: vblank timer overrun [ 789.745290][ T30] audit: type=1326 audit(1755202344.365:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19507 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ff38ebe9 code=0x7ffc0000 [ 789.814325][ T30] audit: type=1326 audit(1755202344.365:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19507 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fa9ff38ebe9 code=0x7ffc0000 [ 789.837731][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.024934][T14563] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 790.194963][T14563] usb 6-1: Using ep0 maxpacket: 16 [ 790.245313][ T5961] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 790.347447][T14563] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.362775][ T5920] usb 3-1: USB disconnect, device number 59 [ 790.405087][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 790.420208][ T5961] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 790.478433][T19560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2093'. [ 790.488931][T14563] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 790.508563][T14563] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 790.518678][ T5961] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 790.526473][ T5961] usb 2-1: can't read configurations, error -61 [ 790.534131][T14563] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 790.571530][T14563] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 790.684930][ T5961] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 790.723200][T14563] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 790.860768][ T30] audit: type=1400 audit(1755202345.555:773): avc: denied { create } for pid=19569 comm="syz.2.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 790.889926][T14563] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 790.985151][T14563] usb 6-1: Manufacturer: syz [ 790.995822][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 791.005168][T14563] usb 6-1: config 0 descriptor?? [ 791.040151][T19581] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2094'. [ 791.102293][ T5961] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 791.111834][T19576] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2094'. [ 791.130774][ T5961] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 791.141743][ T5961] usb 2-1: can't read configurations, error -61 [ 791.154943][ T5961] usb usb2-port1: attempt power cycle [ 791.174902][ T30] audit: type=1400 audit(1755202345.565:774): avc: denied { setopt } for pid=19569 comm="syz.2.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 791.495806][ T5961] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 791.515442][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 791.521710][ T5961] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 791.533030][ T5961] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 791.541146][ T5961] usb 2-1: can't read configurations, error -61 [ 791.685049][ T5961] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 791.715568][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 791.725356][ T5961] usb 2-1: too many configurations: 230, using maximum allowed: 8 [ 791.745613][ T5961] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 791.759503][ T5961] usb 2-1: can't read configurations, error -61 [ 791.778342][ T5961] usb usb2-port1: unable to enumerate USB device [ 792.222963][T19607] ptrace attach of "./syz-executor exec"[5852] was attempted by ""[19607] [ 792.295962][T19607] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.303230][T19607] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.373980][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 792.643621][T19607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.670206][T19607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.693107][T19617] overlayfs: failed to clone upperpath [ 792.710067][T19617] 9pnet_fd: Insufficient options for proto=fd [ 792.925320][T14563] rc_core: IR keymap rc-hauppauge not found [ 792.939208][T14563] Registered IR keymap rc-empty [ 792.961296][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 792.996855][T19609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.034594][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.057791][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.075394][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 793.104124][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.119262][T14563] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 793.460730][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.509713][T19638] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2104'. [ 793.568223][T14563] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input86 [ 793.620385][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 793.677163][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 793.944991][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 793.982328][T19651] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2107'. [ 793.994939][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 794.006824][T19645] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2107'. [ 794.110709][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 794.135109][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 794.201387][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 794.308080][T19659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2109'. [ 794.321457][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 794.352382][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 794.438680][T14563] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 794.467914][T14563] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 794.480722][T14563] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 794.878319][T19668] Bluetooth: hci6: Frame reassembly failed (-84) [ 794.934334][T10146] Bluetooth: hci6: Frame reassembly failed (-84) [ 795.113186][T14563] usb 6-1: USB disconnect, device number 12 [ 796.198944][T19680] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2111'. [ 796.547752][T19685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.998025][ T5851] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 797.151526][T19695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.614974][ T93] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 799.384944][ T93] usb 6-1: Using ep0 maxpacket: 16 [ 799.398572][ T93] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.409222][ T93] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.430284][ T93] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 799.460598][ T93] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 799.487791][ T93] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 799.552630][ T93] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 799.570268][ T93] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 799.579078][ T93] usb 6-1: Manufacturer: syz [ 799.791502][ T93] usb 6-1: config 0 descriptor?? [ 799.883765][T19728] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2120'. [ 799.900139][T19728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2120'. [ 799.909980][T19728] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2120'. [ 800.237654][ T93] usb 6-1: can't set config #0, error -71 [ 800.255338][ T93] usb 6-1: USB disconnect, device number 13 [ 801.748389][T19770] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2130'. [ 802.067581][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2135'. [ 802.659391][ T93] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 802.835451][ T93] usb 2-1: Using ep0 maxpacket: 16 [ 802.866630][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 802.880298][ T93] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 802.889544][ T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.897877][ T93] usb 2-1: Product: syz [ 802.902165][ T93] usb 2-1: Manufacturer: syz [ 802.958553][ T93] usb 2-1: SerialNumber: syz [ 802.987609][ T93] usb 2-1: config 0 descriptor?? [ 803.009724][ T93] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 803.029415][ T93] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 803.761603][ T30] audit: type=1400 audit(1755202358.465:775): avc: denied { bind } for pid=19801 comm="syz.2.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 803.775084][ T93] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 804.302486][ T93] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 804.312973][ T93] em28xx 2-1:0.0: board has no eeprom [ 804.395839][ T93] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 804.453107][T19833] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2144'. [ 804.865420][ T93] em28xx 2-1:0.0: dvb set to bulk mode. [ 804.892534][ T5934] em28xx 2-1:0.0: Binding DVB extension [ 804.922428][ T93] usb 2-1: USB disconnect, device number 58 [ 804.947883][ T93] em28xx 2-1:0.0: Disconnecting em28xx [ 805.010431][ T5934] em28xx 2-1:0.0: Registering input extension [ 805.050145][ T93] em28xx 2-1:0.0: Closing input extension [ 805.105276][ T93] em28xx 2-1:0.0: Freeing device [ 805.408789][ T5855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 805.419501][ T5855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 805.428735][ T5855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 805.447384][ T5855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 805.457778][ T5855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 805.896178][T19903] overlayfs: failed lookup in lower (newroot/410, name='bus', err=-40): overlapping layers [ 806.357499][T19865] chnl_net:caif_netlink_parms(): no params data found [ 806.648538][T19865] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.660893][T19865] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.673622][T19865] bridge_slave_0: entered allmulticast mode [ 806.743005][T19865] bridge_slave_0: entered promiscuous mode [ 806.772106][T19865] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.780717][T19865] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.788942][T19865] bridge_slave_1: entered allmulticast mode [ 807.015306][ T30] audit: type=1400 audit(1755202361.725:776): avc: denied { search } for pid=20043 comm="syz.5.2155" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 807.026019][T19865] bridge_slave_1: entered promiscuous mode [ 807.086781][ T30] audit: type=1400 audit(1755202361.775:777): avc: denied { write } for pid=20043 comm="syz.5.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 807.760081][ T5855] Bluetooth: hci6: command tx timeout [ 807.808571][T19865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.820004][T19865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.863703][T19865] team0: Port device team_slave_0 added [ 808.074132][T19865] team0: Port device team_slave_1 added [ 808.108073][ T30] audit: type=1400 audit(1755202362.825:778): avc: denied { unmount } for pid=13183 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 808.214369][T19865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.243016][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.250543][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.266875][T19865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.294280][T19865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.306594][T19865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.313540][T19865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.365517][T19865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.424885][T14563] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 808.614893][T20161] overlayfs: failed to clone upperpath [ 808.669741][T14563] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 808.787277][T14563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.955081][T20161] 9pnet_fd: Insufficient options for proto=fd [ 808.987171][T14563] usb 2-1: config 0 descriptor?? [ 809.025112][T14563] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 809.149806][T19865] hsr_slave_0: entered promiscuous mode [ 809.157801][T19865] hsr_slave_1: entered promiscuous mode [ 809.163845][T19865] debugfs: 'hsr0' already exists in 'hsr' [ 809.170266][T19865] Cannot create hsr debugfs directory [ 809.376286][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 809.515016][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 810.123250][ T5855] Bluetooth: hci6: command tx timeout [ 810.134873][ T30] audit: type=1400 audit(1755202364.355:779): avc: denied { mount } for pid=20185 comm="syz.2.2163" name="/" dev="hugetlbfs" ino=52017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 810.159539][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 810.184479][T20186] ceph: No mds server is up or the cluster is laggy [ 810.210669][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 810.414013][T20252] netlink: 'syz.5.2164': attribute type 1 has an invalid length. [ 810.445310][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2165'. [ 810.455656][T20252] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2164'. [ 810.481266][T20236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2164'. [ 811.420000][T19865] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 811.575330][T19865] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 811.601192][ T30] audit: type=1400 audit(1755202366.315:780): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 811.627774][T19865] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 811.671440][T19865] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 812.146030][ T5855] Bluetooth: hci6: command tx timeout [ 812.618815][T19865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.756396][T20305] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2170'. [ 813.419096][T19865] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.597339][T14563] usb 2-1: USB disconnect, device number 59 [ 813.636275][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.643359][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.793201][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.797226][ T30] audit: type=1400 audit(1755202368.505:781): avc: denied { connect } for pid=20312 comm="syz.0.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 813.800340][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.273176][T20330] block device autoloading is deprecated and will be removed. [ 814.310490][ T5855] Bluetooth: hci6: command tx timeout [ 815.040955][T14563] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 815.131015][T19865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.154893][ T5913] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 815.230736][T14563] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 815.244278][T14563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.279184][T14563] usb 3-1: config 0 descriptor?? [ 815.313017][T14563] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 815.430586][ T5913] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 815.460343][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.472954][ T5913] usb 6-1: Product: syz [ 815.480173][ T5913] usb 6-1: Manufacturer: syz [ 815.501257][ T5913] usb 6-1: SerialNumber: syz [ 815.550460][ T5913] usb 6-1: config 0 descriptor?? [ 815.691804][T20428] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2184'. [ 815.804346][T19865] veth0_vlan: entered promiscuous mode [ 815.818130][T19865] veth1_vlan: entered promiscuous mode [ 816.407227][T19865] veth0_macvtap: entered promiscuous mode [ 816.417366][T19865] veth1_macvtap: entered promiscuous mode [ 816.470473][T20439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.500906][T20439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.570674][T19865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.582047][T20447] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2188'. [ 816.597340][T20441] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2188'. [ 816.612744][T19865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.681996][ T1143] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.766390][ T1143] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.842500][ T1143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.870527][ T1143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.027306][T20453] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2189'. [ 817.050439][T20452] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2189'. [ 817.098466][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.144541][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.202635][T20311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.232951][T20311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.267451][T20466] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2190'. [ 817.736082][T14563] usb 3-1: USB disconnect, device number 60 [ 817.740252][T20474] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2191'. [ 817.753078][ T5855] Bluetooth: hci6: unexpected Set CIG Parameters response data [ 818.120825][ T5934] usb 6-1: USB disconnect, device number 14 [ 819.323419][ T30] audit: type=1400 audit(1755202374.035:782): avc: denied { create } for pid=20519 comm="syz.1.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 819.426178][T20524] input: syz1 as /devices/virtual/input/input89 [ 819.439250][ T30] audit: type=1400 audit(1755202374.055:783): avc: denied { bind } for pid=20519 comm="syz.1.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 819.637702][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2201'. [ 819.790683][T20534] FAULT_INJECTION: forcing a failure. [ 819.790683][T20534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.845028][T20534] CPU: 1 UID: 0 PID: 20534 Comm: syz.1.2203 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 819.845056][T20534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 819.845067][T20534] Call Trace: [ 819.845073][T20534] [ 819.845079][T20534] dump_stack_lvl+0x16c/0x1f0 [ 819.845101][T20534] should_fail_ex+0x512/0x640 [ 819.845124][T20534] _copy_from_user+0x2e/0xd0 [ 819.845146][T20534] generic_map_update_batch+0x3e9/0x610 [ 819.845178][T20534] ? __pfx_generic_map_update_batch+0x10/0x10 [ 819.845205][T20534] ? __pfx_generic_map_update_batch+0x10/0x10 [ 819.845229][T20534] bpf_map_do_batch+0x5b1/0x680 [ 819.845251][T20534] __sys_bpf+0x4cf9/0x4de0 [ 819.845278][T20534] ? __pfx___sys_bpf+0x10/0x10 [ 819.845300][T20534] ? ksys_write+0x190/0x250 [ 819.845323][T20534] ? __mutex_unlock_slowpath+0x163/0x800 [ 819.845358][T20534] ? fput+0x9b/0xd0 [ 819.845380][T20534] ? ksys_write+0x1ac/0x250 [ 819.845397][T20534] ? __pfx_ksys_write+0x10/0x10 [ 819.845418][T20534] __x64_sys_bpf+0x78/0xc0 [ 819.845441][T20534] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.845459][T20534] do_syscall_64+0xcd/0x4c0 [ 819.845480][T20534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.845497][T20534] RIP: 0033:0x7fb40198ebe9 [ 819.845511][T20534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.845527][T20534] RSP: 002b:00007fb40285e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 819.845545][T20534] RAX: ffffffffffffffda RBX: 00007fb401bb5fa0 RCX: 00007fb40198ebe9 [ 819.845557][T20534] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 819.845568][T20534] RBP: 00007fb40285e090 R08: 0000000000000000 R09: 0000000000000000 [ 819.845578][T20534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.845589][T20534] R13: 00007fb401bb6038 R14: 00007fb401bb5fa0 R15: 00007fff9bf15998 [ 819.845621][T20534] [ 821.124963][ T30] audit: type=1400 audit(1755202375.835:784): avc: denied { map } for pid=20553 comm="syz.7.2207" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 821.359722][T20565] FAULT_INJECTION: forcing a failure. [ 821.359722][T20565] name failslab, interval 1, probability 0, space 0, times 0 [ 821.375177][ T30] audit: type=1400 audit(1755202375.835:785): avc: denied { execute } for pid=20553 comm="syz.7.2207" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 821.416136][T20566] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2205'. [ 821.457810][ T30] audit: type=1400 audit(1755202376.025:786): avc: denied { map } for pid=20553 comm="syz.7.2207" path="socket:[53340]" dev="sockfs" ino=53340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 821.484873][T20565] CPU: 0 UID: 0 PID: 20565 Comm: syz.5.2208 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 821.484903][T20565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 821.484914][T20565] Call Trace: [ 821.484920][T20565] [ 821.484928][T20565] dump_stack_lvl+0x16c/0x1f0 [ 821.484951][T20565] should_fail_ex+0x512/0x640 [ 821.484969][T20565] ? fs_reclaim_acquire+0xae/0x150 [ 821.484994][T20565] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 821.485021][T20565] should_failslab+0xc2/0x120 [ 821.485042][T20565] __kmalloc_noprof+0xd2/0x510 [ 821.485066][T20565] tomoyo_realpath_from_path+0xc2/0x6e0 [ 821.485095][T20565] ? tomoyo_profile+0x47/0x60 [ 821.485114][T20565] tomoyo_path_number_perm+0x245/0x580 [ 821.485136][T20565] ? tomoyo_path_number_perm+0x237/0x580 [ 821.485160][T20565] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 821.485184][T20565] ? find_held_lock+0x2b/0x80 [ 821.485229][T20565] ? find_held_lock+0x2b/0x80 [ 821.485250][T20565] ? hook_file_ioctl_common+0x145/0x410 [ 821.485275][T20565] ? __fget_files+0x20e/0x3c0 [ 821.485298][T20565] security_file_ioctl+0x9b/0x240 [ 821.485325][T20565] __x64_sys_ioctl+0xb7/0x210 [ 821.485354][T20565] do_syscall_64+0xcd/0x4c0 [ 821.485376][T20565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.485394][T20565] RIP: 0033:0x7f50a4f8ebe9 [ 821.485410][T20565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.485428][T20565] RSP: 002b:00007f50a5ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 821.485447][T20565] RAX: ffffffffffffffda RBX: 00007f50a51b5fa0 RCX: 00007f50a4f8ebe9 [ 821.485458][T20565] RDX: 0000200000001a80 RSI: 00000000c0405665 RDI: 0000000000000003 [ 821.485469][T20565] RBP: 00007f50a5ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 821.485480][T20565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.485491][T20565] R13: 00007f50a51b6038 R14: 00007f50a51b5fa0 R15: 00007ffd8c8bd1b8 [ 821.485516][T20565] [ 821.485570][T20565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 821.825245][ T5855] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 821.844956][ T5855] Bluetooth: hci6: Injecting HCI hardware error event [ 821.853700][ T5855] Bluetooth: hci6: hardware error 0x00 [ 822.550602][T20580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20580 comm=syz.5.2211 [ 822.636563][T20570] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2209'. [ 823.885903][T20600] input: syz1 as /devices/virtual/input/input90 [ 824.155895][ T5855] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 825.469675][T20630] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2223'. [ 826.692813][ T5934] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 826.943139][ T5934] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 827.019194][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.021097][T20655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.105483][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.294296][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 827.360650][ T5934] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 827.383306][ T5934] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 827.419603][ T5934] usb 3-1: Manufacturer: syz [ 827.450708][ T5934] usb 3-1: config 0 descriptor?? [ 827.648229][ T5913] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 827.828691][ T5913] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 827.879952][ T5934] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 828.004727][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.038463][ T5913] usb 2-1: Product: syz [ 828.061506][ T5913] usb 2-1: Manufacturer: syz [ 828.071031][ T5934] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 828.085063][ T5913] usb 2-1: SerialNumber: syz [ 828.095719][ T5913] usb 2-1: config 0 descriptor?? [ 828.153984][ T5934] usb 3-1: USB disconnect, device number 61 [ 828.245297][T20691] fido_id[20691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 829.698928][ T5934] usb 2-1: USB disconnect, device number 60 [ 830.752946][T20749] block nbd1: shutting down sockets [ 832.787791][T20775] overlayfs: failed to clone upperpath [ 832.977891][T20776] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2247'. [ 833.063164][T20775] 9pnet_fd: Insufficient options for proto=fd [ 833.305691][T20797] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2252'. [ 833.444983][ T5934] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 833.577295][T20798] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2251'. [ 833.591943][T20798] hsr_slave_0: left promiscuous mode [ 833.599647][T20798] hsr_slave_1: left promiscuous mode [ 833.722054][T20806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 833.748790][ T5934] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 833.825341][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.839662][ T5934] usb 6-1: config 0 descriptor?? [ 833.850982][ T5934] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 833.875995][T14090] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 834.036504][T14090] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.047210][T14090] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 834.062251][T14090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 834.097696][T14090] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 834.132486][T14090] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 834.274150][T14090] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 834.287577][T14090] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.296597][T14090] usb 3-1: Product: syz [ 834.304975][T14090] usb 3-1: Manufacturer: syz [ 834.318771][T14090] usb 3-1: SerialNumber: syz [ 834.327984][T14090] usb 3-1: config 0 descriptor?? [ 834.333908][T20800] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 834.396515][T14090] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 834.675929][ T30] audit: type=1400 audit(1755202389.385:787): avc: denied { read } for pid=20826 comm="syz.0.2257" path="socket:[54488]" dev="sockfs" ino=54488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 836.082039][T20840] ceph: No mds server is up or the cluster is laggy [ 836.092749][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 836.125005][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 836.408379][ T5934] usb 6-1: USB disconnect, device number 15 [ 836.962747][T20862] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2261'. [ 837.060888][ T5913] usb 3-1: USB disconnect, device number 62 [ 837.146685][T20875] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2265'. [ 837.567400][ T30] audit: type=1400 audit(1755202392.265:788): avc: denied { write } for pid=20882 comm="syz.1.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 838.848102][ T5934] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 839.437774][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 839.780824][ T5934] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 839.792211][ T5934] usb 6-1: config 8 has no interface number 0 [ 839.800424][ T5934] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 839.818157][ T5934] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 839.845350][ T5934] usb 6-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 840.171258][ T5934] usb 6-1: config 8 interface 206 has no altsetting 0 [ 840.180657][ T5934] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 840.313449][T20929] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2276'. [ 840.476883][ T30] audit: type=1326 audit(1755202395.195:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20924 comm="syz.2.2275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3a898ebe9 code=0x0 [ 840.501178][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.519650][ T5934] usb 6-1: Product: syz [ 840.529902][ T5934] usb 6-1: Manufacturer: syz [ 840.534568][ T5934] usb 6-1: SerialNumber: syz [ 841.272313][ T5934] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 841.444238][ T5934] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 841.491521][ T5934] usb 6-1: USB disconnect, device number 16 [ 841.759101][ T5934] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 841.922170][T20957] fuse: Bad value for 'fd' [ 841.983091][T20970] input: syz1 as /devices/virtual/input/input91 [ 841.992774][ T5934] garmin_gps 6-1:8.206: device disconnected [ 843.409828][T20996] bond3: entered allmulticast mode [ 843.505230][T20996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 843.514476][T20996] bridge0: port 3(bond3) entered blocking state [ 843.521126][T20996] bridge0: port 3(bond3) entered disabled state [ 843.535862][T20996] bond3: entered promiscuous mode [ 845.199127][T21041] SELinux: failed to load policy [ 846.571974][T21062] input: syz1 as /devices/virtual/input/input93 [ 846.846173][T14563] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 847.136961][T14563] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 847.172269][T14563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.884989][T14563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.895459][T14563] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 847.911581][T14563] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 847.924939][T14563] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 847.940233][T14563] usb 2-1: Manufacturer: syz [ 847.999981][T14563] usb 2-1: config 0 descriptor?? [ 848.008276][T21075] tipc: Enabling of bearer rejected, already enabled [ 848.916000][T14563] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 848.930992][T14563] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 850.697907][T14563] usb 2-1: USB disconnect, device number 61 [ 850.835061][T21132] fido_id[21132]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 851.404543][T21150] input: syz1 as /devices/virtual/input/input94 [ 854.084526][T21183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.913126][T21223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.578300][T21235] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2329'. [ 855.637130][T21235] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2329'. [ 855.704289][T21244] 9pnet_fd: Insufficient options for proto=fd [ 855.794494][T21235] netlink: 'syz.7.2329': attribute type 6 has an invalid length. [ 855.805355][T21248] loop9: detected capacity change from 0 to 7 [ 856.178075][T21248] Dev loop9: unable to read RDB block 7 [ 856.183812][T21248] loop9: unable to read partition table [ 856.191221][T21248] loop9: partition table beyond EOD, truncated [ 856.197531][T21248] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 856.264333][ T36] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.307550][ T36] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.324702][ T36] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.358184][ T36] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.391557][ T30] audit: type=1326 audit(1755202412.405:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.7.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f438ebe9 code=0x7ffc0000 [ 858.582726][ T30] audit: type=1326 audit(1755202412.405:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.7.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f438ebe9 code=0x7ffc0000 [ 858.634087][ T30] audit: type=1326 audit(1755202412.405:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.7.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f438ebe9 code=0x7ffc0000 [ 858.674228][ T30] audit: type=1326 audit(1755202412.405:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.7.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f438ebe9 code=0x7ffc0000 [ 858.697663][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.705699][ T30] audit: type=1326 audit(1755202412.405:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.7.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f438ebe9 code=0x7ffc0000 [ 858.729055][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.739088][ T30] audit: type=1326 audit(1755202412.405:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.7.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f438ebe9 code=0x7ffc0000 [ 858.762548][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.936996][ T30] audit: type=1326 audit(1755202412.405:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.7.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f438ebe9 code=0x7ffc0000 [ 858.960618][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.975380][ T30] audit: type=1326 audit(1755202412.405:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.7.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f438ebe9 code=0x7ffc0000 [ 858.998766][ C1] vkms_vblank_simulate: vblank timer overrun [ 859.011643][ T30] audit: type=1326 audit(1755202412.405:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.7.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6f438ebe9 code=0x7ffc0000 [ 859.055359][ T30] audit: type=1326 audit(1755202412.405:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21279 comm="syz.7.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f438ebe9 code=0x7ffc0000 [ 859.078752][ C1] vkms_vblank_simulate: vblank timer overrun [ 859.394044][T21307] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2342'. [ 859.834400][T21308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2344'. [ 859.977882][T21315] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2345'. [ 861.611467][T21337] input: syz1 as /devices/virtual/input/input95 [ 862.439926][T21350] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2350'. [ 862.455110][T21348] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2350'. [ 862.793987][T21355] 9pnet_virtio: no channels available for device 127.0.0.1 [ 863.751936][T21370] loop9: detected capacity change from 0 to 7 [ 863.832311][T21370] Dev loop9: unable to read RDB block 7 [ 863.891597][T21370] loop9: unable to read partition table [ 863.897520][T21370] loop9: partition table beyond EOD, truncated [ 863.903740][T21370] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 864.559294][T21390] 9pnet_fd: Insufficient options for proto=fd [ 865.355595][T21408] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2362'. [ 865.367089][T21407] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2362'. [ 865.534328][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 865.534339][ T30] audit: type=1400 audit(1755202420.245:825): avc: denied { write } for pid=21409 comm="syz.1.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 866.194819][ T5984] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 866.263273][T21446] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2371'. [ 866.590591][T21452] binder: 21450:21452 ioctl c0306201 200000000240 returned -14 [ 867.345116][T21457] input: syz1 as /devices/virtual/input/input96 [ 867.594989][ T5984] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 867.834860][ T5984] usb 6-1: Using ep0 maxpacket: 16 [ 867.849315][ T5984] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.861680][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 867.893699][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 867.906206][ T5984] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 868.012418][ T5984] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.031432][ T5984] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 868.051042][ T5984] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 868.074062][ T5984] usb 6-1: Manufacturer: syz [ 868.109249][ T5984] usb 6-1: config 0 descriptor?? [ 868.574907][ T5984] rc_core: IR keymap rc-hauppauge not found [ 868.595079][ T5984] Registered IR keymap rc-empty [ 868.623536][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 868.675303][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 868.827446][ T5984] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 869.158096][ T5984] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input97 [ 869.247596][T21488] tipc: Enabling of bearer rejected, already enabled [ 869.415810][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 869.564933][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 869.604982][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 869.688366][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.874571][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 870.087259][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 870.114869][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 870.143271][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 870.224928][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 870.295968][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 870.306175][T21510] vivid-000: disconnect [ 870.319891][ T5984] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 870.356341][ T5984] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 870.365934][ T5984] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 870.491218][T21516] ISOFS: Unable to identify CD-ROM format. [ 871.309792][ T5984] usb 6-1: USB disconnect, device number 17 [ 871.327595][T21509] vivid-000: reconnect [ 871.414402][T21380] Set syz1 is full, maxelem 65536 reached [ 871.687422][T21536] input: syz1 as /devices/virtual/input/input98 [ 872.059295][T21547] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2386'. [ 872.677057][T21564] netlink: 'syz.7.2393': attribute type 1 has an invalid length. [ 872.739982][T21564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 872.764924][T14563] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 873.055685][T14563] usb 2-1: Using ep0 maxpacket: 8 [ 873.063511][T14563] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.124859][T14563] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 873.134042][T14563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.149371][T14563] usb 2-1: config 0 descriptor?? [ 873.561254][T14563] lenovo 0003:17EF:6062.001D: unknown main item tag 0x0 [ 873.643187][T14563] lenovo 0003:17EF:6062.001D: unknown main item tag 0x0 [ 873.679390][T14563] lenovo 0003:17EF:6062.001D: unknown main item tag 0x0 [ 873.693396][T14563] lenovo 0003:17EF:6062.001D: unknown main item tag 0x0 [ 873.712366][T14563] lenovo 0003:17EF:6062.001D: unknown main item tag 0x0 [ 873.762914][T14563] lenovo 0003:17EF:6062.001D: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 873.819747][T14563] usb 2-1: USB disconnect, device number 62 [ 873.904615][T21626] fido_id[21626]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 874.166293][T21638] loop9: detected capacity change from 0 to 7 [ 874.188359][T21638] Dev loop9: unable to read RDB block 7 [ 874.194376][T21638] loop9: unable to read partition table [ 874.208789][T21638] loop9: partition table beyond EOD, truncated [ 874.224785][T21638] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 875.288389][T21654] loop9: detected capacity change from 0 to 7 [ 875.306742][T21654] Dev loop9: unable to read RDB block 7 [ 875.312351][T21654] loop9: unable to read partition table [ 875.388618][T21654] loop9: partition table beyond EOD, truncated [ 875.409566][T21654] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 876.408806][ T30] audit: type=1400 audit(1755202430.925:826): avc: denied { read } for pid=21660 comm="syz.2.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 876.428020][ C0] vkms_vblank_simulate: vblank timer overrun [ 876.868516][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2405'. [ 876.960428][T21680] i2c i2c-0: Invalid block write size 34 [ 877.806301][T21693] FAULT_INJECTION: forcing a failure. [ 877.806301][T21693] name failslab, interval 1, probability 0, space 0, times 0 [ 877.874883][T21693] CPU: 1 UID: 0 PID: 21693 Comm: syz.2.2409 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 877.874909][T21693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 877.874919][T21693] Call Trace: [ 877.874925][T21693] [ 877.874931][T21693] dump_stack_lvl+0x16c/0x1f0 [ 877.874952][T21693] should_fail_ex+0x512/0x640 [ 877.874966][T21693] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 877.874980][T21693] should_failslab+0xc2/0x120 [ 877.874994][T21693] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 877.875005][T21693] ? __alloc_skb+0x2b2/0x380 [ 877.875032][T21693] __alloc_skb+0x2b2/0x380 [ 877.875050][T21693] ? __pfx___alloc_skb+0x10/0x10 [ 877.875069][T21693] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 877.875085][T21693] netlink_alloc_large_skb+0x69/0x130 [ 877.875098][T21693] netlink_sendmsg+0x6a1/0xdd0 [ 877.875113][T21693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 877.875130][T21693] ____sys_sendmsg+0xa98/0xc70 [ 877.875145][T21693] ? copy_msghdr_from_user+0x10a/0x160 [ 877.875157][T21693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 877.875177][T21693] ___sys_sendmsg+0x134/0x1d0 [ 877.875189][T21693] ? __pfx____sys_sendmsg+0x10/0x10 [ 877.875212][T21693] ? __mutex_unlock_slowpath+0x100/0x800 [ 877.875228][T21693] __sys_sendmsg+0x16d/0x220 [ 877.875240][T21693] ? __pfx___sys_sendmsg+0x10/0x10 [ 877.875260][T21693] do_syscall_64+0xcd/0x4c0 [ 877.875272][T21693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.875284][T21693] RIP: 0033:0x7ff3a898ebe9 [ 877.875294][T21693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.875305][T21693] RSP: 002b:00007ff3a98ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 877.875316][T21693] RAX: ffffffffffffffda RBX: 00007ff3a8bb5fa0 RCX: 00007ff3a898ebe9 [ 877.875323][T21693] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 877.875330][T21693] RBP: 00007ff3a98ae090 R08: 0000000000000000 R09: 0000000000000000 [ 877.875336][T21693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.875343][T21693] R13: 00007ff3a8bb6038 R14: 00007ff3a8bb5fa0 R15: 00007fffc5f5e4b8 [ 877.875357][T21693] [ 878.415498][ T5984] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 878.472957][T21715] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2413'. [ 878.493896][T21713] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2413'. [ 878.645313][ T5984] usb 6-1: Using ep0 maxpacket: 8 [ 879.259507][T21716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2414'. [ 880.340445][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.440829][ T5984] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 880.563356][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.338749][ T5984] usb 6-1: config 0 descriptor?? [ 881.442429][ T5984] usb 6-1: can't set config #0, error -71 [ 881.515321][ T5984] usb 6-1: USB disconnect, device number 18 [ 881.674141][T21748] FAULT_INJECTION: forcing a failure. [ 881.674141][T21748] name failslab, interval 1, probability 0, space 0, times 0 [ 881.694444][T21748] CPU: 0 UID: 0 PID: 21748 Comm: syz.2.2417 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 881.694472][T21748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 881.694481][T21748] Call Trace: [ 881.694487][T21748] [ 881.694494][T21748] dump_stack_lvl+0x16c/0x1f0 [ 881.694517][T21748] should_fail_ex+0x512/0x640 [ 881.694537][T21748] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 881.694568][T21748] should_failslab+0xc2/0x120 [ 881.694590][T21748] __kmalloc_cache_noprof+0x6a/0x3e0 [ 881.694616][T21748] ? cgroup_show_path+0xb2/0x740 [ 881.694641][T21748] ? __pfx_cgroup_show_path+0x10/0x10 [ 881.694664][T21748] cgroup_show_path+0xb2/0x740 [ 881.694690][T21748] ? __pfx_cgroup_show_path+0x10/0x10 [ 881.694712][T21748] kernfs_sop_show_path+0xe9/0x160 [ 881.694737][T21748] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 881.694757][T21748] show_path+0x9e/0x100 [ 881.694780][T21748] show_mountinfo+0x1d8/0x820 [ 881.694798][T21748] ? traverse.part.0.constprop.0+0x19d/0x640 [ 881.694818][T21748] ? __pfx_show_mountinfo+0x10/0x10 [ 881.694845][T21748] traverse.part.0.constprop.0+0x107/0x640 [ 881.694873][T21748] seq_read_iter+0x932/0x12c0 [ 881.694907][T21748] vfs_read+0x8bf/0xcf0 [ 881.694932][T21748] ? __pfx_vfs_read+0x10/0x10 [ 881.694948][T21748] ? find_held_lock+0x2b/0x80 [ 881.694996][T21748] __x64_sys_pread64+0x1eb/0x250 [ 881.695017][T21748] ? __pfx___x64_sys_pread64+0x10/0x10 [ 881.695046][T21748] do_syscall_64+0xcd/0x4c0 [ 881.695068][T21748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.695086][T21748] RIP: 0033:0x7ff3a898ebe9 [ 881.695102][T21748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 881.695119][T21748] RSP: 002b:00007ff3a988d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 881.695137][T21748] RAX: ffffffffffffffda RBX: 00007ff3a8bb6090 RCX: 00007ff3a898ebe9 [ 881.695149][T21748] RDX: 0000000000001000 RSI: 0000200000002280 RDI: 0000000000000006 [ 881.695160][T21748] RBP: 00007ff3a988d090 R08: 0000000000000000 R09: 0000000000000000 [ 881.695171][T21748] R10: 0000000000000d33 R11: 0000000000000246 R12: 0000000000000001 [ 881.695182][T21748] R13: 00007ff3a8bb6128 R14: 00007ff3a8bb6090 R15: 00007fffc5f5e4b8 [ 881.695208][T21748] [ 882.499979][T21762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2421'. [ 883.219711][T21780] overlayfs: failed to clone upperpath [ 883.376178][T21786] tc_dump_action: action bad kind [ 883.590496][T21796] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2431'. [ 883.660343][T21786] netlink: 'syz.2.2427': attribute type 10 has an invalid length. [ 883.668977][T21786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2427'. [ 883.691474][T21786] dummy0: entered promiscuous mode [ 883.786259][T21786] bridge0: port 4(dummy0) entered blocking state [ 883.812838][T21786] bridge0: port 4(dummy0) entered disabled state [ 883.824278][T21786] dummy0: entered allmulticast mode [ 884.015135][T14090] IPVS: starting estimator thread 0... [ 884.104830][T21809] IPVS: using max 36 ests per chain, 86400 per kthread [ 884.623336][ T37] tipc: Subscription rejected, illegal request [ 887.064245][T21847] (syz.1.2445,21847,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 887.406135][T21859] FAULT_INJECTION: forcing a failure. [ 887.406135][T21859] name failslab, interval 1, probability 0, space 0, times 0 [ 887.437255][T21859] CPU: 1 UID: 0 PID: 21859 Comm: syz.5.2448 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 887.437281][T21859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 887.437289][T21859] Call Trace: [ 887.437293][T21859] [ 887.437298][T21859] dump_stack_lvl+0x16c/0x1f0 [ 887.437314][T21859] should_fail_ex+0x512/0x640 [ 887.437330][T21859] should_failslab+0xc2/0x120 [ 887.437345][T21859] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 887.437357][T21859] ? skb_clone+0x190/0x3f0 [ 887.437371][T21859] skb_clone+0x190/0x3f0 [ 887.437383][T21859] netlink_deliver_tap+0xabd/0xd30 [ 887.437398][T21859] netlink_dump+0xa5f/0xd30 [ 887.437411][T21859] ? __pfx_netlink_dump+0x10/0x10 [ 887.437429][T21859] ? __inet_diag_dump_start+0x434/0x7f0 [ 887.437450][T21859] __netlink_dump_start+0x6d6/0x990 [ 887.437464][T21859] inet_diag_handler_cmd+0x282/0x2e0 [ 887.437481][T21859] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 887.437498][T21859] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 887.437514][T21859] ? __pfx_inet_diag_dump+0x10/0x10 [ 887.437530][T21859] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 887.437547][T21859] ? sock_diag_lock_handler+0x10f/0x2e0 [ 887.437568][T21859] sock_diag_rcv_msg+0x438/0x790 [ 887.437587][T21859] netlink_rcv_skb+0x158/0x420 [ 887.437599][T21859] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 887.437617][T21859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 887.437635][T21859] ? netlink_deliver_tap+0x1ae/0xd30 [ 887.437649][T21859] netlink_unicast+0x5a7/0x870 [ 887.437663][T21859] ? __pfx_netlink_unicast+0x10/0x10 [ 887.437676][T21859] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 887.437692][T21859] netlink_sendmsg+0x8d1/0xdd0 [ 887.437707][T21859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.437724][T21859] sock_write_iter+0x4fc/0x5b0 [ 887.437740][T21859] ? __pfx_sock_write_iter+0x10/0x10 [ 887.437761][T21859] ? __pfx_file_has_perm+0x10/0x10 [ 887.437777][T21859] do_iter_readv_writev+0x662/0x9e0 [ 887.437797][T21859] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 887.437815][T21859] ? selinux_file_permission+0x126/0x660 [ 887.437835][T21859] ? bpf_lsm_file_permission+0x9/0x10 [ 887.437850][T21859] ? security_file_permission+0x71/0x210 [ 887.437867][T21859] ? rw_verify_area+0xcf/0x6c0 [ 887.437886][T21859] vfs_writev+0x35f/0xde0 [ 887.437898][T21859] ? __lock_acquire+0x62e/0x1ce0 [ 887.437917][T21859] ? __pfx_vfs_writev+0x10/0x10 [ 887.437927][T21859] ? find_held_lock+0x2b/0x80 [ 887.437950][T21859] ? __fget_files+0x20e/0x3c0 [ 887.437961][T21859] ? __fget_files+0x140/0x3c0 [ 887.437977][T21859] ? do_writev+0x28c/0x340 [ 887.437986][T21859] do_writev+0x28c/0x340 [ 887.437996][T21859] ? __pfx_do_writev+0x10/0x10 [ 887.438011][T21859] do_syscall_64+0xcd/0x4c0 [ 887.438024][T21859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.438036][T21859] RIP: 0033:0x7f50a4f8ebe9 [ 887.438046][T21859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.438057][T21859] RSP: 002b:00007f50a5ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 887.438068][T21859] RAX: ffffffffffffffda RBX: 00007f50a51b5fa0 RCX: 00007f50a4f8ebe9 [ 887.438075][T21859] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 000000000000000a [ 887.438087][T21859] RBP: 00007f50a5ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 887.438094][T21859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.438100][T21859] R13: 00007f50a51b6038 R14: 00007f50a51b5fa0 R15: 00007ffd8c8bd1b8 [ 887.438114][T21859] [ 887.804636][T21862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2445'. [ 887.820120][ T30] audit: type=1400 audit(1755202442.515:827): avc: denied { ioctl } for pid=21846 comm="syz.1.2445" path="socket:[56656]" dev="sockfs" ino=56656 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 887.868102][T21825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10772 sclass=netlink_route_socket pid=21825 comm=syz.0.2437 [ 888.440561][T21877] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2450'. [ 888.481267][T21876] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2450'. [ 889.620543][T21908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.405058][ T5973] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 890.594969][ T5973] usb 3-1: Using ep0 maxpacket: 16 [ 890.605928][ T5973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.620333][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 890.645119][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 890.664789][ T5973] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 890.917562][T21931] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2463'. [ 890.927225][ T5973] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.957597][T21930] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2463'. [ 890.989018][ T5973] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 891.014827][ T5973] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 891.039765][ T5973] usb 3-1: Manufacturer: syz [ 891.090260][ T5973] usb 3-1: config 0 descriptor?? [ 891.504865][ T5973] rc_core: IR keymap rc-hauppauge not found [ 891.511041][ T5973] Registered IR keymap rc-empty [ 891.530591][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 891.595047][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 891.626928][ T5973] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 891.762712][ T5973] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input100 [ 891.964143][ T30] audit: type=1400 audit(1755202446.645:828): avc: denied { write } for pid=21954 comm="syz.5.2469" path="socket:[56785]" dev="sockfs" ino=56785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 891.999907][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.039509][ C1] rc rc0: IR event FIFO is full! [ 892.044462][ C1] rc rc0: IR event FIFO is full! [ 892.049380][ C1] rc rc0: IR event FIFO is full! [ 892.054298][ C1] rc rc0: IR event FIFO is full! [ 892.059223][ C1] rc rc0: IR event FIFO is full! [ 892.064164][ C1] rc rc0: IR event FIFO is full! [ 892.070383][ C1] rc rc0: IR event FIFO is full! [ 892.075326][ C1] rc rc0: IR event FIFO is full! [ 892.080255][ C1] rc rc0: IR event FIFO is full! [ 892.085178][ C1] rc rc0: IR event FIFO is full! [ 892.090102][ C1] rc rc0: IR event FIFO is full! [ 892.095027][ C1] rc rc0: IR event FIFO is full! [ 892.100665][ C1] rc rc0: IR event FIFO is full! [ 892.105619][ C1] rc rc0: IR event FIFO is full! [ 892.110785][ C1] rc rc0: IR event FIFO is full! [ 892.115731][ C1] rc rc0: IR event FIFO is full! [ 892.120671][ C1] rc rc0: IR event FIFO is full! [ 892.125614][ C1] rc rc0: IR event FIFO is full! [ 892.130746][ C1] rc rc0: IR event FIFO is full! [ 892.136653][ C1] rc rc0: IR event FIFO is full! [ 892.141601][ C1] rc rc0: IR event FIFO is full! [ 892.146535][ C1] rc rc0: IR event FIFO is full! [ 892.151457][ C1] rc rc0: IR event FIFO is full! [ 892.156365][ C1] rc rc0: IR event FIFO is full! [ 892.165245][ C1] rc rc0: IR event FIFO is full! [ 892.170348][ C1] rc rc0: IR event FIFO is full! [ 892.175263][ C1] rc rc0: IR event FIFO is full! [ 892.180172][ C1] rc rc0: IR event FIFO is full! [ 892.185081][ C1] rc rc0: IR event FIFO is full! [ 892.189996][ C1] rc rc0: IR event FIFO is full! [ 892.194914][ C1] rc rc0: IR event FIFO is full! [ 892.200097][ C1] rc rc0: IR event FIFO is full! [ 892.205042][ C1] rc rc0: IR event FIFO is full! [ 892.210487][T21962] rc rc0: two consecutive events of type pulse [ 892.249039][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.274898][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.294951][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.316487][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.334876][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.364882][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.396010][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.420490][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.527210][ T5973] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 892.568165][ T5973] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 892.621141][ T5973] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 894.065270][ T5961] usb 3-1: USB disconnect, device number 64 [ 894.104635][T21986] overlayfs: failed to clone upperpath [ 894.153393][T21986] 9pnet_fd: Insufficient options for proto=fd [ 895.502513][T22018] loop9: detected capacity change from 0 to 7 [ 895.995684][T22018] Dev loop9: unable to read RDB block 7 [ 896.001322][T22018] loop9: unable to read partition table [ 896.007424][T22018] loop9: partition table beyond EOD, truncated [ 896.013695][T22018] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 896.834890][T14563] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 897.074871][T14563] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 897.097902][T14563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.370488][T14563] usb 3-1: Product: syz [ 897.379591][T14563] usb 3-1: Manufacturer: syz [ 897.385055][T14563] usb 3-1: SerialNumber: syz [ 897.412053][T22055] loop9: detected capacity change from 0 to 7 [ 897.478932][T14563] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 897.498259][T14090] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 897.538048][T22055] Dev loop9: unable to read RDB block 7 [ 897.545113][T22060] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2485'. [ 897.556559][T22055] loop9: unable to read partition table [ 897.562870][T22055] loop9: partition table beyond EOD, truncated [ 897.569241][T22055] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 899.875177][ T5961] usb 3-1: USB disconnect, device number 65 [ 899.888527][T14090] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 899.898513][T14090] ath9k_htc: Failed to initialize the device [ 899.916410][ T5961] usb 3-1: ath9k_htc: USB layer deinitialized [ 900.415421][T22087] (syz.5.2491,22087,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 901.273299][T22109] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2491'. [ 902.355808][ T30] audit: type=1400 audit(1755202457.045:829): avc: denied { write } for pid=22128 comm="syz.7.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 903.276543][T22132] team0: Port device team_slave_0 removed [ 903.315907][ T30] audit: type=1400 audit(1755202458.035:830): avc: denied { map } for pid=22120 comm="syz.2.2498" path="/proc/1842/net/fib_trie" dev="proc" ino=4026533203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 903.727441][T22150] input: syz1 as /devices/virtual/input/input101 [ 904.510300][T22160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 906.096574][T22199] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2513'. [ 906.375426][T14090] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 906.584993][T14090] usb 3-1: Using ep0 maxpacket: 8 [ 906.594439][T14090] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 906.604742][T14090] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.640404][T14090] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 906.682527][T14090] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 906.693535][T14090] usb 3-1: Product: syz [ 906.694704][T22210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.718633][T14090] usb 3-1: Manufacturer: syz [ 906.850053][T22222] 9pnet_fd: Insufficient options for proto=fd [ 906.970284][ T30] audit: type=1400 audit(1755202461.585:831): avc: denied { ioctl } for pid=22216 comm="syz.1.2518" path="socket:[56055]" dev="sockfs" ino=56055 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 907.064558][T14090] usb 3-1: config 0 descriptor?? [ 907.291954][T22190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.410622][T22190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.166664][ T5961] usb 3-1: USB disconnect, device number 66 [ 909.756113][T22270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.964046][T22271] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 909.973585][T22271] overlayfs: missing 'lowerdir' [ 910.246180][T22282] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[22282] [ 910.441536][T22288] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2532'. [ 910.602845][T22294] netlink: 'syz.0.2535': attribute type 4 has an invalid length. [ 910.670687][T22300] netlink: 'syz.0.2535': attribute type 4 has an invalid length. [ 910.814353][T22305] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 910.922669][T22306] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 910.999191][T22305] bridge0: port 4(syz_tun) entered disabled state [ 911.008188][T22305] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.015310][T22305] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.029486][T22305] tipc: Resetting bearer [ 911.074305][T22305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.088629][T22305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.136909][T10146] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.176599][T10146] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.200508][T10146] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.219119][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.024243][ T30] audit: type=1400 audit(1755202466.645:832): avc: denied { map } for pid=22322 comm="syz.5.2541" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 912.064896][ T5920] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 912.244906][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 912.254047][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.264293][ T5920] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 912.308610][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.391117][ T5920] usb 2-1: config 0 descriptor?? [ 912.471076][T22332] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2542'. [ 912.980687][T22340] input: syz1 as /devices/virtual/input/input102 [ 913.176088][ T5920] lenovo 0003:17EF:6062.001E: unknown main item tag 0x0 [ 913.195637][ T5920] lenovo 0003:17EF:6062.001E: unknown main item tag 0x0 [ 913.202747][ T5920] lenovo 0003:17EF:6062.001E: unknown main item tag 0x0 [ 913.210236][ T5920] lenovo 0003:17EF:6062.001E: unknown main item tag 0x0 [ 913.224386][ T5920] lenovo 0003:17EF:6062.001E: unknown main item tag 0x0 [ 913.240872][ T5920] lenovo 0003:17EF:6062.001E: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 913.319830][T22351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.599275][ T5920] usb 2-1: USB disconnect, device number 63 [ 913.832762][T22374] (syz.0.2546,22374,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 913.854185][T22357] fido_id[22357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 915.016523][T22390] FAULT_INJECTION: forcing a failure. [ 915.016523][T22390] name failslab, interval 1, probability 0, space 0, times 0 [ 915.031947][T22390] CPU: 0 UID: 0 PID: 22390 Comm: syz.1.2549 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 915.031974][T22390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 915.031984][T22390] Call Trace: [ 915.031991][T22390] [ 915.031998][T22390] dump_stack_lvl+0x16c/0x1f0 [ 915.032022][T22390] should_fail_ex+0x512/0x640 [ 915.032041][T22390] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 915.032070][T22390] should_failslab+0xc2/0x120 [ 915.032091][T22390] __kmalloc_cache_noprof+0x6a/0x3e0 [ 915.032116][T22390] ? __xa_alloc_cyclic+0x1f3/0x340 [ 915.032138][T22390] ? __xdp_reg_mem_model+0x134/0x680 [ 915.032163][T22390] __xdp_reg_mem_model+0x134/0x680 [ 915.032185][T22390] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 915.032208][T22390] ? page_pool_list+0x1ca/0x240 [ 915.032237][T22390] xdp_reg_mem_model+0x22/0x70 [ 915.032258][T22390] bpf_test_run_xdp_live+0x1c7/0x500 [ 915.032288][T22390] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 915.032319][T22390] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 915.032345][T22390] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 915.032371][T22390] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 915.032400][T22390] ? 0xffffffffa02057c0 [ 915.032428][T22390] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 915.032448][T22390] ? 0xffffffffa02057c0 [ 915.032463][T22390] ? 0xffffffffa02057c0 [ 915.032478][T22390] ? 0xffffffffa02057c0 [ 915.032498][T22390] bpf_prog_test_run_xdp+0x824/0x1590 [ 915.032527][T22390] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 915.032547][T22390] ? __might_fault+0x30/0x190 [ 915.032569][T22390] ? fput+0x9b/0xd0 [ 915.032592][T22390] ? __bpf_prog_get+0x97/0x2a0 [ 915.032610][T22390] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 915.032629][T22390] __sys_bpf+0x104d/0x4de0 [ 915.032654][T22390] ? __pfx___sys_bpf+0x10/0x10 [ 915.032677][T22390] ? ksys_write+0x190/0x250 [ 915.032700][T22390] ? __mutex_unlock_slowpath+0x163/0x800 [ 915.032734][T22390] ? fput+0x9b/0xd0 [ 915.032757][T22390] ? ksys_write+0x1ac/0x250 [ 915.032774][T22390] ? __pfx_ksys_write+0x10/0x10 [ 915.032797][T22390] __x64_sys_bpf+0x78/0xc0 [ 915.032819][T22390] ? lockdep_hardirqs_on+0x7c/0x110 [ 915.032837][T22390] do_syscall_64+0xcd/0x4c0 [ 915.032858][T22390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.032876][T22390] RIP: 0033:0x7fb40198ebe9 [ 915.032891][T22390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.032913][T22390] RSP: 002b:00007fb40285e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 915.032931][T22390] RAX: ffffffffffffffda RBX: 00007fb401bb5fa0 RCX: 00007fb40198ebe9 [ 915.032944][T22390] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 915.032955][T22390] RBP: 00007fb40285e090 R08: 0000000000000000 R09: 0000000000000000 [ 915.032966][T22390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.032976][T22390] R13: 00007fb401bb6038 R14: 00007fb401bb5fa0 R15: 00007fff9bf15998 [ 915.033001][T22390] [ 915.337964][T22382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 915.852809][T22403] overlay: filesystem on ./bus is read-only [ 915.859429][ T30] audit: type=1400 audit(1755202470.565:833): avc: denied { mounton } for pid=22402 comm="syz.5.2552" path="/bus" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 916.699491][T22427] netlink: 'syz.2.2556': attribute type 10 has an invalid length. [ 917.312988][T22427] dummy0: left allmulticast mode [ 917.375732][T22427] dummy0: left promiscuous mode [ 917.380833][T22427] bridge0: port 4(dummy0) entered disabled state [ 917.558544][T22427] team0: Port device dummy0 added [ 917.651059][T22426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2558'. [ 918.092738][T22447] Driver unsupported XDP return value 0 on prog (id 421) dev N/A, expect packet loss! [ 918.995880][T22459] (syz.0.2565,22459,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 919.214008][T22463] tipc: Started in network mode [ 919.220878][T22463] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 919.315116][T22463] tipc: Enabled bearer , priority 0 [ 920.424832][ T5920] tipc: Node number set to 11578026 [ 920.477980][T22478] overlayfs: failed to decode file handle (len=4, type=251, flags=0, err=-22) [ 921.248608][T22481] loop9: detected capacity change from 0 to 7 [ 921.670241][T22481] Dev loop9: unable to read RDB block 7 [ 921.715776][T22481] loop9: unable to read partition table [ 921.725898][T22481] loop9: partition table beyond EOD, truncated [ 922.044843][T22481] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 922.370732][T22498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2574'. [ 922.410777][T22498] lo speed is unknown, defaulting to 1000 [ 922.421434][T22498] lo speed is unknown, defaulting to 1000 [ 922.427731][T22498] lo speed is unknown, defaulting to 1000 [ 922.482734][ T30] audit: type=1400 audit(1755202477.185:834): avc: denied { listen } for pid=22497 comm="syz.1.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 922.504112][T22500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 922.635767][ T93] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 922.735976][T22498] infiniband syz2: set active [ 922.740740][T22498] infiniband syz2: added lo [ 922.748419][T14090] lo speed is unknown, defaulting to 1000 [ 922.837659][T22498] RDS/IB: syz2: added [ 922.841692][T22498] smc: adding ib device syz2 with port count 1 [ 922.867626][T22498] smc: ib device syz2 port 1 has pnetid [ 922.898203][T22498] lo speed is unknown, defaulting to 1000 [ 922.944829][ T93] usb 6-1: Using ep0 maxpacket: 8 [ 922.960345][ T93] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 922.968729][ T93] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.986263][ T93] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 923.000157][T14090] lo speed is unknown, defaulting to 1000 [ 923.027920][ T93] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 923.054188][ T93] usb 6-1: Product: syz [ 923.140056][ T93] usb 6-1: Manufacturer: syz [ 923.147633][ T93] usb 6-1: config 0 descriptor?? [ 923.646915][T22502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.695385][T22502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.310512][T22498] lo speed is unknown, defaulting to 1000 [ 924.398650][T22498] lo speed is unknown, defaulting to 1000 [ 924.484622][T22498] lo speed is unknown, defaulting to 1000 [ 924.605575][T22498] lo speed is unknown, defaulting to 1000 [ 924.871050][T22498] lo speed is unknown, defaulting to 1000 [ 925.035362][ T93] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 925.160751][T22546] (syz.7.2583,22546,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 925.295820][ T93] usb 3-1: Using ep0 maxpacket: 8 [ 925.303470][T22498] lo speed is unknown, defaulting to 1000 [ 925.311794][ T93] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.324770][ T93] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 925.333812][ T93] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.356574][ T93] usb 3-1: config 0 descriptor?? [ 925.388947][ T5961] usb 6-1: USB disconnect, device number 19 [ 925.513724][T22565] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2585'. [ 925.574744][ T30] audit: type=1400 audit(1755202480.255:835): avc: denied { node_bind } for pid=22563 comm="syz.5.2586" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 926.038523][ T93] lenovo 0003:17EF:6062.001F: unknown main item tag 0x0 [ 926.060293][ T93] lenovo 0003:17EF:6062.001F: unknown main item tag 0x0 [ 926.076880][ T93] lenovo 0003:17EF:6062.001F: unknown main item tag 0x0 [ 926.086855][ T93] lenovo 0003:17EF:6062.001F: unknown main item tag 0x0 [ 926.110729][ T93] lenovo 0003:17EF:6062.001F: unknown main item tag 0x0 [ 926.166924][ T93] lenovo 0003:17EF:6062.001F: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0 [ 926.229034][ T5961] usb 3-1: USB disconnect, device number 67 [ 926.511853][T22593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.700029][T22579] fido_id[22579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 927.179788][T22611] FAULT_INJECTION: forcing a failure. [ 927.179788][T22611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.205240][T22613] input: syz1 as /devices/virtual/input/input103 [ 927.228012][T22611] CPU: 0 UID: 0 PID: 22611 Comm: syz.5.2591 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 927.228032][T22611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 927.228039][T22611] Call Trace: [ 927.228043][T22611] [ 927.228047][T22611] dump_stack_lvl+0x16c/0x1f0 [ 927.228064][T22611] should_fail_ex+0x512/0x640 [ 927.228079][T22611] _copy_from_user+0x2e/0xd0 [ 927.228095][T22611] ucma_bind_ip+0xb8/0x1f0 [ 927.228108][T22611] ? __pfx_ucma_bind_ip+0x10/0x10 [ 927.228120][T22611] ? __might_fault+0xe3/0x190 [ 927.228131][T22611] ? __might_fault+0x13b/0x190 [ 927.228145][T22611] ? __pfx_ucma_bind_ip+0x10/0x10 [ 927.228158][T22611] ucma_write+0x1f8/0x330 [ 927.228169][T22611] ? __pfx_ucma_write+0x10/0x10 [ 927.228181][T22611] ? bpf_lsm_file_permission+0x9/0x10 [ 927.228195][T22611] ? security_file_permission+0x71/0x210 [ 927.228213][T22611] ? rw_verify_area+0xcf/0x6c0 [ 927.228232][T22611] ? __pfx_ucma_write+0x10/0x10 [ 927.228242][T22611] vfs_write+0x29d/0x11d0 [ 927.228257][T22611] ? __pfx_vfs_write+0x10/0x10 [ 927.228267][T22611] ? find_held_lock+0x2b/0x80 [ 927.228281][T22611] ? __fget_files+0x204/0x3c0 [ 927.228296][T22611] ? __fget_files+0x20e/0x3c0 [ 927.228312][T22611] ksys_write+0x1f8/0x250 [ 927.228322][T22611] ? __pfx_ksys_write+0x10/0x10 [ 927.228338][T22611] do_syscall_64+0xcd/0x4c0 [ 927.228351][T22611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.228362][T22611] RIP: 0033:0x7f50a4f8ebe9 [ 927.228372][T22611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.228382][T22611] RSP: 002b:00007f50a5ecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.228394][T22611] RAX: ffffffffffffffda RBX: 00007f50a51b5fa0 RCX: 00007f50a4f8ebe9 [ 927.228401][T22611] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000004 [ 927.228408][T22611] RBP: 00007f50a5ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 927.228414][T22611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.228421][T22611] R13: 00007f50a51b6038 R14: 00007f50a51b5fa0 R15: 00007ffd8c8bd1b8 [ 927.228434][T22611] [ 930.064022][ T30] audit: type=1400 audit(1755202484.775:836): avc: denied { create } for pid=22651 comm="syz.7.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 930.147692][ T30] audit: type=1400 audit(1755202484.855:837): avc: denied { execute } for pid=22649 comm="syz.2.2600" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 930.558702][ T30] audit: type=1400 audit(1755202484.965:838): avc: denied { audit_write } for pid=22649 comm="syz.2.2600" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 930.638817][ T30] audit: type=1400 audit(1755202485.255:839): avc: denied { watch watch_reads } for pid=22649 comm="syz.2.2600" path="/proc/1904/task" dev="proc" ino=57614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 930.700184][T22663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2603'. [ 930.788847][ T30] audit: type=1400 audit(1755202485.415:840): avc: denied { watch } for pid=22661 comm="syz.5.2603" path="/227/file0/file0" dev="afs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 931.111584][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.787794][T22684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 932.095092][ T30] audit: type=1400 audit(1755202486.805:841): avc: denied { setopt } for pid=22675 comm="syz.1.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 932.590491][T22697] binder: 22693:22697 ioctl c018620c 200000000380 returned -1 [ 933.051584][T22701] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2609'. [ 933.313847][ T30] audit: type=1326 audit(1755202488.025:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a898ebe9 code=0x7ffc0000 [ 933.408097][ T30] audit: type=1326 audit(1755202488.055:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a898ebe9 code=0x7ffc0000 [ 933.457817][ T30] audit: type=1326 audit(1755202488.055:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7ff3a898ebe9 code=0x7ffc0000 [ 933.481955][T22716] input: syz1 as /devices/virtual/input/input104 [ 933.489701][ T30] audit: type=1326 audit(1755202488.055:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a898ebe9 code=0x7ffc0000 [ 933.885456][ T5961] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 934.108723][T22735] 9pnet_fd: Insufficient options for proto=fd [ 934.369501][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.476661][T22727] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2612'. [ 934.494634][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.595010][ T5920] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 934.832182][ T5961] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 934.873939][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.898406][ T5961] usb 3-1: config 0 descriptor?? [ 934.986225][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.004998][ T5920] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 935.051028][ T5920] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 935.060348][ T5920] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 935.090010][ T5920] usb 6-1: Manufacturer: syz [ 935.116029][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 935.116041][ T30] audit: type=1326 audit(1755202489.835:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a898ebe9 code=0x7ffc0000 [ 935.177770][ T5920] usb 6-1: config 0 descriptor?? [ 935.281717][ T30] audit: type=1326 audit(1755202489.835:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a898ebe9 code=0x7ffc0000 [ 935.387107][ T5961] hid-led 0003:0FC5:B080.0020: unknown main item tag 0x0 [ 935.439317][ T30] audit: type=1326 audit(1755202489.845:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3a898e7eb code=0x7ffc0000 [ 935.809280][ T30] audit: type=1326 audit(1755202489.845:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3a898e7eb code=0x7ffc0000 [ 935.866171][T22707] 9pnet_fd: Insufficient options for proto=fd [ 935.894485][ T30] audit: type=1326 audit(1755202489.875:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3a89c14a5 code=0x7ffc0000 [ 936.053157][ T30] audit: type=1326 audit(1755202490.085:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a898ebe9 code=0x7ffc0000 [ 936.153981][ T30] audit: type=1326 audit(1755202490.085:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3a898e7eb code=0x7ffc0000 [ 936.231543][T22766] veth0: entered promiscuous mode [ 936.232449][ T30] audit: type=1326 audit(1755202490.085:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3a898e7eb code=0x7ffc0000 [ 936.264055][ T30] audit: type=1326 audit(1755202490.085:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3a89c14a5 code=0x7ffc0000 [ 936.277181][T22766] veth0: left promiscuous mode [ 936.474966][ T30] audit: type=1326 audit(1755202490.285:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a898ebe9 code=0x7ffc0000 [ 936.536132][T22769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2622'. [ 936.545274][T22769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2622'. [ 937.126692][ T5961] hid-led 0003:0FC5:B080.0020: probe with driver hid-led failed with error -71 [ 937.149084][ T5961] usb 3-1: USB disconnect, device number 68 [ 937.474566][ T5973] usb 6-1: USB disconnect, device number 20 [ 938.247829][T22816] tipc: Enabled bearer , priority 0 [ 939.111769][T22833] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2632'. [ 939.120991][T22833] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 939.706224][ T93] tipc: Node number set to 2438834264 [ 939.834145][T22835] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2633'. [ 939.837436][T22841] tipc: Enabled bearer , priority 0 [ 939.855181][T22841] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 939.862749][T22841] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 939.872994][T22841] tipc: Resetting bearer [ 939.988984][T22841] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 940.085685][T22841] tipc: Resetting bearer [ 940.087196][T22856] input: syz1 as /devices/virtual/input/input105 [ 940.155080][ T5961] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 940.298313][T22869] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2638'. [ 940.401043][T22869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2638'. [ 940.478772][ T5961] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 940.488072][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.497771][ T5961] usb 3-1: Product: syz [ 940.502187][ T5961] usb 3-1: Manufacturer: syz [ 940.511405][ T5961] usb 3-1: SerialNumber: syz [ 940.550234][ T5961] usb 3-1: config 0 descriptor?? [ 940.815656][T22874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.030026][ T13] tipc: Resetting bearer [ 941.453154][T22843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.475725][T22843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.583322][T22897] pim6reg: entered allmulticast mode [ 941.599358][T22897] pim6reg: left allmulticast mode [ 942.132634][ T5961] usb 3-1: f81604_read: reg: 100e failed: -EPROTO [ 942.252403][ T5961] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 942.281348][ T5961] usb 3-1: USB disconnect, device number 69 [ 942.321509][T22934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2650'. [ 942.323339][ T5961] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 942.359714][ T5513] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 942.398016][ T5961] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 942.845575][T22961] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2653'. [ 942.944826][T14563] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 943.136931][T14563] usb 2-1: Using ep0 maxpacket: 8 [ 943.144318][T14563] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 943.154036][T14563] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.176991][T14563] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 943.198236][T14563] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 943.221794][T14563] usb 2-1: Product: syz [ 943.241650][T14563] usb 2-1: Manufacturer: syz [ 943.267711][T14563] usb 2-1: config 0 descriptor?? [ 943.520505][T22950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.548835][T22950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.554983][ T31] INFO: task syz.6.2088:19518 blocked for more than 143 seconds. [ 944.563701][ T31] Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 [ 944.602175][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 944.637083][ T31] task:syz.6.2088 state:D stack:27272 pid:19518 tgid:19507 ppid:17746 task_flags:0x400140 flags:0x00004004 [ 944.709482][ T31] Call Trace: [ 944.713204][ T31] [ 944.717138][ T31] __schedule+0x1190/0x5de0 [ 944.722305][ T31] ? check_path.constprop.0+0x24/0x50 [ 944.732610][ T31] ? __pfx___schedule+0x10/0x10 [ 944.738834][ T31] ? find_held_lock+0x2b/0x80 [ 944.743890][ T31] ? schedule+0x2d7/0x3a0 [ 944.748807][ T31] schedule+0xe7/0x3a0 [ 944.753241][ T31] io_schedule+0xbf/0x130 [ 944.758418][ T31] folio_wait_bit_common+0x3d6/0x9e0 [ 944.768962][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 944.775864][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 944.781811][ T31] ? filemap_get_folios_tag+0x46a/0xae0 [ 944.792350][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 944.799533][ T31] folio_wait_writeback+0x3c/0x90 [ 944.804732][ T31] __filemap_fdatawait_range+0x11f/0x200 [ 944.812089][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 944.819545][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 944.824724][ T31] ? find_held_lock+0x2b/0x80 [ 944.829832][ T31] ? find_held_lock+0x2b/0x80 [ 944.835063][ T31] ? sync_inodes_sb+0x5e1/0xa70 [ 944.840353][ T31] filemap_fdatawait_keep_errors+0x21/0x30 [ 944.846973][ T31] sync_inodes_sb+0x5fa/0xa70 [ 944.851790][ T31] ? sync_inodes_sb+0x5e1/0xa70 [ 944.857271][ T31] ? __pfx_sync_inodes_sb+0x10/0x10 [ 944.863029][ T31] ? find_held_lock+0x2b/0x80 [ 944.869131][ T31] ? __iterate_supers+0x1b6/0x360 [ 944.874588][ T31] sync_inodes_one_sb+0x52/0x60 [ 944.879950][ T31] __iterate_supers+0x20d/0x360 [ 944.884953][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 944.891110][ T31] ksys_sync+0x89/0x150 [ 944.895774][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 944.900977][ T31] ? syscall_trace_enter+0x89/0x240 [ 944.906616][ T31] __do_sys_sync+0xe/0x20 [ 944.911090][ T31] do_syscall_64+0xcd/0x4c0 [ 944.916269][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.922288][ T31] RIP: 0033:0x7fa9ff38ebe9 [ 944.927231][ T31] RSP: 002b:00007fa9fcdd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 944.936224][ T31] RAX: ffffffffffffffda RBX: 00007fa9ff5b6360 RCX: 00007fa9ff38ebe9 [ 944.944573][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 944.953061][ T31] RBP: 00007fa9ff5b6360 R08: 0000000000000000 R09: 0000000000000000 [ 944.961658][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.971851][ T31] R13: 00007fa9ff5b63f8 R14: 00007fa9ff5b6360 R15: 00007ffdb28e9568 [ 944.983164][ T31] [ 944.988420][ T31] [ 944.988420][ T31] Showing all locks held in the system: [ 945.100817][ T31] 1 lock held by khungtaskd/31: [ 945.111078][ T31] #0: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 945.157712][ T31] 2 locks held by dhcpcd/5513: [ 945.172520][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 945.190908][ T31] #1: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 945.201419][ T31] 2 locks held by getty/5605: [ 945.206241][ T31] #0: ffff888031b4f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 945.217413][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 945.227846][ T31] 2 locks held by syz.4.1861/17396: [ 945.233092][ T31] #0: ffff888031438428 (sb_writers#16){.+.+}-{0:0}, at: do_pwritev+0x1a6/0x270 [ 945.242293][ T31] #1: ffff888054d2a7e8 (&sb->s_type->i_mutex_key#22){++++}-{4:4}, at: netfs_start_io_write+0x59/0x80 [ 945.253626][ T31] 2 locks held by syz.6.2088/19518: [ 945.259002][ T31] #0: ffff8880314380e0 (&type->s_umount_key#75){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 945.269172][ T31] #1: ffff888031438950 (&s->s_sync_lock){+.+.}-{4:4}, at: sync_inodes_sb+0x231/0xa70 [ 945.279352][ T31] 2 locks held by dhcpcd/23019: [ 945.284284][ T31] #0: ffff888049112258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 945.294300][ T31] #1: ffffffff8e5cc778 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 945.308372][ T31] [ 945.312696][ T31] ============================================= [ 945.312696][ T31] [ 945.326817][ T31] NMI backtrace for cpu 0 [ 945.326833][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 945.326855][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 945.326866][ T31] Call Trace: [ 945.326873][ T31] [ 945.326880][ T31] dump_stack_lvl+0x116/0x1f0 [ 945.326903][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 945.326927][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 945.326956][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 945.326984][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 945.327011][ T31] watchdog+0xf0e/0x1260 [ 945.327035][ T31] ? __pfx_watchdog+0x10/0x10 [ 945.327053][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 945.327072][ T31] ? __kthread_parkme+0x19e/0x250 [ 945.327099][ T31] ? __pfx_watchdog+0x10/0x10 [ 945.327118][ T31] kthread+0x3c5/0x780 [ 945.327136][ T31] ? __pfx_kthread+0x10/0x10 [ 945.327155][ T31] ? rcu_is_watching+0x12/0xc0 [ 945.327176][ T31] ? __pfx_kthread+0x10/0x10 [ 945.327195][ T31] ret_from_fork+0x5d7/0x6f0 [ 945.327211][ T31] ? __pfx_kthread+0x10/0x10 [ 945.327229][ T31] ret_from_fork_asm+0x1a/0x30 [ 945.327263][ T31] [ 945.327276][ T31] Sending NMI from CPU 0 to CPUs 1: [ 945.451788][ C1] NMI backtrace for cpu 1 [ 945.451802][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 945.451818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 945.451827][ C1] RIP: 0010:enqueue_entity+0x3d/0x13f0 [ 945.451846][ C1] Code: 89 c2 53 48 c1 ea 03 48 89 fb 48 83 ec 20 48 89 04 24 48 b8 00 00 00 00 00 fc ff df 80 3c 02 00 0f 85 f8 0f 00 00 4c 8b 6b 58 <4d> 39 f5 0f 84 55 07 00 00 48 89 df 4d 8d a6 a8 00 00 00 e8 cb 8c [ 945.451858][ C1] RSP: 0018:ffffc90000a08d70 EFLAGS: 00000046 [ 945.451870][ C1] RAX: dffffc0000000000 RBX: ffff888035906000 RCX: 0000000000000000 [ 945.451879][ C1] RDX: 1ffff11006b20c0b RSI: ffff888025c14900 RDI: ffff888035906000 [ 945.451887][ C1] RBP: 0000000000000009 R08: 0000000000000000 R09: fffffbfff21566b2 [ 945.451895][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 945.451903][ C1] R13: 0000000000000000 R14: ffff888025c14900 R15: 0000000000000000 [ 945.451912][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 945.451925][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.451934][ C1] CR2: 0000200000030000 CR3: 0000000042204000 CR4: 00000000003526f0 [ 945.451943][ C1] Call Trace: [ 945.451949][ C1] [ 945.451957][ C1] enqueue_task_fair+0x395/0x1200 [ 945.451973][ C1] ? rcu_is_watching+0x12/0xc0 [ 945.451990][ C1] enqueue_task+0x78/0x4e0 [ 945.452007][ C1] ttwu_do_activate+0x17e/0xb00 [ 945.452024][ C1] sched_ttwu_pending+0x2bc/0x640 [ 945.452039][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 945.452053][ C1] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 945.452069][ C1] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 945.452084][ C1] __flush_smp_call_function_queue+0x4cf/0x8c0 [ 945.452104][ C1] __sysvec_call_function_single+0x87/0x400 [ 945.452124][ C1] sysvec_call_function_single+0x9f/0xc0 [ 945.452143][ C1] [ 945.452147][ C1] [ 945.452152][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 945.452167][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 945.452180][ C1] Code: 9c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 945.452191][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 945.452200][ C1] RAX: 0000000004c5945b RBX: 0000000000000001 RCX: ffffffff8b935c29 [ 945.452209][ C1] RDX: 0000000000000000 RSI: ffffffff8de4f235 RDI: ffffffff8c162580 [ 945.452217][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6655 [ 945.452225][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 945.452233][ C1] R13: ffff88801e2b2440 R14: ffffffff90ab3590 R15: 0000000000000000 [ 945.452244][ C1] ? ct_kernel_exit+0x139/0x190 [ 945.452260][ C1] default_idle+0x13/0x20 [ 945.452274][ C1] default_idle_call+0x6d/0xb0 [ 945.452288][ C1] do_idle+0x391/0x510 [ 945.452303][ C1] ? __pfx_do_idle+0x10/0x10 [ 945.452318][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 945.452334][ C1] cpu_startup_entry+0x4f/0x60 [ 945.452349][ C1] start_secondary+0x21d/0x2b0 [ 945.452367][ C1] ? __pfx_start_secondary+0x10/0x10 [ 945.452387][ C1] common_startup_64+0x13e/0x148 [ 945.452406][ C1] [ 945.453251][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 945.453269][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 945.453289][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 945.453298][ T31] Call Trace: [ 945.453305][ T31] [ 945.453312][ T31] dump_stack_lvl+0x3d/0x1f0 [ 945.453332][ T31] vpanic+0x6e8/0x7a0 [ 945.453355][ T31] ? __pfx_vpanic+0x10/0x10 [ 945.453379][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 945.453399][ T31] panic+0xca/0xd0 [ 945.453421][ T31] ? __pfx_panic+0x10/0x10 [ 945.453444][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 945.453469][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 945.453492][ T31] ? watchdog+0xd78/0x1260 [ 945.453509][ T31] ? watchdog+0xd6b/0x1260 [ 945.453528][ T31] watchdog+0xd89/0x1260 [ 945.453549][ T31] ? __pfx_watchdog+0x10/0x10 [ 945.453565][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 945.453582][ T31] ? __kthread_parkme+0x19e/0x250 [ 945.453606][ T31] ? __pfx_watchdog+0x10/0x10 [ 945.453623][ T31] kthread+0x3c5/0x780 [ 945.453639][ T31] ? __pfx_kthread+0x10/0x10 [ 945.453656][ T31] ? rcu_is_watching+0x12/0xc0 [ 945.453676][ T31] ? __pfx_kthread+0x10/0x10 [ 945.453692][ T31] ret_from_fork+0x5d7/0x6f0 [ 945.453707][ T31] ? __pfx_kthread+0x10/0x10 [ 945.453723][ T31] ret_from_fork_asm+0x1a/0x30 [ 945.453752][ T31] [ 945.908492][ T31] Kernel Offset: disabled [ 945.912790][ T31] Rebooting in 86400 seconds..