last executing test programs: 14.856015564s ago: executing program 1 (id=3901): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{0x2}, {0xc, "0a19502f5741b4a0"}}}}, 0xf) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x0, 0xffffffff, @private0, 0x2000000}], 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa0, 0x30, 0x2, 0xffffdffe, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x40, 0x800, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "05fe402538880995b20cdaa99425cdf0"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r5 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x7000) socket$key(0xf, 0x3, 0x2) mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x1fd6, @local, 0x100}], 0x1c) poll(0x0, 0x0, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="fb0200ff7f480095000000"], 0x19) 11.700320198s ago: executing program 2 (id=3910): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) write$tun(r0, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003001f66088f0510660548010203010902120001049570810904008100ffffff02f51958494a2d4454ded96e99cffcbf456aa51b1393afa69c5e14821d57f0e2df8773830c554eddfd3ea1c6af7dafa7a8004e661816c817d0b4d3b1316a255983d692a56d57a62ec31ce87b252df1d7a4e19ea52937eb3afc0da68f59b28e0230652ffbffffffaf559593063e5d130feaeef0439dd7f6a26a31bc5f0194d24491a31e97a05d0179c510464aa9a190184cdc35"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x2, &(0x7f0000000a80)="4dce"}], 0x1}) 10.71760989s ago: executing program 4 (id=3913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904", 0xf) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x2, 0x3, @mcast1, 0x1, 0x1, 0x5, 0x2}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000400"/19, @ANYRES32, @ANYBLOB="0500000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000700)=[{0x1, 0x1, 0x4}, {0x4, 0x5, 0xb, 0x5}, {0x5, 0x3, 0xd, 0x9}, {0x4, 0x2, 0x2, 0x5}, {0x5, 0x1, 0xb, 0x2}, {0x0, 0x3, 0xb, 0x4}, {0x2, 0x2, 0x0, 0xc}], 0x10, 0x7}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), 0x0}, 0x20) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0xfc2a5000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x80000003) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) splice(r7, &(0x7f0000001040)=0x8, 0xffffffffffffffff, &(0x7f0000001080)=0x80, 0x9, 0x2) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0'}, 0x6b) 9.599946242s ago: executing program 0 (id=3916): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x18) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) 8.726898992s ago: executing program 1 (id=3917): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x500, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 8.58771779s ago: executing program 0 (id=3919): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="84f40200c9007923487e54c4d209821547ad6b68b0a56cb7d4f6d7ee5176bc7439cf956fe692c34146c1eaba15ce56aed98054a274ceb4c9f8deff29b622221a7223cd6c280b9896d89fec3ef3149cb650b169782c62f9e0fb103aea52c793b4ce70606904fe3991b34014c92b7daa487d17bbc2"], 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0xf) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000114) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000019c0), r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24082}, 0xa800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000780), 0x12) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000700)={'bond0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) socket$rds(0x15, 0x5, 0x0) 8.17880357s ago: executing program 3 (id=3920): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="40010000", @ANYRES16=r0, @ANYBLOB="010027bd70000000180001000000080001000000000004000480080002000100"], 0x140}}, 0x0) 8.123028473s ago: executing program 2 (id=3921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000004fbff0008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0}, 0xd) 8.121739396s ago: executing program 1 (id=3922): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x23, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r5, 0x0, 0x0, 0x2, 0x0, 0x60) fremovexattr(r5, &(0x7f0000000180)=@random={'trusted.', '\x00'}) r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f8e400905080aff03f70709090587"], 0x0) syz_usb_disconnect(r6) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000100), 0x2302082, &(0x7f0000000240)={[{@index_on}, {@redirect_dir_on}, {@workdir={'workdir', 0x3d, './file1'}}]}) 8.036366489s ago: executing program 3 (id=3923): r0 = syz_open_procfs(0x0, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x242, 0x82) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f00000000c0)={'\x00', 0x7f, 0x1, 0x9}) syz_io_uring_submit(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e23, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x27, 0x0, "a5b45013f5547040229e90bfdd2cbb77084d706a04964c8214c492169b0cb51256adc3e5baebfa65fd82495b5e4d1b9b9bfd44893a0000000000ff0700000060dfde1c705f5fa6000800"}, 0xd8) writev(r5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 7.047241354s ago: executing program 3 (id=3924): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) io_submit(0x0, 0x47f, &(0x7f0000000700)=[&(0x7f0000000440)={0xfff0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x1001, 0xf}]) dup3(r2, r0, 0x0) 7.033378915s ago: executing program 2 (id=3925): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x3f, 0x5ae9}, {0x6, 0x4, 0x7, 0x3}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000000, 0xfbc}, @nop, @sack={0x5, 0x12, [0x7, 0x767, 0xb, 0xfffffffc]}, @timestamp={0x8, 0xa, 0x800001, 0x8a}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "0c39e122bd2f7556512830127a3fa7b7"}]}}}}}}}, 0x0) 6.896036903s ago: executing program 4 (id=3926): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60006e80110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) (fail_nth: 5) 6.892725924s ago: executing program 2 (id=3927): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = signalfd(r3, &(0x7f0000000040)={[0x9]}, 0x8) getpeername$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x4a7c, 0x65, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x6}, {0x10, 0x2}, {0xfff2, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x4a40, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xffe0}}, @TCA_FW_ACT={0x15c4, 0x4, [@m_mpls={0x8c, 0xf, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x95, 0x1, 0x7fffffff, 0x3}, 0xf03990fc23e303d5}}]}, {0x34, 0x6, "4c2c33d68ca2757b236d08125aa610b21b54c1602cfd4339f3c7886bf02ce9ffcbcac0f067cf0db3a8371b83f3019e77"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x5}}}}, @m_connmark={0xb4, 0x11, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x1ff, 0x5, 0xd4b, 0x1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x3, 0x2, 0xfff}, 0x1}}]}, {0x4a, 0x6, "de04fbd33d163c4ad32da78c90c4e6d89b3c0fda83226e1d7ae8a80cbf1098c00878c93b82282bafbb90b385b123c8f0f20df41c94087cffab786975d5ffbd5e73b74ad0ecda"}, {0xc, 0x7, {0x1, 0x79d0f27dc9cbc21b}}, {0xc}}}, @m_ctinfo={0x9c, 0x8, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x80}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xb}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x4f, 0x6, "6fe19872ab1ac55806fa1467e5904f03a22d7aa40791034551e1624095aa33bb303b2a040b8518589869364313c165136b95a3e233697acc53359431817c8056cf63364e945924f81c61fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0xb8, 0xa, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x7c, 0x6, "c2f689f42d6a6786b1c39749987981bb08bb5198d3160cd9532fb65db659f03d4ab84ecde5d4dca9d8a9892b8125dc316180a587b16ef29fb03bed8c962e01daa8b1ea0b993c9f566163009525ea46676b24bdadeb677d5560031ee892a9d0f45b8e5835013bff2dad00b2571012e1a3194ea66330da28f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x154, 0xa, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x615, 0x5, 0x7, 0x80000000}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x299}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x5, 0xa, 0x3}}}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xce}]}]}, {0xac, 0x6, "12721726b471339d8b45455211120526b24cf30607c2aad73abd8b21b8fc28fcec470c27e0b03b00570e3b1097005c89919f348520f9b0fe5cf673b1aeaa0a0fe1d9794145cf734e9a513cd66019bbbe8f16b3f72a9ddb0aba76913c385c842b1c541a481dde0242a715aa53aded9c8c31f4a89437b157f6eea3374e2f8676f7f5050bac7404808b8d4bdeefd22e51b465871821b0d320366f630022e4afa9e314b4c145a0767994"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x11d8, 0xa, 0x0, 0x0, {{0xb}, {0x113c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4000000, 0x0, 0x2, 0x5, 0xfff, 0x8, 0x80000000, 0x5, 0xa0d, 0x6, 0x5, 0x2e7, 0x2, 0x2, 0x3a1, 0x2, 0x868, 0x1, 0x51c1, 0xf, 0x7, 0x8, 0x5, 0x9, 0xfffffffd, 0x5, 0x8, 0x100, 0xfffffffa, 0xd473, 0xffffffff, 0x3, 0x8, 0x3, 0xf, 0xffffffff, 0x8, 0x2, 0x39, 0x5, 0x8375, 0x3aba, 0x4, 0xff, 0x401, 0xec2, 0xfff, 0x5de, 0x9, 0x1, 0xffff, 0x1, 0x6, 0x3, 0x7, 0x7fff, 0x9, 0x5000, 0x98, 0x4, 0x7, 0x7, 0x0, 0xf3, 0x6, 0x2d6a, 0x8, 0xb6d8, 0x5, 0x40, 0x80, 0x5, 0xbc53, 0x6, 0x5a, 0xfffffffb, 0x1, 0x1, 0x763e, 0xff, 0x69, 0x2, 0x80, 0x8, 0x9, 0x80000001, 0x9, 0x101, 0x2, 0x62, 0xfffffff9, 0x2, 0x4, 0x1, 0x7, 0x9, 0x0, 0x3, 0x80, 0x3ff, 0x2, 0x9, 0x3, 0x6, 0x3, 0x6, 0x7e, 0x100, 0x9, 0x40, 0xbd2, 0x0, 0x4, 0x81, 0x6, 0x8, 0x1517cfac, 0x8, 0x2, 0x3, 0x9, 0x3, 0xfd, 0x80, 0x5, 0x4ce3, 0x2, 0x2d2, 0x6, 0x6, 0x924, 0x5, 0x3, 0x10001, 0xb119, 0x11, 0x1, 0x7, 0x0, 0x1, 0x7, 0x7, 0x40, 0x100, 0x3, 0x4, 0x3, 0x5, 0x7fff, 0x180, 0x99a7, 0x750, 0x9d63, 0x7, 0x315, 0x3, 0xd, 0x7ea, 0x0, 0x0, 0x1ff, 0x800, 0x80000000, 0x5, 0x401, 0x4fe8c491, 0x9, 0x9, 0x8, 0x8, 0x1000, 0x9, 0xffffffff, 0x8, 0xff, 0xb, 0x1, 0x6, 0x2, 0x100, 0x200, 0x7, 0x401, 0x4, 0x4, 0x2, 0x7, 0x1, 0x0, 0x8, 0x8000, 0x9, 0x362, 0x8, 0x5, 0x81, 0x6, 0x1ff, 0x0, 0x6, 0x0, 0x712, 0x7, 0x2, 0x0, 0x7, 0x4, 0xc, 0x1, 0x2000, 0xffffaa5a, 0xfffffe00, 0x9, 0x3f, 0x3, 0x7, 0x0, 0x4, 0x40, 0xffffff7f, 0x80000000, 0x3, 0x9, 0x2, 0x2, 0xb7, 0x2e6, 0x8000, 0xf, 0x7, 0x1000, 0x491, 0x8, 0x6, 0x7fffffff, 0x0, 0x52c, 0x9b, 0x5, 0x7fffffff, 0x94be, 0x7, 0x9, 0xfff, 0x2, 0x2, 0x7fffffff, 0xd0, 0x8, 0x9, 0x10001, 0x200, 0x7, 0x6c, 0x68e, 0x7]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x5, 0x6, 0x2e, {0x9, 0x0, 0xa, 0x4, 0x3, 0x66e61d86}, {0xb1, 0x0, 0x2, 0x7fff, 0x3, 0xec6c}, 0x5fda53fc, 0x2, 0x8dd}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x1, 0x7, 0xc0000, 0x86d, {0x5, 0x0, 0x401, 0xe, 0x400, 0x7}, {0x0, 0x1, 0x6, 0x3, 0x9, 0x1000}, 0x1, 0x4, 0x1a5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x10001, 0x6, 0x5, 0xe0000, 0xfffffe01, 0xd, 0x42ea, 0x10, 0x6, 0x4, 0x5, 0x80000001, 0xffffffff, 0x5, 0x100000, 0x5, 0x10001, 0x3, 0x0, 0xf96, 0x5, 0x6, 0x2, 0x400, 0x8, 0x8c2, 0x751c, 0xd7000000, 0x0, 0x2, 0x1, 0x4, 0x0, 0x8, 0x6, 0x2, 0x3, 0xd, 0xa, 0x7f, 0x4, 0x7, 0xdb, 0x3, 0x0, 0x2, 0xfffffeff, 0xd, 0x7, 0xff, 0xffffffff, 0x2, 0x9, 0xffffff77, 0x8001, 0x6, 0x4, 0x7ff, 0xce7d, 0x1, 0xffff0000, 0x8, 0x40000000, 0x3ff, 0x7b9, 0x7, 0x87, 0x5, 0xced1, 0x3bb6, 0xf88, 0x7ae, 0x0, 0x7, 0x2, 0x10, 0x8001, 0x6, 0x800, 0xe66, 0x0, 0x40, 0xc, 0x6, 0x3, 0x3, 0x2, 0x3ff, 0x80000, 0x0, 0x80000001, 0x6, 0x63c, 0xf, 0xc9, 0xfff, 0x7, 0x7, 0x76, 0x0, 0xa, 0x3, 0x0, 0x5, 0x6, 0x4, 0x0, 0x2, 0x1, 0x3ff, 0xfffff001, 0x200, 0x7, 0x101, 0x50000000, 0x7, 0x2, 0x1, 0x7, 0xc78, 0x3, 0xffffffff, 0xc, 0x7fffffff, 0x5, 0xb1, 0x5, 0x1, 0x4, 0x4, 0x4, 0xd3, 0x89, 0x3, 0x4, 0x9, 0x0, 0x9, 0x5, 0x0, 0x158, 0x3, 0x7, 0xfffffff4, 0x1, 0x8, 0x7f, 0x5d3, 0xb979, 0x6, 0x4, 0x8001, 0xb, 0x2f57, 0x2, 0x10, 0x3, 0x2020000, 0xfffffff4, 0xfffff5ed, 0x796f69d3, 0x3, 0x6f2, 0x1, 0x3, 0x6, 0x7, 0x1, 0x8, 0x5, 0x6, 0x3, 0x0, 0x6bbc, 0xfffffffe, 0x800, 0x2, 0x5, 0x80000000, 0x80000000, 0x9, 0x1, 0x9, 0x1, 0x2, 0x77, 0xfff, 0x4, 0xbd75, 0x0, 0xfffffffa, 0xd, 0x0, 0xd038, 0x1, 0x1, 0x8, 0x6, 0x7, 0x10001, 0x10, 0x5, 0x6, 0x1000, 0xe, 0x4, 0x1, 0xffffffff, 0x15ee, 0x2, 0x9, 0x40, 0xffff, 0x98, 0x7, 0x0, 0x3, 0x2, 0xfffffffd, 0x7, 0x8, 0x9, 0x6, 0xa1, 0xfffffbff, 0x100, 0x5, 0x80000001, 0x4, 0x3, 0x7, 0x1, 0xf, 0x1, 0x0, 0x7ff, 0x1, 0x25, 0x6, 0x6, 0x5, 0xa0d, 0xcbc, 0x9, 0x8, 0x101, 0x5, 0xffff, 0xc2, 0x7, 0x60, 0x29, 0x7, 0x1, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x3b81, 0x80000000, 0x658, 0x9, 0x10001, 0x5, 0x8, 0x8, 0x9, 0x8, 0x80000000, 0x9, 0x1, 0x4, 0x6b, 0x2, 0x7, 0x3, 0xf, 0xc, 0x2, 0x5, 0x40, 0x7, 0x3, 0x8, 0x1b, 0xe, 0x200, 0x3, 0x3ff, 0x843, 0x81, 0xfffffff7, 0x6, 0x7, 0x8000, 0x3, 0x3, 0x98d, 0x8, 0x155b40ee, 0x8000, 0xc, 0x2, 0x7ff, 0xc00, 0xb820, 0xe, 0x4, 0x101, 0x0, 0x5, 0x7, 0xffff, 0xf6b, 0x2, 0x7, 0x6, 0x0, 0x80000001, 0xffff8001, 0x400, 0x0, 0x336f0d11, 0xa84d, 0x0, 0x1, 0x77700000, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3e4, 0x80, 0x3, 0x40, 0x4, 0x0, 0x3, 0x3adb, 0x7, 0x2, 0xe000, 0x80, 0x4, 0x10001, 0x3, 0x3, 0x5, 0x1, 0x8, 0x7f, 0x0, 0x6, 0x2, 0xe693, 0x8, 0xf4, 0x81, 0xe, 0xfffffffc, 0xd1, 0xdb, 0xffffffff, 0xac2, 0xd, 0x26, 0x9, 0x4, 0x92e9, 0x9, 0x9, 0x3, 0x2, 0x2, 0x14af21aa, 0x4, 0x6d6, 0x6, 0x5, 0x4, 0x300000, 0x5, 0x6, 0x101, 0x7, 0xe3f5, 0x3, 0x2, 0x800, 0x2, 0x4, 0x4, 0x6, 0x1, 0x6, 0x4, 0xe5, 0x9, 0x3, 0x7, 0x0, 0x90000, 0x7, 0x6f2, 0x1d6, 0x7, 0x3, 0x9, 0x0, 0x0, 0x8, 0x1, 0x5, 0x6, 0x8, 0x0, 0x0, 0x5, 0x5, 0x1, 0x8, 0x6, 0x4, 0x3, 0xb3, 0x7, 0x7, 0x8, 0xb5, 0x3, 0x4, 0x8, 0x1000, 0x8, 0x4, 0x10, 0x1, 0x7, 0x6, 0x3, 0x0, 0xd191, 0xe, 0x4, 0x5ca, 0x7ff, 0x101, 0x800, 0x6, 0x2, 0xc, 0x7ff, 0x10000, 0x5, 0x8, 0x2, 0x6, 0x6, 0x57ca4dd2, 0x6, 0x3, 0xfffffff6, 0x9, 0x6dd, 0x9, 0x80, 0xce6, 0x3, 0x1ff, 0x7, 0x8, 0xc4ca, 0x2be, 0x0, 0x5, 0x800, 0x65, 0x1ff, 0x9, 0x2, 0x2, 0x127e000, 0x9, 0x7f, 0x7, 0xdcd, 0x2, 0x6, 0xffff, 0x9, 0x1, 0x9, 0x3, 0xfffffffb, 0x5, 0x6, 0xf, 0x40, 0x3, 0x3, 0x400, 0x5, 0x6, 0x2, 0xaf, 0x3, 0x1000, 0xfd0f, 0xab8e, 0x3, 0x7]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8001, 0x1ff, 0x7, 0x0, 0xf5, 0x56, 0x7735, 0x1, 0x1, 0xd3, 0x0, 0x5, 0x9048, 0x4, 0x4, 0x4, 0x2, 0x1, 0x9c1, 0x4, 0x8, 0x9, 0x0, 0x7, 0x7, 0x401, 0x1, 0x7, 0x8, 0xffffffff, 0x9, 0xfffffeff, 0x93d, 0x4f, 0x3, 0x9, 0x5, 0x5, 0x200, 0x1, 0x7fffffff, 0x101, 0x2, 0x10000, 0x6, 0xfffffff8, 0x6, 0x3, 0x0, 0x8, 0x4, 0xada, 0xa818, 0x101, 0x6, 0xaf, 0x5fd28df9, 0x3, 0x0, 0x8, 0x4, 0x79, 0xfffffffc, 0x1, 0x2, 0x2, 0x8, 0x80, 0x7, 0x10000, 0x0, 0x2, 0x7, 0xfffffffa, 0xe, 0x21b7, 0x0, 0x2, 0x3c3efd82, 0x8000, 0x7, 0x8001, 0x1, 0x400, 0x4, 0x7, 0x5, 0x4, 0x3ff, 0xc57, 0xc, 0x3, 0x4, 0x9, 0xfffffffc, 0xd, 0x4, 0x9, 0x5, 0x8, 0xc, 0x2, 0x17fb, 0x5, 0x42, 0x1, 0x1, 0x7f, 0x8, 0x9, 0x8, 0x8, 0x8, 0xfffffff6, 0x1, 0x7, 0x2, 0x0, 0xfffffffb, 0x7, 0x0, 0x8001, 0x4, 0x7, 0xfffffffe, 0x6, 0x9, 0x7, 0x1, 0x6, 0x4, 0x6, 0x8, 0x1, 0x5, 0x3ff, 0x2, 0x0, 0x9, 0xe92, 0x7142, 0x0, 0xffffffff, 0xfffffffc, 0x1, 0x401, 0x3f, 0x4, 0x7, 0x3, 0x8, 0x5, 0x5, 0x88, 0x4a3, 0x210, 0x3, 0x7ff, 0x4, 0x60, 0x4, 0x80000001, 0x2, 0xb4e000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x800, 0x0, 0xb9, 0x8, 0x4, 0x2, 0xa, 0x6, 0x40, 0x2, 0x7b7, 0x9, 0x1f9e, 0x8, 0x0, 0xf8, 0x7, 0x8, 0x2, 0x0, 0x8, 0xfffffffb, 0x7, 0x9, 0x7, 0x5, 0x7, 0xf, 0x3, 0xd9, 0x6031, 0xe, 0xfffffffd, 0x7, 0xc5e1, 0x3, 0xffff2ef1, 0x7, 0x100, 0x6, 0x3, 0x0, 0x8, 0xfffffff7, 0x5, 0x4, 0x2, 0x9, 0x5, 0x3bdd, 0x1, 0x5, 0xd, 0xb, 0x10000, 0x45e, 0xffffffff, 0x7, 0x7, 0x59, 0x8001, 0xd0, 0x0, 0x7fffffff, 0x4, 0x7fffffff, 0x25, 0x800, 0x0, 0x2, 0x8, 0x80000001, 0x1, 0xffff, 0x101, 0x9, 0x2, 0xffff, 0x2, 0x7ff, 0x6, 0x10000000, 0x3, 0x3, 0x8, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x0, 0x5, 0x7, {0x8, 0x0, 0xb70d, 0x5, 0x401, 0x8}, {0x40, 0x0, 0x35, 0x200, 0xffc0, 0x7}, 0x4, 0xe7, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0x8, 0x6, 0x2, {0x0, 0x1, 0x1, 0x9, 0x7, 0x5}, {0xfd, 0x2, 0xffff, 0x1, 0x1c93, 0x8}, 0x7, 0x6, 0x3}}]]}, {0x72, 0x6, "6876f4b61562d56bdc51a698783e1110883bb77dfcf8944461dd3b2cd23ef87df1ab7b4a7d749422444b58d809f1ed460b8618eed6233d9d9218d55fd4fdbdae36a886eeb15356d8de9462a7ca1bc90206cbd6c2d167a3120bd03fad47e68351d26759af9801e318e8b656354cf9"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_ACT={0x3468, 0x4, [@m_csum={0xbc, 0x1d, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x10, 0x8, 0x1, 0x2e8b}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x5, 0xffffffffdffffff1, 0x6, 0x9}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x7, 0x8, 0x9}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xf, 0x8, 0x0, 0x5}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0xdb2, 0x1, 0x0, 0x4be}, 0x44}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x2dac, 0xe, 0x0, 0x0, {{0xa}, {0x2ca8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x5a, 0x4, 0x3, 0x6, 0x2}, 0x3, 0x8, [{0xa02, 0x10, 0x8, 0x9, 0x0, 0x381}, {0x81, 0x8, 0x7ff, 0x0, 0x7c9, 0xe9f}, {0x7, 0xa, 0x3, 0x10000, 0xbc85, 0x7fffffff}, {0x0, 0x2, 0x8, 0xa, 0x7ff, 0x1d9e}]}, [{0x9, 0x7ff, 0x7ff, 0x8, 0x7, 0x4}, {0xd8e, 0x9, 0x8001, 0xffff8001, 0x6, 0x5}, {0xac64, 0x4, 0x2, 0xf, 0x9789, 0x9}, {0x5, 0x8, 0xf, 0x2, 0x1, 0x9}, {0x40, 0x8, 0x0, 0xfffffff9, 0xe5, 0x2}, {0xa2, 0x8, 0xfffffffb, 0x1, 0xc, 0x2}, {0x1, 0x6, 0xd40e, 0x23a, 0x6a558, 0xffff}, {0x0, 0x0, 0x1, 0x9, 0xf, 0xffffff9e}, {0x1c0, 0xffffffff, 0x8, 0xc, 0x3, 0x4}, {0x5, 0x100, 0x6, 0xb78, 0x6, 0x3}, {0x7, 0x2f5, 0xfffffff8, 0x2, 0x80000000, 0x6}, {0x1, 0x4, 0x7, 0x8000, 0x5, 0x8}, {0x80000000, 0xfab7, 0x2, 0x7, 0x1, 0x7150000}, {0x4, 0x6, 0x10, 0x2, 0xffffffdd, 0x3}, {0x68ad, 0x4, 0x8, 0x2, 0x4777, 0x8}, {0x2, 0xda4f, 0x2, 0x8, 0x2, 0x9}, {0x65, 0xd873, 0x3, 0x5, 0x8, 0x8}, {0xe, 0x3, 0x6, 0xff, 0x8, 0x400}, {0x63f, 0x8, 0xc, 0x1ff, 0xe, 0x8}, {0x3, 0xc4, 0x0, 0x6, 0x8, 0x6}, {0x710e, 0x1, 0xbc, 0x1, 0x9}, {0x8000, 0x7, 0x7, 0x381e, 0x80000001, 0x7}, {0x8, 0x4, 0x7fff, 0x2, 0x7ff, 0x8}, {0x5, 0x6, 0x9, 0x8, 0xee, 0x1}, {0x1, 0xfffffffd, 0x7, 0x6, 0x6, 0x8}, {0x80000000, 0x2, 0x7, 0xd, 0x683d, 0x401}, {0xffffff09, 0x0, 0x401, 0x5, 0x62c, 0xa1e}, {0x2, 0x2, 0x8, 0x3ff, 0x191a7b5b, 0x7}, {0x3, 0x40, 0x0, 0x2, 0xd, 0x7}, {0x8, 0x8, 0x9, 0x0, 0x5, 0xb66}, {0xa, 0x4fc, 0x6a4, 0xe, 0x8001, 0x2}, {0x6, 0x4, 0x3, 0xb, 0x3f, 0x3c1e}, {0x9, 0x5, 0x7, 0x9, 0x8e47, 0x9}, {0x7, 0x1, 0x3, 0x8, 0xba, 0x1ff}, {0x4, 0xfffffff8, 0x5, 0xa2, 0x6, 0x2}, {0x10000, 0x100, 0x4, 0x5, 0x4, 0xe0}, {0x3, 0x2, 0x8, 0x5, 0x98b, 0x7}, {0x5, 0x9cf, 0xd, 0x8, 0x8, 0x6}, {0x2, 0x7, 0x8001, 0x70, 0x6, 0x2}, {0xfffe0000, 0x1, 0x0, 0x801, 0x5, 0x9}, {0x3, 0x1, 0x10, 0xfff, 0xd88, 0x1}, {0x0, 0x1, 0x4, 0x8000, 0x1, 0x6}, {0x14861a78, 0xe, 0x7ff, 0xfffeffff, 0x6e9, 0xbc}, {0x4, 0x1, 0x7, 0xb2a, 0x6, 0x7f}, {0x10, 0x179, 0x5, 0x4, 0xffffffff, 0xd8}, {0xfffffc01, 0x5, 0x7fff, 0xfffffffc, 0x3, 0x6f}, {0x9, 0x0, 0xa35a, 0x1, 0x0, 0x7}, {0x8, 0x6, 0x2, 0x8a, 0x9, 0x2}, {0x5, 0x9, 0xcd1, 0x9, 0xa71f, 0x5}, {0x94b, 0x8, 0x2, 0x81, 0x1, 0x10}, {0x8, 0x26f, 0xd3f, 0xfe95, 0x9, 0x3}, {0x6, 0x0, 0x3a, 0x9, 0x80, 0x8}, {0x2, 0x80000001, 0x20000000, 0xffc, 0x1, 0x3ff}, {0x9, 0x4, 0x7f, 0xb, 0x10000, 0x401}, {0x2, 0x81, 0x5, 0x7, 0x7fff, 0x7fffffff}, {0x9, 0x8, 0x6, 0xfff, 0x200}, {0x4, 0x1, 0xb173, 0xffffc34c, 0x1800, 0xfffffff9}, {0x8a, 0x2, 0x7de0, 0x2, 0x3ff}, {0x6, 0x7, 0x5, 0x8001, 0x10440, 0x7}, {0x58, 0x9, 0x3, 0x3, 0x9, 0x2}, {0x80000001, 0xc170, 0x5, 0x9, 0xffffff00, 0x800}, {0xfffffffd, 0x7, 0x9, 0xfffffffd, 0x3dee8f27, 0x5}, {0x8, 0x1000, 0x7, 0x10000, 0x56, 0x3}, {0xd, 0x4, 0x81, 0x1000, 0x8, 0xdb0}, {0x8, 0x8, 0x2cfe, 0x4, 0x2, 0x5}, {0x2, 0xfffffffd, 0x0, 0x0, 0xb, 0x40}, {0xffffe213, 0xfffffff9, 0x0, 0x1, 0x5, 0x6}, {0x4, 0x10001, 0x4000000, 0xfffffffa, 0x4, 0x6}, {0x2, 0x340000, 0x8, 0x2, 0x0, 0x5}, {0xa0, 0x7fff, 0x10000, 0xc, 0xfff, 0x8}, {0x4, 0x3, 0x6, 0x1, 0x4, 0x1ff}, {0x7, 0x70f2, 0x400, 0x7ff, 0x0, 0x2}, {0xb9, 0x9bb6, 0x3, 0x8001, 0x7, 0x8}, {0x4, 0xf, 0x3, 0xf, 0x3, 0xfffffff7}, {0x3, 0x800, 0x9, 0x401, 0x53b, 0xd}, {0x9, 0x1, 0x6, 0x80000001, 0x6e23, 0x101}, {0x9000, 0x4, 0xc59, 0x6, 0xffffff00, 0x971}, {0x2, 0x10001, 0x4, 0x7, 0x91e5, 0x3d}, {0xfffffff1, 0xfffffffe, 0x2, 0xfffffffc, 0xfff, 0x9}, {0x1000, 0x3, 0x7, 0x1, 0x7fff, 0x2}, {0x0, 0x3ff, 0x6, 0xfff, 0x1, 0xff}, {0x3, 0x8547, 0xa, 0xfffffffb, 0x94, 0x800}, {0xffff, 0x40, 0x0, 0x8, 0x4, 0x81c}, {0xfffff000, 0x1, 0x94a6, 0xb7, 0x379, 0x2}, {0x1, 0x3, 0x10000, 0x4, 0x6, 0x2}, {0x7, 0xcc16, 0x9, 0x7, 0x101, 0x4}, {0xffff7fff, 0x8, 0x5, 0xffff, 0xe725, 0x29bc}, {0x0, 0x7, 0x9, 0xf, 0x1, 0x1}, {0xfffffffd, 0xe381, 0x69c, 0xfe8a, 0x5e}, {0x8000, 0x9, 0x400, 0x1, 0x8, 0x5}, {0x2, 0x200, 0x7fff, 0x6, 0x8, 0x800}, {0x8, 0x0, 0x3, 0x1524, 0xfffffffa, 0xb310}, {0x0, 0x6, 0x200, 0x5, 0x7}, {0x5, 0x79aa2fc9, 0x3, 0x3, 0x7, 0x200}, {0x4, 0x7ff, 0xffff0000, 0x4b5, 0x4}, {0x4, 0xe8, 0x98b, 0x100, 0x3, 0x10001}, {0x3, 0xb, 0x0, 0x0, 0x8, 0x208}, {0xb05, 0x8f41, 0xfffff83b, 0x0, 0x8e5, 0x9}, {0x9, 0x7, 0x80, 0x80000001, 0xfffffff8, 0x4}, {0x7, 0x2, 0xd, 0x644, 0x5, 0x9808}, {0x7, 0x7, 0xa0000000, 0x6, 0x2000, 0x7}, {0x8, 0x8271, 0x2, 0x3, 0x31e, 0x100}, {0xdd2, 0xae38, 0x3ff, 0x8, 0x7, 0xae}, {0x400, 0x5, 0xee42, 0x9, 0x2, 0x9}, {0x46cb, 0x400, 0xffffffff, 0x0, 0x2, 0xfffffd3f}, {0x9, 0x6, 0xfffffff1, 0x8, 0x66c7, 0x5}, {0x5, 0x7, 0x1, 0xa8e, 0xff, 0x6}, {0x80000000, 0x9, 0x1, 0x7f, 0xfffffe00, 0x8}, {0x7, 0x2, 0x843, 0x6, 0x7, 0x8}, {0x0, 0xdd, 0x2, 0x1, 0x4, 0xa16}, {0x3, 0x7, 0xfffffff9, 0xf, 0x5, 0x8000}, {0x7fffffff, 0x3, 0xdf, 0x2, 0x1, 0x7}, {0xffff9704, 0xb, 0x9, 0x5, 0x8, 0xfffffff7}, {0x1, 0x0, 0x8, 0x0, 0x8, 0x3}, {0x2, 0x3ff, 0x0, 0x7ff, 0x5, 0x8}, {0x210, 0x4, 0x3, 0x7, 0x2, 0x4}, {0xfffff883, 0x6, 0x200, 0x9, 0x80000000, 0x2}, {0x5, 0x9, 0x79, 0x0, 0xae, 0xfffffffb}, {0x0, 0x2e55, 0x5, 0xffff8001, 0xffffffff, 0x7}, {0x7, 0x60426f85, 0x9, 0x101, 0x42d, 0x3b0}, {0x7a4, 0x8, 0x1ff, 0x0, 0x8001, 0x1}, {0x1, 0xfffffffd, 0x1, 0x0, 0x200, 0xc519}, {0x6, 0x3c, 0x8, 0x6, 0xfa, 0x8}, {0x6, 0x5, 0x8, 0x4, 0x0, 0x6}, {0x0, 0x3, 0x200, 0x7, 0x7f, 0x57}, {0x8, 0x80000000, 0x101, 0x1, 0xf, 0x36011abf}, {0x87, 0x2, 0x0, 0x0, 0x0, 0x6}, {0x7, 0x4, 0x7fffffff, 0x0, 0x4}], [{0x0, 0x1}, {0x0, 0xebaac5f744e2ec85}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0xb33ebe2209b78363}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x7}, {0x0, 0x1}, {0x1}, {}, {0x3}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5}, {0x2}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x3}, {0x3}, {}, {0x5}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x44, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x3, 0x8, 0xa, 0x0, 0x3123f087}, 0x6, 0x0, [{0x20000000, 0x10001, 0x80, 0x6, 0x0, 0x2}, {0x6, 0x1, 0x6a, 0x6, 0x7ff, 0xc}, {0x5, 0xd, 0xad3, 0x4a, 0x1, 0xfffffff8}, {0x7, 0x0, 0x0, 0x7f, 0x3f, 0x1bce}, {0x7fffffff, 0x80, 0xd64, 0x0, 0x7, 0x4}, {0x9, 0x60000000, 0x0, 0x3c37a1cb, 0x1, 0x3}]}, [{0xfffffff0, 0x0, 0xff, 0x0, 0x6a4, 0xa6}, {0x1, 0x3, 0x2, 0x1, 0x6, 0x9}, {0x7f, 0x6, 0x80, 0x1, 0x200, 0x9}, {0xff, 0x81, 0x0, 0x9c9, 0x7, 0x101}, {0x1, 0x4, 0x9, 0x8, 0x6, 0x9}, {0x3ff, 0xf, 0x2, 0x8, 0xfff, 0x7f}, {0x2, 0x7, 0x401, 0x1ff, 0x7, 0x1}, {0x3b3, 0x2, 0x3, 0x9, 0x5, 0x4}, {0x7, 0x8, 0x2, 0x5, 0xfffffff8, 0x3ff}, {0x2, 0x1, 0x401, 0xfffffffb, 0xaf, 0x7fffffff}, {0x8000000, 0x1, 0xfffffff9, 0xa, 0x7, 0x1}, {0x2, 0x7, 0x8e9, 0x800100, 0x5, 0x63c}, {0x10000, 0x6, 0xfffff800, 0x6, 0x3, 0x339}, {0x4, 0x5, 0x80, 0x8000, 0x0, 0x401}, {0xb150, 0x3, 0x552, 0x1, 0x372, 0x61b}, {0xfffff2e1, 0xe, 0x401, 0x7, 0x5, 0x9}, {0x6, 0x149c, 0xf6, 0x8, 0x14e, 0x200}, {0xfffffff8, 0x101, 0x3, 0x800, 0x7ff, 0x1}, {0x3, 0x60, 0x1, 0x3, 0x8f, 0x8}, {0x3, 0x8000, 0x400, 0x1c, 0x10, 0xfff}, {0x1, 0x3, 0x0, 0x6, 0x9, 0xe}, {0x3, 0x2, 0x5, 0x599f, 0x1, 0xc}, {0x5, 0xd0e, 0x7fffffff, 0x4, 0xe8b4, 0x1}, {0x7, 0x7ff, 0x5, 0x0, 0xfffffffb, 0x8}, {0x57, 0x1000, 0x42, 0xfffffff8, 0xfffffff9, 0x9}, {0x6, 0x7, 0x7, 0x816a, 0x1, 0xf}, {0x6, 0x5, 0x46, 0x0, 0x101, 0x3}, {0x7, 0x10, 0x3, 0x6, 0x1000, 0x7f}, {0x548274d5, 0x8, 0x1489, 0xa623, 0x28c, 0x6}, {0x0, 0xb, 0x6, 0x7, 0x34, 0x3}, {0x0, 0xffffffef, 0x9, 0xfffffe01, 0x3, 0x3}, {0x0, 0xd3, 0x1, 0x9, 0x400, 0xffffffff}, {0x7f, 0x9, 0x7, 0xfffffffe, 0x0, 0x3}, {0x8, 0x800, 0xd, 0x1, 0xe2bb, 0x52}, {0x200, 0xd, 0x8, 0x1, 0x0, 0x1}, {0x1800, 0x3, 0x8, 0x7fffffff, 0x5}, {0xfffffffb, 0x3, 0x7fffffff, 0x4, 0x2, 0x9}, {0x40, 0x3, 0x8, 0x0, 0x101, 0x1}, {0x0, 0x5, 0x7, 0x3, 0x7f, 0x46c}, {0xa, 0x101, 0x7, 0x1, 0x5, 0x9}, {0x200, 0x9, 0x4, 0x4, 0x8000, 0x1ea}, {0x7, 0xc82, 0x9, 0x1, 0x200, 0x4957}, {0x7, 0x8, 0x7, 0x0, 0x9, 0x5}, {0xcf, 0x0, 0xd0aa, 0x8, 0x1, 0x54}, {0x1, 0x6, 0x0, 0x0, 0x3, 0x9}, {0x73, 0x3, 0x10000, 0x3, 0xfffffffd}, {0x8, 0x1294cb16, 0x6, 0x93e, 0x0, 0x8}, {0xaec8, 0xb376, 0x6, 0x9, 0x8001, 0x2e376c79}, {0x2, 0x4, 0xfd0, 0x2, 0x7fffffff, 0x7}, {0x3, 0x4, 0x8001, 0x40, 0x566, 0xef8}, {0x80, 0x4, 0x8, 0x5, 0x5, 0xfffffffc}, {0x3, 0x4, 0x8, 0x3, 0x0, 0x3ea9}, {0x1, 0x7, 0x38, 0x81, 0x6, 0x10}, {0xfffffffc, 0xda8, 0x1, 0x10000, 0xe, 0xffffffff}, {0x6, 0x400, 0x3, 0x800, 0xc, 0x8}, {0x4, 0x6, 0x6, 0x3, 0x3, 0xc40}, {0x10001, 0xfffffffb, 0x1, 0x0, 0x0, 0xb}, {0xd3, 0x800, 0xe, 0x9, 0x9, 0x3}, {0x3, 0x6, 0x9, 0x4, 0xfffffffc, 0x10001}, {0x499c, 0x101, 0x6, 0x6, 0x64, 0x105b}, {0x0, 0xfffffff7, 0xfffffffe, 0x5, 0xb3, 0xfff}, {0xfffffc01, 0x390, 0x0, 0x8, 0xce25, 0x7ae1}, {0x10001, 0x2, 0xfffffff4, 0x80000001, 0x9}, {0x400, 0x1, 0x1, 0x3, 0x4, 0x2}, {0x2, 0x0, 0x6, 0x4, 0x5, 0x10}, {0x5, 0x5d8, 0x4, 0x5, 0x9e, 0x9}, {0xff, 0x1, 0x2, 0x2, 0x0, 0x7}, {0x10, 0xcfe, 0x0, 0x9, 0x2, 0x4}, {0x6, 0x7, 0x7fffffff, 0xb, 0xffffffff, 0x100}, {0x1, 0xffffffff, 0x4, 0xeaa7, 0x0, 0x4}, {0x6, 0x8, 0xff, 0x0, 0xfffffffb, 0xe07}, {0x2, 0xb, 0xd, 0x617c, 0x5, 0xa5c}, {0x4, 0x3, 0x6, 0x2, 0x6, 0x6}, {0x5, 0x3, 0x5, 0x0, 0x57, 0x2}, {0x8, 0x2, 0xffffffb7, 0x10001, 0x0, 0x8}, {0x1, 0xe, 0xa7f, 0x1, 0xe1d0, 0x5fd9}, {0xfffffffc, 0x1, 0x1, 0x6, 0x10}, {0xc, 0x6, 0x2, 0x9728ea, 0x7fffffff, 0x5}, {0xffff, 0x2, 0xfffff000, 0x4, 0x83, 0x8593}, {0x3, 0x37, 0x9, 0x1004, 0x200, 0x10000}, {0x9, 0x80, 0x101, 0x19a, 0x4, 0x1000}, {0x7fffffff, 0x100, 0x6, 0x0, 0x1, 0x9}, {0xb, 0x80000000, 0x4000000, 0x7fff, 0xc58, 0x2}, {0x3, 0x0, 0x1, 0x477d, 0x1a, 0xb8}, {0x6ba0, 0x8, 0x8001, 0x52, 0x6, 0x5}, {0xeb, 0xff, 0x8000, 0x5, 0x4, 0x400}, {0x2, 0x3, 0x34e0, 0x8, 0x4, 0x2}, {0xf33c, 0xfffffffb, 0x4, 0x7ff, 0x1, 0xce}, {0xf, 0x8, 0x8, 0x80000001, 0x7, 0x8000}, {0x3, 0x7, 0x1, 0x8, 0x5, 0x1b554571}, {0x0, 0x0, 0x89, 0x5, 0x7fffffff, 0x9}, {0x7, 0x81, 0x9, 0x0, 0x7, 0x3}, {0xfffffffc, 0x401, 0x4, 0x8, 0x4, 0x9}, {0x6, 0xffff, 0x9, 0x3, 0x8}, {0x10001, 0x11e9, 0x2, 0x9, 0x4, 0x2}, {0x9, 0x4, 0x6ff1aba2, 0x6, 0x891}, {0x1, 0x58b5, 0x48d, 0x2, 0x7f, 0x71bd}, {0x3ff, 0x7, 0x0, 0x2, 0x5, 0x8}, {0xc9f7, 0x407a, 0x3, 0x3, 0x5, 0x3}, {0x7, 0xd278, 0xffffffff, 0x5, 0x74d, 0x8001}, {0xdf, 0x6, 0x9, 0x5, 0xfffff0e9, 0x1}, {0x1ff, 0x5, 0x5, 0x6, 0x800, 0x4}, {0x675, 0x64, 0x2, 0x3, 0xf, 0xff}, {0xf7, 0x4, 0x154462c5, 0xd5f5, 0x3, 0x4}, {0xffff, 0x2, 0xb, 0xe000000, 0x2, 0x7}, {0xb, 0x3, 0xfffffee4, 0x8, 0x4, 0x10000}, {0x3, 0x4, 0x4, 0xf76, 0x6}, {0x5, 0x6, 0x2, 0x100, 0x0, 0xd}, {0x6, 0x0, 0xfffffffb, 0x9, 0x4, 0x9}, {0x400, 0x0, 0x0, 0x6, 0x0, 0x1}, {0xffffffff, 0xfffffff9, 0x7, 0x3, 0x3, 0x7}, {0x8, 0x8f33643c, 0x7fff, 0x5, 0x80000001, 0x7}, {0x0, 0x1, 0x3, 0x6, 0x3, 0x4}, {0x3, 0x7, 0x6, 0x3, 0x1, 0x1000}, {0xffffffff, 0x3, 0x1, 0x231d, 0x3, 0x80000000}, {0x8, 0xffffffff, 0xa303, 0x7fffffff, 0x27b9, 0x40}, {0xc97b, 0x8, 0x5, 0x3, 0x6}, {0x982, 0x7, 0x2, 0xec, 0x7, 0x5958}, {0x5, 0xe7, 0x9, 0x43, 0x4, 0x9}, {0x3ff, 0x80000001, 0x3ad3, 0x2, 0x7eb4, 0x7f}, {0x7f, 0xffff629f, 0xccdd, 0x9e, 0x6, 0x9b}, {0xe, 0x6, 0x4, 0x40, 0x3, 0x3}, {0x52, 0x9, 0x101, 0x123, 0x7ff, 0x6078}, {0xffff911f, 0x4, 0x8, 0x401, 0x0, 0x59b3}, {0xdb, 0x9, 0x6, 0x6, 0x3, 0x2}, {0x3, 0x7, 0x6, 0x6, 0x65d1fb3b, 0xfffff801}, {0x1, 0x6, 0x10000, 0x4, 0x3, 0x9}, {0x544, 0xa, 0x0, 0xb7, 0x7, 0x40}], [{0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x3}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x781ac8928bfc61ac}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x3}, {0x3}, {0x2}, {}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0xbfcb0153d97b581, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0xfa7cfe404cb59ec5}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x80, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x5, 0x7, 0x1, 0x3b, 0x788c}, 0x2b, 0x9, [{0x41a9, 0x0, 0x3ff, 0x7, 0x10000, 0xe}, {0x93, 0x10001, 0x2, 0x3ff, 0xc9d, 0x4}, {0x0, 0x5, 0x5, 0x0, 0x3, 0x4}, {0x1, 0x4, 0x96, 0x2, 0x1, 0x7}]}, [{0x8000, 0x4, 0x3, 0x8, 0xd, 0x81}, {0x40, 0xad, 0x7, 0x0, 0x3ff, 0x5}, {0xfff, 0x4, 0x5, 0x4, 0x3ff, 0x7fff}, {0x2, 0x0, 0xff, 0x1, 0xf9, 0x1}, {0xfffffffc, 0x10000000, 0x7fff, 0xb, 0xcc10, 0xc2ba}, {0xfffffffa, 0x9a3, 0x8, 0x0, 0x4, 0x10}, {0x7, 0x9c, 0x4, 0x2, 0x80, 0x2}, {0x9, 0x0, 0x7, 0x6, 0x5, 0x8}, {0x7ff, 0x2, 0x1, 0xb632, 0x2, 0x8}, {0x1000, 0xd9, 0x4, 0x2, 0x5, 0x1000}, {0xb, 0x8, 0x3, 0x7, 0x0, 0xfffffffb}, {0x7, 0x1, 0xfffffff8, 0x0, 0x81, 0xff}, {0x5, 0x7cc7, 0x10000, 0x9, 0x2, 0x8}, {0x6, 0x398, 0x7, 0x38, 0x4, 0x8901}, {0x8, 0x6, 0x80000000, 0x1, 0x2, 0x6}, {0x5, 0x7, 0xffff7fff, 0x400, 0x1000, 0x976b}, {0xffff, 0x9, 0x6, 0x4, 0x3ff, 0x7ff}, {0x7fffffff, 0xffff, 0xa, 0x8, 0x1}, {0x6, 0x9, 0x9, 0xfffffffb, 0xffffffff, 0x1}, {0x8, 0x2, 0x7fffffff, 0xd, 0x0, 0x86}, {0x7f, 0x200, 0x2, 0x2, 0x7, 0x2}, {0x4, 0x101, 0x0, 0xa0f, 0x401, 0x2}, {0xd76, 0x42, 0x9, 0x9, 0x9, 0x101}, {0x24e, 0x1, 0x6, 0x2, 0x2ca, 0xfffffffa}, {0x7ee9, 0x586, 0x8001, 0x3, 0x4, 0x40}, {0xc, 0x3, 0x5, 0xfffffffa, 0x9, 0x4}, {0x403, 0x7, 0x1, 0x81, 0x4, 0x2}, {0xff, 0x10001, 0x7, 0x8, 0x8001, 0x3}, {0xcd, 0x4, 0x2, 0x1, 0x9, 0x9cc6}, {0x3, 0xfffffe58, 0x8, 0x4f, 0x9, 0xc130}, {0x5, 0x3, 0x1, 0x6, 0x0, 0x4a}, {0x10001, 0x8, 0xfffffffd, 0x9, 0x6, 0x3}, {0x110, 0x1, 0x1, 0x10, 0x7, 0x1}, {0x9, 0xfff, 0x2, 0x8, 0x6, 0x1}, {0xaf, 0xc, 0x9, 0xffffffff, 0x3, 0x9}, {0x9, 0xffffffff, 0xffffffff, 0x5, 0x2, 0x4}, {0xc, 0x7083d9f5, 0xc746, 0x4, 0x400, 0x7}, {0x28, 0x8, 0x7, 0x7, 0x3ff, 0x1000}, {0x10000, 0x4, 0x3ff, 0x5, 0x80000001, 0x80}, {0x8, 0xd, 0x1, 0x3, 0x8, 0xffffffff}, {0x8, 0x825, 0x7fffffff, 0x5, 0x8, 0x9}, {0x6c2, 0x633b, 0x6, 0x40, 0x5, 0x6}, {0x4, 0x10000, 0xff, 0x4, 0x8, 0x3}, {0x5, 0x3, 0x8, 0x103, 0x2, 0x6}, {0xff, 0x10000, 0x80000001, 0x1, 0x4, 0x7ff}, {0x5, 0x7fff, 0x0, 0x5, 0x240000, 0x9}, {0x7, 0x5, 0x1, 0x4, 0x0, 0x4}, {0x7, 0x5f, 0x1, 0x5573, 0xced4, 0x2}, {0x4, 0x5, 0x5, 0xb, 0x6ef0, 0x104}, {0x6, 0x200, 0xff, 0x7, 0x8, 0xb}, {0x78, 0x7, 0xc, 0x4, 0x3, 0xff}, {0x3ff, 0x16f8, 0x100, 0xd, 0x7fffffff, 0x6eae}, {0x4, 0x2, 0x1, 0x7ff, 0x1, 0x9}, {0x6, 0x5, 0x3ff, 0x80000000, 0xfffffff8, 0x723d}, {0x43ea2533, 0x5cf, 0x7, 0x7, 0x5, 0x3}, {0x4, 0x4, 0x1, 0x162, 0x9, 0x2}, {0x3, 0x6, 0x101, 0x5000000, 0xa584, 0xf56}, {0x9, 0x1, 0xc992, 0x8, 0x3, 0x80000001}, {0x7000, 0xffffffff, 0x0, 0x6, 0x7, 0x6}, {0x660, 0x7, 0xdf68, 0x4, 0xee, 0xd}, {0xf, 0x9, 0x6, 0x8001, 0x2}, {0x6, 0x4, 0x3, 0x7fcb, 0x20125277}, {0x2, 0x6, 0x9, 0x3, 0x3, 0x5cf}, {0x3, 0xffffff9d, 0x2, 0x6, 0xffffffff, 0x6}, {0xf087, 0x4, 0x5, 0x8, 0x4, 0x4}, {0xfffffff7, 0x8, 0x9, 0x8, 0x6, 0x9}, {0x37c1, 0xfff, 0x80000000, 0xfffffffd, 0x6, 0x101}, {0x9, 0x9, 0x4, 0x6, 0x3, 0x6}, {0xc0000000, 0x8, 0x80000000, 0x8001, 0x1800000, 0x10}, {0x10000, 0x14c, 0x2, 0x2, 0x8}, {0x6, 0x5, 0x5, 0xff, 0x5, 0x5}, {0xffffffff, 0x3, 0xfffffff7, 0x8, 0x2, 0x6}, {0x8, 0x1, 0x3aaf, 0x10, 0xf}, {0x2, 0x6d3b, 0x4, 0x400, 0x4, 0xffff4f9d}, {0x200000, 0x200, 0x7fff, 0xb, 0xffffffff, 0xffffffff}, {0x9, 0x6df, 0x8000, 0x2, 0x49, 0x6}, {0x4, 0x2, 0x8, 0x9, 0x8, 0x5}, {0x4, 0x0, 0x40, 0x8, 0x401, 0x8e8}, {0x2, 0x8, 0x800, 0x42, 0x9, 0x8}, {0xffff3968, 0xfffffffd, 0x9, 0x9, 0x4, 0xfffffffa}, {0x0, 0x731, 0x0, 0xa, 0xfffffff7, 0x3}, {0x5, 0x6, 0x70, 0x100, 0x4, 0x2}, {0x8, 0x8000, 0x40, 0x1, 0x3748}, {0xfffffffb, 0x9, 0x4, 0x7, 0x5, 0x400}, {0xa3c, 0xffffffff, 0xfffffffe, 0xffffff8e, 0x8, 0x6}, {0xffffff88, 0xd4fa, 0x400, 0x8, 0x7, 0x9}, {0x10000000, 0x9, 0x2, 0x6, 0x4, 0xffffffff}, {0xa000000, 0x6, 0x5, 0x101, 0x100, 0x5}, {0x0, 0x14, 0x2, 0x9, 0x8, 0x2}, {0x1d07, 0x94c, 0x9, 0x3, 0xdf, 0x8}, {0x1000, 0x3ff, 0x4, 0x155, 0x7fffffff, 0xf}, {0x77, 0x5, 0x0, 0x5, 0x10a8, 0x1}, {0x6, 0x101, 0x7fffffff, 0x0, 0xa00, 0xa}, {0x1, 0x8000, 0x1, 0x7, 0x8, 0x4}, {0x80000000, 0x401, 0xd, 0x3, 0x2, 0x4}, {0x3, 0x704, 0x3, 0x9, 0x4, 0x8000}, {0x8, 0x3, 0xc, 0xfffffff8, 0x7, 0x10}, {0x5, 0x3, 0x80000000, 0x7, 0x80, 0x10}, {0x1000, 0x8, 0xfffffffc, 0x4b, 0xffe00000, 0x2}, {0xffff08b9, 0x0, 0x8, 0x80000000, 0x1, 0xfbd7}, {0xfff, 0x1ffe00, 0x9, 0x6, 0x9, 0x1}, {0x2, 0x6, 0x3ff, 0x5, 0x1000, 0xfffffffd}, {0x1, 0x25be640, 0x2, 0x601c, 0x0, 0x3}, {0x9, 0xe83, 0x1000, 0x0, 0x8, 0xb6}, {0x1, 0x40, 0xe, 0x8, 0x3}, {0x401, 0x3, 0x8001, 0x0, 0x0, 0xd}, {0x1, 0x7, 0x7, 0x8, 0x89, 0x81}, {0x9, 0x2, 0x474c, 0x2, 0x6, 0xc}, {0x8, 0x7, 0x9, 0x9d, 0x3b7d9b7d, 0x3}, {0x401, 0xffffffff, 0xffffff70, 0x3ff, 0x16, 0x1}, {0x3, 0xd, 0x4f, 0xfffffffb, 0x7, 0x5}, {0x10000, 0x3, 0x9ce7, 0x5, 0x90e6, 0x7}, {0x2, 0x7ff, 0x8f1, 0x200, 0x8000, 0x6}, {0xfffffffa, 0x4, 0x6, 0x1, 0x101, 0x4}, {0x8f, 0x1, 0x80000001, 0x5, 0x7, 0xa39}, {0x401, 0x5, 0x3, 0x4, 0xfff, 0x7}, {0x3, 0xd966, 0x5d, 0xfffffff8, 0x5, 0xf3e}, {0x0, 0x7fff, 0x9, 0x887, 0x7fffffff, 0xff}, {0x10000, 0xff, 0x10001, 0x61, 0x7fff}, {0x8, 0x4, 0x80, 0x1f, 0x7, 0x4}, {0x10001, 0x0, 0x10, 0x371a, 0x2, 0x7}, {0x9, 0xfffffffa, 0x3, 0x4, 0x30, 0x8}, {0xfff, 0x6, 0xe, 0x3, 0x9271, 0x777e}, {0x401, 0x3f1ab618, 0x2, 0x0, 0x4, 0xc96cb6c7}, {0x0, 0x5, 0xa, 0x2, 0xfffffffa, 0x7}, {0xc8, 0x7, 0xffff, 0x4, 0x7fffffff}, {0x6391, 0x6, 0x721, 0xfff, 0x4019, 0xfffffff9}, {0xc3, 0x3ff, 0x285, 0x7ff, 0x5, 0x9}], [{0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x3}, {0x1}, {0x4}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x4}, {0x2}, {0x5c4778095e453d12}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x654525336e5a8b4d}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x2}, {0x0, 0x1}, {0x3}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x7}, {0x2}, {0x0, 0x1}, {0x5, 0x5a51d3007a82daf6}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x5}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x99fee9ca5b68a35f}, {0x2}, {0x5}, {0x4, 0x1}, {0x3}, {0x0, 0x1}], 0x1}}]}, {0xd9, 0x6, "09837ff7117a16647a99242637411e14bc04eee9c4132c0858d9a052c27d53598f00e50c33ebdfa02730e040be88679ecae10143b4305fd400ad6cd8e7e4a4a9e3470633ddad01ed3b73058a423c1dfa97c2e2c227cf3342ec47260375fcbff934287babe798f591d3936029143577fa22938e39ce833ee8f5dbeecaa8301edd521c521eb09a85ab6a59d0d332f5a09f13d70e1f0cbbbb921dc90e3d26ba83733fb12443f76b7810901110181620396490385f549dc6367214e46962f0e9f0468e7abb582a83cb6b04e7ded0a6857dbb7f65c6f0ce"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x180, 0x0, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xe9, 0x95e35e5d93ad756, 0xffffffff, 0x3}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x2000000b, 0x9, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x38000000, 0x7, 0xb, 0x2}, 0xfff5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x4, 0x1, 0x3}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x3, 0xffffffffefffffff, 0x8, 0x30000000}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xea, 0x10000000, 0x1, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x1000, 0x2, 0x2, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x7, 0x20000000, 0xffffffff, 0x200}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x400, 0x0, 0x10000, 0xe}, 0xfe7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x20000001, 0x5, 0x4}}}]}, {0x35, 0x6, "6a418c598c1602cd68d1f90c3426b5047c3e30d12c91c777b9d2e4b18ef69020fe492164ad3ca926b1b17848aaa66cf3c3"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x13c, 0x0, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9368}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x75e}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfff}]}, {0xde, 0x6, "162218296b27084117fec192413ee8b6cd2fe32161cbe025e730bf68487b802fcb9f7cfc5ab49f7453319be4efacc97e581397cef03dd2a658502368e3a743efab54d9114ccac11cde58e2784bc87068074c49c1b073867c900b469d2610f1e95d61a929b1ee3ecb26c19685bdaa3a39d8ea078e4b3f15da1e0a3da700e57c5d0c43f75649e65cc39953c293148fdae897447b98c45081da07a785d540274bf7b6c052d288bc6bbc3ad51360e3b18235c10e6f5b6d20ebe04692bb5573be08a646d45c6a35239512f49a1360ccaf127f022fc3274368ec1aebe5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x180, 0xf, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x9}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1000}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x72b, 0x3, 0x8, 0x40, 0x8}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x80, 0x16, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xfbfb}]}, {0x4c, 0x6, "abfd20592e6c1db96aefb933a5b5fd42d97b5ebd011f1727338c3aa52154bca56ef3fa9a2cc372fe6292c3576e02f454ef4d0ad3d2d007e8f1f07cab4d6c5b53c5db8664b653b376"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x140, 0xf, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x9, 0x4, 0x6, 0x7757}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x81, 0x3, 0x8, 0xff, 0x1000}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8000}]}, {0xd3, 0x6, "41f9609f6ed8534678f082ac7c87be991f2399856aa442a162317e33e75f0e93f83aab90dcf9a3e53d070b0e505715ae65e28fb48f785edcca3eb0917f2359eb4f0aca2a9511a46b69d32188b74a771797c087216a470addc8a1e8e946bd73163ca08ab1cae2335ddde588046f886c29ef26681f9a04280e9bc867d86dcc707ed445ce99887ccc8897d3421f768fdbb642de2f766f5f8fa8c7a777548138d2cc6ac09a4f1bcb7ebc847e492fc668a198bad62c575ec12e75e7180eb648fed08f8cfbb15b317e9d9e5ba948b5c51c55"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x70d}, @TCA_RATE={0x6, 0x5, {0x93, 0xf}}]}, 0x4a7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004dc0)={&(0x7f00000002c0)='bcache_journal_write\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0xfe, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) 6.890173603s ago: executing program 3 (id=3928): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0xc9100120, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000240)={{}, 0x9}) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x2) 6.873177571s ago: executing program 0 (id=3929): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x18) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) 5.694196354s ago: executing program 2 (id=3930): creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getstats={0x1c, 0x5e, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x60040050) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r3, &(0x7f0000001140)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2c}, 0x80) socket$rxrpc(0x21, 0x2, 0x2) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x0) read$midi(r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49c7, &(0x7f0000000480)={0x0, 0x5843, 0x0, 0x2, 0xfffffdfc}, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r7, 0x0, 0x0, 0x20040c91) shutdown(r7, 0x1) munmap(&(0x7f0000009000/0x2000)=nil, 0x2000) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, 0x0, 0x0, 0x4000800) io_uring_setup(0x7625, 0x0) 4.070924491s ago: executing program 0 (id=3931): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x60d3, 0x101}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4048000) socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r7 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x8000}) r9 = fcntl$dupfd(r8, 0x406, r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) 3.964138301s ago: executing program 4 (id=3932): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c0b7d010fdeb5fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a00", 0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x589001, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private1, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mq_unlink(0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x300) 3.905926146s ago: executing program 3 (id=3933): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r3}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x88, @private=0xa010100, 0x15, 0x3, 'lblcr\x00', 0x25, 0x5, 0x72}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) close_range(r0, r4, 0x0) 3.372595639s ago: executing program 4 (id=3934): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x2800) ioctl$EVIOCSFF(r3, 0x402c4580, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x5836, 0x8, 0x4e98d9f4000, 0x40, 0x5, 0x5479, 0x1038, 0x6, 0x0, 0x55, 0xe0e2, 0x4, 0x0, 0x7, 0x109, 0x6a], 0xffffffff, 0x1c7a86}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRESDEC=r9, @ANYBLOB="60006e80110001", @ANYRES16=r10], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x4ffe2, 0x0) 2.576038604s ago: executing program 1 (id=3935): r0 = syz_open_procfs(0x0, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x242, 0x82) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f00000000c0)={'\x00', 0x7f, 0x1, 0x9}) syz_io_uring_submit(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e23, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x27, 0x0, "a5b45013f5547040229e90bfdd2cbb77084d706a04964c8214c492169b0cb51256adc3e5baebfa65fd82495b5e4d1b9b9bfd44893a0000000000ff0700000060dfde1c705f5fa6000800"}, 0xd8) writev(r5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 2.049792688s ago: executing program 1 (id=3936): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x600540, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x4, 0x0, 0x3}) inotify_init() ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0xe}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000850000000500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x18) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000140)="86", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c, 0x0}}], 0x2, 0x0) 1.519583951s ago: executing program 4 (id=3937): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r1, 0x400, 0x70bd2a, 0x800000, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044814) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x9}, 0x8) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r8, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24008014) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r7) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004841) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x7, 0x50a03) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r7) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r11, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000000740)={{r2}, "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"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000017c0)={'ip6gre0\x00', &(0x7f0000001740)={'syztnl0\x00', 0x0, 0x4, 0xe, 0x6, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x8, 0x9, 0x4}}) io_setup(0xd290, &(0x7f0000001800)=0x0) io_cancel(r12, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x1, r4, &(0x7f0000001840)="23ad1d9b8628cc7d8730b76b88fd09d369629dcf58e9e861217cfd7382f7f076f5e157413ed220d9322cf4ef676f7e2a5e0e561f30b8eb04e262acdcbc91f84c96b832641274a0b8a10c050901e5d77f2f7b1227d117d6d63684e11e0228bc4cc9f54a5103c766297ae22c7250fb7febedb6abf99332761956ae7487c9f965b17ed50f3dca3d3db6121c31cb7c8c4da675242dfa334bbb6813f11f98fbdbf1888ddde7c7683f95c7f9d7723419ed3bf8ea32956676d121926367da9089c04d8152703242e451a1e3a1a14654ae6ce3f92c3675445b60f7802f847b362646417adf13f2c724a9dcfe", 0xe8, 0x2, 0x0, 0x3, r7}, &(0x7f0000001980)) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000019c0)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a40), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000001a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x34, r13, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) recvfrom(r3, &(0x7f0000001b80)=""/19, 0x13, 0x200, &(0x7f0000001bc0)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001c40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.323052802s ago: executing program 0 (id=3938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = signalfd(r2, &(0x7f0000000000)={[0xf]}, 0x8) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000080)={@private2, 0x0}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x8c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x814) 1.034219939s ago: executing program 3 (id=3939): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="84f40200c9007923487e54c4d209821547ad6b68b0a56cb7d4f6d7ee5176bc7439cf956fe692c34146c1eaba15ce56aed98054a274ceb4c9f8deff29b622221a7223cd6c280b9896d89fec3ef3149cb650b169782c62f9e0fb103aea52c793b4ce70606904fe3991b34014c92b7daa487d17bbc2"], 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0xf) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000114) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000019c0), r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24082}, 0xa800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000780), 0x12) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000700)={'bond0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) socket$rds(0x15, 0x5, 0x0) 555.686922ms ago: executing program 1 (id=3940): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="c74424000d000000c744240206000000c7442406000000000f01142467400f017f4c6726450f79690066bad00466b8b6c466ef66bad004b84d000000efb9800000c00f3235010000000f30660f38812b0f01f866430f383a2d69099785c4e29db8c6", 0x62}], 0x1, 0x0, &(0x7f0000000100)=[@flags={0x3, 0x40800}, @dstype0], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) 440.3671ms ago: executing program 4 (id=3941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x6, 0x40d}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_LINKMODE={0x5, 0x11, 0x3}]}, 0x48}}, 0x8046) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000000703000000000000e2ffff010000050900010073797a02000000000800050000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000fe000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000003c040100000000002d400200000000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) 246.052715ms ago: executing program 0 (id=3942): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0xfff0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x1001, 0xf}]) (fail_nth: 5) fsync(r2) dup3(r2, r0, 0x0) 0s ago: executing program 2 (id=3943): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0xc9100120, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000240)={{}, 0x9}) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x2) kernel console output (not intermixed with test programs): 0x81 has invalid wMaxPacketSize 0 [ 1246.334683][T18225] FAULT_INJECTION: forcing a failure. [ 1246.334683][T18225] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.348142][T18225] CPU: 1 UID: 0 PID: 18225 Comm: syz.4.3497 Tainted: G L syzkaller #0 PREEMPT(full) [ 1246.348170][T18225] Tainted: [L]=SOFTLOCKUP [ 1246.348176][T18225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1246.348187][T18225] Call Trace: [ 1246.348193][T18225] [ 1246.348201][T18225] dump_stack_lvl+0x16c/0x1f0 [ 1246.348229][T18225] should_fail_ex+0x512/0x640 [ 1246.348255][T18225] ? __kmalloc_noprof+0xca/0x910 [ 1246.348283][T18225] should_failslab+0xc2/0x120 [ 1246.348306][T18225] __kmalloc_noprof+0xeb/0x910 [ 1246.348332][T18225] ? __pfx_fanotify_encode_fh_len+0x10/0x10 [ 1246.348354][T18225] ? fanotify_handle_event+0x2518/0x4990 [ 1246.348380][T18225] ? fanotify_handle_event+0x2518/0x4990 [ 1246.348401][T18225] fanotify_handle_event+0x2518/0x4990 [ 1246.348438][T18225] ? __pfx_fanotify_handle_event+0x10/0x10 [ 1246.348463][T18225] ? __pfx_fanotify_handle_event+0x10/0x10 [ 1246.348494][T18225] ? __pfx_fanotify_handle_event+0x10/0x10 [ 1246.348515][T18225] fsnotify+0xc5b/0x1de0 [ 1246.348548][T18225] ? __pfx_fsnotify+0x10/0x10 [ 1246.348584][T18225] __fsnotify_parent+0x974/0xcc0 [ 1246.348616][T18225] ? __pfx___fsnotify_parent+0x10/0x10 [ 1246.348646][T18225] ? __pfx_shmem_file_read_iter+0x10/0x10 [ 1246.348662][T18225] ? kasan_save_stack+0x33/0x60 [ 1246.348680][T18225] ? __kasan_kmalloc+0xaa/0xb0 [ 1246.348698][T18225] ? ima_calc_file_hash_tfm+0x234/0x350 [ 1246.348721][T18225] ? ima_calc_file_hash+0x1ba/0x490 [ 1246.348748][T18225] ? __kernel_read+0x617/0xbf0 [ 1246.348768][T18225] __kernel_read+0x617/0xbf0 [ 1246.348791][T18225] ? __pfx___kernel_read+0x10/0x10 [ 1246.348832][T18225] integrity_kernel_read+0x7e/0xb0 [ 1246.348852][T18225] ? __pfx_integrity_kernel_read+0x10/0x10 [ 1246.348874][T18225] ? kasan_save_track+0x14/0x30 [ 1246.348896][T18225] ima_calc_file_hash_tfm+0x25c/0x350 [ 1246.348922][T18225] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 1246.348977][T18225] ? ima_alloc_tfm+0x25/0x2e0 [ 1246.348999][T18225] ? ima_alloc_tfm+0x21a/0x2e0 [ 1246.349026][T18225] ? shmem_getattr+0x394/0x450 [ 1246.349053][T18225] ima_calc_file_hash+0x1ba/0x490 [ 1246.349081][T18225] ima_collect_measurement+0x8a6/0xa50 [ 1246.349114][T18225] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1246.349139][T18225] ? __pfx___schedule+0x10/0x10 [ 1246.349178][T18225] ? _raw_read_unlock+0x3e/0x50 [ 1246.349203][T18225] ? vfs_getxattr_alloc+0xec/0x350 [ 1246.349233][T18225] ? ima_get_hash_algo+0x27c/0x400 [ 1246.349254][T18225] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1246.349280][T18225] ? process_measurement+0x11b9/0x22d0 [ 1246.349301][T18225] process_measurement+0x11b9/0x22d0 [ 1246.349331][T18225] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1246.349348][T18225] ? __pfx_process_measurement+0x10/0x10 [ 1246.349376][T18225] ? __pfx_avc_has_perm+0x10/0x10 [ 1246.349423][T18225] ? file_map_prot_check+0x1eb/0x360 [ 1246.349446][T18225] ima_file_mmap+0x1ad/0x1d0 [ 1246.349469][T18225] ? __pfx_ima_file_mmap+0x10/0x10 [ 1246.349498][T18225] security_mmap_file+0x88c/0x990 [ 1246.349524][T18225] vm_mmap_pgoff+0xec/0x470 [ 1246.349547][T18225] ? find_held_lock+0x2b/0x80 [ 1246.349571][T18225] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1246.349596][T18225] ? __fget_files+0x20e/0x3c0 [ 1246.349625][T18225] ksys_mmap_pgoff+0x32c/0x5c0 [ 1246.349651][T18225] __x64_sys_mmap+0x125/0x190 [ 1246.349673][T18225] do_syscall_64+0xcd/0xf80 [ 1246.349698][T18225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.349715][T18225] RIP: 0033:0x7f834198f749 [ 1246.349729][T18225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.349745][T18225] RSP: 002b:00007f83427f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1246.349762][T18225] RAX: ffffffffffffffda RBX: 00007f8341be6180 RCX: 00007f834198f749 [ 1246.349773][T18225] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 1246.349783][T18225] RBP: 00007f83427f0090 R08: 0000000000000003 R09: 0000000000000000 [ 1246.349793][T18225] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 1246.349802][T18225] R13: 00007f8341be6218 R14: 00007f8341be6180 R15: 00007fff4d03a718 [ 1246.349828][T18225] [ 1246.977556][ T790] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1246.986625][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.997817][ T790] usb 2-1: config 0 descriptor?? [ 1247.093496][T18226] FAT-fs (loop5): unable to read boot sector [ 1247.543755][T18234] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1247.854168][ T790] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 1247.873951][ T790] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1248.079213][ T790] cp2112 0003:10C4:EA90.0026: Part Number: 0x00 Device Version: 0x4D [ 1248.668831][T18243] FAULT_INJECTION: forcing a failure. [ 1248.668831][T18243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1248.703367][T18243] CPU: 0 UID: 0 PID: 18243 Comm: syz.2.3504 Tainted: G L syzkaller #0 PREEMPT(full) [ 1248.703401][T18243] Tainted: [L]=SOFTLOCKUP [ 1248.703407][T18243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1248.703417][T18243] Call Trace: [ 1248.703424][T18243] [ 1248.703430][T18243] dump_stack_lvl+0x16c/0x1f0 [ 1248.703457][T18243] should_fail_ex+0x512/0x640 [ 1248.703492][T18243] _copy_to_user+0x32/0xd0 [ 1248.703524][T18243] simple_read_from_buffer+0xcb/0x170 [ 1248.703550][T18243] proc_fail_nth_read+0x197/0x240 [ 1248.703570][T18243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1248.703589][T18243] ? rw_verify_area+0xcf/0x6c0 [ 1248.703606][T18243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1248.703624][T18243] vfs_read+0x1e4/0xcf0 [ 1248.703647][T18243] ? __pfx___mutex_lock+0x10/0x10 [ 1248.703673][T18243] ? __pfx_vfs_read+0x10/0x10 [ 1248.703701][T18243] ? __fget_files+0x20e/0x3c0 [ 1248.703731][T18243] ksys_read+0x12a/0x250 [ 1248.703749][T18243] ? __pfx_ksys_read+0x10/0x10 [ 1248.703777][T18243] do_syscall_64+0xcd/0xf80 [ 1248.703802][T18243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.703819][T18243] RIP: 0033:0x7fe91418e15c [ 1248.703834][T18243] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1248.703850][T18243] RSP: 002b:00007fe9150c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1248.703866][T18243] RAX: ffffffffffffffda RBX: 00007fe9143e5fa0 RCX: 00007fe91418e15c [ 1248.703877][T18243] RDX: 000000000000000f RSI: 00007fe9150c60a0 RDI: 0000000000000006 [ 1248.703886][T18243] RBP: 00007fe9150c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.703895][T18243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.703904][T18243] R13: 00007fe9143e6038 R14: 00007fe9143e5fa0 R15: 00007ffe56cd6cb8 [ 1248.703930][T18243] [ 1249.154342][T18216] cp2112 0003:10C4:EA90.0026: Multi-message I2C transactions not supported [ 1249.201354][ T790] cp2112 0003:10C4:EA90.0026: error reading lock byte: -71 [ 1249.408437][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.659720][ T30] audit: type=1326 audit(1768768175.448:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18257 comm="syz.2.3508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe91418f749 code=0x0 [ 1250.078039][ T790] usb 2-1: USB disconnect, device number 45 [ 1250.120064][ T9650] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1250.174782][T18277] loop9: detected capacity change from 0 to 7 [ 1250.184070][T18277] Dev loop9: unable to read RDB block 7 [ 1250.191421][T18277] loop9: unable to read partition table [ 1250.302418][T18277] loop9: partition table beyond EOD, truncated [ 1250.495319][ T9650] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1250.503336][ T9650] usb 5-1: config 0 has no interface number 0 [ 1250.511870][ T9650] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1250.524163][ T9650] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1251.011384][ T9650] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1251.039687][ T9650] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1251.040279][T18277] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1251.048958][ T9650] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1251.064485][T18282] FAT-fs (loop3): unable to read boot sector [ 1251.066701][ T9650] usb 5-1: Product: syz [ 1251.076604][ T9650] usb 5-1: SerialNumber: syz [ 1251.103546][ T9650] usb 5-1: config 0 descriptor?? [ 1251.133658][ T9650] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1251.154204][ T9650] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input20 [ 1251.626887][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 1251.755768][T18267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.785916][T18267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.828400][ T9650] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1251.832426][T18267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.863019][T18267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.003149][ T9650] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.025767][ T9650] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.054539][ T9650] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1252.054842][ T5933] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1252.096032][ T9650] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.130989][ T9650] usb 1-1: config 0 descriptor?? [ 1252.215090][ T5933] usb 2-1: device descriptor read/64, error -71 [ 1252.482118][ T5933] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1252.579728][ T9650] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1252.601888][ T9650] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1252.621041][ T5933] usb 2-1: device descriptor read/64, error -71 [ 1252.760416][ T5933] usb usb2-port1: attempt power cycle [ 1252.790335][ T9650] cp2112 0003:10C4:EA90.0027: Part Number: 0x00 Device Version: 0x4D [ 1253.209579][ T5933] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1253.253692][ T5933] usb 2-1: device descriptor read/8, error -71 [ 1254.660664][ T9650] cp2112 0003:10C4:EA90.0027: error reading lock byte: -71 [ 1254.716156][ T5933] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1254.737990][ T5933] usb 2-1: device descriptor read/8, error -71 [ 1254.769394][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.778011][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.785153][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.792266][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.799367][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.806618][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.813811][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.820895][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.827967][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.835044][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1254.846429][ T9650] usb 1-1: USB disconnect, device number 58 [ 1254.852890][T16197] usb 5-1: USB disconnect, device number 42 [ 1254.858829][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1254.931250][T16197] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1255.075442][ T5933] usb usb2-port1: unable to enumerate USB device [ 1255.108414][T18322] syzkaller0: entered promiscuous mode [ 1255.139992][T18322] syzkaller0: entered allmulticast mode [ 1257.206663][T18340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1257.250060][T18340] netlink: 'syz.1.3531': attribute type 7 has an invalid length. [ 1257.275228][T18340] netlink: 'syz.1.3531': attribute type 8 has an invalid length. [ 1257.303026][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1257.352758][T18340] ip6gretap0: entered promiscuous mode [ 1257.400451][T18340] syz_tun: entered promiscuous mode [ 1257.559697][ T30] audit: type=1400 audit(1768768182.819:587): avc: denied { bind } for pid=18343 comm="syz.3.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1257.591138][T18340] erspan0: entered promiscuous mode [ 1257.937749][T18351] loop4: detected capacity change from 0 to 524288000 [ 1257.987496][T18351] Invalid logical block size (6) [ 1258.111831][ T30] audit: type=1400 audit(1768768183.371:588): avc: denied { connect } for pid=18350 comm="syz.0.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1258.734075][T18372] /dev/nullb0: Can't open blockdev [ 1261.509097][T18423] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 1261.853764][ T30] audit: type=1400 audit(1768768186.561:589): avc: denied { relabelto } for pid=18412 comm="syz.2.3547" name="89" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1261.941897][ T30] audit: type=1400 audit(1768768186.561:590): avc: denied { associate } for pid=18412 comm="syz.2.3547" name="89" dev="tmpfs" ino=494 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1262.131591][ T30] audit: type=1400 audit(1768768186.561:591): avc: denied { mounton } for pid=18412 comm="syz.2.3547" path="/89" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1262.169775][ T30] audit: type=1400 audit(1768768186.561:592): avc: denied { mount } for pid=18412 comm="syz.2.3547" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1262.712725][ T30] audit: type=1400 audit(1768768187.684:593): avc: denied { unmount } for pid=16599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1262.806299][ T30] audit: type=1400 audit(1768768187.703:594): avc: denied { remove_name } for pid=16599 comm="syz-executor" name="binderfs" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1262.862666][T18443] tipc: Enabled bearer , priority 10 [ 1262.927399][T18443] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3552'. [ 1262.957074][ T30] audit: type=1400 audit(1768768187.703:595): avc: denied { rmdir } for pid=16599 comm="syz-executor" name="89" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 1262.988795][T18443] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1263.002071][T18447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3556'. [ 1263.033358][T18443] tipc: Enabled bearer , priority 10 [ 1263.235425][ T30] audit: type=1326 audit(1768768188.161:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.4.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834198f749 code=0x7ffc0000 [ 1263.720015][ T30] audit: type=1326 audit(1768768188.582:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.4.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834198f749 code=0x7ffc0000 [ 1263.952333][T18472] FAULT_INJECTION: forcing a failure. [ 1263.952333][T18472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.965548][T18472] CPU: 1 UID: 0 PID: 18472 Comm: syz.2.3559 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.965574][T18472] Tainted: [L]=SOFTLOCKUP [ 1263.965580][T18472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1263.965590][T18472] Call Trace: [ 1263.965596][T18472] [ 1263.965604][T18472] dump_stack_lvl+0x16c/0x1f0 [ 1263.965632][T18472] should_fail_ex+0x512/0x640 [ 1263.965662][T18472] _copy_from_iter+0x2a4/0x16c0 [ 1263.965692][T18472] ? __build_skb_around+0x278/0x390 [ 1263.965718][T18472] ? __pfx__copy_from_iter+0x10/0x10 [ 1263.965742][T18472] ? __alloc_skb+0x35d/0x410 [ 1263.965759][T18472] ? __pfx___alloc_skb+0x10/0x10 [ 1263.965774][T18472] ? irqentry_exit+0x1dd/0x8c0 [ 1263.965796][T18472] ? rcu_is_watching+0x12/0xc0 [ 1263.965821][T18472] pfkey_sendmsg+0x1d1/0x850 [ 1263.965856][T18472] ____sys_sendmsg+0xa5d/0xc30 [ 1263.965881][T18472] ? copy_msghdr_from_user+0x10a/0x160 [ 1263.965901][T18472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1263.965939][T18472] ___sys_sendmsg+0x134/0x1d0 [ 1263.965961][T18472] ? __pfx____sys_sendmsg+0x10/0x10 [ 1263.965980][T18472] ? rcu_is_watching+0x12/0xc0 [ 1263.966032][T18472] __sys_sendmsg+0x16d/0x220 [ 1263.966052][T18472] ? __pfx___sys_sendmsg+0x10/0x10 [ 1263.966091][T18472] do_syscall_64+0xcd/0xf80 [ 1263.966116][T18472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.966133][T18472] RIP: 0033:0x7fe91418f749 [ 1263.966148][T18472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1263.966165][T18472] RSP: 002b:00007fe915084038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.966182][T18472] RAX: ffffffffffffffda RBX: 00007fe9143e6180 RCX: 00007fe91418f749 [ 1263.966194][T18472] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1263.966204][T18472] RBP: 00007fe915084090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.966215][T18472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.966225][T18472] R13: 00007fe9143e6218 R14: 00007fe9143e6180 R15: 00007ffe56cd6cb8 [ 1263.966250][T18472] [ 1264.188819][ T30] audit: type=1326 audit(1768768188.582:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.4.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f834198f749 code=0x7ffc0000 [ 1264.212934][ T30] audit: type=1326 audit(1768768188.582:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.4.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834198f749 code=0x7ffc0000 [ 1264.236439][ T30] audit: type=1326 audit(1768768188.582:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.4.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f834198f749 code=0x7ffc0000 [ 1264.260252][ T30] audit: type=1326 audit(1768768188.582:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.4.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834198f749 code=0x7ffc0000 [ 1264.284753][ T30] audit: type=1326 audit(1768768188.582:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.4.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f834198f749 code=0x7ffc0000 [ 1264.308308][ T30] audit: type=1326 audit(1768768188.582:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.4.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834198f749 code=0x7ffc0000 [ 1264.332453][ T30] audit: type=1326 audit(1768768188.582:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.4.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f834198f749 code=0x7ffc0000 [ 1265.180102][T18487] FAULT_INJECTION: forcing a failure. [ 1265.180102][T18487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.210582][T18487] CPU: 0 UID: 0 PID: 18487 Comm: syz.2.3563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1265.210609][T18487] Tainted: [L]=SOFTLOCKUP [ 1265.210615][T18487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1265.210624][T18487] Call Trace: [ 1265.210629][T18487] [ 1265.210637][T18487] dump_stack_lvl+0x16c/0x1f0 [ 1265.210664][T18487] should_fail_ex+0x512/0x640 [ 1265.210693][T18487] _copy_to_user+0x32/0xd0 [ 1265.210720][T18487] simple_read_from_buffer+0xcb/0x170 [ 1265.210743][T18487] proc_fail_nth_read+0x197/0x240 [ 1265.210762][T18487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1265.210779][T18487] ? rw_verify_area+0xcf/0x6c0 [ 1265.210797][T18487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1265.210814][T18487] vfs_read+0x1e4/0xcf0 [ 1265.210836][T18487] ? __pfx___mutex_lock+0x10/0x10 [ 1265.210870][T18487] ? __pfx_vfs_read+0x10/0x10 [ 1265.210897][T18487] ? __fget_files+0x20e/0x3c0 [ 1265.210926][T18487] ksys_read+0x12a/0x250 [ 1265.210952][T18487] ? __pfx_ksys_read+0x10/0x10 [ 1265.210973][T18487] ? fput+0x70/0xf0 [ 1265.210991][T18487] do_syscall_64+0xcd/0xf80 [ 1265.211016][T18487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.211036][T18487] RIP: 0033:0x7fe91418e15c [ 1265.211050][T18487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1265.211066][T18487] RSP: 002b:00007fe9150c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1265.211082][T18487] RAX: ffffffffffffffda RBX: 00007fe9143e5fa0 RCX: 00007fe91418e15c [ 1265.211093][T18487] RDX: 000000000000000f RSI: 00007fe9150c60a0 RDI: 0000000000000004 [ 1265.211102][T18487] RBP: 00007fe9150c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.211112][T18487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.211121][T18487] R13: 00007fe9143e6038 R14: 00007fe9143e5fa0 R15: 00007ffe56cd6cb8 [ 1265.211146][T18487] [ 1266.415739][T18516] Invalid ELF header type: 3 != 1 [ 1267.181131][T18523] Invalid ELF header type: 3 != 1 [ 1267.415788][T18527] netlink: 'syz.2.3573': attribute type 3 has an invalid length. [ 1267.423852][T18526] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3574'. [ 1268.329313][T18546] FAULT_INJECTION: forcing a failure. [ 1268.329313][T18546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.370634][T18546] CPU: 1 UID: 0 PID: 18546 Comm: syz.3.3580 Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.370660][T18546] Tainted: [L]=SOFTLOCKUP [ 1268.370664][T18546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1268.370671][T18546] Call Trace: [ 1268.370675][T18546] [ 1268.370679][T18546] dump_stack_lvl+0x16c/0x1f0 [ 1268.370697][T18546] should_fail_ex+0x512/0x640 [ 1268.370717][T18546] _copy_from_iter+0x2a4/0x16c0 [ 1268.370736][T18546] ? __alloc_skb+0x220/0x410 [ 1268.370747][T18546] ? __alloc_skb+0x35d/0x410 [ 1268.370756][T18546] ? __pfx__copy_from_iter+0x10/0x10 [ 1268.370772][T18546] ? netlink_autobind.isra.0+0x158/0x370 [ 1268.370791][T18546] netlink_sendmsg+0x820/0xdd0 [ 1268.370812][T18546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1268.370831][T18546] ____sys_sendmsg+0xa5d/0xc30 [ 1268.370846][T18546] ? copy_msghdr_from_user+0x10a/0x160 [ 1268.370858][T18546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1268.370878][T18546] ___sys_sendmsg+0x134/0x1d0 [ 1268.370891][T18546] ? __pfx____sys_sendmsg+0x10/0x10 [ 1268.370918][T18546] __sys_sendmsg+0x16d/0x220 [ 1268.370930][T18546] ? __pfx___sys_sendmsg+0x10/0x10 [ 1268.370950][T18546] do_syscall_64+0xcd/0xf80 [ 1268.370967][T18546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.370977][T18546] RIP: 0033:0x7f7bbc18f749 [ 1268.370987][T18546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1268.370997][T18546] RSP: 002b:00007f7bbd0bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1268.371008][T18546] RAX: ffffffffffffffda RBX: 00007f7bbc3e5fa0 RCX: 00007f7bbc18f749 [ 1268.371015][T18546] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1268.371021][T18546] RBP: 00007f7bbd0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.371027][T18546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.371032][T18546] R13: 00007f7bbc3e6038 R14: 00007f7bbc3e5fa0 R15: 00007ffc25938608 [ 1268.371049][T18546] [ 1268.464652][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1268.464667][ T30] audit: type=1400 audit(1768768193.035:644): avc: denied { write } for pid=18537 comm="syz.2.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1268.677007][T16197] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1268.883450][T16197] usb 5-1: Using ep0 maxpacket: 32 [ 1268.890514][T16197] usb 5-1: New USB device found, idVendor=ff1e, idProduct=ffff, bcdDevice= 0.ff [ 1269.036206][T16197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.086665][T16197] usb 5-1: config 0 descriptor?? [ 1269.394720][T18543] lo speed is unknown, defaulting to 1000 [ 1269.690572][T18568] Invalid ELF header type: 3 != 1 [ 1270.099752][T18570] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1270.233683][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3589'. [ 1270.244989][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3589'. [ 1270.255211][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3589'. [ 1270.264820][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3589'. [ 1270.461875][T16197] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1270.626041][T16197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.637478][T16197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.651354][T16197] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1270.672768][T16197] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1270.686345][T16197] usb 2-1: Manufacturer: syz [ 1270.706612][T16197] usb 2-1: config 0 descriptor?? [ 1270.965512][T18591] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3595'. [ 1270.974611][T18591] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3595'. [ 1270.986690][ T5826] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1271.328866][T16197] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 1271.349053][T16197] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 1271.377548][T16197] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 1271.395827][T16432] usb 5-1: USB disconnect, device number 43 [ 1271.405917][T16197] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 1271.412692][T16197] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 1271.462258][T16197] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 1271.495013][T16197] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 1271.515037][T16197] pyra 0003:1E7D:2CF6.0028: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1272.389286][T16197] pyra 0003:1E7D:2CF6.0028: couldn't init struct pyra_device [ 1272.415124][T16197] pyra 0003:1E7D:2CF6.0028: couldn't install mouse [ 1272.426390][T16197] pyra 0003:1E7D:2CF6.0028: probe with driver pyra failed with error -71 [ 1272.446715][T16197] usb 2-1: USB disconnect, device number 50 [ 1272.735636][T16432] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1272.773559][T18611] fido_id[18611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1272.909725][T16432] usb 1-1: Using ep0 maxpacket: 32 [ 1272.915988][T16432] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1272.924410][T16432] usb 1-1: config 0 has no interface number 0 [ 1272.930561][T16432] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1272.939067][T16432] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1272.948220][T16432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.956272][T16432] usb 1-1: Product: syz [ 1272.960403][T16432] usb 1-1: Manufacturer: syz [ 1272.965014][T16432] usb 1-1: SerialNumber: syz [ 1272.970803][T16432] usb 1-1: config 0 descriptor?? [ 1272.979109][T16432] smsc75xx v1.0.0 [ 1273.684893][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 1273.927102][T16432] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1273.954330][T16432] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1273.969857][T16432] usb 1-1: USB disconnect, device number 59 [ 1274.331573][T15055] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1274.566734][T15055] usb 5-1: Using ep0 maxpacket: 32 [ 1274.574366][T15055] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1274.587362][T15055] usb 5-1: config 0 has no interface number 0 [ 1274.603275][T15055] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1274.614860][T15055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.627066][T15055] usb 5-1: Product: syz [ 1274.635327][T15055] usb 5-1: Manufacturer: syz [ 1274.639999][T15055] usb 5-1: SerialNumber: syz [ 1274.668199][T15055] usb 5-1: config 0 descriptor?? [ 1274.678268][T15055] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1275.089911][T15055] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1275.150178][T15055] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1275.197263][ T790] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1275.379238][ T790] usb 4-1: Using ep0 maxpacket: 32 [ 1275.390466][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.411823][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.423165][ T790] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1275.432280][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.455326][ T790] usb 4-1: config 0 descriptor?? [ 1275.695837][T18643] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3612'. [ 1275.953487][T18653] exFAT-fs (nullb0): invalid boot record signature [ 1275.960206][T18653] exFAT-fs (nullb0): failed to read boot sector [ 1275.967125][T18653] exFAT-fs (nullb0): failed to recognize exfat type [ 1275.970031][ T790] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 1276.158538][ T790] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 1276.288365][ T790] ft260 0003:0403:6030.0029: chip code: 6424 8183 [ 1276.336237][T18659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.543180][T18659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.556286][ T790] ft260 0003:0403:6030.0029: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1277.652767][ T790] ft260 0003:0403:6030.0029: failed to retrieve status: -32, no wakeup [ 1277.740024][T18671] comedi comedi1: comedi_config --init_data is deprecated [ 1277.858945][T16543] usb 4-1: reset high-speed USB device number 66 using dummy_hcd [ 1278.104936][ T5925] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1278.266800][ T5925] usb 1-1: device descriptor read/64, error -71 [ 1278.404750][T18686] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 1278.415115][T18686] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 1278.436061][T18686] netlink: 'syz.2.3624': attribute type 10 has an invalid length. [ 1278.464852][T18686] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 1278.472708][T18686] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1278.532508][ T5925] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1278.682060][ T5925] usb 1-1: device descriptor read/64, error -71 [ 1278.757862][ T790] usb 4-1: USB disconnect, device number 66 [ 1278.854241][ T5925] usb usb1-port1: attempt power cycle [ 1279.217081][ T5925] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1279.280631][ T5925] usb 1-1: device descriptor read/8, error -71 [ 1279.287779][T18694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.296539][T18694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.447676][T18697] exFAT-fs (nullb0): invalid boot record signature [ 1279.454495][T18697] exFAT-fs (nullb0): failed to read boot sector [ 1279.460782][T18697] exFAT-fs (nullb0): failed to recognize exfat type [ 1279.783310][ T5925] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1279.816399][ T5925] usb 1-1: device descriptor read/8, error -71 [ 1279.940308][ T5925] usb usb1-port1: unable to enumerate USB device [ 1280.064362][T18702] syzkaller0: entered promiscuous mode [ 1280.089850][T18702] syzkaller0: entered allmulticast mode [ 1281.921742][T18702] tipc: Started in network mode [ 1281.945865][T18702] tipc: Node identity 862e655f4201, cluster identity 4711 [ 1281.969092][T18702] tipc: Enabled bearer , priority 0 [ 1282.053178][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3632'. [ 1282.444755][ T9650] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1282.514523][T18730] FAULT_INJECTION: forcing a failure. [ 1282.514523][T18730] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.527764][T18730] CPU: 1 UID: 0 PID: 18730 Comm: syz.0.3637 Tainted: G L syzkaller #0 PREEMPT(full) [ 1282.527781][T18730] Tainted: [L]=SOFTLOCKUP [ 1282.527785][T18730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1282.527792][T18730] Call Trace: [ 1282.527797][T18730] [ 1282.527803][T18730] dump_stack_lvl+0x16c/0x1f0 [ 1282.527823][T18730] should_fail_ex+0x512/0x640 [ 1282.527842][T18730] should_failslab+0xc2/0x120 [ 1282.527857][T18730] kmem_cache_alloc_noprof+0x83/0x770 [ 1282.527869][T18730] ? dst_alloc+0x99/0x1a0 [ 1282.527881][T18730] ? dst_alloc+0x99/0x1a0 [ 1282.527890][T18730] ? find_held_lock+0x2b/0x80 [ 1282.527905][T18730] dst_alloc+0x99/0x1a0 [ 1282.527916][T18730] rt_dst_alloc+0x35/0x3a0 [ 1282.527933][T18730] ip_route_input_slow+0x16cb/0x3fa0 [ 1282.527947][T18730] ? __pfx_ip_route_input_slow+0x10/0x10 [ 1282.527959][T18730] ? __lock_acquire+0x436/0x2890 [ 1282.527974][T18730] ? __pfx_ipt_do_table+0x10/0x10 [ 1282.527990][T18730] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 1282.528003][T18730] ip_route_input_noref+0x120/0x2e0 [ 1282.528016][T18730] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1282.528030][T18730] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1282.528042][T18730] ? sock_wfree+0x11c/0x850 [ 1282.528054][T18730] ip_rcv_finish_core+0x46f/0x2290 [ 1282.528070][T18730] ip_rcv+0x1c0/0x600 [ 1282.528082][T18730] ? __pfx_ip_rcv+0x10/0x10 [ 1282.528093][T18730] __netif_receive_skb_one_core+0x197/0x1e0 [ 1282.528105][T18730] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1282.528116][T18730] ? lock_acquire+0x179/0x330 [ 1282.528129][T18730] ? __phys_addr+0xe8/0x180 [ 1282.528141][T18730] __netif_receive_skb+0x1d/0x160 [ 1282.528151][T18730] netif_receive_skb+0x137/0x760 [ 1282.528161][T18730] ? __pfx_netif_receive_skb+0x10/0x10 [ 1282.528175][T18730] tun_rx_batched.isra.0+0x3ee/0x740 [ 1282.528193][T18730] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1282.528212][T18730] ? tun_get_user+0x1ded/0x3cc0 [ 1282.528227][T18730] ? rcu_is_watching+0x12/0xc0 [ 1282.528239][T18730] tun_get_user+0x28b2/0x3cc0 [ 1282.528261][T18730] ? __pfx_tun_get_user+0x10/0x10 [ 1282.528278][T18730] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1282.528292][T18730] ? find_held_lock+0x2b/0x80 [ 1282.528308][T18730] ? tun_get+0x191/0x370 [ 1282.528325][T18730] tun_chr_write_iter+0xdc/0x210 [ 1282.528342][T18730] vfs_write+0x7d3/0x11d0 [ 1282.528357][T18730] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1282.528374][T18730] ? __pfx_vfs_write+0x10/0x10 [ 1282.528386][T18730] ? find_held_lock+0x2b/0x80 [ 1282.528409][T18730] ksys_write+0x12a/0x250 [ 1282.528422][T18730] ? __pfx_ksys_write+0x10/0x10 [ 1282.528439][T18730] do_syscall_64+0xcd/0xf80 [ 1282.528456][T18730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.528467][T18730] RIP: 0033:0x7fc10cb8e1ff [ 1282.528476][T18730] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1282.528486][T18730] RSP: 002b:00007fc10d9e3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1282.528500][T18730] RAX: ffffffffffffffda RBX: 00007fc10cde5fa0 RCX: 00007fc10cb8e1ff [ 1282.528507][T18730] RDX: 0000000000000082 RSI: 0000200000000040 RDI: 00000000000000c8 [ 1282.528513][T18730] RBP: 00007fc10d9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.528519][T18730] R10: 0000000000000082 R11: 0000000000000293 R12: 0000000000000001 [ 1282.528525][T18730] R13: 00007fc10cde6038 R14: 00007fc10cde5fa0 R15: 00007ffd9fb238b8 [ 1282.528538][T18730] [ 1282.916421][T18701] tipc: Resetting bearer [ 1283.022414][ T9650] usb 2-1: Using ep0 maxpacket: 32 [ 1283.029279][ T9650] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1283.037741][ T9650] usb 2-1: config 0 has no interface number 0 [ 1283.045729][ T9650] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1283.054984][ T9650] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1283.057614][T18701] tipc: Disabling bearer [ 1283.064170][ T9650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.078319][ T9650] usb 2-1: Product: syz [ 1283.083547][ T9650] usb 2-1: Manufacturer: syz [ 1283.091551][ T9650] usb 2-1: SerialNumber: syz [ 1283.103895][ T9650] usb 2-1: config 0 descriptor?? [ 1283.113866][ T9650] smsc75xx v1.0.0 [ 1283.119491][ T790] tipc: Node number set to 3291440479 [ 1283.207144][T18735] exFAT-fs (nullb0): invalid boot record signature [ 1283.213789][T18735] exFAT-fs (nullb0): failed to read boot sector [ 1283.220290][T18735] exFAT-fs (nullb0): failed to recognize exfat type [ 1284.740402][ T9650] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1284.775427][ T9650] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1284.808852][ T9650] usb 2-1: USB disconnect, device number 51 [ 1285.020951][T18068] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1285.193757][T18068] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1285.210105][T18068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.243072][T18068] usb 4-1: config 0 descriptor?? [ 1285.263595][T18068] cp210x 4-1:0.0: cp210x converter detected [ 1288.048021][T18068] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1288.056054][T18068] cp210x 4-1:0.0: querying part number failed [ 1288.066745][T18068] usb 4-1: cp210x converter now attached to ttyUSB2 [ 1288.077361][T18068] usb 4-1: USB disconnect, device number 67 [ 1288.086887][T18068] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 1288.096929][T18068] cp210x 4-1:0.0: device disconnected [ 1289.982227][T18796] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1290.019993][T18796] Error validating options; rc = [-22] [ 1290.087957][ T5925] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1290.248094][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 1290.296484][ T5925] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1290.419125][ T5925] usb 4-1: config 0 has no interface number 0 [ 1290.428720][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3655'. [ 1290.448789][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3655'. [ 1290.463327][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3655'. [ 1290.494748][ T5925] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1290.526321][ T30] audit: type=1400 audit(1768768213.681:645): avc: denied { create } for pid=18808 comm="syz.4.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1290.546498][ T5925] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1290.571600][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.583694][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3655'. [ 1290.606829][ T5925] usb 4-1: Product: syz [ 1290.616205][ T30] audit: type=1400 audit(1768768213.691:646): avc: denied { bind } for pid=18808 comm="syz.4.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1290.638049][ T5925] usb 4-1: Manufacturer: syz [ 1290.648734][ T5925] usb 4-1: SerialNumber: syz [ 1290.671232][ T5925] usb 4-1: config 0 descriptor?? [ 1290.686887][ T5925] smsc75xx v1.0.0 [ 1290.690549][ T30] audit: type=1400 audit(1768768213.691:647): avc: denied { connect } for pid=18808 comm="syz.4.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1290.772625][ T30] audit: type=1400 audit(1768768213.691:648): avc: denied { write } for pid=18808 comm="syz.4.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1290.818858][ T30] audit: type=1400 audit(1768768213.784:649): avc: denied { read } for pid=18808 comm="syz.4.3657" lport=48235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1291.031418][ T30] audit: type=1400 audit(1768768213.934:650): avc: denied { create } for pid=18786 comm="syz.1.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1291.119422][ T30] audit: type=1400 audit(1768768214.018:651): avc: denied { bind } for pid=18786 comm="syz.1.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1294.830569][T18855] input: syz0 as /devices/virtual/input/input21 [ 1296.127462][ T5925] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1296.186649][ T5925] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1296.221352][ T5925] usb 4-1: USB disconnect, device number 68 [ 1296.442075][ T790] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1296.627564][T18875] pim6reg: entered allmulticast mode [ 1296.683251][ T790] usb 1-1: device descriptor read/64, error -71 [ 1297.106695][ T790] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1297.237499][T18879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1297.324602][ T790] usb 1-1: device descriptor read/64, error -71 [ 1297.426371][T18881] lo speed is unknown, defaulting to 1000 [ 1297.443305][ T790] usb usb1-port1: attempt power cycle [ 1297.466544][T18882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.507944][T18882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.595560][ T30] audit: type=1400 audit(1768768220.295:652): avc: denied { getopt } for pid=18880 comm="syz.4.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1297.837787][ T790] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1297.915811][ T790] usb 1-1: device descriptor read/8, error -71 [ 1298.190501][ T790] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1298.235774][ T790] usb 1-1: device descriptor read/8, error -71 [ 1298.343075][T18890] sp0: Synchronizing with TNC [ 1298.366996][ T790] usb usb1-port1: unable to enumerate USB device [ 1298.757829][ T30] audit: type=1400 audit(1768768221.409:653): avc: denied { append } for pid=18894 comm="syz.3.3682" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1298.899250][ T30] audit: type=1400 audit(1768768221.483:654): avc: denied { ioctl } for pid=18894 comm="syz.3.3682" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1299.218258][ T5925] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1299.373662][T18899] exFAT-fs (nullb0): invalid boot record signature [ 1299.381376][T18899] exFAT-fs (nullb0): failed to read boot sector [ 1299.387869][T18899] exFAT-fs (nullb0): failed to recognize exfat type [ 1299.398552][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 1299.633704][ T5925] usb 4-1: config 0 has an invalid interface number: 228 but max is 0 [ 1299.644085][ T5925] usb 4-1: config 0 has no interface number 0 [ 1299.652715][ T5925] usb 4-1: config 0 interface 228 has no altsetting 0 [ 1299.670685][ T5925] usb 4-1: New USB device found, idVendor=19d2, idProduct=0330, bcdDevice=c2.64 [ 1299.698104][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.738082][ T5925] usb 4-1: config 0 descriptor?? [ 1299.775001][ T5925] option 4-1:0.228: GSM modem (1-port) converter detected [ 1299.791203][ T30] audit: type=1400 audit(1768768222.363:655): avc: denied { mounton } for pid=18900 comm="syz.4.3684" path="/145/file0" dev="tmpfs" ino=794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1299.817023][T18903] FAULT_INJECTION: forcing a failure. [ 1299.817023][T18903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1299.847504][T18903] CPU: 0 UID: 0 PID: 18903 Comm: syz.0.3685 Tainted: G L syzkaller #0 PREEMPT(full) [ 1299.847534][T18903] Tainted: [L]=SOFTLOCKUP [ 1299.847540][T18903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1299.847570][T18903] Call Trace: [ 1299.847576][T18903] [ 1299.847583][T18903] dump_stack_lvl+0x16c/0x1f0 [ 1299.847611][T18903] should_fail_ex+0x512/0x640 [ 1299.847640][T18903] _copy_to_user+0x32/0xd0 [ 1299.847665][T18903] drm_ioctl+0x5eb/0xc30 [ 1299.847696][T18903] ? __pfx_drm_mode_getencoder+0x10/0x10 [ 1299.847722][T18903] ? __pfx_drm_ioctl+0x10/0x10 [ 1299.847755][T18903] ? selinux_file_ioctl+0x180/0x270 [ 1299.847778][T18903] ? selinux_file_ioctl+0xb4/0x270 [ 1299.847800][T18903] ? __pfx_drm_ioctl+0x10/0x10 [ 1299.847823][T18903] __x64_sys_ioctl+0x18e/0x210 [ 1299.847845][T18903] do_syscall_64+0xcd/0xf80 [ 1299.847869][T18903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.847885][T18903] RIP: 0033:0x7fc10cb8f749 [ 1299.847899][T18903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1299.847913][T18903] RSP: 002b:00007fc10d9e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.847929][T18903] RAX: ffffffffffffffda RBX: 00007fc10cde5fa0 RCX: 00007fc10cb8f749 [ 1299.847940][T18903] RDX: 0000200000000180 RSI: 00000000c01464a6 RDI: 0000000000000004 [ 1299.847950][T18903] RBP: 00007fc10d9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.847960][T18903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.847969][T18903] R13: 00007fc10cde6038 R14: 00007fc10cde5fa0 R15: 00007ffd9fb238b8 [ 1299.847993][T18903] [ 1300.044689][T16197] usb 4-1: USB disconnect, device number 69 [ 1300.053347][T16197] option 4-1:0.228: device disconnected [ 1302.059550][ C1] sd 0:0:1:0: [sda] tag#8789 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1302.069974][ C1] sd 0:0:1:0: [sda] tag#8789 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 1302.234787][ T30] audit: type=1400 audit(1768768224.655:656): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.181 dest=37836 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1302.751747][T18944] FAULT_INJECTION: forcing a failure. [ 1302.751747][T18944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1302.800154][T18944] CPU: 0 UID: 0 PID: 18944 Comm: syz.2.3695 Tainted: G L syzkaller #0 PREEMPT(full) [ 1302.800182][T18944] Tainted: [L]=SOFTLOCKUP [ 1302.800188][T18944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1302.800198][T18944] Call Trace: [ 1302.800204][T18944] [ 1302.800211][T18944] dump_stack_lvl+0x16c/0x1f0 [ 1302.800240][T18944] should_fail_ex+0x512/0x640 [ 1302.800269][T18944] _copy_from_iter+0x2a4/0x16c0 [ 1302.800297][T18944] ? __alloc_skb+0x220/0x410 [ 1302.800311][T18944] ? __alloc_skb+0x35d/0x410 [ 1302.800327][T18944] ? __pfx__copy_from_iter+0x10/0x10 [ 1302.800351][T18944] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1302.800373][T18944] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1302.800404][T18944] netlink_sendmsg+0x820/0xdd0 [ 1302.800428][T18944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1302.800457][T18944] ____sys_sendmsg+0xa5d/0xc30 [ 1302.800480][T18944] ? copy_msghdr_from_user+0x10a/0x160 [ 1302.800499][T18944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1302.800555][T18944] ___sys_sendmsg+0x134/0x1d0 [ 1302.800577][T18944] ? __pfx____sys_sendmsg+0x10/0x10 [ 1302.800628][T18944] __sys_sendmsg+0x16d/0x220 [ 1302.800648][T18944] ? __pfx___sys_sendmsg+0x10/0x10 [ 1302.800686][T18944] do_syscall_64+0xcd/0xf80 [ 1302.800711][T18944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.800729][T18944] RIP: 0033:0x7fe91418f749 [ 1302.800743][T18944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1302.800758][T18944] RSP: 002b:00007fe9150c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1302.800775][T18944] RAX: ffffffffffffffda RBX: 00007fe9143e5fa0 RCX: 00007fe91418f749 [ 1302.800787][T18944] RDX: 000000002000c094 RSI: 0000200000000b00 RDI: 0000000000000004 [ 1302.800797][T18944] RBP: 00007fe9150c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.800807][T18944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1302.800816][T18944] R13: 00007fe9143e6038 R14: 00007fe9143e5fa0 R15: 00007ffe56cd6cb8 [ 1302.800840][T18944] [ 1304.382326][T18955] FAULT_INJECTION: forcing a failure. [ 1304.382326][T18955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.456991][T18955] CPU: 1 UID: 0 PID: 18955 Comm: syz.1.3700 Tainted: G L syzkaller #0 PREEMPT(full) [ 1304.457021][T18955] Tainted: [L]=SOFTLOCKUP [ 1304.457028][T18955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1304.457038][T18955] Call Trace: [ 1304.457044][T18955] [ 1304.457052][T18955] dump_stack_lvl+0x16c/0x1f0 [ 1304.457085][T18955] should_fail_ex+0x512/0x640 [ 1304.457115][T18955] _copy_from_iter+0x2a4/0x16c0 [ 1304.457146][T18955] ? __alloc_skb+0x220/0x410 [ 1304.457162][T18955] ? __alloc_skb+0x35d/0x410 [ 1304.457178][T18955] ? __pfx__copy_from_iter+0x10/0x10 [ 1304.457204][T18955] ? netlink_autobind.isra.0+0x158/0x370 [ 1304.457237][T18955] netlink_sendmsg+0x820/0xdd0 [ 1304.457265][T18955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1304.457297][T18955] ____sys_sendmsg+0xa5d/0xc30 [ 1304.457322][T18955] ? copy_msghdr_from_user+0x10a/0x160 [ 1304.457342][T18955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1304.457377][T18955] ___sys_sendmsg+0x134/0x1d0 [ 1304.457398][T18955] ? __pfx____sys_sendmsg+0x10/0x10 [ 1304.457448][T18955] __sys_sendmsg+0x16d/0x220 [ 1304.457480][T18955] ? __pfx___sys_sendmsg+0x10/0x10 [ 1304.457516][T18955] do_syscall_64+0xcd/0xf80 [ 1304.457542][T18955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.457559][T18955] RIP: 0033:0x7ffb63d8f749 [ 1304.457573][T18955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1304.457589][T18955] RSP: 002b:00007ffb64c49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.457606][T18955] RAX: ffffffffffffffda RBX: 00007ffb63fe5fa0 RCX: 00007ffb63d8f749 [ 1304.457617][T18955] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1304.457627][T18955] RBP: 00007ffb64c49090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.457638][T18955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.457648][T18955] R13: 00007ffb63fe6038 R14: 00007ffb63fe5fa0 R15: 00007ffdef558ab8 [ 1304.457672][T18955] [ 1304.729241][T18960] FAULT_INJECTION: forcing a failure. [ 1304.729241][T18960] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.741951][T18960] CPU: 1 UID: 0 PID: 18960 Comm: syz.0.3698 Tainted: G L syzkaller #0 PREEMPT(full) [ 1304.741976][T18960] Tainted: [L]=SOFTLOCKUP [ 1304.741982][T18960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1304.741990][T18960] Call Trace: [ 1304.741994][T18960] [ 1304.741999][T18960] dump_stack_lvl+0x16c/0x1f0 [ 1304.742020][T18960] should_fail_ex+0x512/0x640 [ 1304.742038][T18960] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1304.742049][T18960] should_failslab+0xc2/0x120 [ 1304.742065][T18960] __kmalloc_cache_noprof+0x80/0x800 [ 1304.742075][T18960] ? alloc_pipe_info+0x10e/0x590 [ 1304.742092][T18960] ? alloc_pipe_info+0x10e/0x590 [ 1304.742106][T18960] alloc_pipe_info+0x10e/0x590 [ 1304.742122][T18960] splice_direct_to_actor+0x77d/0xa30 [ 1304.742139][T18960] ? __lock_acquire+0x436/0x2890 [ 1304.742152][T18960] ? __pfx_direct_splice_actor+0x10/0x10 [ 1304.742168][T18960] ? find_held_lock+0x2b/0x80 [ 1304.742184][T18960] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1304.742198][T18960] ? get_pid_task+0xfc/0x250 [ 1304.742213][T18960] do_splice_direct+0x174/0x240 [ 1304.742228][T18960] ? __pfx_do_splice_direct+0x10/0x10 [ 1304.742244][T18960] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1304.742261][T18960] ? rw_verify_area+0xcf/0x6c0 [ 1304.742278][T18960] do_sendfile+0xb06/0xe50 [ 1304.742298][T18960] ? __pfx_do_sendfile+0x10/0x10 [ 1304.742310][T18960] ? __fget_files+0x20e/0x3c0 [ 1304.742328][T18960] __x64_sys_sendfile64+0x1d8/0x220 [ 1304.742350][T18960] ? ksys_write+0x1ac/0x250 [ 1304.742368][T18960] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1304.742389][T18960] do_syscall_64+0xcd/0xf80 [ 1304.742405][T18960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.742416][T18960] RIP: 0033:0x7fc10cb8f749 [ 1304.742425][T18960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1304.742436][T18960] RSP: 002b:00007fc10d9c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1304.742446][T18960] RAX: ffffffffffffffda RBX: 00007fc10cde6090 RCX: 00007fc10cb8f749 [ 1304.742453][T18960] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 1304.742458][T18960] RBP: 00007fc10d9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.742464][T18960] R10: 0000000000000c92 R11: 0000000000000246 R12: 0000000000000001 [ 1304.742470][T18960] R13: 00007fc10cde6128 R14: 00007fc10cde6090 R15: 00007ffd9fb238b8 [ 1304.742485][T18960] [ 1305.890087][T18977] FAULT_INJECTION: forcing a failure. [ 1305.890087][T18977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1305.903250][T18977] CPU: 0 UID: 0 PID: 18977 Comm: syz.4.3706 Tainted: G L syzkaller #0 PREEMPT(full) [ 1305.903276][T18977] Tainted: [L]=SOFTLOCKUP [ 1305.903281][T18977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1305.903290][T18977] Call Trace: [ 1305.903296][T18977] [ 1305.903302][T18977] dump_stack_lvl+0x16c/0x1f0 [ 1305.903329][T18977] should_fail_ex+0x512/0x640 [ 1305.903359][T18977] _copy_from_iter+0x2a4/0x16c0 [ 1305.903387][T18977] ? __alloc_skb+0x220/0x410 [ 1305.903402][T18977] ? __alloc_skb+0x35d/0x410 [ 1305.903418][T18977] ? __pfx__copy_from_iter+0x10/0x10 [ 1305.903439][T18977] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1305.903460][T18977] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1305.903496][T18977] netlink_sendmsg+0x820/0xdd0 [ 1305.903521][T18977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1305.903551][T18977] ____sys_sendmsg+0xa5d/0xc30 [ 1305.903574][T18977] ? copy_msghdr_from_user+0x10a/0x160 [ 1305.903591][T18977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1305.903622][T18977] ___sys_sendmsg+0x134/0x1d0 [ 1305.903641][T18977] ? __pfx____sys_sendmsg+0x10/0x10 [ 1305.903686][T18977] __sys_sendmsg+0x16d/0x220 [ 1305.903744][T18977] ? __pfx___sys_sendmsg+0x10/0x10 [ 1305.903782][T18977] do_syscall_64+0xcd/0xf80 [ 1305.903806][T18977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.903822][T18977] RIP: 0033:0x7f834198f749 [ 1305.903836][T18977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1305.903849][T18977] RSP: 002b:00007f8342832038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1305.903860][T18977] RAX: ffffffffffffffda RBX: 00007f8341be5fa0 RCX: 00007f834198f749 [ 1305.903866][T18977] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1305.903873][T18977] RBP: 00007f8342832090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.903879][T18977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.903885][T18977] R13: 00007f8341be6038 R14: 00007f8341be5fa0 R15: 00007fff4d03a718 [ 1305.903900][T18977] [ 1306.221257][T18975] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1306.496749][T18980] FAULT_INJECTION: forcing a failure. [ 1306.496749][T18980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1306.510469][T18980] CPU: 0 UID: 0 PID: 18980 Comm: syz.4.3707 Tainted: G L syzkaller #0 PREEMPT(full) [ 1306.510489][T18980] Tainted: [L]=SOFTLOCKUP [ 1306.510495][T18980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1306.510505][T18980] Call Trace: [ 1306.510511][T18980] [ 1306.510517][T18980] dump_stack_lvl+0x16c/0x1f0 [ 1306.510543][T18980] should_fail_ex+0x512/0x640 [ 1306.510569][T18980] _copy_from_iter+0x2a4/0x16c0 [ 1306.510588][T18980] ? __alloc_skb+0x220/0x410 [ 1306.510598][T18980] ? __alloc_skb+0x35d/0x410 [ 1306.510607][T18980] ? __pfx__copy_from_iter+0x10/0x10 [ 1306.510624][T18980] ? netlink_autobind.isra.0+0x158/0x370 [ 1306.510651][T18980] netlink_sendmsg+0x820/0xdd0 [ 1306.510676][T18980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.510704][T18980] ____sys_sendmsg+0xa5d/0xc30 [ 1306.510722][T18980] ? copy_msghdr_from_user+0x10a/0x160 [ 1306.510733][T18980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1306.510753][T18980] ___sys_sendmsg+0x134/0x1d0 [ 1306.510765][T18980] ? __pfx____sys_sendmsg+0x10/0x10 [ 1306.510807][T18980] __sys_sendmsg+0x16d/0x220 [ 1306.510825][T18980] ? __pfx___sys_sendmsg+0x10/0x10 [ 1306.510857][T18980] do_syscall_64+0xcd/0xf80 [ 1306.510872][T18980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.510883][T18980] RIP: 0033:0x7f834198f749 [ 1306.510892][T18980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1306.510902][T18980] RSP: 002b:00007f8342832038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.510913][T18980] RAX: ffffffffffffffda RBX: 00007f8341be5fa0 RCX: 00007f834198f749 [ 1306.510921][T18980] RDX: 0000000020004080 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1306.510930][T18980] RBP: 00007f8342832090 R08: 0000000000000000 R09: 0000000000000000 [ 1306.510940][T18980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1306.510949][T18980] R13: 00007f8341be6038 R14: 00007f8341be5fa0 R15: 00007fff4d03a718 [ 1306.510971][T18980] [ 1306.982553][T18991] bridge0: port 3(syz_tun) entered blocking state [ 1307.012612][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3710'. [ 1307.087486][ T30] audit: type=1400 audit(1768768229.192:657): avc: denied { name_bind } for pid=18986 comm="syz.4.3710" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1307.087634][T18991] bridge0: port 3(syz_tun) entered disabled state [ 1307.192872][T18991] syz_tun: entered allmulticast mode [ 1307.221017][T18991] syz_tun: entered promiscuous mode [ 1307.475745][T18991] bridge0: port 3(syz_tun) entered blocking state [ 1307.482308][T18991] bridge0: port 3(syz_tun) entered forwarding state [ 1307.571534][T18993] bridge0: port 3(syz_tun) entered disabled state [ 1307.600179][T18993] syz_tun (unregistering): left allmulticast mode [ 1307.609100][T18993] syz_tun (unregistering): left promiscuous mode [ 1307.616983][T18993] bridge0: port 3(syz_tun) entered disabled state [ 1307.881217][T19015] FAULT_INJECTION: forcing a failure. [ 1307.881217][T19015] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.905177][T19015] CPU: 0 UID: 0 PID: 19015 Comm: syz.3.3715 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.905208][T19015] Tainted: [L]=SOFTLOCKUP [ 1307.905214][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1307.905224][T19015] Call Trace: [ 1307.905231][T19015] [ 1307.905238][T19015] dump_stack_lvl+0x16c/0x1f0 [ 1307.905267][T19015] should_fail_ex+0x512/0x640 [ 1307.905293][T19015] ? fs_reclaim_acquire+0xae/0x150 [ 1307.905317][T19015] should_failslab+0xc2/0x120 [ 1307.905340][T19015] __kmalloc_noprof+0xeb/0x910 [ 1307.905367][T19015] ? tomoyo_encode2+0x100/0x3e0 [ 1307.905394][T19015] ? tomoyo_encode2+0x100/0x3e0 [ 1307.905416][T19015] tomoyo_encode2+0x100/0x3e0 [ 1307.905442][T19015] tomoyo_encode+0x29/0x50 [ 1307.905462][T19015] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1307.905494][T19015] tomoyo_path_number_perm+0x245/0x580 [ 1307.905518][T19015] ? tomoyo_path_number_perm+0x237/0x580 [ 1307.905541][T19015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1307.905587][T19015] ? __d_lookup+0x266/0x4a0 [ 1307.905607][T19015] ? current_check_access_path+0x33b/0x460 [ 1307.905628][T19015] ? __pfx_current_check_access_path+0x10/0x10 [ 1307.905647][T19015] ? lookup_dcache+0x66/0x170 [ 1307.905666][T19015] ? lookup_one_qstr_excl+0xb3/0x250 [ 1307.905687][T19015] tomoyo_path_mkdir+0x9b/0xe0 [ 1307.905703][T19015] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 1307.905727][T19015] security_path_mkdir+0x154/0x2f0 [ 1307.905748][T19015] do_mkdirat+0x16c/0x5e0 [ 1307.905774][T19015] ? __pfx_do_mkdirat+0x10/0x10 [ 1307.905800][T19015] ? getname_flags.part.0+0x1c5/0x550 [ 1307.905823][T19015] __x64_sys_mkdirat+0x83/0xb0 [ 1307.905848][T19015] do_syscall_64+0xcd/0xf80 [ 1307.905873][T19015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.905889][T19015] RIP: 0033:0x7f7bbc18f749 [ 1307.905903][T19015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1307.905920][T19015] RSP: 002b:00007f7bbd0bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1307.905937][T19015] RAX: ffffffffffffffda RBX: 00007f7bbc3e5fa0 RCX: 00007f7bbc18f749 [ 1307.905949][T19015] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1307.905959][T19015] RBP: 00007f7bbd0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.905969][T19015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.905980][T19015] R13: 00007f7bbc3e6038 R14: 00007f7bbc3e5fa0 R15: 00007ffc25938608 [ 1307.906006][T19015] [ 1308.121655][T19015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1308.177744][T19013] Invalid ELF header type: 3 != 1 [ 1308.185729][ T9650] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1308.345529][ T9650] usb 1-1: Using ep0 maxpacket: 32 [ 1308.352087][ T9650] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1308.361326][ T9650] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.372983][ T9650] usb 1-1: config 0 descriptor?? [ 1308.519400][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1308.601011][ T9650] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1308.634203][ T30] audit: type=1400 audit(1768768230.633:658): avc: denied { create } for pid=19022 comm="syz.1.3718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1308.640976][ T9650] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1308.741053][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1308.753925][ T9650] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1308.767076][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.782276][ T9650] usb 1-1: media controller created [ 1308.807585][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.820046][T19010] dib0700: tx buffer length is larger than 4. Not supported. [ 1308.835900][ T9650] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1308.844816][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1308.856771][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.888258][ T9] usb 4-1: config 0 descriptor?? [ 1308.938335][ T9650] DVB: Unable to find symbol dib7000p_attach() [ 1308.949419][ T9650] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1309.029682][ T9650] rc_core: IR keymap rc-dib0700-rc5 not found [ 1309.036361][ T9650] Registered IR keymap rc-empty [ 1309.042396][ T9650] dvb-usb: could not initialize remote control. [ 1309.048918][ T9650] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1309.072940][ T9650] usb 1-1: USB disconnect, device number 68 [ 1309.153391][ T9650] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1309.559050][ T9] savu 0003:1E7D:2D5A.002A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1309.724416][ T30] audit: type=1400 audit(1768768231.652:659): avc: denied { name_bind } for pid=19038 comm="syz.1.3721" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1311.147390][ T5889] usb 4-1: USB disconnect, device number 70 [ 1311.541988][ T5889] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1311.572470][T19053] netlink: 'syz.4.3725': attribute type 4 has an invalid length. [ 1311.624515][T19053] netlink: 'syz.4.3725': attribute type 1 has an invalid length. [ 1311.633340][T19053] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1311.927859][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 1312.133126][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.151631][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1312.162943][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1312.173102][ T5889] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1312.182885][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1312.331655][ T5889] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1312.351151][ T5889] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1312.370790][ T5889] usb 2-1: Manufacturer: syz [ 1312.388426][ T5889] usb 2-1: config 0 descriptor?? [ 1313.042434][T19060] Invalid ELF header type: 3 != 1 [ 1313.049169][ T5889] rc_core: IR keymap rc-hauppauge not found [ 1313.055126][ T5889] Registered IR keymap rc-empty [ 1313.060466][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.080995][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.103052][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1313.157461][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 1313.216086][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.263002][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.284289][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.306995][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.332462][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.391231][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.425318][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.669254][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.757909][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.808694][T19048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.808721][ T5889] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1313.845432][ T5889] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1313.872121][ T5889] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1313.890320][T19048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.975507][T19048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.018205][T19048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.042675][T19074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3731'. [ 1314.053306][T17265] usb 2-1: USB disconnect, device number 52 [ 1314.299375][T19084] dlm: Unknown command passed to DLM device : 142 [ 1314.299375][T19084] [ 1314.310766][T19084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1315.103304][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1317.331169][T19114] Invalid ELF header type: 3 != 1 [ 1318.131662][T19117] FAULT_INJECTION: forcing a failure. [ 1318.131662][T19117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.169653][T19117] CPU: 0 UID: 0 PID: 19117 Comm: syz.3.3741 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.169683][T19117] Tainted: [L]=SOFTLOCKUP [ 1318.169689][T19117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1318.169699][T19117] Call Trace: [ 1318.169705][T19117] [ 1318.169711][T19117] dump_stack_lvl+0x16c/0x1f0 [ 1318.169739][T19117] should_fail_ex+0x512/0x640 [ 1318.169768][T19117] _copy_from_user+0x2e/0xd0 [ 1318.169794][T19117] copy_msghdr_from_user+0x98/0x160 [ 1318.169814][T19117] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1318.169844][T19117] ___sys_sendmsg+0xfe/0x1d0 [ 1318.169864][T19117] ? __pfx____sys_sendmsg+0x10/0x10 [ 1318.169913][T19117] __sys_sendmsg+0x16d/0x220 [ 1318.169932][T19117] ? __pfx___sys_sendmsg+0x10/0x10 [ 1318.169967][T19117] do_syscall_64+0xcd/0xf80 [ 1318.170000][T19117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.170017][T19117] RIP: 0033:0x7f7bbc18f749 [ 1318.170031][T19117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1318.170046][T19117] RSP: 002b:00007f7bbd0bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1318.170062][T19117] RAX: ffffffffffffffda RBX: 00007f7bbc3e5fa0 RCX: 00007f7bbc18f749 [ 1318.170073][T19117] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1318.170083][T19117] RBP: 00007f7bbd0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.170092][T19117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.170102][T19117] R13: 00007f7bbc3e6038 R14: 00007f7bbc3e5fa0 R15: 00007ffc25938608 [ 1318.170126][T19117] [ 1318.771723][T19123] FAULT_INJECTION: forcing a failure. [ 1318.771723][T19123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.791878][T19123] CPU: 0 UID: 0 PID: 19123 Comm: syz.3.3742 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.791905][T19123] Tainted: [L]=SOFTLOCKUP [ 1318.791911][T19123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1318.791922][T19123] Call Trace: [ 1318.791928][T19123] [ 1318.791935][T19123] dump_stack_lvl+0x16c/0x1f0 [ 1318.791961][T19123] should_fail_ex+0x512/0x640 [ 1318.791990][T19123] _copy_from_user+0x2e/0xd0 [ 1318.792014][T19123] memdup_user+0x6b/0xe0 [ 1318.792034][T19123] strndup_user+0x78/0xe0 [ 1318.792052][T19123] __x64_sys_mount+0x17f/0x310 [ 1318.792069][T19123] ? __pfx___x64_sys_mount+0x10/0x10 [ 1318.792094][T19123] do_syscall_64+0xcd/0xf80 [ 1318.792119][T19123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.792137][T19123] RIP: 0033:0x7f7bbc18f749 [ 1318.792150][T19123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1318.792166][T19123] RSP: 002b:00007f7bbd09c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1318.792184][T19123] RAX: ffffffffffffffda RBX: 00007f7bbc3e6090 RCX: 00007f7bbc18f749 [ 1318.792195][T19123] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000180 [ 1318.792209][T19123] RBP: 00007f7bbd09c090 R08: 00002000000001c0 R09: 0000000000000000 [ 1318.792220][T19123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.792230][T19123] R13: 00007f7bbc3e6128 R14: 00007f7bbc3e6090 R15: 00007ffc25938608 [ 1318.792254][T19123] [ 1319.331409][T19126] ipt_ECN: cannot use operation on non-tcp rule [ 1319.702557][ T30] audit: type=1400 audit(1768768240.998:660): avc: denied { getopt } for pid=19127 comm="syz.4.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1319.704454][T19128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.767467][T19128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.136117][ T790] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1320.433340][ T7823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.443658][ T790] usb 4-1: Using ep0 maxpacket: 32 [ 1320.443682][ T7823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.526613][T19146] overlayfs: missing 'lowerdir' [ 1320.728098][ T790] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1320.745674][ T5889] IPVS: starting estimator thread 0... [ 1320.864150][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.873931][T19147] IPVS: using max 50 ests per chain, 120000 per kthread [ 1320.918586][ T790] usb 4-1: Product: syz [ 1320.933028][ T790] usb 4-1: Manufacturer: syz [ 1320.966511][ T790] usb 4-1: SerialNumber: syz [ 1321.051695][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 1321.190542][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 1321.213175][ T790] usb 4-1: config 0 descriptor?? [ 1321.231016][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 1321.273514][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 1321.459385][ T790] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 071 [ 1321.727997][T19162] tipc: Enabling of bearer rejected, already enabled [ 1322.441651][T19167] FAULT_INJECTION: forcing a failure. [ 1322.441651][T19167] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.454875][T19167] CPU: 0 UID: 0 PID: 19167 Comm: syz.1.3756 Tainted: G L syzkaller #0 PREEMPT(full) [ 1322.454902][T19167] Tainted: [L]=SOFTLOCKUP [ 1322.454908][T19167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1322.454918][T19167] Call Trace: [ 1322.454923][T19167] [ 1322.454929][T19167] dump_stack_lvl+0x16c/0x1f0 [ 1322.454953][T19167] should_fail_ex+0x512/0x640 [ 1322.454970][T19167] ? fs_reclaim_acquire+0xae/0x150 [ 1322.454987][T19167] should_failslab+0xc2/0x120 [ 1322.455008][T19167] __kmalloc_noprof+0xeb/0x910 [ 1322.455033][T19167] ? tomoyo_encode2+0x100/0x3e0 [ 1322.455058][T19167] ? tomoyo_encode2+0x100/0x3e0 [ 1322.455075][T19167] tomoyo_encode2+0x100/0x3e0 [ 1322.455092][T19167] tomoyo_encode+0x29/0x50 [ 1322.455105][T19167] tomoyo_mount_acl+0x144/0x850 [ 1322.455119][T19167] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1322.455134][T19167] ? kernel_text_address+0x8d/0x100 [ 1322.455156][T19167] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1322.455175][T19167] ? arch_stack_walk+0xa6/0x100 [ 1322.455219][T19167] ? tomoyo_domain+0xba/0x150 [ 1322.455228][T19167] ? tomoyo_profile+0x47/0x60 [ 1322.455239][T19167] tomoyo_mount_permission+0x16d/0x420 [ 1322.455252][T19167] ? tomoyo_mount_permission+0x14f/0x420 [ 1322.455267][T19167] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1322.455297][T19167] security_sb_mount+0x9b/0x260 [ 1322.455352][T19167] path_mount+0x158/0x23a0 [ 1322.455406][T19167] ? rcu_is_watching+0x12/0xc0 [ 1322.455421][T19167] ? __pfx_path_mount+0x10/0x10 [ 1322.455446][T19167] ? __x64_sys_mount+0x293/0x310 [ 1322.455460][T19167] __x64_sys_mount+0x293/0x310 [ 1322.455475][T19167] ? __pfx___x64_sys_mount+0x10/0x10 [ 1322.455498][T19167] do_syscall_64+0xcd/0xf80 [ 1322.455522][T19167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.455542][T19167] RIP: 0033:0x7ffb63d8f749 [ 1322.455555][T19167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1322.455565][T19167] RSP: 002b:00007ffb64c28038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1322.455575][T19167] RAX: ffffffffffffffda RBX: 00007ffb63fe6090 RCX: 00007ffb63d8f749 [ 1322.455582][T19167] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000000 [ 1322.455588][T19167] RBP: 00007ffb64c28090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.455596][T19167] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1322.455605][T19167] R13: 00007ffb63fe6128 R14: 00007ffb63fe6090 R15: 00007ffdef558ab8 [ 1322.455628][T19167] [ 1323.579597][ T5896] usb 4-1: USB disconnect, device number 71 [ 1325.895597][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3764'. [ 1325.949278][T19196] FAULT_INJECTION: forcing a failure. [ 1325.949278][T19196] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1325.979601][T19196] CPU: 0 UID: 0 PID: 19196 Comm: syz.1.3765 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.979629][T19196] Tainted: [L]=SOFTLOCKUP [ 1325.979635][T19196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1325.979644][T19196] Call Trace: [ 1325.979650][T19196] [ 1325.979656][T19196] dump_stack_lvl+0x16c/0x1f0 [ 1325.979685][T19196] should_fail_ex+0x512/0x640 [ 1325.979713][T19196] should_fail_alloc_page+0xe7/0x130 [ 1325.979735][T19196] prepare_alloc_pages+0x401/0x670 [ 1325.979757][T19196] ? rcu_is_watching+0x12/0xc0 [ 1325.979776][T19196] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1325.979794][T19196] ? avc_has_extended_perms+0x33a/0x1090 [ 1325.979816][T19196] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1325.979839][T19196] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1325.979859][T19196] ? __lock_acquire+0x436/0x2890 [ 1325.979881][T19196] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1325.979906][T19196] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1325.979926][T19196] ? policy_nodemask+0xea/0x4e0 [ 1325.979950][T19196] alloc_pages_mpol+0x1fb/0x550 [ 1325.979974][T19196] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1325.979998][T19196] ? rcu_is_watching+0x12/0xc0 [ 1325.980016][T19196] alloc_pages_noprof+0x131/0x390 [ 1325.980037][T19196] get_zeroed_page_noprof+0x18/0xb0 [ 1325.980058][T19196] mon_alloc_buff+0xce/0x1b0 [ 1325.980083][T19196] mon_bin_ioctl+0x48e/0xcd0 [ 1325.980105][T19196] ? hook_file_ioctl_common+0x144/0x410 [ 1325.980122][T19196] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 1325.980150][T19196] ? selinux_file_ioctl+0x180/0x270 [ 1325.980171][T19196] ? selinux_file_ioctl+0xb4/0x270 [ 1325.980193][T19196] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 1325.980216][T19196] __x64_sys_ioctl+0x18e/0x210 [ 1325.980238][T19196] do_syscall_64+0xcd/0xf80 [ 1325.980263][T19196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.980285][T19196] RIP: 0033:0x7ffb63d8f749 [ 1325.980300][T19196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1325.980315][T19196] RSP: 002b:00007ffb64c49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1325.980331][T19196] RAX: ffffffffffffffda RBX: 00007ffb63fe5fa0 RCX: 00007ffb63d8f749 [ 1325.980343][T19196] RDX: 00000000008c397e RSI: 0000000000009204 RDI: 0000000000000003 [ 1325.980353][T19196] RBP: 00007ffb64c49090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.980362][T19196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.980371][T19196] R13: 00007ffb63fe6038 R14: 00007ffb63fe5fa0 R15: 00007ffdef558ab8 [ 1325.980395][T19196] [ 1326.559725][T19202] FAULT_INJECTION: forcing a failure. [ 1326.559725][T19202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.574772][T19202] CPU: 0 UID: 0 PID: 19202 Comm: syz.1.3767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.574799][T19202] Tainted: [L]=SOFTLOCKUP [ 1326.574804][T19202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1326.574814][T19202] Call Trace: [ 1326.574820][T19202] [ 1326.574827][T19202] dump_stack_lvl+0x16c/0x1f0 [ 1326.574854][T19202] should_fail_ex+0x512/0x640 [ 1326.574882][T19202] _copy_to_user+0x32/0xd0 [ 1326.574908][T19202] simple_read_from_buffer+0xcb/0x170 [ 1326.574931][T19202] proc_fail_nth_read+0x197/0x240 [ 1326.574949][T19202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.574966][T19202] ? rw_verify_area+0xcf/0x6c0 [ 1326.574983][T19202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.574999][T19202] vfs_read+0x1e4/0xcf0 [ 1326.575019][T19202] ? __pfx___mutex_lock+0x10/0x10 [ 1326.575043][T19202] ? __pfx_vfs_read+0x10/0x10 [ 1326.575068][T19202] ? __fget_files+0x20e/0x3c0 [ 1326.575096][T19202] ksys_read+0x12a/0x250 [ 1326.575113][T19202] ? __pfx_ksys_read+0x10/0x10 [ 1326.575129][T19202] ? v4l2_ioctl+0x1c5/0x250 [ 1326.575146][T19202] ? fput+0x70/0xf0 [ 1326.575162][T19202] do_syscall_64+0xcd/0xf80 [ 1326.575183][T19202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.575198][T19202] RIP: 0033:0x7ffb63d8e15c [ 1326.575211][T19202] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1326.575225][T19202] RSP: 002b:00007ffb64c49030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1326.575240][T19202] RAX: ffffffffffffffda RBX: 00007ffb63fe5fa0 RCX: 00007ffb63d8e15c [ 1326.575250][T19202] RDX: 000000000000000f RSI: 00007ffb64c490a0 RDI: 0000000000000004 [ 1326.575259][T19202] RBP: 00007ffb64c49090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.575268][T19202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.575276][T19202] R13: 00007ffb63fe6038 R14: 00007ffb63fe5fa0 R15: 00007ffdef558ab8 [ 1326.575299][T19202] [ 1326.886763][T19194] team0 (unregistering): Port device team_slave_0 removed [ 1326.909441][T19194] team0 (unregistering): Port device team_slave_1 removed [ 1327.366777][ T30] audit: type=1400 audit(1768768248.117:661): avc: denied { mount } for pid=19203 comm="syz.1.3768" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1327.490564][T17265] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1327.621297][ T30] audit: type=1400 audit(1768768248.126:662): avc: denied { search } for pid=19203 comm="syz.1.3768" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1327.715234][ T30] audit: type=1400 audit(1768768248.126:663): avc: denied { search } for pid=19203 comm="syz.1.3768" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1327.745202][T19213] bridge1: entered promiscuous mode [ 1327.752590][T19213] bridge1: entered allmulticast mode [ 1327.760241][ T30] audit: type=1400 audit(1768768248.126:664): avc: denied { read open } for pid=19203 comm="syz.1.3768" path="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1327.800777][T17265] usb 1-1: Using ep0 maxpacket: 32 [ 1327.982836][T17265] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1328.001888][T17265] usb 1-1: config 0 has no interface number 0 [ 1328.356049][T17265] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1328.376199][T17265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.417319][T17265] usb 1-1: Product: syz [ 1328.422864][T17265] usb 1-1: Manufacturer: syz [ 1328.431534][T17265] usb 1-1: SerialNumber: syz [ 1328.472173][T17265] usb 1-1: config 0 descriptor?? [ 1328.487704][T17265] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1328.771340][T19208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.829886][T19208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.541308][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3775'. [ 1329.588224][ T5933] IPVS: starting estimator thread 0... [ 1329.714121][T19236] IPVS: using max 49 ests per chain, 117600 per kthread [ 1329.979768][T19241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.990558][T19241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.015123][ T30] audit: type=1400 audit(1768768250.643:665): avc: denied { write } for pid=19239 comm="syz.4.3776" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1330.054401][ T5933] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1330.157000][T19247] netlink: 'syz.2.3778': attribute type 10 has an invalid length. [ 1330.216911][ T5933] usb 4-1: device descriptor read/64, error -71 [ 1330.237632][ C1] hrtimer: interrupt took 40357 ns [ 1330.541794][T18068] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1330.549541][T17265] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1330.557093][ T5933] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1330.564944][T17265] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1330.577748][T17265] usb 1-1: USB disconnect, device number 69 [ 1330.718765][ T5933] usb 4-1: device descriptor read/64, error -71 [ 1330.741374][T18068] usb 2-1: config index 0 descriptor too short (expected 53284, got 36) [ 1330.749945][T18068] usb 2-1: config 171 has too many interfaces: 88, using maximum allowed: 32 [ 1330.753945][T19255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.758826][T18068] usb 2-1: config 171 has an invalid descriptor of length 157, skipping remainder of the config [ 1330.781642][T18068] usb 2-1: config 171 has 0 interfaces, different from the descriptor's value: 88 [ 1330.781861][T19255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.791037][T18068] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 1330.809363][T18068] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.847356][ T5933] usb usb4-port1: attempt power cycle [ 1331.052801][T18068] usb 2-1: string descriptor 0 read error: -71 [ 1331.072664][T18068] usb 2-1: USB disconnect, device number 53 [ 1331.295937][ T5933] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1331.735524][ T5933] usb 4-1: device descriptor read/8, error -71 [ 1332.013772][ T5933] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1332.209714][ T5933] usb 4-1: device descriptor read/8, error -71 [ 1332.291570][T19279] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1332.306567][T19279] bond1: option arp_ip_target: invalid value (0) [ 1332.327538][T19279] bond1 (unregistering): Released all slaves [ 1332.365800][ T5933] usb usb4-port1: unable to enumerate USB device [ 1332.376655][T19286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.397440][T19286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.410718][T19284] tipc: Enabling of bearer rejected, already enabled [ 1333.628453][T19296] Invalid ELF header type: 3 != 1 [ 1333.829967][T19299] FAULT_INJECTION: forcing a failure. [ 1333.829967][T19299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1333.844178][T19299] CPU: 0 UID: 0 PID: 19299 Comm: syz.0.3794 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.844205][T19299] Tainted: [L]=SOFTLOCKUP [ 1333.844211][T19299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1333.844222][T19299] Call Trace: [ 1333.844228][T19299] [ 1333.844235][T19299] dump_stack_lvl+0x16c/0x1f0 [ 1333.844262][T19299] should_fail_ex+0x512/0x640 [ 1333.844294][T19299] _copy_to_user+0x32/0xd0 [ 1333.844322][T19299] simple_read_from_buffer+0xcb/0x170 [ 1333.844348][T19299] proc_fail_nth_read+0x197/0x240 [ 1333.844367][T19299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1333.844387][T19299] ? rw_verify_area+0xcf/0x6c0 [ 1333.844405][T19299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1333.844422][T19299] vfs_read+0x1e4/0xcf0 [ 1333.844444][T19299] ? irqentry_exit+0x1dd/0x8c0 [ 1333.844467][T19299] ? lockdep_hardirqs_on+0x7c/0x110 [ 1333.844494][T19299] ? __pfx_vfs_read+0x10/0x10 [ 1333.844513][T19299] ? rcu_is_watching+0x12/0xc0 [ 1333.844540][T19299] ? ksys_read+0x7e/0x250 [ 1333.844558][T19299] ? ksys_read+0x8c/0x250 [ 1333.844580][T19299] ksys_read+0x12a/0x250 [ 1333.844600][T19299] ? __pfx_ksys_read+0x10/0x10 [ 1333.844628][T19299] do_syscall_64+0xcd/0xf80 [ 1333.844653][T19299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.844671][T19299] RIP: 0033:0x7fc10cb8e15c [ 1333.844685][T19299] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1333.844701][T19299] RSP: 002b:00007fc10d9e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1333.844718][T19299] RAX: ffffffffffffffda RBX: 00007fc10cde5fa0 RCX: 00007fc10cb8e15c [ 1333.844729][T19299] RDX: 000000000000000f RSI: 00007fc10d9e30a0 RDI: 0000000000000004 [ 1333.844739][T19299] RBP: 00007fc10d9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.844749][T19299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.844759][T19299] R13: 00007fc10cde6038 R14: 00007fc10cde5fa0 R15: 00007ffd9fb238b8 [ 1333.844784][T19299] [ 1334.245028][T19306] FAT-fs (loop1): unable to read boot sector [ 1334.415442][T19308] FAT-fs (loop5): unable to read boot sector [ 1335.386260][T19318] netlink: 'syz.1.3799': attribute type 62 has an invalid length. [ 1335.691703][T19325] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3800'. [ 1338.000152][T19170] udevd[19170]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1338.679274][T19361] openvswitch: netlink: Key type 31 is not supported [ 1340.245800][ T30] audit: type=1400 audit(1768768260.213:666): avc: denied { read } for pid=19372 comm="syz.3.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1340.334107][ T30] audit: type=1400 audit(1768768260.278:667): avc: denied { getopt } for pid=19372 comm="syz.3.3813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1340.571676][ T30] audit: type=1400 audit(1768768260.512:668): avc: denied { read } for pid=19380 comm="syz.3.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1340.981408][T19394] FAULT_INJECTION: forcing a failure. [ 1340.981408][T19394] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.024328][T19394] CPU: 0 UID: 0 PID: 19394 Comm: syz.0.3822 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.024355][T19394] Tainted: [L]=SOFTLOCKUP [ 1341.024359][T19394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1341.024365][T19394] Call Trace: [ 1341.024370][T19394] [ 1341.024375][T19394] dump_stack_lvl+0x16c/0x1f0 [ 1341.024395][T19394] should_fail_ex+0x512/0x640 [ 1341.024417][T19394] ? __kmalloc_noprof+0xca/0x910 [ 1341.024444][T19394] should_failslab+0xc2/0x120 [ 1341.024465][T19394] __kmalloc_noprof+0xeb/0x910 [ 1341.024487][T19394] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 1341.024507][T19394] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 1341.024523][T19394] vb2_core_allocated_buffers_storage+0x184/0x220 [ 1341.024540][T19394] vb2_core_create_bufs+0x2bf/0xab0 [ 1341.024565][T19394] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1341.024594][T19394] ? lock_acquire+0x179/0x330 [ 1341.024618][T19394] vb2_create_bufs+0x5e8/0x840 [ 1341.024638][T19394] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1341.024655][T19394] ? __pfx___mutex_lock+0x10/0x10 [ 1341.024672][T19394] vb2_ioctl_create_bufs+0x244/0x3e0 [ 1341.024687][T19394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1341.024706][T19394] vidioc_create_bufs+0x7d/0xf0 [ 1341.024729][T19394] v4l_create_bufs+0x151/0x260 [ 1341.024748][T19394] __video_do_ioctl+0xb77/0xf00 [ 1341.024769][T19394] ? __might_fault+0xe3/0x190 [ 1341.024781][T19394] ? __pfx___video_do_ioctl+0x10/0x10 [ 1341.024798][T19394] video_usercopy+0x4d0/0x16c0 [ 1341.024812][T19394] ? __pfx___video_do_ioctl+0x10/0x10 [ 1341.024824][T19394] ? selinux_kernel_read_file+0x100/0x120 [ 1341.024842][T19394] ? __pfx_video_usercopy+0x10/0x10 [ 1341.024878][T19394] v4l2_ioctl+0x1bd/0x250 [ 1341.024896][T19394] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1341.024914][T19394] __x64_sys_ioctl+0x18e/0x210 [ 1341.024929][T19394] do_syscall_64+0xcd/0xf80 [ 1341.024944][T19394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.024955][T19394] RIP: 0033:0x7fc10cb8f749 [ 1341.024965][T19394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1341.024975][T19394] RSP: 002b:00007fc10d9e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.024991][T19394] RAX: ffffffffffffffda RBX: 00007fc10cde5fa0 RCX: 00007fc10cb8f749 [ 1341.025001][T19394] RDX: 0000200000000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 1341.025011][T19394] RBP: 00007fc10d9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.025020][T19394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.025028][T19394] R13: 00007fc10cde6038 R14: 00007fc10cde5fa0 R15: 00007ffd9fb238b8 [ 1341.025052][T19394] [ 1341.732079][T19396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.792253][T19396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.584660][ T30] audit: type=1804 audit(1768768263.337:669): pid=19420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3827" name="/newroot/144/file0" dev="tmpfs" ino=784 res=1 errno=0 [ 1344.041847][T19431] FAULT_INJECTION: forcing a failure. [ 1344.041847][T19431] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.077137][T19431] CPU: 1 UID: 0 PID: 19431 Comm: syz.2.3830 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.077158][T19431] Tainted: [L]=SOFTLOCKUP [ 1344.077162][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1344.077168][T19431] Call Trace: [ 1344.077173][T19431] [ 1344.077183][T19431] dump_stack_lvl+0x16c/0x1f0 [ 1344.077207][T19431] should_fail_ex+0x512/0x640 [ 1344.077224][T19431] ? __kmalloc_noprof+0xca/0x910 [ 1344.077242][T19431] should_failslab+0xc2/0x120 [ 1344.077257][T19431] __kmalloc_noprof+0xeb/0x910 [ 1344.077274][T19431] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1344.077295][T19431] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1344.077311][T19431] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1344.077330][T19431] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1344.077346][T19431] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1344.077367][T19431] ? bpf_lsm_capable+0x9/0x10 [ 1344.077379][T19431] ? security_capable+0x7e/0x260 [ 1344.077392][T19431] ? ns_capable+0xd7/0x110 [ 1344.077408][T19431] genl_rcv_msg+0x55c/0x800 [ 1344.077425][T19431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1344.077440][T19431] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1344.077452][T19431] ? __pfx_nl80211_connect+0x10/0x10 [ 1344.077461][T19431] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1344.077479][T19431] netlink_rcv_skb+0x158/0x420 [ 1344.077492][T19431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1344.077508][T19431] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1344.077527][T19431] ? netlink_deliver_tap+0x1ae/0xd30 [ 1344.077542][T19431] genl_rcv+0x28/0x40 [ 1344.077555][T19431] netlink_unicast+0x5aa/0x870 [ 1344.077570][T19431] ? __pfx_netlink_unicast+0x10/0x10 [ 1344.077589][T19431] netlink_sendmsg+0x8c8/0xdd0 [ 1344.077605][T19431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1344.077623][T19431] ____sys_sendmsg+0xa5d/0xc30 [ 1344.077639][T19431] ? copy_msghdr_from_user+0x10a/0x160 [ 1344.077650][T19431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1344.077671][T19431] ___sys_sendmsg+0x134/0x1d0 [ 1344.077683][T19431] ? __pfx____sys_sendmsg+0x10/0x10 [ 1344.077711][T19431] __sys_sendmsg+0x16d/0x220 [ 1344.077723][T19431] ? __pfx___sys_sendmsg+0x10/0x10 [ 1344.077743][T19431] do_syscall_64+0xcd/0xf80 [ 1344.077759][T19431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.077769][T19431] RIP: 0033:0x7fe91418f749 [ 1344.077779][T19431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1344.077788][T19431] RSP: 002b:00007fe9150c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1344.077798][T19431] RAX: ffffffffffffffda RBX: 00007fe9143e5fa0 RCX: 00007fe91418f749 [ 1344.077805][T19431] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1344.077811][T19431] RBP: 00007fe9150c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.077817][T19431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.077823][T19431] R13: 00007fe9143e6038 R14: 00007fe9143e5fa0 R15: 00007ffe56cd6cb8 [ 1344.077836][T19431] [ 1346.305716][ T9650] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1346.528604][ T9650] usb 4-1: Using ep0 maxpacket: 8 [ 1346.541744][T19447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.553228][ T9650] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1346.582006][ T9650] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1346.591774][ T9650] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1346.614490][T19447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.641760][ T9650] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1346.900810][ T9650] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1347.557676][ T9650] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1347.898546][ T9650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.138209][ T9650] usb 4-1: usb_control_msg returned -32 [ 1348.174958][ T9650] usbtmc 4-1:16.0: can't read capabilities [ 1348.570551][ T9650] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1348.623505][T19458] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 1348.688315][ T5925] usb 4-1: USB disconnect, device number 76 [ 1348.754281][ T9650] usb 1-1: Using ep0 maxpacket: 32 [ 1348.913710][ T9650] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1348.936186][ T9650] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.530478][ T9650] usb 1-1: config 0 descriptor?? [ 1349.792332][ T9650] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1349.852223][ T9650] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1349.872753][ T9650] dib0700: firmware download failed at 7 with -22 [ 1350.165079][ T9] usb 1-1: USB disconnect, device number 70 [ 1350.794901][ T9650] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1350.940105][T19479] syzkaller0: entered promiscuous mode [ 1350.961373][T19479] syzkaller0: entered allmulticast mode [ 1350.997000][ T9650] usb 4-1: Using ep0 maxpacket: 32 [ 1351.008692][ T9650] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1351.016947][ T9650] usb 4-1: config 0 has no interface number 0 [ 1351.037568][ T9650] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1351.063549][ T9650] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1351.084533][ T9650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.086831][T19479] FAULT_INJECTION: forcing a failure. [ 1351.086831][T19479] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.092570][ T9650] usb 4-1: Product: syz [ 1351.138423][ T9650] usb 4-1: Manufacturer: syz [ 1351.143042][ T9650] usb 4-1: SerialNumber: syz [ 1351.160999][T19479] CPU: 1 UID: 0 PID: 19479 Comm: syz.0.3845 Tainted: G L syzkaller #0 PREEMPT(full) [ 1351.161027][T19479] Tainted: [L]=SOFTLOCKUP [ 1351.161034][T19479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1351.161046][T19479] Call Trace: [ 1351.161052][T19479] [ 1351.161059][T19479] dump_stack_lvl+0x16c/0x1f0 [ 1351.161087][T19479] should_fail_ex+0x512/0x640 [ 1351.161112][T19479] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1351.161131][T19479] should_failslab+0xc2/0x120 [ 1351.161152][T19479] kmem_cache_alloc_noprof+0x83/0x770 [ 1351.161168][T19479] ? skb_clone+0x190/0x3f0 [ 1351.161190][T19479] ? skb_clone+0x190/0x3f0 [ 1351.161205][T19479] skb_clone+0x190/0x3f0 [ 1351.161223][T19479] netlink_deliver_tap+0xabd/0xd30 [ 1351.161248][T19479] netlink_unicast+0x64c/0x870 [ 1351.161272][T19479] ? __pfx_netlink_unicast+0x10/0x10 [ 1351.161307][T19479] netlink_sendmsg+0x8c8/0xdd0 [ 1351.161330][T19479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1351.161359][T19479] ____sys_sendmsg+0xa5d/0xc30 [ 1351.161383][T19479] ? copy_msghdr_from_user+0x10a/0x160 [ 1351.161402][T19479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1351.161437][T19479] ___sys_sendmsg+0x134/0x1d0 [ 1351.161457][T19479] ? __pfx____sys_sendmsg+0x10/0x10 [ 1351.161507][T19479] __sys_sendmsg+0x16d/0x220 [ 1351.161527][T19479] ? __pfx___sys_sendmsg+0x10/0x10 [ 1351.161561][T19479] do_syscall_64+0xcd/0xf80 [ 1351.161586][T19479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.161602][T19479] RIP: 0033:0x7fc10cb8f749 [ 1351.161617][T19479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1351.161631][T19479] RSP: 002b:00007fc10d9e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1351.161648][T19479] RAX: ffffffffffffffda RBX: 00007fc10cde5fa0 RCX: 00007fc10cb8f749 [ 1351.161659][T19479] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1351.161668][T19479] RBP: 00007fc10d9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.161677][T19479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1351.161686][T19479] R13: 00007fc10cde6038 R14: 00007fc10cde5fa0 R15: 00007ffd9fb238b8 [ 1351.161709][T19479] [ 1351.162057][ T9650] usb 4-1: config 0 descriptor?? [ 1351.178567][T19479] tipc: Enabled bearer , priority 0 [ 1351.404938][T19478] tipc: Resetting bearer [ 1351.422798][T19478] tipc: Disabling bearer [ 1351.783020][ T9650] smsc75xx v1.0.0 [ 1354.278529][T16432] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1354.459096][T16432] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1354.669799][T16432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.691338][T16432] usb 2-1: Product: syz [ 1354.702393][T16432] usb 2-1: Manufacturer: syz [ 1354.707434][T16432] usb 2-1: SerialNumber: syz [ 1354.736139][T16432] usb 2-1: config 0 descriptor?? [ 1354.799999][T16432] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1355.123178][T19515] netlink: 'syz.1.3851': attribute type 1 has an invalid length. [ 1355.348873][T16432] gspca_sunplus: reg_r err -110 [ 1356.745314][ T9650] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1357.095926][ T9650] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1357.144457][ T9650] usb 4-1: USB disconnect, device number 77 [ 1357.873385][T16543] usb 2-1: USB disconnect, device number 54 [ 1357.997550][T19538] serio: Serial port ttyS3 [ 1358.449431][T19546] FAULT_INJECTION: forcing a failure. [ 1358.449431][T19546] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.450137][T19545] FAULT_INJECTION: forcing a failure. [ 1358.450137][T19545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.479652][T19546] CPU: 0 UID: 0 PID: 19546 Comm: syz.4.3863 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.479682][T19546] Tainted: [L]=SOFTLOCKUP [ 1358.479689][T19546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1358.479699][T19546] Call Trace: [ 1358.479704][T19546] [ 1358.479711][T19546] dump_stack_lvl+0x16c/0x1f0 [ 1358.479739][T19546] should_fail_ex+0x512/0x640 [ 1358.479764][T19546] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1358.479785][T19546] should_failslab+0xc2/0x120 [ 1358.479808][T19546] kmem_cache_alloc_noprof+0x83/0x770 [ 1358.479826][T19546] ? skb_clone+0x190/0x3f0 [ 1358.479849][T19546] ? skb_clone+0x190/0x3f0 [ 1358.479865][T19546] skb_clone+0x190/0x3f0 [ 1358.479884][T19546] netlink_deliver_tap+0xabd/0xd30 [ 1358.479911][T19546] netlink_unicast+0x64c/0x870 [ 1358.479937][T19546] ? __pfx_netlink_unicast+0x10/0x10 [ 1358.479968][T19546] netlink_sendmsg+0x8c8/0xdd0 [ 1358.479995][T19546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1358.480026][T19546] ____sys_sendmsg+0xa5d/0xc30 [ 1358.480055][T19546] ? copy_msghdr_from_user+0x10a/0x160 [ 1358.480073][T19546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1358.480108][T19546] ___sys_sendmsg+0x134/0x1d0 [ 1358.480127][T19546] ? __pfx____sys_sendmsg+0x10/0x10 [ 1358.480177][T19546] __sys_sendmsg+0x16d/0x220 [ 1358.480197][T19546] ? __pfx___sys_sendmsg+0x10/0x10 [ 1358.480230][T19546] do_syscall_64+0xcd/0xf80 [ 1358.480255][T19546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.480272][T19546] RIP: 0033:0x7f834198f749 [ 1358.480286][T19546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.480302][T19546] RSP: 002b:00007f8342832038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.480319][T19546] RAX: ffffffffffffffda RBX: 00007f8341be5fa0 RCX: 00007f834198f749 [ 1358.480329][T19546] RDX: 000000000000c800 RSI: 0000200000000a00 RDI: 0000000000000003 [ 1358.480339][T19546] RBP: 00007f8342832090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.480349][T19546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.480359][T19546] R13: 00007f8341be6038 R14: 00007f8341be5fa0 R15: 00007fff4d03a718 [ 1358.480383][T19546] [ 1358.487897][T19545] CPU: 1 UID: 0 PID: 19545 Comm: syz.1.3861 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.487926][T19545] Tainted: [L]=SOFTLOCKUP [ 1358.487932][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1358.487942][T19545] Call Trace: [ 1358.487948][T19545] [ 1358.487955][T19545] dump_stack_lvl+0x16c/0x1f0 [ 1358.487983][T19545] should_fail_ex+0x512/0x640 [ 1358.488017][T19545] _copy_from_user+0x2e/0xd0 [ 1358.488043][T19545] copy_msghdr_from_user+0x98/0x160 [ 1358.488062][T19545] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1358.488094][T19545] ___sys_sendmsg+0xfe/0x1d0 [ 1358.488114][T19545] ? __pfx____sys_sendmsg+0x10/0x10 [ 1358.488167][T19545] __sys_sendmsg+0x16d/0x220 [ 1358.488186][T19545] ? __pfx___sys_sendmsg+0x10/0x10 [ 1358.488220][T19545] do_syscall_64+0xcd/0xf80 [ 1358.488242][T19545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.488259][T19545] RIP: 0033:0x7ffb63d8f749 [ 1358.488274][T19545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.488289][T19545] RSP: 002b:00007ffb64c49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.488312][T19545] RAX: ffffffffffffffda RBX: 00007ffb63fe5fa0 RCX: 00007ffb63d8f749 [ 1358.488323][T19545] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1358.488333][T19545] RBP: 00007ffb64c49090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.488343][T19545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.488353][T19545] R13: 00007ffb63fe6038 R14: 00007ffb63fe5fa0 R15: 00007ffdef558ab8 [ 1358.488378][T19545] [ 1359.629408][ T9650] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1359.735358][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1359.879791][ T9650] usb 4-1: Using ep0 maxpacket: 32 [ 1359.985274][ T9650] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1360.014173][ T9650] usb 4-1: config 0 has no interface number 0 [ 1360.035213][ T9650] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1360.060842][ T9650] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1360.101531][ T9650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.122729][ T9650] usb 4-1: Product: syz [ 1360.135441][ T9650] usb 4-1: Manufacturer: syz [ 1360.151443][ T9650] usb 4-1: SerialNumber: syz [ 1360.170078][ T9650] usb 4-1: config 0 descriptor?? [ 1360.193164][ T9650] smsc75xx v1.0.0 [ 1364.148321][T19598] comedi comedi1: comedi_config --init_data is deprecated [ 1364.160666][ T9650] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1364.190048][ T9650] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1365.410471][ T30] audit: type=1400 audit(1768768282.758:670): avc: denied { egress } for pid=0 comm="swapper/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1365.434098][ T9650] usb 4-1: USB disconnect, device number 78 [ 1365.457711][ T5933] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1365.527442][ T30] audit: type=1400 audit(1768768282.758:671): avc: denied { sendto } for pid=0 comm="swapper/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1365.653762][ T5933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.696096][ T5933] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1365.727308][ T5933] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1365.771129][ T5933] usb 1-1: Manufacturer: syz [ 1365.802302][ T5933] usb 1-1: config 0 descriptor?? [ 1366.076950][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.086843][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.096630][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.106629][ T5933] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1366.163684][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.253173][ T9650] usb 1-1: USB disconnect, device number 71 [ 1366.293540][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 1366.332732][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1366.347444][ T5933] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 1366.363401][ T5933] usb 4-1: config 0 has no interface number 0 [ 1366.550474][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1366.585094][ T5933] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1366.682844][ T5933] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1366.702570][T15055] IPVS: starting estimator thread 0... [ 1366.735763][T19617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.797030][ T5933] usb 4-1: config 0 interface 88 has no altsetting 0 [ 1366.813591][T19617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.910475][ T5933] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1366.919867][T19618] IPVS: using max 40 ests per chain, 96000 per kthread [ 1366.974591][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1367.104441][ T5933] usb 4-1: Product: syz [ 1367.182163][ T5933] usb 4-1: Manufacturer: syz [ 1367.213815][ T5933] usb 4-1: SerialNumber: syz [ 1367.252082][ T5933] usb 4-1: config 0 descriptor?? [ 1367.516404][T19626] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3884'. [ 1367.845249][ T5933] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input26 [ 1367.954986][ T5933] usb 4-1: USB disconnect, device number 79 [ 1371.408492][T19651] lo speed is unknown, defaulting to 1000 [ 1371.909260][T19656] overlayfs: missing 'lowerdir' [ 1372.001931][T19661] bridge0: entered allmulticast mode [ 1372.032789][T19661] pim6reg: entered allmulticast mode [ 1372.034193][T19663] fuse: Bad value for 'user_id' [ 1372.114437][T19661] pim6reg: left allmulticast mode [ 1372.120150][T19663] fuse: Bad value for 'user_id' [ 1372.154830][T19661] bridge0: left allmulticast mode [ 1372.208123][T19662] NFSD: Failed to start, no listeners configured. [ 1372.249927][T19664] kAFS: unparsable volume name [ 1372.343889][T16543] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1372.631922][T16543] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1372.818905][T16543] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.920077][T16543] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.970428][T16543] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1373.030793][T16543] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1373.073774][T16543] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1373.119332][T16543] usb 1-1: Manufacturer: syz [ 1373.153435][T16543] usb 1-1: config 0 descriptor?? [ 1373.746476][T16543] appleir 0003:05AC:8243.002B: unknown main item tag 0x0 [ 1373.804898][T16543] appleir 0003:05AC:8243.002B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1373.987899][T19690] FAULT_INJECTION: forcing a failure. [ 1373.987899][T19690] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.053745][T19690] CPU: 1 UID: 0 PID: 19690 Comm: syz.3.3898 Tainted: G L syzkaller #0 PREEMPT(full) [ 1374.053772][T19690] Tainted: [L]=SOFTLOCKUP [ 1374.053779][T19690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1374.053788][T19690] Call Trace: [ 1374.053795][T19690] [ 1374.053801][T19690] dump_stack_lvl+0x16c/0x1f0 [ 1374.053828][T19690] should_fail_ex+0x512/0x640 [ 1374.053854][T19690] ? __kmalloc_noprof+0xca/0x910 [ 1374.053880][T19690] should_failslab+0xc2/0x120 [ 1374.053902][T19690] __kmalloc_noprof+0xeb/0x910 [ 1374.053927][T19690] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1374.053958][T19690] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1374.053981][T19690] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1374.054007][T19690] ? cred_has_capability.isra.0+0x18f/0x310 [ 1374.054031][T19690] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1374.054054][T19690] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1374.054084][T19690] ? bpf_lsm_capable+0x9/0x10 [ 1374.054103][T19690] ? security_capable+0x7e/0x260 [ 1374.054132][T19690] genl_rcv_msg+0x55c/0x800 [ 1374.054158][T19690] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1374.054183][T19690] ? __pfx_ieee802154_del_iface+0x10/0x10 [ 1374.054210][T19690] ? __lock_acquire+0x436/0x2890 [ 1374.054236][T19690] netlink_rcv_skb+0x158/0x420 [ 1374.054257][T19690] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1374.054282][T19690] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1374.054315][T19690] ? netlink_deliver_tap+0x1ae/0xd30 [ 1374.054341][T19690] genl_rcv+0x28/0x40 [ 1374.054362][T19690] netlink_unicast+0x5aa/0x870 [ 1374.054399][T19690] ? __pfx_netlink_unicast+0x10/0x10 [ 1374.054436][T19690] netlink_sendmsg+0x8c8/0xdd0 [ 1374.054463][T19690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1374.054492][T19690] ____sys_sendmsg+0xa5d/0xc30 [ 1374.054515][T19690] ? copy_msghdr_from_user+0x10a/0x160 [ 1374.054533][T19690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1374.054569][T19690] ___sys_sendmsg+0x134/0x1d0 [ 1374.054589][T19690] ? __pfx____sys_sendmsg+0x10/0x10 [ 1374.054639][T19690] __sys_sendmsg+0x16d/0x220 [ 1374.054659][T19690] ? __pfx___sys_sendmsg+0x10/0x10 [ 1374.054695][T19690] do_syscall_64+0xcd/0xf80 [ 1374.054721][T19690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.054736][T19690] RIP: 0033:0x7f7bbc18f749 [ 1374.054750][T19690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1374.054766][T19690] RSP: 002b:00007f7bbd0bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1374.054782][T19690] RAX: ffffffffffffffda RBX: 00007f7bbc3e5fa0 RCX: 00007f7bbc18f749 [ 1374.054793][T19690] RDX: 000000002000c094 RSI: 0000200000000b00 RDI: 0000000000000004 [ 1374.054803][T19690] RBP: 00007f7bbd0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.054813][T19690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.054823][T19690] R13: 00007f7bbc3e6038 R14: 00007f7bbc3e5fa0 R15: 00007ffc25938608 [ 1374.054848][T19690] [ 1374.431046][ T30] audit: type=1400 audit(1768768292.197:672): avc: denied { remount } for pid=19659 comm="syz.0.3895" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1374.486078][T19663] overlayfs: failed lookup in lower (newroot/211, name='file0', err=-40): overlapping layers [ 1374.524785][T19692] lo speed is unknown, defaulting to 1000 [ 1374.530573][T19692] lo speed is unknown, defaulting to 1000 [ 1374.536696][T19692] lo speed is unknown, defaulting to 1000 [ 1374.548897][T19692] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1374.571415][T19692] lo speed is unknown, defaulting to 1000 [ 1374.578869][T19692] lo speed is unknown, defaulting to 1000 [ 1374.587380][T19692] lo speed is unknown, defaulting to 1000 [ 1374.596201][ T9] usb 1-1: USB disconnect, device number 72 [ 1374.609057][T19692] lo speed is unknown, defaulting to 1000 [ 1374.615627][T19692] lo speed is unknown, defaulting to 1000 [ 1374.622191][T19692] lo speed is unknown, defaulting to 1000 [ 1374.628664][T19692] lo speed is unknown, defaulting to 1000 [ 1375.062682][T19706] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20003 [ 1375.148748][T19706] pim6reg1: entered promiscuous mode [ 1375.154181][T19706] pim6reg1: entered allmulticast mode [ 1375.483338][T19721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.615969][T19721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.665915][T19719] tipc: Enabled bearer , priority 0 [ 1375.688431][T19719] tipc: Resetting bearer [ 1375.882111][ T9650] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1376.255434][ T9650] usb 1-1: Using ep0 maxpacket: 16 [ 1376.454314][ T9650] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1376.487605][ T30] audit: type=1400 audit(1768768294.115:673): avc: denied { ioctl } for pid=19732 comm="syz.4.3906" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1376.688232][ T9650] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.711068][T19713] tipc: Disabling bearer [ 1376.719850][ T9650] usb 1-1: config 0 has no interface number 0 [ 1376.794634][ T9650] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1376.824407][T19738] QAT: Device 9 not found [ 1377.542452][ T9650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.858703][ T9650] usb 1-1: Product: syz [ 1377.867192][ T9650] usb 1-1: Manufacturer: syz [ 1377.871848][ T9650] usb 1-1: SerialNumber: syz [ 1377.878570][ T9650] usb 1-1: config 0 descriptor?? [ 1377.891021][ T9650] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1377.898996][ T9650] uvcvideo 1-1:0.105: No valid video chain found. [ 1378.031864][T19742] FAULT_INJECTION: forcing a failure. [ 1378.031864][T19742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1378.044948][T19742] CPU: 1 UID: 0 PID: 19742 Comm: syz.2.3908 Tainted: G L syzkaller #0 PREEMPT(full) [ 1378.044966][T19742] Tainted: [L]=SOFTLOCKUP [ 1378.044969][T19742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1378.044975][T19742] Call Trace: [ 1378.044979][T19742] [ 1378.044983][T19742] dump_stack_lvl+0x16c/0x1f0 [ 1378.045003][T19742] should_fail_ex+0x512/0x640 [ 1378.045022][T19742] _copy_to_user+0x32/0xd0 [ 1378.045043][T19742] simple_read_from_buffer+0xcb/0x170 [ 1378.045062][T19742] proc_fail_nth_read+0x197/0x240 [ 1378.045074][T19742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1378.045086][T19742] ? rw_verify_area+0xcf/0x6c0 [ 1378.045098][T19742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1378.045108][T19742] vfs_read+0x1e4/0xcf0 [ 1378.045122][T19742] ? __pfx___mutex_lock+0x10/0x10 [ 1378.045139][T19742] ? __pfx_vfs_read+0x10/0x10 [ 1378.045155][T19742] ? __fget_files+0x20e/0x3c0 [ 1378.045174][T19742] ksys_read+0x12a/0x250 [ 1378.045186][T19742] ? __pfx_ksys_read+0x10/0x10 [ 1378.045198][T19742] ? v4l2_ioctl+0x1c5/0x250 [ 1378.045211][T19742] ? fput+0x70/0xf0 [ 1378.045226][T19742] do_syscall_64+0xcd/0xf80 [ 1378.045242][T19742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.045253][T19742] RIP: 0033:0x7fe91418e15c [ 1378.045262][T19742] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1378.045272][T19742] RSP: 002b:00007fe9150c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1378.045282][T19742] RAX: ffffffffffffffda RBX: 00007fe9143e5fa0 RCX: 00007fe91418e15c [ 1378.045289][T19742] RDX: 000000000000000f RSI: 00007fe9150c60a0 RDI: 0000000000000004 [ 1378.045295][T19742] RBP: 00007fe9150c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.045301][T19742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.045307][T19742] R13: 00007fe9143e6038 R14: 00007fe9143e5fa0 R15: 00007ffe56cd6cb8 [ 1378.045321][T19742] [ 1378.319821][ T5933] usb 1-1: USB disconnect, device number 73 [ 1378.708003][T19754] Invalid ELF header type: 3 != 1 [ 1380.782427][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1384.321660][T16197] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1384.553384][T19836] QAT: Device 9 not found [ 1384.567636][T16197] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1385.931613][T16197] usb 2-1: config 8 has no interface number 0 [ 1385.937764][T16197] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1386.047623][T16197] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1386.113957][T16197] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1386.138397][T16197] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1386.493601][T16197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.555164][T19816] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1387.168400][T19852] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3934'. [ 1387.379425][T16197] usb 2-1: string descriptor 0 read error: -71 [ 1387.454699][T19854] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3934'. [ 1387.482312][T16197] ir_toy 2-1:8.177: required endpoints not found [ 1387.516121][T16197] usb 2-1: USB disconnect, device number 55 [ 1388.457294][T19864] FAT-fs (loop3): unable to read boot sector [ 1390.151953][T19893] QAT: Device 9 not found [ 1390.168322][T19889] FAULT_INJECTION: forcing a failure. [ 1390.168322][T19889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.170000][T19889] [ 1390.170007][T19889] ====================================================== [ 1390.170013][T19889] WARNING: possible circular locking dependency detected [ 1390.170021][T19889] syzkaller #0 Tainted: G L [ 1390.170029][T19889] ------------------------------------------------------ [ 1390.170034][T19889] syz.0.3942/19889 is trying to acquire lock: [ 1390.170042][T19889] ffffffff8e2d6c40 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 1390.170077][T19889] [ 1390.170077][T19889] but task is already holding lock: [ 1390.170080][T19889] ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1390.170107][T19889] [ 1390.170107][T19889] which lock already depends on the new lock. [ 1390.170107][T19889] [ 1390.170112][T19889] [ 1390.170112][T19889] the existing dependency chain (in reverse order) is: [ 1390.170117][T19889] [ 1390.170117][T19889] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1390.170136][T19889] _raw_spin_lock_nested+0x31/0x40 [ 1390.170154][T19889] raw_spin_rq_lock_nested+0x29/0x130 [ 1390.170175][T19889] task_rq_lock+0xcf/0x490 [ 1390.170186][T19889] cgroup_move_task+0x81/0x2a0 [ 1390.170197][T19889] css_set_move_task+0x288/0x5f0 [ 1390.170208][T19889] cgroup_post_fork+0x201/0x9e0 [ 1390.170219][T19889] copy_process+0x56b6/0x7430 [ 1390.170228][T19889] kernel_clone+0xfc/0x910 [ 1390.170236][T19889] user_mode_thread+0xc8/0x110 [ 1390.170244][T19889] rest_init+0x23/0x2b0 [ 1390.170254][T19889] start_kernel+0x3ef/0x4d0 [ 1390.170269][T19889] x86_64_start_reservations+0x18/0x30 [ 1390.170284][T19889] x86_64_start_kernel+0x130/0x190 [ 1390.170298][T19889] common_startup_64+0x13e/0x148 [ 1390.170316][T19889] [ 1390.170316][T19889] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1390.170334][T19889] _raw_spin_lock_irqsave+0x3a/0x60 [ 1390.170350][T19889] try_to_wake_up+0xb7/0x1860 [ 1390.170367][T19889] __wake_up_common+0x135/0x1f0 [ 1390.170378][T19889] __wake_up+0x31/0x60 [ 1390.170387][T19889] tty_port_default_wakeup+0x4d/0x60 [ 1390.170404][T19889] serial8250_tx_chars+0x68e/0x860 [ 1390.170423][T19889] serial8250_handle_irq+0x761/0xcb0 [ 1390.170441][T19889] serial8250_default_handle_irq+0x9e/0x270 [ 1390.170460][T19889] serial8250_interrupt+0xf8/0x1d0 [ 1390.170477][T19889] __handle_irq_event_percpu+0x236/0x890 [ 1390.170492][T19889] handle_irq_event+0xab/0x1e0 [ 1390.170506][T19889] handle_edge_irq+0x3ca/0x9e0 [ 1390.170520][T19889] __common_interrupt+0xd0/0x2f0 [ 1390.170535][T19889] common_interrupt+0xba/0xe0 [ 1390.170549][T19889] asm_common_interrupt+0x26/0x40 [ 1390.170563][T19889] trace_consume_skb+0x0/0x1f0 [ 1390.170582][T19889] consume_skb+0x7d/0x100 [ 1390.170598][T19889] __unix_dgram_recvmsg+0x779/0xc30 [ 1390.170612][T19889] unix_seqpacket_recvmsg+0x11c/0x170 [ 1390.170621][T19889] sock_recvmsg+0x1f9/0x250 [ 1390.170634][T19889] sock_read_iter+0x2b9/0x3b0 [ 1390.170646][T19889] vfs_read+0xa98/0xcf0 [ 1390.170658][T19889] ksys_read+0x1f8/0x250 [ 1390.170668][T19889] do_syscall_64+0xcd/0xf80 [ 1390.170685][T19889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.170698][T19889] [ 1390.170698][T19889] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1390.170716][T19889] _raw_spin_lock_irqsave+0x3a/0x60 [ 1390.170732][T19889] __wake_up+0x1c/0x60 [ 1390.170744][T19889] tty_port_default_wakeup+0x4d/0x60 [ 1390.170758][T19889] serial8250_tx_chars+0x68e/0x860 [ 1390.170769][T19889] serial8250_handle_irq+0x761/0xcb0 [ 1390.170782][T19889] serial8250_default_handle_irq+0x9e/0x270 [ 1390.170797][T19889] serial8250_interrupt+0xf8/0x1d0 [ 1390.170817][T19889] __handle_irq_event_percpu+0x236/0x890 [ 1390.170838][T19889] handle_irq_event+0xab/0x1e0 [ 1390.170857][T19889] handle_edge_irq+0x3ca/0x9e0 [ 1390.170876][T19889] __common_interrupt+0xd0/0x2f0 [ 1390.170894][T19889] common_interrupt+0xba/0xe0 [ 1390.170903][T19889] asm_common_interrupt+0x26/0x40 [ 1390.170912][T19889] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1390.170924][T19889] uart_write+0x2a4/0xb30 [ 1390.170935][T19889] n_tty_write+0x434/0x1280 [ 1390.170949][T19889] file_tty_write.constprop.0+0x503/0x9b0 [ 1390.170962][T19889] redirected_tty_write+0xd4/0x120 [ 1390.170978][T19889] vfs_write+0x7d3/0x11d0 [ 1390.170993][T19889] ksys_write+0x12a/0x250 [ 1390.171009][T19889] do_syscall_64+0xcd/0xf80 [ 1390.171026][T19889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.171037][T19889] [ 1390.171037][T19889] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1390.171050][T19889] _raw_spin_lock_irqsave+0x3a/0x60 [ 1390.171062][T19889] serial8250_console_write+0x181/0x1890 [ 1390.171076][T19889] console_flush_one_record+0x796/0xc60 [ 1390.171090][T19889] console_unlock+0xef/0x240 [ 1390.171107][T19889] vprintk_emit+0x407/0x6b0 [ 1390.171118][T19889] _printk+0xc7/0x100 [ 1390.171134][T19889] register_console+0x823/0x1210 [ 1390.171145][T19889] univ8250_console_init+0x5f/0x90 [ 1390.171163][T19889] console_init+0x152/0x600 [ 1390.171177][T19889] start_kernel+0x298/0x4d0 [ 1390.171186][T19889] x86_64_start_reservations+0x18/0x30 [ 1390.171196][T19889] x86_64_start_kernel+0x130/0x190 [ 1390.171206][T19889] common_startup_64+0x13e/0x148 [ 1390.171216][T19889] [ 1390.171216][T19889] -> #0 (console_owner){-.-.}-{0:0}: [ 1390.171228][T19889] __lock_acquire+0x1669/0x2890 [ 1390.171241][T19889] lock_acquire+0x179/0x330 [ 1390.171256][T19889] console_lock_spinning_enable+0x72/0x80 [ 1390.171275][T19889] console_flush_one_record+0x73f/0xc60 [ 1390.171295][T19889] console_unlock+0xef/0x240 [ 1390.171313][T19889] vprintk_emit+0x407/0x6b0 [ 1390.171321][T19889] _printk+0xc7/0x100 [ 1390.171332][T19889] should_fail_ex+0x4e7/0x640 [ 1390.171347][T19889] strncpy_from_user+0x3b/0x2e0 [ 1390.171362][T19889] strncpy_from_user_nofault+0x7f/0x180 [ 1390.171377][T19889] bpf_bprintf_prepare+0xe90/0x13f0 [ 1390.171390][T19889] bpf_trace_printk+0xda/0x190 [ 1390.171404][T19889] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 1390.171415][T19889] bpf_trace_run2+0x239/0x5c0 [ 1390.171430][T19889] __bpf_trace_contention_begin+0xc9/0x110 [ 1390.171446][T19889] trace_contention_begin.constprop.0+0xd6/0x140 [ 1390.171463][T19889] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1390.171476][T19889] do_raw_spin_lock+0x20e/0x2b0 [ 1390.171488][T19889] raw_spin_rq_lock_nested+0x7e/0x130 [ 1390.171502][T19889] __schedule+0x331/0x6150 [ 1390.171513][T19889] preempt_schedule_irq+0x51/0x90 [ 1390.171527][T19889] irqentry_exit+0x1d8/0x8c0 [ 1390.171545][T19889] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1390.171559][T19889] aio_prep_rw+0x58f/0xc00 [ 1390.171579][T19889] aio_write+0x113/0x910 [ 1390.171598][T19889] io_submit_one+0x1243/0x1e70 [ 1390.171607][T19889] __x64_sys_io_submit+0x1a9/0x370 [ 1390.171616][T19889] do_syscall_64+0xcd/0xf80 [ 1390.171628][T19889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.171637][T19889] [ 1390.171637][T19889] other info that might help us debug this: [ 1390.171637][T19889] [ 1390.171640][T19889] Chain exists of: [ 1390.171640][T19889] console_owner --> &p->pi_lock --> &rq->__lock [ 1390.171640][T19889] [ 1390.171653][T19889] Possible unsafe locking scenario: [ 1390.171653][T19889] [ 1390.171656][T19889] CPU0 CPU1 [ 1390.171659][T19889] ---- ---- [ 1390.171662][T19889] lock(&rq->__lock); [ 1390.171670][T19889] lock(&p->pi_lock); [ 1390.171679][T19889] lock(&rq->__lock); [ 1390.171689][T19889] lock(console_owner); [ 1390.171697][T19889] [ 1390.171697][T19889] *** DEADLOCK *** [ 1390.171697][T19889] [ 1390.171701][T19889] 4 locks held by syz.0.3942/19889: [ 1390.171709][T19889] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1390.171745][T19889] #1: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x5c0 [ 1390.171767][T19889] #2: ffffffff8e3b7080 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1390.171790][T19889] #3: ffffffff8e3b70f8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0x103/0xc60 [ 1390.171829][T19889] [ 1390.171829][T19889] stack backtrace: [ 1390.171838][T19889] CPU: 0 UID: 0 PID: 19889 Comm: syz.0.3942 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.171858][T19889] Tainted: [L]=SOFTLOCKUP [ 1390.171864][T19889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1390.171872][T19889] Call Trace: [ 1390.171877][T19889] [ 1390.171883][T19889] dump_stack_lvl+0x116/0x1f0 [ 1390.171897][T19889] print_circular_bug+0x275/0x340 [ 1390.171909][T19889] check_noncircular+0x146/0x160 [ 1390.171921][T19889] __lock_acquire+0x1669/0x2890 [ 1390.171935][T19889] lock_acquire+0x179/0x330 [ 1390.171947][T19889] ? console_lock_spinning_enable+0x61/0x80 [ 1390.171969][T19889] ? console_lock_spinning_enable+0x4a/0x80 [ 1390.171992][T19889] console_lock_spinning_enable+0x72/0x80 [ 1390.172012][T19889] ? console_lock_spinning_enable+0x61/0x80 [ 1390.172030][T19889] console_flush_one_record+0x73f/0xc60 [ 1390.172046][T19889] ? __pfx_console_flush_one_record+0x10/0x10 [ 1390.172063][T19889] ? __lock_acquire+0x436/0x2890 [ 1390.172075][T19889] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1390.172086][T19889] console_unlock+0xef/0x240 [ 1390.172107][T19889] ? __pfx_console_unlock+0x10/0x10 [ 1390.172129][T19889] ? do_raw_spin_unlock+0x80/0x230 [ 1390.172149][T19889] ? _printk+0xc7/0x100 [ 1390.172164][T19889] ? __down_trylock_console_sem+0xb0/0x140 [ 1390.172178][T19889] vprintk_emit+0x407/0x6b0 [ 1390.172187][T19889] ? __pfx_vprintk_emit+0x10/0x10 [ 1390.172196][T19889] ? rcu_is_watching+0x12/0xc0 [ 1390.172207][T19889] _printk+0xc7/0x100 [ 1390.172218][T19889] ? __pfx__printk+0x10/0x10 [ 1390.172233][T19889] ? bpf_trace_run2+0x3f9/0x5c0 [ 1390.172249][T19889] ? __pfx____ratelimit+0x10/0x10 [ 1390.172268][T19889] should_fail_ex+0x4e7/0x640 [ 1390.172291][T19889] strncpy_from_user+0x3b/0x2e0 [ 1390.172309][T19889] strncpy_from_user_nofault+0x7f/0x180 [ 1390.172320][T19889] bpf_bprintf_prepare+0xe90/0x13f0 [ 1390.172331][T19889] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1390.172341][T19889] ? trace_buffer_unlock_commit_regs+0xcf/0x540 [ 1390.172358][T19889] ? bpf_trace_run2+0x3f9/0x5c0 [ 1390.172369][T19889] bpf_trace_printk+0xda/0x190 [ 1390.172383][T19889] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1390.172399][T19889] ? bpf_trace_run2+0x3f9/0x5c0 [ 1390.172419][T19889] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 1390.172431][T19889] bpf_trace_run2+0x239/0x5c0 [ 1390.172448][T19889] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1390.172463][T19889] ? find_held_lock+0x2b/0x80 [ 1390.172485][T19889] ? rcu_is_watching+0x12/0xc0 [ 1390.172498][T19889] __bpf_trace_contention_begin+0xc9/0x110 [ 1390.172510][T19889] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1390.172533][T19889] trace_contention_begin.constprop.0+0xd6/0x140 [ 1390.172553][T19889] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1390.172575][T19889] ? __lock_acquire+0x436/0x2890 [ 1390.172590][T19889] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1390.172606][T19889] do_raw_spin_lock+0x20e/0x2b0 [ 1390.172619][T19889] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1390.172632][T19889] ? rcu_qs+0x2b/0xe0 [ 1390.172640][T19889] ? rcu_note_context_switch+0x191/0x1de0 [ 1390.172660][T19889] raw_spin_rq_lock_nested+0x7e/0x130 [ 1390.172682][T19889] ? preempt_schedule_irq+0x51/0x90 [ 1390.172700][T19889] __schedule+0x331/0x6150 [ 1390.172717][T19889] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1390.172732][T19889] ? is_bpf_text_address+0x94/0x1a0 [ 1390.172744][T19889] ? do_raw_spin_lock+0x20e/0x2b0 [ 1390.172757][T19889] ? unwind_get_return_address+0x59/0xa0 [ 1390.172771][T19889] ? arch_stack_walk+0xa6/0x100 [ 1390.172786][T19889] ? __pfx___schedule+0x10/0x10 [ 1390.172807][T19889] preempt_schedule_irq+0x51/0x90 [ 1390.172826][T19889] irqentry_exit+0x1d8/0x8c0 [ 1390.172845][T19889] ? rcu_is_watching+0x12/0xc0 [ 1390.172859][T19889] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1390.172872][T19889] RIP: 0010:aio_prep_rw+0x58f/0xc00 [ 1390.172888][T19889] Code: 44 89 ee e8 d3 d5 67 ff 45 85 ed 0f 85 8c 05 00 00 e8 25 db 67 ff 41 89 ee 31 ff 41 89 ed 41 83 e6 04 44 89 f6 e8 b1 d5 67 ff <45> 85 f6 74 09 e8 07 db 67 ff 41 83 cd 02 e8 fe da 67 ff 4c 89 e2 [ 1390.172898][T19889] RSP: 0018:ffffc900042e7a50 EFLAGS: 00000293 [ 1390.172906][T19889] RAX: 0000000000000000 RBX: ffff8880811eaa00 RCX: ffffffff8257213f [ 1390.172912][T19889] RDX: ffff8880593124c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1390.172918][T19889] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000000 [ 1390.172924][T19889] R10: 0000000000000004 R11: ffff888059312ff0 R12: ffff8880811eaa20 [ 1390.172930][T19889] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000000004004 [ 1390.172941][T19889] ? aio_prep_rw+0x58f/0xc00 [ 1390.172966][T19889] aio_write+0x113/0x910 [ 1390.172988][T19889] ? __pfx_aio_write+0x10/0x10 [ 1390.173009][T19889] ? __lock_acquire+0x436/0x2890 [ 1390.173024][T19889] ? __might_fault+0xe3/0x190 [ 1390.173033][T19889] ? __might_fault+0x13b/0x190 [ 1390.173044][T19889] ? io_submit_one+0x1243/0x1e70 [ 1390.173054][T19889] io_submit_one+0x1243/0x1e70 [ 1390.173064][T19889] ? __lock_acquire+0x436/0x2890 [ 1390.173078][T19889] ? __pfx_io_submit_one+0x10/0x10 [ 1390.173096][T19889] ? __might_fault+0xe3/0x190 [ 1390.173109][T19889] ? __might_fault+0x13b/0x190 [ 1390.173124][T19889] ? __x64_sys_io_submit+0x1a9/0x370 [ 1390.173139][T19889] __x64_sys_io_submit+0x1a9/0x370 [ 1390.173154][T19889] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1390.173164][T19889] ? fput+0x70/0xf0 [ 1390.173175][T19889] do_syscall_64+0xcd/0xf80 [ 1390.173188][T19889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.173198][T19889] RIP: 0033:0x7fc10cb8f749 [ 1390.173205][T19889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.173215][T19889] RSP: 002b:00007fc10d9e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1390.173229][T19889] RAX: ffffffffffffffda RBX: 00007fc10cde5fa0 RCX: 00007fc10cb8f749 [ 1390.173238][T19889] RDX: 0000200000000700 RSI: 0000000000000001 RDI: 00007fc10d999000 [ 1390.173247][T19889] RBP: 00007fc10d9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.173256][T19889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.173265][T19889] R13: 00007fc10cde6038 R14: 00007fc10cde5fa0 R15: 00007ffd9fb238b8 [ 1390.173279][T19889] [ 1391.571999][T19889] CPU: 0 UID: 0 PID: 19889 Comm: syz.0.3942 Tainted: G L syzkaller #0 PREEMPT(full) [ 1391.572024][T19889] Tainted: [L]=SOFTLOCKUP [ 1391.572030][T19889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1391.572038][T19889] Call Trace: [ 1391.572044][T19889] [ 1391.572050][T19889] dump_stack_lvl+0x116/0x1f0 [ 1391.572075][T19889] should_fail_ex+0x512/0x640 [ 1391.572095][T19889] strncpy_from_user+0x3b/0x2e0 [ 1391.572110][T19889] strncpy_from_user_nofault+0x7f/0x180 [ 1391.572122][T19889] bpf_bprintf_prepare+0xe90/0x13f0 [ 1391.572134][T19889] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1391.572144][T19889] ? trace_buffer_unlock_commit_regs+0xcf/0x540 [ 1391.572169][T19889] ? bpf_trace_run2+0x3f9/0x5c0 [ 1391.572185][T19889] bpf_trace_printk+0xda/0x190 [ 1391.572199][T19889] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1391.572214][T19889] ? bpf_trace_run2+0x3f9/0x5c0 [ 1391.572230][T19889] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 1391.572240][T19889] bpf_trace_run2+0x239/0x5c0 [ 1391.572251][T19889] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1391.572261][T19889] ? find_held_lock+0x2b/0x80 [ 1391.572278][T19889] ? rcu_is_watching+0x12/0xc0 [ 1391.572290][T19889] __bpf_trace_contention_begin+0xc9/0x110 [ 1391.572309][T19889] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1391.572331][T19889] trace_contention_begin.constprop.0+0xd6/0x140 [ 1391.572352][T19889] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1391.572372][T19889] ? __lock_acquire+0x436/0x2890 [ 1391.572383][T19889] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1391.572400][T19889] do_raw_spin_lock+0x20e/0x2b0 [ 1391.572414][T19889] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1391.572426][T19889] ? rcu_qs+0x2b/0xe0 [ 1391.572437][T19889] ? rcu_note_context_switch+0x191/0x1de0 [ 1391.572462][T19889] raw_spin_rq_lock_nested+0x7e/0x130 [ 1391.572485][T19889] ? preempt_schedule_irq+0x51/0x90 [ 1391.572504][T19889] __schedule+0x331/0x6150 [ 1391.572517][T19889] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1391.572529][T19889] ? is_bpf_text_address+0x94/0x1a0 [ 1391.572540][T19889] ? do_raw_spin_lock+0x20e/0x2b0 [ 1391.572553][T19889] ? unwind_get_return_address+0x59/0xa0 [ 1391.572568][T19889] ? arch_stack_walk+0xa6/0x100 [ 1391.572588][T19889] ? __pfx___schedule+0x10/0x10 [ 1391.572608][T19889] preempt_schedule_irq+0x51/0x90 [ 1391.572627][T19889] irqentry_exit+0x1d8/0x8c0 [ 1391.572646][T19889] ? rcu_is_watching+0x12/0xc0 [ 1391.572657][T19889] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1391.572667][T19889] RIP: 0010:aio_prep_rw+0x58f/0xc00 [ 1391.572684][T19889] Code: 44 89 ee e8 d3 d5 67 ff 45 85 ed 0f 85 8c 05 00 00 e8 25 db 67 ff 41 89 ee 31 ff 41 89 ed 41 83 e6 04 44 89 f6 e8 b1 d5 67 ff <45> 85 f6 74 09 e8 07 db 67 ff 41 83 cd 02 e8 fe da 67 ff 4c 89 e2 [ 1391.572694][T19889] RSP: 0018:ffffc900042e7a50 EFLAGS: 00000293 [ 1391.572703][T19889] RAX: 0000000000000000 RBX: ffff8880811eaa00 RCX: ffffffff8257213f [ 1391.572710][T19889] RDX: ffff8880593124c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1391.572719][T19889] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000000 [ 1391.572728][T19889] R10: 0000000000000004 R11: ffff888059312ff0 R12: ffff8880811eaa20 [ 1391.572738][T19889] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000000004004 [ 1391.572749][T19889] ? aio_prep_rw+0x58f/0xc00 [ 1391.572780][T19889] aio_write+0x113/0x910 [ 1391.572803][T19889] ? __pfx_aio_write+0x10/0x10 [ 1391.572824][T19889] ? __lock_acquire+0x436/0x2890 [ 1391.572841][T19889] ? __might_fault+0xe3/0x190 [ 1391.572850][T19889] ? __might_fault+0x13b/0x190 [ 1391.572863][T19889] ? io_submit_one+0x1243/0x1e70 [ 1391.572878][T19889] io_submit_one+0x1243/0x1e70 [ 1391.572894][T19889] ? __lock_acquire+0x436/0x2890 [ 1391.572912][T19889] ? __pfx_io_submit_one+0x10/0x10 [ 1391.572929][T19889] ? __might_fault+0xe3/0x190 [ 1391.572940][T19889] ? __might_fault+0x13b/0x190 [ 1391.572950][T19889] ? __x64_sys_io_submit+0x1a9/0x370 [ 1391.572960][T19889] __x64_sys_io_submit+0x1a9/0x370 [ 1391.572971][T19889] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1391.572982][T19889] ? fput+0x70/0xf0 [ 1391.572993][T19889] do_syscall_64+0xcd/0xf80 [ 1391.573010][T19889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.573025][T19889] RIP: 0033:0x7fc10cb8f749 [ 1391.573038][T19889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.573051][T19889] RSP: 002b:00007fc10d9e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1391.573065][T19889] RAX: ffffffffffffffda RBX: 00007fc10cde5fa0 RCX: 00007fc10cb8f749 [ 1391.573074][T19889] RDX: 0000200000000700 RSI: 0000000000000001 RDI: 00007fc10d999000 [ 1391.573082][T19889] RBP: 00007fc10d9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.573088][T19889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.573094][T19889] R13: 00007fc10cde6038 R14: 00007fc10cde5fa0 R15: 00007ffd9fb238b8 [ 1391.573103][T19889]