last executing test programs: 19.059944015s ago: executing program 0 (id=2480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x10, 0x803, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x24004881}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 15.528881921s ago: executing program 0 (id=2489): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d8010203010902"], 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000680)={{}, {0x0, 0x3938700}}, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x4, 0x40000) openat$ttyprintk(0xffffff9c, 0x0, 0x20000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x83) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000080)) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='-', @ANYRESOCT=r6, @ANYRES8=r2, @ANYBLOB="d319e9298d2982b70327b70f51c5bbd019b9bfe7b07c465b311d9ed6716a8f5459fb5184b1800d7540a249603f640296a343d61ae08706cb3c02d64b5616d9ba8b71551f1e27aef9a7ce5238d02a12dea9c31435172eeb69b7cab61837ebe77d49367774e139338e0f81c79ac36092b5b9c8976166180dd7809ad4e02af979d732611adf953843269b8915f24c723f5b9a1b7d51302027fed10508934aca6b94a1a750877ea6f9876f026e6ae26afbe7499fa9180013bbd479acf6bdad755e02fde66aa1f237a552e95e1481df", @ANYRESDEC=r6, @ANYRES32=r6], 0x27) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20008040) pwrite64(r1, &(0x7f00000002c0)="b6f62ccf4b25c602eab7de1e3f8ecf458927d01c53d01615524caf98a99ca3717448c7876ee18b29090ce203ed73abe019faafc47608d1aea5273cddc6288b1aab6d67a2e75b49e7a5026a975e80fdea436207d378f15ce71dfd614b160c9549a461f56f087e9eb45b5addc6a9d46cafcf9db33eaa62df6373360ba99d0600d1cbe2d44140f98bcea9bafe6a8ce8cae7b91875c855e07c63a2947afc12eaa85e35ab625b2b49d38c26332121d466281ece035eb590ca9aa94906ee6bd5413ef48ad8c4c1b12844583feb3d4d06975885ff5749420f26be73b92c4ca5f977c8e5071049e2d56df5b0611573be4d91e8928d11094f2639ece1ac", 0xf9, 0xfffffffffffffffd) 12.064889859s ago: executing program 1 (id=2500): socket$kcm(0x10, 0x2, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="f80000001600010040000000000000000a01010000000000000000000000f5b100000000000000000000ffff0000000000000000000000000000a0a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000fc0200000000000000000000000000000000000000000000ffffffffffffffff000400000000000000000000000000000200000000000000f1ffffffffffffff03000000000000000000000000000000fffffffffffffffffcffffffffffffff0200000000000000feffffffffffffff00000000000000009607000000000000fcffffff00000002be000000000000000000000000000080"], 0xf8}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) fanotify_init(0x2, 0x800) socket(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d9010203010902"], 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 11.453801579s ago: executing program 0 (id=2501): openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tgkill(0x0, 0x0, 0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xe, 0x4, 0x7, 0x6, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x3, 0x5, 0x0, 0x4], 0x8000000, 0x3c4200}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000003c0)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0xfffffffffffff806, 0x6, 0x7, 0x3, 0x6, 0x9}) 9.217286049s ago: executing program 2 (id=2505): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x20, 0x20, 0x0, 0x2000007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{}, 0x0, &(0x7f0000000940)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000080)=@tcp6, 0x1}, 0x20) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) close(0x3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc0702, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001100)={r4, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0x4c08, &(0x7f00000001c0)={r5, 0x0, 0x420a02, 0x0, 0x5, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x65}, @l2cap_cid_signaling={{0x61}, [@l2cap_create_chan_req={{0xc, 0xff, 0x5}, {0xb, 0x7, 0x5}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x8, 0x9}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x1}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0xd1, 0x80}}, @l2cap_conf_rsp={{0x5, 0x79, 0x38}, {0x8, 0x0, 0x2, [@l2cap_conf_flushto={0x2, 0x2}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x81, 0x8, 0x27c, 0x8af, 0x2}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x1, 0x2, 0x9, 0x1, 0x3}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x9}]}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x0, 0x8}}]}}, 0x6a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 8.767406256s ago: executing program 2 (id=2508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x48, r3, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x48}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2c}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x6, 0x8, 0x1000]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2c}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x6, 0x8, 0x1000]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) (async) r8 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) read(r8, &(0x7f0000001680)=""/187, 0xbb) read$ptp(r8, &(0x7f0000001c40)=""/4124, 0x101c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r2, 0x0, 0x0, 0x80800) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$netlink(0x10, 0x3, 0x400000000000004) (async) r11 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r11, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) (async) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) r12 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000140)={0x4b5a9da54893e123, 0x3, 0x17, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) bpf$MAP_CREATE(0x14, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) (async) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) close(0x3) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x8, 0x0, 0x6ffffff}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004019}, 0x20048054) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x8, 0x0, 0x6ffffff}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004019}, 0x20048054) 8.133052062s ago: executing program 2 (id=2509): munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x80800, 0x0) r2 = io_uring_setup(0x141b, &(0x7f0000000040)={0x0, 0x4898, 0x10000, 0xa, 0x1b9}) io_uring_enter(r2, 0x2280, 0xde1e, 0x41, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r0, r0, r0, r1, r2], 0x5) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x18}], 0x1}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000280)={0x820000000000c, 0x287c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x2, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x9}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x400, 0x2, 0x0, [0x0, 0x400, 0x9, 0x8, 0x3c3, 0xb2c, 0x1, 0x9, 0x7fff, 0x5, 0x6, 0x0, 0x5, 0xfff8, 0x0, 0x9], 0xc}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x1ff000001, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0x11af9, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@empty, @empty, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0xffffffff, 0xff], 'veth1_virt_wifi\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x2, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) sendfile(r4, r4, 0x0, 0x200000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x421}}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) 8.132397379s ago: executing program 1 (id=2510): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x40881, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x800) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b00000018010000756c090000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(0x0, r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x404c040}, 0x40c4) 7.944998815s ago: executing program 4 (id=2511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000", @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r2], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4001c00) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000006c0)={{r0}, "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"}) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 7.238399976s ago: executing program 1 (id=2512): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d8010203010902"], 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000680)={{}, {0x0, 0x3938700}}, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x4, 0x40000) openat$ttyprintk(0xffffff9c, 0x0, 0x20000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x83) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000080)) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='-', @ANYRESOCT=r6, @ANYRES8=r2, @ANYBLOB="d319e9298d2982b70327b70f51c5bbd019b9bfe7b07c465b311d9ed6716a8f5459fb5184b1800d7540a249603f640296a343d61ae08706cb3c02d64b5616d9ba8b71551f1e27aef9a7ce5238d02a12dea9c31435172eeb69b7cab61837ebe77d49367774e139338e0f81c79ac36092b5b9c8976166180dd7809ad4e02af979d732611adf953843269b8915f24c723f5b9a1b7d51302027fed10508934aca6b94a1a750877ea6f9876f026e6ae26afbe7499fa9180013bbd479acf6bdad755e02fde66aa1f237a552e95e1481df", @ANYRESDEC=r6, @ANYRES32=r6], 0x27) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20008040) pwrite64(r1, &(0x7f00000002c0)="b6f62ccf4b25c602eab7de1e3f8ecf458927d01c53d01615524caf98a99ca3717448c7876ee18b29090ce203ed73abe019faafc47608d1aea5273cddc6288b1aab6d67a2e75b49e7a5026a975e80fdea436207d378f15ce71dfd614b160c9549a461f56f087e9eb45b5addc6a9d46cafcf9db33eaa62df6373360ba99d0600d1cbe2d44140f98bcea9bafe6a8ce8cae7b91875c855e07c63a2947afc12eaa85e35ab625b2b49d38c26332121d466281ece035eb590ca9aa94906ee6bd5413ef48ad8c4c1b12844583feb3d4d06975885ff5749420f26be73b92c4ca5f977c8e5071049e2d56df5b0611573be4d91e8928d11094f2639ece1ac", 0xf9, 0xfffffffffffffffd) 7.152841654s ago: executing program 4 (id=2513): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvfrom(r1, 0x0, 0x0, 0x40002060, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.369165069s ago: executing program 0 (id=2514): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x4000000) 4.801825737s ago: executing program 3 (id=2516): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a0000", 0x21}], 0x1) 4.745090376s ago: executing program 2 (id=2517): arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x40}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) 4.597827006s ago: executing program 3 (id=2518): syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/67, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/201, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x301100, 0x0) r2 = syz_usbip_server_init(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$usbip_server(r2, 0x0, 0x35) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_open_procfs(0xffffffffffffffff, 0x0) 3.74920022s ago: executing program 2 (id=2519): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000002c0)={0x4, 0x1, 0x3}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\xb1\xed8~\x92\xae\x82\xbe\xe7\xfd_\xc1\x83\xb7\xd4\xee\x9a\xa5\xc1\x8e\xc5\xcb|\x95-\xc8\x8f\xa1\xd6\xe2\r!\x81`\xa4P\xd2\xb2.9e\xa04\x1as#\x19\x83\xe42\xec\x91\xdb\x8e\x8b\x85\xc1\xado\xde\xf1s\xf9\xd3-z\x96\xd8\xbf\xbb\x19\xd6c\xe2\xc4\xf0d\xdb\xe9\x1c\x8d|\" \x12\xac\x7f4AJ\x1d\vS\xd9_\xd4\xeeQ\xd4u\x10\xd7j\xe3\xab\xbc\xffY\x8dA=l`V\x10\xbf\xd1\xbfbz\"\xd0\xeaX\x99\x9c\x14\x83\xe1\xc3.!R\x93\xf4S\x95\xc7\x90we\x82\xf81\x9f\x04\xe0\xa9\xa9\xe0\xf0\xa8R\xfbQ<\x11\xc3P\xbe\x1eR\xc1\xbfES\x99\xda\xfc\x8ff\xf9\xa0\x18\xd0\x00w\\\xf2\xba\xa4 \xaa\xbc\x9b\xd4\x86\xef\t\xb7\xd2\xec\xe8\xde\xe5u\x123V\x8a\x10\xa1^\x0e\x80N\xceD\xd5[-.', 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000140)=""/210) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c4932", 0x1f) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 3.492311808s ago: executing program 1 (id=2520): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) (fail_nth: 4) 3.38710543s ago: executing program 3 (id=2521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x502c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfffc}}, [@filter_kind_options=@f_fw={{0x7}, {0x5000, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x3408}, @TCA_FW_ACT={0x11c, 0x4, [@m_simple={0x118, 0x3, 0x0, 0x0, {{0xb}, {0xcc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '}\'-}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0x20000000, 0x1, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd73, 0x9, 0x20000007, 0x2007, 0x5}}, @TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x4, 0x5, 0x3, 0x10}}, @TCA_DEF_DATA={0xd, 0x3, 'mptcp_pm\x00'}, @TCA_DEF_DATA={0xd, 0x3, 'mptcp_pm\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x10000, 0x8, 0x4, 0x3, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xfffffe00, 0x1000000c, 0x2, 0xb}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x42ad, 0x4, 0x4, 0x3}}]}, {0x22, 0x6, "49796da3b02e07054e7823510568ee9aa7496e5abc23e44aa3de6fad52e1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_ACT={0x4ed0, 0x4, [@m_skbmod={0x10c8, 0x11, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x5ad8, 0x1, 0x1, 0x77}, 0x8}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x362}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x4, 0x5, 0xbe, 0x4}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffffc, 0xc8e, 0x4, 0x0, 0x6}, 0x9}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x1004, 0x6, "59513b75ed740916259c5522fd9a4f67531985b72c03785a73801c6b77dcdf423dcd82d762b9fe7b9ff78f9095cf24c5aec53061b0ca80ddf5a66c0ab6d3ada495ff0608eef7856e9d2196a798c0b4604a9cbf5b07f6cc9bde830629f02aa7e513dd373af64daecb3a488d4b4acac7ea4770a5261d99661fa065cdee1ee74b088c89816d8aa65a4a8bab02dda4ac44fa41f35e982e81a4b559a0c9a3969d4b683f12039f4549283d3649b12c7c656b26795840bfbdf5ce189aaf0b2d6fdb87935f4c237af2a361be5322f30807b2db679ef2dc40a8365ed644040f2ba5425a0f593919679dfb48384157c3b44a5b50c614e72ef1fb1150d4afb0d3c1abdf4551ca61d4475153bcd3d14a909b1d131df77a36ce101359681a4da8e9819fc1de6991c930be28903931519343263b0187befee80e4122775eb3a1289326450baa3d8747fd1af9824e661631d324410490fd1bd2812d110f1ad9bde6c3809502b1d85809176fd90f25200d38ef9805f711a6dcab4e889f14962738def9bc524f18400d99760d14b740b08efb21f1d3698a2a7839db627c5c12504aafca7b9357a394a66b3c576be9c0880a73ee15bb79358a9ae0549bcb80b11c5967a595dbd90ab7959207934ef99bc506b14a19d7e7598d280502c559870ea95161836c9f3e1e859cfb0ecf9aa136601c0d6b48d4639c6b90ae556c3f2533fbf58c372109308789e2cb75ea4c67a1cd153031c14097da97b85b84d2afd2c5e0c35cbc15ba4f5f705f5c8059aa64300cea3ae39e85b68159511f872e9e92dcad0ad8b134b6721ed519677ee46cd41121ef30fd3f290ac6c219f5240e01961b5a55b3293863c80de94e57476fa11b253f761309c11ae46a05f1dec04373526a98a029a46674e4394f745f82b0419d8f361ec86e8f8b7614c6063dfa26d894953557fa05d7c5800e1f297f41ca5a02cbaf71e056623c47b7ee3065c6444e37859e0c109cdf3f625f4968d11b4ae8794bec65e6b2ef5fa3c352283bb8242cb4183b2ad4a0680023f0e517a9728c6cb3d19a54543e2819e4395f79fa933d513f579001e5b102e51fccdb7e934d9ab568626a45a7b9b487745600e1238b32df1b803c7d215da09cc72a39e3dcd5777611911903b664c4c796b6fd633b9d2890083b7510fa6589e0e0c6db936b862429e7ca1e05cd8cfc8f073832bd48587af5bca8c0d1c2f2a91e6f5b9023ee3d7562bd69eda5e54e474c81c0881f1c675ac80a3572e85f94a882f94efbcf229de9d3ac83bb2ce450df68fba3373782a0a4289f50315eb1eeb49a35b49c0e0358f3a926fbab672a1e47dc557e29f2abac53d974dc89963560eb65ee2010f748d59f53735892d6fba8a2d651093cf4b759ba5f7fa184ca5ea3043f78e3d1ec9e48cddc6d64a6364bc573d28b4d691ef20cefe97e041c491fcfd17fbc79dfcbb551fe2611c76204effb6c7b1baa66bcd22f191b6784bcd1ea3c948d922cec93e8b6d92b7ae087edc73b3587f655523ee6a12efe85bbe27a86230402e61c52f8710a37cac76958837c4239ed7d4b5689e8d7c6495de3c0aa3def962c16901bfe3233a5e1968abef002833340f90613eba7c1ec47289e2d4961fa0996abf21fe4a07611bff91620accbfe195f0453a01a56503b7bb05a8d94de18075286d1bc9eb5670c7839c03f625cf018be61f8cd9232125a8ac581505f9163820fea3fcd80391b4e6effb4529ca0f67bd0cff312efb78b48f1bd0cf9bc7a611d8610a07d9b76689b57eeb6bf4c39ed2e7b533eea0fe6c5216271a3bba13c238af4e0aa77e860bd66f2b52e76fca0810c1937aaaa4591fa9f36abafd473a1cf3bcfda641337d71d18936753e9a283da9c3750e554274c0de38d44b60a5b8e303c5978db6cfcb1730de2cf201037b8af3ce93c46954c8caf5b7621576a3d347e2859b959c9ead7828d2eacc7286763f1770a8317713e896412c062d307e04ea220fb6b33eaefc11e37fed841a1e3ae26c2a04ca9555a81c8061afa6f271a1255def926e0e60ba17a7a2346cf605b21daa80e8bb88f05f72f5cc921fa920255060f8819f11bbccfa87417f4b22636aed8af04cf725feae894e458a4719cb2304979751ecac2348ca15ff5747938dd0d5aca192947d7003b1a913ba82014713bed88642ff04ded67da6e475d1d0ae6bf83ffe0720a9c2395b396dbce3ec5ab5c8be7fa3948a1f21b304d138e3e86cf1c43a58cd91758cb91917c9834eb1e48468819141b22d1f27019e950f1eaed56200203c7a6e1fa5f09a05d8ce6eb6a2f078a2ff9631b114b9e8ad56d3e845c5a39a1fa430420159c1af19ef4b3689813a4f87e093770ab5af562908da0e9c1cf1c832a1650be72d091f01cbdbabbbb2807b328a8bc9fa1c765b992cd8352f2a35c4c425c457d6acee367c4d70607799d4bb707bf9ea6b7c1389c11f354e0eb95868847098f2dddc37dbcef9db621fc8731b86e5bf6ee56ff60f953dd6fc41e68b04aa87ec8bfe41985c81d104f020e17f614ac50ebe6e68d674893cafce883716254abe95cfd8380ffc26434c8ad7c9b494293e91f408bd63ee422969021db65a1d85cb6ee4c37597d63220b1f87fb00313ac9b52c56b2cf332de96b4ef438573674036d530531b7b7927b5af3ad8c2a79abf6e3721eca5a1c709212bb5ce80ab113a366a30d61a2453ec1811c12f7fd297470d5a81757edb9328405489d0b1ced402fcfee8b98f767d8f0d444ab444f0058dca3f2bdbb23449fd2ecddcaf274d7449d64ee51ec2d76c12fb425ee90262285a5fcb50f6841517096709e2f6fdd8ec2c28bd610e541264b5d74c65cc13938a683b23c791c9fe2b5bbc8de5705abadf358bb044c49d8c867134e4c97df30bd8f43cf5eafca8694ffeb64dfb05e2ff19e2337097aebdebdc412b5c48eebd87772ddc5db78ba522874da59e7efe42a73f946625b7f2a736a223dc6072cd40cae1b4d7b80b080c3fbdd5897845865085bfb53f3fd0357eee9c468928c63667445bed9335da0f2999226d9d877fe934bae788b69ed0e425f0db34b615180074596980edcaf45ff7cd3925150c0a2e21340cf0049ec01e2e97f36cab9f166e551a407544bf1c07d09105129e2bf32016551031f8384ec1cc4c3a12bb8d847f9f9fe063d0080ff9c8bb84c2e6e388248c9c71cc8aa1ccbab8233ef654ad9374214d50dcbf9fb816bdaa3b7d9fe5d872bddbc62bdd471ae4aad8fff7275839a7f0c5ed69b145ba514af915a3497a03e3a3c7c00eb894cc87eaeed58d7f16c584da9e7f95dc1dec03c237bcfb76795af247161be7b6cf2b83b370f1811907ae37615e2e2543d51b27e8a6cbe00ac8b269485565799163a65ca058b18eda89a936f5b1d084b3fd9e491bf367d8f657a0fd4c9c8f0a83530e121f25bf75ba286f499dd8e4162abaa79e581432f49db832de5a91df24efc28e69f7de0f69d70d8bba3134d0a842ca09ed0161769a119ae2abd1bc6a774a7502278359b8cac1c8f4b5c7a1048e691a24f46383456b4e614c152ab0da16de10de2a2e1c97ace4b802f7f723d38f171c174b865b5b7f5ade7e453305405dcba849479d3b3948b1da9a1d62b359906af912cd18e4d61ec503f760e5750fc3b896647d38b71c10f5a8530655dc122fca098b40acf1e84c97520db36db6ba98434d2c301636ed8437dc356e95c18e571b8e50e581eeccae1f0e7808f24083b9e588a9b8b47f2800c4c436a5751149926f7c505eb5e04777ccc58f8c260fa404055b9c4c24e83493254f465e84c3ca5b683adea334a66355042916a1f0dd6d5a4be2ad4ec50a380f65108573994c46b6dcfada9aa9a5b388d22c83dc4ff0fa1fd8230f78cbadb80fb2d7c149e02da9fdbd24843bb0a5c7564231b22970af39cb2d4a0e4ae54ec80b706671c06e8431b7e1c270d5f75741acb8eee6243c0413e82dd72a45e389c8071e614cd35f737a951cd7b029d8924dc764a50aa07282e541d8b9caef095307819c59739700d5d8efcbc8902d28cd8a03047dccefa2d7a89cc196c44373dbf84cea2ad63f00ce837a280b63d9ea51a47d7a004ef34a6bfd6b9e26630bce71e5f3f658a678cedfba34ff9fe9e4b1da12717ac8b7ea6d452002373bf44b3d9b6dc68e825a5a1a95a57021e16f6e83d1d3ab1c80418d7490bb812a83ce922426378c5cb26087f02f02a12f571a95f590ea42d81779cdc8fec5e81a73477af36b348e128b53799e1075ae0d666c1b6c3376ae5753d50dd67f382d40bb36a361601b718eb18b5ff254c56475c4d8565f283355b3a334cc624da9217a702c68b3f6b128ba34a917691cac66a227c42bb75a13e991f10d2e9fb9fac51a2f0f3383815d0f90596ac25177115e6bfdae2e725ebe45f2e86eae47daecb6f099f2be49c07a6ecb1775c4137666bfa8e8d24aaecf5b432b68601934412c5f227152f105139a5658042db1b693fc5854b0f38be09480aaf7fdb99beddea372db641d22abcdfb1819dddf1db67f64ea1bb28ca13d25e805289c45c810d53de8cd4e21859571660b7741fed74ef2e7c70f7b794080f0c4468ad4bb52d883d8e839d91fcf051d91af070ebceeef129135547ac20d5b4ad2f1539207898932147b09a9b29103a0d6abed9db259d1a0da90582f6e7b49c4c52f9a95637c2d6faf01472303ad50973798664926ce18b8f4861c451ad61e677f93554e10f908532c7489b1a09fd96f59c6c1534afd4c39b7a7f99e5acfd94ae7af414282db719b323ea86a38836d3a5a3eac64b8dd228982de79617fea059b7d235da13ba1c8276e8496d33eb5d466d669b4683bcf8cbed63936d2ab2b9352db0f0b52b49034abe5c5022fa00cdee8262d047b84ba71c6ce6f3b6b8145f025c0ff95e6bd71e56f1c3670d005f07d3562c22ffecb4686a45f55f421180bd739eee01bc64539333c5e85fd628747b266e4ca9f314d8a3282b8d88813bdc1a9278f0c77cef92a240f14c86158b60f98c9016183adfc222f2eb2366c69183672d74be32c3f1b26ea8d21f52426b19291715111d20b2d639b3010de6851b9093e4ada0fbfd006efbcde910f0963b00e3142e5821eb8c7bf098e0139eaf5cd1cc3501da12a9661116c8466f8633041cc2ff4bc6650cc92852036ffb7f370c097bba0801de1d1311b1adbbb0d5ea5da23d0c6b4276806c8a4ce749e00bc6b0ee61fe850686ac186cb898783f05836062ebce0526b586625061745fa51b2a05e125b9d3e29056319dc956e7dbf092e19db066a948c070baac0f85c2ec52f532aa4cfd8788e2a80080f97a30371d747122d2f719046e43977fbcd2f84b346f0fe77ec3311ecb848dd3b68d605943c9536598f943fa8da56ecbfa998f9207aedf9f32570ce29fdd9661cf75d177f848deeada7d8e2b3351b065a29d25421709d67328365b7dbe69d5e05e774184aa77820ce16cff9e11e6ccef5f24e03e589db611b4914444924263240e12df90ae3ad86c0bdaa0c0b4edce032b24724bf17d1ab9b80e514570bb448cfe4df4836db072e212ee348f657089f59c40f51c742697be88b506a097578ffd0f7eaf917c25cfad85569bf11cba5bed305313f8d9eb305ef69949fa3bdeb3196915984a2bbfb33cb4ca5cbda9dbe404c56283ce72079182f66738de23d42bd62f856d0b5a85e18ff1b96423cf6665f94ce7dec3a547272a5700a70ab99a8d9bc97b2f486e2e6fdcd60125016683d034ef2273530ffcddb268f5093d58f97c8d21ec5df6a0080ee77289842ee18b92ffcb146a31b909c99c5e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x3d68, 0x14, 0x0, 0x0, {{0xa}, {0x3cd8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x3, 0x8, 0x8, 0x9, 0x9}, 0x8, 0x5, [{0x100, 0x80, 0x6, 0x6, 0x6, 0x1000}, {0xf, 0x5, 0x200, 0x0, 0x7fff, 0x7f}, {0x5, 0x4, 0x5, 0x0, 0x6, 0x8}, {0x1, 0xbbe, 0x7, 0x7fff, 0xd2}, {0x1, 0x8, 0x6, 0xb, 0x7, 0x6}]}, [{0x7f, 0x40, 0xff, 0x726, 0x6, 0x80000000}, {0x3, 0x73, 0x7fffffff, 0x1, 0xff, 0x6}, {0x3, 0x4, 0x8001, 0x2, 0x0, 0x10000}, {0x933, 0x8, 0x6, 0x429, 0x400, 0xa7}, {0x2, 0x87f3, 0x10000, 0x6, 0x7, 0x9}, {0x3, 0x3, 0x6, 0x2, 0x5, 0x1}, {0x7fff, 0x5, 0xa, 0x4, 0xffffffa9, 0x4}, {0x4, 0x80000000, 0x6, 0xfffffffe, 0x4, 0xffffff6b}, {0x9, 0xa3, 0xb, 0x2, 0xb, 0x1}, {0x7, 0xfffffff5, 0xb, 0x2, 0x1, 0x9}, {0x10, 0x5, 0x9, 0x2, 0x3, 0xd}, {0x8, 0x5, 0x4, 0x1e7, 0x3e06df4a, 0xf1a}, {0x1000, 0x4, 0xfffffff4, 0x1, 0x6, 0x800}, {0x7ff, 0x7, 0x8, 0xffffffff, 0x7, 0x7}, {0xb, 0x5, 0x787, 0x1000, 0xffffffff, 0x7f}, {0x100, 0x7, 0x1ff, 0x96a4, 0x4, 0x10}, {0xffffffff, 0x1, 0x80000000, 0xd4c7, 0x0, 0x9}, {0xfb, 0x8c, 0xfffffff7, 0x0, 0x3, 0xc2c}, {0x1, 0x6, 0xfff, 0x7, 0x8, 0x7ff}, {0x0, 0x2, 0x7, 0x80, 0x3, 0xa0a4}, {0x0, 0x0, 0xd287, 0x2, 0x1866, 0x2}, {0xf67, 0x1, 0x5, 0x3, 0x8, 0xe}, {0x0, 0x8, 0x1, 0x400, 0xac4, 0x1c2}, {0xff, 0x3ff, 0x9, 0x983, 0x7, 0x3}, {0x427b, 0x4, 0x5, 0x9216, 0x800, 0x6}, {0x3, 0x80000000, 0x2, 0xa, 0xf, 0x9}, {0x0, 0xb180, 0xc2, 0x4, 0x9, 0x5}, {0x2, 0x2, 0x1, 0x40, 0x8, 0x5}, {0xffff, 0x0, 0x31cca9d5, 0xeea1, 0x5f59260, 0x5}, {0xffffffff, 0x5, 0x8, 0xffffff0e, 0x627d, 0x80}, {0x1000, 0x3, 0x6, 0x8, 0x3, 0x43}, {0xffffffff, 0xd, 0x0, 0x2, 0x7, 0x12d}, {0x0, 0x3, 0x1, 0x7}, {0x200, 0x2, 0x4, 0xd41, 0x35, 0x3}, {0x7, 0xb, 0x2, 0x1, 0x7, 0x65}, {0xfffffffa, 0x4, 0x0, 0x8, 0xc, 0x5}, {0x58, 0x7, 0x6, 0x1000, 0x68e00000, 0x7}, {0x9, 0xc2, 0x5, 0x6, 0x10000}, {0x200, 0x6, 0xabe4, 0x6, 0x8, 0x3}, {0x6, 0x1, 0x76, 0x45, 0x2, 0x9}, {0xe, 0xfffffff8, 0x402, 0x4, 0x8, 0x7}, {0x1, 0x6662, 0x4, 0x7fffffff, 0x3, 0x3}, {0xdd, 0xffffff45, 0xffffffff, 0x7, 0x4, 0xff}, {0xc2, 0x5, 0xa94, 0x2, 0x59a, 0x2}, {0xfffffffd, 0xd, 0xb478, 0xffff, 0xde1f, 0x4}, {0x5, 0xd964, 0x1ff, 0x100, 0x50d, 0x8}, {0x6, 0xffffffff, 0xfffffff9, 0x2, 0x10001, 0x5}, {0x6e9, 0x7, 0x3, 0x6, 0x800, 0x4}, {0x9, 0x5, 0x3, 0x2, 0x0, 0x3}, {0x1ff, 0x2, 0x100000, 0x8, 0x6, 0x9}, {0x3c12, 0x5, 0x7, 0x9, 0x7fff, 0x7}, {0x4, 0xff, 0xe7e9, 0x4, 0x80, 0x6}, {0x8, 0x8, 0x401, 0x3, 0xffffffff, 0x8}, {0x74, 0x83, 0x101, 0x200, 0x9, 0x2}, {0x34e829a3, 0x2, 0x9, 0x90, 0x10000}, {0xfffffff7, 0x401, 0x2, 0x4, 0x1ff, 0x80000001}, {0xf0, 0x1, 0xffff, 0x1, 0x7, 0x4}, {0x7f, 0x2, 0x3, 0xfff, 0x8, 0x2}, {0x3, 0x1, 0xffff, 0x0, 0x5, 0x9}, {0x7, 0x10001, 0x7edd86c7, 0x5, 0x0, 0x2}, {0x80000000, 0x524, 0x40, 0x7b, 0x0, 0x6}, {0x7fffffff, 0x5, 0x81, 0x8, 0xfffffffd, 0xa}, {0x1, 0xd, 0x2, 0x4, 0xe, 0x8}, {0x1000, 0x6, 0x6, 0x401, 0x100, 0x883}, {0x1000, 0x4, 0xfc000000, 0x4, 0x9, 0x380d}, {0x7, 0x2, 0x4, 0xb, 0x2, 0x5}, {0xca3, 0x7, 0x5, 0xe, 0xc, 0x1}, {0x100, 0xb, 0x3, 0x800, 0x40, 0x8001}, {0x10, 0x1, 0x8, 0x5, 0xa, 0xe64}, {0x0, 0x10001, 0x5, 0x3, 0x5eb, 0x2}, {0x772, 0x10, 0x772, 0x5573, 0x4, 0x200}, {0x1000, 0x3, 0x2, 0x81, 0x6, 0x1ff}, {0x80000001, 0x7ff, 0x4, 0xfffffffe, 0xffffffff, 0x4}, {0x4, 0x80000001, 0x0, 0x41f, 0x9, 0x80000000}, {0x4, 0x9, 0x3, 0x33920ea0, 0x8, 0x6}, {0xc, 0x5, 0xffff8000, 0xffffff5d, 0x63f73839, 0x5}, {0x4, 0x7fff, 0x3, 0x88, 0x8878, 0xfc}, {0x8, 0x2, 0x9, 0x4, 0x1, 0x9}, {0x0, 0xb, 0x2, 0x6, 0x8, 0x40}, {0x6, 0x0, 0x5, 0x0, 0x80, 0x2}, {0x9, 0x1, 0xe, 0x7, 0x4, 0x6}, {0x10, 0x1, 0x101, 0x6, 0x4}, {0x8, 0x6, 0x1, 0x6, 0x0, 0xfffffff0}, {0x1, 0x6, 0x0, 0x4, 0xfffffff0, 0xa}, {0x8, 0x525, 0x8, 0x101, 0x31, 0x40}, {0x7, 0x1ef8, 0x7, 0x6, 0x5, 0xfffeffff}, {0x9, 0x8, 0x4, 0x5, 0x9d1, 0x3}, {0x1, 0x80000001, 0xc, 0xfffffc01, 0x8, 0xc}, {0x7, 0x3afd, 0x9, 0x8, 0x7, 0xb9}, {0x200, 0x2, 0x6, 0x3, 0x75, 0xfffffff7}, {0x3, 0xfffffe2f, 0x4, 0x7fffffff, 0x81, 0xa98}, {0x6, 0x1000, 0x1, 0x10001, 0x7fffffff, 0x4}, {0x2, 0x7fffffff, 0x8, 0x8000, 0x9, 0x848}, {0x5, 0xa, 0x800, 0x8, 0x0, 0x3}, {0xf3f, 0x6, 0x80000001, 0x1, 0x1, 0xff}, {0x1, 0x5, 0xd, 0x9, 0x4ad, 0x8}, {0x2, 0x8, 0x6, 0x0, 0x2, 0xffff}, {0x3, 0x9, 0x5, 0x3, 0xf, 0xab}, {0xffffffff, 0x7, 0x0, 0x6, 0x0, 0x100}, {0xf53f, 0x8, 0x7, 0x1, 0xfe6a, 0xffffffff}, {0x6, 0x4, 0xc, 0x100, 0x8, 0x7fff}, {0x0, 0x7f, 0xd, 0x0, 0x2, 0x8000}, {0x5, 0x2, 0x0, 0x7f, 0xb}, {0x7, 0x7, 0x8, 0x8001, 0x2000, 0x587da21e}, {0x14f, 0x10, 0xfffffffc, 0x7, 0x3, 0x5}, {0xfb75, 0x92bc, 0x1e, 0x8, 0x4c7, 0xa}, {0x9, 0x8c0, 0x2, 0xff, 0x6, 0x1}, {0x1, 0x5, 0x6, 0x8a, 0x7ff, 0x1}, {0x8, 0x2, 0x18e, 0x3, 0x0, 0x5}, {0x7, 0xef, 0x7, 0x8, 0x0, 0x1}, {0x2, 0x80000001, 0x2, 0x2, 0x101, 0x5c}, {0x7, 0x4, 0x3, 0x7, 0xfffffffa, 0x1279}, {0x80, 0x0, 0x1, 0xfffffffb, 0x76aadd2a, 0x1}, {0x100, 0x1000, 0x8, 0x1, 0x9, 0x3}, {0xfffffffc, 0x6, 0x180000, 0x320c, 0x0, 0x81}, {0x9, 0x8, 0x0, 0x0, 0x1, 0x80000001}, {0xe47, 0x7, 0x8a97, 0x9, 0x0, 0x3}, {0x4, 0x8, 0x73c5, 0x3c0, 0xffffffff, 0x1}, {0x200, 0x100, 0xfffffff7, 0xa, 0x0, 0x4}, {0xdb39, 0x98b, 0xfff, 0x6, 0xb, 0x7}, {0x401, 0x506f, 0x7f, 0xfffffffb, 0x2, 0x6}, {0x0, 0x1, 0x6, 0x71, 0x6, 0xffff}, {0x8, 0x4b20, 0x400, 0x3, 0xfffffffb, 0x7fffffff}, {0x1, 0x81, 0x9, 0xa554, 0xfffffff9}, {0x8, 0x81, 0x2, 0xffffc279, 0x80, 0x7}, {0x5, 0x1000, 0x7ff, 0x3, 0x4, 0x6}, {0x3ff, 0x9ce, 0x6, 0x0, 0x6, 0xea9d}, {0x5, 0x1ff, 0x1, 0xfff, 0x4, 0x2}], [{0x4}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x2}, {0x5}, {0x5}, {0x4, 0x2}, {0x1, 0x1}, {0x2}, {0x4}, {0x3}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0xc7b8a28d802bd10, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x7}, {0x2}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x7a8231d7d1425fcc}, {0x4}, {0x3}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x7, 0x2229, 0x5, 0x7fff, 0xc105}, 0x2, 0xa2, [{0xc4e, 0xba2, 0x1, 0x8, 0xa, 0x400}, {0x4, 0x7, 0x400, 0x401, 0x5, 0x401}, {0x7, 0x9, 0x140a, 0xc00, 0x400, 0x4}]}, [{0x73fa80, 0x3, 0x6915, 0x5, 0x9, 0x7f}, {0x2, 0x7, 0x3, 0x2, 0x6, 0x2}, {0x3, 0xfff, 0x9, 0x0, 0x3ff, 0xaa2}, {0x775a, 0x4, 0x4080, 0xfff, 0x4, 0xd}, {0x2, 0x3, 0x3, 0x9, 0x9, 0x8001}, {0x6, 0x8, 0x7, 0x8, 0x9, 0x7f}, {0x7fff, 0x8, 0x5, 0x1, 0xa3, 0x10}, {0xee67, 0x5, 0x3, 0x7, 0x6, 0x800}, {0x7, 0x7, 0x4d3, 0x4, 0x95, 0x8000}, {0x2, 0x7, 0x4, 0x5, 0x9, 0x800}, {0xfff, 0x10001, 0x6, 0x5, 0x0, 0x81}, {0x5, 0x4, 0xd, 0xf5, 0x5ea3, 0x8}, {0x342, 0x1, 0x6b6, 0x4, 0x5, 0xfff}, {0x2, 0x4, 0x5, 0x5, 0x1, 0x4}, {0x1, 0x9, 0x400, 0x7, 0x4, 0x80000000}, {0x7, 0x2, 0x4, 0x100, 0xb5fb, 0x81}, {0x8, 0x8, 0x3d, 0x9, 0x6, 0xfffffff9}, {0x0, 0x800, 0x16, 0x80000000, 0x3, 0x8}, {0xae, 0x0, 0xfffffffc, 0x401, 0x6281, 0x80000001}, {0x101, 0x6, 0xffffffff, 0x6, 0x3, 0x200}, {0x7f, 0x8000, 0xfffffe01, 0x5, 0x100, 0x4}, {0x3, 0x1, 0x4, 0x7, 0xffff, 0x6}, {0x4, 0x4, 0x1, 0x3, 0x2, 0x200}, {0x800, 0x604, 0x40000000, 0x1d982cc3, 0x4}, {0x77f, 0x5, 0xcb, 0xd046, 0x1, 0x80000000}, {0x6, 0x4, 0xffffff7f, 0x0, 0x7, 0x7}, {0x5, 0x1, 0x0, 0x2, 0xb6a, 0x129}, {0xa000000, 0x4eb76c7c, 0x1, 0xb, 0x0, 0x5}, {0xffffffff, 0x401, 0x100, 0x7, 0x8000, 0xc05}, {0x401, 0x4, 0x3, 0xfffffff7, 0x0, 0x3}, {0xf4a, 0xffffffe5, 0xb, 0xcff, 0x3, 0x121}, {0x1, 0x0, 0x4b7f, 0x6, 0x6, 0x6}, {0x10, 0x3, 0x2, 0xf, 0x2, 0x8}, {0x3, 0x6, 0xdd74, 0x7, 0x800, 0x7f}, {0x80000000, 0x6, 0x0, 0x4, 0x4, 0x28c}, {0x9, 0xfffffff7, 0x9, 0x5, 0x7, 0x4}, {0x0, 0x7fff, 0x7f, 0x6, 0x17a, 0xace}, {0x4, 0xffff, 0x7, 0x5, 0x8, 0x3}, {0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x8, 0x8}, {0xd, 0x7, 0xfffffffd, 0xdfa7, 0x0, 0x9}, {0x6, 0x1, 0x8000, 0x45c, 0x0, 0x2}, {0x10000, 0x8, 0xb, 0x200, 0xd, 0x25d00}, {0x9, 0x2, 0x3ff, 0x5, 0x4, 0x8}, {0x1, 0x8, 0x3, 0x401}, {0x0, 0x5, 0x2, 0x8ab, 0x7f, 0x2}, {0x9, 0x5, 0xf, 0xdd, 0xfffffff8}, {0x9, 0x94ec014, 0x1ff, 0xeef, 0x9, 0x5}, {0x1, 0xfffffff9, 0x7e34, 0x68b1d722, 0x1, 0x1000}, {0xd, 0xf, 0x8, 0x8b9b, 0x200, 0x6}, {0x1, 0x8, 0x8, 0x200, 0x5, 0x6}, {0x9, 0x3, 0x528d3ea2, 0x7, 0xfffffff9, 0xf}, {0x8cf, 0x3, 0x5, 0x9583, 0xff, 0x401}, {0x1f73, 0x5, 0x3, 0x576, 0x2, 0x4}, {0x400, 0xa, 0xb8, 0x938, 0xfb, 0x80000000}, {0xcbb, 0x4, 0x25, 0x0, 0x80, 0x6}, {0x8, 0xfff, 0x3, 0x401, 0xb9, 0x3}, {0x73c0f1fc, 0xc804, 0x6, 0x2, 0x6, 0x8000}, {0xeead, 0x8, 0xff, 0x2, 0xfffffffe, 0x7ff}, {0x8, 0x10000, 0x9, 0x8, 0x3, 0xb1b5}, {0x6, 0x8001, 0xa, 0x8000, 0xfff, 0x8}, {0x5, 0xd, 0x1000, 0x3ff, 0xda, 0x452}, {0x1, 0x0, 0x2, 0x7fffffff, 0x1, 0x4}, {0x0, 0x0, 0x9, 0x7, 0x9b, 0x2}, {0x6, 0x2, 0x0, 0x400, 0x68, 0x1}, {0x1000, 0x10000, 0x4, 0x80000000, 0xe, 0xe}, {0x3, 0x101, 0x3, 0x1ff, 0x557f, 0x10}, {0x10001, 0x9, 0x9, 0x0, 0x4, 0xffffff7f}, {0x101, 0x7, 0x0, 0x9011, 0x7, 0xc}, {0xd4, 0x6, 0x4, 0x76, 0x8, 0x4}, {0x0, 0x6, 0x10000, 0x1b, 0xc3, 0xffff}, {0x8ce0, 0x6, 0x54, 0x6, 0x2261, 0x9}, {0x99, 0x4, 0xfffffffc, 0x1, 0x5, 0x200}, {0x5, 0xfffffffa, 0x709, 0x310, 0xf26, 0x1}, {0x3b, 0x4, 0x80000001, 0x4, 0x6, 0x5}, {0xb7e2, 0x800, 0x5, 0xa, 0xfc24, 0x1}, {0x28000, 0xe14, 0x6, 0x7, 0x0, 0x2}, {0x1000, 0x9, 0x7, 0x7, 0x4, 0x1}, {0x8, 0xd75, 0x401, 0x100, 0x7, 0x8}, {0x0, 0xf, 0x9, 0x4, 0x40004000, 0x8}, {0x6, 0x2, 0x2, 0x400, 0x3ff, 0xd9}, {0x9e3d, 0x1, 0x4, 0x8001, 0x9, 0x1}, {0x101, 0x6cf4, 0x3, 0xff, 0x6, 0x10000}, {0x1, 0x0, 0xffffb86e, 0x6, 0x5, 0x200}, {0x80, 0x5, 0x8000, 0x9, 0x9, 0x7ff}, {0xd, 0x3, 0x8, 0x679f, 0x683, 0x10001}, {0x5, 0x4, 0x1ff, 0x101, 0x4, 0x6}, {0x8, 0x8, 0x4, 0x3, 0x10001, 0x52}, {0x101, 0x9, 0x4, 0xf5, 0x9c, 0x800}, {0x2f, 0x8001, 0x2, 0x8, 0xdf, 0x7}, {0x9, 0x800, 0x4, 0xe0e, 0x0, 0x7}, {0x151, 0x89, 0x5d4, 0x2, 0x1, 0xfffffffc}, {0x9, 0xfffffffb, 0x6, 0x5, 0x10, 0xffffb927}, {0x3, 0xfff, 0x4944, 0xc9, 0x400, 0x1}, {0x400, 0x80000001, 0x2, 0x3, 0x4410, 0x3}, {0x101, 0x7, 0x7, 0x8000, 0x5, 0x2268000}, {0x4000000, 0x5, 0x0, 0xdc, 0x2, 0xffffffff}, {0x5, 0x4, 0x4, 0x200, 0x38f, 0x9}, {0x8, 0xed, 0x5, 0x6, 0x1, 0xf}, {0x1000, 0x7, 0x1, 0x0, 0x2}, {0x3, 0x5, 0x0, 0xf7, 0x7fffffff}, {0x8a9, 0x2, 0x5, 0x3, 0x7fffffff, 0x5}, {0x342, 0x100, 0x3, 0x4, 0x7b5e, 0x53}, {0x7, 0x7ff, 0x7fff, 0xc, 0x1, 0xac8}, {0x80000001, 0xf8a, 0x27, 0x1, 0x1, 0x2}, {0x9, 0x4, 0xfffffff8, 0x8, 0x1, 0x4}, {0xfffffff7, 0xf44, 0x7e2, 0x7ff, 0x740, 0x1}, {0x6, 0x45, 0x6, 0x10, 0x5, 0x3bb9}, {0x5, 0x7d290602, 0x4, 0x101, 0x9, 0x3}, {0x2, 0xff, 0x1, 0x6, 0x0, 0x80000001}, {0x1ff, 0x4, 0xb, 0x1, 0x7}, {0x8, 0x8000, 0x4, 0x1ff, 0x8, 0x10}, {0x4, 0x3, 0x6, 0x3, 0x3, 0x2}, {0x4, 0xfff, 0xfffffff9, 0x7f, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x7, 0xa8f, 0x40}, {0xc0b, 0x7, 0xfffffffe, 0x6, 0x4, 0x7}, {0x0, 0x81, 0x6, 0x2, 0x1f, 0x2}, {0x67be, 0x7, 0x81, 0x7, 0xff, 0x8}, {0x8, 0x6, 0xffffffff, 0x6, 0x1ff, 0x5}, {0x1, 0xe3d, 0x2, 0x5, 0x0, 0x2}, {0x0, 0x10, 0x693, 0x8001, 0xcc94, 0x7}, {0x4, 0xfffffffc, 0xffff, 0x3ff, 0xa, 0x2}, {0x1, 0xd0, 0x6f053f14, 0x800, 0x1, 0x9}, {0x3ff, 0xe2b9aa49, 0x7, 0x40, 0x6, 0xfffffffa}, {0x8, 0x9, 0x4000, 0x6f6, 0xd, 0x5}, {0x9edb, 0x1, 0x0, 0xc13, 0x5c3e, 0x2}, {0x4, 0x6, 0x5, 0xf4, 0x4, 0x9}, {0x5, 0x1, 0x7fffffff, 0x2, 0x9d, 0x8001}, {0x2, 0x7, 0xe, 0x4, 0x7, 0x2}], [{0x3}, {0x2}, {0x4}, {0x5, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0xb}, {0x5}, {0x1, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x4}, {}, {0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x2}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x5}, {0x4, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x8, 0x2, 0x5, 0x8, 0x6}, 0xff, 0x0, [{0x7, 0x2, 0x4, 0x2, 0x2, 0x9}, {0x8, 0x8, 0x6, 0xfc, 0x3, 0x9b16}, {0xe76, 0x4, 0x4, 0xb51, 0xc, 0x3}, {0x3, 0x5, 0x4e, 0x10000, 0x2, 0x8}, {0x9, 0x4, 0x6d64, 0x200, 0x14, 0x10000}, {0x80000001, 0x800, 0x80, 0xffff8001, 0xfff, 0x55}, {0x9, 0x4, 0xd3, 0x4, 0x1, 0xfffffff8}, {0x8, 0x9, 0x50, 0x0, 0x1, 0x6ac6}, {0x6, 0x0, 0x3, 0x8, 0x5, 0x3}]}, [{0xfffffff9, 0x8, 0xa, 0x1, 0x1, 0x8}, {0x4, 0x1, 0xfffffffd, 0x0, 0x0, 0xffffffb1}, {0xd5e6, 0x3, 0x8, 0x3ff, 0x8001, 0x3}, {0x4, 0x2, 0x7afe, 0x6, 0x36, 0x8}, {0x8, 0x5, 0x4, 0x3, 0x2800000, 0x6}, {0xff, 0x2, 0x5, 0x80000000, 0x60, 0xa}, {0x0, 0x7, 0x77600, 0xffff7fff, 0xffffffff, 0x6}, {0xa, 0x100, 0x931a, 0x7, 0x9}, {0x295, 0x2, 0x36abc51b, 0x9, 0x83f7, 0x2}, {0x2, 0x7, 0x2, 0xbf7, 0x3ff80000, 0xffffd1cf}, {0x81, 0x5, 0x401, 0x0, 0x651c0000, 0x10001}, {0x2, 0xb, 0xf, 0x0, 0xffff, 0x5}, {0x8001, 0x7fff, 0x0, 0x10001, 0x1}, {0x60, 0x401, 0x627e2d1a, 0xffcc, 0x8, 0xfffffae3}, {0x9, 0x43, 0x7, 0xc, 0x4, 0x6}, {0x400, 0xff, 0x1, 0x80000001, 0x8, 0x1}, {0x80000001, 0x7, 0x7, 0x2611, 0x1000, 0x3ff}, {0x101, 0xc0, 0x73eb, 0x8, 0x6, 0x2}, {0x7, 0x7ff, 0x3ff, 0x9, 0x0, 0x2}, {0x6, 0x0, 0x81, 0x101, 0x0, 0x9}, {0x0, 0xfffffff8, 0x4, 0x40, 0x4, 0x7fff}, {0xff, 0x5, 0x6d49, 0x4, 0x8, 0x35}, {0xc, 0x9, 0x6, 0xfffffe00, 0x1, 0x7}, {0x1, 0x5, 0x3, 0x8, 0x1, 0xfffff800}, {0x7fffffff, 0x6, 0x5, 0x4, 0x7, 0x3}, {0x10001, 0x1, 0xf, 0x726, 0xaa1, 0x1eb}, {0x1fe, 0x80000000, 0x5, 0xb4f, 0x16c, 0x4}, {0x5ee7, 0x8, 0x3, 0xfffffff7, 0x5, 0x4}, {0x7aed, 0x3, 0x2, 0x4, 0x80, 0x200}, {0x5, 0xfffffffa, 0x2, 0x1, 0x80000000, 0x9}, {0x10000, 0x3, 0x2, 0xd5, 0x160f, 0x6}, {0x6, 0x1, 0x6, 0x700, 0xe238, 0x5}, {0x52a, 0xae3, 0x2c9, 0xfffff849, 0x9, 0xffff}, {0xf9, 0x100, 0x8, 0x7, 0x3, 0x9}, {0x1, 0x1, 0x3, 0x6, 0x10001, 0x6}, {0xc, 0x0, 0x10000, 0x5, 0xffffffff, 0x7}, {0x6, 0x6, 0x5, 0x6, 0x4, 0x2}, {0x8, 0x100, 0x3, 0xbe, 0x7, 0x6}, {0xfffff42b, 0x4, 0x9, 0x9, 0x5c, 0x8d}, {0xa, 0x59, 0x1, 0x6, 0x5, 0x3}, {0x8, 0x1000, 0x8, 0x7, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x10, 0x8, 0xff}, {0x8, 0x4, 0x0, 0x7, 0x232, 0x1}, {0x3, 0x1, 0x2f5e4fd3, 0x9, 0x0, 0x77}, {0xfffffffb, 0x7fff, 0x9, 0x81, 0x1, 0xb}, {0xb331, 0x1, 0x69, 0x0, 0x0, 0x4}, {0xfff, 0x81, 0xffff, 0x4f5, 0x0, 0x1f2}, {0x2, 0x6, 0x1, 0x5, 0x7, 0x2}, {0x7f, 0x5, 0x5a, 0x3, 0x1, 0x6ba0}, {0x7, 0x3, 0x8000, 0x1, 0x5}, {0x6, 0x100, 0x6, 0x7, 0x9, 0x792}, {0x2b3, 0x6, 0x4, 0x80000001, 0xffff, 0x4ae}, {0x0, 0x4, 0xb, 0xc1908d0, 0xcf, 0x7}, {0x1ff, 0x1ff, 0x3, 0x3, 0x2}, {0x7fffffff, 0x4, 0x1, 0x9, 0x3, 0xfffffff9}, {0x7, 0x6, 0x1, 0x91, 0x33, 0xc}, {0x0, 0x9, 0x80, 0x4, 0x23e8, 0x4}, {0x49, 0x3, 0x101, 0x24000, 0x5, 0x3}, {0x800, 0x4, 0xe277, 0x5, 0x4, 0x1}, {0xbc55, 0x30, 0x1, 0x7, 0x4, 0x67a}, {0x7, 0x5, 0x0, 0x4, 0x751c, 0x1}, {0x7b6, 0x0, 0x8, 0x8, 0x0, 0x99b}, {0x1e47, 0xfffff692, 0x2, 0x15, 0x8, 0x2}, {0x3, 0x5, 0x400, 0xff, 0x0, 0x1}, {0xffff, 0x0, 0x2, 0x1, 0x7, 0x80000000}, {0x0, 0x42b2df0b, 0x8000, 0x1, 0x1a, 0x7}, {0x5, 0x9, 0x2, 0x8, 0x7, 0x1ff}, {0x10000, 0x2, 0x7, 0x6, 0x0, 0x8}, {0x6, 0x5, 0xffffff7f, 0x7, 0x2, 0x75}, {0x7, 0x7fffffff, 0x9, 0xe, 0xf5, 0x200}, {0x3, 0x2, 0xb85, 0xb4, 0x8, 0xfa}, {0x3, 0x6, 0x8000, 0x5, 0x5, 0x5bd7}, {0x270, 0xfffffffc, 0x0, 0x6, 0x7, 0xf6}, {0xf, 0x0, 0x4, 0xffffff80, 0x3ff, 0x43}, {0xfdf1, 0x9f, 0x6, 0x1, 0x0, 0x7}, {0xfffffffb, 0x5, 0x9, 0x6, 0x6, 0x1000}, {0x8, 0x7fff, 0x2, 0x7ff, 0x7, 0x3}, {0x8, 0x80000001, 0x5, 0x0, 0x7fff, 0x6}, {0x5, 0x0, 0x1, 0x81, 0x678}, {0xe, 0xa9, 0x6d0c, 0x0, 0x3, 0xfffffffe}, {0x101, 0x7, 0x8, 0x1, 0x200}, {0x2, 0x7, 0x2, 0x5, 0xa3, 0xe2f}, {0x7fffffff, 0x8, 0x9, 0x8, 0x7, 0xfffffffb}, {0xf28a, 0x5, 0x0, 0x0, 0x7e, 0x9a44743}, {0x2, 0x2216, 0x9, 0x2, 0x800, 0xcab6}, {0xd8ae, 0xfff, 0x1, 0x7, 0x2cc0, 0x7}, {0x6, 0x7, 0x6, 0xc, 0x8, 0x6}, {0x5, 0x80, 0x2, 0x7, 0x8}, {0xa, 0x6, 0x602, 0x7, 0x5, 0xffffffff}, {0xb, 0x8, 0xff, 0xfffffffe, 0x3, 0x6}, {0x3, 0x1, 0x5304, 0x401, 0x8, 0x2}, {0x1f7f, 0xe07c, 0x7ff, 0x80, 0x6, 0xfffe0000}, {0x8001, 0x5, 0x5, 0x2, 0x2, 0x5}, {0xffffffff, 0x80000001, 0x1, 0x4, 0x0, 0x10}, {0x9, 0x8, 0x10001, 0x7, 0x1, 0xf0e1}, {0x13, 0x9, 0x80fa, 0x5d923a6, 0x6, 0x8}, {0x0, 0x8, 0x9, 0x1, 0x80000001, 0x400}, {0x7, 0x6, 0x5, 0xd179, 0x3, 0xa}, {0x400, 0x5, 0x80, 0x7, 0x2, 0x8001}, {0x4, 0x1ff, 0x4, 0x6, 0x18, 0x2}, {0x2, 0x2, 0xe0c4, 0xff, 0x1, 0xfffff000}, {0x1, 0x200, 0x3, 0x6, 0xfff, 0xfffffbff}, {0x8, 0x0, 0x401, 0x6, 0x2, 0xc911}, {0x1, 0x6, 0x3ff, 0x0, 0x1, 0x3}, {0x5, 0x5, 0x3, 0x80000001, 0x2, 0x8001}, {0x5, 0xfffffff8, 0x7ff, 0x3cd, 0x8, 0x797e}, {0x9, 0x401, 0xf9, 0x2, 0x8}, {0x1, 0xd, 0x3, 0xb, 0x1ff80, 0x22f9}, {0xc, 0x5, 0x10001, 0x80000001, 0xfffffff2, 0x680}, {0x5, 0x8, 0x7a, 0xe95, 0x4, 0x6}, {0x80000000, 0x2, 0xd, 0x7, 0x7, 0x2}, {0x384, 0x5a, 0xe7, 0x23, 0x8, 0x3}, {0x0, 0x8001, 0x1, 0x2, 0x1ff, 0x10}, {0x7ff, 0x8, 0x200, 0x0, 0x4, 0x6}, {0x0, 0x9000000, 0x7, 0x1, 0x4, 0x24}, {0x6, 0x101, 0xa8000000, 0x100, 0x4, 0x4}, {0x8, 0x8, 0x7fffffff, 0xc, 0x7, 0x8}, {0xb, 0x80000001, 0x5, 0x0, 0x7971, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x9, 0x6}, {0xffffff3b, 0xc, 0x7f, 0xfffffff6, 0xc, 0x7fffffff}, {0x7fffffff, 0x6, 0x0, 0x1, 0x9, 0x6}, {0x329f074c, 0xfff, 0x6, 0x5, 0x1, 0x4}, {0x9, 0x3, 0x8, 0x5f3, 0x6, 0x3}, {0xc, 0x8, 0x2, 0x8, 0x7, 0x3}, {0x6, 0x6, 0x373, 0x9, 0xffffffff, 0x1}, {0x8, 0x4, 0xd98, 0x6, 0xcfa2, 0x3}, {0x7, 0x9, 0x75, 0x7, 0x9, 0x7}, {0x1ff, 0x40, 0xffff, 0x0, 0x8, 0x9}], [{0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x7, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x3}, {0x0, 0x187a01a83eeb837e}, {}, {0x5}, {0x4, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x9385bfdeeabed80a}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x4, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x7}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x4}, {0x2}, {0x3}, {0x0, 0x1}, {0x5}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xe0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xa0, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x7c, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x8, 0x7, 0x20000000, 0x9, 0x6}, 0x4, 0x5, [{0xd, 0x3, 0x8, 0x0, 0x0, 0x7}, {0x6, 0x7, 0x715b141b, 0x1ff, 0x9, 0x20000000}, {0x4, 0x9, 0x2208, 0x8, 0x401, 0x5}, {0x6, 0x2, 0x2, 0xffffffff, 0x2, 0x400}, {0xef, 0x2, 0x0, 0x4, 0xfff, 0xfffffff8}, {0x180, 0x10, 0x7, 0x4, 0x5, 0x9}, {0xffffffae, 0x2, 0x30539eca, 0x1000, 0x4, 0x2}, {0x5, 0xe7, 0x7, 0x81, 0x1, 0x3}]}, [{0x4, 0x0, 0x3, 0x2, 0x5}, {0x6, 0x3, 0x4, 0x4, 0xb14, 0x6}, {0x797, 0x5620, 0x5, 0xf, 0xac, 0xba}, {0x0, 0x1, 0x3, 0xdcd, 0x60000, 0x3}, {0xb, 0x5, 0x5, 0x8001, 0xfa, 0xcf}, {0x600000, 0x0, 0x8fe, 0x7, 0x5, 0x7}, {0x700000, 0x800, 0x7, 0x3, 0x2, 0x200}, {0xc, 0xfffffff1, 0x45, 0xd, 0x8, 0xffff}, {0x3, 0x2, 0x10001, 0x1, 0x400, 0x4}, {0x6, 0x5, 0x9, 0x7, 0x0, 0x1}, {0x2, 0x8, 0xc0000000, 0x4, 0x0, 0x65e8d82c}, {0x800, 0x101, 0x80000001, 0x7, 0xffff, 0xffff6160}, {0x1, 0xfffff001, 0xfffffff9, 0x3b10, 0x5, 0x6f}, {0x3ff, 0x0, 0x7fffffff, 0x7, 0x1, 0x6}, {0x0, 0xf2d2, 0xa, 0x4, 0x1, 0xd}, {0xffff0001, 0x7ff, 0x9, 0x1ff, 0x3, 0x4}, {0x9, 0x9, 0x3, 0x1, 0x9ab6, 0x4}, {0xe, 0x213c, 0x40, 0x5, 0x0, 0xfffffe00}, {0x7, 0xb, 0x10, 0x4, 0x4, 0x4}, {0x85d1, 0x5, 0x3, 0x3, 0x5, 0x10000}, {0x2, 0x7ff, 0x8, 0x0, 0x5, 0x352d0188}, {0x4, 0x64eb1c72, 0x2, 0x77, 0x9, 0xd}, {0x8, 0x9, 0x10000, 0x10000, 0x2, 0x400}, {0x5, 0x5800000, 0x8, 0x4, 0x3, 0x4}, {0x4, 0x8, 0x0, 0x9, 0x9, 0x1}, {0x1, 0x1, 0x100, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x457c1355, 0x0, 0x6, 0x1}, {0x3, 0xdf7b, 0x6f, 0x4, 0x7, 0x2}, {0x1, 0x8, 0x8, 0x2, 0x6539, 0x8}, {0x2, 0x7, 0x7, 0x8, 0x22d85cb0, 0x1}, {0xfffffffa, 0x12, 0x8001, 0x9, 0x4000, 0x4}, {0x5, 0x80, 0x4000, 0x5608, 0x7, 0x2b}, {0x4, 0x31, 0x80000001, 0x60000, 0x7, 0x1}, {0x1, 0xe367, 0x3, 0x51a2, 0x100, 0x3}, {0x5fc, 0x80, 0x3, 0x5, 0x1, 0x7}, {0x80000000, 0xf7, 0xa70d, 0x9ba, 0x2, 0x8}, {0x141, 0x80000000, 0x1000, 0x3, 0x1, 0x6}, {0x2, 0x8, 0x3, 0x80000000, 0xc2, 0xff}, {0x9658, 0x1000, 0x7, 0x80000001, 0x7, 0x101}, {0x7f7ad3da, 0x10001, 0xc000, 0x9, 0x0, 0x5}, {0xd2, 0x0, 0x7fff, 0x2, 0x100, 0x4f}, {0xa, 0x1a, 0x7, 0x3, 0x2, 0xd8a}, {0x9, 0x0, 0x3, 0x0, 0xff, 0x7}, {0x54a9, 0x6, 0x76dd177, 0x6, 0x4, 0x2}, {0x2, 0x89, 0x0, 0x7, 0x4, 0x8}, {0x5, 0x9, 0x19a4, 0x6, 0x80, 0x8}, {0x9, 0x0, 0x6, 0x7504268, 0xf884, 0x4}, {0x2, 0x2, 0x1, 0x7ff, 0xff, 0xe14}, {0x8, 0x7, 0x37e4, 0xff, 0x5, 0x2}, {0x8d3, 0x4, 0x1, 0xf, 0x80, 0x2f2f905a}, {0x6, 0x1, 0xff, 0x10001, 0xc8a, 0x6}, {0x3, 0x7, 0x1f, 0x80000000, 0x3, 0x65}, {0x89420000, 0xffff, 0x1000, 0x80, 0x4, 0x401}, {0xf, 0x7f, 0xf, 0x42e, 0xfffff800, 0x6}, {0x1, 0x4, 0x400, 0xc, 0xfffffffd, 0x2}, {0x4, 0x10, 0x7f, 0x8, 0xffff, 0x1}, {0x100, 0xfc, 0x3, 0x6, 0xa, 0x3}, {0x3, 0xc, 0xa, 0x1, 0x2, 0x2}, {0x40, 0x2, 0x80000000, 0x100000, 0x65c, 0x2}, {0x81, 0x9, 0x4, 0xdd72, 0x2, 0x7fffffff}, {0x80ed, 0x6, 0x57, 0x2, 0x3, 0x9}, {0x401, 0x5, 0x800, 0x8, 0x8e, 0xb}, {0x9, 0x7df4, 0x6, 0xb, 0x95, 0x4}, {0x9, 0x7ecd, 0x623, 0xd, 0x7}, {0x5, 0x7, 0x3, 0x7, 0x6, 0x401}, {0xfff, 0x0, 0x1, 0xee, 0xfffffffa, 0x3}, {0x7, 0x8, 0xfff, 0x40, 0x6, 0x6}, {0xd, 0x2, 0x1, 0x3, 0x5}, {0xd8e, 0xfff, 0x0, 0x0, 0x821, 0x8}, {0x1, 0x0, 0x3e, 0x4, 0x0, 0x3}, {0xfffffff9, 0xfffffffa, 0x1, 0x1, 0xd, 0x7f}, {0xa, 0x7ff, 0xba8b, 0x48, 0x6, 0x6}, {0x6, 0x1, 0x10000, 0xa40d, 0x2}, {0x4, 0x6000000, 0xfffff800, 0x6, 0x11, 0x8}, {0x1, 0x3, 0x0, 0x8, 0x4fb, 0x7fffffff}, {0xfffffffe, 0x2, 0x49de1ceb, 0x3ff, 0x4, 0x9}, {0x3, 0x0, 0x3, 0x7f, 0x10, 0x10001}, {0x6, 0x7, 0x2, 0x0, 0xfff, 0x21b9}, {0x5c3, 0x7ff, 0x1, 0x9, 0x401}, {0xa44, 0x7ff, 0x4, 0x2, 0x9, 0xd0}, {0x100, 0x80000000, 0x8, 0x0, 0x4, 0x40}, {0x0, 0x6, 0x800, 0x10001, 0x1, 0xfff}, {0x3, 0x0, 0xe, 0xfffff3ba, 0x9, 0x7}, {0xffff, 0xc1, 0x6, 0x3, 0xbf, 0x255d}, {0xffff, 0x5, 0x9, 0x9, 0x9, 0x80000000}, {0x6, 0x9, 0xbc, 0x3, 0xfffffff9, 0x8001}, {0x55d, 0xe0, 0x44, 0x3, 0x5, 0xcf}, {0x4, 0xc0e, 0x1, 0x0, 0x6, 0x8}, {0xffffffff, 0x3, 0x6c, 0x0, 0x4, 0xf}, {0x1000, 0x2, 0x9, 0x8, 0x76, 0x48000000}, {0x7, 0x27, 0x8, 0x3, 0x7, 0x80000001}, {0xffffffff, 0x7, 0x7fffffff, 0x8c, 0x4, 0x1}, {0x7a45, 0xfce, 0x101, 0xc483, 0xffff, 0x1}, {0x5, 0x2, 0x1c8, 0x8001, 0x7, 0xf4b}, {0x1, 0x40, 0xfffffff7, 0x6, 0xb, 0x8001}, {0x9, 0x9, 0xc0000, 0xfffffff3, 0x46, 0x9}, {0x7ff, 0xfff, 0x8, 0x8, 0x401}, {0xfff, 0xb8, 0x4, 0x6, 0x5, 0x6}, {0x5, 0x8, 0x7, 0x602, 0x6, 0x6f}, {0xc, 0x3, 0x0, 0x3, 0x1, 0xd}, {0x2, 0x1, 0x200, 0x401, 0x6, 0xbed}, {0xa34a, 0x100, 0x7, 0x101, 0x0, 0x8}, {0x5, 0x1, 0x4, 0xf, 0x80000000, 0xfa4}, {0x7, 0x0, 0x7fff, 0x5, 0x0, 0x9e6f}, {0x6, 0x1, 0x7, 0x1, 0x0, 0x8}, {0xf029, 0x1, 0x1, 0x1000, 0x5, 0x2}, {0x0, 0x4, 0x9, 0x1800, 0xfffffff0, 0x6}, {0x8, 0x3, 0x4, 0x3, 0x0, 0x5}, {0x700, 0x31, 0x5, 0x7, 0x6349, 0x8}, {0x400, 0x0, 0x1, 0x7, 0x6, 0x2}, {0x7, 0x9, 0xfffffff8, 0x3, 0x8, 0x8}, {0x2, 0x8fe, 0xc785, 0x40000000, 0x85e4, 0xa48}, {0xb, 0x0, 0xffffffff, 0x10, 0xfffffffb, 0xfffffffa}, {0xa9c, 0x5, 0x1, 0x1, 0x800000, 0x80000001}, {0x5, 0x3, 0x8, 0x5, 0x5c4f8afd, 0x1}, {0x8, 0xd, 0x9, 0x100, 0x6, 0x6}, {0x2, 0x5, 0x6, 0x7dc8, 0x3, 0x8}, {0x8000, 0xae, 0xa0, 0x0, 0x1, 0x8}, {0x4, 0x8, 0x8, 0x1, 0x800, 0x8001}, {0x3, 0x9847, 0xfff, 0x10000, 0x1, 0x3ff}, {0xd, 0x6, 0x8, 0xf, 0x80000001, 0x2}, {0x5, 0x2, 0x0, 0x7, 0x1ff, 0x4}, {0x7fffffff, 0x7fff, 0xffffffff, 0xc, 0xc, 0x1}, {0xfff, 0x22cb17f9, 0x9, 0x4, 0x5, 0x200000}, {0xfffffffc, 0xc, 0x5, 0x0, 0x3, 0x100}, {0xfb57, 0xfffffffe, 0x34, 0xfffffffe, 0x6, 0x8}, {0x4, 0x9, 0x80000001, 0x2, 0xf, 0x7ff}, {0x20, 0x7, 0xc, 0x80000000, 0xffff, 0x2}], [{0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x4}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1, 0x1}, {0x1}, {0x6f4a361317acd39c}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0xaaa691ed14521fc5}, {0x5, 0x1}, {0x1}, {0x4}, {}, {0xdcacc83b4f426f3c, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}]}}]}, {0x65, 0x6, "dd4e01f81d7c0b9fbfa2869a9dd141fb28144f9c103062d650effdbd6fcc86ab1bdb785c7065137cd6eeebe4cb5d4f78f1de7782d47639b17326eba697400765532205d1575920c7cf871ca9fa1ebcff83aa8d778e6e62a127135d1a5d31fd6987"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x9c, 0x7, 0x0, 0x0, {{0xa}, {0x8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}]}, {0x6b, 0x6, "57b2708ea602282c34f7ec050b83f0c5f392e3e3f621007cbcc6cb4d505f6eff12b9f57fff3cb31f1c33c00ffc10c12042729854d78bed75caf916bce99358c78f721189bc017dd81eaa126a7870e7db511a8c5af70770c7e49ce5a644766234dd8dd0325124c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x502c}}, 0x0) 3.08519377s ago: executing program 1 (id=2522): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$netlink(0x10, 0x3, 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0xfb00, 0x1a, &(0x7f0000000a00)={0x2, &(0x7f0000000940)=[{0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3.082067059s ago: executing program 3 (id=2523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x10, 0x803, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x24004881}, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xf, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x3, 0xae3, 0x6361, 0x5, 0xffffffff, 0x7fffffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x24c, 0x4000000, 0x2}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x9242}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.045950726s ago: executing program 0 (id=2524): openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tgkill(0x0, 0x0, 0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xe, 0x4, 0x7, 0x6, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x3, 0x5, 0x0, 0x4], 0x8000000, 0x3c4200}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000003c0)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0xfffffffffffff806, 0x6, 0x7, 0x3, 0x6, 0x9}) 2.045040392s ago: executing program 4 (id=2525): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x410002) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x70, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x10}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) 2.041212599s ago: executing program 1 (id=2526): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x14, 0x33, 0x107, 0xfffffffe, 0x4, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0xc000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0) syz_usb_connect$midi(0x0, 0xce, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1604, 0x8007, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x1, 0x1, 0x81, 0x90, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0xa, [@ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0x17, 0x24, 0x3, 0x1, 0xa, 0x8, [{0x9, 0x4}, {0x8, 0x8}, {0x4, 0xe8}, {0x0, 0xf}, {0x80}, {0x57, 0x3}, {0xbd, 0x94}, {0x7, 0x1}], 0x2}, @ms_header={0x7, 0x24, 0x1, 0xd, 0x7}], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x0, 0x63, 0xa, {0x5, 0x25, 0x1, 0x1, "05"}}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x5, 0x9, 0x4, {0xb, 0x25, 0x1, 0x7, "1267f0b8270767"}}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7, 0x7a, 0x3, {0x12, 0x25, 0x1, 0xe, "98f40c1487bd79db7921f5cf78c7"}}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x40, 0xf9, 0x2, {0xb, 0x25, 0x1, 0x7, "1bdff110c90123"}}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x7, 0x8, 0x5, {0xe, 0x25, 0x1, 0xa, "f0b90d8ff164c026d88a"}}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x1, 0x1, {0xd, 0x25, 0x1, 0x9, "08fdea70314cd780d9"}}}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x6, 0x1, 0x6, 0xdf, 0xc}, 0x32, &(0x7f0000000140)={0x5, 0xf, 0x32, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x200, 0xf00, 0x6, [0x3f00, 0x1e, 0x1fe3f00, 0xc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x6, 0x0, 0xfff}]}}) r4 = syz_open_dev$video4linux(&(0x7f0000000180), 0x4, 0x181001) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r5, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x100, 0x6, 0x1010, 0x3, 0x9, 0x7}}) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x1012, 0x4, 0x6, 0x0, 0x5, 0x4}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xed) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x7}, [{0x2, 0x4}], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) syz_usb_control_io(r7, &(0x7f0000000180)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r7, 0x81, 0x2, &(0x7f0000000bc0)="9148") syz_open_dev$I2C(&(0x7f0000000340), 0x0, 0x0) close(0x3) 1.90798159s ago: executing program 4 (id=2527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x24004881}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.838888914s ago: executing program 3 (id=2528): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a0000", 0x21}], 0x1) 1.705827108s ago: executing program 4 (id=2529): arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x40}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) 1.645408661s ago: executing program 3 (id=2530): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d8010203010902"], 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000680)={{}, {0x0, 0x3938700}}, &(0x7f00000006c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x4, 0x40000) openat$ttyprintk(0xffffff9c, 0x0, 0x20000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x83) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000080)) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='-', @ANYRESOCT=r6, @ANYRES8=r2, @ANYBLOB="d319e9298d2982b70327b70f51c5bbd019b9bfe7b07c465b311d9ed6716a8f5459fb5184b1800d7540a249603f640296a343d61ae08706cb3c02d64b5616d9ba8b71551f1e27aef9a7ce5238d02a12dea9c31435172eeb69b7cab61837ebe77d49367774e139338e0f81c79ac36092b5b9c8976166180dd7809ad4e02af979d732611adf953843269b8915f24c723f5b9a1b7d51302027fed10508934aca6b94a1a750877ea6f9876f026e6ae26afbe7499fa9180013bbd479acf6bdad755e02fde66aa1f237a552e95e1481df", @ANYRESDEC=r6, @ANYRES32=r6], 0x27) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20008040) pwrite64(r1, &(0x7f00000002c0)="b6f62ccf4b25c602eab7de1e3f8ecf458927d01c53d01615524caf98a99ca3717448c7876ee18b29090ce203ed73abe019faafc47608d1aea5273cddc6288b1aab6d67a2e75b49e7a5026a975e80fdea436207d378f15ce71dfd614b160c9549a461f56f087e9eb45b5addc6a9d46cafcf9db33eaa62df6373360ba99d0600d1cbe2d44140f98bcea9bafe6a8ce8cae7b91875c855e07c63a2947afc12eaa85e35ab625b2b49d38c26332121d466281ece035eb590ca9aa94906ee6bd5413ef48ad8c4c1b12844583feb3d4d06975885ff5749420f26be73b92c4ca5f977c8e5071049e2d56df5b0611573be4d91e8928d11094f2639ece1ac", 0xf9, 0xfffffffffffffffd) 699.476412ms ago: executing program 4 (id=2531): socket(0x28, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x42081, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x49) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x11240, 0x0, {0x77359400}, {0x7, 0x2, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) recvmmsg(r0, &(0x7f0000005400)=[{{&(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x6}, {{&(0x7f0000001640)=@hci, 0x80, &(0x7f0000002780)=[{&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/169, 0xa9}], 0x2, &(0x7f00000027c0)=""/121, 0x79}, 0x63}, {{&(0x7f0000002840)=@nl=@proc, 0x80, &(0x7f0000002c80)=[{&(0x7f00000028c0)=""/170, 0xaa}, {&(0x7f0000002980)=""/9, 0x9}, {&(0x7f00000029c0)=""/56, 0x38}, {&(0x7f0000002a00)=""/18, 0x12}, {&(0x7f0000002a40)=""/156, 0x9c}, {&(0x7f0000002b00)=""/22, 0x16}, {&(0x7f0000002b40)=""/152, 0x98}, {&(0x7f0000002c00)=""/90, 0x5a}], 0x8, &(0x7f0000002d00)=""/82, 0x52}, 0xb9e6}, {{&(0x7f0000002d80)=@nl, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002e00)=""/7, 0x7}, {&(0x7f0000002e40)=""/4, 0x4}, {&(0x7f0000002e80)=""/186, 0xba}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x4}, 0x10000}, {{&(0x7f0000003f80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004080)=[{&(0x7f0000004000)=""/109, 0x6d}], 0x1, &(0x7f00000040c0)=""/197, 0xc5}, 0x4}, {{&(0x7f00000041c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005300)=[{&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/178, 0xb2}], 0x2, &(0x7f0000005340)=""/173, 0xad}, 0x70}], 0x6, 0x102, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 644.15135ms ago: executing program 0 (id=2532): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000001200691081000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r1, &(0x7f0000001480)=""/83, 0x53, 0x1) timer_create(0x2, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES64=r1, @ANYRES64=r0, @ANYRES8=r2], 0xff2e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r4 = fanotify_init(0x0, 0x80000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) fanotify_mark(r4, 0x101, 0x8000011, r5, 0x0) ftruncate(r3, 0x6000004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x4000) 0s ago: executing program 2 (id=2533): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', 0x0}) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) (fail_nth: 4) kernel console output (not intermixed with test programs): 3842] bond_slave_1: entered promiscuous mode [ 711.966463][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.998834][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 712.090418][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.177165][T13851] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 712.320388][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.430429][ T139] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.650520][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.880719][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 713.941581][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 713.999910][ T5718] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 714.081506][T13878] lo speed is unknown, defaulting to 1000 [ 714.170443][ T5718] usb 1-1: Using ep0 maxpacket: 16 [ 714.183475][ T5718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.210434][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.245311][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.272984][ T5718] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 714.296645][ T5718] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.324323][ T5718] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 714.337714][ T5718] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 714.357471][ T5718] usb 1-1: Manufacturer: syz [ 714.379531][ T5718] usb 1-1: config 0 descriptor?? [ 714.700671][ T5718] rc_core: IR keymap rc-hauppauge not found [ 714.722453][ T5718] Registered IR keymap rc-empty [ 714.737969][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 714.780644][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 714.832490][ T5718] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 714.874357][ T5718] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input46 [ 714.936481][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.090415][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 715.960392][T11609] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 715.966525][T13563] Bluetooth: hci2: command 0x0401 tx timeout [ 716.060679][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 716.080469][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 716.100862][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 716.290485][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 716.310477][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 716.334785][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 716.370468][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 716.400956][ T5718] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 716.506376][ T5718] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 716.515528][ T5718] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 716.532243][ T1153] net_ratelimit: 12 callbacks suppressed [ 716.532257][ T1153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.574800][ T5718] usb 1-1: USB disconnect, device number 66 [ 716.605072][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 716.721918][ T1160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 717.062867][T13915] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 717.371745][ T139] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.050570][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.190451][ T5718] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 718.198074][ T139] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.320948][ T1160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.450402][ T5718] usb 5-1: Using ep0 maxpacket: 8 [ 718.450795][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.484905][ T5718] usb 5-1: config 0 has an invalid interface number: 124 but max is 0 [ 718.493280][ T5718] usb 5-1: config 0 has no interface number 0 [ 718.499942][ T5718] usb 5-1: config 0 interface 124 has no altsetting 0 [ 718.510923][ T5718] usb 5-1: New USB device found, idVendor=10d2, idProduct=e82c, bcdDevice=87.5e [ 718.520781][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.528909][ T5718] usb 5-1: Product: syz [ 718.534993][ T5718] usb 5-1: Manufacturer: syz [ 718.539889][ T5718] usb 5-1: SerialNumber: syz [ 718.559741][ T5718] usb 5-1: config 0 descriptor?? [ 718.590485][ T139] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.710639][ T139] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.812282][ T5718] usblcd 5-1:0.124: USBLCD model not supported. [ 718.840479][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.969543][ T5718] usb 5-1: USB disconnect, device number 72 [ 721.693524][ T57] net_ratelimit: 16 callbacks suppressed [ 721.694404][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.860726][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.980692][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 722.830778][ T1153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 723.045490][T13957] pim6reg: entered allmulticast mode [ 723.062399][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 723.220651][T13957] team0: entered allmulticast mode [ 723.231541][T13957] team_slave_0: entered allmulticast mode [ 723.237326][T13957] team_slave_1: entered allmulticast mode [ 723.243785][T13959] team0: left allmulticast mode [ 723.250452][T13959] team_slave_0: left allmulticast mode [ 723.256600][T13959] team_slave_1: left allmulticast mode [ 723.262797][T13959] pim6reg: left allmulticast mode [ 723.506066][T13963] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2188'. [ 723.541111][ T1153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 723.605327][T13969] ipt_REJECT: ECHOREPLY no longer supported. [ 724.164507][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.430422][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.560492][ T1038] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.681619][T13977] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 724.700255][ T1038] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.065270][ T6454] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 725.222662][ T6454] usb 4-1: Using ep0 maxpacket: 8 [ 725.248689][ T6454] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 725.264277][T13981] FAULT_INJECTION: forcing a failure. [ 725.264277][T13981] name failslab, interval 1, probability 0, space 0, times 0 [ 725.290391][ T6454] usb 4-1: config 0 has no interface number 0 [ 725.302089][ T6454] usb 4-1: config 0 interface 124 has no altsetting 0 [ 725.313827][T13981] CPU: 1 UID: 0 PID: 13981 Comm: syz.0.2192 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.313856][T13981] Tainted: [L]=SOFTLOCKUP [ 725.313862][T13981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 725.313871][T13981] Call Trace: [ 725.313877][T13981] [ 725.313885][T13981] dump_stack_lvl+0x100/0x190 [ 725.313909][T13981] should_fail_ex.cold+0x5/0xa [ 725.313932][T13981] ? __pfx_cgroup_show_path+0x10/0x10 [ 725.313954][T13981] should_failslab+0xc2/0x120 [ 725.313973][T13981] ? __pfx_cgroup_show_path+0x10/0x10 [ 725.313994][T13981] __kmalloc_cache_noprof+0x7a/0x6f0 [ 725.314018][T13981] ? cgroup_show_path+0xb2/0x730 [ 725.314039][T13981] ? find_held_lock+0x2b/0x80 [ 725.314059][T13981] ? __pfx_cgroup_show_path+0x10/0x10 [ 725.314080][T13981] cgroup_show_path+0xb2/0x730 [ 725.314104][T13981] ? __pfx_cgroup_show_path+0x10/0x10 [ 725.314124][T13981] kernfs_sop_show_path+0xe9/0x160 [ 725.314146][T13981] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 725.314167][T13981] show_path+0x9e/0x100 [ 725.314185][T13981] show_mountinfo+0x1d8/0x820 [ 725.314210][T13981] ? __pfx_show_mountinfo+0x10/0x10 [ 725.314232][T13981] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 725.314268][T13981] seq_read_iter+0xbce/0x1270 [ 725.314297][T13981] ? __pfx_seq_read_iter+0x10/0x10 [ 725.314319][T13981] vfs_read+0x825/0xb30 [ 725.314347][T13981] ? __pfx_vfs_read+0x10/0x10 [ 725.314383][T13981] ksys_read+0x12a/0x250 [ 725.314402][T13981] ? __pfx_ksys_read+0x10/0x10 [ 725.314423][T13981] ? rcu_is_watching+0x12/0xc0 [ 725.314453][T13981] do_syscall_64+0x115/0x870 [ 725.314476][T13981] ? clear_bhb_loop+0x40/0x90 [ 725.314498][T13981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.314516][T13981] RIP: 0033:0x7f3057b9ce59 [ 725.314531][T13981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.314548][T13981] RSP: 002b:00007f305899c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 725.314565][T13981] RAX: ffffffffffffffda RBX: 00007f3057e15fa0 RCX: 00007f3057b9ce59 [ 725.314577][T13981] RDX: 0000000000002020 RSI: 0000200000003480 RDI: 0000000000000004 [ 725.314587][T13981] RBP: 00007f305899c090 R08: 0000000000000000 R09: 0000000000000000 [ 725.314597][T13981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.314607][T13981] R13: 00007f3057e16038 R14: 00007f3057e15fa0 R15: 00007ffd7dd51568 [ 725.314633][T13981] [ 725.564372][ T6454] usb 4-1: New USB device found, idVendor=10d2, idProduct=e82c, bcdDevice=87.5e [ 725.574066][ T6454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.582840][ T6454] usb 4-1: Product: syz [ 725.587732][ T6454] usb 4-1: Manufacturer: syz [ 725.598906][ T6454] usb 4-1: SerialNumber: syz [ 725.666862][ T6454] usb 4-1: config 0 descriptor?? [ 725.752292][T13988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2196'. [ 725.966342][ T6454] usblcd 4-1:0.124: USBLCD model not supported. [ 726.273275][ T6454] usb 4-1: USB disconnect, device number 52 [ 726.864059][ T1038] net_ratelimit: 8 callbacks suppressed [ 726.864073][ T1038] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.010606][ T1038] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.120528][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.230380][ T1038] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.330462][ T5798] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 727.350561][ T1038] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.480444][ T3387] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.501171][ T5798] usb 2-1: Using ep0 maxpacket: 32 [ 727.509795][ T5798] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 727.525074][ T5798] usb 2-1: config 0 has no interface number 0 [ 727.543918][ T5798] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 727.575963][ T5798] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 727.600645][ T3387] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.618445][ T5798] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 727.645844][ T5798] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 727.687673][ T5798] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 727.710778][ T3387] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.738870][ T5798] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 727.788817][ T5798] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 727.890922][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.907930][ T5798] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 14444, setting to 1024 [ 728.744866][ T5798] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 728.755398][ T5798] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.826469][T14026] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 728.841979][ T5798] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 728.851608][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.893699][T14027] befs: (nbd4): No write support. Marking filesystem read-only [ 730.794178][ T5798] usb 2-1: Product: syz [ 730.822094][ T5798] usb 2-1: Manufacturer: syz [ 730.837056][ T5798] usb 2-1: SerialNumber: syz [ 730.917800][ T5798] usb 2-1: config 0 descriptor?? [ 730.928102][ T5798] usb 2-1: can't set config #0, error -71 [ 730.944173][ T5798] usb 2-1: USB disconnect, device number 85 [ 731.362891][T14062] lo speed is unknown, defaulting to 1000 [ 731.484438][T14068] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 731.572284][ T5798] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 731.892443][ T5798] usb 4-1: Using ep0 maxpacket: 16 [ 731.922718][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.934606][ T3387] net_ratelimit: 8 callbacks suppressed [ 731.934620][ T3387] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.963957][ T5798] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 731.980571][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.988621][ T5798] usb 4-1: Product: syz [ 731.992906][ T5798] usb 4-1: Manufacturer: syz [ 731.998742][ T5798] usb 4-1: SerialNumber: syz [ 732.009280][ T5798] usb 4-1: config 0 descriptor?? [ 732.025600][ T5798] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 732.089324][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.100452][ T5718] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 732.135763][T14069] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.143106][T14069] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 732.261750][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 732.273046][ T5718] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 732.294624][ T5718] usb 2-1: config 0 has no interface number 0 [ 732.314557][ T5718] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 732.351861][ T5718] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 732.410199][ T5718] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 732.439731][ T5718] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 732.471934][ T1160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.494113][ T6454] usb 4-1: USB disconnect, device number 53 [ 732.502269][ T5718] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 732.503333][ T3387] usb 4-1: Failed to submit usb control message: -71 [ 732.553403][ T3387] usb 4-1: unable to send the bmi data to the device: -71 [ 732.569395][ T5718] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 732.569416][ T3387] usb 4-1: unable to get target info from device [ 732.585981][ T5718] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 732.593412][ T1160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.596473][ T5718] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 14444, setting to 1024 [ 732.614733][ T5718] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 732.625049][ T5718] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.639957][ T5718] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 732.649239][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.657367][ T5718] usb 2-1: Product: syz [ 732.661688][ T5718] usb 2-1: Manufacturer: syz [ 732.667777][ T5718] usb 2-1: SerialNumber: syz [ 732.667787][ T3387] usb 4-1: could not get target info (-71) [ 732.689248][ T5718] usb 2-1: config 0 descriptor?? [ 732.699450][T14072] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 732.706853][T14072] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 732.716620][ T5718] usb 2-1: will this work? Response EP is not usually 3 [ 732.724020][ T5718] usb 2-1: will this work? Image data EP is not usually 2 [ 732.734004][ T5718] scsi host1: microtekX6 [ 732.751012][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.760935][ T3387] usb 4-1: could not probe fw (-71) [ 732.870461][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.261729][ T1038] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.291435][T14098] netlink: 'syz.4.2225': attribute type 2 has an invalid length. [ 733.341878][ T30] audit: type=1400 audit(1780687586.309:1633): avc: denied { connect } for pid=14097 comm="syz.4.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 733.381944][ T1038] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.511110][ T1038] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.646952][T14108] netlink: 'syz.2.2227': attribute type 7 has an invalid length. [ 733.699281][T14108] netlink: 'syz.2.2227': attribute type 8 has an invalid length. [ 734.384537][ T30] audit: type=1400 audit(1780687587.329:1634): avc: denied { mounton } for pid=14114 comm="syz.4.2230" path="/427/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 734.740650][ T5718] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 734.963031][ T5718] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 735.047764][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.290649][T11609] Bluetooth: hci4: command 0x0406 tx timeout [ 735.309187][ T5718] usb 5-1: config 0 descriptor?? [ 735.423812][T14122] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 735.843679][ T5718] pwc: Samsung MPC-C10 USB webcam detected. [ 736.308627][ T6454] usb 2-1: USB disconnect, device number 86 [ 736.334935][ T5718] pwc: send_video_command error -71 [ 736.353453][ T5718] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 736.366660][ T5718] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 736.413438][ T5718] usb 5-1: USB disconnect, device number 73 [ 736.501026][T12463] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 736.532438][T14137] hsr0: entered promiscuous mode [ 736.950840][ T1160] net_ratelimit: 25 callbacks suppressed [ 736.950857][ T1160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.070578][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.107355][ T30] audit: type=1400 audit(1780687590.069:1635): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 737.716416][ T1160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.732753][T14136] hsr0: left promiscuous mode [ 737.832308][ T3387] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.990535][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.264193][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.560523][ T5718] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 738.631286][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.720426][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 738.732772][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.760781][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.827165][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.869872][ T5718] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 738.899090][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.920574][ T1038] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.932870][ T5718] usb 1-1: config 0 descriptor?? [ 738.949908][ T5718] hub 1-1:0.0: USB hub found [ 739.050404][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 739.346781][ T5718] hub 1-1:0.0: 1 port detected [ 740.894584][ T5718] hub 1-1:0.0: activate --> -90 [ 741.107403][ T6454] usb 1-1: USB disconnect, device number 67 [ 741.113511][ T5718] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 742.013919][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.023093][ T1160] net_ratelimit: 15 callbacks suppressed [ 742.023103][ T1160] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.046607][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.449668][T14197] FAULT_INJECTION: forcing a failure. [ 742.449668][T14197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.483653][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.572539][T14197] CPU: 1 UID: 0 PID: 14197 Comm: syz.1.2251 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.572569][T14197] Tainted: [L]=SOFTLOCKUP [ 742.572576][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 742.572586][T14197] Call Trace: [ 742.572592][T14197] [ 742.572600][T14197] dump_stack_lvl+0x100/0x190 [ 742.572625][T14197] should_fail_ex.cold+0x5/0xa [ 742.572650][T14197] _copy_from_user+0x2e/0xd0 [ 742.572673][T14197] kstrtouint_from_user+0xd6/0x1d0 [ 742.572698][T14197] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 742.572724][T14197] ? __lock_acquire+0x4a5/0x2630 [ 742.572758][T14197] proc_fail_nth_write+0x83/0x220 [ 742.572779][T14197] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 742.572806][T14197] vfs_write+0x2aa/0x1070 [ 742.572831][T14197] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 742.572853][T14197] ? __pfx_vfs_write+0x10/0x10 [ 742.572872][T14197] ? __fget_files+0x215/0x3d0 [ 742.572901][T14197] ? __fget_files+0x21f/0x3d0 [ 742.572931][T14197] ksys_write+0x12a/0x250 [ 742.572950][T14197] ? __pfx_ksys_write+0x10/0x10 [ 742.572968][T14197] ? exit_to_user_mode_loop+0xf3/0x670 [ 742.572993][T14197] ? rcu_is_watching+0x12/0xc0 [ 742.573021][T14197] do_syscall_64+0x115/0x870 [ 742.573043][T14197] ? clear_bhb_loop+0x40/0x90 [ 742.573064][T14197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.573082][T14197] RIP: 0033:0x7f13dd15d68e [ 742.573097][T14197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 742.573113][T14197] RSP: 002b:00007f13ddff0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 742.573130][T14197] RAX: ffffffffffffffda RBX: 00007f13ddff16c0 RCX: 00007f13dd15d68e [ 742.573142][T14197] RDX: 0000000000000001 RSI: 00007f13ddff10a0 RDI: 0000000000000004 [ 742.573152][T14197] RBP: 00007f13ddff1090 R08: 0000000000000000 R09: 0000000000000000 [ 742.573162][T14197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.573172][T14197] R13: 00007f13dd416128 R14: 00007f13dd416090 R15: 00007ffcea76a128 [ 742.573197][T14197] [ 742.905730][ T1153] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.025408][ T3387] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.140597][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.391473][T14216] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 743.892553][T14213] syz.4.2257 (14213): attempted to duplicate a private mapping with mremap. This is not supported. [ 744.101522][T14217] pim6reg: entered allmulticast mode [ 744.130893][T14218] team0: entered allmulticast mode [ 744.145660][T13563] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 744.158908][T14218] team_slave_0: entered allmulticast mode [ 744.178977][T13563] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 744.190210][T13563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 744.191186][T14218] team_slave_1: entered allmulticast mode [ 744.198024][T13563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 744.211385][T13563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 744.282643][T14220] team0: left allmulticast mode [ 744.309830][T14220] team_slave_0: left allmulticast mode [ 744.319361][T14220] team_slave_1: left allmulticast mode [ 744.341287][T14220] pim6reg: left allmulticast mode [ 744.573581][ T6432] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 744.599287][ T5617] syz_tun (unregistering): left allmulticast mode [ 744.640983][ T3387] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 744.754702][ T6432] usb 5-1: unable to get BOS descriptor or descriptor too short [ 744.776372][ T6432] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.786947][ T3387] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.817139][ T6432] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 744.841420][ T6432] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 744.854652][ T6432] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 744.868339][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 744.877960][ T6432] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 744.910599][ T6432] usb 5-1: config 1 interface 1 has no altsetting 0 [ 744.925110][ T6432] usb 5-1: string descriptor 0 read error: -22 [ 744.932940][ T6432] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 744.951545][ T6432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.998389][ T3387] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.111955][ T3387] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.186879][ T6432] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 745.231500][ T1038] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.258217][T14223] lo speed is unknown, defaulting to 1000 [ 745.382071][T12463] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 746.159947][ T3387] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.251028][T10239] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 746.261294][T13563] Bluetooth: hci5: command tx timeout [ 746.282294][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2263'. [ 746.340641][T14246] xt_connbytes: Forcing CT accounting to be enabled [ 746.367891][T14246] set match dimension is over the limit! [ 746.369025][ T6432] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 746.383487][ T6430] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 746.476711][ T6432] usb 5-1: USB disconnect, device number 74 [ 746.581389][ T6430] usb 2-1: Using ep0 maxpacket: 32 [ 746.597349][ T6430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.620922][ T6430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.646873][ T6430] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 746.670073][ T6430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.698354][ T6430] usb 2-1: config 0 descriptor?? [ 746.714187][ T6430] hub 2-1:0.0: USB hub found [ 746.782294][ T3387] bridge_slave_1: left allmulticast mode [ 746.789661][ T3387] bridge_slave_1: left promiscuous mode [ 746.801147][ T3387] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.813802][ T3387] bridge_slave_0: left allmulticast mode [ 746.824429][ T3387] bridge_slave_0: left promiscuous mode [ 746.831718][ T3387] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.837128][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2264'. [ 746.915905][ T6430] hub 2-1:0.0: 1 port detected [ 747.823291][T14267] random: crng reseeded on system resumption [ 747.837399][ T6454] hub 2-1:0.0: activate --> -90 [ 747.978293][ T30] audit: type=1400 audit(1780687600.919:1636): avc: denied { write } for pid=14249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.344340][T13563] Bluetooth: hci5: command tx timeout [ 748.868507][ T3387] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 748.893945][ T30] audit: type=1400 audit(1780687601.829:1637): avc: denied { write } for pid=14271 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.922441][ T6454] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 748.958996][ T3387] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 749.201088][ T6454] usb 2-1: USB disconnect, device number 87 [ 749.239817][ T3387] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 749.288186][ T3387] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 749.297666][ T3387] bridge0 (unregistering): left promiscuous mode [ 749.490513][ T5726] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 749.553605][ T3387] bond4 (unregistering): (slave bond0): Releasing active interface [ 749.564053][ T3387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.572951][ T3387] bond_slave_0: left promiscuous mode [ 749.579592][ T3387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.588495][ T3387] bond_slave_1: left promiscuous mode [ 749.596149][ T3387] bond0 (unregistering): (slave team0): Releasing backup interface [ 749.604460][ T3387] team0: left promiscuous mode [ 749.609203][ T3387] team_slave_0: left promiscuous mode [ 749.614734][ T3387] team_slave_1: left promiscuous mode [ 749.622341][ T3387] bond0 (unregistering): Released all slaves [ 749.631410][ T3387] bond1 (unregistering): Released all slaves [ 749.640356][ T5726] usb 2-1: Using ep0 maxpacket: 8 [ 749.647900][ T3387] bond2 (unregistering): (slave bond3): Releasing backup interface [ 749.657335][ T3387] bond2 (unregistering): Released all slaves [ 749.665654][ T5726] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 749.679801][ T3387] bond3 (unregistering): Released all slaves [ 749.685857][ T5726] usb 2-1: config 0 has no interface number 0 [ 749.693392][ T5726] usb 2-1: config 0 interface 124 has no altsetting 0 [ 749.705037][ T3387] bond4 (unregistering): Released all slaves [ 749.715378][ T5726] usb 2-1: New USB device found, idVendor=10d2, idProduct=e82c, bcdDevice=87.5e [ 749.728955][ T3387] bond5 (unregistering): Released all slaves [ 749.734981][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.747522][ T5726] usb 2-1: Product: syz [ 749.764920][ T5726] usb 2-1: Manufacturer: syz [ 749.780086][ T5726] usb 2-1: SerialNumber: syz [ 749.805182][ T5726] usb 2-1: config 0 descriptor?? [ 749.818574][T14256] hsr_slave_1 (unregistering): left promiscuous mode [ 749.842017][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 749.909529][T14273] lo speed is unknown, defaulting to 1000 [ 750.469492][T13563] Bluetooth: hci5: command tx timeout [ 750.643327][ T5726] usblcd 2-1:0.124: USBLCD model not supported. [ 750.695650][T14296] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 751.002351][ T5726] usb 2-1: USB disconnect, device number 88 [ 751.074920][T14290] syz_tun: refused to change device tx_queue_len [ 751.081671][T14290] net_ratelimit: 2 callbacks suppressed [ 751.081685][T14290] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 751.106810][T14294] syz_tun: refused to change device tx_queue_len [ 751.113507][T14294] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 751.955674][ T30] audit: type=1400 audit(1780687604.919:1638): avc: denied { write } for pid=14298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.275104][ T30] audit: type=1400 audit(1780687605.199:1639): avc: denied { write } for pid=14319 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.610279][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 752.660392][T11609] Bluetooth: hci5: command tx timeout [ 752.830409][ T5726] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 753.000936][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 753.021314][ T3387] hsr_slave_0: left promiscuous mode [ 753.032920][ T5726] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 753.045639][ T5726] usb 1-1: config 0 has no interface number 0 [ 753.051903][ T3387] hsr_slave_1: left promiscuous mode [ 753.058808][ T3387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.067162][ T5726] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 753.078468][ T3387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.085945][ T5726] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 753.098188][ T3387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.106558][ T3387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.115484][ T5726] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 753.128639][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.156924][ T5726] usb 1-1: Product: syz [ 753.165162][ T3387] veth1_macvtap: left promiscuous mode [ 753.171527][ T5726] usb 1-1: Manufacturer: syz [ 753.177024][ T5726] usb 1-1: SerialNumber: syz [ 753.209400][ T30] audit: type=1400 audit(1780687606.169:1640): avc: denied { name_bind } for pid=14333 comm="syz.1.2275" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 753.234583][ T5726] usb 1-1: config 0 descriptor?? [ 753.244197][ T3387] veth0_macvtap: left promiscuous mode [ 753.246781][T14326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 753.262248][T14326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 753.276954][ T3387] veth1_vlan: left promiscuous mode [ 753.303964][ T3387] veth0_vlan: left promiscuous mode [ 753.503415][T14326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 753.518606][T14326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 753.825634][ T5726] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 753.879354][ T5726] asix 1-1:0.34: probe with driver asix failed with error -32 [ 754.085594][ T30] audit: type=1400 audit(1780687607.049:1641): avc: denied { write } for pid=14332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.177076][ T30] audit: type=1400 audit(1780687607.139:1642): avc: denied { write } for pid=14353 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.297226][ T3387] team0 (unregistering): Port device team_slave_1 removed [ 754.319294][ T3387] team0 (unregistering): Port device team_slave_0 removed [ 754.474861][T14360] FAULT_INJECTION: forcing a failure. [ 754.474861][T14360] name failslab, interval 1, probability 0, space 0, times 0 [ 754.487909][T14360] CPU: 0 UID: 0 PID: 14360 Comm: syz.1.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.487936][T14360] Tainted: [L]=SOFTLOCKUP [ 754.487943][T14360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 754.487954][T14360] Call Trace: [ 754.487960][T14360] [ 754.487967][T14360] dump_stack_lvl+0x100/0x190 [ 754.487992][T14360] should_fail_ex.cold+0x5/0xa [ 754.488017][T14360] should_failslab+0xc2/0x120 [ 754.488038][T14360] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 754.488065][T14360] ? __alloc_skb+0x140/0x710 [ 754.488090][T14360] ? __alloc_skb+0x5b7/0x710 [ 754.488118][T14360] __alloc_skb+0x140/0x710 [ 754.488142][T14360] ? __alloc_skb+0x5b7/0x710 [ 754.488171][T14360] ? __pfx___alloc_skb+0x10/0x10 [ 754.488202][T14360] netlink_alloc_large_skb+0x69/0x150 [ 754.488227][T14360] netlink_sendmsg+0x680/0xda0 [ 754.488253][T14360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.488273][T14360] ? __pfx___might_fault+0x10/0x10 [ 754.488308][T14360] ____sys_sendmsg+0x9e1/0xb70 [ 754.488327][T14360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.488351][T14360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.488382][T14360] ___sys_sendmsg+0x190/0x1e0 [ 754.488406][T14360] ? __pfx____sys_sendmsg+0x10/0x10 [ 754.488457][T14360] __sys_sendmsg+0x170/0x220 [ 754.488485][T14360] ? __pfx___sys_sendmsg+0x10/0x10 [ 754.488522][T14360] ? rcu_is_watching+0x12/0xc0 [ 754.488552][T14360] do_syscall_64+0x115/0x870 [ 754.488575][T14360] ? clear_bhb_loop+0x40/0x90 [ 754.488597][T14360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.488615][T14360] RIP: 0033:0x7f13dd19ce59 [ 754.488630][T14360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.488647][T14360] RSP: 002b:00007f13ddff1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.488664][T14360] RAX: ffffffffffffffda RBX: 00007f13dd416090 RCX: 00007f13dd19ce59 [ 754.488676][T14360] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 754.488686][T14360] RBP: 00007f13ddff1090 R08: 0000000000000000 R09: 0000000000000000 [ 754.488697][T14360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.488707][T14360] R13: 00007f13dd416128 R14: 00007f13dd416090 R15: 00007ffcea76a128 [ 754.488731][T14360] [ 754.852434][T14223] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.860056][T14223] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.869032][T14223] bridge_slave_0: entered allmulticast mode [ 754.885023][T14223] bridge_slave_0: entered promiscuous mode [ 754.907987][T14223] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.915286][T14223] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.924189][T14223] bridge_slave_1: entered allmulticast mode [ 754.938933][T14223] bridge_slave_1: entered promiscuous mode [ 755.266444][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 755.317938][T14223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.352970][T14223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.491073][ T6454] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 755.534116][T14223] team0: Port device team_slave_0 added [ 755.564086][T14223] team0: Port device team_slave_1 added [ 755.612398][T14223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.619402][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.647286][T14223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.661170][ T5726] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 755.666211][ T6454] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 755.675924][ T3387] IPVS: stop unused estimator thread 0... [ 755.685396][ T6454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.694559][T14223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.703930][ T6454] usb 2-1: Product: syz [ 755.708142][ T6454] usb 2-1: Manufacturer: syz [ 755.717747][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.732916][ T30] audit: type=1400 audit(1780687608.699:1643): avc: denied { write } for pid=14368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.743835][ T6454] usb 2-1: SerialNumber: syz [ 755.745136][T14223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.783725][ T6454] usb 2-1: config 0 descriptor?? [ 755.853013][ T5726] usb 5-1: Using ep0 maxpacket: 8 [ 755.859574][ T5726] usb 5-1: config 0 has an invalid interface number: 124 but max is 0 [ 755.868061][ T5726] usb 5-1: config 0 has no interface number 0 [ 755.879310][ T5726] usb 5-1: config 0 interface 124 has no altsetting 0 [ 755.890168][ T5726] usb 5-1: New USB device found, idVendor=10d2, idProduct=e82c, bcdDevice=87.5e [ 755.900528][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.911264][ T5726] usb 5-1: Product: syz [ 755.922858][ T5726] usb 5-1: Manufacturer: syz [ 755.929617][T14223] hsr_slave_0: entered promiscuous mode [ 755.936845][ T5726] usb 5-1: SerialNumber: syz [ 755.945967][T14223] hsr_slave_1: entered promiscuous mode [ 755.955361][ T5726] usb 5-1: config 0 descriptor?? [ 755.993339][ T30] audit: type=1400 audit(1780687608.949:1644): avc: denied { write } for pid=14380 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.028320][ T6454] usb 2-1: USB disconnect, device number 89 [ 756.108179][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 756.196682][ T5726] usblcd 5-1:0.124: USBLCD model not supported. [ 756.197340][ T6430] usb 1-1: USB disconnect, device number 68 [ 756.235653][ T5726] usb 5-1: USB disconnect, device number 75 [ 756.342876][ T6432] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 756.501753][ T6432] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 756.552579][ T6432] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 756.704373][T14398] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 757.023851][ T6432] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 757.035150][ T6432] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 757.044447][ T6432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.072759][T14382] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 758.504095][ T6432] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 758.517120][ T6432] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input47 [ 758.660186][ T30] audit: type=1400 audit(1780687611.619:1645): avc: denied { write } for pid=14392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 759.140401][ T30] audit: type=1326 audit(1780687612.059:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14381 comm="syz.3.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4759ce59 code=0x7ffc0000 [ 759.342684][ T30] audit: type=1326 audit(1780687612.059:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14381 comm="syz.3.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4759ce59 code=0x7ffc0000 [ 759.376346][ T30] audit: type=1326 audit(1780687612.069:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14381 comm="syz.3.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5a4759ce59 code=0x7ffc0000 [ 759.406713][ T30] audit: type=1326 audit(1780687612.069:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14381 comm="syz.3.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4759ce59 code=0x7ffc0000 [ 759.641818][ T30] audit: type=1326 audit(1780687612.069:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14381 comm="syz.3.2282" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4759ce59 code=0x7ffc0000 [ 759.670656][ T30] audit: type=1400 audit(1780687612.579:1651): avc: denied { write } for pid=14419 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.051058][T14420] befs: (nbd1): No write support. Marking filesystem read-only [ 760.514661][ T6454] usb 4-1: USB disconnect, device number 54 [ 760.520626][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 760.607486][T14432] befs: (nbd0): No write support. Marking filesystem read-only [ 761.083575][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 761.178288][T14446] syzkaller0: entered promiscuous mode [ 761.212645][T14446] syzkaller0: entered allmulticast mode [ 761.252004][T14446] FAULT_INJECTION: forcing a failure. [ 761.252004][T14446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.265337][ T30] audit: type=1400 audit(1780687614.199:1652): avc: denied { write } for pid=14431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.336186][T14223] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 761.349947][T14446] CPU: 0 UID: 0 PID: 14446 Comm: syz.3.2291 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.349974][T14446] Tainted: [L]=SOFTLOCKUP [ 761.349980][T14446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 761.349990][T14446] Call Trace: [ 761.349996][T14446] [ 761.350004][T14446] dump_stack_lvl+0x100/0x190 [ 761.350030][T14446] should_fail_ex.cold+0x5/0xa [ 761.350055][T14446] _copy_to_user+0x32/0xd0 [ 761.350079][T14446] simple_read_from_buffer+0xcb/0x170 [ 761.350103][T14446] proc_fail_nth_read+0x1af/0x230 [ 761.350123][T14446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 761.350144][T14446] ? rw_verify_area+0xce/0x6d0 [ 761.350162][T14446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 761.350181][T14446] vfs_read+0x1e4/0xb30 [ 761.350204][T14446] ? __pfx_vfs_read+0x10/0x10 [ 761.350222][T14446] ? __fget_files+0x215/0x3d0 [ 761.350250][T14446] ? __fget_files+0x21f/0x3d0 [ 761.350282][T14446] ksys_read+0x12a/0x250 [ 761.350301][T14446] ? __pfx_ksys_read+0x10/0x10 [ 761.350322][T14446] ? rcu_is_watching+0x12/0xc0 [ 761.350351][T14446] do_syscall_64+0x115/0x870 [ 761.350372][T14446] ? clear_bhb_loop+0x40/0x90 [ 761.350393][T14446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.350412][T14446] RIP: 0033:0x7f5a4755d68e [ 761.350428][T14446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 761.350446][T14446] RSP: 002b:00007f5a484f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 761.350463][T14446] RAX: ffffffffffffffda RBX: 00007f5a484f26c0 RCX: 00007f5a4755d68e [ 761.350476][T14446] RDX: 000000000000000f RSI: 00007f5a484f20a0 RDI: 0000000000000007 [ 761.350487][T14446] RBP: 00007f5a484f2090 R08: 0000000000000000 R09: 0000000000000000 [ 761.350497][T14446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.350508][T14446] R13: 00007f5a47816038 R14: 00007f5a47815fa0 R15: 00007fff33a761b8 [ 761.350533][T14446] [ 761.559616][T14223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 761.567044][T14223] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 761.575471][T14223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 761.582847][T14223] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 761.591503][T14223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 761.598910][T14223] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 761.606831][T14223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 761.639386][ T30] audit: type=1400 audit(1780687614.599:1653): avc: denied { write } for pid=14453 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.789695][T14223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.820768][T14223] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.890627][ T6432] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 761.912853][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.919910][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.017408][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.024500][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.050554][ T6432] usb 2-1: Using ep0 maxpacket: 8 [ 762.059946][ T6432] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 762.068524][ T6432] usb 2-1: config 0 has no interface number 0 [ 762.082725][ T6432] usb 2-1: config 0 interface 124 has no altsetting 0 [ 762.118963][ T6432] usb 2-1: New USB device found, idVendor=10d2, idProduct=e82c, bcdDevice=87.5e [ 762.129933][ T6432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.162761][ T6432] usb 2-1: Product: syz [ 762.188919][ T6432] usb 2-1: Manufacturer: syz [ 762.215124][ T6432] usb 2-1: SerialNumber: syz [ 762.223315][T14223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.250245][ T6432] usb 2-1: config 0 descriptor?? [ 762.513011][ T6432] usblcd 2-1:0.124: USBLCD model not supported. [ 762.627094][ T6432] usb 2-1: USB disconnect, device number 90 [ 763.342981][ T30] audit: type=1400 audit(1780687616.309:1654): avc: denied { write } for pid=14458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.715392][ T6454] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 763.890638][ T6454] usb 1-1: Using ep0 maxpacket: 8 [ 763.913071][ T6454] usb 1-1: config 0 has an invalid interface number: 124 but max is 0 [ 763.932647][ T6454] usb 1-1: config 0 has no interface number 0 [ 763.958579][ T6454] usb 1-1: config 0 interface 124 has no altsetting 0 [ 764.003403][ T6454] usb 1-1: New USB device found, idVendor=10d2, idProduct=e82c, bcdDevice=87.5e [ 764.033195][ T6454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.068431][ T6454] usb 1-1: Product: syz [ 764.087004][ T6454] usb 1-1: Manufacturer: syz [ 764.110223][ T6454] usb 1-1: SerialNumber: syz [ 764.142609][ T6454] usb 1-1: config 0 descriptor?? [ 764.220092][T14223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.378436][ T6454] usblcd 1-1:0.124: USBLCD model not supported. [ 764.445962][T14223] veth0_vlan: entered promiscuous mode [ 764.453635][ T6454] usb 1-1: USB disconnect, device number 69 [ 764.505760][T14223] veth1_vlan: entered promiscuous mode [ 764.519892][T14501] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 764.526409][T14501] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 764.542744][T14501] vhci_hcd vhci_hcd.0: Device attached [ 764.606275][T14223] veth0_macvtap: entered promiscuous mode [ 764.619339][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 764.619352][ T30] audit: type=1400 audit(1780687617.579:1656): avc: denied { write } for pid=14487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.653600][T14223] veth1_macvtap: entered promiscuous mode [ 764.671204][T14223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.689525][T14223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.695725][T14502] vhci_hcd: connection closed [ 764.698085][ T1160] vhci_hcd vhci_hcd.1: stop threads [ 764.721681][ T1160] vhci_hcd vhci_hcd.1: release socket [ 764.738508][T12463] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.739281][ T1160] vhci_hcd vhci_hcd.1: disconnect device [ 764.785196][T12463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.818525][T12463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.828356][T12463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.897917][ T30] audit: type=1400 audit(1780687617.819:1657): avc: denied { write } for pid=14506 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 765.215836][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.706753][T14515] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 766.033416][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.155081][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.170319][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.286570][ T30] audit: type=1400 audit(1780687619.229:1658): avc: denied { append } for pid=14521 comm="syz.0.2299" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 766.584478][T14532] xt_hashlimit: size too large, truncated to 1048576 [ 766.668376][ T6454] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 766.685103][ T30] audit: type=1400 audit(1780687619.619:1659): avc: denied { mounton } for pid=14223 comm="syz-executor" path="/root/syzkaller.Yz9SOB/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 766.993409][ T30] audit: type=1400 audit(1780687619.959:1660): avc: denied { mounton } for pid=14223 comm="syz-executor" path="/root/syzkaller.Yz9SOB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 767.198251][ T30] audit: type=1400 audit(1780687620.069:1661): avc: denied { mounton } for pid=14223 comm="syz-executor" path="/root/syzkaller.Yz9SOB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 767.315162][ T6454] usb 2-1: unable to get BOS descriptor or descriptor too short [ 767.331032][ T30] audit: type=1400 audit(1780687620.289:1662): avc: denied { mounton } for pid=14223 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 767.399618][ T6454] usb 2-1: config 1 has too many interfaces: 48, using maximum allowed: 32 [ 767.433622][ T6454] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.489387][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2303'. [ 767.524173][ T30] audit: type=1400 audit(1780687620.489:1663): avc: denied { write } for pid=14513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.637661][ T6454] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 48 [ 767.656012][T14549] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 768.131388][T14549] overlayfs: overlapping lowerdir path [ 768.166782][ T6454] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=47.86 [ 768.179026][ T6454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.435550][ T6454] usb 2-1: Product: syz [ 768.458402][ T6454] usb 2-1: Manufacturer: syz [ 768.482419][ T6454] usb 2-1: SerialNumber: syz [ 768.587468][ T30] audit: type=1400 audit(1780687621.539:1664): avc: denied { write } for pid=14556 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.624206][T14562] capability: warning: `syz.2.2304' uses deprecated v2 capabilities in a way that may be insecure [ 768.920645][T14570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.940558][ T5718] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 769.059613][T14570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.113121][T14571] pim6reg: entered allmulticast mode [ 769.135830][ T5797] usb 2-1: USB disconnect, device number 91 [ 769.179375][T14572] team0: entered allmulticast mode [ 769.219562][T14572] team_slave_0: entered allmulticast mode [ 769.228915][ T5718] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 769.277132][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 769.309867][T14572] team_slave_1: entered allmulticast mode [ 769.338591][ T5718] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 769.402341][T14568] team0: left allmulticast mode [ 769.407257][T14568] team_slave_0: left allmulticast mode [ 769.412800][T14568] team_slave_1: left allmulticast mode [ 769.418425][T14568] pim6reg: left allmulticast mode [ 769.441454][ T5718] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 769.499916][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.537543][ T5718] usb 3-1: Product: syz [ 769.545002][ T5718] usb 3-1: Manufacturer: syz [ 769.549972][ T5718] usb 3-1: SerialNumber: syz [ 769.824970][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2308'. [ 769.827416][ T5718] usb 3-1: config 0 descriptor?? [ 769.874211][T14567] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 769.986571][T14567] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 770.074138][ T5718] usb 3-1: ucan: probing device on interface #0 [ 770.422276][ T5718] usb 3-1: ucan: device protocol version 0 is not supported [ 770.438909][ T5718] usb 3-1: ucan: probe failed; try to update the device firmware [ 770.711233][T14610] FAULT_INJECTION: forcing a failure. [ 770.711233][T14610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.724325][T14610] CPU: 0 UID: 0 PID: 14610 Comm: syz.4.2314 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.724351][T14610] Tainted: [L]=SOFTLOCKUP [ 770.724357][T14610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 770.724367][T14610] Call Trace: [ 770.724373][T14610] [ 770.724380][T14610] dump_stack_lvl+0x100/0x190 [ 770.724403][T14610] should_fail_ex.cold+0x5/0xa [ 770.724428][T14610] _copy_from_user+0x2e/0xd0 [ 770.724450][T14610] get_user_ifreq+0xe7/0x250 [ 770.724469][T14610] sock_ioctl+0x467/0x6b0 [ 770.724491][T14610] ? __pfx_sock_ioctl+0x10/0x10 [ 770.724510][T14610] ? hook_file_ioctl_common+0x149/0x410 [ 770.724536][T14610] ? selinux_file_ioctl+0x13b/0x290 [ 770.724561][T14610] ? selinux_file_ioctl+0xb6/0x290 [ 770.724587][T14610] ? __pfx_sock_ioctl+0x10/0x10 [ 770.724609][T14610] __x64_sys_ioctl+0x18e/0x210 [ 770.724630][T14610] do_syscall_64+0x115/0x870 [ 770.724651][T14610] ? clear_bhb_loop+0x40/0x90 [ 770.724672][T14610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.724691][T14610] RIP: 0033:0x7f4fc719ce59 [ 770.724706][T14610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.724723][T14610] RSP: 002b:00007f4fc80ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.724740][T14610] RAX: ffffffffffffffda RBX: 00007f4fc7416180 RCX: 00007f4fc719ce59 [ 770.724752][T14610] RDX: 0000200000001440 RSI: 00000000000089ff RDI: 0000000000000005 [ 770.724762][T14610] RBP: 00007f4fc80ef090 R08: 0000000000000000 R09: 0000000000000000 [ 770.724773][T14610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.724783][T14610] R13: 00007f4fc7416218 R14: 00007f4fc7416180 R15: 00007ffdd335c1d8 [ 770.724811][T14610] [ 772.439891][ T6454] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 773.502958][ T5719] usb 3-1: USB disconnect, device number 8 [ 773.613475][ T30] audit: type=1400 audit(1780687626.579:1665): avc: denied { write } for pid=14579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.344911][ T30] audit: type=1400 audit(1780687627.269:1666): avc: denied { write } for pid=14625 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.497153][ T30] audit: type=1400 audit(1780687627.439:1667): avc: denied { setopt } for pid=14632 comm="syz.1.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 774.525558][T14635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2320'. [ 774.571395][ T30] audit: type=1400 audit(1780687627.509:1668): avc: denied { write } for pid=14632 comm="syz.1.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 774.649695][ T30] audit: type=1400 audit(1780687627.559:1669): avc: denied { read } for pid=14632 comm="syz.1.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 774.840477][ T6429] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 775.798226][ T6429] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 775.828803][ T6429] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.830468][ T30] audit: type=1400 audit(1780687628.789:1670): avc: denied { write } for pid=14628 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.864971][ T6429] usb 1-1: config 0 has no interface number 0 [ 775.886599][ T6429] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 775.937322][ T6429] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 775.970363][ T5719] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 775.970362][ T30] audit: type=1400 audit(1780687628.929:1671): avc: denied { lock } for pid=14655 comm="syz.2.2323" path="/dev/radio8" dev="devtmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 776.017403][ T6429] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 776.061449][ T6429] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 776.077726][ T6429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.104312][ T6429] usb 1-1: Product: syz [ 776.123225][ T6429] usb 1-1: Manufacturer: syz [ 776.136492][ T6429] usb 1-1: SerialNumber: syz [ 776.166401][ T6429] usb 1-1: config 0 descriptor?? [ 776.184390][T14640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.189614][ T5719] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 776.202003][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.214265][ T30] audit: type=1400 audit(1780687629.179:1672): avc: denied { map } for pid=14664 comm="syz.2.2324" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 776.259238][T14640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.300445][ T5719] usb 5-1: Product: syz [ 776.306971][ T30] audit: type=1400 audit(1780687629.209:1673): avc: denied { write } for pid=14669 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.310206][ T5719] usb 5-1: Manufacturer: syz [ 776.447505][ T5719] usb 5-1: SerialNumber: syz [ 776.475729][ T6429] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 776.491613][ T5719] usb 5-1: config 0 descriptor?? [ 776.502925][ T5719] hub 5-1:0.0: bad descriptor, ignoring hub [ 776.911998][ T6429] usb 1-1: USB disconnect, device number 70 [ 776.920702][ T5719] hub 5-1:0.0: probe with driver hub failed with error -5 [ 776.939064][ T5719] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 776.953798][ T5719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 776.982441][ T5719] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 776.996658][ T5719] usb 5-1: media controller created [ 777.014578][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.088635][ T5719] DVB: Unable to find symbol dib7000p_attach() [ 777.095083][ T5719] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 777.310767][ T5719] rc_core: IR keymap rc-dib0700-rc5 not found [ 777.318411][ T5719] Registered IR keymap rc-empty [ 777.326299][ T5719] dvb-usb: could not initialize remote control. [ 777.334386][ T5719] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 777.983099][T14693] ubi16: attaching mtd0 [ 778.158171][T14693] ubi16: scanning is finished [ 778.179608][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.191558][T14693] ubi16: empty MTD device detected [ 778.196760][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.285596][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.345029][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.238346][T14693] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 780.276552][T14693] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 780.292139][T14693] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 780.330145][T14693] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 780.344970][T14693] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 781.194204][T14693] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 781.243254][T14693] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 21158804 [ 781.308509][T14693] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 781.509826][T14726] pim6reg: entered allmulticast mode [ 781.710356][T14716] ubi16: background thread "ubi_bgt16d" started, PID 14716 [ 781.783791][T14724] team0: entered allmulticast mode [ 781.788933][T14724] team_slave_0: entered allmulticast mode [ 781.794718][T14724] team_slave_1: entered allmulticast mode [ 781.802142][T14724] team0: left allmulticast mode [ 781.806988][T14724] team_slave_0: left allmulticast mode [ 781.812460][T14724] team_slave_1: left allmulticast mode [ 781.817945][T14724] pim6reg: left allmulticast mode [ 782.954915][ T30] audit: type=1400 audit(1780687635.699:1674): avc: denied { read } for pid=14736 comm="syz.3.2338" path="socket:[40371]" dev="sockfs" ino=40371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 783.406087][T14661] usb 5-1: USB disconnect, device number 76 [ 783.504039][T14661] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 784.751437][T14661] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 785.260345][ T6432] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 785.290325][T14661] usb 4-1: Using ep0 maxpacket: 16 [ 785.301481][T14661] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 785.312773][T14661] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 785.323149][T14661] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 785.343692][T14661] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 785.353274][T14661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.362286][T14661] usb 4-1: Product: syz [ 785.367778][T14661] usb 4-1: Manufacturer: syz [ 785.372569][T14661] usb 4-1: SerialNumber: syz [ 785.379497][T14661] usb 4-1: config 0 descriptor?? [ 785.386694][T14747] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 785.393892][T14747] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 785.404835][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 785.411206][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 785.418054][T14661] port100 4-1:0.0: NFC: Could not get supported command types [ 785.426712][ T6432] usb 5-1: config 0 has no interfaces? [ 785.434508][ T6432] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 785.453713][ T6432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.470186][ T6432] usb 5-1: Product: syz [ 785.478555][ T6432] usb 5-1: Manufacturer: syz [ 785.488280][ T6432] usb 5-1: SerialNumber: syz [ 785.502851][ T6432] usb 5-1: config 0 descriptor?? [ 785.612936][T14746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.622006][T14746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.682645][T14747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.691385][T14747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.772083][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2344'. [ 786.802323][T14661] usb 4-1: USB disconnect, device number 56 [ 786.865185][ T30] audit: type=1400 audit(1780687639.829:1675): avc: denied { append } for pid=14768 comm="syz.3.2349" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 787.573893][ T30] audit: type=1400 audit(1780687640.499:1676): avc: denied { getopt } for pid=14765 comm="syz.1.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 787.600942][ T30] audit: type=1400 audit(1780687640.499:1677): avc: denied { nlmsg_write } for pid=14765 comm="syz.1.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 789.362715][T14780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2351'. [ 789.390136][T14780] FAULT_INJECTION: forcing a failure. [ 789.390136][T14780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.466564][T14780] CPU: 0 UID: 0 PID: 14780 Comm: syz.2.2351 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.466586][T14780] Tainted: [L]=SOFTLOCKUP [ 789.466590][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 789.466597][T14780] Call Trace: [ 789.466601][T14780] [ 789.466605][T14780] dump_stack_lvl+0x100/0x190 [ 789.466622][T14780] should_fail_ex.cold+0x5/0xa [ 789.466638][T14780] _copy_from_iter+0x1f4/0x1690 [ 789.466656][T14780] ? __pfx__copy_from_iter+0x10/0x10 [ 789.466670][T14780] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 789.466690][T14780] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 789.466707][T14780] skb_copy_datagram_from_iter+0x11f/0x720 [ 789.466727][T14780] packet_sendmsg+0x227e/0x5100 [ 789.466751][T14780] ? sock_has_perm+0x25a/0x2f0 [ 789.466765][T14780] ? __pfx_sock_has_perm+0x10/0x10 [ 789.466786][T14780] ? __pfx_packet_sendmsg+0x10/0x10 [ 789.466821][T14780] __sys_sendto+0x468/0x4b0 [ 789.466845][T14780] ? __pfx_packet_sendmsg+0x10/0x10 [ 789.466868][T14780] ? __pfx___sys_sendto+0x10/0x10 [ 789.466913][T14780] ? ksys_write+0x1ac/0x250 [ 789.466933][T14780] ? __pfx_ksys_write+0x10/0x10 [ 789.466955][T14780] __x64_sys_sendto+0xe0/0x1c0 [ 789.466979][T14780] ? do_syscall_64+0x90/0x870 [ 789.467001][T14780] ? lockdep_hardirqs_on+0x78/0x100 [ 789.467023][T14780] do_syscall_64+0x115/0x870 [ 789.467043][T14780] ? clear_bhb_loop+0x40/0x90 [ 789.467065][T14780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.467082][T14780] RIP: 0033:0x7fd5a6b9ce59 [ 789.467097][T14780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.467114][T14780] RSP: 002b:00007fd5a7a87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 789.467132][T14780] RAX: ffffffffffffffda RBX: 00007fd5a6e15fa0 RCX: 00007fd5a6b9ce59 [ 789.467143][T14780] RDX: 00000000000005b2 RSI: 0000200000000180 RDI: 0000000000000003 [ 789.467154][T14780] RBP: 00007fd5a7a87090 R08: 0000200000000140 R09: 0000000000000014 [ 789.467164][T14780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.467174][T14780] R13: 00007fd5a6e16038 R14: 00007fd5a6e15fa0 R15: 00007ffe7d05a138 [ 789.467199][T14780] [ 793.853598][T14811] pim6reg: entered allmulticast mode [ 793.925819][T14811] team0: entered allmulticast mode [ 793.931503][T14811] team_slave_0: entered allmulticast mode [ 793.937551][T14811] team_slave_1: entered allmulticast mode [ 793.990702][T14811] team0: left allmulticast mode [ 793.996026][T14811] team_slave_0: left allmulticast mode [ 794.001981][T14811] team_slave_1: left allmulticast mode [ 794.009498][T14811] pim6reg: left allmulticast mode [ 794.127786][ T5798] usb 5-1: USB disconnect, device number 77 [ 794.216987][T14815] tmpfs: Unknown parameter 'grpquotactl' [ 794.282646][ T30] audit: type=1400 audit(1780687647.249:1678): avc: denied { sys_module } for pid=14814 comm="syz.2.2361" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 794.533288][T14826] netlink: 'syz.3.2354': attribute type 12 has an invalid length. [ 794.541354][T14826] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2354'. [ 794.869131][T14831] evm: overlay not supported [ 796.888438][T14840] befs: (nbd2): No write support. Marking filesystem read-only [ 797.882417][ T5719] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 798.050396][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 798.058638][ T5719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.069973][ T5719] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 799.037874][ T5719] usb 2-1: string descriptor 0 read error: -71 [ 799.044205][ T5719] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 799.053355][ T30] audit: type=1400 audit(1780687651.009:1679): avc: denied { mount } for pid=14855 comm="syz.3.2372" name="/" dev="ramfs" ino=40579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 799.075733][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.086292][ T5719] usb 2-1: config 0 descriptor?? [ 799.229313][ T5719] usb 2-1: can't set config #0, error -71 [ 799.250955][ T5719] usb 2-1: USB disconnect, device number 92 [ 799.276515][ T30] audit: type=1326 audit(1780687652.239:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.1.2373" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13dd19ce59 code=0x0 [ 799.500184][T14866] FAULT_INJECTION: forcing a failure. [ 799.500184][T14866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.524137][T14866] CPU: 1 UID: 0 PID: 14866 Comm: syz.1.2373 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.524158][T14866] Tainted: [L]=SOFTLOCKUP [ 799.524162][T14866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 799.524169][T14866] Call Trace: [ 799.524173][T14866] [ 799.524177][T14866] dump_stack_lvl+0x100/0x190 [ 799.524194][T14866] should_fail_ex.cold+0x5/0xa [ 799.524210][T14866] _copy_from_user+0x2e/0xd0 [ 799.524224][T14866] seccomp_notify_addfd+0xfa/0x790 [ 799.524241][T14866] ? __pfx_seccomp_notify_addfd+0x10/0x10 [ 799.524260][T14866] ? tomoyo_path_number_perm+0x188/0x580 [ 799.524282][T14866] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 799.524296][T14866] seccomp_notify_ioctl+0x127/0x1080 [ 799.524314][T14866] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 799.524333][T14866] ? __pfx_seccomp_notify_ioctl+0x10/0x10 [ 799.524351][T14866] ? __fget_files+0x215/0x3d0 [ 799.524365][T14866] ? hook_file_ioctl_common+0x149/0x410 [ 799.524381][T14866] ? selinux_file_ioctl+0x13b/0x290 [ 799.524398][T14866] ? selinux_file_ioctl+0xb6/0x290 [ 799.524415][T14866] ? __pfx_seccomp_notify_ioctl+0x10/0x10 [ 799.524433][T14866] __x64_sys_ioctl+0x18e/0x210 [ 799.524446][T14866] do_syscall_64+0x115/0x870 [ 799.524460][T14866] ? clear_bhb_loop+0x40/0x90 [ 799.524474][T14866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.524485][T14866] RIP: 0033:0x7f13dd19ce59 [ 799.524497][T14866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.524513][T14866] RSP: 002b:00007f13ddff1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 799.524530][T14866] RAX: ffffffffffffffda RBX: 00007f13dd416090 RCX: 00007f13dd19ce59 [ 799.524542][T14866] RDX: 0000200000002480 RSI: 0000000040182103 RDI: 0000000000000005 [ 799.524552][T14866] RBP: 00007f13ddff1090 R08: 0000000000000000 R09: 0000000000000000 [ 799.524560][T14866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.524566][T14866] R13: 00007f13dd416128 R14: 00007f13dd416090 R15: 00007ffcea76a128 [ 799.524581][T14866] [ 799.860441][T14666] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 799.935872][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2377'. [ 800.028633][ T5719] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 800.036122][T14666] usb 5-1: config 0 has no interfaces? [ 800.044348][T14666] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 800.054068][T14666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.062866][T14666] usb 5-1: Product: syz [ 800.067155][T14666] usb 5-1: Manufacturer: syz [ 800.071879][T14666] usb 5-1: SerialNumber: syz [ 800.079891][T14666] usb 5-1: config 0 descriptor?? [ 800.195030][ T5719] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 800.203675][ T5719] usb 1-1: config 0 has no interface number 0 [ 800.280083][ T5719] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 800.415196][ T5719] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 800.512583][ T5719] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 800.566555][ T5719] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 800.590609][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 800.682843][ T5719] usb 1-1: Product: syz [ 800.687311][ T5719] usb 1-1: SerialNumber: syz [ 800.699820][ T5719] usb 1-1: config 0 descriptor?? [ 800.724675][ T5719] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 800.734180][ T5719] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input50 [ 801.388673][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 801.390989][ T5798] usb 1-1: USB disconnect, device number 71 [ 801.395836][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 801.411915][ T5798] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 801.551499][T14673] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 801.722319][T14673] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 801.733687][T14673] usb 2-1: config 1 interface 0 has no altsetting 0 [ 801.748975][T14673] usb 2-1: string descriptor 0 read error: -22 [ 801.756026][T14673] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 801.768342][T14673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.121017][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.127377][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.340659][T14673] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 803.360352][ T5719] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 803.392216][T14673] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.000C/input/input51 [ 803.511622][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 803.524118][ T5719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.535475][ T5719] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 803.563016][ T5719] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 803.581324][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.589606][ T5719] usb 1-1: Product: syz [ 803.612734][ T5719] usb 1-1: Manufacturer: syz [ 803.622749][ T5719] usb 1-1: SerialNumber: syz [ 803.641672][T14673] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 803.647841][ T5719] usb 1-1: config 0 descriptor?? [ 803.702314][ T5719] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 803.733937][T14673] usb 2-1: USB disconnect, device number 93 [ 803.805298][T14897] fido_id[14897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 803.909142][T14895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.917723][T14895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.984869][T14896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.993552][T14896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.386357][T14666] usb 5-1: USB disconnect, device number 78 [ 804.959435][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 804.968989][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.976292][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.930295][ T6432] usb 1-1: USB disconnect, device number 72 [ 806.923626][T14929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14929 comm=syz.4.2391 [ 807.186707][T14935] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 807.193238][T14935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 807.206319][T14935] vhci_hcd vhci_hcd.0: Device attached [ 807.510886][ T5719] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 807.790506][ T6432] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 807.965743][ T6432] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.089971][ T6432] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.204751][ T6432] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 808.251241][ T6432] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 808.279725][ T6432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.317743][ T6432] usb 2-1: config 0 descriptor?? [ 808.387237][T14673] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 808.433278][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'. [ 808.451283][T14941] vhci_hcd: connection reset by peer [ 808.461469][ T1038] vhci_hcd vhci_hcd.0: stop threads [ 808.467803][ T1038] vhci_hcd vhci_hcd.0: release socket [ 808.481011][ T1038] vhci_hcd vhci_hcd.0: disconnect device [ 808.541644][T14673] usb 3-1: config 0 has no interfaces? [ 808.548830][T14673] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 808.750830][ T6432] hid_parser_main: 30 callbacks suppressed [ 808.750864][ T6432] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 808.812243][ T6432] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 808.843914][ T6432] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 808.846887][T14673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.859353][T14673] usb 3-1: Product: syz [ 808.863601][T14673] usb 3-1: Manufacturer: syz [ 808.868193][T14673] usb 3-1: SerialNumber: syz [ 808.883598][T14673] usb 3-1: config 0 descriptor?? [ 808.893588][ T6432] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 808.923488][ T6432] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 808.942137][ T6432] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 808.975245][ T6432] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 808.976201][T14953] dlm: non-version read from control device 203 [ 808.999923][ T6432] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 809.025822][ T6432] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 809.046109][ T6432] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 809.089641][ T6432] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 809.127425][ T6432] usb 2-1: USB disconnect, device number 94 [ 809.240683][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 809.537995][T14977] fido_id[14977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 809.717988][T14986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2405'. [ 809.797281][T14987] tmpfs: Bad value for 'mpol' [ 810.001482][T14673] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 810.320393][T14673] usb 2-1: Using ep0 maxpacket: 8 [ 810.326826][T14673] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 810.335777][T14673] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 810.346384][T14673] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 810.391047][T14673] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 810.434442][T14673] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.453409][T14673] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 810.464130][T14673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.629328][ T30] audit: type=1400 audit(1780687663.589:1681): avc: denied { bind } for pid=14995 comm="syz.0.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 810.708034][T15002] ipt_REJECT: ECHOREPLY no longer supported. [ 811.074500][T14673] usb 2-1: GET_CAPABILITIES returned 0 [ 811.478725][T14673] usbtmc 2-1:16.0: can't read capabilities [ 812.960371][ T5719] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 813.089268][ T6432] usb 2-1: USB disconnect, device number 95 [ 813.505230][T14673] usb 3-1: USB disconnect, device number 9 [ 813.860858][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2417'. [ 815.620515][ T5798] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 816.576368][T14661] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 816.600233][ T30] audit: type=1400 audit(1780687669.559:1682): avc: denied { create } for pid=15056 comm="syz.0.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 816.910843][ T5798] usb 2-1: Using ep0 maxpacket: 32 [ 816.941759][ T5798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.960387][T14661] usb 3-1: Using ep0 maxpacket: 16 [ 816.970408][T14661] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 816.973087][ T5798] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 816.991273][T14661] usb 3-1: config 0 has no interface number 0 [ 817.008824][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.026322][ T5798] usb 2-1: Product: syz [ 817.037725][ T5798] usb 2-1: Manufacturer: syz [ 817.044485][ T5798] usb 2-1: SerialNumber: syz [ 817.076352][ T5798] usb 2-1: config 0 descriptor?? [ 817.093968][ T5798] cdc_ether 2-1:0.0: missing cdc header descriptor [ 817.106473][ T5798] usb 2-1: unsupported MDLM descriptors [ 817.116841][T14661] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 817.127716][T14661] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 817.139892][T14661] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 817.156064][T14661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.180416][T14661] usb 3-1: Product: syz [ 817.184596][T14661] usb 3-1: Manufacturer: syz [ 817.189256][T14661] usb 3-1: SerialNumber: syz [ 817.270227][T14661] usb 3-1: config 0 descriptor?? [ 817.279246][T15053] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 817.287443][T15053] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 818.278459][T15051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.300630][T15051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.438381][T14661] asix 3-1:0.34: probe with driver asix failed with error -71 [ 818.500001][T14661] usb 3-1: USB disconnect, device number 10 [ 818.772980][ T6432] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 818.953045][ T6432] usb 4-1: config 0 has no interfaces? [ 818.963103][ T6432] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 818.986198][ T6432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.007904][ T5798] usb 2-1: USB disconnect, device number 96 [ 819.015760][ T30] audit: type=1400 audit(1780687671.949:1683): avc: denied { bpf } for pid=15065 comm="syz.4.2425" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 819.562469][ T6432] usb 4-1: Product: syz [ 819.567313][ T6432] usb 4-1: Manufacturer: syz [ 819.571959][ T6432] usb 4-1: SerialNumber: syz [ 819.586944][ T6432] usb 4-1: config 0 descriptor?? [ 821.700447][T11609] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 821.702298][T13563] Bluetooth: hci2: command 0x0401 tx timeout [ 821.750370][ T5719] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 821.920804][ T5719] usb 5-1: Using ep0 maxpacket: 16 [ 821.979265][ T5719] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.031915][ T5719] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 822.032200][ T5798] usb 4-1: USB disconnect, device number 57 [ 822.345904][ T30] audit: type=1400 audit(1780687675.089:1684): avc: denied { perfmon } for pid=15108 comm="syz.2.2435" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 822.373815][ T5719] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 822.387070][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.450485][ T5719] usb 5-1: Product: syz [ 822.457884][ T5719] usb 5-1: Manufacturer: syz [ 822.480386][ T5719] usb 5-1: SerialNumber: syz [ 822.492569][ T5719] usb 5-1: config 0 descriptor?? [ 822.507666][ T5719] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 822.636558][T15107] nbd0: detected capacity change from 0 to 63 [ 822.753442][T15101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.762175][T15101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.433631][ T5719] usb 5-1: USB disconnect, device number 79 [ 825.559738][T15139] hsr0: entered promiscuous mode [ 826.785117][ T30] audit: type=1400 audit(1780687679.749:1685): avc: denied { append } for pid=15137 comm="syz.3.2444" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 826.901203][T15154] netlink: 'syz.2.2447': attribute type 1 has an invalid length. [ 826.960380][ T5798] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 827.181545][ T5798] usb 1-1: config 0 has no interfaces? [ 827.190850][ T5798] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 827.200376][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.210308][ T5798] usb 1-1: Product: syz [ 827.270789][T15158] ieee802154 phy0 wpan0: encryption failed: -22 [ 827.340425][ T30] audit: type=1400 audit(1780687680.229:1686): avc: denied { write } for pid=15155 comm="syz.2.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 827.530455][T11609] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 827.571669][ T5798] usb 1-1: Manufacturer: syz [ 827.577874][ T5798] usb 1-1: SerialNumber: syz [ 827.592555][T11609] Bluetooth: hci2: command 0x0401 tx timeout [ 827.609780][ T5798] usb 1-1: config 0 descriptor?? [ 827.633453][T13563] block nbd0: Receive control failed (result -104) [ 829.982715][T15190] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2455'. [ 830.022175][T15190] syzkaller0: entered promiscuous mode [ 830.045163][T15190] syzkaller0: entered allmulticast mode [ 830.079568][T15192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2455'. [ 831.008152][ T5798] usb 1-1: USB disconnect, device number 73 [ 831.778171][ T30] audit: type=1400 audit(1780687684.379:1687): avc: denied { create } for pid=15207 comm="syz.1.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 831.900966][ T30] audit: type=1400 audit(1780687684.379:1688): avc: denied { write } for pid=15207 comm="syz.1.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 832.143451][T15221] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2464'. [ 832.865701][T15235] FAULT_INJECTION: forcing a failure. [ 832.865701][T15235] name failslab, interval 1, probability 0, space 0, times 0 [ 832.900582][T15235] CPU: 0 UID: 0 PID: 15235 Comm: syz.0.2468 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.900611][T15235] Tainted: [L]=SOFTLOCKUP [ 832.900618][T15235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 832.900629][T15235] Call Trace: [ 832.900636][T15235] [ 832.900643][T15235] dump_stack_lvl+0x100/0x190 [ 832.900670][T15235] should_fail_ex.cold+0x5/0xa [ 832.900695][T15235] ? tomoyo_encode2+0xfb/0x3c0 [ 832.900722][T15235] should_failslab+0xc2/0x120 [ 832.900743][T15235] __kmalloc_noprof+0xe0/0x850 [ 832.900774][T15235] ? d_absolute_path+0x136/0x1b0 [ 832.900799][T15235] tomoyo_encode2+0xfb/0x3c0 [ 832.900833][T15235] tomoyo_encode+0x29/0x50 [ 832.900858][T15235] tomoyo_realpath_from_path+0x18c/0x690 [ 832.900892][T15235] tomoyo_path_number_perm+0x23c/0x580 [ 832.900915][T15235] ? tomoyo_path_number_perm+0x22e/0x580 [ 832.900941][T15235] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 832.900991][T15235] ? find_held_lock+0x2b/0x80 [ 832.901008][T15235] ? __fget_files+0x215/0x3d0 [ 832.901029][T15235] ? hook_file_ioctl_common+0x149/0x410 [ 832.901048][T15235] ? __fget_files+0x215/0x3d0 [ 832.901075][T15235] ? __fget_files+0x21f/0x3d0 [ 832.901102][T15235] security_file_ioctl+0xd3/0x230 [ 832.901129][T15235] __x64_sys_ioctl+0xb7/0x210 [ 832.901151][T15235] do_syscall_64+0x115/0x870 [ 832.901173][T15235] ? clear_bhb_loop+0x40/0x90 [ 832.901196][T15235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.901214][T15235] RIP: 0033:0x7f3057b9ce59 [ 832.901230][T15235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.901246][T15235] RSP: 002b:00007f305899c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.901264][T15235] RAX: ffffffffffffffda RBX: 00007f3057e15fa0 RCX: 00007f3057b9ce59 [ 832.901276][T15235] RDX: 0000200000001200 RSI: 0000000080045439 RDI: 0000000000000003 [ 832.901287][T15235] RBP: 00007f305899c090 R08: 0000000000000000 R09: 0000000000000000 [ 832.901297][T15235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.901307][T15235] R13: 00007f3057e16038 R14: 00007f3057e15fa0 R15: 00007ffd7dd51568 [ 832.901332][T15235] [ 832.901414][T15235] ERROR: Out of memory at tomoyo_realpath_from_path. [ 833.480457][T14673] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 833.650498][T14673] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 833.659320][T14673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.670920][T14673] usb 2-1: config 0 has no interface number 0 [ 833.677403][T14673] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 833.691182][T14673] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 833.702512][T14673] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 833.720332][T14673] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 833.729501][T14673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.738128][T14673] usb 2-1: Product: syz [ 833.740333][T14661] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 833.749870][T14673] usb 2-1: Manufacturer: syz [ 833.754858][T14673] usb 2-1: SerialNumber: syz [ 833.761083][T14673] usb 2-1: config 0 descriptor?? [ 833.901602][T14661] usb 1-1: config 0 has no interfaces? [ 833.908884][T14661] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 833.918108][T14661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.926126][T14661] usb 1-1: Product: syz [ 833.930558][T14661] usb 1-1: Manufacturer: syz [ 833.935213][T14661] usb 1-1: SerialNumber: syz [ 833.941865][T14661] usb 1-1: config 0 descriptor?? [ 833.977572][T14673] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 833.993305][T14673] usb 2-1: USB disconnect, device number 97 [ 834.851163][T14673] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 834.913023][ T5719] usb 1-1: USB disconnect, device number 74 [ 835.052598][T14673] usb 2-1: Using ep0 maxpacket: 32 [ 835.342824][ T30] audit: type=1400 audit(1780687688.279:1689): avc: denied { create } for pid=15259 comm="syz.3.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 835.362987][T14673] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 835.371268][T14673] usb 2-1: config 0 has no interface number 0 [ 835.377537][T14673] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 835.423104][T14673] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 835.656012][T14673] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 835.667793][T14673] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 835.680330][T14673] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 835.701236][T14673] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 835.724524][T14673] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 835.738609][T14673] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 14444, setting to 1024 [ 835.763019][T15265] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.770143][T15265] bridge0: port 2(bridge_slave_1) entered listening state [ 835.777517][T15265] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.784578][T15265] bridge0: port 1(bridge_slave_0) entered listening state [ 835.803624][T14673] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 836.712243][T14673] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.755744][T15265] hsr0: left promiscuous mode [ 836.768354][T14673] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 836.795579][T14673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.806476][T14673] usb 2-1: Product: syz [ 836.813528][T14673] usb 2-1: Manufacturer: syz [ 836.823700][T14673] usb 2-1: SerialNumber: syz [ 836.863889][T14673] usb 2-1: config 0 descriptor?? [ 836.874746][T15254] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 836.883595][T15254] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 836.977140][T14673] usb 2-1: will this work? Response EP is not usually 3 [ 837.007225][T14673] usb 2-1: will this work? Image data EP is not usually 2 [ 837.055277][T14673] scsi host1: microtekX6 [ 838.177954][T15293] befs: (nbd2): No write support. Marking filesystem read-only [ 838.294353][ T5798] usb 2-1: USB disconnect, device number 98 [ 838.380973][T15292] netlink: 'syz.3.2483': attribute type 1 has an invalid length. [ 838.513969][T15292] netlink: 'syz.3.2483': attribute type 1 has an invalid length. [ 838.817394][ T4934] Bluetooth: hci2: command 0x0401 tx timeout [ 838.839316][T13563] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 839.373979][T13563] Bluetooth: hci5: command 0x0405 tx timeout [ 840.600356][T14673] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 840.730397][T14673] usb 5-1: device descriptor read/64, error -71 [ 840.770341][ T6454] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 840.991862][ T6454] usb 1-1: config 0 has no interfaces? [ 840.999494][ T6454] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 841.009007][ T6454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.076891][T14673] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 841.810323][T15328] tunl0: Caught tx_queue_len zero misconfig [ 841.882887][T14661] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 841.890977][ T6454] usb 1-1: Product: syz [ 841.895184][ T6454] usb 1-1: Manufacturer: syz [ 841.904641][ T6454] usb 1-1: SerialNumber: syz [ 841.911497][ T6454] usb 1-1: config 0 descriptor?? [ 841.970324][T14673] usb 5-1: device descriptor read/64, error -71 [ 842.080643][T14673] usb usb5-port1: attempt power cycle [ 842.093053][T14661] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 842.114982][T14661] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.131046][T14661] usb 2-1: config 0 has no interface number 0 [ 842.143064][T14661] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 842.166564][T14661] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 842.539617][T14661] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.586205][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2494'. [ 842.613747][T14661] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 842.623004][T14661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.632846][T14661] usb 2-1: Product: syz [ 842.643067][T14661] usb 2-1: Manufacturer: syz [ 842.652676][ T1160] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.652718][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2494'. [ 842.661578][T14661] usb 2-1: SerialNumber: syz [ 842.679977][ T1038] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.689597][T15339] lo: Caught tx_queue_len zero misconfig [ 842.695379][T15339] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 842.710460][ T1038] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.730205][T14661] usb 2-1: config 0 descriptor?? [ 842.790411][T14673] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 842.820814][T14673] usb 5-1: device descriptor read/8, error -71 [ 842.953683][T14661] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 842.979453][T14661] usb 2-1: USB disconnect, device number 99 [ 843.060378][T14673] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 843.070444][ T6454] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 843.100767][T14673] usb 5-1: device descriptor read/8, error -71 [ 843.162101][ T5798] usb 1-1: USB disconnect, device number 75 [ 843.211642][T14673] usb usb5-port1: unable to enumerate USB device [ 843.240376][ T6454] usb 4-1: Using ep0 maxpacket: 32 [ 843.246773][ T6454] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 843.255157][ T6454] usb 4-1: config 0 has no interface number 0 [ 843.261391][ T6454] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 843.272271][ T6454] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 843.284025][ T6454] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 843.295383][ T6454] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 843.306961][ T6454] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 843.319475][ T6454] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 843.329923][ T6454] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 843.339988][ T6454] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 14444, setting to 1024 [ 843.351402][ T6454] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 843.361693][ T6454] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.386841][ T6454] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 843.396705][ T6454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.406323][ T6454] usb 4-1: Product: syz [ 843.411766][ T6454] usb 4-1: Manufacturer: syz [ 843.416437][ T6454] usb 4-1: SerialNumber: syz [ 843.437059][ T6454] usb 4-1: config 0 descriptor?? [ 843.450992][T15342] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 843.461844][T15342] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 843.701225][ T6454] usb 4-1: will this work? Response EP is not usually 3 [ 843.712911][ T6454] usb 4-1: will this work? Image data EP is not usually 2 [ 843.737127][ T6454] scsi host1: microtekX6 [ 843.813564][T15349] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 843.820088][T15349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 843.851132][T15349] vhci_hcd vhci_hcd.0: Device attached [ 844.090347][ T5798] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 845.088837][T15354] vhci_hcd: connection reset by peer [ 845.103700][ T1038] vhci_hcd vhci_hcd.4: stop threads [ 845.114229][ T1038] vhci_hcd vhci_hcd.4: release socket [ 845.132173][ T1038] vhci_hcd vhci_hcd.4: disconnect device [ 845.227554][T15371] FAULT_INJECTION: forcing a failure. [ 845.227554][T15371] name failslab, interval 1, probability 0, space 0, times 0 [ 845.241406][T15371] CPU: 1 UID: 0 PID: 15371 Comm: syz.2.2503 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.241434][T15371] Tainted: [L]=SOFTLOCKUP [ 845.241440][T15371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 845.241450][T15371] Call Trace: [ 845.241456][T15371] [ 845.241464][T15371] dump_stack_lvl+0x100/0x190 [ 845.241488][T15371] should_fail_ex.cold+0x5/0xa [ 845.241513][T15371] ? tomoyo_encode2+0xfb/0x3c0 [ 845.241538][T15371] should_failslab+0xc2/0x120 [ 845.241559][T15371] __kmalloc_noprof+0xe0/0x850 [ 845.241589][T15371] tomoyo_encode2+0xfb/0x3c0 [ 845.241614][T15371] ? d_absolute_path+0x122/0x1b0 [ 845.241633][T15371] tomoyo_encode+0x29/0x50 [ 845.241652][T15371] tomoyo_realpath_from_path+0x18c/0x690 [ 845.241676][T15371] tomoyo_path_number_perm+0x23c/0x580 [ 845.241691][T15371] ? tomoyo_path_number_perm+0x22e/0x580 [ 845.241707][T15371] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 845.241736][T15371] ? find_held_lock+0x2b/0x80 [ 845.241746][T15371] ? __fget_files+0x215/0x3d0 [ 845.241759][T15371] ? hook_file_ioctl_common+0x149/0x410 [ 845.241773][T15371] ? __fget_files+0x215/0x3d0 [ 845.241789][T15371] ? __fget_files+0x21f/0x3d0 [ 845.241806][T15371] security_file_ioctl+0xd3/0x230 [ 845.241823][T15371] __x64_sys_ioctl+0xb7/0x210 [ 845.241836][T15371] do_syscall_64+0x115/0x870 [ 845.241852][T15371] ? clear_bhb_loop+0x40/0x90 [ 845.241865][T15371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.241877][T15371] RIP: 0033:0x7fd5a6b9ce59 [ 845.241887][T15371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.241897][T15371] RSP: 002b:00007fd5a7a87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.241909][T15371] RAX: ffffffffffffffda RBX: 00007fd5a6e15fa0 RCX: 00007fd5a6b9ce59 [ 845.241916][T15371] RDX: 0000200000000440 RSI: 0000000080106f53 RDI: 0000000000000003 [ 845.241922][T15371] RBP: 00007fd5a7a87090 R08: 0000000000000000 R09: 0000000000000000 [ 845.241929][T15371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.241935][T15371] R13: 00007fd5a6e16038 R14: 00007fd5a6e15fa0 R15: 00007ffe7d05a138 [ 845.241949][T15371] [ 845.241989][T15371] ERROR: Out of memory at tomoyo_realpath_from_path. [ 845.466078][T14673] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 845.652882][T14673] usb 2-1: config 0 has no interfaces? [ 845.660415][T14673] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 845.669951][T14673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.678198][T14673] usb 2-1: Product: syz [ 845.682522][T14673] usb 2-1: Manufacturer: syz [ 845.687172][T14673] usb 2-1: SerialNumber: syz [ 846.857912][T14671] usb 4-1: USB disconnect, device number 58 [ 846.882250][T14673] usb 2-1: config 0 descriptor?? [ 846.936092][ T30] audit: type=1400 audit(1780687699.899:1690): avc: denied { append } for pid=15377 comm="syz.2.2505" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 847.000641][T15378] loop9: detected capacity change from 0 to 524287936 [ 847.101428][ T5719] usb 2-1: USB disconnect, device number 100 [ 848.566786][T15393] xt_NFQUEUE: number of total queues is 0 [ 848.668163][ T30] audit: type=1400 audit(1780687701.629:1691): avc: denied { read } for pid=15394 comm="syz.4.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 849.189898][ T6454] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 849.367525][ T6454] usb 2-1: config 0 has no interfaces? [ 849.379806][ T6454] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 849.497570][ T6454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.514258][ T6454] usb 2-1: Product: syz [ 849.529375][ T6454] usb 2-1: Manufacturer: syz [ 849.544334][ T6454] usb 2-1: SerialNumber: syz [ 849.570097][ T6454] usb 2-1: config 0 descriptor?? [ 849.600545][T14671] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 849.690837][ T5798] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 849.761842][T14671] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.774095][T14671] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 849.788379][T14671] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 849.798427][T14671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.807386][T14671] usb 5-1: Product: syz [ 849.811852][T14671] usb 5-1: Manufacturer: syz [ 849.816457][T14671] usb 5-1: SerialNumber: syz [ 849.852561][T14671] cdc_mbim 5-1:1.0: skipping garbage [ 849.984711][T14673] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 851.061353][T15406] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 851.068729][T14673] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.083089][T14673] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 851.256632][T14673] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 851.286644][T14673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.313506][T14673] usb 1-1: Product: syz [ 851.326828][T14673] usb 1-1: Manufacturer: syz [ 851.430119][T14673] usb 1-1: SerialNumber: syz [ 851.448098][T14673] cdc_mbim 1-1:1.0: skipping garbage [ 851.503494][T15424] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 851.510022][T15424] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 851.520594][T15424] vhci_hcd vhci_hcd.0: Device attached [ 851.657117][T15409] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 851.760341][ T5798] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 851.843558][ T803] usb 2-1: USB disconnect, device number 101 [ 851.865082][T15406] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 851.876349][T14671] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 851.887862][T14671] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 851.907275][T14671] wwan wwan0: port wwan0mbim0 attached [ 851.933073][T14671] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 16:e0:7e:bb:3f:3a [ 851.940725][T15426] vhci_hcd: connection reset by peer [ 851.954937][ T1038] vhci_hcd vhci_hcd.3: stop threads [ 851.961909][ T1038] vhci_hcd vhci_hcd.3: release socket [ 851.978678][ T1038] vhci_hcd vhci_hcd.3: disconnect device [ 852.088778][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 852.095596][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 852.102405][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 852.109063][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 852.115606][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 852.122279][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 852.128767][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 852.135438][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 852.141940][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 852.148603][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 852.154958][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 852.161630][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 852.167944][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 852.174612][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 852.180902][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 852.187562][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 852.193865][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 852.200516][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 852.210541][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 852.217214][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 852.274517][T15409] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 852.286811][T14673] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 852.287419][T14661] usb 5-1: USB disconnect, device number 84 [ 852.299318][T14673] cdc_mbim 1-1:1.0: cdc-wdm1: USB WDM device [ 852.321450][T14673] wwan wwan1: port wwan1mbim0 attached [ 852.324442][T14661] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 852.345215][T14673] cdc_mbim 1-1:1.0 wwan1: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 86:5c:e8:58:14:29 [ 852.463537][T14661] wwan wwan0: port wwan0mbim0 disconnected [ 852.492320][ T30] audit: type=1400 audit(1780687705.459:1692): avc: denied { write } for pid=15430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.554509][T14671] usb 1-1: USB disconnect, device number 76 [ 852.578279][T14671] cdc_mbim 1-1:1.0 wwan1: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 852.612772][T14673] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 852.615753][T15444] FAULT_INJECTION: forcing a failure. [ 852.615753][T15444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.659078][T15444] CPU: 0 UID: 0 PID: 15444 Comm: syz.1.2520 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.659104][T15444] Tainted: [L]=SOFTLOCKUP [ 852.659110][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 852.659121][T15444] Call Trace: [ 852.659127][T15444] [ 852.659134][T15444] dump_stack_lvl+0x100/0x190 [ 852.659160][T15444] should_fail_ex.cold+0x5/0xa [ 852.659184][T15444] _copy_from_iter+0x1f4/0x1690 [ 852.659210][T15444] ? __asan_memset+0x23/0x50 [ 852.659236][T15444] ? __pfx__copy_from_iter+0x10/0x10 [ 852.659258][T15444] ? __pfx___alloc_skb+0x10/0x10 [ 852.659282][T15444] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 852.659316][T15444] netlink_sendmsg+0x808/0xda0 [ 852.659348][T15444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.659368][T15444] ? __pfx___might_fault+0x10/0x10 [ 852.659401][T15444] ____sys_sendmsg+0x9e1/0xb70 [ 852.659420][T15444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.659443][T15444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.659474][T15444] ___sys_sendmsg+0x190/0x1e0 [ 852.659497][T15444] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.659546][T15444] __sys_sendmsg+0x170/0x220 [ 852.659571][T15444] ? __pfx___sys_sendmsg+0x10/0x10 [ 852.659606][T15444] ? rcu_is_watching+0x12/0xc0 [ 852.659634][T15444] do_syscall_64+0x115/0x870 [ 852.659657][T15444] ? clear_bhb_loop+0x40/0x90 [ 852.659679][T15444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.659696][T15444] RIP: 0033:0x7f13dd19ce59 [ 852.659711][T15444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.659727][T15444] RSP: 002b:00007f13de012028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.659745][T15444] RAX: ffffffffffffffda RBX: 00007f13dd415fa0 RCX: 00007f13dd19ce59 [ 852.659756][T15444] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 852.659767][T15444] RBP: 00007f13de012090 R08: 0000000000000000 R09: 0000000000000000 [ 852.659777][T15444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.659788][T15444] R13: 00007f13dd416038 R14: 00007f13dd415fa0 R15: 00007ffcea76a128 [ 852.659811][T15444] [ 852.874065][ T30] audit: type=1400 audit(1780687705.649:1693): avc: denied { write } for pid=15446 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.876292][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2521'. [ 852.924064][T14671] wwan wwan1: port wwan1mbim0 disconnected [ 852.950397][T14673] usb 3-1: Using ep0 maxpacket: 16 [ 852.965247][T14673] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.974071][T15450] tipc: Enabled bearer , priority 0 [ 852.978581][T14673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 852.982241][ T11] block nbd0: Possible stuck request ffff88802803e000: control (read@0,1024B). Runtime 30 seconds [ 853.009139][ T11] block nbd0: Possible stuck request ffff88802803e1c0: control (read@1024,1024B). Runtime 30 seconds [ 853.020303][ T11] block nbd0: Possible stuck request ffff88802803e380: control (read@2048,1024B). Runtime 30 seconds [ 853.031299][ T11] block nbd0: Possible stuck request ffff88802803e540: control (read@3072,1024B). Runtime 30 seconds [ 853.953094][T14673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 854.003291][T14673] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 854.014840][T15449] tipc: Disabling bearer [ 854.047872][T14673] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.098250][T14673] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 854.130714][T14673] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 854.166018][T14673] usb 3-1: Manufacturer: syz [ 854.204462][T14673] usb 3-1: config 0 descriptor?? [ 854.652703][ T30] audit: type=1400 audit(1780687707.619:1694): avc: denied { write } for pid=15457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.678422][T14673] rc_core: IR keymap rc-hauppauge not found [ 854.693459][T14673] Registered IR keymap rc-empty [ 854.709537][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 854.740442][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 854.781241][T14673] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 854.782142][ T5719] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 854.829024][T14673] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input55 [ 854.898175][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 854.905654][ T30] audit: type=1400 audit(1780687707.869:1695): avc: denied { write } for pid=15481 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.942589][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 854.987165][ T5719] usb 4-1: config 0 has no interfaces? [ 854.990348][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 854.998882][ T5719] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 855.012286][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.020519][ T5719] usb 4-1: Product: syz [ 855.024880][ T5719] usb 4-1: Manufacturer: syz [ 855.029839][ T5719] usb 4-1: SerialNumber: syz [ 855.040510][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.055803][ T5719] usb 4-1: config 0 descriptor?? [ 855.070478][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.111236][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.152138][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.190472][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.210668][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.327689][T14673] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.369295][T14673] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 855.385429][T14673] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 855.931953][T14673] usb 3-1: USB disconnect, device number 11 [ 856.070420][T14671] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 856.417941][T15498] [ 856.420295][T15498] ====================================================== [ 856.427297][T15498] WARNING: possible circular locking dependency detected [ 856.434307][T15498] syzkaller #0 Tainted: G L [ 856.440262][T15498] ------------------------------------------------------ [ 856.447256][T15498] syz.2.2533/15498 is trying to acquire lock: [ 856.453285][T15498] ffffffff8e9787a0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xe87/0x1cc0 [ 856.462838][T15498] [ 856.462838][T15498] but task is already holding lock: [ 856.470171][T15498] ffff888027513840 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 856.481376][T15498] [ 856.481376][T15498] which lock already depends on the new lock. [ 856.481376][T15498] [ 856.491753][T15498] [ 856.491753][T15498] the existing dependency chain (in reverse order) is: [ 856.500733][T15498] [ 856.500733][T15498] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 856.509302][T15498] blk_alloc_queue+0x610/0x790 [ 856.514566][T15498] blk_mq_alloc_queue+0x174/0x290 [ 856.520088][T15498] __blk_mq_alloc_disk+0x29/0x120 [ 856.525618][T15498] loop_add+0x498/0xb60 [ 856.530269][T15498] loop_init+0x1d3/0x200 [ 856.535010][T15498] do_one_initcall+0x121/0x750 [ 856.540274][T15498] kernel_init_freeable+0x6ea/0x7b0 [ 856.545975][T15498] kernel_init+0x1f/0x1e0 [ 856.550794][T15498] ret_from_fork+0x72b/0xd50 [ 856.555882][T15498] ret_from_fork_asm+0x1a/0x30 [ 856.561146][T15498] [ 856.561146][T15498] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 856.568336][T15498] fs_reclaim_acquire+0xc4/0x100 [ 856.573771][T15498] prepare_alloc_pages+0x166/0x5f0 [ 856.579386][T15498] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 856.585780][T15498] __alloc_pages_noprof+0xb/0x110 [ 856.591322][T15498] pcpu_populate_chunk+0x118/0x990 [ 856.596931][T15498] pcpu_alloc_noprof+0x881/0x1cc0 [ 856.602453][T15498] xt_percpu_counter_alloc+0x13e/0x1b0 [ 856.608414][T15498] find_check_entry.isra.0+0xbf/0x990 [ 856.614293][T15498] translate_table+0xbcd/0x1630 [ 856.619641][T15498] ipt_register_table+0x106/0x2b0 [ 856.625161][T15498] iptable_raw_table_init+0x63/0x90 [ 856.630862][T15498] xt_find_table_lock+0x2db/0x520 [ 856.636382][T15498] xt_request_find_table_lock+0x28/0xf0 [ 856.642442][T15498] get_info+0x1a7/0x790 [ 856.647094][T15498] do_ipt_get_ctl+0x168/0xa80 [ 856.652267][T15498] nf_getsockopt+0x7c/0xe0 [ 856.657181][T15498] ip_getsockopt+0x192/0x1e0 [ 856.662269][T15498] tcp_getsockopt+0xa1/0x110 [ 856.667353][T15498] do_sock_getsockopt+0x50a/0x6e0 [ 856.672877][T15498] __sys_getsockopt+0x148/0x260 [ 856.678224][T15498] __x64_sys_getsockopt+0xbd/0x160 [ 856.683833][T15498] do_syscall_64+0x115/0x870 [ 856.688920][T15498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.695306][T15498] [ 856.695306][T15498] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 856.703002][T15498] __lock_acquire+0x14b8/0x2630 [ 856.708345][T15498] lock_acquire+0x1b1/0x370 [ 856.713341][T15498] __mutex_lock+0x1a4/0x1b10 [ 856.718425][T15498] pcpu_alloc_noprof+0xe87/0x1cc0 [ 856.723946][T15498] __percpu_counter_init_many+0x42/0x3b0 [ 856.730072][T15498] blkg_rwstat_init+0x2c/0xd0 [ 856.735244][T15498] throtl_pd_alloc+0xf1/0xa50 [ 856.740419][T15498] blkcg_activate_policy+0x7bb/0xe60 [ 856.746207][T15498] blk_throtl_init+0x39a/0x5b0 [ 856.751466][T15498] tg_set_conf.isra.0+0x3c3/0x4b0 [ 856.756986][T15498] cgroup_file_write+0x1e6/0x8a0 [ 856.762418][T15498] kernfs_fop_write_iter+0x3e0/0x5f0 [ 856.768204][T15498] vfs_write+0x6ac/0x1070 [ 856.773024][T15498] ksys_write+0x12a/0x250 [ 856.777844][T15498] do_syscall_64+0x115/0x870 [ 856.782929][T15498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.789311][T15498] [ 856.789311][T15498] other info that might help us debug this: [ 856.789311][T15498] [ 856.799507][T15498] Chain exists of: [ 856.799507][T15498] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 856.799507][T15498] [ 856.813115][T15498] Possible unsafe locking scenario: [ 856.813115][T15498] [ 856.820533][T15498] CPU0 CPU1 [ 856.825868][T15498] ---- ---- [ 856.831203][T15498] lock(&q->q_usage_counter(io)#17); [ 856.836552][T15498] lock(fs_reclaim); [ 856.843027][T15498] lock(&q->q_usage_counter(io)#17); [ 856.850899][T15498] lock(pcpu_alloc_mutex); [ 856.855374][T15498] [ 856.855374][T15498] *** DEADLOCK *** [ 856.855374][T15498] [ 856.863489][T15498] 7 locks held by syz.2.2533/15498: [ 856.868654][T15498] #0: ffff8880326eb7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 856.877681][T15498] #1: ffff888021398410 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 856.886699][T15498] #2: ffff888059256c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 856.896413][T15498] #3: ffff88802e34c878 (kn->active#80){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 856.906401][T15498] #4: ffff888027513a40 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2a7/0x410 [ 856.916466][T15498] #5: ffff888027513840 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 856.928099][T15498] #6: ffff888027513878 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 856.939737][T15498] [ 856.939737][T15498] stack backtrace: [ 856.945600][T15498] CPU: 1 UID: 0 PID: 15498 Comm: syz.2.2533 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.945617][T15498] Tainted: [L]=SOFTLOCKUP [ 856.945621][T15498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 856.945627][T15498] Call Trace: [ 856.945631][T15498] [ 856.945635][T15498] dump_stack_lvl+0x100/0x190 [ 856.945648][T15498] print_circular_bug.cold+0x178/0x1c7 [ 856.945667][T15498] check_noncircular+0x146/0x160 [ 856.945681][T15498] __lock_acquire+0x14b8/0x2630 [ 856.945695][T15498] ? __kernel_text_address+0xd/0x30 [ 856.945719][T15498] lock_acquire+0x1b1/0x370 [ 856.945733][T15498] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 856.945750][T15498] ? __pfx___might_resched+0x10/0x10 [ 856.945765][T15498] ? mark_held_locks+0x40/0x70 [ 856.945778][T15498] __mutex_lock+0x1a4/0x1b10 [ 856.945793][T15498] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 856.945809][T15498] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 856.945826][T15498] ? __pfx___mutex_lock+0x10/0x10 [ 856.945841][T15498] ? __kasan_kmalloc+0xaa/0xb0 [ 856.945850][T15498] ? throtl_pd_alloc+0xcf/0xa50 [ 856.945865][T15498] ? blkcg_activate_policy+0x7bb/0xe60 [ 856.945879][T15498] ? blk_throtl_init+0x39a/0x5b0 [ 856.945893][T15498] ? tg_set_conf.isra.0+0x3c3/0x4b0 [ 856.945903][T15498] ? cgroup_file_write+0x1e6/0x8a0 [ 856.945917][T15498] ? kernfs_fop_write_iter+0x3e0/0x5f0 [ 856.945935][T15498] ? do_syscall_64+0x115/0x870 [ 856.945948][T15498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.945962][T15498] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 856.945978][T15498] pcpu_alloc_noprof+0xe87/0x1cc0 [ 856.945997][T15498] __percpu_counter_init_many+0x42/0x3b0 [ 856.946013][T15498] blkg_rwstat_init+0x2c/0xd0 [ 856.946027][T15498] throtl_pd_alloc+0xf1/0xa50 [ 856.946042][T15498] ? __pfx_throtl_pd_alloc+0x10/0x10 [ 856.946057][T15498] blkcg_activate_policy+0x7bb/0xe60 [ 856.946074][T15498] blk_throtl_init+0x39a/0x5b0 [ 856.946090][T15498] tg_set_conf.isra.0+0x3c3/0x4b0 [ 856.946100][T15498] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 856.946111][T15498] ? kernfs_root+0xf8/0x2a0 [ 856.946125][T15498] cgroup_file_write+0x1e6/0x8a0 [ 856.946139][T15498] ? __pfx_tg_set_conf_u64+0x10/0x10 [ 856.946149][T15498] ? __pfx_cgroup_file_write+0x10/0x10 [ 856.946165][T15498] kernfs_fop_write_iter+0x3e0/0x5f0 [ 856.946182][T15498] ? __pfx_cgroup_file_write+0x10/0x10 [ 856.946196][T15498] vfs_write+0x6ac/0x1070 [ 856.946208][T15498] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 856.946230][T15498] ? __pfx_vfs_write+0x10/0x10 [ 856.946244][T15498] ksys_write+0x12a/0x250 [ 856.946256][T15498] ? __pfx_ksys_write+0x10/0x10 [ 856.946267][T15498] ? rcu_is_watching+0x12/0xc0 [ 856.946284][T15498] do_syscall_64+0x115/0x870 [ 856.946297][T15498] ? clear_bhb_loop+0x40/0x90 [ 856.946309][T15498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.946321][T15498] RIP: 0033:0x7fd5a6b9ce59 [ 856.946330][T15498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.946341][T15498] RSP: 002b:00007fd5a7a87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 856.946351][T15498] RAX: ffffffffffffffda RBX: 00007fd5a6e15fa0 RCX: 00007fd5a6b9ce59 [ 856.946358][T15498] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000005 [ 856.946365][T15498] RBP: 00007fd5a7a87090 R08: 0000000000000000 R09: 0000000000000000 [ 856.946371][T15498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.946378][T15498] R13: 00007fd5a6e16038 R14: 00007fd5a6e15fa0 R15: 00007ffe7d05a138 [ 856.946387][T15498] [ 857.719617][T14671] usb 2-1: Using ep0 maxpacket: 16 [ 857.730360][ T5798] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 857.750355][T14671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 857.761713][T14671] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 857.771778][T14671] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 857.816949][T14671] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 857.826081][T14671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.834486][T14671] usb 2-1: Product: syz [ 857.838725][T14671] usb 2-1: Manufacturer: syz [ 857.843498][T14671] usb 2-1: SerialNumber: syz [ 857.852629][T14671] usb 2-1: config 0 descriptor?? [ 857.858708][T15489] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 857.865881][T15489] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 857.884149][ C1] port100 2-1:0.0: NFC: Urb failure (status -71) [ 857.890499][ C1] port100 2-1:0.0: NFC: Urb failure (status -71) [ 857.896945][T14671] port100 2-1:0.0: NFC: Could not get supported command types [ 858.078921][T15486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.087409][T15486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.101869][T14671] usb 4-1: USB disconnect, device number 59 [ 858.147129][T15489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.155598][T15489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.204806][ T5719] usb 2-1: USB disconnect, device number 102 [ 864.500950][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.507316][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.780339][ C0] bridge0: port 2(bridge_slave_1) entered learning state