last executing test programs: 20.209622316s ago: executing program 1 (id=2365): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000080)=0x8, 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x1c, r0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 19.773596766s ago: executing program 1 (id=2366): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x2000, 0x4}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)={0x728, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x6dc, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x638, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x370, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2a4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x728}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 15.906211222s ago: executing program 1 (id=2377): r0 = io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0xe0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000540)="39de", 0x2}], 0x1) (fail_nth: 1) close_range(r0, 0xffffffffffffffff, 0x0) 15.802603254s ago: executing program 0 (id=2379): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x22, 0x0, &(0x7f0000000680)) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') r3 = socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x1) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x52aa, 0x400, 0x1, 0x8000087}, 0x0, &(0x7f0000000040)=0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x94, &(0x7f0000000400)={0x2, 0x7fff, 0x13}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ptrace(0x4207, 0x0) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 13.444989047s ago: executing program 0 (id=2384): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0xd8, 0x60]) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xca) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002580)=@newtfilter={0x1f88, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0xb}, {0x2, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1f50, 0x2, [@TCA_CGROUP_POLICE={0x54, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x4, 0x9, 0x9, 0xec, {0x2, 0x2, 0x6, 0x5, 0x7, 0x5}, {0x65, 0x2, 0x5, 0x85, 0x53b, 0x6}, 0x6874, 0x6, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}, @TCA_CGROUP_ACT={0x1ef8, 0x1, [@m_pedit={0x1e04, 0x9, 0x0, 0x0, {{0xa}, {0x1d1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x3, 0x5b, 0x5157984e7fa5a41a, 0x1, 0xe}, 0x2, 0x8, [{0x100, 0x401, 0x18d0, 0xd3, 0x3, 0x4}, {0x755c3a64, 0x3, 0x9, 0x6, 0x3, 0x211}, {0xcd6, 0x869b, 0x2, 0x3ff, 0x0, 0x9}, {0x7, 0x5, 0x7, 0x0, 0x1, 0x8}, {0x1, 0x0, 0xbb, 0x9, 0x401, 0x8a9f}]}, [{0x2, 0x0, 0xfffffff6, 0x3ff, 0x7, 0x8}, {0x8, 0xfffffffb, 0xcb47, 0x2, 0x0, 0x1}, {0x7ff, 0x0, 0xffff, 0x5}, {0x9, 0xf53, 0x8, 0x7fffffff, 0x1, 0xc9}, {0x400, 0x9, 0x0, 0x6, 0x97e2, 0x6}, {0x8, 0x551, 0x1, 0x20b2, 0x8, 0x3}, {0x3, 0x6, 0xc, 0x6, 0x5, 0x7ff}, {0x7, 0xff, 0x1, 0x4, 0x3, 0x5}, {0x200, 0x7, 0x1, 0x2, 0x1000, 0x582}, {0x4, 0x800, 0x9, 0x0, 0x10, 0xfffffffb}, {0x4, 0x1, 0x6, 0x7, 0x3, 0x7fffffff}, {0x10, 0x9, 0x4, 0x8, 0x1c0, 0xfcd}, {0x2b9, 0x3, 0x7, 0x6, 0x0, 0x8}, {0x916, 0xdf, 0x4, 0x3, 0x4, 0x3}, {0x0, 0x8, 0x7, 0x709c, 0xff, 0xffffffff}, {0x87, 0x200, 0xc17, 0xd69, 0x7fff, 0xb4f}, {0x7, 0x0, 0x200, 0x2, 0x5, 0x1}, {0x1, 0x1, 0x7, 0xff, 0x7f, 0x1}, {0xfffff182, 0x5, 0x81, 0x48, 0x4, 0x10}, {0x0, 0xfff, 0x5, 0x1, 0x1}, {0x6, 0x8, 0xa, 0x5, 0x98b}, {0x1, 0xffffffff, 0x7a28, 0x8001, 0x3, 0x6}, {0x9, 0xffff6ccc, 0x4, 0x1, 0xb5d, 0x1}, {0x9, 0x0, 0x3, 0x7278, 0x159}, {0x2, 0x4, 0x7fffffff, 0xa, 0x9, 0x40}, {0x5438efa3, 0x10000008, 0x9, 0x5, 0x2, 0x2}, {0x96, 0x3ff, 0x1, 0x9, 0xffffffff, 0x8}, {0x90, 0x3, 0x688, 0x3, 0x81, 0xffff}, {0x2, 0x1, 0x7799, 0x3, 0xe14, 0x7f}, {0x7, 0x8, 0x100, 0x5, 0x200, 0x80}, {0x92b, 0x400, 0x8, 0x9, 0x8af, 0x6}, {0x0, 0x4, 0x5cc, 0x2, 0x7fe, 0xe}, {0x2, 0x9, 0x10001, 0x5, 0x2, 0x2}, {0x3bd7, 0xffff0000, 0x80000001, 0x10, 0x9, 0x7}, {0xffff, 0x2, 0x9, 0x4, 0xffffffff, 0x3}, {0x1, 0x0, 0x645, 0x5, 0x8, 0x1}, {0x800, 0xbed3, 0x4, 0x8, 0x7, 0x7}, {0x7fff, 0x200, 0x5, 0xfffffff3, 0x0, 0x3}, {0x6, 0x6, 0x4, 0x0, 0xadb, 0x386}, {0xfffffffc, 0x1000, 0x8f, 0xfffffffb, 0x9351, 0x100}, {0xffff, 0x4, 0x3, 0x5, 0x11, 0x3}, {0x81, 0x401, 0x8, 0x8bd, 0x3, 0x3}, {0x7fff, 0x8, 0x1, 0x0, 0x0, 0x802}, {0x8, 0x101, 0x8, 0xc03b, 0x3, 0x7}, {0x101, 0xffffffff, 0x1, 0x10, 0x4, 0x8}, {0x401, 0x5, 0x6, 0x8, 0x2, 0x5}, {0x81, 0xff800000, 0x9, 0x8, 0x2, 0x23fa}, {0xd11, 0x704d, 0x7, 0x8, 0xf}, {0x7, 0x0, 0x6, 0x7, 0x7ffe, 0x57d8}, {0x9, 0xfff, 0x1, 0xf, 0x80000000}, {0x2, 0x3, 0x7fffffff, 0x9, 0x4000, 0xfffffffd}, {0x7, 0x4, 0x7, 0x3, 0x40, 0x7ff}, {0x0, 0x7, 0x4, 0x6, 0x480, 0xfffff000}, {0xe, 0x43f, 0x3, 0xfffffff9, 0x401, 0x6}, {0x4, 0x7, 0x1, 0x9, 0x3, 0x2d}, {0x9, 0x7000000, 0x0, 0xc, 0x2764, 0x9}, {0x1, 0x3, 0x8, 0x7, 0x40, 0x200}, {0x4, 0x69e, 0xfffffffd, 0xe58, 0xff, 0x282}, {0xb, 0x100, 0x0, 0x40008000, 0x1, 0x8b94}, {0x6, 0x10, 0x4, 0x5, 0x0, 0xffff0000}, {0x10001, 0x3, 0x10001, 0x8, 0x3, 0x67}, {0x9, 0x4, 0x3, 0x6, 0x8, 0x6}, {0x8, 0x8, 0x9, 0x5ab0, 0xc89}, {0x9, 0x7fffffff, 0x7, 0x6, 0x5d8, 0x7f}, {0x9, 0x0, 0x8, 0x8, 0x40000000, 0xb9}, {0x80000001, 0x9, 0x80, 0x1, 0x1ff, 0x6}, {0xfffffff9, 0x3, 0x554, 0x2cf, 0x3, 0x7}, {0x0, 0x8, 0xb6, 0xffffffff, 0x7, 0x200}, {0x9, 0x9039, 0xffe00000, 0x4, 0x249, 0x3}, {0x0, 0xffffe893, 0x7, 0xf6a2, 0x1, 0x525f}, {0x0, 0x5, 0xf, 0x9, 0x8d9, 0x3ff}, {0x3, 0xaa00918b, 0x6, 0xd0, 0x8, 0x6}, {0x1, 0x77, 0x8, 0x5, 0xef23, 0x9}, {0x2, 0x0, 0x2, 0x0, 0xf, 0x5}, {0x5, 0x3, 0xffff, 0x8, 0x7, 0x5}, {0x9, 0x1000, 0x9, 0x9, 0x7fff, 0x1}, {0x6, 0x2, 0x7, 0x400, 0x3, 0x5}, {0x4, 0x6525, 0x4, 0xf7b1, 0x3, 0x1}, {0x5, 0x88e5, 0x2, 0x5, 0x1, 0x9}, {0x1, 0x4, 0x7, 0x8000, 0x48000, 0x2}, {0x2, 0x2, 0x3, 0x3, 0x1, 0x4}, {0x1, 0x9bf8, 0x80000001, 0xa3, 0x9, 0xe4bf}, {0x6, 0x1, 0x7, 0x9, 0x215c, 0x1000}, {0x6, 0x9, 0x17, 0x82f, 0x44, 0x40}, {0x80000000, 0x8, 0x9, 0x4, 0x5, 0x6541}, {0x42, 0x400, 0x401, 0x41bb3467, 0x6, 0x5}, {0x1, 0x5, 0x4, 0x3, 0x2, 0xfff}, {0x101, 0x6, 0x101, 0x3, 0x80000000, 0x6}, {0xfffffff7, 0x100, 0x5, 0x4, 0x1, 0x8}, {0xfffffeff, 0x7fffffff, 0x0, 0x8, 0x5, 0x4000}, {0x4, 0x2, 0xedc0, 0x14, 0x7d, 0x2}, {0xd, 0x4c000, 0xff, 0x2, 0x0, 0xffffffff}, {0x197f5831, 0x10001, 0xffff0000, 0x7, 0x3, 0x80}, {0xd1, 0x4, 0x1, 0x5, 0xfffffffd, 0x10000}, {0x5, 0x2, 0xe, 0x91ef, 0xfffffff8, 0x1000}, {0xfffffff0, 0x0, 0xe, 0x4, 0x4, 0x5}, {0x2800000, 0x7fff, 0x3, 0x6, 0x8, 0xa}, {0x6, 0x0, 0x5, 0x0, 0x8000, 0xfffff0c9}, {0x1, 0x0, 0x32, 0x4, 0x48, 0xfffffffb}, {0x3, 0x2, 0x401, 0x1, 0x8c7b, 0x4a3e}, {0xf8d8, 0x1, 0x4673, 0x6, 0x7f, 0x7}, {0x401, 0xf8d9, 0x9a44, 0x81, 0xe000000, 0x9}, {0x8000, 0x9, 0x3a, 0x6, 0x2, 0x7}, {0x4, 0x7ff, 0x7fffffff, 0x3ff, 0x200, 0x4}, {0x9, 0x80000000, 0x8, 0xe, 0xd, 0xf66}, {0xb, 0xf373, 0x8001, 0x0, 0x2, 0xef}, {0xf, 0xe50e, 0x2000000, 0x4, 0x333, 0x3}, {0x9, 0x2, 0x26af, 0xfc, 0x0, 0xfffffffb}, {0x2, 0x0, 0x1, 0x4102, 0x7, 0x80000000}, {0x80000000, 0x7, 0x1, 0x9, 0x30000000, 0x261}, {0x4, 0x9, 0xbe, 0xfffff880, 0x401, 0x1000}, {0x9, 0x4c, 0x4, 0x5, 0x4, 0x7}, {0x1, 0x0, 0x9, 0xdc11, 0x8cd0, 0x7}, {0x81, 0x1ef08a2b, 0x4, 0x8, 0x80000000, 0x1}, {0x9, 0x2, 0xd, 0x982e, 0x4, 0x2}, {0x72d100, 0x401, 0xf114, 0x1, 0x9, 0x7f}, {0x9, 0x6, 0x4, 0x3, 0x6, 0xf}, {0x62221544, 0xa, 0x5, 0x0, 0xb, 0x1}, {0x3, 0x3, 0x200, 0x9c, 0x2}, {0x5, 0x1, 0x48, 0x5, 0x5, 0x5}, {0x4, 0x1, 0xfffffffc, 0x7, 0x8bb4, 0x401}, {0xf3a8, 0x1ff, 0x0, 0x8, 0x294b, 0x3}, {0x4, 0x8, 0x4, 0x2af4, 0x4, 0x5}, {0x0, 0x8, 0x3, 0xf2, 0x1, 0x5}, {0x2, 0xfffffc00, 0xe, 0x5, 0x2, 0x1}, {0xffffffff, 0x100, 0x1000, 0x3ff, 0x4, 0x9}, {0x80000001, 0xfffff800, 0x4, 0x2, 0x9, 0x6}, {0x10001, 0x2, 0xd35b, 0x5, 0x7, 0x9}], [{0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4}, {0x4, 0xfea433da6769dbba}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x3}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {}, {0x3}, {0x3}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x4, 0x0, 0x6, 0x1}, 0xe, 0x7f, [{0x5a1d, 0x9, 0x10, 0x480, 0x8, 0x570}, {0x7, 0x8, 0x10000, 0x6, 0x7, 0x8}]}, [{0x1ff, 0x4, 0x4, 0x4, 0x4, 0x98}, {0x4c, 0x7fffffff, 0x2, 0x426cddd9, 0x3, 0x8000}, {0x1, 0xf, 0xe439, 0x100, 0x8, 0x8c3}, {0x0, 0x5, 0x4, 0x10, 0x1, 0x5}, {0xfffffc01, 0x5, 0x6, 0x1, 0x8ca0, 0x9}, {0x40, 0xc, 0x1, 0x6, 0x9, 0xfd}, {0x8, 0x101, 0x4, 0x9, 0x0, 0x2}, {0x0, 0x1, 0x2, 0x5, 0x82a4dfc6, 0x8000}, {0xd, 0x2, 0x8, 0x6, 0x7, 0x5}, {0x9, 0xb, 0xf, 0xff, 0x8001, 0x4}, {0x8, 0xffffffff, 0x1, 0xc1, 0x1, 0x1}, {0x0, 0x5, 0x9, 0x5, 0x4, 0x7}, {0x5, 0x1, 0xfffff001, 0x6418, 0x9, 0xff}, {0x6, 0xf71, 0x3, 0x4, 0x9, 0x4}, {0x1000, 0x4, 0x9, 0x100, 0x3, 0x7ff}, {0x6, 0x1, 0xe, 0x4, 0xe, 0x53}, {0x7fff, 0x9, 0x11, 0x7, 0xc, 0x1}, {0x7, 0x0, 0x6, 0xfffffff2, 0x3, 0xfffffffc}, {0x1, 0x2, 0x800, 0x9, 0x0, 0x5d33}, {0x0, 0x6, 0x82, 0x3, 0xe, 0x9}, {0x0, 0x10000, 0x1, 0x5, 0x215, 0x4}, {0x8, 0xf139, 0x9, 0x0, 0x7, 0xffff}, {0x2, 0x1, 0xd, 0xd, 0x9, 0x81}, {0x6, 0xb, 0x1, 0x7, 0x7, 0x6}, {0x101, 0x10, 0x70c, 0x7, 0x9, 0x3465}, {0x9, 0x9, 0xffff00, 0x2, 0x2, 0x8}, {0xe, 0x7, 0x54d, 0x3ff, 0x6, 0x3}, {0x3, 0x8f, 0x4, 0x13, 0x6, 0x1}, {0x2, 0x80000000, 0x1, 0xf3a, 0x8}, {0x4, 0x4, 0x5ec, 0x3, 0x8, 0x1}, {0xfffffbe4, 0x3, 0xffffffff, 0x7, 0x6f, 0x7}, {0x81b, 0x4, 0x6, 0x8000, 0x7, 0x5}, {0x8a0, 0xd951, 0x3, 0x3, 0xdc, 0x10000}, {0x3, 0x4, 0xffffffff, 0x9, 0x5b70, 0x200}, {0x7, 0x1, 0x9, 0x8, 0xbc35, 0x1}, {0x9, 0x6, 0x8, 0x5, 0x101}, {0xa, 0xd02, 0x81, 0x1, 0x67a, 0x2}, {0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x8}, {0x9, 0x3, 0x6, 0x6, 0x3, 0x53}, {0x3cc, 0x7, 0x5, 0x100, 0x8, 0x1}, {0x4, 0x1, 0x7, 0x7, 0x0, 0x1ff}, {0x80000001, 0x80, 0x8, 0x10001, 0x10001, 0x7ff}, {0x8, 0x3, 0x9, 0x0, 0xb0d, 0xfffffff8}, {0xffffffa3, 0x1635, 0x28, 0xffff, 0xe068, 0x7ffeffff}, {0x3, 0x1, 0xffff, 0x6, 0x3, 0x1}, {0xa, 0x1000, 0x2, 0x5, 0x6, 0x8}, {0x3, 0xc6f, 0x6, 0x6, 0x6, 0x9}, {0x7d, 0x5, 0x800, 0x1, 0x4, 0x80000001}, {0xf3d3, 0x1, 0x7, 0x3e7e, 0xd, 0x3}, {0x1, 0x3, 0x4, 0x7, 0x8, 0x2}, {0x2be6, 0x3, 0x3, 0x2, 0xc0e8}, {0x2, 0x2, 0x2, 0x77b, 0x88eb, 0x2}, {0x6, 0x6ac8, 0x5c6f, 0xfffff800, 0x2c40, 0xfff}, {0x1, 0x3ff, 0xaa, 0x80, 0x81, 0x4}, {0x7, 0x200, 0xf, 0x40, 0x3, 0x4}, {0x8, 0xfff, 0x800, 0x40, 0x2, 0x8}, {0x13e8, 0x376ed76c, 0xb44e, 0x200, 0x3, 0x4}, {0x7, 0xfffffffd, 0x2, 0x2, 0x6a5, 0x8}, {0x7, 0x1, 0x76254b73, 0x4, 0x3ff, 0xcc9}, {0x7, 0x6, 0x8, 0x81, 0x7}, {0x401, 0x6, 0x9, 0x4, 0x8000, 0x1}, {0x4, 0x7434, 0x3, 0x3, 0x4ec2, 0x54}, {0xb, 0x6, 0x2, 0x6, 0x7, 0x7}, {0xffffffff, 0x6, 0x6, 0x8, 0x9, 0xb2}, {0xb, 0x6, 0x7, 0x7, 0x7, 0x6d51}, {0x4, 0xb, 0x100, 0x7, 0x401, 0x80}, {0xff, 0x9, 0x0, 0xfff, 0xfff, 0x9}, {0x9443, 0x4, 0x3, 0x9, 0x9, 0x80000000}, {0x1ff, 0x1f, 0x4, 0x7, 0xa06, 0x800}, {0x4, 0x7fffffff, 0xff, 0xac13, 0x4, 0x9}, {0x9, 0x1, 0x1, 0x7f, 0xffff657a, 0xd}, {0x2, 0x7, 0x0, 0x401, 0x7, 0xf9c4}, {0x5c9, 0x6, 0x2, 0x5, 0x2, 0x20000000}, {0x7fffffff, 0x43f, 0x4, 0x3000, 0x6, 0x3}, {0x9, 0x0, 0x1, 0x800, 0x7, 0x7ff}, {0xbe1, 0x9, 0xc, 0x0, 0x800, 0x7}, {0x7fffffff, 0x5c7, 0x860, 0x81, 0x5, 0x7}, {0x1, 0x0, 0x7, 0x0, 0x5, 0x101}, {0x8000, 0x1, 0x6, 0x7, 0x4, 0xd}, {0x0, 0x0, 0x7, 0x2, 0x41c, 0x9}, {0xe, 0x3e, 0x7, 0x4, 0x8, 0x2}, {0x5, 0x40, 0x4, 0x5419, 0x984}, {0x7, 0xbc0, 0x7, 0x6, 0x4, 0x8001}, {0x1, 0x8000, 0x10, 0x200, 0x7, 0xd7}, {0x6, 0x10001, 0x8, 0x9, 0x4, 0x4}, {0x1000, 0xb, 0x0, 0x1000000, 0xf, 0x2}, {0x8, 0x800, 0x6, 0x9, 0x921, 0x26e0}, {0x6, 0x6, 0x2, 0x1, 0x2}, {0x3f548e8e, 0x1, 0x5, 0x9, 0x9, 0x10001}, {0x1ff, 0x40, 0x3, 0x4, 0x2, 0x5}, {0x6, 0xb00, 0x0, 0x7, 0x7, 0x6}, {0x4, 0xa, 0x9ccd, 0xe, 0x2, 0xfffffabd}, {0x4, 0x4, 0x4, 0x101, 0x0, 0x80}, {0x2, 0x3, 0x0, 0x1, 0x5, 0x864}, {0x200, 0xd, 0x9, 0x3, 0x2, 0x4}, {0x2, 0x5, 0x40, 0xb7, 0x1, 0x2}, {0x7ff, 0x1, 0x3, 0x10003, 0x7, 0x2}, {0x3, 0x101, 0x2, 0x2, 0x8, 0x6}, {0x2, 0x2ecd2ee, 0x2, 0x3ff, 0x9, 0x8}, {0x8a86, 0x8, 0x3, 0x6, 0x800, 0x3}, {0x8, 0x86, 0xc, 0x81, 0x5, 0x2}, {0x5, 0xfe, 0x1000, 0x7, 0xf775, 0x6}, {0x4, 0x4, 0x3, 0x91eb, 0x1, 0x7}, {0x6fc, 0xbaf0, 0xf, 0x1, 0x4, 0x1000}, {0x5, 0x6, 0x8, 0xd, 0x7fffffff, 0x54}, {0x458, 0x5c9, 0xab, 0xe, 0x80, 0x9}, {0x2b63, 0x9, 0x0, 0xfffffff8, 0x2, 0x9}, {0x4, 0x3, 0x1, 0x6, 0x2, 0x6}, {0xa, 0xfffffff4, 0x0, 0x1, 0x9, 0xffffb94c}, {0x7, 0x0, 0x5, 0xfff, 0x2313, 0x6}, {0x8973, 0xfffffffa, 0x8, 0xf7, 0x81, 0xfc}, {0x0, 0x400, 0x0, 0x6, 0x10001, 0xc}, {0x4, 0x5, 0x6cc0, 0x7, 0x9, 0x7}, {0x24, 0xfffffffe, 0xfffffffb, 0x1, 0x7ce6, 0x8}, {0x5, 0x5, 0x3c3, 0x1, 0x7, 0x60000000}, {0x5, 0x524, 0x2, 0x35, 0xfffffffd, 0x4}, {0xffffff7f, 0x611, 0x1, 0x0, 0x400, 0x1ff}, {0x0, 0x79e4, 0x6, 0x3, 0x5, 0x101}, {0x9, 0x2163, 0x0, 0x800, 0x10001, 0x6}, {0x22, 0x6, 0x0, 0x80000001, 0x1, 0x8ce}, {0x6, 0x0, 0x2c, 0x7fff, 0xe, 0x7}, {0x9, 0x81, 0xfff, 0x9, 0xfff, 0x8}, {0x148ee473, 0x80000000, 0x3, 0xe71, 0x5, 0x1}, {0x200, 0x9, 0x80, 0x6, 0x5, 0x5}, {0x7f, 0x4, 0x800, 0x4, 0xc590, 0x5}, {0x7, 0x0, 0x9, 0x1, 0x7, 0x51a}, {0x0, 0x3, 0x3ff, 0x7, 0x5, 0x8}, {0x4, 0x1, 0x6, 0xe2, 0x10000, 0x8}], [{0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x8fac9f3ed86ce49a}, {0x3}, {0x99bd51e2d5c01b7, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2}, {0x2}, {0x6}, {}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0xbf, 0x6, "1558bba12403a94d203aaac92b80dbbcee432a0a03e587d74218b01d7b074c9eed8ecacc56dbe68b8faeb1aaf2b54fb1c4ba18b5dfe9f930c55476fd66bfb5ce44f5adc3e3300427ccc22e5ebe160294a39cf17585a471048813051772c1cad41f3aad85c93f66851292117169ca15ba8cd58b2db366964d7c6f5087ed0897ec2eed7bb398981b2e8014b253bdfd821c3be8a1b6f161589bf435cda962e9954f9e6650e21cb914fe06c6e44fd31407bf5bdd7f11fd74ecc22ee841"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xa8, 0x7, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7, 0x7, 0x6, 0xe40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x7, 0xffffffffffffffff, 0x1, 0x2}}]}, {0x3f, 0x6, "7ce79a29ed90e599f90790675c7d5a06fc52dbec6e7feddaca22ee4fc308c4cec3cb7f02e921d8aec8f24e1f4d48508136a5c4da41375210735737"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0x48, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x3, 0x20000000, 0x8, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x1f88}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/47) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 12.705461072s ago: executing program 1 (id=2387): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010000007400200c00"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r4}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340), 0x501000, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89ef, 0x0) getcwd(&(0x7f0000000140)=""/115, 0x73) r7 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/d\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) 12.353764801s ago: executing program 1 (id=2389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), 0x0, 0x3, r3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) 11.169783413s ago: executing program 0 (id=2392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2100) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000280)={0x4, 0x5, 0x1, 'queue0\x00', 0x2}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x1, 0x2}, 0x6) close(0x4) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0xa, 0x4) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={0x0}) clock_gettime(0xfeffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x791bfd1ea2b89f05, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a03000000000000000000070000040900010073697a300000000044000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d0800034000000135140000001000010000000000000000000084000a"], 0x8c}}, 0x20050800) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000800000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007100011800c000100636f756e74657200500000000c0a01010000000000000000070000000900020073797a310000000009000100"], 0xe4}, 0x1, 0x0, 0x0, 0x20000841}, 0x44050) 8.943672638s ago: executing program 0 (id=2396): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r8 = syz_usb_connect$hid(0x5, 0x56, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc26e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 7.679782707s ago: executing program 2 (id=2402): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0xd8, 0x60]) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xca) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002580)=@newtfilter={0x1f88, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0xb}, {0x2, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1f50, 0x2, [@TCA_CGROUP_POLICE={0x54, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x4, 0x9, 0x9, 0xec, {0x2, 0x2, 0x6, 0x5, 0x7, 0x5}, {0x65, 0x2, 0x5, 0x85, 0x53b, 0x6}, 0x6874, 0x6, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}, @TCA_CGROUP_ACT={0x1ef8, 0x1, [@m_pedit={0x1e04, 0x9, 0x0, 0x0, {{0xa}, {0x1d1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x3, 0x5b, 0x5157984e7fa5a41a, 0x1, 0xe}, 0x2, 0x8, [{0x100, 0x401, 0x18d0, 0xd3, 0x3, 0x4}, {0x755c3a64, 0x3, 0x9, 0x6, 0x3, 0x211}, {0xcd6, 0x869b, 0x2, 0x3ff, 0x0, 0x9}, {0x7, 0x5, 0x7, 0x0, 0x1, 0x8}, {0x1, 0x0, 0xbb, 0x9, 0x401, 0x8a9f}]}, [{0x2, 0x0, 0xfffffff6, 0x3ff, 0x7, 0x8}, {0x8, 0xfffffffb, 0xcb47, 0x2, 0x0, 0x1}, {0x7ff, 0x0, 0xffff, 0x5}, {0x9, 0xf53, 0x8, 0x7fffffff, 0x1, 0xc9}, {0x400, 0x9, 0x0, 0x6, 0x97e2, 0x6}, {0x8, 0x551, 0x1, 0x20b2, 0x8, 0x3}, {0x3, 0x6, 0xc, 0x6, 0x5, 0x7ff}, {0x7, 0xff, 0x1, 0x4, 0x3, 0x5}, {0x200, 0x7, 0x1, 0x2, 0x1000, 0x582}, {0x4, 0x800, 0x9, 0x0, 0x10, 0xfffffffb}, {0x4, 0x1, 0x6, 0x7, 0x3, 0x7fffffff}, {0x10, 0x9, 0x4, 0x8, 0x1c0, 0xfcd}, {0x2b9, 0x3, 0x7, 0x6, 0x0, 0x8}, {0x916, 0xdf, 0x4, 0x3, 0x4, 0x3}, {0x0, 0x8, 0x7, 0x709c, 0xff, 0xffffffff}, {0x87, 0x200, 0xc17, 0xd69, 0x7fff, 0xb4f}, {0x7, 0x0, 0x200, 0x2, 0x5, 0x1}, {0x1, 0x1, 0x7, 0xff, 0x7f, 0x1}, {0xfffff182, 0x5, 0x81, 0x48, 0x4, 0x10}, {0x0, 0xfff, 0x5, 0x1, 0x1}, {0x6, 0x8, 0xa, 0x5, 0x98b}, {0x1, 0xffffffff, 0x7a28, 0x8001, 0x3, 0x6}, {0x9, 0xffff6ccc, 0x4, 0x1, 0xb5d, 0x1}, {0x9, 0x0, 0x3, 0x7278, 0x159}, {0x2, 0x4, 0x7fffffff, 0xa, 0x9, 0x40}, {0x5438efa3, 0x10000008, 0x9, 0x5, 0x2, 0x2}, {0x96, 0x3ff, 0x1, 0x9, 0xffffffff, 0x8}, {0x90, 0x3, 0x688, 0x3, 0x81, 0xffff}, {0x2, 0x1, 0x7799, 0x3, 0xe14, 0x7f}, {0x7, 0x8, 0x100, 0x5, 0x200, 0x80}, {0x92b, 0x400, 0x8, 0x9, 0x8af, 0x6}, {0x0, 0x4, 0x5cc, 0x2, 0x7fe, 0xe}, {0x2, 0x9, 0x10001, 0x5, 0x2, 0x2}, {0x3bd7, 0xffff0000, 0x80000001, 0x10, 0x9, 0x7}, {0xffff, 0x2, 0x9, 0x4, 0xffffffff, 0x3}, {0x1, 0x0, 0x645, 0x5, 0x8, 0x1}, {0x800, 0xbed3, 0x4, 0x8, 0x7, 0x7}, {0x7fff, 0x200, 0x5, 0xfffffff3, 0x0, 0x3}, {0x6, 0x6, 0x4, 0x0, 0xadb, 0x386}, {0xfffffffc, 0x1000, 0x8f, 0xfffffffb, 0x9351, 0x100}, {0xffff, 0x4, 0x3, 0x5, 0x11, 0x3}, {0x81, 0x401, 0x8, 0x8bd, 0x3, 0x3}, {0x7fff, 0x8, 0x1, 0x0, 0x0, 0x802}, {0x8, 0x101, 0x8, 0xc03b, 0x3, 0x7}, {0x101, 0xffffffff, 0x1, 0x10, 0x4, 0x8}, {0x401, 0x5, 0x6, 0x8, 0x2, 0x5}, {0x81, 0xff800000, 0x9, 0x8, 0x2, 0x23fa}, {0xd11, 0x704d, 0x7, 0x8, 0xf}, {0x7, 0x0, 0x6, 0x7, 0x7ffe, 0x57d8}, {0x9, 0xfff, 0x1, 0xf, 0x80000000}, {0x2, 0x3, 0x7fffffff, 0x9, 0x4000, 0xfffffffd}, {0x7, 0x4, 0x7, 0x3, 0x40, 0x7ff}, {0x0, 0x7, 0x4, 0x6, 0x480, 0xfffff000}, {0xe, 0x43f, 0x3, 0xfffffff9, 0x401, 0x6}, {0x4, 0x7, 0x1, 0x9, 0x3, 0x2d}, {0x9, 0x7000000, 0x0, 0xc, 0x2764, 0x9}, {0x1, 0x3, 0x8, 0x7, 0x40, 0x200}, {0x4, 0x69e, 0xfffffffd, 0xe58, 0xff, 0x282}, {0xb, 0x100, 0x0, 0x40008000, 0x1, 0x8b94}, {0x6, 0x10, 0x4, 0x5, 0x0, 0xffff0000}, {0x10001, 0x3, 0x10001, 0x8, 0x3, 0x67}, {0x9, 0x4, 0x3, 0x6, 0x8, 0x6}, {0x8, 0x8, 0x9, 0x5ab0, 0xc89}, {0x9, 0x7fffffff, 0x7, 0x6, 0x5d8, 0x7f}, {0x9, 0x0, 0x8, 0x8, 0x40000000, 0xb9}, {0x80000001, 0x9, 0x80, 0x1, 0x1ff, 0x6}, {0xfffffff9, 0x3, 0x554, 0x2cf, 0x3, 0x7}, {0x0, 0x8, 0xb6, 0xffffffff, 0x7, 0x200}, {0x9, 0x9039, 0xffe00000, 0x4, 0x249, 0x3}, {0x0, 0xffffe893, 0x7, 0xf6a2, 0x1, 0x525f}, {0x0, 0x5, 0xf, 0x9, 0x8d9, 0x3ff}, {0x3, 0xaa00918b, 0x6, 0xd0, 0x8, 0x6}, {0x1, 0x77, 0x8, 0x5, 0xef23, 0x9}, {0x2, 0x0, 0x2, 0x0, 0xf, 0x5}, {0x5, 0x3, 0xffff, 0x8, 0x7, 0x5}, {0x9, 0x1000, 0x9, 0x9, 0x7fff, 0x1}, {0x6, 0x2, 0x7, 0x400, 0x3, 0x5}, {0x4, 0x6525, 0x4, 0xf7b1, 0x3, 0x1}, {0x5, 0x88e5, 0x2, 0x5, 0x1, 0x9}, {0x1, 0x4, 0x7, 0x8000, 0x48000, 0x2}, {0x2, 0x2, 0x3, 0x3, 0x1, 0x4}, {0x1, 0x9bf8, 0x80000001, 0xa3, 0x9, 0xe4bf}, {0x6, 0x1, 0x7, 0x9, 0x215c, 0x1000}, {0x6, 0x9, 0x17, 0x82f, 0x44, 0x40}, {0x80000000, 0x8, 0x9, 0x4, 0x5, 0x6541}, {0x42, 0x400, 0x401, 0x41bb3467, 0x6, 0x5}, {0x1, 0x5, 0x4, 0x3, 0x2, 0xfff}, {0x101, 0x6, 0x101, 0x3, 0x80000000, 0x6}, {0xfffffff7, 0x100, 0x5, 0x4, 0x1, 0x8}, {0xfffffeff, 0x7fffffff, 0x0, 0x8, 0x5, 0x4000}, {0x4, 0x2, 0xedc0, 0x14, 0x7d, 0x2}, {0xd, 0x4c000, 0xff, 0x2, 0x0, 0xffffffff}, {0x197f5831, 0x10001, 0xffff0000, 0x7, 0x3, 0x80}, {0xd1, 0x4, 0x1, 0x5, 0xfffffffd, 0x10000}, {0x5, 0x2, 0xe, 0x91ef, 0xfffffff8, 0x1000}, {0xfffffff0, 0x0, 0xe, 0x4, 0x4, 0x5}, {0x2800000, 0x7fff, 0x3, 0x6, 0x8, 0xa}, {0x6, 0x0, 0x5, 0x0, 0x8000, 0xfffff0c9}, {0x1, 0x0, 0x32, 0x4, 0x48, 0xfffffffb}, {0x3, 0x2, 0x401, 0x1, 0x8c7b, 0x4a3e}, {0xf8d8, 0x1, 0x4673, 0x6, 0x7f, 0x7}, {0x401, 0xf8d9, 0x9a44, 0x81, 0xe000000, 0x9}, {0x8000, 0x9, 0x3a, 0x6, 0x2, 0x7}, {0x4, 0x7ff, 0x7fffffff, 0x3ff, 0x200, 0x4}, {0x9, 0x80000000, 0x8, 0xe, 0xd, 0xf66}, {0xb, 0xf373, 0x8001, 0x0, 0x2, 0xef}, {0xf, 0xe50e, 0x2000000, 0x4, 0x333, 0x3}, {0x9, 0x2, 0x26af, 0xfc, 0x0, 0xfffffffb}, {0x2, 0x0, 0x1, 0x4102, 0x7, 0x80000000}, {0x80000000, 0x7, 0x1, 0x9, 0x30000000, 0x261}, {0x4, 0x9, 0xbe, 0xfffff880, 0x401, 0x1000}, {0x9, 0x4c, 0x4, 0x5, 0x4, 0x7}, {0x1, 0x0, 0x9, 0xdc11, 0x8cd0, 0x7}, {0x81, 0x1ef08a2b, 0x4, 0x8, 0x80000000, 0x1}, {0x9, 0x2, 0xd, 0x982e, 0x4, 0x2}, {0x72d100, 0x401, 0xf114, 0x1, 0x9, 0x7f}, {0x9, 0x6, 0x4, 0x3, 0x6, 0xf}, {0x62221544, 0xa, 0x5, 0x0, 0xb, 0x1}, {0x3, 0x3, 0x200, 0x9c, 0x2}, {0x5, 0x1, 0x48, 0x5, 0x5, 0x5}, {0x4, 0x1, 0xfffffffc, 0x7, 0x8bb4, 0x401}, {0xf3a8, 0x1ff, 0x0, 0x8, 0x294b, 0x3}, {0x4, 0x8, 0x4, 0x2af4, 0x4, 0x5}, {0x0, 0x8, 0x3, 0xf2, 0x1, 0x5}, {0x2, 0xfffffc00, 0xe, 0x5, 0x2, 0x1}, {0xffffffff, 0x100, 0x1000, 0x3ff, 0x4, 0x9}, {0x80000001, 0xfffff800, 0x4, 0x2, 0x9, 0x6}, {0x10001, 0x2, 0xd35b, 0x5, 0x7, 0x9}], [{0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4}, {0x4, 0xfea433da6769dbba}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x3}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {}, {0x3}, {0x3}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x4, 0x0, 0x6, 0x1}, 0xe, 0x7f, [{0x5a1d, 0x9, 0x10, 0x480, 0x8, 0x570}, {0x7, 0x8, 0x10000, 0x6, 0x7, 0x8}]}, [{0x1ff, 0x4, 0x4, 0x4, 0x4, 0x98}, {0x4c, 0x7fffffff, 0x2, 0x426cddd9, 0x3, 0x8000}, {0x1, 0xf, 0xe439, 0x100, 0x8, 0x8c3}, {0x0, 0x5, 0x4, 0x10, 0x1, 0x5}, {0xfffffc01, 0x5, 0x6, 0x1, 0x8ca0, 0x9}, {0x40, 0xc, 0x1, 0x6, 0x9, 0xfd}, {0x8, 0x101, 0x4, 0x9, 0x0, 0x2}, {0x0, 0x1, 0x2, 0x5, 0x82a4dfc6, 0x8000}, {0xd, 0x2, 0x8, 0x6, 0x7, 0x5}, {0x9, 0xb, 0xf, 0xff, 0x8001, 0x4}, {0x8, 0xffffffff, 0x1, 0xc1, 0x1, 0x1}, {0x0, 0x5, 0x9, 0x5, 0x4, 0x7}, {0x5, 0x1, 0xfffff001, 0x6418, 0x9, 0xff}, {0x6, 0xf71, 0x3, 0x4, 0x9, 0x4}, {0x1000, 0x4, 0x9, 0x100, 0x3, 0x7ff}, {0x6, 0x1, 0xe, 0x4, 0xe, 0x53}, {0x7fff, 0x9, 0x11, 0x7, 0xc, 0x1}, {0x7, 0x0, 0x6, 0xfffffff2, 0x3, 0xfffffffc}, {0x1, 0x2, 0x800, 0x9, 0x0, 0x5d33}, {0x0, 0x6, 0x82, 0x3, 0xe, 0x9}, {0x0, 0x10000, 0x1, 0x5, 0x215, 0x4}, {0x8, 0xf139, 0x9, 0x0, 0x7, 0xffff}, {0x2, 0x1, 0xd, 0xd, 0x9, 0x81}, {0x6, 0xb, 0x1, 0x7, 0x7, 0x6}, {0x101, 0x10, 0x70c, 0x7, 0x9, 0x3465}, {0x9, 0x9, 0xffff00, 0x2, 0x2, 0x8}, {0xe, 0x7, 0x54d, 0x3ff, 0x6, 0x3}, {0x3, 0x8f, 0x4, 0x13, 0x6, 0x1}, {0x2, 0x80000000, 0x1, 0xf3a, 0x8}, {0x4, 0x4, 0x5ec, 0x3, 0x8, 0x1}, {0xfffffbe4, 0x3, 0xffffffff, 0x7, 0x6f, 0x7}, {0x81b, 0x4, 0x6, 0x8000, 0x7, 0x5}, {0x8a0, 0xd951, 0x3, 0x3, 0xdc, 0x10000}, {0x3, 0x4, 0xffffffff, 0x9, 0x5b70, 0x200}, {0x7, 0x1, 0x9, 0x8, 0xbc35, 0x1}, {0x9, 0x6, 0x8, 0x5, 0x101}, {0xa, 0xd02, 0x81, 0x1, 0x67a, 0x2}, {0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x8}, {0x9, 0x3, 0x6, 0x6, 0x3, 0x53}, {0x3cc, 0x7, 0x5, 0x100, 0x8, 0x1}, {0x4, 0x1, 0x7, 0x7, 0x0, 0x1ff}, {0x80000001, 0x80, 0x8, 0x10001, 0x10001, 0x7ff}, {0x8, 0x3, 0x9, 0x0, 0xb0d, 0xfffffff8}, {0xffffffa3, 0x1635, 0x28, 0xffff, 0xe068, 0x7ffeffff}, {0x3, 0x1, 0xffff, 0x6, 0x3, 0x1}, {0xa, 0x1000, 0x2, 0x5, 0x6, 0x8}, {0x3, 0xc6f, 0x6, 0x6, 0x6, 0x9}, {0x7d, 0x5, 0x800, 0x1, 0x4, 0x80000001}, {0xf3d3, 0x1, 0x7, 0x3e7e, 0xd, 0x3}, {0x1, 0x3, 0x4, 0x7, 0x8, 0x2}, {0x2be6, 0x3, 0x3, 0x2, 0xc0e8}, {0x2, 0x2, 0x2, 0x77b, 0x88eb, 0x2}, {0x6, 0x6ac8, 0x5c6f, 0xfffff800, 0x2c40, 0xfff}, {0x1, 0x3ff, 0xaa, 0x80, 0x81, 0x4}, {0x7, 0x200, 0xf, 0x40, 0x3, 0x4}, {0x8, 0xfff, 0x800, 0x40, 0x2, 0x8}, {0x13e8, 0x376ed76c, 0xb44e, 0x200, 0x3, 0x4}, {0x7, 0xfffffffd, 0x2, 0x2, 0x6a5, 0x8}, {0x7, 0x1, 0x76254b73, 0x4, 0x3ff, 0xcc9}, {0x7, 0x6, 0x8, 0x81, 0x7}, {0x401, 0x6, 0x9, 0x4, 0x8000, 0x1}, {0x4, 0x7434, 0x3, 0x3, 0x4ec2, 0x54}, {0xb, 0x6, 0x2, 0x6, 0x7, 0x7}, {0xffffffff, 0x6, 0x6, 0x8, 0x9, 0xb2}, {0xb, 0x6, 0x7, 0x7, 0x7, 0x6d51}, {0x4, 0xb, 0x100, 0x7, 0x401, 0x80}, {0xff, 0x9, 0x0, 0xfff, 0xfff, 0x9}, {0x9443, 0x4, 0x3, 0x9, 0x9, 0x80000000}, {0x1ff, 0x1f, 0x4, 0x7, 0xa06, 0x800}, {0x4, 0x7fffffff, 0xff, 0xac13, 0x4, 0x9}, {0x9, 0x1, 0x1, 0x7f, 0xffff657a, 0xd}, {0x2, 0x7, 0x0, 0x401, 0x7, 0xf9c4}, {0x5c9, 0x6, 0x2, 0x5, 0x2, 0x20000000}, {0x7fffffff, 0x43f, 0x4, 0x3000, 0x6, 0x3}, {0x9, 0x0, 0x1, 0x800, 0x7, 0x7ff}, {0xbe1, 0x9, 0xc, 0x0, 0x800, 0x7}, {0x7fffffff, 0x5c7, 0x860, 0x81, 0x5, 0x7}, {0x1, 0x0, 0x7, 0x0, 0x5, 0x101}, {0x8000, 0x1, 0x6, 0x7, 0x4, 0xd}, {0x0, 0x0, 0x7, 0x2, 0x41c, 0x9}, {0xe, 0x3e, 0x7, 0x4, 0x8, 0x2}, {0x5, 0x40, 0x4, 0x5419, 0x984}, {0x7, 0xbc0, 0x7, 0x6, 0x4, 0x8001}, {0x1, 0x8000, 0x10, 0x200, 0x7, 0xd7}, {0x6, 0x10001, 0x8, 0x9, 0x4, 0x4}, {0x1000, 0xb, 0x0, 0x1000000, 0xf, 0x2}, {0x8, 0x800, 0x6, 0x9, 0x921, 0x26e0}, {0x6, 0x6, 0x2, 0x1, 0x2}, {0x3f548e8e, 0x1, 0x5, 0x9, 0x9, 0x10001}, {0x1ff, 0x40, 0x3, 0x4, 0x2, 0x5}, {0x6, 0xb00, 0x0, 0x7, 0x7, 0x6}, {0x4, 0xa, 0x9ccd, 0xe, 0x2, 0xfffffabd}, {0x4, 0x4, 0x4, 0x101, 0x0, 0x80}, {0x2, 0x3, 0x0, 0x1, 0x5, 0x864}, {0x200, 0xd, 0x9, 0x3, 0x2, 0x4}, {0x2, 0x5, 0x40, 0xb7, 0x1, 0x2}, {0x7ff, 0x1, 0x3, 0x10003, 0x7, 0x2}, {0x3, 0x101, 0x2, 0x2, 0x8, 0x6}, {0x2, 0x2ecd2ee, 0x2, 0x3ff, 0x9, 0x8}, {0x8a86, 0x8, 0x3, 0x6, 0x800, 0x3}, {0x8, 0x86, 0xc, 0x81, 0x5, 0x2}, {0x5, 0xfe, 0x1000, 0x7, 0xf775, 0x6}, {0x4, 0x4, 0x3, 0x91eb, 0x1, 0x7}, {0x6fc, 0xbaf0, 0xf, 0x1, 0x4, 0x1000}, {0x5, 0x6, 0x8, 0xd, 0x7fffffff, 0x54}, {0x458, 0x5c9, 0xab, 0xe, 0x80, 0x9}, {0x2b63, 0x9, 0x0, 0xfffffff8, 0x2, 0x9}, {0x4, 0x3, 0x1, 0x6, 0x2, 0x6}, {0xa, 0xfffffff4, 0x0, 0x1, 0x9, 0xffffb94c}, {0x7, 0x0, 0x5, 0xfff, 0x2313, 0x6}, {0x8973, 0xfffffffa, 0x8, 0xf7, 0x81, 0xfc}, {0x0, 0x400, 0x0, 0x6, 0x10001, 0xc}, {0x4, 0x5, 0x6cc0, 0x7, 0x9, 0x7}, {0x24, 0xfffffffe, 0xfffffffb, 0x1, 0x7ce6, 0x8}, {0x5, 0x5, 0x3c3, 0x1, 0x7, 0x60000000}, {0x5, 0x524, 0x2, 0x35, 0xfffffffd, 0x4}, {0xffffff7f, 0x611, 0x1, 0x0, 0x400, 0x1ff}, {0x0, 0x79e4, 0x6, 0x3, 0x5, 0x101}, {0x9, 0x2163, 0x0, 0x800, 0x10001, 0x6}, {0x22, 0x6, 0x0, 0x80000001, 0x1, 0x8ce}, {0x6, 0x0, 0x2c, 0x7fff, 0xe, 0x7}, {0x9, 0x81, 0xfff, 0x9, 0xfff, 0x8}, {0x148ee473, 0x80000000, 0x3, 0xe71, 0x5, 0x1}, {0x200, 0x9, 0x80, 0x6, 0x5, 0x5}, {0x7f, 0x4, 0x800, 0x4, 0xc590, 0x5}, {0x7, 0x0, 0x9, 0x1, 0x7, 0x51a}, {0x0, 0x3, 0x3ff, 0x7, 0x5, 0x8}, {0x4, 0x1, 0x6, 0xe2, 0x10000, 0x8}], [{0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x8fac9f3ed86ce49a}, {0x3}, {0x99bd51e2d5c01b7, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2}, {0x2}, {0x6}, {}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0xbf, 0x6, "1558bba12403a94d203aaac92b80dbbcee432a0a03e587d74218b01d7b074c9eed8ecacc56dbe68b8faeb1aaf2b54fb1c4ba18b5dfe9f930c55476fd66bfb5ce44f5adc3e3300427ccc22e5ebe160294a39cf17585a471048813051772c1cad41f3aad85c93f66851292117169ca15ba8cd58b2db366964d7c6f5087ed0897ec2eed7bb398981b2e8014b253bdfd821c3be8a1b6f161589bf435cda962e9954f9e6650e21cb914fe06c6e44fd31407bf5bdd7f11fd74ecc22ee841"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xa8, 0x7, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7, 0x7, 0x6, 0xe40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x7, 0xffffffffffffffff, 0x1, 0x2}}]}, {0x3f, 0x6, "7ce79a29ed90e599f90790675c7d5a06fc52dbec6e7feddaca22ee4fc308c4cec3cb7f02e921d8aec8f24e1f4d48508136a5c4da41375210735737"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0x48, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x3, 0x20000000, 0x8, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x1f88}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/47) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 7.649161112s ago: executing program 4 (id=2403): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r5 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001480)="3b5250dd8df768c581177cc96346a125c5baecd7e46618851e723e8ef1628f8e5c9fff1954ad6617c17fd0658b4c494ab4b9c82de21662a0d7c3cafc01b397ad6c398c755561984e8ba92704585396a2101125bb2a4d000000611bc84796c8015747ffc90dcf9341cd76ab4a14b4973cd160e90aafad5742f47771132af6fdeea669adfd", 0x84, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (fail_nth: 1) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 6.977484434s ago: executing program 3 (id=2404): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3a, 0x2, @thr={0x0, 0x0}}, &(0x7f00000005c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="2b7eeb962285"}) unshare(0x4a000200) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) prlimit64(r3, 0x8, &(0x7f0000000140)={0x3ff, 0x4}, &(0x7f0000000180)) r4 = syz_usb_connect(0x3, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000700)=@alg, 0x80, &(0x7f0000001b40)}, 0x7}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001840)=""/139, 0x8b}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000001900)=""/273, 0x111}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000001a40)=""/101, 0x65}], 0x5, &(0x7f0000001c40)=""/56, 0x38}, 0xf467}], 0x2, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10000, 0x113) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r5) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000306010100003500000000000000000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x0, 0xf, 0xf0, "bb06002a453e9d94a20d4e3e25c32d673b9d469bf01ba867a4fb28b6936589b9671b8af40984fc5bb9295b48f3b5adfc2db8ae2b67cf3d739562f863421afe84a04193271c9a3996a12fea0445c5f922a5b2e65019ef97906e5be94e9e55773732bb0000004103c102fcf98c400e00164fc129191965ee0000000000000000905f90f672981cb4c5752989eb128b997fa5e44408c65a35c58c035be3e2d59e1bc31abdf3c4a4f95890c730e84b11c62a34759f2e4d134f328419401735c1625aff93d820414c28b360f47a5d44123c9da399aaa172aa30028d9e55c4f6f63b303ec626fceb92976be85937a8b275b6ca"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, &(0x7f0000000380)={0x14, &(0x7f00000001c0)={0x40, 0x9, 0x34, {0x34, 0x2, "0b2285821536e46d6f0fce3b96c7a83e6bf3b5a1bd8342203c6b6c7ca2a406c2f94ce39f44579903712f7bd243f46e3a24f0"}}, &(0x7f0000000780)=ANY=[@ANYBLOB="000391000000910306482097aa60f9b7531d6ea5ff428eab9df97b366d633d5d06ffcfaef2df7264387728df7bf72d4b2fb910907db66164c4d03a78c77e16361404a04b185d4660d92fe89981a67d7ca25b485ebb6b33effd4ced6e58a352ad4c5a59142cdc68acee576266483f75783df38d5e1fba87d7e7d1efec427603857c55b0a39cd02f6080225d38af03a0ff7b8480f13f06257cd3"]}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="40153c0000004e39542cbeb2c0ac0eadb1969f9d035b1d79e2a93bf30cfc8f57b714d0aa31127096093397e98f588294b14fd6428c78b43a0d64699c3d410ea4978c"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000540)={0x40, 0x5, 0x3, "ce3854"}}) 6.883399506s ago: executing program 4 (id=2405): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, 0x0, 0xffa8) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001b000000080000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x4e20, 0x7, @local, 0x5}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000340)={r6, 0x1000}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r7, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0xfed, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 5.933658705s ago: executing program 4 (id=2406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) mkdir(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r5 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 4.413838546s ago: executing program 4 (id=2407): madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200008c0) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x7, 0x5, 0x180, 0x7, 0x0, 0x80, 0x1000000000009, 0x1c6, 0x5, 0x0, 0x7, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x1, 0x1, 0x18, @mcast1, @empty, 0xa, 0x10, 0x81, 0xffffffff}}) 4.201529763s ago: executing program 1 (id=2408): syz_emit_ethernet(0x482, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x7, 0x5, 0x3831354f, 0x0, 0x5, [{0x8c65, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x40000001, 0x4}, {0x9, 0xd1}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0x8}], 0x6, 0x8, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f000059a000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010102, @in=@local, 0x0, 0xb2ad, 0xffff, 0x0, 0xa}, {}, {0x0, 0x687}, 0x5bc, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@remote, 0x0, 0x2, 0x0, 0x3, 0x8000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = gettid() tkill(r2, 0x7) sched_setaffinity(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x200008c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') rename(0x0, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="53dff3a44139", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x90, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}, @timestamp_reply={0xe, 0x0, 0x0, 0xd, 0xff7f, 0x5, 0x43, 0xfffffffe}}}}}, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3900, 0x0) poll(&(0x7f0000000080), 0x0, 0x403ff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x5100, 0x0) 4.196033959s ago: executing program 4 (id=2409): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x7fffffffffffffff, 0x420081) msgget(0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000020000000ecffff00000000009500000001000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pipe(&(0x7f0000000000)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x12402, 0x0) 4.161005613s ago: executing program 2 (id=2410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 2.859691658s ago: executing program 2 (id=2411): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) 2.822813216s ago: executing program 0 (id=2412): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sysfs$2(0x2, 0x817fff, &(0x7f0000000300)=""/101) 2.128156754s ago: executing program 2 (id=2413): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f000500", 0x1b}], 0x1}, 0x4404c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) 1.725412455s ago: executing program 0 (id=2414): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x482, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff2, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x40000001, 0x4}, {0x9, 0x7}, {0x6, 0x4}, {0x0, 0x9}, {0x1, 0x8}], 0x6, 0x8, 0x4, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() tkill(r0, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x200008c0) sendmsg$NFT_BATCH(r2, 0x0, 0x4000840) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="53dff3a44139bbbbbbbbbbbb0800450000280066000090889078ac"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x9, 0x1, 0x4, 0x2, 0x1, 0x1, 0xef, 0xba, 0x0, 0xe, 0x7f, 0xa, 0x2, 0xd, 0x45}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x7, 0x5, 0x180, 0x7, 0x0, 0x80, 0x1000000000009, 0x1c6, 0x5, 0x0, 0x7, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x1, 0x1, 0x18, @mcast1, @empty, 0xa, 0x10, 0x81, 0xffffffff}}) 1.691132217s ago: executing program 2 (id=2415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 1.684274299s ago: executing program 3 (id=2416): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000840)=[@in={0x2, 0x4e21, @local}], 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, 0x0, 0xffa8) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001b000000080000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x4e20, 0x7, @local, 0x5}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000340)={r5, 0x1000}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r6, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0xfed, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 1.578298067s ago: executing program 3 (id=2417): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x90, 0x1e, 0x109, 0x0, 0xfffffffe, {}, [{0x7c, 0x1, [@m_ct={0x78, 0xc, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "240f6bd39baa40cc4284547234bf0d50"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "cfc11146aa6a7b5dc6e34631ba00aa90"}, @TCA_CT_ZONE={0x6, 0x4, 0x81}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x90}, 0x1, 0x2b1e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)=0x9) r6 = dup3(0xffffffffffffffff, r5, 0x0) accept4$unix(r6, 0xfffffffffffffffe, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f0000000040)) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 1.512451749s ago: executing program 2 (id=2418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), 0x0, 0x3, r3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) 1.381653768s ago: executing program 3 (id=2419): madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200008c0) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x7, 0x5, 0x180, 0x7, 0x0, 0x80, 0x1000000000009, 0x1c6, 0x5, 0x0, 0x7, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x1, 0x1, 0x18, @mcast1, @empty, 0xa, 0x10, 0x81, 0xffffffff}}) 1.349530833s ago: executing program 4 (id=2420): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0xd8, 0x60]) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) mknod$loop(0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="0198000000000000200012800800010067726500140002800800010089"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002580)=@newtfilter={0x1f88, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0xb}, {0x2, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1f50, 0x2, [@TCA_CGROUP_POLICE={0x54, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x4, 0x9, 0x9, 0xec, {0x2, 0x2, 0x6, 0x5, 0x7, 0x5}, {0x65, 0x2, 0x5, 0x85, 0x53b, 0x6}, 0x6874, 0x6, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}, @TCA_CGROUP_ACT={0x1ef8, 0x1, [@m_pedit={0x1e04, 0x9, 0x0, 0x0, {{0xa}, {0x1d1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x3, 0x5b, 0x5157984e7fa5a41a, 0x1, 0xe}, 0x2, 0x8, [{0x100, 0x401, 0x18d0, 0xd3, 0x3, 0x4}, {0x755c3a64, 0x3, 0x9, 0x6, 0x3, 0x211}, {0xcd6, 0x869b, 0x2, 0x3ff, 0x0, 0x9}, {0x7, 0x5, 0x7, 0x0, 0x1, 0x8}, {0x1, 0x0, 0xbb, 0x9, 0x401, 0x8a9f}]}, [{0x2, 0x0, 0xfffffff6, 0x3ff, 0x7, 0x8}, {0x8, 0xfffffffb, 0xcb47, 0x2, 0x0, 0x1}, {0x7ff, 0x0, 0xffff, 0x5}, {0x9, 0xf53, 0x8, 0x7fffffff, 0x1, 0xc9}, {0x400, 0x9, 0x0, 0x6, 0x97e2, 0x6}, {0x8, 0x551, 0x1, 0x20b2, 0x8, 0x3}, {0x3, 0x6, 0xc, 0x6, 0x5, 0x7ff}, {0x7, 0xff, 0x1, 0x4, 0x3, 0x5}, {0x200, 0x7, 0x1, 0x2, 0x1000, 0x582}, {0x4, 0x800, 0x9, 0x0, 0x10, 0xfffffffb}, {0x4, 0x1, 0x6, 0x7, 0x3, 0x7fffffff}, {0x10, 0x9, 0x4, 0x8, 0x1c0, 0xfcd}, {0x2b9, 0x3, 0x7, 0x6, 0x0, 0x8}, {0x916, 0xdf, 0x4, 0x3, 0x4, 0x3}, {0x0, 0x8, 0x7, 0x709c, 0xff, 0xffffffff}, {0x87, 0x200, 0xc17, 0xd69, 0x7fff, 0xb4f}, {0x7, 0x0, 0x200, 0x2, 0x5, 0x1}, {0x1, 0x1, 0x7, 0xff, 0x7f, 0x1}, {0xfffff182, 0x5, 0x81, 0x48, 0x4, 0x10}, {0x0, 0xfff, 0x5, 0x1, 0x1}, {0x6, 0x8, 0xa, 0x5, 0x98b}, {0x1, 0xffffffff, 0x7a28, 0x8001, 0x3, 0x6}, {0x9, 0xffff6ccc, 0x4, 0x1, 0xb5d, 0x1}, {0x9, 0x0, 0x3, 0x7278, 0x159}, {0x2, 0x4, 0x7fffffff, 0xa, 0x9, 0x40}, {0x5438efa3, 0x10000008, 0x9, 0x5, 0x2, 0x2}, {0x96, 0x3ff, 0x1, 0x9, 0xffffffff, 0x8}, {0x90, 0x3, 0x688, 0x3, 0x81, 0xffff}, {0x2, 0x1, 0x7799, 0x3, 0xe14, 0x7f}, {0x7, 0x8, 0x100, 0x5, 0x200, 0x80}, {0x92b, 0x400, 0x8, 0x9, 0x8af, 0x6}, {0x0, 0x4, 0x5cc, 0x2, 0x7fe, 0xe}, {0x2, 0x9, 0x10001, 0x5, 0x2, 0x2}, {0x3bd7, 0xffff0000, 0x80000001, 0x10, 0x9, 0x7}, {0xffff, 0x2, 0x9, 0x4, 0xffffffff, 0x3}, {0x1, 0x0, 0x645, 0x5, 0x8, 0x1}, {0x800, 0xbed3, 0x4, 0x8, 0x7, 0x7}, {0x7fff, 0x200, 0x5, 0xfffffff3, 0x0, 0x3}, {0x6, 0x6, 0x4, 0x0, 0xadb, 0x386}, {0xfffffffc, 0x1000, 0x8f, 0xfffffffb, 0x9351, 0x100}, {0xffff, 0x4, 0x3, 0x5, 0x11, 0x3}, {0x81, 0x401, 0x8, 0x8bd, 0x3, 0x3}, {0x7fff, 0x8, 0x1, 0x0, 0x0, 0x802}, {0x8, 0x101, 0x8, 0xc03b, 0x3, 0x7}, {0x101, 0xffffffff, 0x1, 0x10, 0x4, 0x8}, {0x401, 0x5, 0x6, 0x8, 0x2, 0x5}, {0x81, 0xff800000, 0x9, 0x8, 0x2, 0x23fa}, {0xd11, 0x704d, 0x7, 0x8, 0xf}, {0x7, 0x0, 0x6, 0x7, 0x7ffe, 0x57d8}, {0x9, 0xfff, 0x1, 0xf, 0x80000000}, {0x2, 0x3, 0x7fffffff, 0x9, 0x4000, 0xfffffffd}, {0x7, 0x4, 0x7, 0x3, 0x40, 0x7ff}, {0x0, 0x7, 0x4, 0x6, 0x480, 0xfffff000}, {0xe, 0x43f, 0x3, 0xfffffff9, 0x401, 0x6}, {0x4, 0x7, 0x1, 0x9, 0x3, 0x2d}, {0x9, 0x7000000, 0x0, 0xc, 0x2764, 0x9}, {0x1, 0x3, 0x8, 0x7, 0x40, 0x200}, {0x4, 0x69e, 0xfffffffd, 0xe58, 0xff, 0x282}, {0xb, 0x100, 0x0, 0x40008000, 0x1, 0x8b94}, {0x6, 0x10, 0x4, 0x5, 0x0, 0xffff0000}, {0x10001, 0x3, 0x10001, 0x8, 0x3, 0x67}, {0x9, 0x4, 0x3, 0x6, 0x8, 0x6}, {0x8, 0x8, 0x9, 0x5ab0, 0xc89}, {0x9, 0x7fffffff, 0x7, 0x6, 0x5d8, 0x7f}, {0x9, 0x0, 0x8, 0x8, 0x40000000, 0xb9}, {0x80000001, 0x9, 0x80, 0x1, 0x1ff, 0x6}, {0xfffffff9, 0x3, 0x554, 0x2cf, 0x3, 0x7}, {0x0, 0x8, 0xb6, 0xffffffff, 0x7, 0x200}, {0x9, 0x9039, 0xffe00000, 0x4, 0x249, 0x3}, {0x0, 0xffffe893, 0x7, 0xf6a2, 0x1, 0x525f}, {0x0, 0x5, 0xf, 0x9, 0x8d9, 0x3ff}, {0x3, 0xaa00918b, 0x6, 0xd0, 0x8, 0x6}, {0x1, 0x77, 0x8, 0x5, 0xef23, 0x9}, {0x2, 0x0, 0x2, 0x0, 0xf, 0x5}, {0x5, 0x3, 0xffff, 0x8, 0x7, 0x5}, {0x9, 0x1000, 0x9, 0x9, 0x7fff, 0x1}, {0x6, 0x2, 0x7, 0x400, 0x3, 0x5}, {0x4, 0x6525, 0x4, 0xf7b1, 0x3, 0x1}, {0x5, 0x88e5, 0x2, 0x5, 0x1, 0x9}, {0x1, 0x4, 0x7, 0x8000, 0x48000, 0x2}, {0x2, 0x2, 0x3, 0x3, 0x1, 0x4}, {0x1, 0x9bf8, 0x80000001, 0xa3, 0x9, 0xe4bf}, {0x6, 0x1, 0x7, 0x9, 0x215c, 0x1000}, {0x6, 0x9, 0x17, 0x82f, 0x44, 0x40}, {0x80000000, 0x8, 0x9, 0x4, 0x5, 0x6541}, {0x42, 0x400, 0x401, 0x41bb3467, 0x6, 0x5}, {0x1, 0x5, 0x4, 0x3, 0x2, 0xfff}, {0x101, 0x6, 0x101, 0x3, 0x80000000, 0x6}, {0xfffffff7, 0x100, 0x5, 0x4, 0x1, 0x8}, {0xfffffeff, 0x7fffffff, 0x0, 0x8, 0x5, 0x4000}, {0x4, 0x2, 0xedc0, 0x14, 0x7d, 0x2}, {0xd, 0x4c000, 0xff, 0x2, 0x0, 0xffffffff}, {0x197f5831, 0x10001, 0xffff0000, 0x7, 0x3, 0x80}, {0xd1, 0x4, 0x1, 0x5, 0xfffffffd, 0x10000}, {0x5, 0x2, 0xe, 0x91ef, 0xfffffff8, 0x1000}, {0xfffffff0, 0x0, 0xe, 0x4, 0x4, 0x5}, {0x2800000, 0x7fff, 0x3, 0x6, 0x8, 0xa}, {0x6, 0x0, 0x5, 0x0, 0x8000, 0xfffff0c9}, {0x1, 0x0, 0x32, 0x4, 0x48, 0xfffffffb}, {0x3, 0x2, 0x401, 0x1, 0x8c7b, 0x4a3e}, {0xf8d8, 0x1, 0x4673, 0x6, 0x7f, 0x7}, {0x401, 0xf8d9, 0x9a44, 0x81, 0xe000000, 0x9}, {0x8000, 0x9, 0x3a, 0x6, 0x2, 0x7}, {0x4, 0x7ff, 0x7fffffff, 0x3ff, 0x200, 0x4}, {0x9, 0x80000000, 0x8, 0xe, 0xd, 0xf66}, {0xb, 0xf373, 0x8001, 0x0, 0x2, 0xef}, {0xf, 0xe50e, 0x2000000, 0x4, 0x333, 0x3}, {0x9, 0x2, 0x26af, 0xfc, 0x0, 0xfffffffb}, {0x2, 0x0, 0x1, 0x4102, 0x7, 0x80000000}, {0x80000000, 0x7, 0x1, 0x9, 0x30000000, 0x261}, {0x4, 0x9, 0xbe, 0xfffff880, 0x401, 0x1000}, {0x9, 0x4c, 0x4, 0x5, 0x4, 0x7}, {0x1, 0x0, 0x9, 0xdc11, 0x8cd0, 0x7}, {0x81, 0x1ef08a2b, 0x4, 0x8, 0x80000000, 0x1}, {0x9, 0x2, 0xd, 0x982e, 0x4, 0x2}, {0x72d100, 0x401, 0xf114, 0x1, 0x9, 0x7f}, {0x9, 0x6, 0x4, 0x3, 0x6, 0xf}, {0x62221544, 0xa, 0x5, 0x0, 0xb, 0x1}, {0x3, 0x3, 0x200, 0x9c, 0x2}, {0x5, 0x1, 0x48, 0x5, 0x5, 0x5}, {0x4, 0x1, 0xfffffffc, 0x7, 0x8bb4, 0x401}, {0xf3a8, 0x1ff, 0x0, 0x8, 0x294b, 0x3}, {0x4, 0x8, 0x4, 0x2af4, 0x4, 0x5}, {0x0, 0x8, 0x3, 0xf2, 0x1, 0x5}, {0x2, 0xfffffc00, 0xe, 0x5, 0x2, 0x1}, {0xffffffff, 0x100, 0x1000, 0x3ff, 0x4, 0x9}, {0x80000001, 0xfffff800, 0x4, 0x2, 0x9, 0x6}, {0x10001, 0x2, 0xd35b, 0x5, 0x7, 0x9}], [{0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x4}, {0x4, 0xfea433da6769dbba}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x3}, {0x4}, {0x2, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {}, {0x3}, {0x3}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x3}, {0x4}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x4, 0x0, 0x6, 0x1}, 0xe, 0x7f, [{0x5a1d, 0x9, 0x10, 0x480, 0x8, 0x570}, {0x7, 0x8, 0x10000, 0x6, 0x7, 0x8}]}, [{0x1ff, 0x4, 0x4, 0x4, 0x4, 0x98}, {0x4c, 0x7fffffff, 0x2, 0x426cddd9, 0x3, 0x8000}, {0x1, 0xf, 0xe439, 0x100, 0x8, 0x8c3}, {0x0, 0x5, 0x4, 0x10, 0x1, 0x5}, {0xfffffc01, 0x5, 0x6, 0x1, 0x8ca0, 0x9}, {0x40, 0xc, 0x1, 0x6, 0x9, 0xfd}, {0x8, 0x101, 0x4, 0x9, 0x0, 0x2}, {0x0, 0x1, 0x2, 0x5, 0x82a4dfc6, 0x8000}, {0xd, 0x2, 0x8, 0x6, 0x7, 0x5}, {0x9, 0xb, 0xf, 0xff, 0x8001, 0x4}, {0x8, 0xffffffff, 0x1, 0xc1, 0x1, 0x1}, {0x0, 0x5, 0x9, 0x5, 0x4, 0x7}, {0x5, 0x1, 0xfffff001, 0x6418, 0x9, 0xff}, {0x6, 0xf71, 0x3, 0x4, 0x9, 0x4}, {0x1000, 0x4, 0x9, 0x100, 0x3, 0x7ff}, {0x6, 0x1, 0xe, 0x4, 0xe, 0x53}, {0x7fff, 0x9, 0x11, 0x7, 0xc, 0x1}, {0x7, 0x0, 0x6, 0xfffffff2, 0x3, 0xfffffffc}, {0x1, 0x2, 0x800, 0x9, 0x0, 0x5d33}, {0x0, 0x6, 0x82, 0x3, 0xe, 0x9}, {0x0, 0x10000, 0x1, 0x5, 0x215, 0x4}, {0x8, 0xf139, 0x9, 0x0, 0x7, 0xffff}, {0x2, 0x1, 0xd, 0xd, 0x9, 0x81}, {0x6, 0xb, 0x1, 0x7, 0x7, 0x6}, {0x101, 0x10, 0x70c, 0x7, 0x9, 0x3465}, {0x9, 0x9, 0xffff00, 0x2, 0x2, 0x8}, {0xe, 0x7, 0x54d, 0x3ff, 0x6, 0x3}, {0x3, 0x8f, 0x4, 0x13, 0x6, 0x1}, {0x2, 0x80000000, 0x1, 0xf3a, 0x8}, {0x4, 0x4, 0x5ec, 0x3, 0x8, 0x1}, {0xfffffbe4, 0x3, 0xffffffff, 0x7, 0x6f, 0x7}, {0x81b, 0x4, 0x6, 0x8000, 0x7, 0x5}, {0x8a0, 0xd951, 0x3, 0x3, 0xdc, 0x10000}, {0x3, 0x4, 0xffffffff, 0x9, 0x5b70, 0x200}, {0x7, 0x1, 0x9, 0x8, 0xbc35, 0x1}, {0x9, 0x6, 0x8, 0x5, 0x101}, {0xa, 0xd02, 0x81, 0x1, 0x67a, 0x2}, {0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x8}, {0x9, 0x3, 0x6, 0x6, 0x3, 0x53}, {0x3cc, 0x7, 0x5, 0x100, 0x8, 0x1}, {0x4, 0x1, 0x7, 0x7, 0x0, 0x1ff}, {0x80000001, 0x80, 0x8, 0x10001, 0x10001, 0x7ff}, {0x8, 0x3, 0x9, 0x0, 0xb0d, 0xfffffff8}, {0xffffffa3, 0x1635, 0x28, 0xffff, 0xe068, 0x7ffeffff}, {0x3, 0x1, 0xffff, 0x6, 0x3, 0x1}, {0xa, 0x1000, 0x2, 0x5, 0x6, 0x8}, {0x3, 0xc6f, 0x6, 0x6, 0x6, 0x9}, {0x7d, 0x5, 0x800, 0x1, 0x4, 0x80000001}, {0xf3d3, 0x1, 0x7, 0x3e7e, 0xd, 0x3}, {0x1, 0x3, 0x4, 0x7, 0x8, 0x2}, {0x2be6, 0x3, 0x3, 0x2, 0xc0e8}, {0x2, 0x2, 0x2, 0x77b, 0x88eb, 0x2}, {0x6, 0x6ac8, 0x5c6f, 0xfffff800, 0x2c40, 0xfff}, {0x1, 0x3ff, 0xaa, 0x80, 0x81, 0x4}, {0x7, 0x200, 0xf, 0x40, 0x3, 0x4}, {0x8, 0xfff, 0x800, 0x40, 0x2, 0x8}, {0x13e8, 0x376ed76c, 0xb44e, 0x200, 0x3, 0x4}, {0x7, 0xfffffffd, 0x2, 0x2, 0x6a5, 0x8}, {0x7, 0x1, 0x76254b73, 0x4, 0x3ff, 0xcc9}, {0x7, 0x6, 0x8, 0x81, 0x7}, {0x401, 0x6, 0x9, 0x4, 0x8000, 0x1}, {0x4, 0x7434, 0x3, 0x3, 0x4ec2, 0x54}, {0xb, 0x6, 0x2, 0x6, 0x7, 0x7}, {0xffffffff, 0x6, 0x6, 0x8, 0x9, 0xb2}, {0xb, 0x6, 0x7, 0x7, 0x7, 0x6d51}, {0x4, 0xb, 0x100, 0x7, 0x401, 0x80}, {0xff, 0x9, 0x0, 0xfff, 0xfff, 0x9}, {0x9443, 0x4, 0x3, 0x9, 0x9, 0x80000000}, {0x1ff, 0x1f, 0x4, 0x7, 0xa06, 0x800}, {0x4, 0x7fffffff, 0xff, 0xac13, 0x4, 0x9}, {0x9, 0x1, 0x1, 0x7f, 0xffff657a, 0xd}, {0x2, 0x7, 0x0, 0x401, 0x7, 0xf9c4}, {0x5c9, 0x6, 0x2, 0x5, 0x2, 0x20000000}, {0x7fffffff, 0x43f, 0x4, 0x3000, 0x6, 0x3}, {0x9, 0x0, 0x1, 0x800, 0x7, 0x7ff}, {0xbe1, 0x9, 0xc, 0x0, 0x800, 0x7}, {0x7fffffff, 0x5c7, 0x860, 0x81, 0x5, 0x7}, {0x1, 0x0, 0x7, 0x0, 0x5, 0x101}, {0x8000, 0x1, 0x6, 0x7, 0x4, 0xd}, {0x0, 0x0, 0x7, 0x2, 0x41c, 0x9}, {0xe, 0x3e, 0x7, 0x4, 0x8, 0x2}, {0x5, 0x40, 0x4, 0x5419, 0x984}, {0x7, 0xbc0, 0x7, 0x6, 0x4, 0x8001}, {0x1, 0x8000, 0x10, 0x200, 0x7, 0xd7}, {0x6, 0x10001, 0x8, 0x9, 0x4, 0x4}, {0x1000, 0xb, 0x0, 0x1000000, 0xf, 0x2}, {0x8, 0x800, 0x6, 0x9, 0x921, 0x26e0}, {0x6, 0x6, 0x2, 0x1, 0x2}, {0x3f548e8e, 0x1, 0x5, 0x9, 0x9, 0x10001}, {0x1ff, 0x40, 0x3, 0x4, 0x2, 0x5}, {0x6, 0xb00, 0x0, 0x7, 0x7, 0x6}, {0x4, 0xa, 0x9ccd, 0xe, 0x2, 0xfffffabd}, {0x4, 0x4, 0x4, 0x101, 0x0, 0x80}, {0x2, 0x3, 0x0, 0x1, 0x5, 0x864}, {0x200, 0xd, 0x9, 0x3, 0x2, 0x4}, {0x2, 0x5, 0x40, 0xb7, 0x1, 0x2}, {0x7ff, 0x1, 0x3, 0x10003, 0x7, 0x2}, {0x3, 0x101, 0x2, 0x2, 0x8, 0x6}, {0x2, 0x2ecd2ee, 0x2, 0x3ff, 0x9, 0x8}, {0x8a86, 0x8, 0x3, 0x6, 0x800, 0x3}, {0x8, 0x86, 0xc, 0x81, 0x5, 0x2}, {0x5, 0xfe, 0x1000, 0x7, 0xf775, 0x6}, {0x4, 0x4, 0x3, 0x91eb, 0x1, 0x7}, {0x6fc, 0xbaf0, 0xf, 0x1, 0x4, 0x1000}, {0x5, 0x6, 0x8, 0xd, 0x7fffffff, 0x54}, {0x458, 0x5c9, 0xab, 0xe, 0x80, 0x9}, {0x2b63, 0x9, 0x0, 0xfffffff8, 0x2, 0x9}, {0x4, 0x3, 0x1, 0x6, 0x2, 0x6}, {0xa, 0xfffffff4, 0x0, 0x1, 0x9, 0xffffb94c}, {0x7, 0x0, 0x5, 0xfff, 0x2313, 0x6}, {0x8973, 0xfffffffa, 0x8, 0xf7, 0x81, 0xfc}, {0x0, 0x400, 0x0, 0x6, 0x10001, 0xc}, {0x4, 0x5, 0x6cc0, 0x7, 0x9, 0x7}, {0x24, 0xfffffffe, 0xfffffffb, 0x1, 0x7ce6, 0x8}, {0x5, 0x5, 0x3c3, 0x1, 0x7, 0x60000000}, {0x5, 0x524, 0x2, 0x35, 0xfffffffd, 0x4}, {0xffffff7f, 0x611, 0x1, 0x0, 0x400, 0x1ff}, {0x0, 0x79e4, 0x6, 0x3, 0x5, 0x101}, {0x9, 0x2163, 0x0, 0x800, 0x10001, 0x6}, {0x22, 0x6, 0x0, 0x80000001, 0x1, 0x8ce}, {0x6, 0x0, 0x2c, 0x7fff, 0xe, 0x7}, {0x9, 0x81, 0xfff, 0x9, 0xfff, 0x8}, {0x148ee473, 0x80000000, 0x3, 0xe71, 0x5, 0x1}, {0x200, 0x9, 0x80, 0x6, 0x5, 0x5}, {0x7f, 0x4, 0x800, 0x4, 0xc590, 0x5}, {0x7, 0x0, 0x9, 0x1, 0x7, 0x51a}, {0x0, 0x3, 0x3ff, 0x7, 0x5, 0x8}, {0x4, 0x1, 0x6, 0xe2, 0x10000, 0x8}], [{0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x8fac9f3ed86ce49a}, {0x3}, {0x99bd51e2d5c01b7, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2}, {0x2}, {0x6}, {}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0xbf, 0x6, "1558bba12403a94d203aaac92b80dbbcee432a0a03e587d74218b01d7b074c9eed8ecacc56dbe68b8faeb1aaf2b54fb1c4ba18b5dfe9f930c55476fd66bfb5ce44f5adc3e3300427ccc22e5ebe160294a39cf17585a471048813051772c1cad41f3aad85c93f66851292117169ca15ba8cd58b2db366964d7c6f5087ed0897ec2eed7bb398981b2e8014b253bdfd821c3be8a1b6f161589bf435cda962e9954f9e6650e21cb914fe06c6e44fd31407bf5bdd7f11fd74ecc22ee841"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xa8, 0x7, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'hfsc\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7, 0x7, 0x6, 0xe40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x7, 0xffffffffffffffff, 0x1, 0x2}}]}, {0x3f, 0x6, "7ce79a29ed90e599f90790675c7d5a06fc52dbec6e7feddaca22ee4fc308c4cec3cb7f02e921d8aec8f24e1f4d48508136a5c4da41375210735737"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0x48, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x3, 0x20000000, 0x8, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x1f88}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/47) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 1.299674601s ago: executing program 3 (id=2421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 0s ago: executing program 3 (id=2422): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) recvmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000040)}, 0x4}], 0x1, 0x100, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x180, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000380)="79da7a6d1fffcde2a4dbd1868fe91c20ee3b3a149e1b17bf51b9bcd6fe2f4a8beac38db40d15e3c8b0fc8d1a9313ca986759f49fdc1a8f834fdf751d49d759388c5231c1a086990b04e9295d30a544240fb83d1701ac85eb17d1175ec58c0d37e97edfef45a5b0b720d397f4a7051fbb1258d9eea7e72a85a6999495f772132ca7121626c265b49f93f526ea55a1e098e4859c922c7c15ec4e77639b4bfb95aba0f80dbd472d63a3455ce6595ea672b1fa447e7ce907287b0a8ffb0d162a1253ce7a32334371f25e1408eb1bb09d9f52beab8b4407ddef7a8ac79bfb08a5515f51b72ec181d31c5a67c7c909afa1b079533de2", 0xf3}, {&(0x7f00000001c0)="6fa6ff75ffda0959197e369f332fd2", 0xf}, {&(0x7f0000000680)="85f31228c31975ee6c51f6dd2249a8379edc4df1886395df4d18721aea332e4879c91ea638d71a5c94afe53925d9c616bbd406d48364d69bc46b04e380f76c62eab7356259a0dbfd85ff39948d97a2f2ed0859f7e13000315aa6ea37830a761b910f430609b64c53b8a4cbece126a96e25def16ae4cd5d39f8831e86723588109c146f78a83aa39d16c4be688b69ec0e0a1e09c5b198df2875823235fb", 0x9d}, {&(0x7f0000000740)="c594280198970bcd3370caba1ac98b63925b45816ddd9739b33e37155f8f687608912a0c7c51d8ed337353ab3a572c3666de9d4ede29e710e13abc0f5c9ca49a57beaca83387ee1bccceb359b3461aba7d340acc4a928a6ddd0fc50f1d1b808c1937e80ed681866f48e4255b8f997bbd04feffb061c3736973c499bb67c36a5ce83cdb4c6d464c5bc6b44bd9fa5c91adc86bce5eaf9bbe7a403e3c95de3245e5ec4b035175bc763ff02882509192ca356108489b05bd9455d7ff6c59935b7a47cebf8fe8e0fe50ef6d95bb88539bcac7d54ee64236534236164558d801c5ee5a6bb3f9847eae65c4", 0xe8}], 0x4, 0x0, 0x0, 0x4054044}}, {{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000840)="60cb81ac36294fed868c98a9918d2cdf", 0x10}], 0x1, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [r6, r0, r7, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x48, 0x4048085}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="281f47108414b6d34906b12f7d76790953b22c0bd7c31578019bffbf9295f91968479a6be49e03386215dc6c6a9860439b38da0f3cea5cfe18d3235bd9938094a62ea08c778fc0780f6aecddbe9ea06b36b180c8c0c0812489e6e0f3282a7af4490409d42fb867c25ca12df304dec1302147e9f7e25df4161a9de00dbd4a4a3bcf00818549aa99a57f33387b70459f9c64ae4306d879adab08363f3ec8ca9351618fd3c64a22b2ed82bdf34b79ac023e2f0e37ebcbbac5500fc14508bf76bb1c44d59ff0d18f84815973d6bee7b07b66326c955daa155482a7d649ae9927bb61e089179a488f1dc3fa3e4d800adfed269809", 0xf2}, {&(0x7f0000000b80)="348d45aba70109", 0x7}], 0x2, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r9, 0xee00, r10}}}], 0x20, 0x20000044}}, {{&(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000d80)="2da5c4b3bff80ffd0877d20ebc5f200d9d4ff2b1a075", 0x16}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000e80)="4bca46d8a8a60ae55143c570c4edcec6a5ef97cd8ad4b2720a9a8d0b6583787ed9034530cbbb9602", 0x28}, {&(0x7f0000000ec0)="6b2c1e60cd4090ea098736f6505f642907abfaa6502089546c7903cf650e187ec61b726b66231e2aa9a0e26444339da7dc8f30ce90a192ac74e53ec599c5161aee305adfd1d4f71c84b067d3be74c84d35129b1801ddf5e471728721f76555f4340a6d2a45531c2783a9effc8b0ac3221ccbcda27a029aebafa2013ede1107a34423580ee801a1b6e366ca5d4e", 0x8d}, {&(0x7f0000000f80)="a5f0b4b2cce259059c9daacf0851af375eb4e40e8304a5af83f74426ed5b98f92803de9dbbbba25012a1450c840a56c61927765429793c1a848b84c2e6a423466d8841e9cf9799c7242c5c4f197f36d3b15ce0c8ecd4167f21ff811560a2e956531d465a5ae2a4cc035d4255cb55ffd1b757f9990fe78a9c320f198c54a8b80ccb8ae9c9", 0x84}], 0x3, 0x0, 0x0, 0x8044}}], 0x5, 0xc000) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8001, &(0x7f0000008e00)=0x1, 0x6a6f, 0x2) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xb, 0xa}, {0x0, 0x400, 0x8}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x140}}, 0x20000000) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): t=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 781.932056][T13016] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 781.940019][T13016] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1649'. [ 782.024298][ T30] audit: type=1400 audit(1758760186.862:623): avc: denied { ioctl } for pid=12994 comm="syz.1.1643" path="socket:[56216]" dev="sockfs" ino=56216 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 782.052597][ T30] audit: type=1400 audit(1758760186.862:624): avc: denied { read } for pid=12994 comm="syz.1.1643" path="socket:[56216]" dev="sockfs" ino=56216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 782.076962][ T30] audit: type=1400 audit(1758760187.072:625): avc: denied { mount } for pid=13017 comm="syz.1.1648" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 782.079887][T13020] JFS: charset not found [ 782.111063][ T30] audit: type=1400 audit(1758760187.072:626): avc: denied { watch } for pid=13017 comm="syz.1.1648" path="/326/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 782.137915][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 782.146841][ T5911] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 782.334994][ T5911] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 782.487457][ T5911] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 782.790689][ T5911] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 782.820348][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 782.834336][ T5911] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 782.843371][ T5911] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 782.874213][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 782.892034][ T5911] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 782.901203][ T5911] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 783.044257][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 783.062648][ T5911] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.072359][ T5911] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 783.093986][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 783.113478][ T5911] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.128569][ T5911] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 783.163605][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 783.182864][ T5911] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.199754][ T5911] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 783.250230][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 783.275861][ T5911] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.299891][ T5911] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 783.337527][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 783.347656][ T5911] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 783.400570][ T5911] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 783.434331][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 783.446243][ T5911] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 783.528567][ T5911] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 783.553832][ T5911] usb 1-1: Product: syz [ 784.073682][ T5911] usb 1-1: Manufacturer: syz [ 784.092498][ T5911] usb 1-1: SerialNumber: syz [ 784.100674][ T5911] usb 1-1: config 0 descriptor?? [ 784.124877][ T5911] yurex 1-1:0.0: Could not find endpoints [ 784.160782][T13047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1657'. [ 784.684312][ T9898] usb 1-1: USB disconnect, device number 16 [ 785.270653][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 785.443642][T13076] FAULT_INJECTION: forcing a failure. [ 785.443642][T13076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.461468][T13076] CPU: 1 UID: 0 PID: 13076 Comm: syz.0.1666 Not tainted syzkaller #0 PREEMPT(full) [ 785.461492][T13076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 785.461501][T13076] Call Trace: [ 785.461507][T13076] [ 785.461514][T13076] dump_stack_lvl+0x16c/0x1f0 [ 785.461542][T13076] should_fail_ex+0x512/0x640 [ 785.461568][T13076] _copy_to_user+0x32/0xd0 [ 785.461595][T13076] simple_read_from_buffer+0xcb/0x170 [ 785.461616][T13076] proc_fail_nth_read+0x197/0x240 [ 785.461637][T13076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.461659][T13076] ? rw_verify_area+0xcf/0x6c0 [ 785.461686][T13076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.461707][T13076] vfs_read+0x1e1/0xcf0 [ 785.461728][T13076] ? __pfx___mutex_lock+0x10/0x10 [ 785.461752][T13076] ? __pfx_vfs_read+0x10/0x10 [ 785.461777][T13076] ? __fget_files+0x20e/0x3c0 [ 785.461805][T13076] ksys_read+0x12a/0x250 [ 785.461822][T13076] ? __pfx_ksys_read+0x10/0x10 [ 785.461854][T13076] do_syscall_64+0xcd/0x4e0 [ 785.461880][T13076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.461898][T13076] RIP: 0033:0x7f7a25f8d8dc [ 785.461912][T13076] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 785.461930][T13076] RSP: 002b:00007f7a26e1b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 785.461947][T13076] RAX: ffffffffffffffda RBX: 00007f7a261e5fa0 RCX: 00007f7a25f8d8dc [ 785.461959][T13076] RDX: 000000000000000f RSI: 00007f7a26e1b0a0 RDI: 0000000000000003 [ 785.461970][T13076] RBP: 00007f7a26e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 785.461980][T13076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.461990][T13076] R13: 00007f7a261e6038 R14: 00007f7a261e5fa0 R15: 00007ffc250aab88 [ 785.462015][T13076] [ 785.989066][T11473] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 786.285845][ T5911] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 786.332296][T13082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1670'. [ 787.034222][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 787.046848][ T5911] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 787.056860][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.069625][ T5911] usb 1-1: Product: syz [ 787.075109][ T5911] usb 1-1: Manufacturer: syz [ 787.079720][ T5911] usb 1-1: SerialNumber: syz [ 787.087824][ T5911] usb 1-1: config 0 descriptor?? [ 787.406393][T13080] erspan1: entered allmulticast mode [ 787.916203][ T5911] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 789.170475][ T5897] usb 1-1: USB disconnect, device number 17 [ 789.247194][T13113] FAULT_INJECTION: forcing a failure. [ 789.247194][T13113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.285879][T13113] CPU: 0 UID: 0 PID: 13113 Comm: syz.0.1680 Not tainted syzkaller #0 PREEMPT(full) [ 789.285904][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 789.285915][T13113] Call Trace: [ 789.285921][T13113] [ 789.285928][T13113] dump_stack_lvl+0x16c/0x1f0 [ 789.285955][T13113] should_fail_ex+0x512/0x640 [ 789.285981][T13113] _copy_to_user+0x32/0xd0 [ 789.286008][T13113] simple_read_from_buffer+0xcb/0x170 [ 789.286029][T13113] proc_fail_nth_read+0x197/0x240 [ 789.286051][T13113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.286074][T13113] ? rw_verify_area+0xcf/0x6c0 [ 789.286100][T13113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.286121][T13113] vfs_read+0x1e1/0xcf0 [ 789.286142][T13113] ? __pfx___mutex_lock+0x10/0x10 [ 789.286166][T13113] ? __pfx_vfs_read+0x10/0x10 [ 789.286190][T13113] ? __fget_files+0x20e/0x3c0 [ 789.286218][T13113] ksys_read+0x12a/0x250 [ 789.286235][T13113] ? __pfx_ksys_read+0x10/0x10 [ 789.286261][T13113] do_syscall_64+0xcd/0x4e0 [ 789.286286][T13113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.286305][T13113] RIP: 0033:0x7f7a25f8d8dc [ 789.286319][T13113] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 789.286335][T13113] RSP: 002b:00007f7a26e1b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 789.286353][T13113] RAX: ffffffffffffffda RBX: 00007f7a261e5fa0 RCX: 00007f7a25f8d8dc [ 789.286364][T13113] RDX: 000000000000000f RSI: 00007f7a26e1b0a0 RDI: 0000000000000003 [ 789.286374][T13113] RBP: 00007f7a26e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 789.286384][T13113] R10: 0000000040010060 R11: 0000000000000246 R12: 0000000000000001 [ 789.286394][T13113] R13: 00007f7a261e6038 R14: 00007f7a261e5fa0 R15: 00007ffc250aab88 [ 789.286416][T13113] [ 789.472164][ C0] vkms_vblank_simulate: vblank timer overrun [ 789.715170][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1681'. [ 789.730318][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 789.730331][ T30] audit: type=1400 audit(1758760194.772:639): avc: denied { getopt } for pid=13115 comm="syz.3.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 790.047864][T13128] netlink: 'syz.0.1684': attribute type 1 has an invalid length. [ 790.056357][T13128] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1684'. [ 790.166032][T13130] JFS: charset not found [ 792.002704][ T30] audit: type=1400 audit(1758760197.042:640): avc: denied { create } for pid=13136 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 792.513807][T13144] ceph: No mds server is up or the cluster is laggy [ 792.523436][ T9898] libceph: mon0 (1)[c::]:6789 connect error [ 793.179929][ T30] audit: type=1400 audit(1758760198.212:641): avc: denied { create } for pid=13155 comm="syz.4.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 793.230763][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'. [ 793.374214][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'. [ 793.629491][ T30] audit: type=1400 audit(1758760198.672:642): avc: denied { watch_mount watch_reads } for pid=13163 comm="syz.3.1694" path="/344" dev="tmpfs" ino=1837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 794.366808][T13179] JFS: charset not found [ 794.917425][ T30] audit: type=1400 audit(1758760199.962:643): avc: denied { bind } for pid=13182 comm="syz.3.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 795.121197][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 795.146992][ T30] audit: type=1400 audit(1758760200.162:644): avc: denied { create } for pid=13185 comm="syz.0.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 795.217507][ T30] audit: type=1400 audit(1758760200.162:645): avc: denied { bind } for pid=13185 comm="syz.0.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 796.601720][ T30] audit: type=1400 audit(1758760201.642:646): avc: denied { mount } for pid=13202 comm="syz.0.1708" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 796.701914][ T30] audit: type=1400 audit(1758760201.742:647): avc: denied { mount } for pid=13204 comm="syz.3.1709" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 796.735470][T13205] overlayfs: failed to clone upperpath [ 796.784663][ T30] audit: type=1400 audit(1758760201.782:648): avc: denied { ioctl } for pid=13204 comm="syz.3.1709" path="socket:[56867]" dev="sockfs" ino=56867 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 796.894225][ T9898] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 797.074434][ T9898] usb 1-1: device descriptor read/64, error -71 [ 797.354339][ T9898] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 797.496364][ T9898] usb 1-1: device descriptor read/64, error -71 [ 797.670429][ T9898] usb usb1-port1: attempt power cycle [ 798.074321][ T9898] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 798.335071][ T9898] usb 1-1: device descriptor read/8, error -71 [ 798.439020][T13218] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 798.443106][ C0] Unknown status report in ack skb [ 798.456383][T13218] FAULT_INJECTION: forcing a failure. [ 798.456383][T13218] name failslab, interval 1, probability 0, space 0, times 0 [ 798.469599][T13218] CPU: 1 UID: 0 PID: 13218 Comm: syz.1.1710 Not tainted syzkaller #0 PREEMPT(full) [ 798.469620][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 798.469630][T13218] Call Trace: [ 798.469636][T13218] [ 798.469643][T13218] dump_stack_lvl+0x16c/0x1f0 [ 798.469670][T13218] should_fail_ex+0x512/0x640 [ 798.469690][T13218] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 798.469711][T13218] should_failslab+0xc2/0x120 [ 798.469731][T13218] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 798.469749][T13218] ? getname_flags.part.0+0x4c/0x550 [ 798.469779][T13218] getname_flags.part.0+0x4c/0x550 [ 798.469807][T13218] getname_flags+0x93/0xf0 [ 798.469825][T13218] __x64_sys_rename+0x58/0xa0 [ 798.469847][T13218] do_syscall_64+0xcd/0x4e0 [ 798.469871][T13218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.469888][T13218] RIP: 0033:0x7fa4dfb8eec9 [ 798.469902][T13218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.469919][T13218] RSP: 002b:00007fa4e0a6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 798.469935][T13218] RAX: ffffffffffffffda RBX: 00007fa4dfde5fa0 RCX: 00007fa4dfb8eec9 [ 798.469947][T13218] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000580 [ 798.469957][T13218] RBP: 00007fa4e0a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 798.469968][T13218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.469978][T13218] R13: 00007fa4dfde6038 R14: 00007fa4dfde5fa0 R15: 00007fff265f2938 [ 798.470002][T13218] [ 798.742893][ T30] audit: type=1400 audit(1758760203.782:649): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 798.764246][ T9898] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 798.784759][ T9898] usb 1-1: device descriptor read/8, error -71 [ 798.798600][ T30] audit: type=1400 audit(1758760203.842:650): avc: denied { read write } for pid=13225 comm="syz.2.1717" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 798.848079][ T30] audit: type=1400 audit(1758760203.882:651): avc: denied { open } for pid=13225 comm="syz.2.1717" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 798.874914][ T30] audit: type=1400 audit(1758760203.882:652): avc: denied { mount } for pid=13225 comm="syz.2.1717" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 798.904669][ T9898] usb usb1-port1: unable to enumerate USB device [ 800.330195][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 800.330210][ T30] audit: type=1400 audit(1758760205.372:655): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 800.758691][T13250] ceph: No mds server is up or the cluster is laggy [ 800.767361][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 800.812222][T13254] !: renamed from dummy0 (while UP) [ 800.948314][ T30] audit: type=1400 audit(1758760205.582:656): avc: denied { read write } for pid=13248 comm="syz.4.1725" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 801.049315][ T30] audit: type=1400 audit(1758760205.622:657): avc: denied { open } for pid=13248 comm="syz.4.1725" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 801.099564][ T30] audit: type=1400 audit(1758760205.752:658): avc: denied { bind } for pid=13247 comm="syz.1.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 801.121872][ T30] audit: type=1400 audit(1758760206.082:659): avc: denied { write } for pid=13258 comm="syz.0.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 801.151108][T13262] FAULT_INJECTION: forcing a failure. [ 801.151108][T13262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.164493][T13262] CPU: 0 UID: 0 PID: 13262 Comm: syz.0.1727 Not tainted syzkaller #0 PREEMPT(full) [ 801.164522][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 801.164532][T13262] Call Trace: [ 801.164538][T13262] [ 801.164544][T13262] dump_stack_lvl+0x16c/0x1f0 [ 801.164569][T13262] should_fail_ex+0x512/0x640 [ 801.164593][T13262] _copy_from_user+0x2e/0xd0 [ 801.164619][T13262] copy_msghdr_from_user+0x98/0x160 [ 801.164640][T13262] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 801.164674][T13262] ___sys_sendmsg+0xfe/0x1d0 [ 801.164695][T13262] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.164748][T13262] __sys_sendmsg+0x16d/0x220 [ 801.164768][T13262] ? __pfx___sys_sendmsg+0x10/0x10 [ 801.164804][T13262] do_syscall_64+0xcd/0x4e0 [ 801.164828][T13262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.164845][T13262] RIP: 0033:0x7f7a25f8eec9 [ 801.164858][T13262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.164874][T13262] RSP: 002b:00007f7a26e1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.164890][T13262] RAX: ffffffffffffffda RBX: 00007f7a261e5fa0 RCX: 00007f7a25f8eec9 [ 801.164901][T13262] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000003 [ 801.164911][T13262] RBP: 00007f7a26e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 801.164921][T13262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.164930][T13262] R13: 00007f7a261e6038 R14: 00007f7a261e5fa0 R15: 00007ffc250aab88 [ 801.164953][T13262] [ 801.592248][T13272] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 802.156700][T13278] autofs: Bad value for 'fd' [ 802.196929][ T30] audit: type=1400 audit(1758760207.182:660): avc: denied { write } for pid=13263 comm="syz.0.1728" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 802.894265][ T9898] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 803.134727][ T9898] usb 3-1: Using ep0 maxpacket: 8 [ 803.256467][ T9898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 803.290702][ T9898] usb 3-1: can't read configurations, error -61 [ 803.392835][T13296] FAULT_INJECTION: forcing a failure. [ 803.392835][T13296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.408736][T13296] CPU: 1 UID: 0 PID: 13296 Comm: syz.0.1738 Not tainted syzkaller #0 PREEMPT(full) [ 803.408760][T13296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 803.408771][T13296] Call Trace: [ 803.408777][T13296] [ 803.408785][T13296] dump_stack_lvl+0x16c/0x1f0 [ 803.408811][T13296] should_fail_ex+0x512/0x640 [ 803.408837][T13296] _copy_from_user+0x2e/0xd0 [ 803.408863][T13296] copy_msghdr_from_user+0x98/0x160 [ 803.408886][T13296] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 803.408920][T13296] ___sys_sendmsg+0xfe/0x1d0 [ 803.408943][T13296] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.408995][T13296] __sys_sendmsg+0x16d/0x220 [ 803.409017][T13296] ? __pfx___sys_sendmsg+0x10/0x10 [ 803.409054][T13296] do_syscall_64+0xcd/0x4e0 [ 803.409079][T13296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.409097][T13296] RIP: 0033:0x7f7a25f8eec9 [ 803.409111][T13296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.409127][T13296] RSP: 002b:00007f7a26e1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.409145][T13296] RAX: ffffffffffffffda RBX: 00007f7a261e5fa0 RCX: 00007f7a25f8eec9 [ 803.409157][T13296] RDX: 0000000004000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 803.409167][T13296] RBP: 00007f7a26e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 803.409178][T13296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.409188][T13296] R13: 00007f7a261e6038 R14: 00007f7a261e5fa0 R15: 00007ffc250aab88 [ 803.409212][T13296] [ 803.579298][ T9898] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 803.605791][ T30] audit: type=1400 audit(1758760208.652:661): avc: denied { ioctl } for pid=13299 comm="syz.4.1740" path="socket:[57064]" dev="sockfs" ino=57064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 803.605927][T13300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1740'. [ 803.758542][ T9898] usb 3-1: Using ep0 maxpacket: 8 [ 804.014023][ T9898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 804.035146][ T9898] usb 3-1: can't read configurations, error -61 [ 804.057944][ T9898] usb usb3-port1: attempt power cycle [ 804.258323][T13312] netlink: 'syz.1.1745': attribute type 1 has an invalid length. [ 804.271708][T13312] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1745'. [ 804.469431][T13318] fuse: Unknown parameter 'defcult_permns' [ 805.189247][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 805.198182][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 805.282451][ T9898] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 805.338671][ T9898] usb 3-1: Using ep0 maxpacket: 8 [ 805.357310][ T9898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 805.366343][ T9898] usb 3-1: can't read configurations, error -61 [ 805.488639][T13329] JFS: charset not found [ 805.802565][ T9898] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 805.918863][T13336] JFS: charset not found [ 805.932181][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1746'. [ 806.066351][ T9898] usb 3-1: device not accepting address 19, error -71 [ 806.097213][ T9898] usb usb3-port1: unable to enumerate USB device [ 807.568580][ T30] audit: type=1400 audit(1758760212.532:662): avc: denied { open } for pid=13347 comm="syz.2.1754" path="/dev/ttyq8" dev="devtmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 807.795876][ T30] audit: type=1400 audit(1758760212.762:663): avc: denied { write } for pid=13347 comm="syz.2.1754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 808.250933][T13361] FAULT_INJECTION: forcing a failure. [ 808.250933][T13361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.270714][T13361] CPU: 1 UID: 0 PID: 13361 Comm: syz.1.1756 Not tainted syzkaller #0 PREEMPT(full) [ 808.270730][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 808.270737][T13361] Call Trace: [ 808.270741][T13361] [ 808.270745][T13361] dump_stack_lvl+0x16c/0x1f0 [ 808.270764][T13361] should_fail_ex+0x512/0x640 [ 808.270781][T13361] _copy_to_user+0x32/0xd0 [ 808.270798][T13361] simple_read_from_buffer+0xcb/0x170 [ 808.270812][T13361] proc_fail_nth_read+0x197/0x240 [ 808.270826][T13361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 808.270840][T13361] ? rw_verify_area+0xcf/0x6c0 [ 808.270857][T13361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 808.270870][T13361] vfs_read+0x1e1/0xcf0 [ 808.270883][T13361] ? __pfx___mutex_lock+0x10/0x10 [ 808.270898][T13361] ? __pfx_vfs_read+0x10/0x10 [ 808.270913][T13361] ? __fget_files+0x20e/0x3c0 [ 808.270929][T13361] ksys_read+0x12a/0x250 [ 808.270940][T13361] ? __pfx_ksys_read+0x10/0x10 [ 808.270955][T13361] do_syscall_64+0xcd/0x4e0 [ 808.270971][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.270982][T13361] RIP: 0033:0x7fa4dfb8d8dc [ 808.270991][T13361] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 808.271001][T13361] RSP: 002b:00007fa4e0a6a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 808.271012][T13361] RAX: ffffffffffffffda RBX: 00007fa4dfde5fa0 RCX: 00007fa4dfb8d8dc [ 808.271019][T13361] RDX: 000000000000000f RSI: 00007fa4e0a6a0a0 RDI: 0000000000000003 [ 808.271025][T13361] RBP: 00007fa4e0a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 808.271031][T13361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.271038][T13361] R13: 00007fa4dfde6038 R14: 00007fa4dfde5fa0 R15: 00007fff265f2938 [ 808.271051][T13361] [ 809.114679][T13353] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 809.237293][ T30] audit: type=1400 audit(1758760214.172:664): avc: denied { create } for pid=13364 comm="syz.1.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 809.741713][ T30] audit: type=1400 audit(1758760214.172:665): avc: denied { execmem } for pid=13364 comm="syz.1.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 809.800544][T11473] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 809.899998][ T30] audit: type=1400 audit(1758760214.841:666): avc: denied { write } for pid=13371 comm="syz.3.1759" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 810.020431][ T30] audit: type=1400 audit(1758760214.851:667): avc: denied { create } for pid=13362 comm="syz.0.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 810.043890][ T30] audit: type=1400 audit(1758760214.851:668): avc: denied { map_create } for pid=13371 comm="syz.3.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 810.073475][ T30] audit: type=1400 audit(1758760214.851:669): avc: denied { perfmon } for pid=13371 comm="syz.3.1759" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 810.107326][ T30] audit: type=1400 audit(1758760214.851:670): avc: denied { map_read map_write } for pid=13371 comm="syz.3.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 810.135394][ T30] audit: type=1400 audit(1758760214.851:671): avc: denied { read } for pid=13362 comm="syz.0.1758" name="nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 810.867178][T13391] ceph: No mds server is up or the cluster is laggy [ 810.874129][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 811.194460][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 813.104695][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 813.104710][ T30] audit: type=1400 audit(1758760218.151:704): avc: denied { bind } for pid=13422 comm="syz.0.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 813.726447][T13429] JFS: charset not found [ 813.743633][ T30] audit: type=1400 audit(1758760218.301:705): avc: denied { create } for pid=13421 comm="syz.3.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 813.835635][T13424] !: renamed from dummy0 (while UP) [ 813.892517][ T30] audit: type=1400 audit(1758760218.301:706): avc: denied { connect } for pid=13421 comm="syz.3.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 813.994249][ T30] audit: type=1400 audit(1758760218.301:707): avc: denied { allowed } for pid=13421 comm="syz.3.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 814.660420][ T30] audit: type=1400 audit(1758760218.311:708): avc: denied { map } for pid=13421 comm="syz.3.1773" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=57256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 814.998562][ T30] audit: type=1400 audit(1758760218.311:709): avc: denied { read write } for pid=13421 comm="syz.3.1773" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=57256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 815.105142][ T30] audit: type=1400 audit(1758760218.311:710): avc: denied { write } for pid=13421 comm="syz.3.1773" path="socket:[57255]" dev="sockfs" ino=57255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 815.151563][T13441] netlink: 'syz.3.1778': attribute type 39 has an invalid length. [ 815.189189][ T30] audit: type=1400 audit(1758760218.931:711): avc: denied { write } for pid=13422 comm="syz.0.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 815.276261][ T30] audit: type=1400 audit(1758760220.321:712): avc: denied { write } for pid=13448 comm="syz.2.1781" name="unix" dev="proc" ino=4026533347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 815.331654][T13450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1781'. [ 815.387506][ T30] audit: type=1400 audit(1758760220.421:713): avc: denied { read } for pid=13444 comm="syz.4.1780" dev="nsfs" ino=4026533054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 815.494669][T13445] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 815.502841][T13445] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1780'. [ 816.094732][T13463] JFS: charset not found [ 816.536902][T13460] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 818.719267][T13483] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 818.749135][T13483] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1789'. [ 819.570356][T13490] JFS: charset not found [ 820.443474][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 820.465314][T13504] ceph: No mds server is up or the cluster is laggy [ 820.596824][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 820.596840][ T30] audit: type=1400 audit(1758760225.631:717): avc: denied { create } for pid=13498 comm="syz.4.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 820.694319][ T30] audit: type=1400 audit(1758760225.631:718): avc: denied { ioctl } for pid=13498 comm="syz.4.1794" path="socket:[58400]" dev="sockfs" ino=58400 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 820.829574][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 821.922454][T13528] netlink: 'syz.4.1800': attribute type 39 has an invalid length. [ 824.406315][T13543] JFS: charset not found [ 825.380812][ T30] audit: type=1400 audit(1758760230.421:719): avc: denied { create } for pid=13553 comm="syz.4.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 825.429050][ T30] audit: type=1400 audit(1758760230.421:720): avc: denied { bind } for pid=13553 comm="syz.4.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 826.504224][ T30] audit: type=1400 audit(1758760230.421:721): avc: denied { setopt } for pid=13553 comm="syz.4.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 826.523852][ T30] audit: type=1400 audit(1758760230.421:722): avc: denied { accept } for pid=13553 comm="syz.4.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 826.543500][ T30] audit: type=1400 audit(1758760230.491:723): avc: denied { write } for pid=13553 comm="syz.4.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 826.563029][ T30] audit: type=1400 audit(1758760230.551:724): avc: denied { read } for pid=13553 comm="syz.4.1809" path="socket:[58191]" dev="sockfs" ino=58191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 826.632456][T13565] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1812'. [ 826.718461][ T30] audit: type=1400 audit(1758760231.761:725): avc: denied { write } for pid=13569 comm="syz.4.1814" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 827.308629][ T30] audit: type=1400 audit(1758760232.351:726): avc: denied { create } for pid=13567 comm="syz.0.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 827.347475][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'. [ 827.449665][ T30] audit: type=1400 audit(1758760232.431:727): avc: denied { read } for pid=13574 comm="syz.2.1816" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 827.524066][ T30] audit: type=1400 audit(1758760232.431:728): avc: denied { open } for pid=13574 comm="syz.2.1816" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 827.548032][ T30] audit: type=1400 audit(1758760232.431:729): avc: denied { read append } for pid=13574 comm="syz.2.1816" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 827.612814][ T30] audit: type=1400 audit(1758760232.431:730): avc: denied { open } for pid=13574 comm="syz.2.1816" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 828.264214][ T5897] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 828.703552][T13597] netlink: 'syz.2.1820': attribute type 1 has an invalid length. [ 828.714234][ T5897] usb 2-1: device descriptor read/64, error -71 [ 828.784962][T13597] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1820'. [ 828.911297][T13605] netlink: 'syz.0.1821': attribute type 39 has an invalid length. [ 828.937646][T13606] JFS: charset not found [ 829.034391][ T5897] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 829.376137][ T5897] usb 2-1: device descriptor read/64, error -71 [ 829.445644][T13613] netlink: 'syz.4.1824': attribute type 1 has an invalid length. [ 829.484524][ T5897] usb usb2-port1: attempt power cycle [ 829.491748][T13613] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1824'. [ 830.264227][ T5897] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 830.291448][T13621] JFS: charset not found [ 830.667367][ T5897] usb 2-1: device descriptor read/8, error -71 [ 830.745318][T13624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1828'. [ 831.188709][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 831.503280][ T5897] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 831.529172][ T5897] usb 2-1: device descriptor read/8, error -71 [ 831.654427][ T5897] usb usb2-port1: unable to enumerate USB device [ 831.829231][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 831.829246][ T30] audit: type=1400 audit(1758760236.871:736): avc: denied { bind } for pid=13631 comm="syz.2.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 831.856819][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'. [ 831.958385][T11473] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 832.320408][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 832.477827][T13655] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 832.493372][T13655] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1838'. [ 832.916514][T13662] JFS: charset not found [ 833.974826][ T30] audit: type=1400 audit(1758760239.011:737): avc: denied { mounton } for pid=13664 comm="syz.4.1840" path="/373" dev="tmpfs" ino=1996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 834.397501][T13676] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1842'. [ 835.156616][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 835.204481][ T30] audit: type=1400 audit(1758760240.241:738): avc: denied { kexec_image_load } for pid=13677 comm="syz.3.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 835.580839][T13696] netlink: 'syz.1.1848': attribute type 1 has an invalid length. [ 835.630257][T13696] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1848'. [ 836.525156][T13706] FAULT_INJECTION: forcing a failure. [ 836.525156][T13706] name failslab, interval 1, probability 0, space 0, times 0 [ 836.567082][T13706] CPU: 1 UID: 0 PID: 13706 Comm: syz.2.1850 Not tainted syzkaller #0 PREEMPT(full) [ 836.567106][T13706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 836.567113][T13706] Call Trace: [ 836.567117][T13706] [ 836.567121][T13706] dump_stack_lvl+0x16c/0x1f0 [ 836.567140][T13706] should_fail_ex+0x512/0x640 [ 836.567154][T13706] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 836.567168][T13706] should_failslab+0xc2/0x120 [ 836.567181][T13706] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 836.567192][T13706] ? getname_flags.part.0+0x4c/0x550 [ 836.567211][T13706] getname_flags.part.0+0x4c/0x550 [ 836.567229][T13706] getname_flags+0x93/0xf0 [ 836.567241][T13706] __x64_sys_execve+0x74/0xb0 [ 836.567253][T13706] do_syscall_64+0xcd/0x4e0 [ 836.567274][T13706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.567285][T13706] RIP: 0033:0x7fac4258eec9 [ 836.567295][T13706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.567305][T13706] RSP: 002b:00007fac43367038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 836.567316][T13706] RAX: ffffffffffffffda RBX: 00007fac427e5fa0 RCX: 00007fac4258eec9 [ 836.567324][T13706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 836.567330][T13706] RBP: 00007fac43367090 R08: 0000000000000000 R09: 0000000000000000 [ 836.567337][T13706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.567343][T13706] R13: 00007fac427e6038 R14: 00007fac427e5fa0 R15: 00007ffd3cbcb2f8 [ 836.567357][T13706] [ 838.384125][T13724] JFS: charset not found [ 839.411590][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 839.465834][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 840.694299][ T30] audit: type=1400 audit(1758760245.691:739): avc: denied { bind } for pid=13743 comm="syz.4.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 840.944761][ T5897] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 841.104357][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 841.129560][ T5897] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 841.147810][ T5897] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 841.231427][ T5897] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 841.372011][ T5897] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 841.393809][ T5897] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 841.855774][ T5897] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.868925][ T5897] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 841.878094][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.893836][ T5897] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 841.913702][T13760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1865'. [ 842.630542][T11473] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 842.722530][T13772] JFS: charset not found [ 843.904766][ T5897] usb 5-1: USB disconnect, device number 8 [ 844.195122][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 844.382560][ T30] audit: type=1400 audit(1758760249.231:740): avc: denied { create } for pid=13785 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 845.401848][ T30] audit: type=1400 audit(1758760250.441:741): avc: denied { module_request } for pid=13799 comm="syz.0.1888" kmod="fs-cpuset" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 845.445850][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'. [ 845.668328][ T30] audit: type=1400 audit(1758760250.711:742): avc: denied { setopt } for pid=13802 comm="syz.3.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 846.225219][T13801] netlink: 'syz.4.1877': attribute type 1 has an invalid length. [ 846.233094][T13801] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1877'. [ 846.366774][ T30] audit: type=1400 audit(1758760251.391:743): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 846.907052][T13818] mkiss: ax0: crc mode is auto. [ 846.939358][ T30] audit: type=1400 audit(1758760251.961:744): avc: denied { read } for pid=5517 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 847.132488][ T30] audit: type=1400 audit(1758760252.031:745): avc: denied { search } for pid=5517 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.181697][ T30] audit: type=1400 audit(1758760252.031:746): avc: denied { search } for pid=5517 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.379647][ T30] audit: type=1400 audit(1758760252.031:747): avc: denied { search } for pid=5517 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.804880][ T30] audit: type=1400 audit(1758760252.031:748): avc: denied { read } for pid=5517 comm="dhcpcd" name="n104" dev="tmpfs" ino=8031 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 847.973739][ T30] audit: type=1400 audit(1758760252.031:749): avc: denied { open } for pid=5517 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=8031 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 847.999546][ T30] audit: type=1400 audit(1758760252.031:750): avc: denied { getattr } for pid=5517 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=8031 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 848.509818][T13849] netlink: 'syz.1.1893': attribute type 1 has an invalid length. [ 848.533656][T13849] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1893'. [ 848.765180][T13854] JFS: charset not found [ 849.517206][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'. [ 849.579107][T11473] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 849.705547][ T30] audit: type=1400 audit(1758760254.751:751): avc: denied { relabelfrom } for pid=13860 comm="syz.4.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 850.174756][ T30] audit: type=1400 audit(1758760254.751:752): avc: denied { relabelto } for pid=13860 comm="syz.4.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 850.734160][T11473] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 851.356262][T13880] netlink: 'syz.4.1901': attribute type 1 has an invalid length. [ 851.472600][T13880] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1901'. [ 852.307425][T13896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1907'. [ 853.846291][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 853.846313][ T30] audit: type=1400 audit(1758760257.671:757): avc: denied { bind } for pid=13894 comm="syz.0.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 853.954417][T13880] JFS: charset not found [ 854.080118][ T30] audit: type=1400 audit(1758760257.671:758): avc: denied { name_bind } for pid=13894 comm="syz.0.1909" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 854.264608][ T30] audit: type=1400 audit(1758760257.671:759): avc: denied { node_bind } for pid=13894 comm="syz.0.1909" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 854.296903][T13909] FAULT_INJECTION: forcing a failure. [ 854.296903][T13909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.410729][T13909] CPU: 0 UID: 0 PID: 13909 Comm: syz.1.1913 Not tainted syzkaller #0 PREEMPT(full) [ 854.410755][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 854.410765][T13909] Call Trace: [ 854.410771][T13909] [ 854.410778][T13909] dump_stack_lvl+0x16c/0x1f0 [ 854.410805][T13909] should_fail_ex+0x512/0x640 [ 854.410831][T13909] _copy_to_user+0x32/0xd0 [ 854.410859][T13909] simple_read_from_buffer+0xcb/0x170 [ 854.410880][T13909] proc_fail_nth_read+0x197/0x240 [ 854.410903][T13909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.410925][T13909] ? rw_verify_area+0xcf/0x6c0 [ 854.410951][T13909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.410972][T13909] vfs_read+0x1e1/0xcf0 [ 854.410993][T13909] ? __pfx___mutex_lock+0x10/0x10 [ 854.411016][T13909] ? __pfx_vfs_read+0x10/0x10 [ 854.411042][T13909] ? __fget_files+0x20e/0x3c0 [ 854.411075][T13909] ksys_read+0x12a/0x250 [ 854.411092][T13909] ? __pfx_ksys_read+0x10/0x10 [ 854.411117][T13909] do_syscall_64+0xcd/0x4e0 [ 854.411142][T13909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.411160][T13909] RIP: 0033:0x7fa4dfb8d8dc [ 854.411174][T13909] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 854.411192][T13909] RSP: 002b:00007fa4e0a49030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 854.411209][T13909] RAX: ffffffffffffffda RBX: 00007fa4dfde6090 RCX: 00007fa4dfb8d8dc [ 854.411221][T13909] RDX: 000000000000000f RSI: 00007fa4e0a490a0 RDI: 0000000000000004 [ 854.411232][T13909] RBP: 00007fa4e0a49090 R08: 0000000000000000 R09: 0000000000000000 [ 854.411243][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.411253][T13909] R13: 00007fa4dfde6128 R14: 00007fa4dfde6090 R15: 00007fff265f2938 [ 854.411277][T13909] [ 854.442826][ T30] audit: type=1400 audit(1758760257.681:760): avc: denied { write } for pid=13894 comm="syz.0.1909" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 854.526509][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'. [ 854.671188][T11473] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 854.988712][T13932] netlink: 'syz.4.1922': attribute type 1 has an invalid length. [ 855.021196][T13932] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1922'. [ 856.289809][T13939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1924'. [ 856.409721][T13934] JFS: charset not found [ 857.644916][T11473] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 858.632563][T13969] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 858.691297][T13969] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1934'. [ 858.983730][T13980] JFS: charset not found [ 860.210422][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'. [ 861.247264][T14005] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 861.255103][T14005] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1942'. [ 861.818494][T10692] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 862.174179][T10692] usb 5-1: Using ep0 maxpacket: 8 [ 862.497405][T14010] JFS: charset not found [ 863.175378][T10692] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 863.194436][T10692] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 863.207344][T10692] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 863.217140][T10692] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 863.229856][T10692] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.244328][T10692] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 863.259506][T10692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.345184][T14016] netlink: 'syz.1.1946': attribute type 1 has an invalid length. [ 863.353566][T14016] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1946'. [ 863.498434][T10692] usb 5-1: usb_control_msg returned -32 [ 863.569975][T14022] JFS: charset not found [ 864.644190][T10692] usbtmc 5-1:16.0: can't read capabilities [ 865.469616][ T30] audit: type=1400 audit(1758760270.511:761): avc: denied { read } for pid=14050 comm="syz.2.1957" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 865.604260][ T30] audit: type=1400 audit(1758760270.631:762): avc: denied { open } for pid=14050 comm="syz.2.1957" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 865.662948][ T30] audit: type=1400 audit(1758760270.701:763): avc: denied { create } for pid=14053 comm="syz.1.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 866.548087][ T30] audit: type=1400 audit(1758760270.781:764): avc: denied { read } for pid=14053 comm="syz.1.1956" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 866.571260][ T30] audit: type=1400 audit(1758760270.781:765): avc: denied { open } for pid=14053 comm="syz.1.1956" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 866.596603][ T30] audit: type=1400 audit(1758760270.841:766): avc: denied { map_create } for pid=14036 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 866.618757][ T30] audit: type=1400 audit(1758760270.841:767): avc: denied { bpf } for pid=14036 comm="syz.3.1951" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 866.623077][ T78] usb 5-1: USB disconnect, device number 9 [ 866.642916][ T30] audit: type=1400 audit(1758760270.841:768): avc: denied { map_read map_write } for pid=14036 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 866.864872][T14059] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 866.872679][ T30] audit: type=1400 audit(1758760270.841:769): avc: denied { create } for pid=14036 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 866.897850][T14059] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1958'. [ 866.962144][ T30] audit: type=1400 audit(1758760270.841:770): avc: denied { setopt } for pid=14036 comm="syz.3.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 867.066441][T14063] JFS: charset not found [ 869.112372][T11473] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 870.081781][T14100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1970'. [ 870.108284][T14100] geneve2: entered allmulticast mode [ 871.990840][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 871.990854][ T30] audit: type=1400 audit(1758760277.031:815): avc: denied { execmem } for pid=14112 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 872.165550][T14115] JFS: charset not found [ 872.217293][T11473] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 872.739740][ T30] audit: type=1400 audit(1758760277.771:816): avc: denied { setopt } for pid=14123 comm="syz.0.1984" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 872.999018][T14131] 9pnet_virtio: no channels available for device syz [ 873.472494][ T30] audit: type=1400 audit(1758760278.041:817): avc: denied { mounton } for pid=14123 comm="syz.0.1984" path="/388/file0" dev="tmpfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 873.744319][ T30] audit: type=1400 audit(1758760278.631:818): avc: denied { create } for pid=14123 comm="syz.0.1984" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 875.414328][T14159] netlink: 'syz.1.1992': attribute type 1 has an invalid length. [ 875.470410][T14159] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1992'. [ 875.617324][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 875.624891][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 875.785995][T14161] ceph: No mds server is up or the cluster is laggy [ 875.794888][T14159] JFS: charset not found [ 875.945813][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 876.192738][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 876.284221][ T30] audit: type=1400 audit(1758760281.291:819): avc: denied { unlink } for pid=5845 comm="syz-executor" name="file0" dev="tmpfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 876.386117][ T30] audit: type=1400 audit(1758760281.411:820): avc: denied { create } for pid=14166 comm="syz.3.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 876.414424][T11473] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 877.411416][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 877.422089][ T30] audit: type=1400 audit(1758760282.441:821): avc: denied { create } for pid=14178 comm="syz.4.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 877.724252][ T30] audit: type=1400 audit(1758760282.451:822): avc: denied { bind } for pid=14178 comm="syz.4.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 878.546368][T14199] ceph: No mds server is up or the cluster is laggy [ 878.553248][ T78] libceph: connect (1)[c::]:6789 error -101 [ 878.560661][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 878.739707][ T30] audit: type=1400 audit(1758760283.781:823): avc: denied { create } for pid=14206 comm="syz.2.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 878.853382][ T30] audit: type=1400 audit(1758760283.811:824): avc: denied { setopt } for pid=14206 comm="syz.2.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 879.278046][T14213] ceph: No mds server is up or the cluster is laggy [ 879.287719][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 879.296788][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 879.634547][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 879.640715][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 880.548319][T11473] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 880.602896][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 880.673800][ T30] audit: type=1400 audit(1758760285.711:825): avc: denied { relabelfrom } for pid=14235 comm="syz.0.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 880.778861][ T30] audit: type=1400 audit(1758760285.791:826): avc: denied { relabelto } for pid=14235 comm="syz.0.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 881.114943][T14242] 9pnet_virtio: no channels available for device syz [ 883.476490][T14262] ceph: No mds server is up or the cluster is laggy [ 883.499862][ T78] libceph: connect (1)[c::]:6789 error -101 [ 883.702374][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 883.870388][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 884.057275][ T30] audit: type=1400 audit(1758760289.101:827): avc: denied { read write } for pid=14273 comm="syz.0.2019" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 884.228452][ T30] audit: type=1400 audit(1758760289.101:828): avc: denied { open } for pid=14273 comm="syz.0.2019" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 885.084204][ T30] audit: type=1400 audit(1758760290.111:829): avc: denied { write } for pid=14281 comm="syz.3.2022" path="socket:[61451]" dev="sockfs" ino=61451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 885.120831][T14284] JFS: charset not found [ 885.256872][ T30] audit: type=1400 audit(1758760290.301:830): avc: denied { mounton } for pid=14285 comm="syz.4.2023" path="/402/file0" dev="tmpfs" ino=2150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 886.409401][T14297] 9pnet_virtio: no channels available for device syz [ 886.478498][T11473] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 886.971872][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 887.476981][T14320] ceph: No mds server is up or the cluster is laggy [ 887.487011][ T78] libceph: connect (1)[c::]:6789 error -101 [ 887.768456][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 889.002791][ T78] libceph: connect (1)[c::]:6789 error -101 [ 889.047048][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 889.159008][T14339] ceph: No mds server is up or the cluster is laggy [ 889.369241][ T30] audit: type=1400 audit(1758760294.411:831): avc: denied { create } for pid=14349 comm="syz.1.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 889.435937][ T30] audit: type=1400 audit(1758760294.461:832): avc: denied { ioctl } for pid=14349 comm="syz.1.2039" path="socket:[60771]" dev="sockfs" ino=60771 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 889.472860][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'. [ 892.823464][T14385] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2049'. [ 892.852127][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2050'. [ 892.857561][ T30] audit: type=1400 audit(1758760297.891:833): avc: denied { read } for pid=14384 comm="syz.2.2050" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 892.896034][T14386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2050'. [ 892.921016][ T30] audit: type=1400 audit(1758760297.891:834): avc: denied { open } for pid=14384 comm="syz.2.2050" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 892.921620][T14386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2050'. [ 893.346255][ T30] audit: type=1400 audit(1758760298.341:835): avc: denied { write } for pid=14384 comm="syz.2.2050" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 893.436738][T14391] netlink: 'syz.0.2052': attribute type 1 has an invalid length. [ 893.454268][T14391] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2052'. [ 893.543560][T14392] JFS: charset not found [ 893.549448][ T5911] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 893.704467][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 893.748891][ T5911] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 893.826664][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.922968][ T5911] usb 3-1: config 0 has no interface number 0 [ 893.988051][ T5911] usb 3-1: config 0 interface 213 altsetting 2 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 894.080027][ T5911] usb 3-1: config 0 interface 213 altsetting 2 endpoint 0xF has invalid wMaxPacketSize 0 [ 894.155926][ T5911] usb 3-1: config 0 interface 213 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 894.261134][ T5911] usb 3-1: config 0 interface 213 has no altsetting 0 [ 894.869743][ T5911] usb 3-1: New USB device found, idVendor=0846, idProduct=9030, bcdDevice= 2.ca [ 894.920532][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.955225][ T5911] usb 3-1: Product: syz [ 894.959417][ T5911] usb 3-1: Manufacturer: syz [ 895.014646][ T5911] usb 3-1: SerialNumber: syz [ 895.030138][ T5911] usb 3-1: config 0 descriptor?? [ 895.046640][ T5911] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 895.309215][ T30] audit: type=1400 audit(1758760300.351:836): avc: denied { ioctl } for pid=14384 comm="syz.2.2050" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 896.282664][ T30] audit: type=1400 audit(1758760300.441:837): avc: denied { module_request } for pid=14399 comm="syz.0.2056" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 896.304686][ T30] audit: type=1400 audit(1758760301.341:838): avc: denied { read write } for pid=14384 comm="syz.2.2050" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 896.456665][ T30] audit: type=1400 audit(1758760301.341:839): avc: denied { open } for pid=14384 comm="syz.2.2050" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 896.479792][ T30] audit: type=1400 audit(1758760301.371:840): avc: denied { map } for pid=14384 comm="syz.2.2050" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 897.658948][T11473] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 897.859978][T14413] fuse: Bad value for 'fd' [ 897.926735][ T78] usb 3-1: USB disconnect, device number 20 [ 898.833708][T14428] ceph: No mds server is up or the cluster is laggy [ 898.849739][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 898.944340][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 899.551557][T14440] netlink: 'syz.1.2065': attribute type 1 has an invalid length. [ 899.594188][T14440] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2065'. [ 899.707764][T14441] JFS: charset not found [ 900.955419][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'. [ 903.974717][T14471] tipc: Enabling of bearer rejected, failed to enable media [ 904.096047][T14469] picdev_read: 6 callbacks suppressed [ 904.096064][T14469] kvm: pic: non byte read [ 904.106168][T14469] kvm: pic: single mode not supported [ 904.106182][T14469] pic_ioport_write: 5 callbacks suppressed [ 904.106195][T14469] kvm: pic: level sensitive irq not supported [ 904.134535][T14469] kvm: pic: non byte read [ 904.265609][T14469] kvm: pic: non byte read [ 904.277554][T14469] kvm: pic: level sensitive irq not supported [ 904.279594][T14469] kvm: pic: non byte read [ 904.294180][T14469] kvm: pic: level sensitive irq not supported [ 904.294236][T14469] kvm: pic: non byte read [ 904.312663][T14469] kvm: pic: level sensitive irq not supported [ 904.316108][T14469] kvm: pic: non byte read [ 904.670489][T14469] kvm: pic: level sensitive irq not supported [ 904.670553][T14469] kvm: pic: non byte read [ 904.850439][T14469] kvm: pic: level sensitive irq not supported [ 904.850496][T14469] kvm: pic: non byte read [ 904.894523][T14469] kvm: pic: level sensitive irq not supported [ 904.894583][T14469] kvm: pic: non byte read [ 904.912744][T14469] kvm: pic: level sensitive irq not supported [ 904.912799][T14469] kvm: pic: non byte read [ 904.926680][T14469] kvm: pic: level sensitive irq not supported [ 904.926903][T14469] kvm: pic: level sensitive irq not supported [ 905.362204][T14490] netlink: 'syz.2.2078': attribute type 1 has an invalid length. [ 905.404132][T14490] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2078'. [ 905.615862][T14491] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 905.713450][T14494] JFS: charset not found [ 906.437606][T14497] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2079'. [ 907.085809][T14500] kvm: pic: single mode not supported [ 907.489598][T14511] 9pnet_virtio: no channels available for device syz [ 909.382823][ T30] audit: type=1400 audit(1758760314.421:841): avc: denied { ioctl } for pid=14523 comm="syz.4.2086" path="socket:[61108]" dev="sockfs" ino=61108 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 909.384854][T14524] FAULT_INJECTION: forcing a failure. [ 909.384854][T14524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.533112][T14524] CPU: 0 UID: 0 PID: 14524 Comm: syz.4.2086 Not tainted syzkaller #0 PREEMPT(full) [ 909.533136][T14524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 909.533146][T14524] Call Trace: [ 909.533152][T14524] [ 909.533158][T14524] dump_stack_lvl+0x16c/0x1f0 [ 909.533186][T14524] should_fail_ex+0x512/0x640 [ 909.533211][T14524] _copy_from_user+0x2e/0xd0 [ 909.533236][T14524] copy_msghdr_from_user+0x98/0x160 [ 909.533259][T14524] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 909.533292][T14524] ___sys_sendmsg+0xfe/0x1d0 [ 909.533313][T14524] ? __pfx____sys_sendmsg+0x10/0x10 [ 909.533364][T14524] __sys_sendmsg+0x16d/0x220 [ 909.533386][T14524] ? __pfx___sys_sendmsg+0x10/0x10 [ 909.533423][T14524] do_syscall_64+0xcd/0x4e0 [ 909.533453][T14524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.533471][T14524] RIP: 0033:0x7fe27678eec9 [ 909.533485][T14524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.533501][T14524] RSP: 002b:00007fe2775c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.533519][T14524] RAX: ffffffffffffffda RBX: 00007fe2769e5fa0 RCX: 00007fe27678eec9 [ 909.533530][T14524] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 909.533540][T14524] RBP: 00007fe2775c3090 R08: 0000000000000000 R09: 0000000000000000 [ 909.533551][T14524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.533561][T14524] R13: 00007fe2769e6038 R14: 00007fe2769e5fa0 R15: 00007ffd3dd869e8 [ 909.533584][T14524] [ 911.090366][T14554] tipc: Enabling of bearer rejected, failed to enable media [ 911.158043][ T78] libceph: connect (1)[c::]:6789 error -101 [ 911.166693][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 911.548095][T14557] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 911.848371][T14545] ceph: No mds server is up or the cluster is laggy [ 912.110822][ T78] libceph: connect (1)[c::]:6789 error -101 [ 912.710844][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 913.213268][T14570] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 913.226605][ T78] libceph: connect (1)[c::]:6789 error -101 [ 913.287008][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 913.352170][ T30] audit: type=1400 audit(1758760318.391:842): avc: denied { create } for pid=14574 comm="syz.4.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 913.447660][ T30] audit: type=1400 audit(1758760318.491:843): avc: denied { create } for pid=14574 comm="syz.4.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 913.504571][T14584] Failed to initialize the IGMP autojoin socket (err -2) [ 913.560526][ T30] audit: type=1400 audit(1758760318.601:844): avc: denied { create } for pid=14574 comm="syz.4.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 915.120208][T14591] 9pnet_virtio: no channels available for device syz [ 915.278631][T14598] tipc: Enabling of bearer rejected, failed to enable media [ 916.231892][T14610] ceph: No mds server is up or the cluster is laggy [ 916.239150][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 916.247695][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 917.222879][T14624] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2112'. [ 917.577785][ T30] audit: type=1400 audit(1758760322.621:845): avc: denied { read write } for pid=14627 comm="syz.2.2114" name="vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 917.608989][ T30] audit: type=1400 audit(1758760322.621:846): avc: denied { open } for pid=14627 comm="syz.2.2114" path="/dev/vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 917.675219][ T30] audit: type=1400 audit(1758760322.651:847): avc: denied { ioctl } for pid=14627 comm="syz.2.2114" path="/dev/vbi9" dev="devtmpfs" ino=1007 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 918.406101][ T78] libceph: connect (1)[c::]:6789 error -101 [ 918.423566][T14639] ceph: No mds server is up or the cluster is laggy [ 918.447000][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 918.492717][ T30] audit: type=1400 audit(1758760322.691:848): avc: denied { lock } for pid=14627 comm="syz.2.2114" path="socket:[62247]" dev="sockfs" ino=62247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 918.525789][T14638] tipc: Enabled bearer , priority 0 [ 918.572227][T14638] syzkaller0: MTU too low for tipc bearer [ 918.611061][T14643] 9pnet_virtio: no channels available for device syz [ 918.648387][T14638] tipc: Disabling bearer [ 919.465264][T14653] ceph: No mds server is up or the cluster is laggy [ 919.479734][ T78] libceph: connect (1)[c::]:6789 error -101 [ 919.614016][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 920.080254][ T30] audit: type=1326 audit(1758760325.121:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.3.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ab38eec9 code=0x7ffc0000 [ 920.140531][ T30] audit: type=1326 audit(1758760325.131:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.3.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f01ab38eec9 code=0x7ffc0000 [ 921.109783][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 921.775644][T14674] 9pnet_virtio: no channels available for device syz [ 921.828296][ T30] audit: type=1400 audit(1758760326.861:851): avc: denied { bind } for pid=14684 comm="syz.1.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 921.976972][ T30] audit: type=1400 audit(1758760326.871:852): avc: denied { write } for pid=14684 comm="syz.1.2128" path="socket:[61299]" dev="sockfs" ino=61299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 922.134311][ T30] audit: type=1400 audit(1758760327.121:853): avc: denied { read } for pid=14684 comm="syz.1.2128" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 922.439785][ T78] libceph: connect (1)[c::]:6789 error -101 [ 922.727242][ T30] audit: type=1400 audit(1758760327.131:854): avc: denied { open } for pid=14684 comm="syz.1.2128" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 922.862389][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 922.916582][T14694] ceph: No mds server is up or the cluster is laggy [ 923.900526][T14706] tipc: Enabled bearer , priority 0 [ 923.938650][T14706] syzkaller0: MTU too low for tipc bearer [ 923.977782][T14706] tipc: Disabling bearer [ 924.854854][T14712] ceph: No mds server is up or the cluster is laggy [ 924.885149][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 924.901505][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 925.956126][T14730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2138'. [ 926.169315][ T30] audit: type=1400 audit(1758760331.211:855): avc: denied { name_bind } for pid=14728 comm="syz.1.2137" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 926.352686][ T30] audit: type=1400 audit(1758760331.211:856): avc: denied { node_bind } for pid=14728 comm="syz.1.2137" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 926.537062][T10692] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 926.570267][T14737] JFS: charset not found [ 926.729130][T11473] Bluetooth: hci2: connection err: -111 [ 926.744343][T10692] usb 2-1: Using ep0 maxpacket: 32 [ 926.818702][T10692] usb 2-1: config 0 has no interfaces? [ 927.012758][T10692] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=f0.bb [ 927.035672][T10692] usb 2-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 927.064533][T10692] usb 2-1: Product: syz [ 927.068701][T10692] usb 2-1: Manufacturer: syz [ 927.073269][T10692] usb 2-1: SerialNumber: syz [ 927.109812][T10692] usb 2-1: config 0 descriptor?? [ 927.225782][ T30] audit: type=1400 audit(1758760332.271:857): avc: denied { mount } for pid=14744 comm="syz.0.2143" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 927.373462][T14749] syzkaller0: MTU too low for tipc bearer [ 927.382349][T14749] tipc: Enabling of bearer rejected, failed to enable media [ 928.024490][T14759] FAULT_INJECTION: forcing a failure. [ 928.024490][T14759] name failslab, interval 1, probability 0, space 0, times 0 [ 928.058083][ T30] audit: type=1400 audit(1758760333.091:858): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 928.086943][T14759] CPU: 1 UID: 0 PID: 14759 Comm: syz.4.2146 Not tainted syzkaller #0 PREEMPT(full) [ 928.086969][T14759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 928.086980][T14759] Call Trace: [ 928.086986][T14759] [ 928.086993][T14759] dump_stack_lvl+0x16c/0x1f0 [ 928.087021][T14759] should_fail_ex+0x512/0x640 [ 928.087043][T14759] ? __kvmalloc_node_noprof+0x124/0x620 [ 928.087065][T14759] should_failslab+0xc2/0x120 [ 928.087085][T14759] __kvmalloc_node_noprof+0x137/0x620 [ 928.087104][T14759] ? fuse_readdir_uncached+0x20c/0x1be0 [ 928.087130][T14759] ? fuse_readdir_uncached+0x20c/0x1be0 [ 928.087151][T14759] fuse_readdir_uncached+0x20c/0x1be0 [ 928.087173][T14759] ? is_bpf_text_address+0x8a/0x1a0 [ 928.087195][T14759] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 928.087220][T14759] ? is_bpf_text_address+0x94/0x1a0 [ 928.087239][T14759] ? kernel_text_address+0x8d/0x100 [ 928.087259][T14759] ? __kernel_text_address+0xd/0x40 [ 928.087279][T14759] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 928.087299][T14759] ? arch_stack_walk+0xa6/0x100 [ 928.087338][T14759] ? __lock_acquire+0xb97/0x1ce0 [ 928.087363][T14759] ? _parse_integer_limit+0x17f/0x1d0 [ 928.087387][T14759] ? _kstrtoull+0x145/0x200 [ 928.087405][T14759] ? __pfx__kstrtoull+0x10/0x10 [ 928.087425][T14759] ? look_up_lock_class+0x6b/0x150 [ 928.087447][T14759] ? register_lock_class+0x41/0x4c0 [ 928.087470][T14759] ? look_up_lock_class+0x59/0x150 [ 928.087489][T14759] ? __lock_acquire+0xb97/0x1ce0 [ 928.087515][T14759] ? register_lock_class+0x41/0x4c0 [ 928.087559][T14759] fuse_readdir+0x9f5/0x1d90 [ 928.087581][T14759] ? down_read_killable+0x220/0x4b0 [ 928.087607][T14759] ? __pfx_down_read_killable+0x10/0x10 [ 928.087632][T14759] ? avc_policy_seqno+0x9/0x20 [ 928.087649][T14759] ? selinux_file_permission+0x126/0x660 [ 928.087680][T14759] iterate_dir+0x293/0xaf0 [ 928.087701][T14759] __x64_sys_getdents64+0x13c/0x2c0 [ 928.087720][T14759] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 928.087738][T14759] ? __pfx_filldir64+0x10/0x10 [ 928.087774][T14759] do_syscall_64+0xcd/0x4e0 [ 928.087799][T14759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.087817][T14759] RIP: 0033:0x7fe27678eec9 [ 928.087831][T14759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.087848][T14759] RSP: 002b:00007fe2775a2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 928.087866][T14759] RAX: ffffffffffffffda RBX: 00007fe2769e6090 RCX: 00007fe27678eec9 [ 928.087878][T14759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 928.087888][T14759] RBP: 00007fe2775a2090 R08: 0000000000000000 R09: 0000000000000000 [ 928.087899][T14759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.087910][T14759] R13: 00007fe2769e6128 R14: 00007fe2769e6090 R15: 00007ffd3dd869e8 [ 928.087935][T14759] [ 929.032495][ T78] libceph: connect (1)[c::]:6789 error -101 [ 929.065743][T14765] ceph: No mds server is up or the cluster is laggy [ 929.079732][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 929.361265][T10692] usb 2-1: USB disconnect, device number 24 [ 929.367683][ T78] libceph: connect (1)[c::]:6789 error -101 [ 929.379950][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 929.475661][T14770] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2149'. [ 929.943662][T14779] netlink: 'syz.2.2152': attribute type 1 has an invalid length. [ 929.952965][T14779] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2152'. [ 930.202827][T14779] JFS: charset not found [ 931.885368][T14800] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 932.710887][T14812] ceph: No mds server is up or the cluster is laggy [ 932.728226][ T78] libceph: connect (1)[c::]:6789 error -101 [ 932.734434][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 932.982934][T14810] picdev_read: 25 callbacks suppressed [ 932.982953][T14810] kvm: pic: non byte read [ 933.008679][T14810] kvm: pic: single mode not supported [ 933.008721][T14810] pic_ioport_write: 22 callbacks suppressed [ 933.008745][T14810] kvm: pic: level sensitive irq not supported [ 933.033401][T14810] kvm: pic: non byte read [ 933.442976][T14810] kvm: pic: non byte read [ 933.443219][T14810] kvm: pic: level sensitive irq not supported [ 933.443269][T14810] kvm: pic: non byte read [ 933.443447][T14810] kvm: pic: level sensitive irq not supported [ 933.443492][T14810] kvm: pic: non byte read [ 933.443666][T14810] kvm: pic: level sensitive irq not supported [ 933.443711][T14810] kvm: pic: non byte read [ 933.443884][T14810] kvm: pic: level sensitive irq not supported [ 933.443929][T14810] kvm: pic: non byte read [ 933.447591][T14810] kvm: pic: level sensitive irq not supported [ 933.447641][T14810] kvm: pic: non byte read [ 933.447819][T14810] kvm: pic: level sensitive irq not supported [ 933.447865][T14810] kvm: pic: non byte read [ 933.448043][T14810] kvm: pic: level sensitive irq not supported [ 933.448088][T14810] kvm: pic: non byte read [ 933.448263][T14810] kvm: pic: level sensitive irq not supported [ 933.448479][T14810] kvm: pic: level sensitive irq not supported [ 933.453047][T14826] netlink: 'syz.1.2162': attribute type 21 has an invalid length. [ 933.453067][T14826] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2162'. [ 933.453127][T14826] netlink: 'syz.1.2162': attribute type 5 has an invalid length. [ 933.453140][T14826] netlink: 'syz.1.2162': attribute type 6 has an invalid length. [ 933.453152][T14826] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2162'. [ 934.387701][T14834] netlink: 'syz.4.2166': attribute type 1 has an invalid length. [ 934.409023][T14834] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2166'. [ 934.424485][T14838] syzkaller0: MTU too low for tipc bearer [ 934.430212][T14838] tipc: Enabling of bearer rejected, failed to enable media [ 934.467265][T14839] tipc: Enabling of bearer rejected, failed to enable media [ 934.656079][T14834] JFS: charset not found [ 935.262960][ T30] audit: type=1400 audit(1758760340.231:859): avc: denied { sys_module } for pid=14835 comm="syz.1.2165" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 936.359849][ T78] libceph: connect (1)[c::]:6789 error -101 [ 936.414141][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 936.709092][ T78] libceph: connect (1)[c::]:6789 error -101 [ 936.764396][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 936.988736][T14855] ceph: No mds server is up or the cluster is laggy [ 937.305300][T14866] ceph: No mds server is up or the cluster is laggy [ 937.509556][ T78] libceph: connect (1)[c::]:6789 error -101 [ 937.531285][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 937.867310][T14878] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2175'. [ 938.529050][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 938.633225][T14895] tipc: Enabling of bearer rejected, failed to enable media [ 938.684260][ T5911] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 938.854408][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 939.316136][ T5911] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 939.366697][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.387345][ T5911] usb 3-1: config 0 descriptor?? [ 939.397950][ T5911] gspca_main: sq930x-2.14.0 probing 041e:403c [ 940.033864][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.137146][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.154653][ T30] audit: type=1400 audit(1758760345.201:860): avc: denied { create } for pid=14885 comm="syz.2.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 940.159777][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.180616][ T30] audit: type=1400 audit(1758760345.201:861): avc: denied { ioctl } for pid=14885 comm="syz.2.2176" path="socket:[63768]" dev="sockfs" ino=63768 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 940.384578][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.451584][ T5911] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 940.476097][ T5911] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 940.510469][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.526718][ T30] audit: type=1400 audit(1758760345.201:862): avc: denied { connect } for pid=14885 comm="syz.2.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 940.552837][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.561480][ T30] audit: type=1400 audit(1758760345.201:863): avc: denied { write } for pid=14885 comm="syz.2.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 940.643246][ T30] audit: type=1400 audit(1758760345.501:864): avc: denied { create } for pid=14909 comm="syz.0.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 940.663587][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.673823][ T30] audit: type=1400 audit(1758760345.511:865): avc: denied { setopt } for pid=14909 comm="syz.0.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 940.683500][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.191068][T14920] ceph: No mds server is up or the cluster is laggy [ 941.198494][ T78] libceph: connect (1)[c::]:6789 error -101 [ 941.206301][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 941.264517][T10692] usb 3-1: USB disconnect, device number 21 [ 941.525699][ T30] audit: type=1400 audit(1758760346.551:866): avc: denied { open } for pid=14909 comm="syz.0.2183" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 941.690172][ T30] audit: type=1400 audit(1758760346.641:867): avc: denied { bind } for pid=14909 comm="syz.0.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 943.391701][ T30] audit: type=1400 audit(1758760348.431:868): avc: denied { execute } for pid=14945 comm="syz.3.2192" path="/dev/loop6" dev="tmpfs" ino=2453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 944.224117][T14962] 9pnet_virtio: no channels available for device syz [ 944.974887][T14967] ceph: No mds server is up or the cluster is laggy [ 944.981820][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 945.059089][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 945.717890][ T30] audit: type=1400 audit(1758760350.751:869): avc: denied { sqpoll } for pid=14974 comm="syz.1.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 945.758078][ T30] audit: type=1400 audit(1758760350.781:870): avc: denied { getopt } for pid=14974 comm="syz.1.2198" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 950.590616][T15016] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 950.676625][ T30] audit: type=1400 audit(1758760354.261:871): avc: denied { ioctl } for pid=15004 comm="syz.4.2206" path="socket:[63920]" dev="sockfs" ino=63920 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 951.157155][ T30] audit: type=1400 audit(1758760356.191:872): avc: denied { write } for pid=15021 comm="syz.2.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 951.215561][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2212'. [ 954.530179][T15059] ceph: No mds server is up or the cluster is laggy [ 954.539262][ T78] libceph: connect (1)[c::]:6789 error -101 [ 954.875181][T15063] picdev_read: 14 callbacks suppressed [ 954.875199][T15063] kvm: pic: non byte read [ 954.905946][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 954.954158][T15063] kvm: pic: single mode not supported [ 954.954174][T15063] pic_ioport_write: 12 callbacks suppressed [ 954.954186][T15063] kvm: pic: level sensitive irq not supported [ 955.302342][T15073] FAULT_INJECTION: forcing a failure. [ 955.302342][T15073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 955.321584][ T30] audit: type=1400 audit(1758760360.341:873): avc: denied { create } for pid=15072 comm="syz.2.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 955.342063][T15063] kvm: pic: non byte read [ 955.404184][T15073] CPU: 1 UID: 0 PID: 15073 Comm: syz.2.2223 Not tainted syzkaller #0 PREEMPT(full) [ 955.404211][T15073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 955.404221][T15073] Call Trace: [ 955.404227][T15073] [ 955.404234][T15073] dump_stack_lvl+0x16c/0x1f0 [ 955.404261][T15073] should_fail_ex+0x512/0x640 [ 955.404287][T15073] _copy_from_user+0x2e/0xd0 [ 955.404312][T15073] copy_msghdr_from_user+0x98/0x160 [ 955.404335][T15073] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 955.404369][T15073] ___sys_sendmsg+0xfe/0x1d0 [ 955.404392][T15073] ? __pfx____sys_sendmsg+0x10/0x10 [ 955.404442][T15073] __sys_sendmsg+0x16d/0x220 [ 955.404464][T15073] ? __pfx___sys_sendmsg+0x10/0x10 [ 955.404501][T15073] do_syscall_64+0xcd/0x4e0 [ 955.404525][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.404542][T15073] RIP: 0033:0x7fac4258eec9 [ 955.404556][T15073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 955.404573][T15073] RSP: 002b:00007fac43367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.404590][T15073] RAX: ffffffffffffffda RBX: 00007fac427e5fa0 RCX: 00007fac4258eec9 [ 955.404602][T15073] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 955.404613][T15073] RBP: 00007fac43367090 R08: 0000000000000000 R09: 0000000000000000 [ 955.404623][T15073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.404633][T15073] R13: 00007fac427e6038 R14: 00007fac427e5fa0 R15: 00007ffd3cbcb2f8 [ 955.404656][T15073] [ 955.740579][ T30] audit: type=1400 audit(1758760360.781:874): avc: denied { write } for pid=15076 comm="syz.2.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 955.776761][ T30] audit: type=1400 audit(1758760360.781:875): avc: denied { nlmsg_write } for pid=15076 comm="syz.2.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 956.394740][ T30] audit: type=1400 audit(1758760361.011:876): avc: denied { mount } for pid=15075 comm="syz.0.2224" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 956.595983][ T30] audit: type=1400 audit(1758760361.631:877): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 956.816903][T15087] netlink: 'syz.1.2226': attribute type 1 has an invalid length. [ 956.863986][T15087] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2226'. [ 956.908717][T15089] syzkaller0: MTU too low for tipc bearer [ 956.994181][T15089] tipc: Enabling of bearer rejected, failed to enable media [ 958.210239][T15094] netlink: 'syz.3.2231': attribute type 5 has an invalid length. [ 958.419324][T15101] JFS: charset not found [ 960.366882][ T30] audit: type=1326 audit(1758760365.401:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15116 comm="syz.4.2236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe27678eec9 code=0x0 [ 960.419497][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 960.552572][T15120] netlink: 'syz.2.2237': attribute type 5 has an invalid length. [ 961.116404][ T30] audit: type=1400 audit(1758760366.161:879): avc: denied { mount } for pid=15116 comm="syz.4.2236" name="/" dev="overlay" ino=2366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 961.858949][T15149] tipc: Enabling of bearer rejected, failed to enable media [ 962.430621][ T78] libceph: connect (1)[c::]:6789 error -101 [ 962.437657][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 962.848485][T15139] kvm: pic: non byte read [ 962.876043][T15157] ceph: No mds server is up or the cluster is laggy [ 962.888416][T15139] kvm: pic: single mode not supported [ 962.888426][T15139] kvm: pic: level sensitive irq not supported [ 962.893816][T15139] kvm: pic: non byte read [ 963.022231][T15139] kvm: pic: non byte read [ 963.049824][T15139] kvm: pic: level sensitive irq not supported [ 963.049868][T15139] kvm: pic: non byte read [ 963.182150][T15139] kvm: pic: level sensitive irq not supported [ 963.182219][T15139] kvm: pic: non byte read [ 963.200629][T15139] kvm: pic: level sensitive irq not supported [ 963.200683][T15139] kvm: pic: non byte read [ 964.574104][T15173] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 965.479080][ T30] audit: type=1400 audit(1758760370.521:880): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 965.525567][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 966.285843][T15198] kvm: pic: non byte read [ 966.315086][T15198] kvm: pic: single mode not supported [ 966.315117][T15198] kvm: pic: level sensitive irq not supported [ 966.324177][T15198] kvm: pic: non byte read [ 966.345587][T15198] kvm: pic: non byte read [ 966.351648][T15198] kvm: pic: level sensitive irq not supported [ 966.357100][T15198] kvm: pic: non byte read [ 966.449758][T15198] kvm: pic: level sensitive irq not supported [ 966.470996][T15198] kvm: pic: level sensitive irq not supported [ 966.612409][T15198] kvm: pic: level sensitive irq not supported [ 966.879635][T15198] kvm: pic: level sensitive irq not supported [ 966.951641][T15212] tipc: Enabling of bearer rejected, failed to enable media [ 966.970229][T15214] 9pnet_fd: Insufficient options for proto=fd [ 967.918041][T15221] ceph: No mds server is up or the cluster is laggy [ 971.811681][ T30] audit: type=1400 audit(1758760376.851:881): avc: denied { read append } for pid=15247 comm="syz.0.2269" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 971.886179][ T30] audit: type=1400 audit(1758760376.851:882): avc: denied { open } for pid=15247 comm="syz.0.2269" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 971.915918][ T30] audit: type=1400 audit(1758760376.901:883): avc: denied { map } for pid=15247 comm="syz.0.2269" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 971.943038][ T30] audit: type=1400 audit(1758760376.901:884): avc: denied { execute } for pid=15247 comm="syz.0.2269" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 972.046567][ T30] audit: type=1400 audit(1758760376.911:885): avc: denied { ioctl } for pid=15247 comm="syz.0.2269" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 972.594543][ T78] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 972.734114][ T78] usb 1-1: device descriptor read/64, error -71 [ 972.791442][T15260] syzkaller0: MTU too low for tipc bearer [ 972.804135][T15260] tipc: Enabling of bearer rejected, failed to enable media [ 972.826115][ T2149] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 972.910506][T15265] tmpfs: Group quota inode hardlimit too large. [ 972.919033][T15264] JFS: charset not found [ 972.984159][ T78] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 973.014274][ T2149] usb 5-1: Using ep0 maxpacket: 32 [ 973.024311][ T2149] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 973.038279][ T2149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.064741][ T2149] usb 5-1: config 0 descriptor?? [ 973.089594][ T2149] gspca_main: sq930x-2.14.0 probing 041e:403c [ 973.124308][ T78] usb 1-1: device descriptor read/64, error -71 [ 973.158020][T15269] netlink: 'syz.1.2275': attribute type 1 has an invalid length. [ 973.166483][T15269] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2275'. [ 973.236072][ T78] usb usb1-port1: attempt power cycle [ 973.349139][T15273] JFS: charset not found [ 973.966719][ T2149] gspca_sq930x: reg_r 001f failed -110 [ 973.972241][ T2149] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 974.260061][ T78] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 974.503605][ T78] usb 1-1: device descriptor read/8, error -71 [ 974.765154][ T78] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 974.817615][ T78] usb 1-1: device descriptor read/8, error -71 [ 974.944649][ T78] usb usb1-port1: unable to enumerate USB device [ 975.169487][T15290] netlink: 'syz.2.2281': attribute type 1 has an invalid length. [ 975.192769][T15290] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2281'. [ 975.207385][T15291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.216252][T15291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.344348][ T78] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 975.598974][T15296] JFS: charset not found [ 976.309421][ T78] usb 1-1: Using ep0 maxpacket: 32 [ 976.346652][ T78] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 976.394104][ T78] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.458932][ T2149] usb 5-1: USB disconnect, device number 10 [ 976.461591][ T30] audit: type=1400 audit(1758760381.501:886): avc: denied { map } for pid=15297 comm="syz.2.2292" path="/dev/v4l-subdev3" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 976.467805][ T78] usb 1-1: config 0 descriptor?? [ 976.497218][ T78] gspca_main: sq930x-2.14.0 probing 041e:403c [ 976.541962][T15298] sp0: Synchronizing with TNC [ 976.707565][ T30] audit: type=1400 audit(1758760381.741:887): avc: denied { read } for pid=5517 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 976.884712][T15303] tmpfs: Bad value for 'mpol' [ 977.084246][ T30] audit: type=1400 audit(1758760381.851:888): avc: denied { append } for pid=15299 comm="syz.4.2282" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 977.108843][ T78] gspca_sq930x: reg_r 001f failed -110 [ 977.134712][ T78] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 977.147226][ T30] audit: type=1400 audit(1758760381.851:889): avc: denied { open } for pid=15299 comm="syz.4.2282" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 977.231402][ T30] audit: type=1400 audit(1758760381.921:890): avc: denied { mounton } for pid=15299 comm="syz.4.2282" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 977.474299][ T30] audit: type=1400 audit(1758760382.191:891): avc: denied { kexec_image_load } for pid=15297 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 977.581795][T15307] syzkaller0: MTU too low for tipc bearer [ 977.587802][T15307] tipc: Enabling of bearer rejected, failed to enable media [ 977.968108][T15323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.924882][T15323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.829662][ T5911] usb 1-1: USB disconnect, device number 26 [ 980.786003][T15337] ceph: No mds server is up or the cluster is laggy [ 980.795953][ T78] libceph: connect (1)[c::]:6789 error -101 [ 980.803816][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 981.050374][T15346] picdev_read: 18 callbacks suppressed [ 981.050399][T15346] kvm: pic: non byte read [ 981.069787][T15346] kvm: pic: single mode not supported [ 981.069798][T15346] pic_ioport_write: 14 callbacks suppressed [ 981.069806][T15346] kvm: pic: level sensitive irq not supported [ 981.135881][T15346] kvm: pic: non byte read [ 981.204376][T15346] kvm: pic: non byte read [ 981.298602][T15351] 9pnet_fd: Insufficient options for proto=fd [ 981.434302][T15346] kvm: pic: level sensitive irq not supported [ 981.442304][T15346] kvm: pic: non byte read [ 981.460709][T15346] kvm: pic: level sensitive irq not supported [ 981.461751][T15346] kvm: pic: non byte read [ 981.555717][T15346] kvm: pic: level sensitive irq not supported [ 981.556524][T15346] kvm: pic: non byte read [ 981.679282][T15346] kvm: pic: level sensitive irq not supported [ 981.682303][T15346] kvm: pic: non byte read [ 981.709287][T15346] kvm: pic: level sensitive irq not supported [ 981.710410][T15346] kvm: pic: non byte read [ 981.725925][T15346] kvm: pic: level sensitive irq not supported [ 981.726748][T15346] kvm: pic: non byte read [ 981.801449][T15346] kvm: pic: level sensitive irq not supported [ 981.801530][T15346] kvm: pic: non byte read [ 981.818845][ T78] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 982.014195][ T78] usb 2-1: Using ep0 maxpacket: 32 [ 982.234442][ T78] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 982.250704][ T78] usb 2-1: config 0 has no interface number 0 [ 982.288907][ T78] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 982.304352][ T78] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.312592][ T78] usb 2-1: Product: syz [ 982.318689][ T78] usb 2-1: Manufacturer: syz [ 982.332601][ T78] usb 2-1: SerialNumber: syz [ 982.608844][ T78] usb 2-1: config 0 descriptor?? [ 982.806403][ T78] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 983.022020][ T78] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 983.062288][ T78] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 983.246294][T15373] cgroup: Need name or subsystem set [ 983.338210][ T30] audit: type=1400 audit(1758760388.381:892): avc: denied { create } for pid=15371 comm="syz.0.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 984.661036][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 984.669729][ T78] usb 2-1: USB disconnect, device number 25 [ 984.678104][ T78] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 984.706288][ T78] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 984.723183][ T78] quatech2 2-1:0.51: device disconnected [ 985.038865][T15391] 9pnet_fd: Insufficient options for proto=fd [ 985.072405][T15393] FAULT_INJECTION: forcing a failure. [ 985.072405][T15393] name failslab, interval 1, probability 0, space 0, times 0 [ 985.112537][T15393] CPU: 1 UID: 0 PID: 15393 Comm: syz.2.2306 Not tainted syzkaller #0 PREEMPT(full) [ 985.112561][T15393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 985.112572][T15393] Call Trace: [ 985.112578][T15393] [ 985.112585][T15393] dump_stack_lvl+0x16c/0x1f0 [ 985.112612][T15393] should_fail_ex+0x512/0x640 [ 985.112633][T15393] ? fs_reclaim_acquire+0xae/0x150 [ 985.112658][T15393] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 985.112683][T15393] should_failslab+0xc2/0x120 [ 985.112703][T15393] __kmalloc_noprof+0xd2/0x510 [ 985.112727][T15393] tomoyo_realpath_from_path+0xc2/0x6e0 [ 985.112756][T15393] ? tomoyo_profile+0x47/0x60 [ 985.112775][T15393] tomoyo_path_number_perm+0x245/0x580 [ 985.112796][T15393] ? tomoyo_path_number_perm+0x237/0x580 [ 985.112820][T15393] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 985.112844][T15393] ? find_held_lock+0x2b/0x80 [ 985.112890][T15393] ? find_held_lock+0x2b/0x80 [ 985.112910][T15393] ? hook_file_ioctl_common+0x145/0x410 [ 985.112934][T15393] ? __fget_files+0x20e/0x3c0 [ 985.112959][T15393] security_file_ioctl+0x9b/0x240 [ 985.112986][T15393] __x64_sys_ioctl+0xb7/0x210 [ 985.113014][T15393] do_syscall_64+0xcd/0x4e0 [ 985.113038][T15393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.113056][T15393] RIP: 0033:0x7fac4258eec9 [ 985.113070][T15393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.113086][T15393] RSP: 002b:00007fac43367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 985.113103][T15393] RAX: ffffffffffffffda RBX: 00007fac427e5fa0 RCX: 00007fac4258eec9 [ 985.113115][T15393] RDX: 0000200000000300 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 985.113126][T15393] RBP: 00007fac43367090 R08: 0000000000000000 R09: 0000000000000000 [ 985.113136][T15393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.113146][T15393] R13: 00007fac427e6038 R14: 00007fac427e5fa0 R15: 00007ffd3cbcb2f8 [ 985.113171][T15393] [ 985.113178][T15393] ERROR: Out of memory at tomoyo_realpath_from_path. [ 987.023425][T15422] netlink: 'syz.2.2318': attribute type 1 has an invalid length. [ 987.063172][T15422] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2318'. [ 987.636384][ T78] libceph: connect (1)[c::]:6789 error -101 [ 987.656898][ T78] libceph: mon0 (1)[c::]:6789 connect error [ 987.728048][T15427] ceph: No mds server is up or the cluster is laggy [ 987.868314][T15433] JFS: charset not found [ 989.778915][ T30] audit: type=1400 audit(1758760394.741:893): avc: denied { read write } for pid=15456 comm="syz.1.2325" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 989.809767][ T30] audit: type=1400 audit(1758760394.741:894): avc: denied { open } for pid=15456 comm="syz.1.2325" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 989.838137][ T30] audit: type=1400 audit(1758760394.741:895): avc: denied { name_bind } for pid=15456 comm="syz.1.2325" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 990.116396][T15462] fuse: Invalid rootmode [ 990.393020][ T30] audit: type=1400 audit(1758760395.431:896): avc: denied { read } for pid=15472 comm="syz.0.2329" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 991.555534][ T30] audit: type=1400 audit(1758760396.601:897): avc: denied { bind } for pid=15480 comm="syz.3.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 991.580945][T15481] No control pipe specified [ 992.242286][T15491] JFS: charset not found [ 992.275623][T15484] ceph: No mds server is up or the cluster is laggy [ 992.528502][T15495] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 992.597155][T15495] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2334'. [ 992.715159][T15504] smc: net device veth0_to_batadv applied user defined pnetid SYZ2 [ 992.723233][ T30] audit: type=1400 audit(1758760397.761:898): avc: denied { setopt } for pid=15502 comm="syz.3.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 992.944451][T15512] Failed to initialize the IGMP autojoin socket (err -2) [ 993.082268][T15514] JFS: charset not found [ 993.701079][ T30] audit: type=1400 audit(1758760398.671:899): avc: denied { mount } for pid=15497 comm="syz.0.2336" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 995.264888][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 995.304910][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 995.588784][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 995.675290][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 995.718025][T15547] 9pnet_fd: Insufficient options for proto=fd [ 995.803665][T15540] ceph: No mds server is up or the cluster is laggy [ 995.890942][T15549] overlayfs: failed to clone upperpath [ 995.899711][ T30] audit: type=1400 audit(1758760400.921:900): avc: denied { mount } for pid=15548 comm="syz.3.2349" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 996.160124][ T30] audit: type=1400 audit(1758760401.081:901): avc: denied { append } for pid=15553 comm="syz.2.2351" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 996.732877][ T30] audit: type=1400 audit(1758760401.081:902): avc: denied { ioctl } for pid=15550 comm="syz.0.2350" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 996.767203][ T30] audit: type=1400 audit(1758760401.081:903): avc: denied { set_context_mgr } for pid=15550 comm="syz.0.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 996.943341][ T30] audit: type=1400 audit(1758760401.091:904): avc: denied { map } for pid=15550 comm="syz.0.2350" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 997.105215][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 997.134452][T15561] ceph: No mds server is up or the cluster is laggy [ 997.286824][ T30] audit: type=1400 audit(1758760401.981:905): avc: denied { mount } for pid=15553 comm="syz.2.2351" name="/" dev="hugetlbfs" ino=65887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 997.286949][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 997.309866][ T30] audit: type=1400 audit(1758760402.051:906): avc: denied { create } for pid=15562 comm="syz.0.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 997.499196][ T30] audit: type=1400 audit(1758760402.441:907): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 997.716957][ T30] audit: type=1400 audit(1758760402.761:908): avc: denied { mounton } for pid=15578 comm="syz.0.2356" path="mnt:[4026532788]" dev="nsfs" ino=4026532788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 998.586128][T15587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=15587 comm=syz.0.2358 [ 1000.456631][T15602] ceph: No mds server is up or the cluster is laggy [ 1000.544121][ T5897] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1000.724198][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 1000.791606][ T5897] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1000.793722][ T5897] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1000.793748][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.793767][ T5897] usb 1-1: Product: syz [ 1000.793782][ T5897] usb 1-1: Manufacturer: syz [ 1000.793796][ T5897] usb 1-1: SerialNumber: syz [ 1000.951873][ T5897] usb 1-1: config 0 descriptor?? [ 1001.327673][T15621] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2364'. [ 1001.776423][ T5897] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 1002.185689][ T5897] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1002.286548][ T5897] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 1002.397961][ T5897] usb 1-1: USB disconnect, device number 27 [ 1003.010541][ T30] audit: type=1400 audit(1758760408.051:909): avc: denied { write } for pid=15639 comm="syz.0.2368" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1003.145289][ T30] audit: type=1400 audit(1758760408.051:910): avc: denied { open } for pid=15639 comm="syz.0.2368" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1003.631293][T15651] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2371'. [ 1004.795257][T15661] ceph: No mds server is up or the cluster is laggy [ 1005.402150][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 1005.408326][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 1005.535894][T15669] ceph: No mds server is up or the cluster is laggy [ 1005.560542][T15675] 9pnet_virtio: no channels available for device syz [ 1005.976880][ T30] audit: type=1400 audit(1758760411.021:911): avc: denied { write } for pid=15680 comm="syz.2.2378" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1006.286213][ T2149] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1006.494314][ T2149] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1007.193224][ T2149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.303536][ T2149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.342576][ T2149] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1007.476542][ T2149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.513278][ T2149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.560517][ T2149] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1007.579130][ T2149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.599444][ T2149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.790723][T15706] kvm: pic: non byte read [ 1007.797633][T15706] kvm: pic: single mode not supported [ 1007.797667][T15706] kvm: pic: level sensitive irq not supported [ 1007.815542][T15706] kvm: pic: non byte read [ 1007.821676][ T2149] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1007.851812][ T2149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.869628][ T2149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.884713][T15706] kvm: pic: non byte read [ 1007.907457][ T2149] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1007.915249][T15706] kvm: pic: level sensitive irq not supported [ 1007.915780][ T2149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1007.916088][T15706] kvm: pic: non byte read [ 1007.921956][ T2149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1007.948199][T15706] kvm: pic: level sensitive irq not supported [ 1007.948562][T15706] kvm: pic: non byte read [ 1007.979441][T15706] kvm: pic: level sensitive irq not supported [ 1007.981817][T15706] kvm: pic: non byte read [ 1008.000487][ T2149] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1008.000677][T15706] kvm: pic: level sensitive irq not supported [ 1008.008731][T15706] kvm: pic: non byte read [ 1008.020638][T15706] kvm: pic: level sensitive irq not supported [ 1008.020859][T15706] kvm: pic: non byte read [ 1008.035323][ T2149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1008.037793][T15706] kvm: pic: level sensitive irq not supported [ 1008.044877][ T2149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1008.045449][T15706] kvm: pic: non byte read [ 1008.068743][T15706] kvm: pic: level sensitive irq not supported [ 1008.072316][T15706] kvm: pic: non byte read [ 1008.092256][T15706] kvm: pic: level sensitive irq not supported [ 1008.094103][ T2149] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1008.094785][T15706] kvm: pic: level sensitive irq not supported [ 1008.137689][ T2149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1008.168230][ T2149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1008.197313][ T2149] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1008.206035][ T2149] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1008.218289][ T2149] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1008.240693][ T2149] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1008.321268][ T2149] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1008.356172][ T2149] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1008.365168][ T2149] usb 2-1: Product: syz [ 1008.370001][ T2149] usb 2-1: Manufacturer: syz [ 1008.375732][ T2149] usb 2-1: SerialNumber: syz [ 1009.016301][T15716] ceph: No mds server is up or the cluster is laggy [ 1009.023468][ T9898] libceph: connect (1)[c::]:6789 error -101 [ 1009.122573][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'. [ 1009.154199][ T9898] libceph: mon0 (1)[c::]:6789 connect error [ 1009.256792][ T30] audit: type=1400 audit(1758760414.291:912): avc: denied { create } for pid=15721 comm="syz.1.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1009.363659][ T2149] usb 2-1: config 0 descriptor?? [ 1009.400661][ T2149] usb 2-1: can't set config #0, error -71 [ 1009.447304][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'. [ 1009.604269][ T30] audit: type=1400 audit(1758760414.291:913): avc: denied { ioctl } for pid=15721 comm="syz.1.2387" path="socket:[65445]" dev="sockfs" ino=65445 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1009.713674][ T2149] usb 2-1: USB disconnect, device number 26 [ 1011.489133][ T30] audit: type=1400 audit(1758760416.481:914): avc: denied { ioctl } for pid=15744 comm="syz.0.2392" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1011.598159][T15750] 9pnet_virtio: no channels available for device syz [ 1011.796171][T15749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2392'. [ 1012.086172][T15757] rdma_rxe: rxe_newlink: failed to add lo [ 1012.092003][ T30] audit: type=1400 audit(1758760417.131:915): avc: denied { create } for pid=15756 comm="syz.3.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1012.151899][ T30] audit: type=1400 audit(1758760417.131:916): avc: denied { write } for pid=15756 comm="syz.3.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1012.172073][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.374169][ T78] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1013.714229][ T78] usb 1-1: Using ep0 maxpacket: 32 [ 1013.852799][T15772] ceph: No mds server is up or the cluster is laggy [ 1013.863389][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 1013.873618][ T78] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.885750][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 1013.898997][ T78] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.924169][ T78] usb 1-1: New USB device found, idVendor=046d, idProduct=c26e, bcdDevice= 0.00 [ 1013.942633][ T78] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.981782][ T78] usb 1-1: config 0 descriptor?? [ 1014.481549][T15788] FAULT_INJECTION: forcing a failure. [ 1014.481549][T15788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.494772][T15788] CPU: 1 UID: 0 PID: 15788 Comm: syz.4.2403 Not tainted syzkaller #0 PREEMPT(full) [ 1014.494798][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1014.494809][T15788] Call Trace: [ 1014.494815][T15788] [ 1014.494822][T15788] dump_stack_lvl+0x16c/0x1f0 [ 1014.494849][T15788] should_fail_ex+0x512/0x640 [ 1014.494879][T15788] _copy_to_user+0x32/0xd0 [ 1014.494907][T15788] simple_read_from_buffer+0xcb/0x170 [ 1014.494928][T15788] proc_fail_nth_read+0x197/0x240 [ 1014.494951][T15788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1014.494973][T15788] ? rw_verify_area+0xcf/0x6c0 [ 1014.495000][T15788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1014.495021][T15788] vfs_read+0x1e1/0xcf0 [ 1014.495042][T15788] ? __pfx___mutex_lock+0x10/0x10 [ 1014.495067][T15788] ? __pfx_vfs_read+0x10/0x10 [ 1014.495092][T15788] ? __fget_files+0x20e/0x3c0 [ 1014.495120][T15788] ksys_read+0x12a/0x250 [ 1014.495137][T15788] ? __pfx_ksys_read+0x10/0x10 [ 1014.495163][T15788] do_syscall_64+0xcd/0x4e0 [ 1014.495188][T15788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.495207][T15788] RIP: 0033:0x7fe27678d8dc [ 1014.495222][T15788] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1014.495238][T15788] RSP: 002b:00007fe277581030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1014.495256][T15788] RAX: ffffffffffffffda RBX: 00007fe2769e6180 RCX: 00007fe27678d8dc [ 1014.495267][T15788] RDX: 000000000000000f RSI: 00007fe2775810a0 RDI: 0000000000000008 [ 1014.495277][T15788] RBP: 00007fe277581090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.495295][T15788] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1014.495305][T15788] R13: 00007fe2769e6218 R14: 00007fe2769e6180 R15: 00007ffd3dd869e8 [ 1014.495330][T15788] [ 1014.779282][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'. [ 1015.100258][T15795] Failed to initialize the IGMP autojoin socket (err -2) [ 1015.152008][ T78] logitech-hidpp-device 0003:046D:C26E.000A: hidraw0: USB HID v0.00 Device [HID 046d:c26e] on usb-dummy_hcd.0-1/input0 [ 1015.202315][ T30] audit: type=1400 audit(1758760420.231:917): avc: denied { read } for pid=15791 comm="syz.3.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1015.221671][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.060970][ T840] usb 1-1: USB disconnect, device number 28 [ 1018.912586][ T30] audit: type=1400 audit(1758760423.941:918): avc: denied { create } for pid=15805 comm="syz.4.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1019.103364][T15815] 9pnet_virtio: no channels available for device syz [ 1019.336181][T15823] ceph: No mds server is up or the cluster is laggy [ 1019.347557][ T2149] libceph: connect (1)[c::]:6789 error -101 [ 1019.564330][ T2149] libceph: mon0 (1)[c::]:6789 connect error [ 1022.124621][T15854] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 1022.136705][T15854] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1022.145117][T15854] CPU: 1 UID: 0 PID: 15854 Comm: syz.3.2422 Not tainted syzkaller #0 PREEMPT(full) [ 1022.154483][T15854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1022.164537][T15854] RIP: 0010:__xfrm_state_insert+0x1710/0x2510 [ 1022.170607][T15854] Code: 00 fc ff df 4c 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 96 0d 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 7b 30 4c 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 6a 0d 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 [ 1022.190200][T15854] RSP: 0018:ffffc9001be4f288 EFLAGS: 00010246 [ 1022.196251][T15854] RAX: dffffc0000000000 RBX: ffff888057994880 RCX: 1ffff1100af32915 [ 1022.204200][T15854] RDX: 0000000000000000 RSI: 1ffff1100af32916 RDI: 0000000000000001 [ 1022.212152][T15854] RBP: ffff888077d6c880 R08: 0000000000000001 R09: 0000000000000008 [ 1022.220099][T15854] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888057994440 [ 1022.228049][T15854] R13: ffff8880579948a8 R14: ffff888057994470 R15: 0000000000000000 [ 1022.235998][T15854] FS: 00007f01ac21a6c0(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 1022.244907][T15854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1022.251468][T15854] CR2: 0000200000009b48 CR3: 000000007c37a000 CR4: 00000000003526f0 [ 1022.259420][T15854] Call Trace: [ 1022.262677][T15854] [ 1022.265591][T15854] xfrm_state_insert+0x4c/0x60 [ 1022.270344][T15854] ipcomp6_init_state+0x608/0x8d0 [ 1022.275361][T15854] __xfrm_init_state+0x6fe/0x1c10 [ 1022.280370][T15854] ? __pfx_kasan_cache_shutdown+0xa/0x10 [ 1022.285987][T15854] xfrm_add_sa+0x2ec8/0x5c50 [ 1022.290557][T15854] ? cap_capable+0xb3/0x250 [ 1022.295041][T15854] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1022.299958][T15854] ? __nla_parse+0x40/0x60 [ 1022.304361][T15854] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1022.309278][T15854] xfrm_user_rcv_msg+0x58b/0xc00 [ 1022.314196][T15854] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1022.319637][T15854] ? kfree_skbmem+0x1a4/0x1f0 [ 1022.324297][T15854] ? consume_skb+0xcc/0x100 [ 1022.328783][T15854] ? find_held_lock+0x2b/0x80 [ 1022.333453][T15854] ? __dev_queue_xmit+0xaf1/0x4490 [ 1022.338552][T15854] ? __pfx___might_resched+0x10/0x10 [ 1022.343820][T15854] ? rcu_is_watching+0x12/0xc0 [ 1022.348573][T15854] ? trace_contention_end+0xdd/0x130 [ 1022.353836][T15854] netlink_rcv_skb+0x155/0x420 [ 1022.358583][T15854] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1022.364024][T15854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1022.369290][T15854] ? __pfx___mutex_lock+0x10/0x10 [ 1022.374307][T15854] xfrm_netlink_rcv+0x71/0x90 [ 1022.378968][T15854] netlink_unicast+0x5aa/0x870 [ 1022.383717][T15854] ? __pfx_netlink_unicast+0x10/0x10 [ 1022.388984][T15854] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1022.394948][T15854] netlink_sendmsg+0x8d1/0xdd0 [ 1022.399696][T15854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1022.404966][T15854] ____sys_sendmsg+0xa98/0xc70 [ 1022.409714][T15854] ? copy_msghdr_from_user+0x10a/0x160 [ 1022.415151][T15854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1022.420420][T15854] ? __pfx_futex_wake_mark+0x10/0x10 [ 1022.425686][T15854] ___sys_sendmsg+0x134/0x1d0 [ 1022.430359][T15854] ? __pfx____sys_sendmsg+0x10/0x10 [ 1022.435551][T15854] __sys_sendmsg+0x16d/0x220 [ 1022.440121][T15854] ? __pfx___sys_sendmsg+0x10/0x10 [ 1022.445211][T15854] ? __x64_sys_futex+0x1e0/0x4c0 [ 1022.450136][T15854] do_syscall_64+0xcd/0x4e0 [ 1022.454624][T15854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.460505][T15854] RIP: 0033:0x7f01ab38eec9 [ 1022.464899][T15854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.484488][T15854] RSP: 002b:00007f01ac21a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1022.492892][T15854] RAX: ffffffffffffffda RBX: 00007f01ab5e6090 RCX: 00007f01ab38eec9 [ 1022.500845][T15854] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000005 [ 1022.508797][T15854] RBP: 00007f01ab411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1022.516760][T15854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.524715][T15854] R13: 00007f01ab5e6128 R14: 00007f01ab5e6090 R15: 00007fffff50cb68 [ 1022.532687][T15854] [ 1022.535698][T15854] Modules linked in: [ 1022.539682][T15854] ---[ end trace 0000000000000000 ]--- [ 1022.545157][T15854] RIP: 0010:__xfrm_state_insert+0x1710/0x2510 [ 1022.551235][T15854] Code: 00 fc ff df 4c 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 96 0d 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 7b 30 4c 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 6a 0d 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 [ 1022.570875][T15854] RSP: 0018:ffffc9001be4f288 EFLAGS: 00010246 [ 1022.576966][T15854] RAX: dffffc0000000000 RBX: ffff888057994880 RCX: 1ffff1100af32915 [ 1022.584962][T15854] RDX: 0000000000000000 RSI: 1ffff1100af32916 RDI: 0000000000000001 [ 1022.592935][T15854] RBP: ffff888077d6c880 R08: 0000000000000001 R09: 0000000000000008 [ 1022.600935][T15854] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888057994440 [ 1022.608941][T15854] R13: ffff8880579948a8 R14: ffff888057994470 R15: 0000000000000000 [ 1022.616936][T15854] FS: 00007f01ac21a6c0(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 1022.625863][T15854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1022.632434][T15854] CR2: 0000200000009b48 CR3: 000000007c37a000 CR4: 00000000003526f0 [ 1022.640405][T15854] Kernel panic - not syncing: Fatal exception in interrupt [ 1022.647781][T15854] Kernel Offset: disabled [ 1022.652077][T15854] Rebooting in 86400 seconds..