last executing test programs: 4m11.411267156s ago: executing program 4 (id=3083): gettid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10040, 0x70) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000019780)=0x80000000000003) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000197c0), 0x28100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019800)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019840)=0xe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r5, 0x1}, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x20}], 0x1}, 0x0) r6 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xb0, 0x10, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x100, 0xf, 0x1, {0x22, 0xa28}}, {{{0x9, 0x5, 0x81, 0x3, 0x610, 0x8, 0x1, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x0, 0x8}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x0, 0x3, 0x8, 0x40, 0x5}, 0x0, 0x0, 0x6, [{0xfd, &(0x7f0000000380)=@string={0xfd, 0x3, "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"}}, {0x85, &(0x7f0000000480)=@string={0x85, 0x3, "9d4678770871ccbd80fffb9b791b45429188272da3e0e7a93c6ec6e5d57be6ac8851cce99b60785d400bf389f5a92ef2576d70aebc410df764ba030440f7cb05c96d3b27e3964e959689a9dc27e72d9b8c1d33d7d58d8425ff04dec33603e7d76e9e113d4af16b8c6b49352693198e17b45e8d696182861bc34d2720658777aa5b76b6"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c01}}, {0x3f, &(0x7f0000000580)=@string={0x3f, 0x3, "4f16ab4acb14f3de0c8f4bfec888dad7016bebf8eec435e1c9e016bfe62e42cd90e94b40442f052cf557498d54df82f21502b5f3e2d204f01d017445ec"}}, {0x0, 0x0}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0c}}]}) syz_usb_control_io$hid(r6, &(0x7f0000019b00)={0x24, &(0x7f0000019880)={0x40, 0x31, 0xc5, {0xc5, 0xd, "5de71a06a04473dd8c12f85d44e5256b41378e79985b2356c04e46d84f63712175e67bdb5390f9dc8ff9a85496f77dcbfeaf26d7e670a4f2676d25e5a3f4264f83ec53742e4d707771b810189da845b40f04c282283913e7ccb55b08f55f560186c8574ca44ca08dbcb1a7473077c85b12d2105b142ab3234aa224012b6ab69775525b08d19bb616937f34d311fc627643def08df2ee540b88582554a9d29dd537508163ae983757b2bc0bfc42ea7128ca8a6f6bd42a129e03500d1eae2beec26c1e8e"}}, &(0x7f0000019980)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "a6cba5b78592b8dbf36cfa5f427ebc2b819de42afe21222e473324fcc1c149b098d64b081b1ea1fbfc7a865a4119b6a5d89d8ca04f01d1985a13ffb1a099b38734aea6d00faab86222345a493c74ed97ff02f856136c49378863ecf9fb6b5e1586e32bebd784427a00e5f61fc42aa697220871b0c562b5fecbfa4a9ff22bb2357b8e9ac9c68a9d63be4ad129ef15f9f9c83da2ac79160585bf038db72c562b6b553c6317490256bbbb8acc97436f5169fbf8d98bde7e0d5ee4bcae374242c53f417d79fa8eb08fb59c5316910bb87325b5a4bc7ec47c89cebf780583a78105086a16c187d62fee60235f71e6ea264393ce69"}}, &(0x7f0000019a80)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0xc, "7f75ddb3"}, @main=@item_012={0x1, 0x0, 0x3, "98"}, @local=@item_4={0x3, 0x2, 0x6, "5a86c9da"}, @local=@item_4={0x3, 0x2, 0x5, "77b52b83"}, @main=@item_4={0x3, 0x0, 0x9, "4cc9474b"}, @local=@item_012={0x1, 0x2, 0xa, "ce"}]}}, &(0x7f0000019ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x101, 0x4, 0x1, {0x22, 0xb86}}}}, &(0x7f0000019d80)={0x2c, &(0x7f0000019b40)={0x20, 0x1, 0x6f, "1526cf6754d61c5ef9851c38a6055eb458d297fd7df1c53ca29650afd475cf1dbc4f93b818070aa8b9b84df47799fb4bd951726d63f2850bc19be6929f8247bd4e7d261350adecb99b15b37bbb24cca1376520273d4ce063a34d6f825c4a0b0d0b9394a8e7342dad66631deeb40013"}, &(0x7f0000019bc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000019c00)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000019c40)={0x20, 0x1, 0xe2, "81fb2dbdba69d1bdc51fb6e62c3074287aab15328ab3004475b1994e18fb2733cbfa97e935a3bf80d7f75a8565919f0aa550c72b6b1b7c64ccaebe6cfa12967dfbc42c799d99475980da73ac1f1de6c78f2cd4d236cf67e88e9909547bb72e17923a21f359ea345d7f6448b54836c20f3084e8bf11701c48d8e587719a7d9b759d2791c65f6bc17555b82f02a88471d40711e790b0056ef3a901a03adaa201d93ab313b1b322ca62c942e652816cd0e31d6def2c6b9f3cb94f89c7f8addabc30a5228de65bfaf2880318ae53dbd60aaba9477891726634d0e587ec38be3625b19856"}, &(0x7f0000019d40)={0x20, 0x3, 0x1, 0x3}}) 4m8.945494295s ago: executing program 4 (id=3090): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r4) getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000004a80)='./mnt\x00', 0x1ff) mount(&(0x7f0000004ac0)=@filename='ubi0_0\x00', &(0x7f0000004b00)='./mnt\x00', &(0x7f0000004b40)='ubifs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004b80)='./file1\x00', 0x542, 0x0) pwritev2(r6, &(0x7f0000004bc0)=[{&(0x7f0000004c00)=')', 0x1}], 0x1, 0x2, 0x0, 0xa1) ioctl$KVM_CAP_X86_GUEST_MODE(r6, 0x4068aea3, &(0x7f0000004c40)) sendmsg$nl_route_sched(r1, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x20, {0x0, 0x0, 0x74, r5, {0x0, 0x3}, {0x4, 0xb}, {0x9, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x30000080) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000004d80)={r7, r1, 0x2, 0x7c, &(0x7f0000004e40)="b775b5434e25982c793d33b023a8f9a4884f568f7ffe678b464aae307aab16194f44d1e2205868a6d0a0a1e959dc2a76778a8a36e2088ed398eb3395ee8feb1a5e109f17762b56545eee22de2f35a8297836e7065c4fab9dd5d7ecf129b3e1ec7f202850a322c0c621a6728ccb6ae811819b9e0fce3a935a6987cfc3", 0x1, 0x8, 0xd, 0x7, 0x1ff, 0x0, 0x1, 'syz1\x00'}) mount$9p_virtio(&(0x7f0000004ec0), &(0x7f0000004f00)='.\x00', &(0x7f0000004f40), 0x4, &(0x7f0000004f80)=ANY=[@ANYBLOB='trans=virtio,cache=0x00']) 4m6.697316796s ago: executing program 4 (id=3096): gettid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10040, 0x70) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000019780)=0x80000000000003) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000197c0), 0x28100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019800)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019840)=0xe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r7, 0x1}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x0, 0x4b, r7, 0x3}, 0xc) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e6"], 0x20}], 0x1}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xb0, 0x10, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x100, 0xf, 0x1, {0x22, 0xa28}}, {{{0x9, 0x5, 0x81, 0x3, 0x610, 0x8, 0x1, 0x8}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x0, 0x3, 0x8, 0x40, 0x5}, 0x2e, &(0x7f0000000340)={0x5, 0xf, 0x2e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x0, 0x3b, 0x9}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x4, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x69, 0x6, 0x7ff}]}, 0x6, [{0xfd, &(0x7f0000000380)=@string={0xfd, 0x3, "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"}}, {0x85, &(0x7f0000000480)=@string={0x85, 0x3, "9d4678770871ccbd80fffb9b791b45429188272da3e0e7a93c6ec6e5d57be6ac8851cce99b60785d400bf389f5a92ef2576d70aebc410df764ba030440f7cb05c96d3b27e3964e959689a9dc27e72d9b8c1d33d7d58d8425ff04dec33603e7d76e9e113d4af16b8c6b49352693198e17b45e8d696182861bc34d2720658777aa5b76b6"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c01}}, {0x82, &(0x7f0000000580)=@string={0x82, 0x3, "4f16ab4acb14f3de0c8f4bfec888dad7016bebf8eec435e1c9e016bfe62e42cd90e94b40442f052cf557498d54df82f21502b5f3e2d204f01d017445ec27d2d242ec0a1756cc6dfcfdb925531e09debbce6afcdcc9abf853371192fd503fa519ed5903cbebda8e2de92e43be57ac8dc2e26e596bbd4872a2f04dcf811c3a58ed"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0c}}]}) 4m4.294966364s ago: executing program 4 (id=3102): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newchain={0x305c, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xfff3, 0xd}, {0xb, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x2fe0, 0x2, [@TCA_FW_ACT={0xe4, 0x4, [@m_nat={0xe0, 0x8, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xffff0001, 0x8, 0x9, 0x9}, @multicast1, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x7, 0x571, 0x8}, @private=0xa010102, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x8, 0x7fff, 0x5}, @dev={0xac, 0x14, 0x14, 0x16}, @empty}}]}, {0x3d, 0x6, "f1e18125058ba26692e6f3541fd2abbd3a6e9c688663120a5b5b950dc65649a2e5dd5b51d8783468f6dbd567eb69484d85c9dd99c9077611cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_ACT={0x2eb8, 0x4, [@m_ct={0x114, 0xc, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x10000}, @TCA_CT_LABELS={0x14, 0x7, "f0d1d736db395f4c27bb71d7e8747ea3"}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_MARK={0x8, 0x5, 0x1}]}, {0xbf, 0x6, "e17c2402e8c36cac0412b8004bdff1f35961ae5828ec572300740ff87cd2c560a37c75a78513ebc0b8ceba80bc6ee40035e527e83d10544500927167f1bda9501e5304fc2a5d41c0ab01e24556bc2e861e0e0e234a9371935c75cfe45a5ea95f613f25fecec0ca0df57841802680f8cba115d83cf97bc42b9d773b4721f90d0beeeb3bcbc5d21351e9fd2df03f4b33193c483a6687f8487f0def5f1c54bbde2123b3c8351812b0178ed04a8b72023ded21861b96a1946a108d3177"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x2cb4, 0xe, 0x0, 0x0, {{0xa}, {0x2c4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xa}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x9, 0x80000001, 0x3, 0x0, 0x5}, 0x2, 0x4, [{0x0, 0xf, 0x7ff, 0x900000, 0x4}, {0x0, 0xfffff3fe, 0x1701c62d, 0x3, 0x80000001, 0x19d}, {0xfffffff7, 0xe8a8, 0x7d, 0x4f, 0x3, 0xfffffff7}, {0x3, 0x8, 0x3, 0xfffffff9, 0x5, 0x1}]}, [{0x4, 0xfffffffb, 0x4, 0x7ff, 0x6}, {0x1, 0x8001, 0x8, 0x0, 0xff, 0xfff}, {0x0, 0x3, 0x80, 0x10001, 0x401, 0xe}, {0x3, 0x1ff, 0x8, 0x80000001, 0x1, 0x200}, {0x9, 0x5, 0x6, 0x6a3, 0x1, 0x3}, {0x4, 0x3, 0x9, 0x8, 0x1, 0x5}, {0x3, 0x9, 0x6, 0x80000000, 0x200, 0x5}, {0x0, 0x7, 0xfffffa59, 0x1, 0x2, 0x800}, {0x0, 0x1, 0x100, 0x131d8000, 0x8, 0xffffffff}, {0xfff, 0xd3e7, 0xca4, 0x5, 0x3, 0x5}, {0x7fffffff, 0x80000001, 0x2280, 0x7, 0x576, 0x2}, {0x6, 0x3, 0x7, 0x1b4e, 0x5, 0xffffffff}, {0x3, 0x7ff, 0x7, 0x7, 0xffff, 0x80000000}, {0x5, 0x4, 0x575, 0x8, 0xa, 0x8}, {0x2, 0x101, 0x6, 0x1, 0x8, 0x3}, {0x81, 0x3, 0x6, 0x8, 0xa, 0x6}, {0x1, 0x0, 0x12, 0x0, 0x1, 0x3ff}, {0x0, 0x71f7, 0x3, 0xff, 0x6, 0x4}, {0x68, 0x4, 0x2, 0xffff0931, 0x4, 0x4737}, {0x3, 0x0, 0x2, 0x7, 0x0, 0x1000}, {0x1, 0x7, 0xa, 0x9, 0x5, 0x7}, {0xc97d, 0x80000000, 0x8, 0x6, 0x6, 0x6}, {0x7, 0xbfb3, 0xc, 0x8, 0x6, 0x5}, {0x4, 0x5, 0x4, 0x4, 0x4, 0x4}, {0x1ff, 0xffff, 0x9, 0x6, 0x8, 0x6}, {0x2, 0x6, 0x400, 0x4, 0x3, 0x50b}, {0xd, 0x81, 0x2, 0x7, 0x8, 0x5}, {0x1, 0x1000, 0x8, 0x8, 0x69, 0x10000}, {0xeff7, 0x7, 0x16, 0x7, 0x3, 0x7}, {0x8, 0xee900000, 0x1, 0x9, 0x5, 0x1ff}, {0x24c2, 0xfffffffa, 0x1, 0x3ff, 0x40, 0x5}, {0x7, 0x4, 0x0, 0x4, 0x45, 0x63867f3b}, {0x6, 0x9c6, 0x3ff, 0x7, 0x7f, 0x1000}, {0x5, 0x7f, 0x401, 0x80000001, 0x9, 0x5ecd}, {0x7ff, 0x6b, 0x4, 0x10, 0x9, 0xad33}, {0xea0d, 0x5, 0x2, 0x5, 0x8, 0x8}, {0x41, 0x3, 0x3, 0x0, 0x9, 0x81}, {0x7, 0x0, 0x10000, 0x9, 0x80, 0x2}, {0x3, 0xf, 0x9, 0x7fffffff, 0x6, 0x200}, {0x1ff, 0x5, 0x8001, 0x3, 0x81, 0x3}, {0x3, 0x5, 0xffffdbf3, 0x7, 0xf, 0x1}, {0xa2, 0x0, 0xfffffff8, 0x80, 0x8, 0x9}, {0x3, 0x81, 0x3780000, 0x5, 0x175, 0x40}, {0xd, 0x7745, 0x0, 0x1, 0x2b88000, 0xfffffff7}, {0x3, 0x9684, 0x5, 0x2, 0x2, 0x8}, {0x0, 0x10000, 0xe0c, 0x1000, 0x6}, {0x9, 0x0, 0x5, 0x7fff, 0x1000, 0x2}, {0x0, 0x9, 0xd, 0x4, 0x4, 0x1}, {0x1, 0x100, 0xb6, 0x6, 0x43, 0x8}, {0x7f, 0x3, 0x7, 0x6, 0x8, 0x80000001}, {0x6, 0x0, 0x2, 0x9, 0xd9, 0xfffffffb}, {0x200, 0x1, 0x400, 0x40, 0x5, 0x5}, {0x390, 0x5, 0x1, 0x7ff, 0x2, 0x6}, {0x2, 0x5, 0x4cc4, 0x8, 0x6}, {0x6, 0xfff, 0xc, 0x98, 0x6, 0x401}, {0xfffffff7, 0x1, 0x7bd9, 0x7f, 0x1}, {0x1, 0x4, 0x1, 0xa, 0xff, 0x713}, {0x5, 0x3, 0x3, 0x5, 0x1, 0xca18}, {0x70, 0x2, 0x400, 0x1aa, 0x8, 0x3}, {0x100, 0x5, 0x89, 0x40, 0x3, 0x9}, {0x8, 0x401, 0x9d1e, 0x80000000, 0xbc780, 0x1}, {0x20000000, 0x1, 0xfffffff8, 0xffffff70, 0x8, 0x12a385ac}, {0x9, 0x7, 0x9723, 0x2, 0xfff, 0x3}, {0xfffff206, 0x3, 0x8, 0x401, 0x0, 0x6}, {0x0, 0xe148bdec, 0xfff, 0x1, 0x1, 0x6}, {0x8, 0x7, 0x2, 0x398, 0xffffffff, 0x8000}, {0xfffffc01, 0x80, 0x2, 0xf3c, 0x21, 0x3}, {0xfffffff3, 0xffff, 0x1375e07b, 0x4, 0x7}, {0x6, 0x9, 0x1b, 0x9b, 0x3, 0x6}, {0x2, 0x620, 0x9, 0x8, 0x8dfc, 0x7}, {0x9, 0xffff3a2b, 0xb5b6, 0x2, 0x5, 0x3ff}, {0xd, 0x40, 0x6, 0x100, 0xaa, 0x10000}, {0xfffffc31, 0xd5d, 0xe, 0x6, 0xfff, 0x25e3}, {0x7, 0xdcd3, 0x7, 0x1, 0x8, 0x6}, {0x7, 0xc20b, 0x5, 0x8, 0x401, 0x7}, {0x80, 0xe, 0x9, 0x8, 0xf2f, 0x9}, {0x0, 0x7, 0x7, 0xc, 0x0, 0x9}, {0x800, 0x0, 0x9, 0xfff, 0x1}, {0x2, 0x2a, 0xa, 0x8, 0x8001, 0x10001}, {0x7, 0x4, 0x5, 0xe56f, 0x3, 0x1}, {0x2, 0x6, 0x100, 0x6, 0x80000001, 0x3f38a5eb}, {0x9, 0x6, 0x7, 0x7fffffff, 0xfff, 0x77}, {0x7, 0x4, 0x0, 0xe87, 0x2}, {0xfffffff5, 0x9, 0xa0, 0x2f2, 0xa18c}, {0x9, 0x3, 0x200, 0x80, 0xffffffff, 0xeb}, {0xfd, 0x8, 0x4, 0x1, 0x6, 0x3ff}, {0x3f, 0x5a90, 0x0, 0x200, 0x0, 0x9}, {0xdf8, 0x6, 0x40, 0x2, 0x4, 0x3}, {0x3, 0x100, 0x6, 0xf, 0x1, 0x5b}, {0x8, 0x7, 0x6, 0x7, 0xfffffffc}, {0x2, 0x7, 0x3, 0x7, 0xffff, 0xdd300000}, {0x7ff, 0xffffe719, 0xfffffff7, 0x4, 0xffff8000, 0xffff}, {0x7, 0x1, 0x3, 0x8, 0x4, 0x3}, {0x7fffffff, 0xca, 0x40, 0x7, 0x6, 0x8}, {0x7ef7, 0x8eb, 0x5, 0x8, 0xfffffff5, 0x5}, {0x9, 0xf4be, 0x7, 0x7, 0x0, 0x10001}, {0xffff0000, 0x3, 0x1, 0x1ff, 0x7, 0xb}, {0x3, 0x7fffffff, 0x4, 0x4, 0xb, 0x7fff}, {0x9, 0x8, 0x3, 0x8, 0x4, 0x1}, {0x5, 0x3, 0x0, 0x40, 0x53c3514c}, {0x80000001, 0x4, 0x860, 0x6, 0xd8000000, 0xffffffff}, {0x9, 0x5, 0x6, 0x1, 0x5, 0x5}, {0x80, 0x34d7, 0x1, 0x1, 0x5, 0x8}, {0x4, 0x662, 0xfffff800, 0x200, 0x324, 0x9}, {0x7, 0x5, 0x2, 0x0, 0x3, 0x9}, {0x8, 0x22657450, 0x3, 0x400, 0x18, 0x77d}, {0x4, 0x49f9, 0x9, 0x7, 0x6, 0x5}, {0x1, 0x5, 0x5, 0x3, 0x4, 0x10}, {0x4, 0x9, 0x0, 0x50b, 0x5, 0x34}, {0xa, 0x65c, 0x80000001, 0xd10, 0x6, 0x8}, {0x1, 0x2, 0xffff1042, 0x10, 0x101, 0x8}, {0x2, 0x80000000, 0x1, 0x7c2f, 0x3, 0xffffffff}, {0x1, 0x4, 0x5e49, 0x6, 0x0, 0x8413}, {0x3134, 0x1, 0xd, 0x8, 0x10, 0xa}, {0x5, 0x2, 0x5, 0x3, 0x400000, 0x3}, {0x100, 0x1, 0x800, 0x8, 0x200, 0x4}, {0x2, 0x4, 0x800, 0xa, 0x6, 0x9004}, {0x5, 0x4, 0x38f, 0x0, 0x8, 0x400}, {0x10000, 0x0, 0x2, 0x174, 0x6, 0x2}, {0xa88c, 0x10001, 0xe, 0x2e, 0x7, 0x10000}, {0x0, 0x8, 0x6, 0x1, 0x3ff, 0x6}, {0x6, 0x9, 0x6, 0x2, 0x0, 0x3}, {0xffffffff, 0x1000, 0xe, 0xf, 0x9, 0xfffffffd}, {0x0, 0x6, 0x80, 0x4, 0x8, 0x6}, {0x5, 0x3, 0xc, 0x1, 0x7, 0x8}, {0x8a, 0x80000000, 0x9d9, 0x4914, 0x9, 0x4}, {0x5, 0xd4, 0x8, 0x6, 0x9, 0x7}, {0x2, 0x7, 0xde1, 0x1632, 0x3, 0x1}], [{0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {}, {0x1}, {0x3}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0xf159f29e66dbfef5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x3}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x1}, {0x5, 0x1}, {0x2, 0x9f28183220bfdf21}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {}, {0x4, 0x1}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x4}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0xb58f8b058577f1c1}, {0x0, 0x1}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4f1ddd2cbcbf4bf8, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x3}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x6, 0x8, 0x0, 0x0, 0x4}, 0x5, 0x9, [{0x2, 0xffff8000, 0x60, 0x222e, 0x9, 0x5}, {0x5, 0x4, 0x6e, 0x7, 0x2, 0x3}, {0x8, 0xffff7fff, 0x4, 0x80000000, 0x9}, {0xffffffff, 0x6, 0x972, 0x5, 0x3}, {0x80000000, 0x1, 0x101, 0x3, 0x1, 0xfffff7d9}, {0x3, 0x10, 0x0, 0xf, 0x3, 0x8}, {0x2, 0x6, 0xfffffff9, 0x2, 0x401, 0x5}, {0x2, 0x3dd, 0xfff, 0x7, 0x5f29, 0x2}, {0xb, 0x9, 0xa, 0x51, 0xa5b, 0x8}, {0xd220, 0x1, 0x5, 0x6, 0x4, 0x40}]}, [{0xf6, 0x3, 0x6, 0x1, 0x32, 0x200}, {0x5, 0x280000, 0x2, 0x7, 0x401, 0x3ff}, {0xff, 0x4000, 0x9, 0xe, 0x1, 0xa}, {0x4, 0x2, 0x7, 0x196e, 0x81, 0x6a1d}, {0xfffffffc, 0x4, 0x1ff, 0x6, 0x81, 0xe}, {0x2, 0xfffffffd, 0x7, 0x4, 0x2, 0x9}, {0x6, 0x2, 0x9a, 0x1, 0x0, 0x4}, {0xeb, 0x3, 0x18, 0x5, 0x81, 0x4b}, {0x1, 0x669, 0x5, 0x3, 0x1ff, 0x4}, {0x9949, 0x3, 0xfff, 0xfbb6, 0x2, 0x6}, {0x7ff, 0xfffffffb, 0x7fff, 0x7, 0x9, 0xb}, {0x2, 0x2, 0x41, 0x81, 0x9, 0x5567}, {0x3, 0x25f, 0x8000, 0x1000, 0x4, 0x9}, {0x8, 0xc, 0x3, 0x5, 0x4, 0xfc}, {0xff, 0x4, 0x9, 0x409, 0x400, 0x6}, {0x8, 0x8, 0x8, 0x6, 0xa5, 0x40}, {0x9, 0x3ff, 0x28000000, 0xb5a2, 0x4, 0x1}, {0x1c00, 0x5, 0xcf1, 0xfffffffe, 0x8001, 0x5}, {0x3, 0xd9, 0x5, 0x3, 0xcc74, 0x9}, {0x1, 0x8d, 0x401, 0x3, 0x4, 0x1b57}, {0x3, 0x9, 0xe, 0x8, 0x0, 0xfffff9ef}, {0x7fff, 0x401, 0x6, 0xffff, 0x8, 0x2}, {0x4, 0x6, 0xffff0000, 0x3ff, 0x80000000, 0x6}, {0x4, 0x100, 0x1, 0xffff6f26, 0x7, 0x7}, {0xfffffffe, 0x7f, 0x100, 0xa27, 0x0, 0xa}, {0x401, 0x9, 0x8, 0x3, 0x10, 0x10001}, {0x4c, 0x82f, 0xe, 0x8, 0x7, 0x40000000}, {0x100, 0x4, 0x7, 0x2, 0xe, 0x3}, {0x8, 0x7, 0x9, 0x52f, 0x5, 0xf432}, {0x7, 0xfffffffa, 0xfffffff8, 0x0, 0x1bb, 0x9}, {0x8, 0x7, 0x3ff, 0x1, 0xba, 0x97dd032}, {0x1, 0x1000, 0x5, 0xfffffe00, 0x4, 0x3}, {0x3, 0x5, 0xa46, 0x1, 0x4, 0x3}, {0xffffff3b, 0x3, 0x0, 0xc, 0x101, 0xe5000000}, {0x6d3, 0x8, 0x1, 0x6, 0x7, 0x7fff}, {0x6, 0x80000000, 0xd, 0x5, 0xe54c, 0x80}, {0x1, 0xfffffffa, 0x8, 0xffff, 0x1, 0x101}, {0xfffffff5, 0xb, 0xa, 0x826, 0x4, 0x1}, {0x7fff, 0x5, 0x6, 0x5f43, 0x10001, 0x6}, {0x0, 0x1ff, 0x50a6, 0xff, 0x5, 0x8}, {0x8001, 0x0, 0x1, 0x6, 0x4, 0x5}, {0x1, 0x0, 0x1, 0x1, 0x1ff, 0xa}, {0x3, 0x100, 0x4, 0x9, 0x4, 0x10001}, {0xb8, 0xffffffff, 0x3, 0xab, 0x8, 0x7f}, {0x4, 0x0, 0x100, 0x0, 0x2ba0}, {0x0, 0x8, 0x6, 0x3, 0x9, 0x8}, {0x3, 0x6, 0xffffffff, 0xfffeffff, 0x1, 0x2}, {0x6, 0x6f7, 0x6, 0x1, 0x508d, 0x4}, {0x4, 0xab, 0x1, 0x9, 0x3, 0x1}, {0x5, 0x0, 0x40, 0x2, 0x5, 0x8}, {0xb, 0x8, 0xf, 0x9, 0x1, 0x8}, {0x5, 0x6c, 0x7, 0x8, 0x8, 0xfffffe00}, {0x9, 0xffff, 0x2, 0x3, 0x7, 0x8001}, {0x6, 0x4, 0x1, 0x7, 0xffffffff, 0x401}, {0x2, 0x1000, 0xb, 0x400000, 0x2, 0x5}, {0x3, 0x5, 0x3, 0x5, 0x18, 0x6}, {0x7, 0x4, 0x1000, 0x9, 0x3, 0x1}, {0x1d, 0x40, 0xa2, 0x2, 0x9, 0x71dbb01c}, {0x0, 0x4, 0x1, 0x3, 0x5, 0x10001}, {0x9, 0x8, 0x0, 0x4, 0x0, 0x7f}, {0x4d2f, 0x3, 0x0, 0x4, 0x9, 0x10}, {0x7afe, 0x5, 0xcca9, 0x6, 0xb6, 0x81}, {0x523a, 0x9, 0x7, 0x7, 0x7, 0x14be}, {0x9, 0x1, 0xf1, 0x8, 0x8000, 0x4}, {0x1, 0x7fff, 0x0, 0x8, 0xc66, 0x400}, {0x7, 0x8, 0x4ac, 0x800, 0x6, 0x4}, {0x3ff, 0x1ff, 0x5adfa978, 0x3, 0x4, 0x87}, {0x8, 0x4, 0x5, 0x1, 0x216d, 0x1}, {0x4, 0x4aa, 0x7, 0x1, 0x5, 0xfcf3}, {0x9, 0x9, 0x4, 0x100, 0xd1e6, 0x8}, {0x2, 0x0, 0xa, 0xffff7fff, 0x100, 0x1000}, {0x0, 0x0, 0xda, 0x6, 0x5b8c, 0x8a0}, {0x0, 0x2, 0x1, 0x7fff, 0x0, 0x3ff}, {0x800, 0xfffffff8, 0x3, 0x9, 0x6, 0x7}, {0x6e41a264, 0x9, 0x4, 0x2, 0xfffffff9, 0x101}, {0x1, 0x1ff, 0x8, 0xd, 0x8, 0x2}, {0x2b3, 0x9e, 0x2, 0x2, 0x5, 0xc0}, {0x3ff, 0x5, 0x6, 0xffffffff, 0xa, 0xc1bf}, {0x1000, 0x1ff, 0x9, 0x3bd9, 0x1, 0x3}, {0x2, 0x4, 0x4, 0x4, 0x1, 0x8}, {0x3, 0x9, 0x4, 0x0, 0x9, 0x6}, {0x9, 0xff800000, 0x8, 0x8, 0x2, 0x3}, {0x10, 0x0, 0x5, 0x1, 0xba981b54, 0x6}, {0x7ff, 0x5, 0x6, 0x3, 0x7, 0x9}, {0x0, 0x5, 0x4, 0x8, 0xff, 0x10}, {0x7, 0xaec, 0x1, 0xfff, 0x9, 0x2}, {0x6, 0x8, 0x0, 0x1, 0xb, 0x3}, {0x8, 0xffff, 0x7ff, 0x7fffffff, 0x7, 0x80000001}, {0xfe5, 0x1, 0x6, 0xe8d, 0xc, 0xfffffff3}, {0x7, 0xea33, 0xffffffff, 0x7, 0x7, 0x7fffffff}, {0x8, 0x4, 0x7ff, 0x7, 0x65e8, 0x2}, {0x7fffffff, 0x7, 0x3, 0x4, 0x14a, 0x2}, {0x1ff, 0x2, 0x9, 0x48000, 0x7, 0x7ff}, {0x9, 0xfffffffd, 0x5, 0x9, 0x40, 0xd}, {0x3ff, 0x1ff, 0x7, 0x9, 0x2, 0x10001}, {0x93c6, 0xffff, 0x5, 0x101, 0x8}, {0x50000, 0x2, 0x80000000, 0x88, 0xfff, 0xf97}, {0x5, 0x2, 0x12000, 0x4, 0x6fc0887b, 0x7}, {0x7, 0x66, 0x9, 0x401, 0x7, 0x10001}, {0x8, 0x7, 0x0, 0x80000000, 0xd2f1, 0x5}, {0x3, 0x9, 0x3, 0xfff, 0x100, 0x1000}, {0x3, 0x4, 0x5, 0x5, 0x7fffffff, 0x6}, {0x0, 0x7, 0x8, 0x6bcb, 0x2, 0x9}, {0x1c, 0x4, 0x7fff, 0x7fffffff, 0x7fff, 0x7}, {0x100, 0x4d1, 0xd, 0x0, 0x4, 0x5}, {0x2, 0x3b9, 0x1, 0x10000, 0x7, 0x4}, {0x7, 0xfffffffc, 0x1, 0x9, 0x9, 0x3}, {0x1, 0x7, 0xffff, 0x6, 0x0, 0x6}, {0x1, 0x5, 0x3, 0x0, 0x0, 0x8}, {0x6, 0x7, 0x1, 0x5a826ebe, 0x1, 0x6}, {0x3, 0x0, 0x5a3, 0x81, 0x2, 0x40}, {0x5, 0x80000001, 0xc05, 0x6, 0xa, 0x5}, {0xfffffffd, 0x5, 0x7, 0x3, 0x800, 0xc}, {0xf, 0x0, 0x2, 0x3, 0x2, 0xaad}, {0x800, 0x0, 0x7, 0x1, 0x7f, 0x6}, {0x80000000, 0x5, 0x2, 0xeca9, 0x4}, {0xb, 0x7f, 0x4, 0xa, 0x2, 0x80000001}, {0x0, 0x7, 0x6, 0x7, 0x17, 0x3}, {0x3f, 0x9, 0x1, 0x2c, 0x6, 0x9}, {0x10001, 0x707f, 0x3, 0x6, 0x6, 0x80000000}, {0x4, 0xfffffffb, 0x4, 0x2, 0x3, 0x200}, {0x8, 0x4, 0x3, 0x9, 0x7, 0x1}, {0x1, 0x8, 0x1, 0x80, 0x8, 0x40}, {0x9, 0x7, 0x7, 0x0, 0x7, 0x8}, {0x7, 0xa, 0x3, 0x80, 0xc, 0x1}, {0x8, 0x9, 0x7, 0x7ea42da0, 0x9, 0x5}, {0xa, 0x1, 0x1, 0x1e, 0x3, 0x7ff}, {0x80000001, 0x6, 0xa, 0x0, 0x1400000, 0x4}], [{0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4, 0xd40b63ccd8068180}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x2}, {0x6c5fd267be7c3bfc}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x0, 0x1}, {0xd559515525f29d2a, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {0x2}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4b1083b0edd180a5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x656c, 0x5, 0x5, 0x5, 0xfff}, 0x2, 0x5, [{0x4, 0xff, 0x9, 0x6, 0x800, 0x80000001}, {0x1ff, 0x96, 0x6, 0xe, 0x1, 0x7b7}]}, [{0xffff84c2, 0x6, 0xa4ab, 0x2c, 0xb5, 0x4}, {0xffff, 0x8, 0x81, 0x4, 0x0, 0x3000}, {0x4, 0xb74, 0x8, 0x9, 0xffff, 0x8}, {0x3, 0x4, 0xf, 0x4, 0x9, 0x5}, {0x4261ba85, 0x6, 0x421, 0x9, 0x22f, 0x46f}, {0x6, 0x2, 0x2, 0xcfe6, 0xd, 0x7}, {0x4, 0x1, 0xffffffff, 0x8, 0x68c2, 0x36}, {0x6, 0x4, 0x5ff7, 0x6aa4, 0xdf, 0x3}, {0x70, 0xffffff81, 0xec, 0x4899, 0x1000, 0x6}, {0xff, 0xe, 0xfffffff7, 0x1000, 0xa, 0x7}, {0x6, 0x6, 0xfff, 0x0, 0x7, 0xab7}, {0x7, 0x10, 0x3, 0xda, 0x400, 0x48}, {0x9, 0x3, 0x80000000, 0x10000, 0x4, 0xb}, {0x10000, 0x1ff, 0xfffffff9, 0x8, 0x2, 0x797}, {0x8, 0x6, 0x10000, 0x101, 0x7, 0x1a7}, {0xa, 0x4, 0x8, 0x9, 0xfffffffb, 0x2}, {0x2, 0x7, 0x1000, 0x5, 0x5, 0x40a}, {0x6, 0xc, 0x25fa9080, 0x5, 0x3, 0xfffffffb}, {0x2, 0x2, 0x0, 0x4, 0xe, 0x2}, {0x6, 0x9, 0x2, 0x3, 0x100, 0x5c9}, {0x0, 0x2, 0x1, 0x8, 0x9, 0x52}, {0xc, 0x9ce6, 0x5, 0x5, 0xc, 0x2}, {0xfffffffb, 0x0, 0x1ff, 0x3, 0xa7, 0x3}, {0x6a2, 0x0, 0x3, 0xffff, 0xffffffff, 0x3}, {0x5, 0x1, 0x7f, 0x6, 0xb7, 0x1000}, {0x5, 0x9, 0x2, 0xfffffff9, 0x3, 0x7}, {0x5, 0x3, 0x6, 0x1, 0x2, 0xd11}, {0x401, 0x8, 0x2, 0xe3e, 0x3, 0x3}, {0x5, 0x7, 0x6, 0x60, 0x6, 0x6bae}, {0x5, 0x5, 0x7, 0x5, 0x2, 0x2}, {0xbe, 0x1, 0x3ff, 0x2, 0x2, 0x401}, {0xd, 0x7, 0x3, 0x4, 0x6, 0x4}, {0x8, 0x4cf, 0x4, 0xd438, 0x59, 0x5}, {0x4, 0x401, 0x7f, 0xa69c, 0x8, 0xa98}, {0x1, 0x8000, 0x9, 0xfffffff4, 0x4, 0x40}, {0x80, 0xffffffff, 0xa3fc, 0x25cbf6ce, 0xbf, 0x3}, {0x200, 0xa, 0x30, 0xfffffc24, 0xffff0001, 0xfffffffa}, {0x8, 0x2, 0x9f, 0x0, 0x4, 0x4d4f}, {0x6, 0x8000, 0x1, 0xfffffffe, 0x9, 0x3da}, {0x0, 0x25c0000, 0x8, 0x2, 0x4, 0x7}, {0x468f, 0x8, 0x7, 0x7ff, 0x7ff, 0x7}, {0x80, 0x1, 0x3, 0xfffff8d5, 0x8, 0x10000}, {0x261, 0x6, 0x4, 0x4, 0x0, 0x9}, {0x3, 0x6, 0x2, 0x0, 0x0, 0x2}, {0x0, 0x5, 0x4, 0x5, 0xb, 0x10000}, {0x7fff, 0x3, 0xbb5, 0x1000, 0x7fffffff}, {0x7ff, 0x400, 0xf, 0x1000, 0x7, 0x81}, {0x7, 0x52, 0x2, 0x7, 0x1000, 0x3ff}, {0xffffffff, 0xe6, 0x9, 0x1, 0x8000, 0x7}, {0x8, 0x1, 0x3, 0x0, 0x2, 0xc}, {0x10000, 0xb8e1, 0xb51a, 0x3, 0x7, 0xaa4}, {0x1, 0x8, 0xa81f, 0x9, 0x10000, 0xa}, {0x7, 0x3, 0x7, 0x3, 0x9, 0xd}, {0x3ff, 0x10000, 0xffffffff, 0x0, 0xfffffff7, 0x4}, {0x74000000, 0x3, 0x4, 0xf4, 0x60000000}, {0x2, 0x1, 0xebd, 0x3, 0xf, 0x3ff}, {0x6, 0xba8, 0x0, 0x25, 0x8, 0x8}, {0x2, 0xac, 0xa0000000, 0x7e24, 0x80000000, 0x6}, {0x2, 0x80000000, 0x80000001, 0xe35, 0x0, 0x9}, {0x4, 0xe, 0x761, 0x8, 0x6, 0x3ff}, {0x96a4, 0x6, 0xb, 0xfffffffc, 0x4, 0x40}, {0x0, 0xffffffff, 0x1, 0x5, 0x80000000, 0x5}, {0x2, 0x6, 0x400, 0x8, 0x7, 0x6}, {0x1, 0xf0000000, 0x80, 0xf, 0x7, 0xfffffff9}, {0xe4, 0x3, 0x2, 0x5, 0x10000, 0x480b}, {0x7fffffff, 0x67, 0x8000, 0xfffffffd, 0x80000000, 0x9}, {0xb, 0x400, 0x91, 0x400, 0xb56c, 0x100}, {0x7, 0x80000000, 0x4, 0x400, 0x5, 0xa0}, {0x400, 0x8, 0xb965, 0x4, 0xca0, 0x1}, {0x5ce8, 0x6, 0xffffffd7, 0x1ff, 0x9, 0xfffffff3}, {0x80, 0x5, 0x9, 0x200, 0x80, 0x3}, {0x9, 0x200, 0xe, 0x101, 0x6, 0x1}, {0x5, 0x0, 0x2, 0x8000, 0x1e4b, 0x6}, {0x0, 0x2, 0x7, 0x0, 0x6, 0x7}, {0xff, 0x8, 0x6, 0x80000001, 0xffffffff, 0x4}, {0x46, 0x9f00000, 0x6, 0x40, 0x9, 0x9}, {0x6, 0xc, 0x7c06, 0x6, 0x6, 0x10}, {0xa57, 0x5, 0x9, 0x1, 0x8, 0xe54}, {0x101, 0x3, 0x7fffffff, 0x6bb, 0x3, 0x3}, {0xa, 0xce, 0x7ff, 0x4, 0x800, 0x9}, {0x4, 0x9, 0xe, 0xfffffa4f, 0x8, 0xaea}, {0xfffff801, 0x40, 0x3, 0x8, 0x10000, 0x2}, {0x0, 0x832b, 0x4, 0x2, 0x5, 0x8}, {0x6, 0x9, 0x401, 0x7, 0x80000000, 0x4}, {0x1, 0xb, 0x1, 0x5, 0x79e, 0x10001}, {0x4, 0x8, 0x9, 0x0, 0x1, 0x1fb3}, {0x8, 0x400, 0x8, 0x4, 0xffffff32}, {0x8, 0x2, 0x0, 0xe, 0x0, 0x2}, {0x10001, 0x5, 0x8, 0x6, 0x478c, 0x80000001}, {0x1000, 0x6, 0xccb3, 0x3, 0xfffffffe, 0xffffffff}, {0x3ff, 0x0, 0x4, 0x9, 0x9, 0x1}, {0x8, 0x582, 0x3ff, 0x6, 0x0, 0x5783}, {0xfafc, 0xfffffffe, 0x3, 0xb4e, 0x2, 0x20080}, {0x3, 0x1, 0x6cc1a3ee, 0x40, 0xb, 0x9}, {0x7, 0x2, 0x0, 0x8, 0x9, 0x6d28}, {0xfffffff7, 0x7fffffff, 0xb4, 0x200, 0x3, 0xff}, {0xa00000, 0x2, 0x2, 0x1, 0x7, 0x6}, {0xa, 0x8, 0x7fffffff, 0xfffffffa, 0xd6c6, 0x8}, {0xfffffff9, 0x8000, 0xfffffff9, 0x6, 0xab85, 0x7}, {0x3ff, 0x5, 0x1, 0x4, 0x1, 0x10000}, {0x400, 0x380, 0x7, 0x0, 0x7ff, 0x6}, {0xe7, 0x38000, 0x480000, 0x0, 0x3, 0xff}, {0x3, 0x7, 0x3, 0x223f, 0x1, 0xffff}, {0x4, 0x4, 0x4fa1, 0x3d, 0x200, 0x1}, {0x9, 0xcba, 0x7ff, 0x9, 0x8, 0x3}, {0x51c1, 0x0, 0x2, 0x7, 0x200, 0x8}, {0xe, 0x8001, 0xf1, 0x0, 0xff, 0x10000}, {0x9, 0x5, 0xa, 0x5, 0x10, 0x7}, {0x7, 0xc, 0xffff, 0x9, 0xbf6}, {0x9, 0xb, 0x8001, 0x7f, 0x1, 0x5}, {0xef0, 0x8, 0x7, 0x2, 0x8, 0x1}, {0x3, 0x40, 0x2, 0xffffffff, 0xffff, 0x401}, {0x9, 0x7, 0x7, 0x5bf4, 0x8, 0x6}, {0xfffffffb, 0x7, 0x3, 0x8, 0x3, 0xf5e}, {0x80000001, 0x7, 0x1, 0x3, 0x9, 0x6}, {0x9, 0x1ce5, 0x1, 0x8b1, 0x10000, 0x22}, {0xfffffff7, 0x3, 0xff, 0x0, 0x4, 0x3}, {0x7fffffff, 0xa, 0x8, 0xffffffff, 0x8, 0x6}, {0x200, 0x1, 0xe, 0x4, 0x1, 0x5}, {0x473, 0x80000001, 0x80000000, 0x7a46, 0x1, 0x9e}, {0xce94, 0x6, 0x0, 0x8, 0xd, 0x9}, {0x8, 0x2, 0xb, 0x401, 0x7b23f115, 0x3}, {0x3, 0x9, 0x1, 0xa, 0xfb, 0x6}, {0x4, 0x6, 0x28, 0x1, 0x8, 0x100}, {0x80, 0x997c, 0xff, 0x4, 0x81, 0x9d}, {0x2, 0x0, 0xfffff1bb, 0x7, 0x3, 0x4}, {0x8, 0x19, 0x80000000, 0xc0000, 0x1, 0xfffffffc}, {0x9, 0x3, 0x3, 0x0, 0x3, 0x5c5e}], [{0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0xe7e5425b2ee1fbd}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x6}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x5}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x3}, {0x5}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x5}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x7}, {0x5}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4}, {0xa, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x6}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x2, 0x1}]}}]}, {0x40, 0x6, "c553766d4cec930b50fc361db5d9946f24556f9fb7d9a1a943c3ac08293f685421c656d247ba7c84913329f53f37dff8be49a2acba80b4500e96d1e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0xec, 0xe, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf5}]}, {0xb6, 0x6, "9bfbf2ce3926d992b6a9aef64974a6db2dc05d45ab03712511a49779df98b8fa94ffb716c9885148945428c01cf7b0db17ec37b4533e6c889b3d7ac302fbf12d8b3b1d7bbb0d200f8b8895b01ca6c505093165f667b1495f41de2a645e6e591ec1df7b547dda7406f98312f4ceeb7e972b0c1a8a0a55643ab9a77cd47c798c2c45a5514e97a9bb92181046b35b33dd330c60eace4179d4c63494d34e9de7fe86b7cca37271fcb80e5a5afc9d88d74243d7f4"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_INDEV={0x14, 0x3, 'netdevsim0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd2, 0x58}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0x2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x305c}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = openat$uinput(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000500)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$inet(r9, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r10 = syz_pidfd_open(r8, 0x0) process_madvise(r10, 0x0, 0x0, 0x14, 0x0) ioctl$UI_GET_SYSNAME(r7, 0x8040552c, &(0x7f0000000800)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) 4m0.280089033s ago: executing program 4 (id=3110): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000440)='proc\x00', 0x1) r5 = fsmount(r4, 0x0, 0x1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8e}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) r8 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, 0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(0x0, r9, r10, &(0x7f0000000600)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x2000, 0x0, 0x0, '\x00', 0x0}}) r11 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$uac1(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0x8880, 0x85) sendmmsg$unix(r5, &(0x7f0000007d80)=[{{&(0x7f0000000780)=@file={0x1, './sys\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000800)="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", 0xfc}, {&(0x7f0000000900)="bbd7641feeca7f480d21025fa304e8cbf0e404647f29e27b2e756875cd6c684136c7e54eff7f856a011e4d59bc095c073bb06d8e237eefe2903002aa057327a4818f5ac8a69a67daf7014eda3c1fa68b2427c1199bb28b49c8d9612602e574b65ccdbd66852ba0d7525c705503b0e064305598860f427d5426aa7895d8130b441413416ab7d41950e5420dbc0ea9b1ceb10533b6b21b9e14d6707f334b5e", 0x9e}], 0x2, &(0x7f0000000a40)=[@rights={{0x24, 0x1, 0x1, [r6, r3, r8, r4, r3]}}, @rights={{0x18, 0x1, 0x1, [r7, r2]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r3, r1, 0xffffffffffffffff]}}], 0x68, 0x20000004}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="f3aa6bbe2e512cbd6288dc12", 0xc}], 0x1, &(0x7f0000007500)}}, {{&(0x7f0000007640)=@file={0x1, './sys\x00'}, 0x6e, &(0x7f0000007cc0)=[{&(0x7f00000076c0)="0f2fcec2f2f0606d344145048348b7021a41460fa9ccf87b4a7737399c11bace22350930767634795b0d35cb5abc76d63136a7870a1446969320af813425c5ae670a0a6f748e2223da594814f335963f60732ef336f7eb15932839bc984548d728fd14c6f6142bd310582e4803f32fac8341ba24231747b6d79e3bc783fa43f44e0f7b979822e07764b08a416cef57b9385a1526d26e42feeb22aa11f4001d044a4bf3b8c207b347d5c5d588740f66730036902bebc6329a9876ad4aa1e9177a5a021ccc34d3aeefbd5389ae88965f73d66f64ea1e28c2351f94edabb72c75d028a5b4d4f183124eab79b3599edc5002746ea677e1edac2aec", 0xf9}, {&(0x7f00000077c0)="162eebcb9bc4c88ccc28cabf3e878962ab4201140357c4ecfd8082d3431e86473d043c98133a85e94da06df0b89fceebdab3cc2e5c921614c5ea498afc677da965402472e4d4d0e46868bd6784b301536477d81968dacf991208b3fff85be4c5e3eb9a009c2c10615454", 0x6a}, {&(0x7f0000007840)="36e5f56fe1ec5981efd5ec484a33f3c50104f4676452418d76f10aab78b92934bb62bbbf6d76e1cb84fb2445c61e003a5aa53a2f35bc639153a53e54869bccb2d139d144709ed233b68ffa41af32b09b42702cd4b90d784556ca88d6383a401692078fbfde7b2c9c", 0x68}, {&(0x7f00000078c0)="0e4b1ad261df1d2498c9aaa65d7c14bd796415eb74ee9bd3244be2a5c9b695e58ab67eb3eb9d3977557389e84f88faac356a7b7110d11cb3e4b345a93260d79eacfbf68238425ec119f88c6760011e5884dbc39a6f138cb614606c2947191afe6722d8e165ddc65c4d4a96828a317bc7ab", 0x71}, {&(0x7f0000007940)="77f47416d16c63532d58f63ebaf182cc4304c3cc450d70e749379cc2", 0x1c}, {&(0x7f0000007980)="e8403e60680d9beeb442e33bb92e4dd081b5a06f820729b00e8f8a1f4c637dc48e00facd5eb1dd3a847734fdfc1ff20f4c49e33d97e0841cddebd6f36fb368eaf95a826e996fc6741dd6c046db363f9b2ef5ec8ed2168d47c7cf477c850f6d824309ca8a731f036591baff7beda01eee12de51598a", 0x75}, {&(0x7f0000007a00)="ca3c18193a93efc37e83eb208913f082e20072a2e72bbb63000e1e0090d4414f2df0bc6e58ec3efd5478c026ad87bbe6891ee0b3e573670413e8be1bbd9dfc2da0ac4f2d0b715beab3d5c1f1e658786b63d7c5ec3c804611e22e5dbf43e38a3195cffbed0c827971835a193765399d4d0af130a95cb457dd8480015f8a44bd37fe17f6e5c36685b1c153cc666e0f4721743e0e239a430b47b906c7859d6c493302efc8cd89599b3d8920838b4a36d3580ca1a59ee436ac08c1f67ea3329fd5501f58481965", 0xc5}, {&(0x7f0000007b00)="776668e2543e", 0x6}, {&(0x7f0000007b40)="0ac71149e6219a306d7c0464dae1fdb302e6c8b6a534c5d0436047440dbef2d87245f308ac0a2665594722ce410d18f8ffe39d4e373d5e01b2effdd9282650bfd0531335a5b1f66dc78815d248f04500721483e380b7b0071fee9996e9edfb6695342be0e9688a1daea71ba5ef4ddb9b1928ca224ec03b578c2e4c92f3e689b0021fc9dfeb", 0x85}, {&(0x7f0000007c00)="953285d1ca30e48ec530fa4b65e178c2012d5c2193918cd8c2869d92ebdddec630c9ee559cb4443d89666a5eee9491be5c07e903b18e80679baf82765c66a77606a6b7cd937e9afed8737b1b0ac635ab317ca367e6e0d995cc56e33e1c6c4998cec87fb56a94759f02287d784f86d357e7a89d98c4177cae7fa0e7bc557df879ed4ea921b5a654ed73bf09f585a04fe801ef31a4d45de82763117553d6f29742", 0xa0}], 0xa, 0x0, 0x0, 0x8844}}], 0x3, 0x4000) 3m57.196809105s ago: executing program 4 (id=3117): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000000180)="4f4f4f4fffffffff", 0x8) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@userptr={0x0, 0x2, 0x59, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000280)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000400)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/177, 0xb1) setresuid(0x0, 0xee00, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef0009057e"], 0x0) landlock_restrict_self(r4, 0x2) write(r4, &(0x7f00000003c0)='udp 2', 0x55) ftruncate(r4, 0xa) 3m41.955885709s ago: executing program 32 (id=3117): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000000180)="4f4f4f4fffffffff", 0x8) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@userptr={0x0, 0x2, 0x59, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000280)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000400)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/177, 0xb1) setresuid(0x0, 0xee00, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef0009057e"], 0x0) landlock_restrict_self(r4, 0x2) write(r4, &(0x7f00000003c0)='udp 2', 0x55) ftruncate(r4, 0xa) 2m44.229107167s ago: executing program 0 (id=3262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000940)=""/195, 0x0, 0x20, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a40), 0x37f, 0x10, &(0x7f0000000a80), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000b80), &(0x7f0000000bc0)=@udp=r0}, 0x20) setresuid(0xffffffffffffffff, 0x0, 0x0) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000240), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x34, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x39b3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) fcntl$setstatus(r6, 0x4, 0x42400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000300), &(0x7f0000000340)=@udp=r6}, 0x20) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000d40)=0x1, 0x4) 2m43.266518004s ago: executing program 0 (id=3263): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000600)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x14}}, 0x0) r4 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000900)={'\x00', 0x23f5, 0xdd33, 0x1, 0xffffffffffffffff, 0x6}) ioctl$SG_BLKTRACESTART(r4, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) getsockname$packet(r3, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$inet(r6, 0x0, 0x4040801) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2m41.009171984s ago: executing program 0 (id=3268): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev/v4l-touch0\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/166, 0x1f8}], 0x1, 0xfffffff7, 0xc84d) 2m39.919809334s ago: executing program 0 (id=3271): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x0, 0x2000000, 0x0, 0xb5}, 0x48) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xff21, &(0x7f0000000240)={&(0x7f0000000840)={0x20, 0x0, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0bc5310, &(0x7f00000000c0)={0x8, 0x0, 0x402, 0x28a9bf35, 0x6516, 0x2}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m38.777057165s ago: executing program 0 (id=3273): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) setresuid(0x0, 0xee01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000276fa3479642778e56b8e1b15ea46e", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf251600000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000a001a000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x40) 2m38.631274699s ago: executing program 0 (id=3274): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1d) 2m23.439787657s ago: executing program 33 (id=3274): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1d) 1m27.840432184s ago: executing program 5 (id=3381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000680)=@v3={0x3000000, [{0x7000000, 0x2}, {0x0, 0x5}]}, 0x18, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000199c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) sendfile(r4, r5, 0x0, 0x20000023896) 1m26.811113671s ago: executing program 5 (id=3384): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x1, 0x168, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000], 0x700, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x10, 0x8100, 'syz_tun\x00', 'dummy0\x00', 'nr0\x00', 'wlan0\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], @random="a68146ce6ba5", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0xa0, 0xa0, 0xd8, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x300, 0x0, 0x88ca, 0x1, 0x2}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0x10}}}}]}]}, 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mydev\x00', 0x1ff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000580)={0x0, 0xffffffffffffffff}, &(0x7f00000005c0)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000600)={0x1}, &(0x7f0000000640)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000680)='./config\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000006c0)=0x3, 0xac5) syz_clone3(&(0x7f0000000700)={0x23800000, &(0x7f0000000780)=0xffffffffffffffff, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f00000007c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) mount(0x0, &(0x7f0000000140)='./mydev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev/v4l-touch0\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000240)=""/166, 0x1f8}], 0x1, 0xfffffff7, 0xc84d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1\x00') 1m20.565117184s ago: executing program 5 (id=3393): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newchain={0x3050, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xfff3, 0xd}, {0xb, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x2fcc, 0x2, [@TCA_FW_ACT={0xe4, 0x4, [@m_nat={0xe0, 0x8, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xffff0001, 0x8, 0x9, 0x9}, @multicast1, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x7, 0x571, 0x8}, @private=0xa010102, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x8, 0x7fff, 0x5}, @dev={0xac, 0x14, 0x14, 0x16}, @empty}}]}, {0x3d, 0x6, "f1e18125058ba26692e6f3541fd2abbd3a6e9c688663120a5b5b950dc65649a2e5dd5b51d8783468f6dbd567eb69484d85c9dd99c9077611cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_ACT={0x2eb8, 0x4, [@m_ct={0x114, 0xc, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x10000}, @TCA_CT_LABELS={0x14, 0x7, "f0d1d736db395f4c27bb71d7e8747ea3"}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_MARK={0x8, 0x5, 0x1}]}, {0xbf, 0x6, "e17c2402e8c36cac0412b8004bdff1f35961ae5828ec572300740ff87cd2c560a37c75a78513ebc0b8ceba80bc6ee40035e527e83d10544500927167f1bda9501e5304fc2a5d41c0ab01e24556bc2e861e0e0e234a9371935c75cfe45a5ea95f613f25fecec0ca0df57841802680f8cba115d83cf97bc42b9d773b4721f90d0beeeb3bcbc5d21351e9fd2df03f4b33193c483a6687f8487f0def5f1c54bbde2123b3c8351812b0178ed04a8b72023ded21861b96a1946a108d3177"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x2cb4, 0xe, 0x0, 0x0, {{0xa}, {0x2c4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xa}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x9, 0x80000001, 0x3, 0x0, 0x5}, 0x2, 0x4, [{0x0, 0xf, 0x7ff, 0x900000, 0x4}, {0x0, 0xfffff3fe, 0x1701c62d, 0x3, 0x80000001, 0x19d}, {0xfffffff7, 0xe8a8, 0x7d, 0x4f, 0x3, 0xfffffff7}, {0x3, 0x8, 0x3, 0xfffffff9, 0x5, 0x1}]}, [{0x4, 0xfffffffb, 0x4, 0x7ff, 0x6}, {0x1, 0x8001, 0x8, 0x0, 0xff, 0xfff}, {0x0, 0x3, 0x80, 0x10001, 0x401, 0xe}, {0x3, 0x1ff, 0x8, 0x80000001, 0x1, 0x200}, {0x9, 0x5, 0x6, 0x6a3, 0x1, 0x3}, {0x4, 0x3, 0x9, 0x8, 0x1, 0x5}, {0x3, 0x9, 0x6, 0x80000000, 0x200, 0x5}, {0x0, 0x7, 0xfffffa59, 0x1, 0x2, 0x800}, {0x0, 0x1, 0x100, 0x131d8000, 0x8, 0xffffffff}, {0xfff, 0xd3e7, 0xca4, 0x5, 0x3, 0x5}, {0x7fffffff, 0x80000001, 0x2280, 0x7, 0x576, 0x2}, {0x6, 0x3, 0x7, 0x1b4e, 0x5, 0xffffffff}, {0x3, 0x7ff, 0x7, 0x7, 0xffff, 0x80000000}, {0x5, 0x4, 0x575, 0x8, 0xa, 0x8}, {0x2, 0x101, 0x6, 0x1, 0x8, 0x3}, {0x81, 0x3, 0x6, 0x8, 0xa, 0x6}, {0x1, 0x0, 0x12, 0x0, 0x1, 0x3ff}, {0x0, 0x71f7, 0x3, 0xff, 0x6, 0x4}, {0x68, 0x4, 0x2, 0xffff0931, 0x4, 0x4737}, {0x3, 0x0, 0x2, 0x7, 0x0, 0x1000}, {0x1, 0x7, 0xa, 0x9, 0x5, 0x7}, {0xc97d, 0x80000000, 0x8, 0x6, 0x6, 0x6}, {0x7, 0xbfb3, 0xc, 0x8, 0x6, 0x5}, {0x4, 0x5, 0x4, 0x4, 0x4, 0x4}, {0x1ff, 0xffff, 0x9, 0x6, 0x8, 0x6}, {0x2, 0x6, 0x400, 0x4, 0x3, 0x50b}, {0xd, 0x81, 0x2, 0x7, 0x8, 0x5}, {0x1, 0x1000, 0x8, 0x8, 0x69, 0x10000}, {0xeff7, 0x7, 0x16, 0x7, 0x3, 0x7}, {0x8, 0xee900000, 0x1, 0x9, 0x5, 0x1ff}, {0x24c2, 0xfffffffa, 0x1, 0x3ff, 0x40, 0x5}, {0x7, 0x4, 0x0, 0x4, 0x45, 0x63867f3b}, {0x6, 0x9c6, 0x3ff, 0x7, 0x7f, 0x1000}, {0x5, 0x7f, 0x401, 0x80000001, 0x9, 0x5ecd}, {0x7ff, 0x6b, 0x4, 0x10, 0x9, 0xad33}, {0xea0d, 0x5, 0x2, 0x5, 0x8, 0x8}, {0x41, 0x3, 0x3, 0x0, 0x9, 0x81}, {0x7, 0x0, 0x10000, 0x9, 0x80, 0x2}, {0x3, 0xf, 0x9, 0x7fffffff, 0x6, 0x200}, {0x1ff, 0x5, 0x8001, 0x3, 0x81, 0x3}, {0x3, 0x5, 0xffffdbf3, 0x7, 0xf, 0x1}, {0xa2, 0x0, 0xfffffff8, 0x80, 0x8, 0x9}, {0x3, 0x81, 0x3780000, 0x5, 0x175, 0x40}, {0xd, 0x7745, 0x0, 0x1, 0x2b88000, 0xfffffff7}, {0x3, 0x9684, 0x5, 0x2, 0x2, 0x8}, {0x0, 0x10000, 0xe0c, 0x1000, 0x6}, {0x9, 0x0, 0x5, 0x7fff, 0x1000, 0x2}, {0x0, 0x9, 0xd, 0x4, 0x4, 0x1}, {0x1, 0x100, 0xb6, 0x6, 0x43, 0x8}, {0x7f, 0x3, 0x7, 0x6, 0x8, 0x80000001}, {0x6, 0x0, 0x2, 0x9, 0xd9, 0xfffffffb}, {0x200, 0x1, 0x400, 0x40, 0x5, 0x5}, {0x390, 0x5, 0x1, 0x7ff, 0x2, 0x6}, {0x2, 0x5, 0x4cc4, 0x8, 0x6}, {0x6, 0xfff, 0xc, 0x98, 0x6, 0x401}, {0xfffffff7, 0x1, 0x7bd9, 0x7f, 0x1}, {0x1, 0x4, 0x1, 0xa, 0xff, 0x713}, {0x5, 0x3, 0x3, 0x5, 0x1, 0xca18}, {0x70, 0x2, 0x400, 0x1aa, 0x8, 0x3}, {0x100, 0x5, 0x89, 0x40, 0x3, 0x9}, {0x8, 0x401, 0x9d1e, 0x80000000, 0xbc780, 0x1}, {0x20000000, 0x1, 0xfffffff8, 0xffffff70, 0x8, 0x12a385ac}, {0x9, 0x7, 0x9723, 0x2, 0xfff, 0x3}, {0xfffff206, 0x3, 0x8, 0x401, 0x0, 0x6}, {0x0, 0xe148bdec, 0xfff, 0x1, 0x1, 0x6}, {0x8, 0x7, 0x2, 0x398, 0xffffffff, 0x8000}, {0xfffffc01, 0x80, 0x2, 0xf3c, 0x21, 0x3}, {0xfffffff3, 0xffff, 0x1375e07b, 0x4, 0x7}, {0x6, 0x9, 0x1b, 0x9b, 0x3, 0x6}, {0x2, 0x620, 0x9, 0x8, 0x8dfc, 0x7}, {0x9, 0xffff3a2b, 0xb5b6, 0x2, 0x5, 0x3ff}, {0xd, 0x40, 0x6, 0x100, 0xaa, 0x10000}, {0xfffffc31, 0xd5d, 0xe, 0x6, 0xfff, 0x25e3}, {0x7, 0xdcd3, 0x7, 0x1, 0x8, 0x6}, {0x7, 0xc20b, 0x5, 0x8, 0x401, 0x7}, {0x80, 0xe, 0x9, 0x8, 0xf2f, 0x9}, {0x0, 0x7, 0x7, 0xc, 0x0, 0x9}, {0x800, 0x0, 0x9, 0xfff, 0x1}, {0x2, 0x2a, 0xa, 0x8, 0x8001, 0x10001}, {0x7, 0x4, 0x5, 0xe56f, 0x3, 0x1}, {0x2, 0x6, 0x100, 0x6, 0x80000001, 0x3f38a5eb}, {0x9, 0x6, 0x7, 0x7fffffff, 0xfff, 0x77}, {0x7, 0x4, 0x0, 0xe87, 0x2}, {0xfffffff5, 0x9, 0xa0, 0x2f2, 0xa18c}, {0x9, 0x3, 0x200, 0x80, 0xffffffff, 0xeb}, {0xfd, 0x8, 0x4, 0x1, 0x6, 0x3ff}, {0x3f, 0x5a90, 0x0, 0x200, 0x0, 0x9}, {0xdf8, 0x6, 0x40, 0x2, 0x4, 0x3}, {0x3, 0x100, 0x6, 0xf, 0x1, 0x5b}, {0x8, 0x7, 0x6, 0x7, 0xfffffffc}, {0x2, 0x7, 0x3, 0x7, 0xffff, 0xdd300000}, {0x7ff, 0xffffe719, 0xfffffff7, 0x4, 0xffff8000, 0xffff}, {0x7, 0x1, 0x3, 0x8, 0x4, 0x3}, {0x7fffffff, 0xca, 0x40, 0x7, 0x6, 0x8}, {0x7ef7, 0x8eb, 0x5, 0x8, 0xfffffff5, 0x5}, {0x9, 0xf4be, 0x7, 0x7, 0x0, 0x10001}, {0xffff0000, 0x3, 0x1, 0x1ff, 0x7, 0xb}, {0x3, 0x7fffffff, 0x4, 0x4, 0xb, 0x7fff}, {0x9, 0x8, 0x3, 0x8, 0x4, 0x1}, {0x5, 0x3, 0x0, 0x40, 0x53c3514c}, {0x80000001, 0x4, 0x860, 0x6, 0xd8000000, 0xffffffff}, {0x9, 0x5, 0x6, 0x1, 0x5, 0x5}, {0x80, 0x34d7, 0x1, 0x1, 0x5, 0x8}, {0x4, 0x662, 0xfffff800, 0x200, 0x324, 0x9}, {0x7, 0x5, 0x2, 0x0, 0x3, 0x9}, {0x8, 0x22657450, 0x3, 0x400, 0x18, 0x77d}, {0x4, 0x49f9, 0x9, 0x7, 0x6, 0x5}, {0x1, 0x5, 0x5, 0x3, 0x4, 0x10}, {0x4, 0x9, 0x0, 0x50b, 0x5, 0x34}, {0xa, 0x65c, 0x80000001, 0xd10, 0x6, 0x8}, {0x1, 0x2, 0xffff1042, 0x10, 0x101, 0x8}, {0x2, 0x80000000, 0x1, 0x7c2f, 0x3, 0xffffffff}, {0x1, 0x4, 0x5e49, 0x6, 0x0, 0x8413}, {0x3134, 0x1, 0xd, 0x8, 0x10, 0xa}, {0x5, 0x2, 0x5, 0x3, 0x400000, 0x3}, {0x100, 0x1, 0x800, 0x8, 0x200, 0x4}, {0x2, 0x4, 0x800, 0xa, 0x6, 0x9004}, {0x5, 0x4, 0x38f, 0x0, 0x8, 0x400}, {0x10000, 0x0, 0x2, 0x174, 0x6, 0x2}, {0xa88c, 0x10001, 0xe, 0x2e, 0x7, 0x10000}, {0x0, 0x8, 0x6, 0x1, 0x3ff, 0x6}, {0x6, 0x9, 0x6, 0x2, 0x0, 0x3}, {0xffffffff, 0x1000, 0xe, 0xf, 0x9, 0xfffffffd}, {0x0, 0x6, 0x80, 0x4, 0x8, 0x6}, {0x5, 0x3, 0xc, 0x1, 0x7, 0x8}, {0x8a, 0x80000000, 0x9d9, 0x4914, 0x9, 0x4}, {0x5, 0xd4, 0x8, 0x6, 0x9, 0x7}, {0x2, 0x7, 0xde1, 0x1632, 0x3, 0x1}], [{0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {}, {0x1}, {0x3}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0xf159f29e66dbfef5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x3}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x1}, {0x5, 0x1}, {0x2, 0x9f28183220bfdf21}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {}, {0x4, 0x1}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x4}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0xb58f8b058577f1c1}, {0x0, 0x1}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4f1ddd2cbcbf4bf8, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x3}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x6, 0x8, 0x0, 0x0, 0x4}, 0x5, 0x9, [{0x2, 0xffff8000, 0x60, 0x222e, 0x9, 0x5}, {0x5, 0x4, 0x6e, 0x7, 0x2, 0x3}, {0x8, 0xffff7fff, 0x4, 0x80000000, 0x9}, {0xffffffff, 0x6, 0x972, 0x5, 0x3}, {0x80000000, 0x1, 0x101, 0x3, 0x1, 0xfffff7d9}, {0x3, 0x10, 0x0, 0xf, 0x3, 0x8}, {0x2, 0x6, 0xfffffff9, 0x2, 0x401, 0x5}, {0x2, 0x3dd, 0xfff, 0x7, 0x5f29, 0x2}, {0xb, 0x9, 0xa, 0x51, 0xa5b, 0x8}, {0xd220, 0x1, 0x5, 0x6, 0x4, 0x40}]}, [{0xf6, 0x3, 0x6, 0x1, 0x32, 0x200}, {0x5, 0x280000, 0x2, 0x7, 0x401, 0x3ff}, {0xff, 0x4000, 0x9, 0xe, 0x1, 0xa}, {0x4, 0x2, 0x7, 0x196e, 0x81, 0x6a1d}, {0xfffffffc, 0x4, 0x1ff, 0x6, 0x81, 0xe}, {0x2, 0xfffffffd, 0x7, 0x4, 0x2, 0x9}, {0x6, 0x2, 0x9a, 0x1, 0x0, 0x4}, {0xeb, 0x3, 0x18, 0x5, 0x81, 0x4b}, {0x1, 0x669, 0x5, 0x3, 0x1ff, 0x4}, {0x9949, 0x3, 0xfff, 0xfbb6, 0x2, 0x6}, {0x7ff, 0xfffffffb, 0x7fff, 0x7, 0x9, 0xb}, {0x2, 0x2, 0x41, 0x81, 0x9, 0x5567}, {0x3, 0x25f, 0x8000, 0x1000, 0x4, 0x9}, {0x8, 0xc, 0x3, 0x5, 0x4, 0xfc}, {0xff, 0x4, 0x9, 0x409, 0x400, 0x6}, {0x8, 0x8, 0x8, 0x6, 0xa5, 0x40}, {0x9, 0x3ff, 0x28000000, 0xb5a2, 0x4, 0x1}, {0x1c00, 0x5, 0xcf1, 0xfffffffe, 0x8001, 0x5}, {0x3, 0xd9, 0x5, 0x3, 0xcc74, 0x9}, {0x1, 0x8d, 0x401, 0x3, 0x4, 0x1b57}, {0x3, 0x9, 0xe, 0x8, 0x0, 0xfffff9ef}, {0x7fff, 0x401, 0x6, 0xffff, 0x8, 0x2}, {0x4, 0x6, 0xffff0000, 0x3ff, 0x80000000, 0x6}, {0x4, 0x100, 0x1, 0xffff6f26, 0x7, 0x7}, {0xfffffffe, 0x7f, 0x100, 0xa27, 0x0, 0xa}, {0x401, 0x9, 0x8, 0x3, 0x10, 0x10001}, {0x4c, 0x82f, 0xe, 0x8, 0x7, 0x40000000}, {0x100, 0x4, 0x7, 0x2, 0xe, 0x3}, {0x8, 0x7, 0x9, 0x52f, 0x5, 0xf432}, {0x7, 0xfffffffa, 0xfffffff8, 0x0, 0x1bb, 0x9}, {0x8, 0x7, 0x3ff, 0x1, 0xba, 0x97dd032}, {0x1, 0x1000, 0x5, 0xfffffe00, 0x4, 0x3}, {0x3, 0x5, 0xa46, 0x1, 0x4, 0x3}, {0xffffff3b, 0x3, 0x0, 0xc, 0x101, 0xe5000000}, {0x6d3, 0x8, 0x1, 0x6, 0x7, 0x7fff}, {0x6, 0x80000000, 0xd, 0x5, 0xe54c, 0x80}, {0x1, 0xfffffffa, 0x8, 0xffff, 0x1, 0x101}, {0xfffffff5, 0xb, 0xa, 0x826, 0x4, 0x1}, {0x7fff, 0x5, 0x6, 0x5f43, 0x10001, 0x6}, {0x0, 0x1ff, 0x50a6, 0xff, 0x5, 0x8}, {0x8001, 0x0, 0x1, 0x6, 0x4, 0x5}, {0x1, 0x0, 0x1, 0x1, 0x1ff, 0xa}, {0x3, 0x100, 0x4, 0x9, 0x4, 0x10001}, {0xb8, 0xffffffff, 0x3, 0xab, 0x8, 0x7f}, {0x4, 0x0, 0x100, 0x0, 0x2ba0}, {0x0, 0x8, 0x6, 0x3, 0x9, 0x8}, {0x3, 0x6, 0xffffffff, 0xfffeffff, 0x1, 0x2}, {0x6, 0x6f7, 0x6, 0x1, 0x508d, 0x4}, {0x4, 0xab, 0x1, 0x9, 0x3, 0x1}, {0x5, 0x0, 0x40, 0x2, 0x5, 0x8}, {0xb, 0x8, 0xf, 0x9, 0x1, 0x8}, {0x5, 0x6c, 0x7, 0x8, 0x8, 0xfffffe00}, {0x9, 0xffff, 0x2, 0x3, 0x7, 0x8001}, {0x6, 0x4, 0x1, 0x7, 0xffffffff, 0x401}, {0x2, 0x1000, 0xb, 0x400000, 0x2, 0x5}, {0x3, 0x5, 0x3, 0x5, 0x18, 0x6}, {0x7, 0x4, 0x1000, 0x9, 0x3, 0x1}, {0x1d, 0x40, 0xa2, 0x2, 0x9, 0x71dbb01c}, {0x0, 0x4, 0x1, 0x3, 0x5, 0x10001}, {0x9, 0x8, 0x0, 0x4, 0x0, 0x7f}, {0x4d2f, 0x3, 0x0, 0x4, 0x9, 0x10}, {0x7afe, 0x5, 0xcca9, 0x6, 0xb6, 0x81}, {0x523a, 0x9, 0x7, 0x7, 0x7, 0x14be}, {0x9, 0x1, 0xf1, 0x8, 0x8000, 0x4}, {0x1, 0x7fff, 0x0, 0x8, 0xc66, 0x400}, {0x7, 0x8, 0x4ac, 0x800, 0x6, 0x4}, {0x3ff, 0x1ff, 0x5adfa978, 0x3, 0x4, 0x87}, {0x8, 0x4, 0x5, 0x1, 0x216d, 0x1}, {0x4, 0x4aa, 0x7, 0x1, 0x5, 0xfcf3}, {0x9, 0x9, 0x4, 0x100, 0xd1e6, 0x8}, {0x2, 0x0, 0xa, 0xffff7fff, 0x100, 0x1000}, {0x0, 0x0, 0xda, 0x6, 0x5b8c, 0x8a0}, {0x0, 0x2, 0x1, 0x7fff, 0x0, 0x3ff}, {0x800, 0xfffffff8, 0x3, 0x9, 0x6, 0x7}, {0x6e41a264, 0x9, 0x4, 0x2, 0xfffffff9, 0x101}, {0x1, 0x1ff, 0x8, 0xd, 0x8, 0x2}, {0x2b3, 0x9e, 0x2, 0x2, 0x5, 0xc0}, {0x3ff, 0x5, 0x6, 0xffffffff, 0xa, 0xc1bf}, {0x1000, 0x1ff, 0x9, 0x3bd9, 0x1, 0x3}, {0x2, 0x4, 0x4, 0x4, 0x1, 0x8}, {0x3, 0x9, 0x4, 0x0, 0x9, 0x6}, {0x9, 0xff800000, 0x8, 0x8, 0x2, 0x3}, {0x10, 0x0, 0x5, 0x1, 0xba981b54, 0x6}, {0x7ff, 0x5, 0x6, 0x3, 0x7, 0x9}, {0x0, 0x5, 0x4, 0x8, 0xff, 0x10}, {0x7, 0xaec, 0x1, 0xfff, 0x9, 0x2}, {0x6, 0x8, 0x0, 0x1, 0xb, 0x3}, {0x8, 0xffff, 0x7ff, 0x7fffffff, 0x7, 0x80000001}, {0xfe5, 0x1, 0x6, 0xe8d, 0xc, 0xfffffff3}, {0x7, 0xea33, 0xffffffff, 0x7, 0x7, 0x7fffffff}, {0x8, 0x4, 0x7ff, 0x7, 0x65e8, 0x2}, {0x7fffffff, 0x7, 0x3, 0x4, 0x14a, 0x2}, {0x1ff, 0x2, 0x9, 0x48000, 0x7, 0x7ff}, {0x9, 0xfffffffd, 0x5, 0x9, 0x40, 0xd}, {0x3ff, 0x1ff, 0x7, 0x9, 0x2, 0x10001}, {0x93c6, 0xffff, 0x5, 0x101, 0x8}, {0x50000, 0x2, 0x80000000, 0x88, 0xfff, 0xf97}, {0x5, 0x2, 0x12000, 0x4, 0x6fc0887b, 0x7}, {0x7, 0x66, 0x9, 0x401, 0x7, 0x10001}, {0x8, 0x7, 0x0, 0x80000000, 0xd2f1, 0x5}, {0x3, 0x9, 0x3, 0xfff, 0x100, 0x1000}, {0x3, 0x4, 0x5, 0x5, 0x7fffffff, 0x6}, {0x0, 0x7, 0x8, 0x6bcb, 0x2, 0x9}, {0x1c, 0x4, 0x7fff, 0x7fffffff, 0x7fff, 0x7}, {0x100, 0x4d1, 0xd, 0x0, 0x4, 0x5}, {0x2, 0x3b9, 0x1, 0x10000, 0x7, 0x4}, {0x7, 0xfffffffc, 0x1, 0x9, 0x9, 0x3}, {0x1, 0x7, 0xffff, 0x6, 0x0, 0x6}, {0x1, 0x5, 0x3, 0x0, 0x0, 0x8}, {0x6, 0x7, 0x1, 0x5a826ebe, 0x1, 0x6}, {0x3, 0x0, 0x5a3, 0x81, 0x2, 0x40}, {0x5, 0x80000001, 0xc05, 0x6, 0xa, 0x5}, {0xfffffffd, 0x5, 0x7, 0x3, 0x800, 0xc}, {0xf, 0x0, 0x2, 0x3, 0x2, 0xaad}, {0x800, 0x0, 0x7, 0x1, 0x7f, 0x6}, {0x80000000, 0x5, 0x2, 0xeca9, 0x4}, {0xb, 0x7f, 0x4, 0xa, 0x2, 0x80000001}, {0x0, 0x7, 0x6, 0x7, 0x17, 0x3}, {0x3f, 0x9, 0x1, 0x2c, 0x6, 0x9}, {0x10001, 0x707f, 0x3, 0x6, 0x6, 0x80000000}, {0x4, 0xfffffffb, 0x4, 0x2, 0x3, 0x200}, {0x8, 0x4, 0x3, 0x9, 0x7, 0x1}, {0x1, 0x8, 0x1, 0x80, 0x8, 0x40}, {0x9, 0x7, 0x7, 0x0, 0x7, 0x8}, {0x7, 0xa, 0x3, 0x80, 0xc, 0x1}, {0x8, 0x9, 0x7, 0x7ea42da0, 0x9, 0x5}, {0xa, 0x1, 0x1, 0x1e, 0x3, 0x7ff}, {0x80000001, 0x6, 0xa, 0x0, 0x1400000, 0x4}], [{0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4, 0xd40b63ccd8068180}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x2}, {0x6c5fd267be7c3bfc}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x0, 0x1}, {0xd559515525f29d2a, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {0x2}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4b1083b0edd180a5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x656c, 0x5, 0x5, 0x5, 0xfff}, 0x2, 0x5, [{0x4, 0xff, 0x9, 0x6, 0x800, 0x80000001}, {0x1ff, 0x96, 0x6, 0xe, 0x1, 0x7b7}]}, [{0xffff84c2, 0x6, 0xa4ab, 0x2c, 0xb5, 0x4}, {0xffff, 0x8, 0x81, 0x4, 0x0, 0x3000}, {0x4, 0xb74, 0x8, 0x9, 0xffff, 0x8}, {0x3, 0x4, 0xf, 0x4, 0x9, 0x5}, {0x4261ba85, 0x6, 0x421, 0x9, 0x22f, 0x46f}, {0x6, 0x2, 0x2, 0xcfe6, 0xd, 0x7}, {0x4, 0x1, 0xffffffff, 0x8, 0x68c2, 0x36}, {0x6, 0x4, 0x5ff7, 0x6aa4, 0xdf, 0x3}, {0x70, 0xffffff81, 0xec, 0x4899, 0x1000, 0x6}, {0xff, 0xe, 0xfffffff7, 0x1000, 0xa, 0x7}, {0x6, 0x6, 0xfff, 0x0, 0x7, 0xab7}, {0x7, 0x10, 0x3, 0xda, 0x400, 0x48}, {0x9, 0x3, 0x80000000, 0x10000, 0x4, 0xb}, {0x10000, 0x1ff, 0xfffffff9, 0x8, 0x2, 0x797}, {0x8, 0x6, 0x10000, 0x101, 0x7, 0x1a7}, {0xa, 0x4, 0x8, 0x9, 0xfffffffb, 0x2}, {0x2, 0x7, 0x1000, 0x5, 0x5, 0x40a}, {0x6, 0xc, 0x25fa9080, 0x5, 0x3, 0xfffffffb}, {0x2, 0x2, 0x0, 0x4, 0xe, 0x2}, {0x6, 0x9, 0x2, 0x3, 0x100, 0x5c9}, {0x0, 0x2, 0x1, 0x8, 0x9, 0x52}, {0xc, 0x9ce6, 0x5, 0x5, 0xc, 0x2}, {0xfffffffb, 0x0, 0x1ff, 0x3, 0xa7, 0x3}, {0x6a2, 0x0, 0x3, 0xffff, 0xffffffff, 0x3}, {0x5, 0x1, 0x7f, 0x6, 0xb7, 0x1000}, {0x5, 0x9, 0x2, 0xfffffff9, 0x3, 0x7}, {0x5, 0x3, 0x6, 0x1, 0x2, 0xd11}, {0x401, 0x8, 0x2, 0xe3e, 0x3, 0x3}, {0x5, 0x7, 0x6, 0x60, 0x6, 0x6bae}, {0x5, 0x5, 0x7, 0x5, 0x2, 0x2}, {0xbe, 0x1, 0x3ff, 0x2, 0x2, 0x401}, {0xd, 0x7, 0x3, 0x4, 0x6, 0x4}, {0x8, 0x4cf, 0x4, 0xd438, 0x59, 0x5}, {0x4, 0x401, 0x7f, 0xa69c, 0x8, 0xa98}, {0x1, 0x8000, 0x9, 0xfffffff4, 0x4, 0x40}, {0x80, 0xffffffff, 0xa3fc, 0x25cbf6ce, 0xbf, 0x3}, {0x200, 0xa, 0x30, 0xfffffc24, 0xffff0001, 0xfffffffa}, {0x8, 0x2, 0x9f, 0x0, 0x4, 0x4d4f}, {0x6, 0x8000, 0x1, 0xfffffffe, 0x9, 0x3da}, {0x0, 0x25c0000, 0x8, 0x2, 0x4, 0x7}, {0x468f, 0x8, 0x7, 0x7ff, 0x7ff, 0x7}, {0x80, 0x1, 0x3, 0xfffff8d5, 0x8, 0x10000}, {0x261, 0x6, 0x4, 0x4, 0x0, 0x9}, {0x3, 0x6, 0x2, 0x0, 0x0, 0x2}, {0x0, 0x5, 0x4, 0x5, 0xb, 0x10000}, {0x7fff, 0x3, 0xbb5, 0x1000, 0x7fffffff}, {0x7ff, 0x400, 0xf, 0x1000, 0x7, 0x81}, {0x7, 0x52, 0x2, 0x7, 0x1000, 0x3ff}, {0xffffffff, 0xe6, 0x9, 0x1, 0x8000, 0x7}, {0x8, 0x1, 0x3, 0x0, 0x2, 0xc}, {0x10000, 0xb8e1, 0xb51a, 0x3, 0x7, 0xaa4}, {0x1, 0x8, 0xa81f, 0x9, 0x10000, 0xa}, {0x7, 0x3, 0x7, 0x3, 0x9, 0xd}, {0x3ff, 0x10000, 0xffffffff, 0x0, 0xfffffff7, 0x4}, {0x74000000, 0x3, 0x4, 0xf4, 0x60000000}, {0x2, 0x1, 0xebd, 0x3, 0xf, 0x3ff}, {0x6, 0xba8, 0x0, 0x25, 0x8, 0x8}, {0x2, 0xac, 0xa0000000, 0x7e24, 0x80000000, 0x6}, {0x2, 0x80000000, 0x80000001, 0xe35, 0x0, 0x9}, {0x4, 0xe, 0x761, 0x8, 0x6, 0x3ff}, {0x96a4, 0x6, 0xb, 0xfffffffc, 0x4, 0x40}, {0x0, 0xffffffff, 0x1, 0x5, 0x80000000, 0x5}, {0x2, 0x6, 0x400, 0x8, 0x7, 0x6}, {0x1, 0xf0000000, 0x80, 0xf, 0x7, 0xfffffff9}, {0xe4, 0x3, 0x2, 0x5, 0x10000, 0x480b}, {0x7fffffff, 0x67, 0x8000, 0xfffffffd, 0x80000000, 0x9}, {0xb, 0x400, 0x91, 0x400, 0xb56c, 0x100}, {0x7, 0x80000000, 0x4, 0x400, 0x5, 0xa0}, {0x400, 0x8, 0xb965, 0x4, 0xca0, 0x1}, {0x5ce8, 0x6, 0xffffffd7, 0x1ff, 0x9, 0xfffffff3}, {0x80, 0x5, 0x9, 0x200, 0x80, 0x3}, {0x9, 0x200, 0xe, 0x101, 0x6, 0x1}, {0x5, 0x0, 0x2, 0x8000, 0x1e4b, 0x6}, {0x0, 0x2, 0x7, 0x0, 0x6, 0x7}, {0xff, 0x8, 0x6, 0x80000001, 0xffffffff, 0x4}, {0x46, 0x9f00000, 0x6, 0x40, 0x9, 0x9}, {0x6, 0xc, 0x7c06, 0x6, 0x6, 0x10}, {0xa57, 0x5, 0x9, 0x1, 0x8, 0xe54}, {0x101, 0x3, 0x7fffffff, 0x6bb, 0x3, 0x3}, {0xa, 0xce, 0x7ff, 0x4, 0x800, 0x9}, {0x4, 0x9, 0xe, 0xfffffa4f, 0x8, 0xaea}, {0xfffff801, 0x40, 0x3, 0x8, 0x10000, 0x2}, {0x0, 0x832b, 0x4, 0x2, 0x5, 0x8}, {0x6, 0x9, 0x401, 0x7, 0x80000000, 0x4}, {0x1, 0xb, 0x1, 0x5, 0x79e, 0x10001}, {0x4, 0x8, 0x9, 0x0, 0x1, 0x1fb3}, {0x8, 0x400, 0x8, 0x4, 0xffffff32}, {0x8, 0x2, 0x0, 0xe, 0x0, 0x2}, {0x10001, 0x5, 0x8, 0x6, 0x478c, 0x80000001}, {0x1000, 0x6, 0xccb3, 0x3, 0xfffffffe, 0xffffffff}, {0x3ff, 0x0, 0x4, 0x9, 0x9, 0x1}, {0x8, 0x582, 0x3ff, 0x6, 0x0, 0x5783}, {0xfafc, 0xfffffffe, 0x3, 0xb4e, 0x2, 0x20080}, {0x3, 0x1, 0x6cc1a3ee, 0x40, 0xb, 0x9}, {0x7, 0x2, 0x0, 0x8, 0x9, 0x6d28}, {0xfffffff7, 0x7fffffff, 0xb4, 0x200, 0x3, 0xff}, {0xa00000, 0x2, 0x2, 0x1, 0x7, 0x6}, {0xa, 0x8, 0x7fffffff, 0xfffffffa, 0xd6c6, 0x8}, {0xfffffff9, 0x8000, 0xfffffff9, 0x6, 0xab85, 0x7}, {0x3ff, 0x5, 0x1, 0x4, 0x1, 0x10000}, {0x400, 0x380, 0x7, 0x0, 0x7ff, 0x6}, {0xe7, 0x38000, 0x480000, 0x0, 0x3, 0xff}, {0x3, 0x7, 0x3, 0x223f, 0x1, 0xffff}, {0x4, 0x4, 0x4fa1, 0x3d, 0x200, 0x1}, {0x9, 0xcba, 0x7ff, 0x9, 0x8, 0x3}, {0x51c1, 0x0, 0x2, 0x7, 0x200, 0x8}, {0xe, 0x8001, 0xf1, 0x0, 0xff, 0x10000}, {0x9, 0x5, 0xa, 0x5, 0x10, 0x7}, {0x7, 0xc, 0xffff, 0x9, 0xbf6}, {0x9, 0xb, 0x8001, 0x7f, 0x1, 0x5}, {0xef0, 0x8, 0x7, 0x2, 0x8, 0x1}, {0x3, 0x40, 0x2, 0xffffffff, 0xffff, 0x401}, {0x9, 0x7, 0x7, 0x5bf4, 0x8, 0x6}, {0xfffffffb, 0x7, 0x3, 0x8, 0x3, 0xf5e}, {0x80000001, 0x7, 0x1, 0x3, 0x9, 0x6}, {0x9, 0x1ce5, 0x1, 0x8b1, 0x10000, 0x22}, {0xfffffff7, 0x3, 0xff, 0x0, 0x4, 0x3}, {0x7fffffff, 0xa, 0x8, 0xffffffff, 0x8, 0x6}, {0x200, 0x1, 0xe, 0x4, 0x1, 0x5}, {0x473, 0x80000001, 0x80000000, 0x7a46, 0x1, 0x9e}, {0xce94, 0x6, 0x0, 0x8, 0xd, 0x9}, {0x8, 0x2, 0xb, 0x401, 0x7b23f115, 0x3}, {0x3, 0x9, 0x1, 0xa, 0xfb, 0x6}, {0x4, 0x6, 0x28, 0x1, 0x8, 0x100}, {0x80, 0x997c, 0xff, 0x4, 0x81, 0x9d}, {0x2, 0x0, 0xfffff1bb, 0x7, 0x3, 0x4}, {0x8, 0x19, 0x80000000, 0xc0000, 0x1, 0xfffffffc}, {0x9, 0x3, 0x3, 0x0, 0x3, 0x5c5e}], [{0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0xe7e5425b2ee1fbd}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x6}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x5}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x3}, {0x5}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x5}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x7}, {0x5}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4}, {0xa, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x6}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x2, 0x1}]}}]}, {0x40, 0x6, "c553766d4cec930b50fc361db5d9946f24556f9fb7d9a1a943c3ac08293f685421c656d247ba7c84913329f53f37dff8be49a2acba80b4500e96d1e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0xec, 0xe, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf5}]}, {0xb6, 0x6, "9bfbf2ce3926d992b6a9aef64974a6db2dc05d45ab03712511a49779df98b8fa94ffb716c9885148945428c01cf7b0db17ec37b4533e6c889b3d7ac302fbf12d8b3b1d7bbb0d200f8b8895b01ca6c505093165f667b1495f41de2a645e6e591ec1df7b547dda7406f98312f4ceeb7e972b0c1a8a0a55643ab9a77cd47c798c2c45a5514e97a9bb92181046b35b33dd330c60eace4179d4c63494d34e9de7fe86b7cca37271fcb80e5a5afc9d88d74243d7f4"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd2, 0x58}}, @TCA_RATE={0x6, 0x5, {0x1a, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0x2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x3050}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = openat$uinput(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000500)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$inet(r9, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r10 = syz_pidfd_open(r8, 0x0) process_madvise(r10, 0x0, 0x0, 0x14, 0x0) ioctl$UI_GET_SYSNAME(r7, 0x8040552c, &(0x7f0000000800)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) 1m18.909596223s ago: executing program 5 (id=3396): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r2 = syz_socket_connect_nvme_tcp() getsockopt$bt_hci(r2, 0x0, 0x7, &(0x7f0000000000)=""/50, &(0x7f0000000040)=0x32) ioctl$UBLK_U_CMD_SET_PARAMS(0xffffffffffffffff, 0xc0207508, &(0x7f00000003c0)={r0, 0xffff, 0x70, &(0x7f0000000340)={0x70, 0x0, {0xb, 0xa, 0xb, 0x3, 0x81, 0x1, 0x7, 0x1, 0x6}, {0x3, 0x69, 0x8, 0x6, 0x2}, {0x2, 0x7, 0xb, 0xb}, {0x0, 0x1b, 0xe56e}}}) ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f0000000440)={r3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe503f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000700)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000740)=r7, 0x4) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES16=r9, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018808000100", @ANYRES32, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) r10 = mq_open(&(0x7f0000000500)='!\x7f\x00\xca\x00\x00\x00\f\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0, 0x4, 0x7, 0x1, 0x78, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8000, 0x8000, 0xc000, 0x1900}}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newneigh={0x5c, 0x1c, 0x200, 0x70bd28, 0x25dfdbfd, {0x1c, 0x0, 0x0, r3, 0x1, 0x50, 0x4}, [@NDA_FDB_EXT_ATTRS={0x1c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x2}, @NFEA_DONT_REFRESH]}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_FLAGS_EXT={0xb5}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x5c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004}, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000800)=0x20, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000900)=r4, 0x4) 22.972311935s ago: executing program 7 (id=3480): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffff1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x44}}, 0x0) r4 = syz_io_uring_setup(0xefd, &(0x7f00000003c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x35, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./nfsd\x00', &(0x7f0000000600)='nfsd\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd/filehandle\x00', 0x2, 0x0) write(r8, &(0x7f0000000680)='mydomain / 64\n', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80) write(r9, &(0x7f00000007c0)='mydomain / 64\n', 0xe) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x402, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x10}) r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000880)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r11, &(0x7f00000008c0)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265"], 0xaf) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x8c2) 20.88368462s ago: executing program 7 (id=3483): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100183f6b000000000018000000180000000300000000000000010000850000000002fbff000200000000000000005f00d59b6bda80f335dd601048d6e8ee2fd059986f9840e2b45d2b979a4e4322be9d89b954c654a371b2177359caf4dfc7800977296935f9f8349b19ea37e717905244281ec6e6de4a68b7ba9639ea6c2bb201dd5e04dc092df8c15240675a23fed0be177f4388fd55b5ada3b9f14c6d3e701bbc6a681057a122d3174a2c7e9bace7e9e7237cd6fc2d59f73c023ed8046977424d1d50d9a3e6de7075853d1d80b551a59d3b8f1498f0f09c668695c626f23a8435f0423ffed54a8d2c2458f08d20"], 0x0, 0x33, 0x0, 0xa}, 0x28) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80000, 0x42) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) r5 = fanotify_init(0x40, 0x40000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xec602, 0x9f) fanotify_mark(r5, 0x1, 0x40001019, r6, 0x0) getdents64(r6, &(0x7f0000000300)=""/163, 0xba974ed140df4995) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa101, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) fchdir(0xffffffffffffffff) 16.071203873s ago: executing program 6 (id=3495): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043b0a1ab939613c26add535e48daac3ffaaaa10d5590000"], 0xd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f00000005c0), 0x0}, 0x20) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x2b0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="05340600000000"], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x20023, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000680)={0x3, 0x47425247, 0x1, @discrete={0x12000, 0x4}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000880)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='net/tcp\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 12.882200928s ago: executing program 1 (id=3499): ioperm(0x4, 0x8, 0x40000000000005) ioperm(0x99, 0x3, 0x5) prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x10) prctl$PR_GET_IO_FLUSHER(0x3a) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='sys_mnt\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='algo=\"', 0x6) syz_usb_connect(0x2, 0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff00000007058102400000070501024000000705840240000007050202"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1555555555555699}) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/ttyUSB0\x00', 0x2, 0x0) close(r1) 10.419137029s ago: executing program 6 (id=3505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x2, 0x1, 0x3, 0x0, 0xf5ff, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10050}, 0x4) 10.415981989s ago: executing program 1 (id=3506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, r1) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000580)='.\x00', &(0x7f00000005c0)='ntfs3\x00', 0x1000080, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@gettfilter={0x24, 0x2e, 0x12d, 0x71bd2c, 0x4, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xfff3, 0xfff1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4041880) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) readv(r6, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/63, 0x3f}], 0x1) syz_emit_ethernet(0x91, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r2], 0x0) 10.13650111s ago: executing program 6 (id=3507): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x8000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f00000001c0)='/dev/uinput\x00', 0x410000, &(0x7f0000000200)={@_ha_fsid={[0x7, 0x2]}, {0x6, 0x1000, 0x6, 0xa805}}, 0x6, &(0x7f0000000240), &(0x7f0000000280)}) syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101301) fsopen(&(0x7f00000005c0)='f2fs\x00', 0x1) openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000006c0)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000580)) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r3], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 9.642967993s ago: executing program 1 (id=3508): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001440)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000014c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001500), 0x0, 0x0) read$msr(r3, &(0x7f0000001540)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='100', 0x3) kcmp(r0, r2, 0x0, r3, r4) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000140)={0x2, 0x2, 0x6ac, 0x100001, 0x80000001, 0xfffffffb}) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000180)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000200)="b6b0d0f8b4b5", 0x0, 0x3ff, 0x0, 0x0, 0x0}) sched_setaffinity(r2, 0x0, 0x0) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x404000, 0x0) socket$inet6(0xa, 0x1, 0x0) 8.536298777s ago: executing program 1 (id=3510): gettid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10040, 0x70) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000019780)=0x80000000000003) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000197c0), 0x28100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019800)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019840)=0xe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r7, 0x1}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x0, 0x4b, r7, 0x3}, 0xc) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e6"], 0x20}], 0x1}, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xb0, 0x10, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x100, 0xf, 0x1, {0x22, 0xa28}}, {{{0x9, 0x5, 0x81, 0x3, 0x610, 0x8, 0x1, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x0, 0x8}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x0, 0x3, 0x8, 0x40, 0x5}, 0x2b, &(0x7f0000000340)={0x5, 0xf, 0x2b, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x0, 0x3b, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x4, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x69, 0x6, 0x7ff}]}, 0x6, [{0xfd, &(0x7f0000000380)=@string={0xfd, 0x3, "cbe007b2cc1f99ca5eed4e956b166c9099497107605e54488398784d01a6fa59b501fc7a8cfdd47a6b040a2484e618161256309183ab75fee9e27e851cda9c78ffd70f0d4d5e264b768ad22df9994b2b9b906f9d3032826083f8c24b255e6bc04813f64e7ddc458ca9fca1e0bc8235a2beda38f851cd70b4849d479902e72693ecf941b1b12d359d1900846b5d228bd6c902fabe325ba749f51bbaba28906327b5b10a9bd037f3ea88db786fffdedb572d180396782d542b7b5e4c025378d7ec117ee720c022d28947f8e0c04b50996159563392e5f78db114d6722e35d4a9232176e55db52764111c22b56a82d203f12f22dda5ff34df08df6f10"}}, {0x85, &(0x7f0000000480)=@string={0x85, 0x3, "9d4678770871ccbd80fffb9b791b45429188272da3e0e7a93c6ec6e5d57be6ac8851cce99b60785d400bf389f5a92ef2576d70aebc410df764ba030440f7cb05c96d3b27e3964e959689a9dc27e72d9b8c1d33d7d58d8425ff04dec33603e7d76e9e113d4af16b8c6b49352693198e17b45e8d696182861bc34d2720658777aa5b76b6"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c01}}, {0x82, &(0x7f0000000580)=@string={0x82, 0x3, "4f16ab4acb14f3de0c8f4bfec888dad7016bebf8eec435e1c9e016bfe62e42cd90e94b40442f052cf557498d54df82f21502b5f3e2d204f01d017445ec27d2d242ec0a1756cc6dfcfdb925531e09debbce6afcdcc9abf853371192fd503fa519ed5903cbebda8e2de92e43be57ac8dc2e26e596bbd4872a2f04dcf811c3a58ed"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0c}}]}) 8.397091892s ago: executing program 2 (id=3511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000380)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/resume', 0xa82, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r2 = open(&(0x7f0000000340)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000024) fcntl$setsig(r2, 0xa, 0x11) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0xffffffd3) r3 = syz_open_dev$sndmidi(&(0x7f0000000680), 0x2, 0x143102) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000700)="94", 0xf000}, {0x0}], 0x2) 7.878503275s ago: executing program 3 (id=3512): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x2a, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x3a3a, 0x0, 0x2}, 0x30, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="700200008940d651215fc2593a902fddb857cba2114c0b58a584605850e26610257e8f114cae119ec53d87ee45e89550548045a251352d2a2c0592dd00f3a2375ca9196a3e579d2c48cb45d0dc74ad03fcb06bc91bba2c0d0c7a06f4d2f34e61e89686894df59e278965e4b02eebb3c7a4d3fc5cdbbc4a7da64f576d640bfb0b9ec98ca20f21a2e631320ef54838698bb88bf53d44d42253f02685336dcc4946", @ANYRES16=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) landlock_restrict_self(r2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0xe0, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0xcb, 0x7, 0x1, 0x0, "bcb4e5b0e1c1953f1b79c0a1247a78a12eadb4adcaa92399f62153067560a6f966826250314f1a992b1721980c73d6af4a7e96f6d1c5e39fa962d2790de3fad1fef874c6f55a5646b7fee9661bf2f156cadfb94f852f2bf34e534848e15a7858fb5b9661b08b3b4f4d5f715998319dc3f79d606475fdc509d760e84f9078983fe637bf0a4b13efc41d6654de3931fbb974b19fe60938af4727baf73c90f7034d26d6f23aa3f023dc5270eb692f18aa959c4995c06969d7e03a368b95c7b0380b367ee83acd2103"}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x150}}, 0x40000) landlock_restrict_self(r1, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000000140), 0xfffffffffffff568, 0x101) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000500)={{0x5, 0x0, 0x401, 0x8, '\x00', 0x2}, 0x5, 0x100, 0x3, r7, 0x8, 0x10, 'syz0\x00', &(0x7f00000003c0)=['\x91:*-\x00', '/dev/sequencer2\x00', '/dev/snd/midiC#D#\x00', ']$:&{-{\x00', 'GPL\x00', 'ethtool\x00', 'GPL\x00', '/dev/snd/midiC#D#\x00'], 0x51}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x9, 0x5}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r10) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x40000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.405182346s ago: executing program 2 (id=3513): mkdirat(0xffffffffffffff9c, 0x0, 0x4) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sched_getscheduler(0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r1, &(0x7f0000000240)=""/153, 0x99) syz_clone3(&(0x7f0000000300)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000380)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000040)={{r1}, 0x1, &(0x7f0000000000)=[0x7fffffff], 0x1000}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18005a0b00000000000000bcc74a18f3f11900000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000007d000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c9f000/0x2000)=nil, 0x5, 0x0, 0x0, 0xa00, 0x1e, 0x0, 0x8, 0xa}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000006c0)={{0x9, 0x7, 0x5, 0x25}, 'syz1\x00', 0x4f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a01020000000000000000070000b20bf61400100001000000000000f100000184000a"], 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="27030200dc0f14000e000f000713c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003", 0x2b}], 0x1}, 0x4005) sendmsg$nl_generic(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000a00)=[{0x0, 0xb, 0x7, 0x7ffd0004}]}) syz_open_dev$sndpcmc(&(0x7f0000000a40), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000a80), 0x800, 0x2) 7.337427052s ago: executing program 6 (id=3514): madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100)) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000440), 0xa, 0x62080) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000580)={0x2, 0xe2c4b4808a3496b7, 0x7fff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2200000004"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) waitid$P_PIDFD(0x3, r1, &(0x7f00000002c0), 0x1, &(0x7f0000000480)) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000001c0)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000200)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000000)) 7.26485855s ago: executing program 3 (id=3515): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newchain={0x3244, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xfff3, 0xd}, {0xb, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x2fc8, 0x2, [@TCA_FW_ACT={0xe4, 0x4, [@m_nat={0xe0, 0x8, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xffff0001, 0x8, 0x9, 0x9}, @multicast1, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x7, 0x571, 0x8}, @private=0xa010102, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x8, 0x7fff, 0x5}, @dev={0xac, 0x14, 0x14, 0x16}, @empty}}]}, {0x3d, 0x6, "f1e18125058ba26692e6f3541fd2abbd3a6e9c688663120a5b5b950dc65649a2e5dd5b51d8783468f6dbd567eb69484d85c9dd99c9077611cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_ACT={0x2ea0, 0x4, [@m_ct={0x114, 0xc, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x10000}, @TCA_CT_LABELS={0x14, 0x7, "f0d1d736db395f4c27bb71d7e8747ea3"}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_MARK={0x8, 0x5, 0x1}]}, {0xbf, 0x6, "e17c2402e8c36cac0412b8004bdff1f35961ae5828ec572300740ff87cd2c560a37c75a78513ebc0b8ceba80bc6ee40035e527e83d10544500927167f1bda9501e5304fc2a5d41c0ab01e24556bc2e861e0e0e234a9371935c75cfe45a5ea95f613f25fecec0ca0df57841802680f8cba115d83cf97bc42b9d773b4721f90d0beeeb3bcbc5d21351e9fd2df03f4b33193c483a6687f8487f0def5f1c54bbde2123b3c8351812b0178ed04a8b72023ded21861b96a1946a108d3177"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x2cb4, 0xe, 0x0, 0x0, {{0xa}, {0x2c4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xa}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x9, 0x80000001, 0x3, 0x0, 0x5}, 0x2, 0x4, [{0x0, 0xf, 0x7ff, 0x900000, 0x4}, {0x0, 0xfffff3fe, 0x1701c62d, 0x3, 0x80000001, 0x19d}, {0xfffffff7, 0xe8a8, 0x7d, 0x4f, 0x3, 0xfffffff7}, {0x3, 0x8, 0x3, 0xfffffff9, 0x5, 0x1}]}, [{0x4, 0xfffffffb, 0x4, 0x7ff, 0x6}, {0x1, 0x8001, 0x8, 0x0, 0xff, 0xfff}, {0x0, 0x3, 0x80, 0x10001, 0x401, 0xe}, {0x3, 0x1ff, 0x8, 0x80000001, 0x1, 0x200}, {0x9, 0x5, 0x6, 0x6a3, 0x1, 0x3}, {0x4, 0x3, 0x9, 0x8, 0x1, 0x5}, {0x3, 0x9, 0x6, 0x80000000, 0x200, 0x5}, {0x0, 0x7, 0xfffffa59, 0x1, 0x2, 0x800}, {0x0, 0x1, 0x100, 0x131d8000, 0x8, 0xffffffff}, {0xfff, 0xd3e7, 0xca4, 0x5, 0x3, 0x5}, {0x7fffffff, 0x80000001, 0x2280, 0x7, 0x576, 0x2}, {0x6, 0x3, 0x7, 0x1b4e, 0x5, 0xffffffff}, {0x3, 0x7ff, 0x7, 0x7, 0xffff, 0x80000000}, {0x5, 0x4, 0x575, 0x8, 0xa, 0x8}, {0x2, 0x101, 0x6, 0x1, 0x8, 0x3}, {0x81, 0x3, 0x6, 0x8, 0xa, 0x6}, {0x1, 0x0, 0x12, 0x0, 0x1, 0x3ff}, {0x0, 0x71f7, 0x3, 0xff, 0x6, 0x4}, {0x68, 0x4, 0x2, 0xffff0931, 0x4, 0x4737}, {0x3, 0x0, 0x2, 0x7, 0x0, 0x1000}, {0x1, 0x7, 0xa, 0x9, 0x5, 0x7}, {0xc97d, 0x80000000, 0x8, 0x6, 0x6, 0x6}, {0x7, 0xbfb3, 0xc, 0x8, 0x6, 0x5}, {0x4, 0x5, 0x4, 0x4, 0x4, 0x4}, {0x1ff, 0xffff, 0x9, 0x6, 0x8, 0x6}, {0x2, 0x6, 0x400, 0x4, 0x3, 0x50b}, {0xd, 0x81, 0x2, 0x7, 0x8, 0x5}, {0x1, 0x1000, 0x8, 0x8, 0x69, 0x10000}, {0xeff7, 0x7, 0x16, 0x7, 0x3, 0x7}, {0x8, 0xee900000, 0x1, 0x9, 0x5, 0x1ff}, {0x24c2, 0xfffffffa, 0x1, 0x3ff, 0x40, 0x5}, {0x7, 0x4, 0x0, 0x4, 0x45, 0x63867f3b}, {0x6, 0x9c6, 0x3ff, 0x7, 0x7f, 0x1000}, {0x5, 0x7f, 0x401, 0x80000001, 0x9, 0x5ecd}, {0x7ff, 0x6b, 0x4, 0x10, 0x9, 0xad33}, {0xea0d, 0x5, 0x2, 0x5, 0x8, 0x8}, {0x41, 0x3, 0x3, 0x0, 0x9, 0x81}, {0x7, 0x0, 0x10000, 0x9, 0x80, 0x2}, {0x3, 0xf, 0x9, 0x7fffffff, 0x6, 0x200}, {0x1ff, 0x5, 0x8001, 0x3, 0x81, 0x3}, {0x3, 0x5, 0xffffdbf3, 0x7, 0xf, 0x1}, {0xa2, 0x0, 0xfffffff8, 0x80, 0x8, 0x9}, {0x3, 0x81, 0x3780000, 0x5, 0x175, 0x40}, {0xd, 0x7745, 0x0, 0x1, 0x2b88000, 0xfffffff7}, {0x3, 0x9684, 0x5, 0x2, 0x2, 0x8}, {0x0, 0x10000, 0xe0c, 0x1000, 0x6}, {0x9, 0x0, 0x5, 0x7fff, 0x1000, 0x2}, {0x0, 0x9, 0xd, 0x4, 0x4, 0x1}, {0x1, 0x100, 0xb6, 0x6, 0x43, 0x8}, {0x7f, 0x3, 0x7, 0x6, 0x8, 0x80000001}, {0x6, 0x0, 0x2, 0x9, 0xd9, 0xfffffffb}, {0x200, 0x1, 0x400, 0x40, 0x5, 0x5}, {0x390, 0x5, 0x1, 0x7ff, 0x2, 0x6}, {0x2, 0x5, 0x4cc4, 0x8, 0x6}, {0x6, 0xfff, 0xc, 0x98, 0x6, 0x401}, {0xfffffff7, 0x1, 0x7bd9, 0x7f, 0x1}, {0x1, 0x4, 0x1, 0xa, 0xff, 0x713}, {0x5, 0x3, 0x3, 0x5, 0x1, 0xca18}, {0x70, 0x2, 0x400, 0x1aa, 0x8, 0x3}, {0x100, 0x5, 0x89, 0x40, 0x3, 0x9}, {0x8, 0x401, 0x9d1e, 0x80000000, 0xbc780, 0x1}, {0x20000000, 0x1, 0xfffffff8, 0xffffff70, 0x8, 0x12a385ac}, {0x9, 0x7, 0x9723, 0x2, 0xfff, 0x3}, {0xfffff206, 0x3, 0x8, 0x401, 0x0, 0x6}, {0x0, 0xe148bdec, 0xfff, 0x1, 0x1, 0x6}, {0x8, 0x7, 0x2, 0x398, 0xffffffff, 0x8000}, {0xfffffc01, 0x80, 0x2, 0xf3c, 0x21, 0x3}, {0xfffffff3, 0xffff, 0x1375e07b, 0x4, 0x7}, {0x6, 0x9, 0x1b, 0x9b, 0x3, 0x6}, {0x2, 0x620, 0x9, 0x8, 0x8dfc, 0x7}, {0x9, 0xffff3a2b, 0xb5b6, 0x2, 0x5, 0x3ff}, {0xd, 0x40, 0x6, 0x100, 0xaa, 0x10000}, {0xfffffc31, 0xd5d, 0xe, 0x6, 0xfff, 0x25e3}, {0x7, 0xdcd3, 0x7, 0x1, 0x8, 0x6}, {0x7, 0xc20b, 0x5, 0x8, 0x401, 0x7}, {0x80, 0xe, 0x9, 0x8, 0xf2f, 0x9}, {0x0, 0x7, 0x7, 0xc, 0x0, 0x9}, {0x800, 0x0, 0x9, 0xfff, 0x1}, {0x2, 0x2a, 0xa, 0x8, 0x8001, 0x10001}, {0x7, 0x4, 0x5, 0xe56f, 0x3, 0x1}, {0x2, 0x6, 0x100, 0x6, 0x80000001, 0x3f38a5eb}, {0x9, 0x6, 0x7, 0x7fffffff, 0xfff, 0x77}, {0x7, 0x4, 0x0, 0xe87, 0x2}, {0xfffffff5, 0x9, 0xa0, 0x2f2, 0xa18c}, {0x9, 0x3, 0x200, 0x80, 0xffffffff, 0xeb}, {0xfd, 0x8, 0x4, 0x1, 0x6, 0x3ff}, {0x3f, 0x5a90, 0x0, 0x200, 0x0, 0x9}, {0xdf8, 0x6, 0x40, 0x2, 0x4, 0x3}, {0x3, 0x100, 0x6, 0xf, 0x1, 0x5b}, {0x8, 0x7, 0x6, 0x7, 0xfffffffc}, {0x2, 0x7, 0x3, 0x7, 0xffff, 0xdd300000}, {0x7ff, 0xffffe719, 0xfffffff7, 0x4, 0xffff8000, 0xffff}, {0x7, 0x1, 0x3, 0x8, 0x4, 0x3}, {0x7fffffff, 0xca, 0x40, 0x7, 0x6, 0x8}, {0x7ef7, 0x8eb, 0x5, 0x8, 0xfffffff5, 0x5}, {0x9, 0xf4be, 0x7, 0x7, 0x0, 0x10001}, {0xffff0000, 0x3, 0x1, 0x1ff, 0x7, 0xb}, {0x3, 0x7fffffff, 0x4, 0x4, 0xb, 0x7fff}, {0x9, 0x8, 0x3, 0x8, 0x4, 0x1}, {0x5, 0x3, 0x0, 0x40, 0x53c3514c}, {0x80000001, 0x4, 0x860, 0x6, 0xd8000000, 0xffffffff}, {0x9, 0x5, 0x6, 0x1, 0x5, 0x5}, {0x80, 0x34d7, 0x1, 0x1, 0x5, 0x8}, {0x4, 0x662, 0xfffff800, 0x200, 0x324, 0x9}, {0x7, 0x5, 0x2, 0x0, 0x3, 0x9}, {0x8, 0x22657450, 0x3, 0x400, 0x18, 0x77d}, {0x4, 0x49f9, 0x9, 0x7, 0x6, 0x5}, {0x1, 0x5, 0x5, 0x3, 0x4, 0x10}, {0x4, 0x9, 0x0, 0x50b, 0x5, 0x34}, {0xa, 0x65c, 0x80000001, 0xd10, 0x6, 0x8}, {0x1, 0x2, 0xffff1042, 0x10, 0x101, 0x8}, {0x2, 0x80000000, 0x1, 0x7c2f, 0x3, 0xffffffff}, {0x1, 0x4, 0x5e49, 0x6, 0x0, 0x8413}, {0x3134, 0x1, 0xd, 0x8, 0x10, 0xa}, {0x5, 0x2, 0x5, 0x3, 0x400000, 0x3}, {0x100, 0x1, 0x800, 0x8, 0x200, 0x4}, {0x2, 0x4, 0x800, 0xa, 0x6, 0x9004}, {0x5, 0x4, 0x38f, 0x0, 0x8, 0x400}, {0x10000, 0x0, 0x2, 0x174, 0x6, 0x2}, {0xa88c, 0x10001, 0xe, 0x2e, 0x7, 0x10000}, {0x0, 0x8, 0x6, 0x1, 0x3ff, 0x6}, {0x6, 0x9, 0x6, 0x2, 0x0, 0x3}, {0xffffffff, 0x1000, 0xe, 0xf, 0x9, 0xfffffffd}, {0x0, 0x6, 0x80, 0x4, 0x8, 0x6}, {0x5, 0x3, 0xc, 0x1, 0x7, 0x8}, {0x8a, 0x80000000, 0x9d9, 0x4914, 0x9, 0x4}, {0x5, 0xd4, 0x8, 0x6, 0x9, 0x7}, {0x2, 0x7, 0xde1, 0x1632, 0x3, 0x1}], [{0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {}, {0x1}, {0x3}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0xf159f29e66dbfef5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x3}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x1}, {0x5, 0x1}, {0x2, 0x9f28183220bfdf21}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {}, {0x4, 0x1}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x4}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0xb58f8b058577f1c1}, {0x0, 0x1}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4f1ddd2cbcbf4bf8, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x3}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x6, 0x8, 0x0, 0x0, 0x4}, 0x5, 0x9, [{0x2, 0xffff8000, 0x60, 0x222e, 0x9, 0x5}, {0x5, 0x4, 0x6e, 0x7, 0x2, 0x3}, {0x8, 0xffff7fff, 0x4, 0x80000000, 0x9}, {0xffffffff, 0x6, 0x972, 0x5, 0x3}, {0x80000000, 0x1, 0x101, 0x3, 0x1, 0xfffff7d9}, {0x3, 0x10, 0x0, 0xf, 0x3, 0x8}, {0x2, 0x6, 0xfffffff9, 0x2, 0x401, 0x5}, {0x2, 0x3dd, 0xfff, 0x7, 0x5f29, 0x2}, {0xb, 0x9, 0xa, 0x51, 0xa5b, 0x8}, {0xd220, 0x1, 0x5, 0x6, 0x4, 0x40}]}, [{0xf6, 0x3, 0x6, 0x1, 0x32, 0x200}, {0x5, 0x280000, 0x2, 0x7, 0x401, 0x3ff}, {0xff, 0x4000, 0x9, 0xe, 0x1, 0xa}, {0x4, 0x2, 0x7, 0x196e, 0x81, 0x6a1d}, {0xfffffffc, 0x4, 0x1ff, 0x6, 0x81, 0xe}, {0x2, 0xfffffffd, 0x7, 0x4, 0x2, 0x9}, {0x6, 0x2, 0x9a, 0x1, 0x0, 0x4}, {0xeb, 0x3, 0x18, 0x5, 0x81, 0x4b}, {0x1, 0x669, 0x5, 0x3, 0x1ff, 0x4}, {0x9949, 0x3, 0xfff, 0xfbb6, 0x2, 0x6}, {0x7ff, 0xfffffffb, 0x7fff, 0x7, 0x9, 0xb}, {0x2, 0x2, 0x41, 0x81, 0x9, 0x5567}, {0x3, 0x25f, 0x8000, 0x1000, 0x4, 0x9}, {0x8, 0xc, 0x3, 0x5, 0x4, 0xfc}, {0xff, 0x4, 0x9, 0x409, 0x400, 0x6}, {0x8, 0x8, 0x8, 0x6, 0xa5, 0x40}, {0x9, 0x3ff, 0x28000000, 0xb5a2, 0x4, 0x1}, {0x1c00, 0x5, 0xcf1, 0xfffffffe, 0x8001, 0x5}, {0x3, 0xd9, 0x5, 0x3, 0xcc74, 0x9}, {0x1, 0x8d, 0x401, 0x3, 0x4, 0x1b57}, {0x3, 0x9, 0xe, 0x8, 0x0, 0xfffff9ef}, {0x7fff, 0x401, 0x6, 0xffff, 0x8, 0x2}, {0x4, 0x6, 0xffff0000, 0x3ff, 0x80000000, 0x6}, {0x4, 0x100, 0x1, 0xffff6f26, 0x7, 0x7}, {0xfffffffe, 0x7f, 0x100, 0xa27, 0x0, 0xa}, {0x401, 0x9, 0x8, 0x3, 0x10, 0x10001}, {0x4c, 0x82f, 0xe, 0x8, 0x7, 0x40000000}, {0x100, 0x4, 0x7, 0x2, 0xe, 0x3}, {0x8, 0x7, 0x9, 0x52f, 0x5, 0xf432}, {0x7, 0xfffffffa, 0xfffffff8, 0x0, 0x1bb, 0x9}, {0x8, 0x7, 0x3ff, 0x1, 0xba, 0x97dd032}, {0x1, 0x1000, 0x5, 0xfffffe00, 0x4, 0x3}, {0x3, 0x5, 0xa46, 0x1, 0x4, 0x3}, {0xffffff3b, 0x3, 0x0, 0xc, 0x101, 0xe5000000}, {0x6d3, 0x8, 0x1, 0x6, 0x7, 0x7fff}, {0x6, 0x80000000, 0xd, 0x5, 0xe54c, 0x80}, {0x1, 0xfffffffa, 0x8, 0xffff, 0x1, 0x101}, {0xfffffff5, 0xb, 0xa, 0x826, 0x4, 0x1}, {0x7fff, 0x5, 0x6, 0x5f43, 0x10001, 0x6}, {0x0, 0x1ff, 0x50a6, 0xff, 0x5, 0x8}, {0x8001, 0x0, 0x1, 0x6, 0x4, 0x5}, {0x1, 0x0, 0x1, 0x1, 0x1ff, 0xa}, {0x3, 0x100, 0x4, 0x9, 0x4, 0x10001}, {0xb8, 0xffffffff, 0x3, 0xab, 0x8, 0x7f}, {0x4, 0x0, 0x100, 0x0, 0x2ba0}, {0x0, 0x8, 0x6, 0x3, 0x9, 0x8}, {0x3, 0x6, 0xffffffff, 0xfffeffff, 0x1, 0x2}, {0x6, 0x6f7, 0x6, 0x1, 0x508d, 0x4}, {0x4, 0xab, 0x1, 0x9, 0x3, 0x1}, {0x5, 0x0, 0x40, 0x2, 0x5, 0x8}, {0xb, 0x8, 0xf, 0x9, 0x1, 0x8}, {0x5, 0x6c, 0x7, 0x8, 0x8, 0xfffffe00}, {0x9, 0xffff, 0x2, 0x3, 0x7, 0x8001}, {0x6, 0x4, 0x1, 0x7, 0xffffffff, 0x401}, {0x2, 0x1000, 0xb, 0x400000, 0x2, 0x5}, {0x3, 0x5, 0x3, 0x5, 0x18, 0x6}, {0x7, 0x4, 0x1000, 0x9, 0x3, 0x1}, {0x1d, 0x40, 0xa2, 0x2, 0x9, 0x71dbb01c}, {0x0, 0x4, 0x1, 0x3, 0x5, 0x10001}, {0x9, 0x8, 0x0, 0x4, 0x0, 0x7f}, {0x4d2f, 0x3, 0x0, 0x4, 0x9, 0x10}, {0x7afe, 0x5, 0xcca9, 0x6, 0xb6, 0x81}, {0x523a, 0x9, 0x7, 0x7, 0x7, 0x14be}, {0x9, 0x1, 0xf1, 0x8, 0x8000, 0x4}, {0x1, 0x7fff, 0x0, 0x8, 0xc66, 0x400}, {0x7, 0x8, 0x4ac, 0x800, 0x6, 0x4}, {0x3ff, 0x1ff, 0x5adfa978, 0x3, 0x4, 0x87}, {0x8, 0x4, 0x5, 0x1, 0x216d, 0x1}, {0x4, 0x4aa, 0x7, 0x1, 0x5, 0xfcf3}, {0x9, 0x9, 0x4, 0x100, 0xd1e6, 0x8}, {0x2, 0x0, 0xa, 0xffff7fff, 0x100, 0x1000}, {0x0, 0x0, 0xda, 0x6, 0x5b8c, 0x8a0}, {0x0, 0x2, 0x1, 0x7fff, 0x0, 0x3ff}, {0x800, 0xfffffff8, 0x3, 0x9, 0x6, 0x7}, {0x6e41a264, 0x9, 0x4, 0x2, 0xfffffff9, 0x101}, {0x1, 0x1ff, 0x8, 0xd, 0x8, 0x2}, {0x2b3, 0x9e, 0x2, 0x2, 0x5, 0xc0}, {0x3ff, 0x5, 0x6, 0xffffffff, 0xa, 0xc1bf}, {0x1000, 0x1ff, 0x9, 0x3bd9, 0x1, 0x3}, {0x2, 0x4, 0x4, 0x4, 0x1, 0x8}, {0x3, 0x9, 0x4, 0x0, 0x9, 0x6}, {0x9, 0xff800000, 0x8, 0x8, 0x2, 0x3}, {0x10, 0x0, 0x5, 0x1, 0xba981b54, 0x6}, {0x7ff, 0x5, 0x6, 0x3, 0x7, 0x9}, {0x0, 0x5, 0x4, 0x8, 0xff, 0x10}, {0x7, 0xaec, 0x1, 0xfff, 0x9, 0x2}, {0x6, 0x8, 0x0, 0x1, 0xb, 0x3}, {0x8, 0xffff, 0x7ff, 0x7fffffff, 0x7, 0x80000001}, {0xfe5, 0x1, 0x6, 0xe8d, 0xc, 0xfffffff3}, {0x7, 0xea33, 0xffffffff, 0x7, 0x7, 0x7fffffff}, {0x8, 0x4, 0x7ff, 0x7, 0x65e8, 0x2}, {0x7fffffff, 0x7, 0x3, 0x4, 0x14a, 0x2}, {0x1ff, 0x2, 0x9, 0x48000, 0x7, 0x7ff}, {0x9, 0xfffffffd, 0x5, 0x9, 0x40, 0xd}, {0x3ff, 0x1ff, 0x7, 0x9, 0x2, 0x10001}, {0x93c6, 0xffff, 0x5, 0x101, 0x8}, {0x50000, 0x2, 0x80000000, 0x88, 0xfff, 0xf97}, {0x5, 0x2, 0x12000, 0x4, 0x6fc0887b, 0x7}, {0x7, 0x66, 0x9, 0x401, 0x7, 0x10001}, {0x8, 0x7, 0x0, 0x80000000, 0xd2f1, 0x5}, {0x3, 0x9, 0x3, 0xfff, 0x100, 0x1000}, {0x3, 0x4, 0x5, 0x5, 0x7fffffff, 0x6}, {0x0, 0x7, 0x8, 0x6bcb, 0x2, 0x9}, {0x1c, 0x4, 0x7fff, 0x7fffffff, 0x7fff, 0x7}, {0x100, 0x4d1, 0xd, 0x0, 0x4, 0x5}, {0x2, 0x3b9, 0x1, 0x10000, 0x7, 0x4}, {0x7, 0xfffffffc, 0x1, 0x9, 0x9, 0x3}, {0x1, 0x7, 0xffff, 0x6, 0x0, 0x6}, {0x1, 0x5, 0x3, 0x0, 0x0, 0x8}, {0x6, 0x7, 0x1, 0x5a826ebe, 0x1, 0x6}, {0x3, 0x0, 0x5a3, 0x81, 0x2, 0x40}, {0x5, 0x80000001, 0xc05, 0x6, 0xa, 0x5}, {0xfffffffd, 0x5, 0x7, 0x3, 0x800, 0xc}, {0xf, 0x0, 0x2, 0x3, 0x2, 0xaad}, {0x800, 0x0, 0x7, 0x1, 0x7f, 0x6}, {0x80000000, 0x5, 0x2, 0xeca9, 0x4}, {0xb, 0x7f, 0x4, 0xa, 0x2, 0x80000001}, {0x0, 0x7, 0x6, 0x7, 0x17, 0x3}, {0x3f, 0x9, 0x1, 0x2c, 0x6, 0x9}, {0x10001, 0x707f, 0x3, 0x6, 0x6, 0x80000000}, {0x4, 0xfffffffb, 0x4, 0x2, 0x3, 0x200}, {0x8, 0x4, 0x3, 0x9, 0x7, 0x1}, {0x1, 0x8, 0x1, 0x80, 0x8, 0x40}, {0x9, 0x7, 0x7, 0x0, 0x7, 0x8}, {0x7, 0xa, 0x3, 0x80, 0xc, 0x1}, {0x8, 0x9, 0x7, 0x7ea42da0, 0x9, 0x5}, {0xa, 0x1, 0x1, 0x1e, 0x3, 0x7ff}, {0x80000001, 0x6, 0xa, 0x0, 0x1400000, 0x4}], [{0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4, 0xd40b63ccd8068180}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x2}, {0x6c5fd267be7c3bfc}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x0, 0x1}, {0xd559515525f29d2a, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {0x2}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4b1083b0edd180a5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x656c, 0x5, 0x5, 0x5, 0xfff}, 0x2, 0x5, [{0x4, 0xff, 0x9, 0x6, 0x800, 0x80000001}, {0x1ff, 0x96, 0x6, 0xe, 0x1, 0x7b7}]}, [{0xffff84c2, 0x6, 0xa4ab, 0x2c, 0xb5, 0x4}, {0xffff, 0x8, 0x81, 0x4, 0x0, 0x3000}, {0x4, 0xb74, 0x8, 0x9, 0xffff, 0x8}, {0x3, 0x4, 0xf, 0x4, 0x9, 0x5}, {0x4261ba85, 0x6, 0x421, 0x9, 0x22f, 0x46f}, {0x6, 0x2, 0x2, 0xcfe6, 0xd, 0x7}, {0x4, 0x1, 0xffffffff, 0x8, 0x68c2, 0x36}, {0x6, 0x4, 0x5ff7, 0x6aa4, 0xdf, 0x3}, {0x70, 0xffffff81, 0xec, 0x4899, 0x1000, 0x6}, {0xff, 0xe, 0xfffffff7, 0x1000, 0xa, 0x7}, {0x6, 0x6, 0xfff, 0x0, 0x7, 0xab7}, {0x7, 0x10, 0x3, 0xda, 0x400, 0x48}, {0x9, 0x3, 0x80000000, 0x10000, 0x4, 0xb}, {0x10000, 0x1ff, 0xfffffff9, 0x8, 0x2, 0x797}, {0x8, 0x6, 0x10000, 0x101, 0x7, 0x1a7}, {0xa, 0x4, 0x8, 0x9, 0xfffffffb, 0x2}, {0x2, 0x7, 0x1000, 0x5, 0x5, 0x40a}, {0x6, 0xc, 0x25fa9080, 0x5, 0x3, 0xfffffffb}, {0x2, 0x2, 0x0, 0x4, 0xe, 0x2}, {0x6, 0x9, 0x2, 0x3, 0x100, 0x5c9}, {0x0, 0x2, 0x1, 0x8, 0x9, 0x52}, {0xc, 0x9ce6, 0x5, 0x5, 0xc, 0x2}, {0xfffffffb, 0x0, 0x1ff, 0x3, 0xa7, 0x3}, {0x6a2, 0x0, 0x3, 0xffff, 0xffffffff, 0x3}, {0x5, 0x1, 0x7f, 0x6, 0xb7, 0x1000}, {0x5, 0x9, 0x2, 0xfffffff9, 0x3, 0x7}, {0x5, 0x3, 0x6, 0x1, 0x2, 0xd11}, {0x401, 0x8, 0x2, 0xe3e, 0x3, 0x3}, {0x5, 0x7, 0x6, 0x60, 0x6, 0x6bae}, {0x5, 0x5, 0x7, 0x5, 0x2, 0x2}, {0xbe, 0x1, 0x3ff, 0x2, 0x2, 0x401}, {0xd, 0x7, 0x3, 0x4, 0x6, 0x4}, {0x8, 0x4cf, 0x4, 0xd438, 0x59, 0x5}, {0x4, 0x401, 0x7f, 0xa69c, 0x8, 0xa98}, {0x1, 0x8000, 0x9, 0xfffffff4, 0x4, 0x40}, {0x80, 0xffffffff, 0xa3fc, 0x25cbf6ce, 0xbf, 0x3}, {0x200, 0xa, 0x30, 0xfffffc24, 0xffff0001, 0xfffffffa}, {0x8, 0x2, 0x9f, 0x0, 0x4, 0x4d4f}, {0x6, 0x8000, 0x1, 0xfffffffe, 0x9, 0x3da}, {0x0, 0x25c0000, 0x8, 0x2, 0x4, 0x7}, {0x468f, 0x8, 0x7, 0x7ff, 0x7ff, 0x7}, {0x80, 0x1, 0x3, 0xfffff8d5, 0x8, 0x10000}, {0x261, 0x6, 0x4, 0x4, 0x0, 0x9}, {0x3, 0x6, 0x2, 0x0, 0x0, 0x2}, {0x0, 0x5, 0x4, 0x5, 0xb, 0x10000}, {0x7fff, 0x3, 0xbb5, 0x1000, 0x7fffffff}, {0x7ff, 0x400, 0xf, 0x1000, 0x7, 0x81}, {0x7, 0x52, 0x2, 0x7, 0x1000, 0x3ff}, {0xffffffff, 0xe6, 0x9, 0x1, 0x8000, 0x7}, {0x8, 0x1, 0x3, 0x0, 0x2, 0xc}, {0x10000, 0xb8e1, 0xb51a, 0x3, 0x7, 0xaa4}, {0x1, 0x8, 0xa81f, 0x9, 0x10000, 0xa}, {0x7, 0x3, 0x7, 0x3, 0x9, 0xd}, {0x3ff, 0x10000, 0xffffffff, 0x0, 0xfffffff7, 0x4}, {0x74000000, 0x3, 0x4, 0xf4, 0x60000000}, {0x2, 0x1, 0xebd, 0x3, 0xf, 0x3ff}, {0x6, 0xba8, 0x0, 0x25, 0x8, 0x8}, {0x2, 0xac, 0xa0000000, 0x7e24, 0x80000000, 0x6}, {0x2, 0x80000000, 0x80000001, 0xe35, 0x0, 0x9}, {0x4, 0xe, 0x761, 0x8, 0x6, 0x3ff}, {0x96a4, 0x6, 0xb, 0xfffffffc, 0x4, 0x40}, {0x0, 0xffffffff, 0x1, 0x5, 0x80000000, 0x5}, {0x2, 0x6, 0x400, 0x8, 0x7, 0x6}, {0x1, 0xf0000000, 0x80, 0xf, 0x7, 0xfffffff9}, {0xe4, 0x3, 0x2, 0x5, 0x10000, 0x480b}, {0x7fffffff, 0x67, 0x8000, 0xfffffffd, 0x80000000, 0x9}, {0xb, 0x400, 0x91, 0x400, 0xb56c, 0x100}, {0x7, 0x80000000, 0x4, 0x400, 0x5, 0xa0}, {0x400, 0x8, 0xb965, 0x4, 0xca0, 0x1}, {0x5ce8, 0x6, 0xffffffd7, 0x1ff, 0x9, 0xfffffff3}, {0x80, 0x5, 0x9, 0x200, 0x80, 0x3}, {0x9, 0x200, 0xe, 0x101, 0x6, 0x1}, {0x5, 0x0, 0x2, 0x8000, 0x1e4b, 0x6}, {0x0, 0x2, 0x7, 0x0, 0x6, 0x7}, {0xff, 0x8, 0x6, 0x80000001, 0xffffffff, 0x4}, {0x46, 0x9f00000, 0x6, 0x40, 0x9, 0x9}, {0x6, 0xc, 0x7c06, 0x6, 0x6, 0x10}, {0xa57, 0x5, 0x9, 0x1, 0x8, 0xe54}, {0x101, 0x3, 0x7fffffff, 0x6bb, 0x3, 0x3}, {0xa, 0xce, 0x7ff, 0x4, 0x800, 0x9}, {0x4, 0x9, 0xe, 0xfffffa4f, 0x8, 0xaea}, {0xfffff801, 0x40, 0x3, 0x8, 0x10000, 0x2}, {0x0, 0x832b, 0x4, 0x2, 0x5, 0x8}, {0x6, 0x9, 0x401, 0x7, 0x80000000, 0x4}, {0x1, 0xb, 0x1, 0x5, 0x79e, 0x10001}, {0x4, 0x8, 0x9, 0x0, 0x1, 0x1fb3}, {0x8, 0x400, 0x8, 0x4, 0xffffff32}, {0x8, 0x2, 0x0, 0xe, 0x0, 0x2}, {0x10001, 0x5, 0x8, 0x6, 0x478c, 0x80000001}, {0x1000, 0x6, 0xccb3, 0x3, 0xfffffffe, 0xffffffff}, {0x3ff, 0x0, 0x4, 0x9, 0x9, 0x1}, {0x8, 0x582, 0x3ff, 0x6, 0x0, 0x5783}, {0xfafc, 0xfffffffe, 0x3, 0xb4e, 0x2, 0x20080}, {0x3, 0x1, 0x6cc1a3ee, 0x40, 0xb, 0x9}, {0x7, 0x2, 0x0, 0x8, 0x9, 0x6d28}, {0xfffffff7, 0x7fffffff, 0xb4, 0x200, 0x3, 0xff}, {0xa00000, 0x2, 0x2, 0x1, 0x7, 0x6}, {0xa, 0x8, 0x7fffffff, 0xfffffffa, 0xd6c6, 0x8}, {0xfffffff9, 0x8000, 0xfffffff9, 0x6, 0xab85, 0x7}, {0x3ff, 0x5, 0x1, 0x4, 0x1, 0x10000}, {0x400, 0x380, 0x7, 0x0, 0x7ff, 0x6}, {0xe7, 0x38000, 0x480000, 0x0, 0x3, 0xff}, {0x3, 0x7, 0x3, 0x223f, 0x1, 0xffff}, {0x4, 0x4, 0x4fa1, 0x3d, 0x200, 0x1}, {0x9, 0xcba, 0x7ff, 0x9, 0x8, 0x3}, {0x51c1, 0x0, 0x2, 0x7, 0x200, 0x8}, {0xe, 0x8001, 0xf1, 0x0, 0xff, 0x10000}, {0x9, 0x5, 0xa, 0x5, 0x10, 0x7}, {0x7, 0xc, 0xffff, 0x9, 0xbf6}, {0x9, 0xb, 0x8001, 0x7f, 0x1, 0x5}, {0xef0, 0x8, 0x7, 0x2, 0x8, 0x1}, {0x3, 0x40, 0x2, 0xffffffff, 0xffff, 0x401}, {0x9, 0x7, 0x7, 0x5bf4, 0x8, 0x6}, {0xfffffffb, 0x7, 0x3, 0x8, 0x3, 0xf5e}, {0x80000001, 0x7, 0x1, 0x3, 0x9, 0x6}, {0x9, 0x1ce5, 0x1, 0x8b1, 0x10000, 0x22}, {0xfffffff7, 0x3, 0xff, 0x0, 0x4, 0x3}, {0x7fffffff, 0xa, 0x8, 0xffffffff, 0x8, 0x6}, {0x200, 0x1, 0xe, 0x4, 0x1, 0x5}, {0x473, 0x80000001, 0x80000000, 0x7a46, 0x1, 0x9e}, {0xce94, 0x6, 0x0, 0x8, 0xd, 0x9}, {0x8, 0x2, 0xb, 0x401, 0x7b23f115, 0x3}, {0x3, 0x9, 0x1, 0xa, 0xfb, 0x6}, {0x4, 0x6, 0x28, 0x1, 0x8, 0x100}, {0x80, 0x997c, 0xff, 0x4, 0x81, 0x9d}, {0x2, 0x0, 0xfffff1bb, 0x7, 0x3, 0x4}, {0x8, 0x19, 0x80000000, 0xc0000, 0x1, 0xfffffffc}, {0x9, 0x3, 0x3, 0x0, 0x3, 0x5c5e}], [{0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0xe7e5425b2ee1fbd}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x6}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x5}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x3}, {0x5}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x5}, {}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x7}, {0x5}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x4}, {0xa, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x6}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x2, 0x1}]}}]}, {0x40, 0x6, "c553766d4cec930b50fc361db5d9946f24556f9fb7d9a1a943c3ac08293f685421c656d247ba7c84913329f53f37dff8be49a2acba80b4500e96d1e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0xd4, 0xe, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf5}]}, {0xa0, 0x6, "9bfbf2ce3926d992b6a9aef64974a6db2dc05d45ab03712511a49779df98b8fa94ffb716c9885148945428c01cf7b0db17ec37b4533e6c889b3d7ac302fbf12d8b3b1d7bbb0d200f8b8895b01ca6c505093165f667b1495f41de2a645e6e591ec1df7b547dda7406f98312f4ceeb7e972b0c1a8a0a55643ab9a77cd47c798c2c45a5514e97a9bb92181046b35b33dd330c60eace4179d4c63494d34e"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_INDEV={0x14, 0x3, 'netdevsim0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd2, 0x58}}, @TCA_RATE={0x6, 0x5, {0x1a, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x1fc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0x2}}, @TCA_ROUTE4_ACT={0x1f0, 0x6, [@m_ct={0x144, 0xc, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_LABELS={0x14, 0x7, "b5e6a827ff512dd1a7a8b3b5256d77d8"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "25167be8a5a2f2632a161d3985c78f3a"}]}, {0xbe, 0x6, "086eb3a40d2e63f67cf9f2e4b1120469ecf571dd68f247a665f7592ff15e74ec9a43d9c0aba68b1472e94bc519ed44a906833abd3dbdf65403fe4ff6d02237d711d74482c4b717a4d4a94c7afc4cf52de3fe52cd0348ea0fbef43b6c254569fd896a0bc6ee52b5e20d41b5afbb2644329c0586908e6d30d32dfca44d2f7d75da0fb0a3db3cf05be54420122842fcab52ccd2e3c2e5cacce901adeaf159bb40b20dda87cd0467f7cb0c5634dcd7682b29c154663485c3c22ee0a8"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xa8, 0x14, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x73, 0x6, "871c714bcdbfd1af4613848eed15cf9e724ea837bdb18dc6334ff903efa4c1144fdaeeffb4c05255cd7936b63072381bb4ea4e98a6b6bc437ddeb8c99067e4e27ed0d68b639b140dbef65e119fd7697ecc3cedf2988627b1c3f4fc254b4af9f82815a2916cb8c8e4077d718981da76"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x3244}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) 6.299035353s ago: executing program 3 (id=3516): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043b0a1ab939613c26add535e48daac3ffaaaa10d5590000"], 0xd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f00000005c0), 0x0}, 0x20) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x2b0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="05340600000000"], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x20023, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000680)={0x3, 0x47425247, 0x1, @discrete={0x12000, 0x4}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000880)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, &(0x7f00000008c0)='net/tcp\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 5.334404684s ago: executing program 35 (id=3483): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100183f6b000000000018000000180000000300000000000000010000850000000002fbff000200000000000000005f00d59b6bda80f335dd601048d6e8ee2fd059986f9840e2b45d2b979a4e4322be9d89b954c654a371b2177359caf4dfc7800977296935f9f8349b19ea37e717905244281ec6e6de4a68b7ba9639ea6c2bb201dd5e04dc092df8c15240675a23fed0be177f4388fd55b5ada3b9f14c6d3e701bbc6a681057a122d3174a2c7e9bace7e9e7237cd6fc2d59f73c023ed8046977424d1d50d9a3e6de7075853d1d80b551a59d3b8f1498f0f09c668695c626f23a8435f0423ffed54a8d2c2458f08d20"], 0x0, 0x33, 0x0, 0xa}, 0x28) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80000, 0x42) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) r5 = fanotify_init(0x40, 0x40000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xec602, 0x9f) fanotify_mark(r5, 0x1, 0x40001019, r6, 0x0) getdents64(r6, &(0x7f0000000300)=""/163, 0xba974ed140df4995) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa101, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) fchdir(0xffffffffffffffff) 4.786464886s ago: executing program 1 (id=3518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000940)=""/195, 0x0, 0x20, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a40), 0x37f, 0x10, &(0x7f0000000a80), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000b80), &(0x7f0000000bc0)=@udp=r0}, 0x20) setresuid(0xffffffffffffffff, 0x0, 0x0) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000240), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x34, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x39b3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) fcntl$setstatus(r6, 0x4, 0x42400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000300), &(0x7f0000000340)=@udp=r6}, 0x20) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0) 4.668021334s ago: executing program 2 (id=3519): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, 0x0, &(0x7f00000006c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000800), 0x8, 0x10, &(0x7f00000008c0), 0x10}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001080)={0xd4, 0x11, 0x509, 0x0, 0xfffffffd, "", [@generic="f00000000000803c00255bc4015e9b6fbec8af3c225cc4b40c649c0ceaf022c95732f4adf4140b96919b71fe0cc256f26228f9464a652d67efb6297e54709334451de3b1bea7bed647168061e24f6d19d1c4bbb10589a0ae736692eb148288c06ae7505965d7e81645188ea3fd6a8ce34ffc6bb18fcb4d5496bb33dab3d738e88c79a6477cfeabb6f2d8603f07fe1ac3d539806647374206efb255c25f93139bf8938481189439a8f58e69b9b4fc8cca04f5abf1993a1008e3b8f7a1d411e880a3"]}, 0xd4}], 0x1, 0x0, 0x0, 0x1}, 0x40040) vmsplice(0xffffffffffffffff, &(0x7f0000003fc0)=[{&(0x7f00000049c0)="a26776", 0x3}, {0x0}], 0x2, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x1234, 0x33}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x1, {{'sha1\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x24, 0x33, 0x40, @remote, @local, {[], "3b040000000012340000000100"/36}}}, 0x4c) 3.783926049s ago: executing program 3 (id=3520): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newchain={0x1b0, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xfff3, 0xd}, {0xb, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x12c, 0x2, [@TCA_FW_ACT={0xe4, 0x4, [@m_nat={0xe0, 0x8, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xffff0001, 0x8, 0x9, 0x9}, @multicast1, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x2, 0x7, 0x571, 0x8}, @private=0xa010102, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x8, 0x7fff, 0x5}, @dev={0xac, 0x14, 0x14, 0x16}, @empty}}]}, {0x3d, 0x6, "f1e18125058ba26692e6f3541fd2abbd3a6e9c688663120a5b5b950dc65649a2e5dd5b51d8783468f6dbd567eb69484d85c9dd99c9077611cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_ACT={0x4}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_INDEV={0x14, 0x3, 'netdevsim0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x10}}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd2, 0x58}}, @TCA_RATE={0x6, 0x5, {0x1a, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0x2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x1}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = openat$uinput(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000500)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$inet(r9, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r10 = syz_pidfd_open(r8, 0x0) process_madvise(r10, 0x0, 0x0, 0x14, 0x0) ioctl$UI_GET_SYSNAME(r7, 0x8040552c, &(0x7f0000000800)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) 3.723659115s ago: executing program 2 (id=3521): syz_create_resource$binfmt(&(0x7f00000003c0)='./file1\x00') close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) lremovexattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000940)=@known='user.incfs.metadata\x00') r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x44b3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000940), 0x651, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000009c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000a00), 0x0, 0x0) 3.022470303s ago: executing program 6 (id=3522): gettid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10040, 0x70) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000780)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000019780)=0x80000000000003) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000197c0), 0x28100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019800)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000019840)=0xe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r7, 0x1}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x0, 0x4b, r7, 0x3}, 0xc) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e6"], 0x20}], 0x1}, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xb0, 0x10, "", [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x100, 0xf, 0x1, {0x22, 0xa28}}, {{{0x9, 0x5, 0x81, 0x3, 0x610, 0x8, 0x1, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x0, 0x8}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x0, 0x3, 0x8, 0x40, 0x5}, 0x24, &(0x7f0000000340)={0x5, 0xf, 0x24, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x0, 0x3b, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x4, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x69, 0x6, 0x7ff}]}, 0x6, [{0xfd, &(0x7f0000000380)=@string={0xfd, 0x3, "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"}}, {0x85, &(0x7f0000000480)=@string={0x85, 0x3, "9d4678770871ccbd80fffb9b791b45429188272da3e0e7a93c6ec6e5d57be6ac8851cce99b60785d400bf389f5a92ef2576d70aebc410df764ba030440f7cb05c96d3b27e3964e959689a9dc27e72d9b8c1d33d7d58d8425ff04dec33603e7d76e9e113d4af16b8c6b49352693198e17b45e8d696182861bc34d2720658777aa5b76b6"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c01}}, {0x82, &(0x7f0000000580)=@string={0x82, 0x3, "4f16ab4acb14f3de0c8f4bfec888dad7016bebf8eec435e1c9e016bfe62e42cd90e94b40442f052cf557498d54df82f21502b5f3e2d204f01d017445ec27d2d242ec0a1756cc6dfcfdb925531e09debbce6afcdcc9abf853371192fd503fa519ed5903cbebda8e2de92e43be57ac8dc2e26e596bbd4872a2f04dcf811c3a58ed"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0c}}]}) 1.970751646s ago: executing program 3 (id=3523): r0 = syz_open_dev$sndmidi(&(0x7f0000000680), 0x2, 0x143102) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000700)="94", 0xf000}, {0x0}], 0x2) 1.863322245s ago: executing program 3 (id=3524): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x8000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f00000001c0)='/dev/uinput\x00', 0x410000, &(0x7f0000000200)={@_ha_fsid={[0x7, 0x2]}, {0x6, 0x1000, 0x6, 0xa805}}, 0x6, &(0x7f0000000240), &(0x7f0000000280)}) syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101301) fsopen(&(0x7f00000005c0)='f2fs\x00', 0x1) openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000006c0)=0x5, 0x4) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000580)) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r3], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 1.852136392s ago: executing program 2 (id=3525): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x2a, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x3a3a, 0x0, 0x2}, 0x30, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="700200008940d651215fc2593a902fddb857cba2114c0b58a584605850e26610257e8f114cae119ec53d87ee45e89550548045a251352d2a2c0592dd00f3a2375ca9196a3e579d2c48cb45d0dc74ad03fcb06bc91bba2c0d0c7a06f4d2f34e61e89686894df59e278965e4b02eebb3c7a4d3fc5cdbbc4a7da64f576d640bfb0b9ec98ca20f21a2e631320ef54838698bb88bf53d44d42253f02685336dcc4946", @ANYRES16=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) landlock_restrict_self(r2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0xe0, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0xcb, 0x7, 0x1, 0x0, "bcb4e5b0e1c1953f1b79c0a1247a78a12eadb4adcaa92399f62153067560a6f966826250314f1a992b1721980c73d6af4a7e96f6d1c5e39fa962d2790de3fad1fef874c6f55a5646b7fee9661bf2f156cadfb94f852f2bf34e534848e15a7858fb5b9661b08b3b4f4d5f715998319dc3f79d606475fdc509d760e84f9078983fe637bf0a4b13efc41d6654de3931fbb974b19fe60938af4727baf73c90f7034d26d6f23aa3f023dc5270eb692f18aa959c4995c06969d7e03a368b95c7b0380b367ee83acd2103"}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x150}}, 0x40000) landlock_restrict_self(r1, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000000140), 0xfffffffffffff568, 0x101) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000500)={{0x5, 0x0, 0x401, 0x8, '\x00', 0x2}, 0x5, 0x100, 0x3, r7, 0x8, 0x10, 'syz0\x00', &(0x7f00000003c0)=['\x91:*-\x00', '/dev/sequencer2\x00', '/dev/snd/midiC#D#\x00', ']$:&{-{\x00', 'GPL\x00', 'ethtool\x00', 'GPL\x00', '/dev/snd/midiC#D#\x00'], 0x51}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x9, 0x5}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r10) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x40000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.254682978s ago: executing program 6 (id=3526): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x46}, @device_b, @device_b, @broadcast, {0x9}, @broadcast}}, 0x1e) r0 = syz_open_procfs(0x0, &(0x7f0000002780)='fd\x00') statx(r0, 0x0, 0x1000, 0x1, &(0x7f0000002b80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002780)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002840)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002940)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002a00)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) fchdir(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a40)={0xd, 0x4, &(0x7f0000002b00)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000002b40)='syzkaller\x00', 0x4}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000002a40), 0x40000000000009f, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r5 = io_uring_setup(0x3450, &(0x7f0000000540)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/4111, 0x100f}], 0x5a) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x38) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000004c0)={0x0, 0x2, [@empty, @multicast]}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x0, 0x21}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000600000007b8af8ff00000000bfa200e20000000047020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002c80)={'syzkaller0\x00', @local}) 68.24559ms ago: executing program 1 (id=3527): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtclass={0x38, 0x28, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x9, 0x8001}, {0xffe0, 0x8001}, {0x0, 0x10}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000540)='\x00', 0x1, 0x0, &(0x7f0000000580)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sched_setaffinity(r8, 0x8, &(0x7f00000002c0)=0x80000000000003) r10 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000000c0)='bpf_lsm_key_free\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x94) 0s ago: executing program 2 (id=3528): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r4) getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)=@newtfilter={0xd8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xefe58de28999decf}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x84, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_EMATCHES={0x58, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x8}, {0x2, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xfc, 0x2, 0x101}, {0x6b, 0x2, 0x2, 'X~'}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xa, 0x2, 0x6}, {0x100, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffa, 0x8, 0x9}, {0x0, 0x4, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xb}}, @TCA_FLOW_XOR={0x8, 0x7, 0x28000}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x16bc}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x2}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000004a80)='./mnt\x00', 0x1ff) mount(&(0x7f0000004ac0)=@filename='ubi0_0\x00', &(0x7f0000004b00)='./mnt\x00', &(0x7f0000004b40)='ubifs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004b80)='./file1\x00', 0x542, 0x0) pwritev2(r6, &(0x7f0000004bc0)=[{&(0x7f0000004c00)=')', 0x1}], 0x1, 0x2, 0x0, 0xa1) ioctl$KVM_CAP_X86_GUEST_MODE(r6, 0x4068aea3, &(0x7f0000004c40)) sendmsg$nl_route_sched(r1, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x20, {0x0, 0x0, 0x74, r5, {0x0, 0x3}, {0x4, 0xb}, {0x9, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x30000080) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000004d80)={r7, r1, 0x2, 0x7c, &(0x7f0000004e40)="b775b5434e25982c793d33b023a8f9a4884f568f7ffe678b464aae307aab16194f44d1e2205868a6d0a0a1e959dc2a76778a8a36e2088ed398eb3395ee8feb1a5e109f17762b56545eee22de2f35a8297836e7065c4fab9dd5d7ecf129b3e1ec7f202850a322c0c621a6728ccb6ae811819b9e0fce3a935a6987cfc3", 0x1, 0x8, 0xd, 0x7, 0x1ff, 0x0, 0x1, 'syz1\x00'}) mount$9p_virtio(&(0x7f0000004ec0), &(0x7f0000004f00)='.\x00', &(0x7f0000004f40), 0x4, &(0x7f0000004f80)=ANY=[@ANYBLOB='trans=virtio,cache=0x00']) kernel console output (not intermixed with test programs): 602][ T44] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1280.162617][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1280.162633][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.163972][ T44] usb 2-1: config 0 descriptor?? [ 1280.247497][T16726] usb 4-1: not running at top speed; connect to a high speed hub [ 1280.247530][T16726] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1280.249709][T16726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.284339][T16726] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1280.284368][T16726] usb 4-1: Product: syz [ 1280.284384][T16726] usb 4-1: Manufacturer: syz [ 1280.370889][T16726] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 1280.520493][ T5729] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1280.548726][T16726] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1280.549081][T16726] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1280.549124][T16726] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 1280.549550][T16726] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 1280.550691][ T5335] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1280.670483][ T5729] usb 6-1: Using ep0 maxpacket: 8 [ 1280.671773][ T5729] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=38.0f [ 1280.672622][ T5729] usb 6-1: config 255 has an invalid interface number: 178 but max is 3 [ 1280.672649][ T5729] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.672669][ T5729] usb 6-1: config 255 has 2 interfaces, different from the descriptor's value: 4 [ 1280.672691][ T5729] usb 6-1: config 255 has no interface number 1 [ 1280.672732][ T5729] usb 6-1: config 255 interface 0 altsetting 3 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 1280.672755][ T5729] usb 6-1: config 255 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 3446, setting to 64 [ 1280.672778][ T5729] usb 6-1: config 255 interface 0 altsetting 3 endpoint 0x6 has invalid maxpacket 1088, setting to 64 [ 1280.672802][ T5729] usb 6-1: config 255 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1280.672820][ T5729] usb 6-1: config 255 interface 0 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1280.672839][ T5729] usb 6-1: config 255 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1280.672859][ T5729] usb 6-1: config 255 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1056, setting to 64 [ 1280.672884][ T5729] usb 6-1: config 255 interface 0 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1280.672907][ T5729] usb 6-1: config 255 interface 0 altsetting 3 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1280.672927][ T5729] usb 6-1: config 255 interface 0 altsetting 3 has a duplicate endpoint with address 0x87, skipping [ 1280.672947][ T5729] usb 6-1: config 255 interface 0 altsetting 3 has 11 endpoint descriptors, different from the interface descriptor's value: 9 [ 1280.672982][ T5729] usb 6-1: config 255 interface 178 altsetting 199 has a duplicate endpoint with address 0x8, skipping [ 1280.673002][ T5729] usb 6-1: config 255 interface 178 altsetting 199 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1280.673032][ T5729] usb 6-1: config 255 interface 178 altsetting 199 endpoint 0x83 has invalid maxpacket 50950, setting to 64 [ 1280.673057][ T5729] usb 6-1: config 255 interface 178 altsetting 199 has a duplicate endpoint with address 0x6, skipping [ 1280.673078][ T5729] usb 6-1: config 255 interface 178 altsetting 199 has an invalid descriptor for endpoint zero, skipping [ 1280.673098][ T5729] usb 6-1: config 255 interface 178 altsetting 199 has a duplicate endpoint with address 0x3, skipping [ 1280.673120][ T5729] usb 6-1: config 255 interface 178 altsetting 199 has a duplicate endpoint with address 0xA, skipping [ 1280.673140][ T5729] usb 6-1: config 255 interface 178 altsetting 199 has a duplicate endpoint with address 0x2, skipping [ 1280.673161][ T5729] usb 6-1: config 255 interface 178 altsetting 199 has an invalid descriptor for endpoint zero, skipping [ 1280.673181][ T5729] usb 6-1: config 255 interface 178 altsetting 199 has a duplicate endpoint with address 0x2, skipping [ 1280.673201][ T5729] usb 6-1: config 255 interface 178 altsetting 199 has an invalid endpoint descriptor of length 2, skipping [ 1280.673222][ T5729] usb 6-1: config 255 interface 178 altsetting 199 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 1280.673245][ T5729] usb 6-1: config 255 interface 0 has no altsetting 0 [ 1280.673261][ T5729] usb 6-1: config 255 interface 178 has no altsetting 0 [ 1280.676208][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.676223][ T5729] usb 6-1: Product: 췈紑反밊횫탻寸냼퐵齌曙罥䣝딪胩䙦ჳ쥟밷ꀺ낗廇퟽ፆ༌䃿ၤ㝫㪉璕೰东迬⟇氳㷀们䘐垗ﱪ᥶腳律鲧햒鼗紷㚄᧴堼Sꇐﴂ㡏鲮赥潬訿䉻婔㺫짇髱赉担絊趂顚歹㬒ॹ標븥ⓠ逮괷䐎⸵⢆쎔訥ᦗ䱓෦爫䱬媡흤 [ 1280.676241][ T5729] usb 6-1: Manufacturer: ဌ [ 1280.676250][ T5729] usb 6-1: SerialNumber: 쨹᝛뚑䛅췦﹚設ᨈ [ 1280.679345][ T44] logitech-djreceiver 0003:046D:C53A.0015: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 1280.691396][T16726] usb 4-1: USB disconnect, device number 20 [ 1280.711874][ T5335] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1280.712730][ T5335] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1280.712749][ T5335] usb 1-1: config 1 has no interface number 0 [ 1280.715866][ T5335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.715886][ T5335] usb 1-1: Product: syz [ 1280.715899][ T5335] usb 1-1: Manufacturer: syz [ 1280.715912][ T5335] usb 1-1: SerialNumber: syz [ 1280.873903][T18450] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1281.296861][ T5729] snd-usb-audio 6-1:255.0: probe with driver snd-usb-audio failed with error -22 [ 1281.297626][ T5335] usb 1-1: 3:0 : does not exist [ 1281.297644][ T5335] usb 1-1: 3:0 : does not exist [ 1281.333432][ T5729] usb 6-1: USB disconnect, device number 3 [ 1281.407957][ T30] audit: type=1400 audit(1792246543.633:1478): avc: denied { write } for pid=18445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1281.523486][T18468] udevd[18468]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.553815][ T30] audit: type=1400 audit(1792246543.783:1479): avc: denied { write } for pid=18472 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1281.925608][ T5729] usb 2-1: reset high-speed USB device number 101 using dummy_hcd [ 1281.962030][ T5335] usb 1-1: USB disconnect, device number 31 [ 1282.018330][T18481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1282.018423][T18481] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1282.018456][T18481] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1282.043478][T18481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1282.043514][T18481] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1282.075544][T18481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1282.075598][T18481] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1282.102457][T18481] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1282.118807][T18481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1282.118860][T18481] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1282.120656][T18481] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1282.240917][T18366] udevd[18366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.529516][ T30] audit: type=1400 audit(1792246544.753:1480): avc: denied { write } for pid=18474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.646767][ T30] audit: type=1400 audit(1792246544.873:1481): avc: denied { write } for pid=18495 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1283.067069][T17453] libceph: connect (1)[c::]:6789 error -101 [ 1283.067224][T17453] libceph: mon0 (1)[c::]:6789 connect error [ 1283.076360][ T30] audit: type=1400 audit(1792246545.303:1482): avc: denied { read } for pid=15644 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1283.076408][ T30] audit: type=1400 audit(1792246545.303:1483): avc: denied { open } for pid=15644 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1283.076445][ T30] audit: type=1400 audit(1792246545.303:1484): avc: denied { ioctl } for pid=15644 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1283.194066][ T30] audit: type=1400 audit(1792246545.343:1485): avc: denied { execmem } for pid=18510 comm="syz.0.3239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1283.246611][ T30] audit: type=1400 audit(1792246545.473:1486): avc: denied { create } for pid=18506 comm="syz.5.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1283.248664][ T30] audit: type=1400 audit(1792246545.473:1487): avc: denied { setopt } for pid=18506 comm="syz.5.3238" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1283.295067][T18509] xt_hashlimit: size too large, truncated to 1048576 [ 1283.914570][T18513] xt_hashlimit: size too large, truncated to 1048576 [ 1283.917573][T17453] libceph: connect (1)[c::]:6789 error -101 [ 1283.917726][T17453] libceph: mon0 (1)[c::]:6789 connect error [ 1283.945022][T18503] ceph: No mds server is up or the cluster is laggy [ 1283.999772][T18513] netlink: 'syz.5.3238': attribute type 2 has an invalid length. [ 1284.101804][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 1284.101818][T17995] Bluetooth: hci0: command 0x0406 tx timeout [ 1284.101887][T11600] Bluetooth: hci3: command 0x0406 tx timeout [ 1284.164104][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 1284.164659][T11600] Bluetooth: hci2: command 0x0c1a tx timeout [ 1285.306349][ T5729] usb 2-1: device descriptor read/64, error -71 [ 1285.705543][ T5729] usb 2-1: reset high-speed USB device number 101 using dummy_hcd [ 1285.757856][ T5729] usb 2-1: device reset changed ep0 maxpacket size! [ 1285.880218][ T44] usb 2-1: USB disconnect, device number 101 [ 1286.160185][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 1286.160230][T11600] Bluetooth: hci3: command 0x0406 tx timeout [ 1286.240376][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 1286.240451][T11600] Bluetooth: hci2: command 0x0c1a tx timeout [ 1287.305289][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1287.305307][ T30] audit: type=1400 audit(1792246549.534:1536): avc: denied { read } for pid=18536 comm="syz.5.3246" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1287.307112][ T30] audit: type=1400 audit(1792246549.534:1537): avc: denied { open } for pid=18536 comm="syz.5.3246" path="/dev/input/event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1287.441727][ T44] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1287.448342][ T30] audit: type=1400 audit(1792246549.674:1538): avc: denied { unmount } for pid=15644 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1287.540457][ T30] audit: type=1400 audit(1792246549.774:1539): avc: denied { create } for pid=18543 comm="syz.0.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1287.550715][ T30] audit: type=1400 audit(1792246549.784:1540): avc: denied { bind } for pid=18543 comm="syz.0.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1287.550985][ T30] audit: type=1400 audit(1792246549.784:1541): avc: denied { write } for pid=18543 comm="syz.0.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1287.657935][ T30] audit: type=1400 audit(1792246549.884:1542): avc: denied { read } for pid=18545 comm="syz.0.3249" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1287.658189][ T30] audit: type=1400 audit(1792246549.884:1543): avc: denied { open } for pid=18545 comm="syz.0.3249" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1287.707058][ T30] audit: type=1400 audit(1792246549.944:1544): avc: denied { ioctl } for pid=18545 comm="syz.0.3249" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1287.821482][T17453] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1288.053876][T17453] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1288.054352][T17453] usb 6-1: config 0 has no interfaces? [ 1288.055672][T17453] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1288.055696][T17453] usb 6-1: Manufacturer: syz [ 1288.055712][T17453] usb 6-1: SerialNumber: syz [ 1288.063574][T17453] usb 6-1: config 0 descriptor?? [ 1288.250136][ T30] audit: type=1400 audit(1792246550.394:1545): avc: denied { read write } for pid=18548 comm="syz.0.3250" name="video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1288.340191][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 1288.340320][T11600] Bluetooth: hci2: command 0x0c1a tx timeout [ 1288.618606][ T5729] usb 6-1: USB disconnect, device number 4 [ 1288.945344][T11600] Bluetooth: hci5: ISO packet for unknown connection handle 1588 [ 1290.232076][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3243'. [ 1290.373348][T18566] UBIFS error (pid: 18566): cannot open "ubi0_0", error -19 [ 1290.394188][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3243'. [ 1290.508074][T18567] 9pnet_virtio: no channels available for device syz [ 1292.381842][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1292.381860][ T30] audit: type=1400 audit(1792246554.614:1576): avc: denied { create } for pid=18584 comm="syz.2.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1292.477563][ T30] audit: type=1400 audit(1792246554.704:1577): avc: denied { create } for pid=18589 comm="syz.5.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1292.730488][T18587] random: crng reseeded on system resumption [ 1292.929860][ T8537] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1292.951603][T18596] jffs2: notice: (18596) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1293.081631][ T8537] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1293.084600][ T8537] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 1293.084657][ T8537] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 1293.126772][ T30] audit: type=1400 audit(1792246554.954:1578): avc: denied { write } for pid=18586 comm="syz.3.3258" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1293.126817][ T30] audit: type=1400 audit(1792246554.954:1579): avc: denied { open } for pid=18586 comm="syz.3.3258" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1293.126859][ T30] audit: type=1400 audit(1792246555.284:1580): avc: denied { create } for pid=18597 comm="syz.1.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1293.127900][ T8537] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.127924][ T8537] usb 6-1: Product: syz [ 1293.127940][ T8537] usb 6-1: Manufacturer: syz [ 1293.127955][ T8537] usb 6-1: SerialNumber: syz [ 1293.127966][ T30] audit: type=1400 audit(1792246555.294:1581): avc: denied { connect } for pid=18597 comm="syz.1.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1293.246429][ T30] audit: type=1400 audit(1792246555.304:1582): avc: denied { write } for pid=18586 comm="syz.3.3258" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1293.246850][ T30] audit: type=1400 audit(1792246555.474:1583): avc: denied { add_name } for pid=18586 comm="syz.3.3258" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1293.294161][ T30] audit: type=1400 audit(1792246555.524:1584): avc: denied { create } for pid=18586 comm="syz.3.3258" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1293.418823][ T30] audit: type=1400 audit(1792246555.644:1585): avc: denied { read write open } for pid=18586 comm="syz.3.3258" path="/113/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1293.472991][ T8537] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1293.473036][ T8537] usb 6-1: MIDIStreaming interface descriptor not found [ 1293.571193][ T44] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1293.751886][ T44] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1293.802037][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1293.802093][ T44] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1293.833554][ T8537] usb 6-1: USB disconnect, device number 5 [ 1293.882787][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.884253][ T44] usb 2-1: Product: syz [ 1293.884576][ T44] usb 2-1: Manufacturer: syz [ 1293.884673][ T44] usb 2-1: SerialNumber: syz [ 1294.369759][ T44] usb 2-1: Limiting number of CPorts to U8_MAX [ 1294.562531][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.773425][T18614] udevd[18614]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1294.847285][T18599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.847301][T18599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.894634][T18618] netlink: 'syz.0.3263': attribute type 1 has an invalid length. [ 1294.924425][T18599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.924440][T18599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1295.272888][ T44] usb 2-1: failed to send ARPC request 1: -110 [ 1295.272963][ T44] usb 2-1: failed to execute ARPC: -110 [ 1295.272979][ T44] usb 2-1: failed to set connected state for cport 0: -110 [ 1295.272996][ T44] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 1295.274140][ T44] usb 2-1: failed to send ARPC request 3: -32 [ 1295.274613][ T44] usb 2-1: failed to execute ARPC: -32 [ 1295.274713][ T44] usb 2-1: failed to clear cport 0: -32 [ 1295.274752][ T44] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 1295.498217][T18618] bond1: option mode: invalid value (11) [ 1295.583429][ T44] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 1295.730455][T18618] bond1 (unregistering): Released all slaves [ 1295.999445][ T44] usb 2-1: USB disconnect, device number 103 [ 1297.717585][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1297.717600][ T30] audit: type=1400 audit(1792246559.944:1591): avc: denied { write } for pid=18634 comm="syz.2.3270" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1299.180320][ T30] audit: type=1400 audit(1792246561.414:1592): avc: denied { mount } for pid=18642 comm="syz.0.3274" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1299.181015][ T30] audit: type=1400 audit(1792246561.414:1593): avc: denied { search } for pid=18642 comm="syz.0.3274" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1299.181157][ T30] audit: type=1400 audit(1792246561.414:1594): avc: denied { write } for pid=18642 comm="syz.0.3274" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1299.181338][ T30] audit: type=1400 audit(1792246561.414:1595): avc: denied { open } for pid=18642 comm="syz.0.3274" path="/128/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1299.830260][ T30] audit: type=1400 audit(1792246562.054:1596): avc: denied { mount } for pid=18647 comm="syz.5.3276" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1299.896056][T18656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3269'. [ 1300.631452][ T30] audit: type=1400 audit(1792246562.864:1597): avc: denied { unmount } for pid=17991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1300.747923][ T30] audit: type=1400 audit(1792246562.974:1598): avc: denied { create } for pid=18658 comm="syz.2.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1300.870578][ T30] audit: type=1400 audit(1792246563.104:1599): avc: denied { read write } for pid=18664 comm="syz.1.3279" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1300.871387][ T30] audit: type=1400 audit(1792246563.104:1600): avc: denied { open } for pid=18664 comm="syz.1.3279" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1302.595401][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1302.610852][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1302.612948][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1302.638403][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1302.647737][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1302.759836][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1302.759853][ T30] audit: type=1400 audit(1792246564.994:1609): avc: denied { sys_module } for pid=18681 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1303.478425][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.834613][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.921505][T18681] lo speed is unknown, defaulting to 1000 [ 1303.949335][T18699] FAULT_INJECTION: forcing a failure. [ 1303.949335][T18699] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.949358][T18699] CPU: 1 UID: 0 PID: 18699 Comm: syz.5.3280 Tainted: G L syzkaller #0 PREEMPT(full) [ 1303.949376][T18699] Tainted: [L]=SOFTLOCKUP [ 1303.949380][T18699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1303.949387][T18699] Call Trace: [ 1303.949391][T18699] [ 1303.949396][T18699] dump_stack_lvl+0x100/0x190 [ 1303.949417][T18699] should_fail_ex.cold+0x5/0xa [ 1303.949433][T18699] should_failslab+0xc2/0x120 [ 1303.949450][T18699] __kmalloc_noprof+0xfc/0x840 [ 1303.949465][T18699] ? tomoyo_encode2+0xfb/0x3c0 [ 1303.949486][T18699] tomoyo_encode2+0xfb/0x3c0 [ 1303.949506][T18699] tomoyo_encode+0x29/0x50 [ 1303.949522][T18699] tomoyo_realpath_from_path+0x18c/0x690 [ 1303.949544][T18699] tomoyo_check_open_permission+0x2af/0x3c0 [ 1303.949560][T18699] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1303.949581][T18699] ? hook_file_open+0x248/0x8e0 [ 1303.949604][T18699] ? path_get+0x61/0x80 [ 1303.949617][T18699] tomoyo_file_open+0x6b/0x90 [ 1303.949630][T18699] security_file_open+0xb5/0x1e0 [ 1303.949644][T18699] do_dentry_open+0x588/0x14d0 [ 1303.949663][T18699] vfs_open+0x82/0x3f0 [ 1303.949681][T18699] path_openat+0x1a23/0x2450 [ 1303.949701][T18699] ? __pfx_path_openat+0x10/0x10 [ 1303.949721][T18699] do_file_open+0x20e/0x430 [ 1303.949739][T18699] ? __pfx_do_file_open+0x10/0x10 [ 1303.949766][T18699] ? _raw_spin_unlock+0x28/0x50 [ 1303.949781][T18699] ? alloc_fd+0x471/0x7a0 [ 1303.949803][T18699] do_sys_openat2+0x10f/0x1e0 [ 1303.949814][T18699] ? __pfx_do_sys_openat2+0x10/0x10 [ 1303.949825][T18699] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1303.949843][T18699] ? __fget_files+0x21f/0x3d0 [ 1303.949862][T18699] __x64_sys_openat+0x12d/0x210 [ 1303.949878][T18699] ? __pfx___x64_sys_openat+0x10/0x10 [ 1303.949889][T18699] ? ksys_write+0x1ac/0x250 [ 1303.949908][T18699] do_syscall_64+0x123/0x790 [ 1303.949926][T18699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.949938][T18699] RIP: 0033:0x7f13f639e559 [ 1303.949947][T18699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.949959][T18699] RSP: 002b:00007f13f723f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1303.949971][T18699] RAX: ffffffffffffffda RBX: 00007f13f6625fa0 RCX: 00007f13f639e559 [ 1303.949978][T18699] RDX: 0000000000000002 RSI: 0000200000001c40 RDI: ffffffffffffff9c [ 1303.949985][T18699] RBP: 00007f13f723f090 R08: 0000000000000000 R09: 0000000000000000 [ 1303.949992][T18699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1303.949998][T18699] R13: 00007f13f6626038 R14: 00007f13f6625fa0 R15: 00007fff218a6df8 [ 1303.950014][T18699] [ 1303.958066][T18699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1303.972114][ T30] audit: type=1400 audit(1792246566.195:1610): avc: denied { create } for pid=18698 comm="syz.5.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1304.017893][ T30] audit: type=1400 audit(1792246566.245:1611): avc: denied { write } for pid=18698 comm="syz.5.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1304.134766][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 1304.343730][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.370064][T18681] rxe_eth0 speed is unknown, defaulting to 1000 [ 1304.372220][T18699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3280'. [ 1304.693338][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.695609][ T30] audit: type=1400 audit(1792246566.925:1612): avc: denied { create } for pid=18704 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1304.751853][ T5608] Bluetooth: hci4: command tx timeout [ 1305.254841][ T30] audit: type=1400 audit(1792246567.485:1613): avc: denied { write } for pid=18704 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1305.364117][ T30] audit: type=1400 audit(1792246567.595:1614): avc: denied { create } for pid=18704 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1305.368063][ T30] audit: type=1400 audit(1792246567.595:1615): avc: denied { bind } for pid=18704 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1305.368467][ T30] audit: type=1400 audit(1792246567.595:1616): avc: denied { listen } for pid=18704 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1305.473246][ T30] audit: type=1400 audit(1792246567.705:1617): avc: denied { connect } for pid=18704 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1305.482119][ T30] audit: type=1400 audit(1792246567.705:1618): avc: denied { accept } for pid=18704 comm="syz.3.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1306.071383][T17453] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1306.221737][T17453] usb 6-1: Using ep0 maxpacket: 16 [ 1306.224459][T17453] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1306.228542][T17453] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.228633][T17453] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1306.277775][T17453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.277841][T17453] usb 6-1: Product: syz [ 1306.277866][T17453] usb 6-1: Manufacturer: syz [ 1306.277944][T17453] usb 6-1: SerialNumber: syz [ 1306.366567][T17453] usb 6-1: config 0 descriptor?? [ 1306.418078][T17453] hub 6-1:0.0: bad descriptor, ignoring hub [ 1306.418110][T17453] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1306.512419][T17453] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1306.762127][ T42] usb 6-1: Failed to submit usb control message: -113 [ 1306.762191][ T42] usb 6-1: unable to send the bmi data to the device: -113 [ 1306.762230][ T42] usb 6-1: unable to get target info from device [ 1306.762267][ T42] usb 6-1: could not get target info (-113) [ 1306.762305][ T42] usb 6-1: could not probe fw (-113) [ 1306.809597][ T5608] Bluetooth: hci4: command tx timeout [ 1307.941603][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1307.941648][ T30] audit: type=1400 audit(1792246570.165:1625): avc: denied { read } for pid=5264 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1308.350695][ T30] audit: type=1400 audit(1792246570.585:1626): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.409345][ T30] audit: type=1400 audit(1792246570.635:1627): avc: denied { search } for pid=5264 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.411148][ T30] audit: type=1400 audit(1792246570.645:1628): avc: denied { search } for pid=5264 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.411428][ T30] audit: type=1400 audit(1792246570.645:1629): avc: denied { read } for pid=5264 comm="dhcpcd" name="n51" dev="tmpfs" ino=5345 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1308.411735][ T30] audit: type=1400 audit(1792246570.645:1630): avc: denied { open } for pid=5264 comm="dhcpcd" path="/run/udev/data/n51" dev="tmpfs" ino=5345 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1308.414049][ T30] audit: type=1400 audit(1792246570.645:1631): avc: denied { getattr } for pid=5264 comm="dhcpcd" path="/run/udev/data/n51" dev="tmpfs" ino=5345 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1308.471003][T18732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3292'. [ 1308.531904][T17453] usb 6-1: USB disconnect, device number 6 [ 1308.620999][ T53] bridge_slave_1: left allmulticast mode [ 1308.621035][ T53] bridge_slave_1: left promiscuous mode [ 1308.621199][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.683565][ T30] audit: type=1400 audit(1792246570.915:1632): avc: denied { read write } for pid=18737 comm="syz.3.3293" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1308.683773][ T30] audit: type=1400 audit(1792246570.915:1633): avc: denied { open } for pid=18737 comm="syz.3.3293" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1308.686380][ T53] pim6reg: left allmulticast mode [ 1308.686527][ T53] pimreg: left allmulticast mode [ 1308.889379][ T5608] Bluetooth: hci4: command tx timeout [ 1308.889467][T17661] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1309.044930][T17661] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1309.044973][T17661] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 1309.045863][T17661] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1309.049637][T17661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.049658][T17661] usb 3-1: Product: syz [ 1309.049671][T17661] usb 3-1: Manufacturer: syz [ 1309.049684][T17661] usb 3-1: SerialNumber: syz [ 1310.167137][T17661] usb 3-1: 1:1 : unsupported sample bitwidth 4 in 6 bytes [ 1310.167167][T17661] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1310.179466][T17661] usb 3-1: failed to enable PITCH for EP 0x1 [ 1310.180073][T17661] usb 3-1: unit 2 not found! [ 1310.180090][T17661] usb 3-1: unit 0 not found! [ 1310.194499][ T30] audit: type=1400 audit(1792246572.425:1634): avc: denied { getattr } for pid=18745 comm="syz.5.3295" path="/" dev="nsfs" ino=4026534378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1310.229881][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.237827][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.260013][ T53] bond0 (unregistering): Released all slaves [ 1310.355801][T17661] usb 3-1: USB disconnect, device number 104 [ 1310.550401][T18681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.550492][T18681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.550587][T18681] bridge_slave_0: entered allmulticast mode [ 1310.592235][T18681] bridge_slave_0: entered promiscuous mode [ 1310.606442][T18681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.606520][T18681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.606628][T18681] bridge_slave_1: entered allmulticast mode [ 1310.612329][T18681] bridge_slave_1: entered promiscuous mode [ 1310.668106][ T53] tipc: Disabling bearer [ 1310.668336][ T53] tipc: Left network mode [ 1310.771368][T18759] udevd[18759]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1311.018806][ T5608] Bluetooth: hci4: command tx timeout [ 1311.248126][T18681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.289515][T18681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.588167][T18681] team0: Port device team_slave_0 added [ 1311.598179][T18681] team0: Port device team_slave_1 added [ 1311.608110][T18769] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1311.707523][T18772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3299'. [ 1311.877425][T18681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.877445][T18681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.877458][T18681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.938005][T18681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.938043][T18681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.938070][T18681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.996375][T18772] UBIFS error (pid: 18772): cannot open "ubi0_0", error -19 [ 1312.013439][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3299'. [ 1312.069170][T18773] 9pnet_virtio: no channels available for device syz [ 1312.223280][ T53] IPVS: stopping master sync thread 10611 ... [ 1312.950661][ T5608] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3 [ 1312.951726][ T5608] Bluetooth: hci1: unexpected event for opcode 0x204b [ 1312.996158][T18681] hsr_slave_0: entered promiscuous mode [ 1312.996598][T18681] hsr_slave_1: entered promiscuous mode [ 1312.997160][T18681] debugfs: 'hsr0' already exists in 'hsr' [ 1312.997171][T18681] Cannot create hsr debugfs directory [ 1313.147687][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1313.147705][ T30] audit: type=1400 audit(1792246575.375:1645): avc: denied { write } for pid=18781 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.147818][ T30] audit: type=1400 audit(1792246575.375:1646): avc: denied { remove_name } for pid=18781 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=5370 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.147961][ T30] audit: type=1400 audit(1792246575.375:1647): avc: denied { unlink } for pid=18781 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=5370 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1313.520183][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1316.298319][ T53] hsr_slave_0: left promiscuous mode [ 1316.304199][ T53] hsr_slave_1: left promiscuous mode [ 1316.314437][T11600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1316.324767][T11600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1316.337345][T11600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1316.340648][T11600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1316.341031][T11600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1316.788086][ T30] audit: type=1400 audit(1792246579.015:1648): avc: denied { connect } for pid=18806 comm="syz.5.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1316.789304][ T53] veth1_macvtap: left promiscuous mode [ 1316.789338][ T53] veth0_macvtap: left promiscuous mode [ 1316.789457][ T53] veth1_vlan: left promiscuous mode [ 1316.789613][ T53] veth0_vlan: left promiscuous mode [ 1316.810101][ T30] audit: type=1400 audit(1792246579.045:1649): avc: denied { write } for pid=18806 comm="syz.5.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1316.964278][ T5608] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1316.965538][ T5608] Bluetooth: hci1: Injecting HCI hardware error event [ 1316.966760][T11600] Bluetooth: hci1: hardware error 0x00 [ 1317.347045][T18826] xt_hashlimit: size too large, truncated to 1048576 [ 1317.401063][T18827] xt_hashlimit: size too large, truncated to 1048576 [ 1317.484689][ T30] audit: type=1400 audit(1792246579.715:1650): avc: denied { write } for pid=18794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1317.590634][T18827] netlink: 'syz.2.3309': attribute type 2 has an invalid length. [ 1317.770874][ T30] audit: type=1400 audit(1792246580.005:1651): avc: denied { write } for pid=18831 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1317.952063][ T5608] Bluetooth: hci3: ISO packet for unknown connection handle 1588 [ 1318.075155][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1318.479169][T11271] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1318.805691][ T5608] Bluetooth: hci0: command tx timeout [ 1319.038341][T11600] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1319.085302][T11271] usb 6-1: Using ep0 maxpacket: 8 [ 1319.089472][T11271] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1319.094167][T11271] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 1319.094190][T11271] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 1319.094211][T11271] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1319.094230][T11271] usb 6-1: config 250 has no interface number 0 [ 1319.094263][T11271] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1319.094287][T11271] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1319.094310][T11271] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1319.094338][T11271] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1319.094360][T11271] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1319.094385][T11271] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1319.114510][T11271] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1319.114533][T11271] usb 6-1: Product: syz [ 1319.114546][T11271] usb 6-1: SerialNumber: syz [ 1319.236038][ T53] IPVS: stop unused estimator thread 0... [ 1319.268324][T11271] hub 6-1:250.228: bad descriptor, ignoring hub [ 1319.268353][T11271] hub 6-1:250.228: probe with driver hub failed with error -5 [ 1319.360856][ T30] audit: type=1400 audit(1792246581.595:1652): avc: denied { write } for pid=18837 comm="syz.3.3310" name="tcp" dev="proc" ino=4026533158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1319.499633][T18844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3311'. [ 1319.615132][T18844] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3311'. [ 1319.742020][T11271] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1320.219232][ T5335] usb 6-1: USB disconnect, device number 7 [ 1320.347554][ T5335] usblp0: removed [ 1321.606444][T11600] Bluetooth: hci0: command tx timeout [ 1322.775492][T18805] lo speed is unknown, defaulting to 1000 [ 1322.776810][T18805] rxe_eth0 speed is unknown, defaulting to 1000 [ 1322.893716][T18681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1322.920751][T18681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1322.921649][T18681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1322.949852][T18681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1322.950630][T18681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1322.973465][T18681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1322.974441][T18681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1322.994242][T18681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1323.040597][ T30] audit: type=1400 audit(1792246585.276:1653): avc: denied { write } for pid=18853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1323.226183][T18681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.259547][ T30] audit: type=1400 audit(1792246585.476:1654): avc: denied { write } for pid=18882 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1323.259911][T18681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.272258][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.272337][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.294714][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.294788][ T6420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.678852][T11600] Bluetooth: hci0: command tx timeout [ 1323.750724][ T30] audit: type=1400 audit(1792246585.986:1655): avc: denied { write } for pid=18893 comm="syz.5.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1323.852985][ T30] audit: type=1400 audit(1792246586.086:1656): avc: denied { ioctl } for pid=18903 comm="syz.3.3317" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1323.853442][ T30] audit: type=1400 audit(1792246586.086:1657): avc: denied { set_context_mgr } for pid=18903 comm="syz.3.3317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1323.865837][ T30] audit: type=1400 audit(1792246586.096:1658): avc: denied { map } for pid=18903 comm="syz.3.3317" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1323.869416][ T30] audit: type=1400 audit(1792246586.096:1659): avc: denied { call } for pid=18903 comm="syz.3.3317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1324.079245][ T30] audit: type=1400 audit(1792246586.316:1660): avc: denied { mount } for pid=18910 comm="syz.3.3319" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1324.085884][ T30] audit: type=1400 audit(1792246586.316:1661): avc: denied { mount } for pid=18910 comm="syz.3.3319" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1324.638673][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1324.638690][ T30] audit: type=1400 audit(1792246586.866:1663): avc: denied { write } for pid=18888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1324.922015][T18805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.922116][T18805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.922190][T18805] bridge_slave_0: entered allmulticast mode [ 1324.923997][ T30] audit: type=1400 audit(1792246587.156:1664): avc: denied { unmount } for pid=16124 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1324.927450][T18805] bridge_slave_0: entered promiscuous mode [ 1324.979239][T18805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.979315][T18805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.979422][T18805] bridge_slave_1: entered allmulticast mode [ 1325.814017][T18805] bridge_slave_1: entered promiscuous mode [ 1325.833190][T11600] Bluetooth: hci0: command tx timeout [ 1325.885656][ T30] audit: type=1400 audit(1792246588.116:1665): avc: denied { mount } for pid=18926 comm="syz.3.3320" name="/" dev="ramfs" ino=54497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1325.926586][T18805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.937251][ T30] audit: type=1400 audit(1792246588.166:1666): avc: denied { write } for pid=18924 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.961705][T18805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.083636][T18805] team0: Port device team_slave_0 added [ 1326.089019][T18805] team0: Port device team_slave_1 added [ 1326.195700][T18805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.195717][T18805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.195739][T18805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.203117][T18805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.203131][T18805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.203151][T18805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.628132][ T5335] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1326.798547][ T5335] usb 6-1: Using ep0 maxpacket: 16 [ 1326.801839][ T5335] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1326.806555][ T5335] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.806921][ T5335] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1326.857123][ T5335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.857157][ T5335] usb 6-1: Product: syz [ 1326.857188][ T5335] usb 6-1: Manufacturer: syz [ 1326.857342][ T5335] usb 6-1: SerialNumber: syz [ 1326.946821][ T5335] usb 6-1: config 0 descriptor?? [ 1327.030520][T18805] hsr_slave_0: entered promiscuous mode [ 1327.063106][ T5335] hub 6-1:0.0: bad descriptor, ignoring hub [ 1327.063759][ T5335] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1327.089281][T18805] hsr_slave_1: entered promiscuous mode [ 1327.119203][T18805] debugfs: 'hsr0' already exists in 'hsr' [ 1327.126093][T18805] Cannot create hsr debugfs directory [ 1327.214023][ T5335] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1327.373412][T18681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.463182][ T6273] usb 6-1: Failed to submit usb control message: -113 [ 1327.463250][ T6273] usb 6-1: unable to send the bmi data to the device: -113 [ 1327.463289][ T6273] usb 6-1: unable to get target info from device [ 1327.463327][ T6273] usb 6-1: could not get target info (-113) [ 1327.463368][ T6273] usb 6-1: could not probe fw (-113) [ 1328.778201][T17661] usb 6-1: USB disconnect, device number 8 [ 1328.795902][T18681] veth0_vlan: entered promiscuous mode [ 1328.803699][T18681] veth1_vlan: entered promiscuous mode [ 1328.980510][ T30] audit: type=1400 audit(1792246591.206:1667): avc: denied { write } for pid=18933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1329.635694][T18681] veth0_macvtap: entered promiscuous mode [ 1329.643727][T18681] veth1_macvtap: entered promiscuous mode [ 1329.764971][ T30] audit: type=1400 audit(1792246591.996:1668): avc: denied { write } for pid=18957 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1329.865290][T18960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3325'. [ 1330.005975][T18965] UBIFS error (pid: 18965): cannot open "ubi0_0", error -19 [ 1330.013664][T18965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3325'. [ 1330.061588][T18964] xt_hashlimit: size too large, truncated to 1048576 [ 1330.108774][T18681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.116270][T18967] xt_hashlimit: size too large, truncated to 1048576 [ 1330.149699][T18970] 9pnet_virtio: no channels available for device syz [ 1330.232492][T18971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3323'. [ 1330.451050][T18974] UBIFS error (pid: 18974): cannot open "ubi0_0", error -19 [ 1330.461820][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3323'. [ 1330.559317][T18973] 9pnet_virtio: no channels available for device syz [ 1331.889800][ T30] audit: type=1400 audit(1792246594.126:1669): avc: denied { connect } for pid=18962 comm="syz.5.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1331.949594][T18681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.400030][ T30] audit: type=1400 audit(1792246594.586:1670): avc: denied { write } for pid=18981 comm="syz.3.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1332.520465][T18985] can0: slcan on ttyS3. [ 1332.579343][ T6423] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.601827][ T6273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.604495][ T6419] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.604613][ T6419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.630572][T18805] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1332.673684][T18805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1332.678530][T18805] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1332.701618][T18805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1332.703123][T18805] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1332.707107][T18805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1332.752808][T18805] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1332.760966][T18805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1333.749338][ T30] audit: type=1400 audit(1792246595.986:1671): avc: denied { bind } for pid=18990 comm="syz.2.3328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1333.837564][T18981] can0 (unregistered): slcan off ttyS3. [ 1333.907510][ T30] audit: type=1400 audit(1792246596.126:1672): avc: denied { write } for pid=18990 comm="syz.2.3328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1333.984726][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.984745][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.998538][ T6273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.998559][ T6273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.022664][ T30] audit: type=1400 audit(1792246597.246:1673): avc: denied { mounton } for pid=18681 comm="syz-executor" path="/root/syzkaller.3lShHo/syz-tmp" dev="sda1" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1335.023046][ T30] audit: type=1400 audit(1792246597.256:1674): avc: denied { mount } for pid=18681 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1335.030227][ T30] audit: type=1400 audit(1792246597.266:1675): avc: denied { mount } for pid=18681 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1335.033561][ T30] audit: type=1400 audit(1792246597.266:1676): avc: denied { mounton } for pid=18681 comm="syz-executor" path="/root/syzkaller.3lShHo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1335.038332][ T30] audit: type=1400 audit(1792246597.266:1677): avc: denied { mounton } for pid=18681 comm="syz-executor" path="/root/syzkaller.3lShHo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=55606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1335.118339][T18805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.139760][ T30] audit: type=1400 audit(1792246597.376:1678): avc: denied { mounton } for pid=18681 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1335.139804][ T30] audit: type=1400 audit(1792246597.376:1679): avc: denied { mount } for pid=18681 comm="syz-executor" name="/" dev="gadgetfs" ino=7685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1335.141306][ T30] audit: type=1400 audit(1792246597.376:1680): avc: denied { mount } for pid=18681 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1335.145438][ T30] audit: type=1400 audit(1792246597.376:1681): avc: denied { mounton } for pid=18681 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1335.145479][ T30] audit: type=1400 audit(1792246597.376:1682): avc: denied { mount } for pid=18681 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1335.191302][T18805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.209358][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.209432][ T6423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.291852][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.291931][ T6273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.897645][T17661] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1336.055739][T17661] usb 2-1: Using ep0 maxpacket: 16 [ 1336.069632][T17661] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1336.075600][T17661] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.075750][T17661] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1336.143716][T17661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.143752][T17661] usb 2-1: Product: syz [ 1336.143870][T17661] usb 2-1: Manufacturer: syz [ 1336.143907][T17661] usb 2-1: SerialNumber: syz [ 1336.326585][T17661] usb 2-1: config 0 descriptor?? [ 1336.392021][T17661] hub 2-1:0.0: bad descriptor, ignoring hub [ 1336.392957][T17661] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1336.544995][T17661] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1336.833186][ T53] usb 2-1: Failed to submit usb control message: -113 [ 1336.833290][ T53] usb 2-1: unable to send the bmi data to the device: -113 [ 1336.833330][ T53] usb 2-1: unable to get target info from device [ 1336.833407][ T53] usb 2-1: could not get target info (-113) [ 1336.833519][ T53] usb 2-1: could not probe fw (-113) [ 1338.588842][ T5335] usb 2-1: USB disconnect, device number 104 [ 1339.792354][T18805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.369505][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1340.369521][ T30] audit: type=1400 audit(1792246602.607:1688): avc: denied { unmount } for pid=18681 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1341.207312][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 1342.918781][ T5610] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1342.959021][ T30] audit: type=1400 audit(1792246605.197:1689): avc: denied { read write } for pid=19092 comm="syz.5.3342" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1342.963805][ T30] audit: type=1400 audit(1792246605.197:1690): avc: denied { open } for pid=19092 comm="syz.5.3342" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1342.991494][ T30] audit: type=1400 audit(1792246605.227:1691): avc: denied { ioctl } for pid=19092 comm="syz.5.3342" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x6441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1343.113174][ T5610] usb 4-1: Using ep0 maxpacket: 16 [ 1343.205917][ T5610] usb 4-1: device descriptor read/all, error -71 [ 1343.799080][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3343'. [ 1344.456712][T18805] veth0_vlan: entered promiscuous mode [ 1344.563371][T18805] veth1_vlan: entered promiscuous mode [ 1344.823628][T19100] UBIFS error (pid: 19100): cannot open "ubi0_0", error -19 [ 1344.829800][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3343'. [ 1344.902610][T19101] 9pnet_virtio: no channels available for device syz [ 1345.506325][T18805] veth0_macvtap: entered promiscuous mode [ 1345.592976][T18805] veth1_macvtap: entered promiscuous mode [ 1345.606253][T18805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.612937][T18805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.619431][ T6346] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.619548][ T6346] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.619657][ T6346] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.619765][ T6346] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.774142][ T6423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.774161][ T6423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.748712][ T6419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.748733][ T6419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.846567][ T5335] rxe_eth0 speed is unknown, defaulting to 1000 [ 1346.850475][ T30] audit: type=1400 audit(1792246609.087:1692): avc: denied { watch } for pid=19112 comm="syz.6.3302" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1346.888039][ T30] audit: type=1400 audit(1792246609.127:1693): avc: denied { read write } for pid=19112 comm="syz.6.3302" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1346.888087][ T30] audit: type=1400 audit(1792246609.127:1694): avc: denied { open } for pid=19112 comm="syz.6.3302" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1346.891496][ T30] audit: type=1400 audit(1792246609.127:1695): avc: denied { read write } for pid=19112 comm="syz.6.3302" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1346.891672][ T30] audit: type=1400 audit(1792246609.127:1696): avc: denied { open } for pid=19112 comm="syz.6.3302" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1346.892030][ T30] audit: type=1400 audit(1792246609.127:1697): avc: denied { ioctl } for pid=19112 comm="syz.6.3302" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1346.895575][ T30] audit: type=1400 audit(1792246609.127:1698): avc: denied { sqpoll } for pid=19112 comm="syz.6.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1347.064757][T19121] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3348'. [ 1347.066482][T19121] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19121 comm=syz.5.3348 [ 1347.094367][T19121] 9p: Bad value for 'trans' [ 1347.094848][ T5608] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1347.103144][ T30] audit: type=1400 audit(1792246609.337:1699): avc: denied { bind } for pid=19120 comm="syz.5.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1347.103968][ T30] audit: type=1400 audit(1792246609.337:1700): avc: denied { write } for pid=19120 comm="syz.5.3348" path="socket:[56001]" dev="sockfs" ino=56001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1347.104096][T19121] Bluetooth: MGMT ver 1.23 [ 1347.106476][ T30] audit: type=1400 audit(1792246609.337:1701): avc: denied { read append } for pid=19120 comm="syz.5.3348" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1347.208829][ T5608] Bluetooth: hci0: ISO packet for unknown connection handle 1588 [ 1349.412333][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 1349.423455][T19121] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1349.467787][T19121] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1349.467933][T19121] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1349.467984][T19121] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1349.978282][T19121] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1349.978383][T19121] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1350.004005][T19121] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1350.013181][T19121] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1350.013228][T19121] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1350.031147][T19121] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1351.779529][T11600] Bluetooth: hci3: command 0x0406 tx timeout [ 1351.840934][T19148] syz_tun: entered allmulticast mode [ 1352.009188][T11600] Bluetooth: hci4: command 0x0c1a tx timeout [ 1352.009310][ T5608] Bluetooth: hci2: command 0x0c1a tx timeout [ 1352.094155][T11600] Bluetooth: hci0: command 0x0c1a tx timeout [ 1354.948368][T11600] Bluetooth: hci4: command 0x0c1a tx timeout [ 1354.948405][T11600] Bluetooth: hci2: command 0x0c1a tx timeout [ 1354.948428][T11600] Bluetooth: hci0: command 0x0c1a tx timeout [ 1355.384903][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3361'. [ 1355.686346][T16726] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1355.837391][T16726] usb 3-1: Using ep0 maxpacket: 16 [ 1355.838846][T16726] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1355.841316][T16726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.841389][T16726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1355.885955][T16726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.885984][T16726] usb 3-1: Product: syz [ 1355.886021][T16726] usb 3-1: Manufacturer: syz [ 1355.886087][T16726] usb 3-1: SerialNumber: syz [ 1355.953536][T16726] usb 3-1: config 0 descriptor?? [ 1355.994039][T16726] hub 3-1:0.0: bad descriptor, ignoring hub [ 1355.994552][T16726] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1356.010134][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.174382][T16726] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1356.392174][ T6346] usb 3-1: Failed to submit usb control message: -113 [ 1356.392716][ T6346] usb 3-1: unable to send the bmi data to the device: -113 [ 1356.392977][ T6346] usb 3-1: unable to get target info from device [ 1356.393303][ T6346] usb 3-1: could not get target info (-113) [ 1356.393538][ T6346] usb 3-1: could not probe fw (-113) [ 1356.966451][ T5608] Bluetooth: hci0: command 0x0c1a tx timeout [ 1356.966505][ T5608] Bluetooth: hci4: command 0x0c1a tx timeout [ 1358.386344][T17453] usb 3-1: USB disconnect, device number 105 [ 1359.574696][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1359.574714][ T30] audit: type=1400 audit(1792246621.808:1704): avc: denied { shutdown } for pid=19195 comm="syz.2.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1359.698346][ T30] audit: type=1326 audit(1792246621.938:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.6.3360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00c59e559 code=0x7ffc0000 [ 1359.698463][ T30] audit: type=1326 audit(1792246621.938:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.6.3360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00c59e559 code=0x7ffc0000 [ 1359.699312][ T30] audit: type=1326 audit(1792246621.938:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.6.3360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa00c59e559 code=0x7ffc0000 [ 1359.699732][ T30] audit: type=1326 audit(1792246621.938:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.6.3360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00c59e559 code=0x7ffc0000 [ 1359.699774][ T30] audit: type=1326 audit(1792246621.938:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.6.3360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00c59e559 code=0x7ffc0000 [ 1359.699867][ T30] audit: type=1326 audit(1792246621.938:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.6.3360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa00c59e559 code=0x7ffc0000 [ 1359.701080][ T30] audit: type=1326 audit(1792246621.938:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.6.3360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00c59e559 code=0x7ffc0000 [ 1359.701197][ T30] audit: type=1326 audit(1792246621.938:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.6.3360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00c59e559 code=0x7ffc0000 [ 1359.704511][ T30] audit: type=1326 audit(1792246621.938:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.6.3360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa00c59e559 code=0x7ffc0000 [ 1360.056089][T16726] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1360.206051][T16726] usb 6-1: Using ep0 maxpacket: 32 [ 1360.209607][T16726] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1360.209645][T16726] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 1360.210468][T16726] usb 6-1: config 3 has an invalid interface number: 223 but max is 1 [ 1360.210492][T16726] usb 6-1: config 3 has an invalid interface number: 25 but max is 1 [ 1360.210509][T16726] usb 6-1: config 3 has an invalid interface number: 223 but max is 1 [ 1360.210527][T16726] usb 6-1: config 3 has no interface number 0 [ 1360.210542][T16726] usb 6-1: config 3 has no interface number 1 [ 1360.210566][T16726] usb 6-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1360.210577][T16726] usb 6-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 1360.210594][T16726] usb 6-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1360.210608][T16726] usb 6-1: config 3 interface 223 has no altsetting 1 [ 1360.210618][T16726] usb 6-1: config 3 interface 25 has no altsetting 0 [ 1360.213189][T16726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.213211][T16726] usb 6-1: Product: syz [ 1360.213225][T16726] usb 6-1: Manufacturer: syz [ 1360.213239][T16726] usb 6-1: SerialNumber: syz [ 1360.477250][T16831] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1360.504631][T16726] usb 6-1: USB disconnect, device number 9 [ 1360.606490][T16831] usb 7-1: device descriptor read/64, error -71 [ 1360.846121][T16831] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1360.980180][T16831] usb 7-1: device descriptor read/64, error -71 [ 1361.087422][T16831] usb usb7-port1: attempt power cycle [ 1361.858070][T16831] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1361.880268][T16831] usb 7-1: device descriptor read/8, error -71 [ 1361.996958][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1361.996983][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1362.605968][T16831] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1362.627298][T16831] usb 7-1: device descriptor read/8, error -71 [ 1362.736536][T16831] usb usb7-port1: unable to enumerate USB device [ 1362.929526][T19239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3372'. [ 1363.030092][T19239] UBIFS error (pid: 19239): cannot open "ubi0_0", error -19 [ 1363.037141][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3372'. [ 1363.098528][T19240] 9pnet_virtio: no channels available for device syz [ 1366.155204][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3378'. [ 1366.303469][T19265] UBIFS error (pid: 19265): cannot open "ubi0_0", error -19 [ 1366.311130][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3378'. [ 1366.375851][T19267] 9pnet_virtio: no channels available for device syz [ 1366.530844][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1366.678288][T19271] UBIFS error (pid: 19271): cannot open "ubi0_0", error -19 [ 1366.690240][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1366.784980][T19272] 9pnet_virtio: no channels available for device syz [ 1370.984748][T19287] tcpci 0-0002: probe with driver tcpci failed with error -5 [ 1370.985160][T19287] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 1371.070660][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 1371.070677][ T30] audit: type=1400 audit(1792246633.208:1782): avc: denied { setopt } for pid=19278 comm="syz.6.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1372.275385][ T30] audit: type=1400 audit(1792246634.508:1783): avc: denied { create } for pid=19304 comm="syz.6.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1372.434382][ T30] audit: type=1400 audit(1792246634.608:1784): avc: denied { setopt } for pid=19304 comm="syz.6.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1373.814581][ T5729] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1374.065244][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 1374.065818][ T5729] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1374.066838][ T5729] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.066868][ T5729] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1374.072799][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.072822][ T5729] usb 2-1: Product: syz [ 1374.072837][ T5729] usb 2-1: Manufacturer: syz [ 1374.072851][ T5729] usb 2-1: SerialNumber: syz [ 1374.347535][ T5729] usb 2-1: config 0 descriptor?? [ 1375.639956][ T5729] hub 2-1:0.0: bad descriptor, ignoring hub [ 1375.639981][ T5729] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1376.245959][ T5729] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1376.320975][ T6346] usb 2-1: Failed to submit usb control message: -113 [ 1376.320996][ T6346] usb 2-1: unable to send the bmi data to the device: -113 [ 1376.321005][ T6346] usb 2-1: unable to get target info from device [ 1376.321013][ T6346] usb 2-1: could not get target info (-113) [ 1376.321022][ T6346] usb 2-1: could not probe fw (-113) [ 1376.489156][T18395] usb 2-1: USB disconnect, device number 105 [ 1378.397682][T19339] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3395'. [ 1378.422892][T19339] UBIFS error (pid: 19339): cannot open "ubi0_0", error -19 [ 1378.431552][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3395'. [ 1378.504405][T19340] 9pnet_virtio: no channels available for device syz [ 1378.862573][T19339] hsr_slave_1 (unregistering): left promiscuous mode [ 1379.096389][T11600] Bluetooth: hci0: ISO packet for unknown connection handle 1588 [ 1384.928329][ T30] audit: type=1400 audit(1792246647.169:1785): avc: denied { ioctl } for pid=19389 comm="syz.1.3405" path="socket:[57366]" dev="sockfs" ino=57366 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1385.025336][T19391] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x02 (-16) [ 1385.085115][ T30] audit: type=1400 audit(1792246647.269:1786): avc: denied { search } for pid=19389 comm="syz.1.3405" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1385.085925][ T30] audit: type=1400 audit(1792246647.279:1787): avc: denied { read write } for pid=19389 comm="syz.1.3405" name="set_event" dev="tracefs" ino=4263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1385.086080][ T30] audit: type=1400 audit(1792246647.289:1788): avc: denied { open } for pid=19389 comm="syz.1.3405" path="/19/trace/set_event" dev="tracefs" ino=4263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1385.086207][T11600] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1389.690271][T19410] overlayfs: failed to resolve './bus': -2 [ 1390.481049][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3407'. [ 1390.552302][T19416] UBIFS error (pid: 19416): cannot open "ubi0_0", error -19 [ 1390.560116][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3407'. [ 1390.652002][T19417] 9pnet_virtio: no channels available for device syz [ 1390.691598][T19416] veth0_macvtap: left promiscuous mode [ 1391.774309][ T5610] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1391.924222][ T5610] usb 7-1: Using ep0 maxpacket: 16 [ 1391.924878][ T5610] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1391.927072][ T5610] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.927110][ T5610] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1391.970484][ T5610] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.970544][ T5610] usb 7-1: Product: syz [ 1391.970583][ T5610] usb 7-1: Manufacturer: syz [ 1391.970620][ T5610] usb 7-1: SerialNumber: syz [ 1392.123077][ T5610] usb 7-1: config 0 descriptor?? [ 1392.195840][ T5610] hub 7-1:0.0: bad descriptor, ignoring hub [ 1392.196289][ T5610] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1392.333872][ T5610] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1392.686346][ T6424] usb 7-1: Failed to submit usb control message: -113 [ 1392.686410][ T6424] usb 7-1: unable to send the bmi data to the device: -113 [ 1392.686476][ T6424] usb 7-1: unable to get target info from device [ 1392.686490][ T6424] usb 7-1: could not get target info (-113) [ 1392.686528][ T6424] usb 7-1: could not probe fw (-113) [ 1393.519835][T11600] Bluetooth: hci4: ISO packet for unknown connection handle 1588 [ 1393.895473][T17661] usb 7-1: USB disconnect, device number 6 [ 1394.331767][T16726] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1394.484147][T16726] usb 3-1: Using ep0 maxpacket: 16 [ 1394.484988][T16726] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1394.487069][T16726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.487136][T16726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1394.543064][T16726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.543096][T16726] usb 3-1: Product: syz [ 1394.543132][T16726] usb 3-1: Manufacturer: syz [ 1394.543583][T16726] usb 3-1: SerialNumber: syz [ 1394.678939][T16726] usb 3-1: config 0 descriptor?? [ 1394.741222][T16726] hub 3-1:0.0: bad descriptor, ignoring hub [ 1394.743816][T16726] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1394.890280][T16726] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1395.199958][ T13] usb 3-1: Failed to submit usb control message: -113 [ 1395.246188][ T13] usb 3-1: unable to send the bmi data to the device: -113 [ 1395.246218][ T13] usb 3-1: unable to get target info from device [ 1395.246255][ T13] usb 3-1: could not get target info (-113) [ 1395.246291][ T13] usb 3-1: could not probe fw (-113) [ 1395.476367][T11600] Bluetooth: hci0: unexpected event for opcode 0x080d [ 1396.204336][T16831] usb 3-1: USB disconnect, device number 106 [ 1396.379427][ T30] audit: type=1400 audit(1792246658.620:1789): avc: denied { write } for pid=19447 comm="syz.6.3418" name="dbroot" dev="configfs" ino=56626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1396.434783][T19450] hub 5-0:1.0: USB hub found [ 1396.435942][T19450] hub 5-0:1.0: 1 port detected [ 1396.520316][ T30] audit: type=1400 audit(1792246658.620:1790): avc: denied { open } for pid=19447 comm="syz.6.3418" path="/18/my_configfs/target/dbroot" dev="configfs" ino=56626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1396.724322][T19451] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 17445568 out of range (51000000..2150000000) [ 1400.121510][ T30] audit: type=1400 audit(1792246662.360:1791): avc: denied { remount } for pid=19473 comm="syz.2.3424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1403.743633][T16831] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1403.905462][T16831] usb 3-1: Using ep0 maxpacket: 32 [ 1403.909471][T16831] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 1403.944454][T16831] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1403.944486][T16831] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1403.944512][T16831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1403.944548][T16831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.948293][T16831] usb 3-1: config 0 descriptor?? [ 1404.622474][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1404.642157][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1404.647702][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1404.658299][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1404.658770][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1405.293773][T19508] syz_tun: entered allmulticast mode [ 1405.760265][T19508] syz_tun (unregistering): left allmulticast mode [ 1406.320900][ T6346] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.677352][T16831] usbhid 3-1:0.0: can't add hid device: -71 [ 1406.677436][T16831] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1406.697540][T16831] usb 3-1: USB disconnect, device number 107 [ 1406.715151][T11600] Bluetooth: hci6: command tx timeout [ 1407.082755][ T6346] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.270080][T19529] sctp: [Deprecated]: syz.3.3437 (pid 19529) Use of int in max_burst socket option. [ 1407.270080][T19529] Use struct sctp_assoc_value instead [ 1407.272278][ T30] audit: type=1400 audit(1792246669.510:1792): avc: denied { audit_write } for pid=19527 comm="syz.3.3437" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1407.293383][ T30] audit: type=1400 audit(1792246669.530:1793): avc: denied { watch watch_reads } for pid=19527 comm="syz.3.3437" path="/153" dev="tmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1407.767643][T19534] tmpfs: Unknown parameter 'grpquota_b' [ 1407.847364][ T6346] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.805262][T11600] Bluetooth: hci6: command tx timeout [ 1408.878861][T19503] lo speed is unknown, defaulting to 1000 [ 1408.881106][T19503] rxe_eth0 speed is unknown, defaulting to 1000 [ 1409.210146][ T6346] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.250576][T19557] hub 5-0:1.0: USB hub found [ 1410.250809][T19557] hub 5-0:1.0: 1 port detected [ 1410.833778][T16831] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1410.873195][T11600] Bluetooth: hci6: command tx timeout [ 1411.163626][T16831] usb 2-1: Using ep0 maxpacket: 16 [ 1411.166065][T16831] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1411.215762][T16831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.215806][T16831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1411.320156][T16831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.320758][T16831] usb 2-1: Product: syz [ 1411.321040][T16831] usb 2-1: Manufacturer: syz [ 1411.321152][T16831] usb 2-1: SerialNumber: syz [ 1411.747026][T16831] usb 2-1: config 0 descriptor?? [ 1411.757517][T16831] hub 2-1:0.0: bad descriptor, ignoring hub [ 1411.757539][T16831] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1411.768438][ T6346] bridge_slave_1: left allmulticast mode [ 1411.768505][ T6346] bridge_slave_1: left promiscuous mode [ 1411.769317][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.907226][T16831] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1411.915415][ T6346] bridge_slave_0: left allmulticast mode [ 1411.915435][ T6346] bridge_slave_0: left promiscuous mode [ 1411.915570][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.950963][ T6423] usb 2-1: Failed to submit usb control message: -113 [ 1411.950992][ T6423] usb 2-1: unable to send the bmi data to the device: -113 [ 1411.951008][ T6423] usb 2-1: unable to get target info from device [ 1411.951021][ T6423] usb 2-1: could not get target info (-113) [ 1411.951035][ T6423] usb 2-1: could not probe fw (-113) [ 1411.965211][T11600] Bluetooth: hci0: ISO packet for unknown connection handle 1588 [ 1412.970470][T11600] Bluetooth: hci6: command tx timeout [ 1413.364505][ T8537] usb 2-1: USB disconnect, device number 106 [ 1413.536757][ T6346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.582338][ T6346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.670218][ T6346] bond0 (unregistering): Released all slaves [ 1414.653244][ T8537] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1414.823058][ T8537] usb 3-1: Using ep0 maxpacket: 8 [ 1414.824918][ T8537] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1414.851804][ T8537] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.851968][ T8537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.949659][ T8537] usb 3-1: config 0 descriptor?? [ 1414.964208][ T8537] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1415.057386][ T30] audit: type=1400 audit(1792246677.291:1794): avc: denied { write } for pid=19586 comm="syz.6.3448" name="usb_gadget" dev="configfs" ino=3723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1415.057522][ T30] audit: type=1400 audit(1792246677.291:1795): avc: denied { remove_name } for pid=19586 comm="syz.6.3448" name="g1" dev="configfs" ino=25681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1415.057656][ T30] audit: type=1400 audit(1792246677.291:1796): avc: denied { rmdir } for pid=19586 comm="syz.6.3448" name="g1" dev="configfs" ino=25681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1415.317088][ T8537] gspca_vc032x: reg_r err -71 [ 1415.317153][ T8537] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1415.342251][ T8537] usb 3-1: USB disconnect, device number 108 [ 1416.413280][ T5610] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 1416.543410][ T5610] usb 2-1: device descriptor read/64, error -71 [ 1416.580761][ T6346] hsr_slave_0: left promiscuous mode [ 1416.581309][ T6346] hsr_slave_1: left promiscuous mode [ 1416.581968][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.582041][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.609682][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.609712][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.644521][ T6346] veth1_macvtap: left promiscuous mode [ 1416.644553][ T6346] veth0_macvtap: left promiscuous mode [ 1416.644636][ T6346] veth1_vlan: left promiscuous mode [ 1416.644690][ T6346] veth0_vlan: left promiscuous mode [ 1416.693838][ T30] audit: type=1400 audit(1792246678.921:1797): avc: denied { write } for pid=19594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.803257][ T5610] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 1416.849009][ T30] audit: type=1400 audit(1792246679.081:1798): avc: denied { create } for pid=19617 comm="syz.3.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1416.850138][ T30] audit: type=1400 audit(1792246679.081:1799): avc: denied { bind } for pid=19617 comm="syz.3.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1416.851510][ T30] audit: type=1400 audit(1792246679.081:1800): avc: denied { setopt } for pid=19617 comm="syz.3.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1416.917023][ T30] audit: type=1400 audit(1792246679.151:1801): avc: denied { write } for pid=19616 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.972827][ T5610] usb 2-1: device descriptor read/64, error -71 [ 1417.121941][ T5610] usb usb2-port1: attempt power cycle [ 1417.143307][T19622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3453'. [ 1417.173261][ T8537] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1417.248351][ T6346] team0 (unregistering): Port device team_slave_1 removed [ 1417.294390][T19624] UBIFS error (pid: 19624): cannot open "ubi0_0", error -19 [ 1417.307106][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3453'. [ 1417.361198][ T8537] usb 4-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 1417.374013][ T8537] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1417.374047][ T8537] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1417.374073][ T8537] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1417.374102][ T8537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.381348][ T8537] usb 4-1: config 0 descriptor?? [ 1417.382384][T19618] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1417.439598][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.453121][T19625] 9pnet_virtio: no channels available for device syz [ 1417.626896][ T6346] team0 (unregistering): Port device team_slave_0 removed [ 1417.652789][ T5610] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 1417.674373][ T5610] usb 2-1: device descriptor read/8, error -71 [ 1417.858062][ T8537] ortek 0003:05A4:1700.0016: unknown main item tag 0x0 [ 1417.858549][ T8537] ortek 0003:05A4:1700.0016: unknown main item tag 0x0 [ 1417.858940][ T8537] ortek 0003:05A4:1700.0016: unknown main item tag 0x0 [ 1417.859289][ T8537] ortek 0003:05A4:1700.0016: unknown main item tag 0x0 [ 1417.859640][ T8537] ortek 0003:05A4:1700.0016: unknown main item tag 0x0 [ 1417.860058][ T8537] ortek 0003:05A4:1700.0016: unknown main item tag 0x0 [ 1417.860418][ T8537] ortek 0003:05A4:1700.0016: unknown main item tag 0x0 [ 1417.860716][ T8537] ortek 0003:05A4:1700.0016: unknown main item tag 0x0 [ 1417.861621][ T8537] ortek 0003:05A4:1700.0016: unknown main item tag 0x0 [ 1417.861654][ T8537] ortek 0003:05A4:1700.0016: unknown main item tag 0x0 [ 1417.917876][ T8537] ortek 0003:05A4:1700.0016: unbalanced collection at end of report description [ 1417.960995][ T8537] ortek 0003:05A4:1700.0016: probe with driver ortek failed with error -22 [ 1418.098939][ T30] audit: type=1400 audit(1792246680.331:1802): avc: denied { accept } for pid=19617 comm="syz.3.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1418.110385][ T30] audit: type=1400 audit(1792246680.341:1803): avc: denied { write } for pid=19617 comm="syz.3.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1418.150994][ T5610] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 1418.186027][ T5610] usb 2-1: device descriptor read/8, error -71 [ 1418.227667][T16726] usb 4-1: USB disconnect, device number 23 [ 1418.293279][ T5610] usb usb2-port1: unable to enumerate USB device [ 1418.309570][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1418.361263][T19503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.363414][T19503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.363523][T19503] bridge_slave_0: entered allmulticast mode [ 1418.369060][T19503] bridge_slave_0: entered promiscuous mode [ 1418.372551][T19503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.374770][T19503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.374863][T19503] bridge_slave_1: entered allmulticast mode [ 1418.378559][T19503] bridge_slave_1: entered promiscuous mode [ 1418.520047][T19503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.531629][T19503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.309102][T19503] team0: Port device team_slave_0 added [ 1419.319114][T19503] team0: Port device team_slave_1 added [ 1419.428563][T19503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.428579][T19503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.428602][T19503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.485742][T19503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.485757][T19503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.485779][T19503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.513880][T19633] hub 5-0:1.0: USB hub found [ 1419.514120][T19633] hub 5-0:1.0: 1 port detected [ 1420.587257][T19503] hsr_slave_0: entered promiscuous mode [ 1420.587986][T19503] hsr_slave_1: entered promiscuous mode [ 1420.588504][T19503] debugfs: 'hsr0' already exists in 'hsr' [ 1420.588521][T19503] Cannot create hsr debugfs directory [ 1420.634896][T11600] Bluetooth: hci0: ISO packet for unknown connection handle 1588 [ 1420.742586][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1420.742603][ T30] audit: type=1400 audit(1792246682.971:1806): avc: denied { write } for pid=19631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1420.862125][ T30] audit: type=1400 audit(1792246683.091:1807): avc: denied { write } for pid=19661 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1420.951219][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1420.995903][T19665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.996226][T19665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.253391][ T5729] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1421.431652][ T5729] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1421.431695][ T5729] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1421.479918][ T5729] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.479947][ T5729] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1421.528651][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.528676][ T5729] usb 2-1: Product: syz [ 1421.528690][ T5729] usb 2-1: Manufacturer: syz [ 1421.528705][ T5729] usb 2-1: SerialNumber: syz [ 1421.565645][ T5729] usb 2-1: selecting invalid altsetting 1 [ 1421.591727][ T5729] usb 2-1: unit 6 not found! [ 1422.690771][ T30] audit: type=1400 audit(1792246684.921:1808): avc: denied { write } for pid=19670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1422.721912][T19503] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1422.764010][T19503] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1422.766623][T19503] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1422.771142][ T30] audit: type=1400 audit(1792246685.001:1809): avc: denied { write } for pid=19684 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1422.833117][T19503] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1422.836958][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1422.839294][T19503] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1422.976418][T19503] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1422.977098][T19503] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1422.980482][T19503] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1423.541727][T19503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.576825][T19503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.600661][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.600760][ T6423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1423.631581][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.631668][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.040277][ T5729] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1425.148548][ T5729] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1425.166636][ T5729] usb 2-1: USB disconnect, device number 111 [ 1425.191035][T19501] udevd[19501]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1425.225265][ T30] audit: type=1400 audit(1792246687.461:1810): avc: denied { write } for pid=19699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1426.565531][T19732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1426.627164][ T30] audit: type=1400 audit(1792246688.841:1811): avc: denied { write } for pid=19724 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1426.726490][T19732] UBIFS error (pid: 19732): cannot open "ubi0_0", error -19 [ 1426.738450][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1426.801750][T19733] 9pnet_virtio: no channels available for device syz [ 1427.249621][ T8537] kernel read not supported for file /fail_usercopy/probability (pid: 8537 comm: kworker/1:7) [ 1427.777309][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1428.770084][T19743] syz_tun (unregistering): left allmulticast mode [ 1428.923594][T19503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.441572][ T30] audit: type=1400 audit(1792246691.672:1813): avc: denied { read write } for pid=19763 comm="syz.6.3464" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1429.441822][ T30] audit: type=1400 audit(1792246691.672:1814): avc: denied { open } for pid=19763 comm="syz.6.3464" path="/31/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1429.442308][T19764] size and base must be multiples of 4 kiB [ 1429.442323][T19764] CPU: 0 UID: 0 PID: 19764 Comm: syz.6.3464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.442344][T19764] Tainted: [L]=SOFTLOCKUP [ 1429.442350][T19764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1429.442361][T19764] Call Trace: [ 1429.442367][T19764] [ 1429.442374][T19764] dump_stack_lvl+0x100/0x190 [ 1429.442403][T19764] mtrr_del.cold+0x72/0x85 [ 1429.442422][T19764] mtrr_ioctl+0xbc8/0xcf0 [ 1429.442439][T19764] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1429.442467][T19764] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1429.442484][T19764] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1429.442512][T19764] ? __fget_files+0x34/0x3d0 [ 1429.442546][T19764] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1429.442564][T19764] proc_reg_unlocked_ioctl+0x229/0x320 [ 1429.442584][T19764] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1429.442605][T19764] __x64_sys_ioctl+0x18e/0x210 [ 1429.442628][T19764] do_syscall_64+0x123/0x790 [ 1429.442654][T19764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.442672][T19764] RIP: 0033:0x7fa00c59e559 [ 1429.442686][T19764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.442702][T19764] RSP: 002b:00007fa00a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.442718][T19764] RAX: ffffffffffffffda RBX: 00007fa00c825fa0 RCX: 00007fa00c59e559 [ 1429.442729][T19764] RDX: 0000200000000240 RSI: 0000000040104d04 RDI: 0000000000000006 [ 1429.442740][T19764] RBP: 00007fa00c635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1429.442751][T19764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1429.442761][T19764] R13: 00007fa00c826038 R14: 00007fa00c825fa0 R15: 00007ffd9097b378 [ 1429.442785][T19764] [ 1429.442859][T19766] size and base must be multiples of 4 kiB [ 1429.442869][T19766] CPU: 0 UID: 0 PID: 19766 Comm: syz.6.3464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.442891][T19766] Tainted: [L]=SOFTLOCKUP [ 1429.442897][T19766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1429.442907][T19766] Call Trace: [ 1429.442912][T19766] [ 1429.442919][T19766] dump_stack_lvl+0x100/0x190 [ 1429.442943][T19766] mtrr_del.cold+0x72/0x85 [ 1429.442961][T19766] mtrr_ioctl+0xbc8/0xcf0 [ 1429.442977][T19766] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1429.443002][T19766] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1429.443019][T19766] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1429.443047][T19766] ? __fget_files+0x34/0x3d0 [ 1429.443080][T19766] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1429.443098][T19766] proc_reg_unlocked_ioctl+0x229/0x320 [ 1429.443116][T19766] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1429.443137][T19766] __x64_sys_ioctl+0x18e/0x210 [ 1429.443158][T19766] do_syscall_64+0x123/0x790 [ 1429.443183][T19766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.443199][T19766] RIP: 0033:0x7fa00c59e559 [ 1429.443212][T19766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.443228][T19766] RSP: 002b:00007fa00a7b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.443243][T19766] RAX: ffffffffffffffda RBX: 00007fa00c826180 RCX: 00007fa00c59e559 [ 1429.443254][T19766] RDX: 0000200000000240 RSI: 0000000040104d04 RDI: 0000000000000006 [ 1429.443265][T19766] RBP: 00007fa00c635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1429.443275][T19766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1429.443286][T19766] R13: 00007fa00c826218 R14: 00007fa00c826180 R15: 00007ffd9097b378 [ 1429.443309][T19766] [ 1429.465580][ T30] audit: type=1400 audit(1792246691.682:1815): avc: denied { ioctl } for pid=19763 comm="syz.6.3464" path="/31/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1429.465630][ T30] audit: type=1400 audit(1792246691.672:1812): avc: denied { mounton } for pid=19763 comm="syz.6.3464" path="/31/proc/sys/net/sctp/auth_enable" dev="proc" ino=58178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 1429.465670][ T30] audit: type=1400 audit(1792246691.682:1816): avc: denied { connect } for pid=19763 comm="syz.6.3464" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1429.465705][ T30] audit: type=1400 audit(1792246691.682:1817): avc: denied { getopt } for pid=19763 comm="syz.6.3464" laddr=::ffff:172.20.20.10 lport=47 faddr=::ffff:172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1429.622092][ T30] audit: type=1400 audit(1792246691.852:1818): avc: denied { unmount } for pid=18805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1430.088310][T19503] veth0_vlan: entered promiscuous mode [ 1430.110120][T19503] veth1_vlan: entered promiscuous mode [ 1430.145408][T19775] FAULT_INJECTION: forcing a failure. [ 1430.145408][T19775] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.145438][T19775] CPU: 0 UID: 0 PID: 19775 Comm: syz.6.3472 Tainted: G L syzkaller #0 PREEMPT(full) [ 1430.145463][T19775] Tainted: [L]=SOFTLOCKUP [ 1430.145470][T19775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1430.145482][T19775] Call Trace: [ 1430.145489][T19775] [ 1430.145496][T19775] dump_stack_lvl+0x100/0x190 [ 1430.145528][T19775] should_fail_ex.cold+0x5/0xa [ 1430.145554][T19775] should_failslab+0xc2/0x120 [ 1430.145582][T19775] __kmalloc_cache_noprof+0x91/0x6d0 [ 1430.145604][T19775] ? percpu_ref_init+0xec/0x3f0 [ 1430.145628][T19775] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 1430.145658][T19775] percpu_ref_init+0xec/0x3f0 [ 1430.145681][T19775] io_uring_setup.cold+0x2be/0x1c7e [ 1430.145703][T19775] ? lock_acquire+0x1d1/0x380 [ 1430.145723][T19775] ? avc_has_perm_noaudit+0x56/0x470 [ 1430.145744][T19775] ? __pfx_io_uring_setup+0x10/0x10 [ 1430.145771][T19775] ? find_held_lock+0x2b/0x80 [ 1430.145799][T19775] ? avc_has_perm_noaudit+0x11e/0x470 [ 1430.145819][T19775] ? avc_has_perm_noaudit+0x11e/0x470 [ 1430.145864][T19775] ? ksys_write+0x1ac/0x250 [ 1430.145887][T19775] ? __pfx_ksys_write+0x10/0x10 [ 1430.145915][T19775] __x64_sys_io_uring_setup+0xc2/0x170 [ 1430.145944][T19775] do_syscall_64+0x123/0x790 [ 1430.145974][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.145996][T19775] RIP: 0033:0x7fa00c59e559 [ 1430.146012][T19775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.146029][T19775] RSP: 002b:00007fa00a7f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1430.146048][T19775] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007fa00c59e559 [ 1430.146061][T19775] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 0000000000000efd [ 1430.146073][T19775] RBP: 00007fa00a7f6090 R08: 0000000000000000 R09: 0000000000000101 [ 1430.146084][T19775] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 1430.146096][T19775] R13: 0000200000000280 R14: 0000200000000200 R15: 00007ffd9097b378 [ 1430.146122][T19775] [ 1430.159893][T19503] veth0_macvtap: entered promiscuous mode [ 1430.180189][T19503] veth1_macvtap: entered promiscuous mode [ 1430.216790][T19503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.238201][T19503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1430.389547][ T6424] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.405862][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.416673][ T6424] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.416925][ T6424] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.489772][ T30] audit: type=1400 audit(1792246692.722:1819): avc: denied { create } for pid=19776 comm="syz.6.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1430.551437][ T30] audit: type=1400 audit(1792246692.782:1820): avc: denied { sys_admin } for pid=19776 comm="syz.6.3473" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1430.600418][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.600437][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.786360][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.786380][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.912022][T11600] Bluetooth: hci4: ISO packet for unknown connection handle 1588 [ 1431.372074][ T8537] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1432.285383][ T8537] usb 4-1: not running at top speed; connect to a high speed hub [ 1432.285508][ T8537] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1432.321682][ T8537] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.364993][ T8537] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1432.365839][ T8537] usb 4-1: Product: syz [ 1432.367434][ T8537] usb 4-1: Manufacturer: syz [ 1432.608707][ T8537] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 1435.393561][ T8537] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1435.491655][ T8537] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1435.491729][ T8537] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 1435.492235][ T8537] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 1435.521665][ T8537] usb 4-1: USB disconnect, device number 24 [ 1435.821753][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1435.821785][ T30] audit: type=1400 audit(1792246697.902:1825): avc: denied { read } for pid=19814 comm="syz.7.3480" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1436.667979][T19814] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqӆØÈÌONEOUT' [ 1436.746416][ T30] audit: type=1400 audit(1792246698.982:1826): avc: denied { unmount } for pid=19503 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1437.778248][ T30] audit: type=1400 audit(1792246700.012:1827): avc: denied { wake_alarm } for pid=19827 comm="syz.1.3485" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1438.019307][ T42] nvme nvme0: rdma_resolve_route failed (-110). [ 1438.060964][T19828] nvme nvme0: rdma connection establishment failed (-19) [ 1440.531489][ T8537] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1440.972657][ T8537] usb 2-1: not running at top speed; connect to a high speed hub [ 1440.972690][ T8537] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1440.972924][T16726] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1440.975693][ T8537] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.440774][ T8537] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1441.440800][ T8537] usb 2-1: Product: syz [ 1441.440813][ T8537] usb 2-1: Manufacturer: syz [ 1441.542895][T16726] usb 3-1: Using ep0 maxpacket: 16 [ 1441.545660][T16726] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1441.550175][T16726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.550241][T16726] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1441.608982][T16726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.609012][T16726] usb 3-1: Product: syz [ 1441.609050][T16726] usb 3-1: Manufacturer: syz [ 1441.609089][T16726] usb 3-1: SerialNumber: syz [ 1441.748790][T16726] usb 3-1: config 0 descriptor?? [ 1441.819098][T16726] hub 3-1:0.0: bad descriptor, ignoring hub [ 1441.819135][T16726] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1441.968857][T16726] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1442.209689][ T8537] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 1442.290270][T19274] usb 3-1: Failed to submit usb control message: -113 [ 1442.328279][T19274] usb 3-1: unable to send the bmi data to the device: -113 [ 1442.328309][T19274] usb 3-1: unable to get target info from device [ 1442.328351][T19274] usb 3-1: could not get target info (-113) [ 1442.328400][T19274] usb 3-1: could not probe fw (-113) [ 1442.368666][ T8537] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1442.416558][ T8537] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1442.416608][ T8537] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 1443.209507][ T8537] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 1443.223533][ T8537] usb 2-1: USB disconnect, device number 112 [ 1443.435452][ T30] audit: type=1400 audit(1792246705.672:1828): avc: denied { write } for pid=19846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1443.469757][T16726] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1443.491737][ T44] usb 3-1: USB disconnect, device number 109 [ 1443.632348][T16726] usb 4-1: Using ep0 maxpacket: 16 [ 1443.633342][T16726] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1443.634757][T16726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.634816][T16726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1443.637534][T16726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.637585][T16726] usb 4-1: Product: syz [ 1443.637628][T16726] usb 4-1: Manufacturer: syz [ 1443.637673][T16726] usb 4-1: SerialNumber: syz [ 1443.810155][T16726] usb 4-1: config 0 descriptor?? [ 1443.867438][T16726] hub 4-1:0.0: bad descriptor, ignoring hub [ 1443.868038][T16726] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1443.987146][T16726] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1443.988181][ T30] audit: type=1400 audit(1792246706.222:1829): avc: denied { write } for pid=19882 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1444.238137][T19273] usb 4-1: Failed to submit usb control message: -113 [ 1444.238413][T19273] usb 4-1: unable to send the bmi data to the device: -113 [ 1444.238836][T19273] usb 4-1: unable to get target info from device [ 1444.238873][T19273] usb 4-1: could not get target info (-113) [ 1444.240197][T19273] usb 4-1: could not probe fw (-113) [ 1444.944163][ T44] usb 4-1: USB disconnect, device number 25 [ 1445.041451][T16726] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1445.085720][T11600] Bluetooth: hci0: ISO packet for unknown connection handle 1588 [ 1445.494369][T16726] usb 2-1: not running at top speed; connect to a high speed hub [ 1445.494402][T16726] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1445.495758][T16726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.495797][T16726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1445.495818][T16726] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1445.495854][T16726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.508787][ T30] audit: type=1400 audit(1792246707.742:1830): avc: denied { write } for pid=19896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1445.614276][T16726] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1445.619710][ T30] audit: type=1400 audit(1792246707.852:1831): avc: denied { write } for pid=19916 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1445.619944][T16726] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1445.662178][T16726] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1445.662247][T16726] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1445.670406][T16726] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1446.137873][ T8537] usb 2-1: USB disconnect, device number 113 [ 1446.502186][ T8537] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1446.988453][ T8537] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1446.990589][ T8537] keyspan 2-1:1.0: device disconnected [ 1447.873373][T19937] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1447.892432][T19937] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1449.111624][T17661] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1449.143814][T19954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3509'. [ 1449.144365][T19954] hsr_slave_0: left promiscuous mode [ 1449.145630][T19954] hsr_slave_1: left promiscuous mode [ 1449.230396][ T30] audit: type=1400 audit(1792246711.463:1832): avc: denied { write } for pid=19925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.254307][ T30] audit: type=1400 audit(1792246711.473:1833): avc: denied { lock } for pid=19953 comm="syz.3.3509" path="socket:[58731]" dev="sockfs" ino=58731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1449.286030][T17661] usb 7-1: not running at top speed; connect to a high speed hub [ 1449.286059][T17661] usb 7-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1449.288286][T17661] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.298915][T17661] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1449.298937][T17661] usb 7-1: Product: syz [ 1449.298950][T17661] usb 7-1: Manufacturer: syz [ 1449.328083][T17661] uvcvideo 7-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 1449.620698][T17661] uvcvideo 7-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1449.670556][T17661] uvcvideo 7-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1449.670616][T17661] uvcvideo 7-1:1.1: Failed to initialize the device (-71). [ 1449.671172][T17661] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -71 [ 1449.914502][ T30] audit: type=1400 audit(1792246712.153:1834): avc: denied { write } for pid=19960 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.204505][T17661] usb 7-1: USB disconnect, device number 7 [ 1451.151553][T19973] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1451.203606][T17661] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1451.233610][ T30] audit: type=1400 audit(1792246713.453:1835): avc: denied { write } for pid=19969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1452.172648][T17661] usb 7-1: Using ep0 maxpacket: 16 [ 1452.173366][T17661] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1452.174309][T17661] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.174348][T17661] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.174373][T17661] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.174394][T17661] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1452.174419][T17661] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1452.174448][T17661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.179584][T17661] usb 7-1: config 0 descriptor?? [ 1452.342069][T11600] Bluetooth: hci3: ISO packet for unknown connection handle 1588 [ 1452.352133][ T30] audit: type=1400 audit(1792246714.593:1836): avc: denied { write } for pid=19996 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1452.573139][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1452.581508][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1452.595357][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1452.596116][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1452.596595][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1452.663454][ T30] audit: type=1400 audit(1792246714.903:1837): avc: denied { read } for pid=19964 comm="syz.6.3514" name="transactions_hashed" dev="binder" ino=1048896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1452.663748][ T30] audit: type=1400 audit(1792246714.903:1838): avc: denied { open } for pid=19964 comm="syz.6.3514" path="/dev/binderfs/binder_logs/transactions_hashed" dev="binder" ino=1048896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1452.797503][ T30] audit: type=1400 audit(1792246714.993:1839): avc: denied { ioctl } for pid=19964 comm="syz.6.3514" path="/dev/binderfs/binder_logs/transactions_hashed" dev="binder" ino=1048896 ioctlcmd=0x4581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1452.865741][T17661] logitech-djreceiver 0003:046D:C53A.0017: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 1453.621568][ T8537] usb 7-1: USB disconnect, device number 8 [ 1453.914295][T20022] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1454.630845][ T5608] Bluetooth: hci2: command tx timeout [ 1455.747781][T20005] lo speed is unknown, defaulting to 1000 [ 1455.763848][T20005] rxe_eth0 speed is unknown, defaulting to 1000 [ 1456.098000][ T8537] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1456.098220][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1456.280578][ T8537] usb 4-1: device descriptor read/64, error -32 [ 1456.761250][ T5608] Bluetooth: hci2: command tx timeout [ 1456.761346][ T8537] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1457.553336][ T8537] usb 4-1: not running at top speed; connect to a high speed hub [ 1457.553375][ T8537] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1457.564277][ T8537] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.576204][ T8537] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1457.576226][ T8537] usb 4-1: Product: syz [ 1457.576240][ T8537] usb 4-1: Manufacturer: syz [ 1457.623125][ T8537] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 1457.751357][ T31] INFO: task syz.0.3274:18643 blocked for more than 143 seconds. [ 1457.751381][ T31] Tainted: G L syzkaller #0 [ 1457.751392][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1457.751400][ T31] task:syz.0.3274 state:D stack:28136 pid:18643 tgid:18642 ppid:15644 task_flags:0x400140 flags:0x00080002 [ 1457.751480][ T31] Call Trace: [ 1457.751487][ T31] [ 1457.751499][ T31] __schedule+0x1259/0x6920 [ 1457.751527][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 1457.751565][ T31] ? __pfx___schedule+0x10/0x10 [ 1457.751606][ T31] ? find_held_lock+0x2b/0x80 [ 1457.751635][ T31] ? schedule+0x225/0x2c0 [ 1457.751664][ T31] schedule+0xdd/0x2c0 [ 1457.751687][ T31] schedule_preempt_disabled+0x13/0x30 [ 1457.751712][ T31] __mutex_lock+0xccb/0x1bd0 [ 1457.751758][ T31] ? write_ports+0xa5/0xcc0 [ 1457.751777][ T31] ? nfsctl_transaction_write+0xcd/0x1a0 [ 1457.751805][ T31] ? ksys_write+0x12a/0x250 [ 1457.751827][ T31] ? do_syscall_64+0x123/0x790 [ 1457.751856][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1457.751915][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 1457.751942][ T31] ? write_ports+0xa5/0xcc0 [ 1457.751958][ T31] write_ports+0xa5/0xcc0 [ 1457.751977][ T31] ? __pfx_write_ports+0x10/0x10 [ 1457.751996][ T31] ? lock_acquire+0x1d1/0x380 [ 1457.752017][ T31] ? __might_fault+0xc5/0x140 [ 1457.752056][ T31] ? find_held_lock+0x2b/0x80 [ 1457.752083][ T31] ? __might_fault+0xc5/0x140 [ 1457.752110][ T31] ? __might_fault+0xc5/0x140 [ 1457.752133][ T31] ? __pfx_write_ports+0x10/0x10 [ 1457.752154][ T31] ? _copy_from_user+0x59/0xd0 [ 1457.752203][ T31] ? __pfx_write_ports+0x10/0x10 [ 1457.752220][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 1457.752251][ T31] vfs_write+0x2aa/0x1050 [ 1457.752275][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1457.752303][ T31] ? lock_acquire+0x1d1/0x380 [ 1457.752347][ T31] ? __fget_files+0x34/0x3d0 [ 1457.752374][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1457.752395][ T31] ? find_held_lock+0x2b/0x80 [ 1457.752422][ T31] ? __fget_files+0x215/0x3d0 [ 1457.752453][ T31] ? __fget_files+0x21f/0x3d0 [ 1457.752506][ T31] ksys_write+0x12a/0x250 [ 1457.752529][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1457.752560][ T31] do_syscall_64+0x123/0x790 [ 1457.752590][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.752610][ T31] RIP: 0033:0x7f5cbd39e559 [ 1457.752644][ T31] RSP: 002b:00007f5cbe29d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1457.752663][ T31] RAX: ffffffffffffffda RBX: 00007f5cbd625fa0 RCX: 00007f5cbd39e559 [ 1457.752675][ T31] RDX: 000000000000001d RSI: 0000200000000240 RDI: 0000000000000006 [ 1457.752687][ T31] RBP: 00007f5cbd435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1457.752698][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1457.752710][ T31] R13: 00007f5cbd626038 R14: 00007f5cbd625fa0 R15: 00007fff1492e368 [ 1457.752737][ T31] [ 1457.752781][ T31] [ 1457.752781][ T31] Showing all locks held in the system: [ 1457.752791][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 1457.752804][ T31] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1457.752889][ T31] locks held by kworker/0:1H/2792: 2, last CPU#0: [ 1457.752921][ T31] #0: ffff88801d05ad40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1457.752974][ T31] #1: ffffc9000d8cfd08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1457.753031][ T31] locks held by getty/5357: 2, on CPU#0: [ 1457.753062][ T31] #0: ffff88801e3e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1457.753111][ T31] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1457.753161][ T31] locks held by kworker/1:7/8537: 6, on CPU#1: [ 1457.753174][ T31] #0: ffff8880252a8540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1457.753243][ T31] #1: ffffc90003aafd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1457.753295][ T31] #2: ffff88802c4471d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1457.753363][ T31] #3: ffff88806693c1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1457.753403][ T31] #4: ffff8880665221a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1457.753442][ T31] #5: ffff88802c400c60 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_interface+0x2a2/0xdb0 [ 1457.753509][ T31] locks held by kworker/0:7/17661: 2, last CPU#0: [ 1457.753522][ T31] #0: ffff88801d059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1457.753574][ T31] #1: ffffc90003df7d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1457.753644][ T31] locks held by syz.4.3117/17881: 3, on CPU#0: [ 1457.753656][ T31] #0: ffff88807b03eef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1457.753695][ T31] #1: ffff8880346f8460 (sb_writers#25){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1457.753765][ T31] #2: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1457.753806][ T31] locks held by syz.0.3274/18643: 3, on CPU#1: [ 1457.753820][ T31] #0: ffff88807e85d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1457.753858][ T31] #1: ffff88807bc70460 (sb_writers#25){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1457.753925][ T31] #2: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1457.753965][ T31] locks held by syz-executor/18805: 1, last CPU#0: [ 1457.753978][ T31] #0: ffff888037548460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 1457.754055][ T31] locks held by syz-executor/19503: 2, on CPU#0: [ 1457.754068][ T31] #0: ffff88803944e0e8 (&type->s_umount_key#93){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1457.754116][ T31] #1: ffffffff90289ce0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1457.754165][ T31] locks held by udevd/19822: 4, on CPU#0: [ 1457.754196][ T31] #0: ffff88803761e518 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1457.754245][ T31] #1: ffff88806020d080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1457.754295][ T31] #2: ffff888071fa91e8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1457.756881][ T31] #3: ffff88806693c1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1457.757017][ T31] locks held by syz-executor/20005: 3, last CPU#1: [ 1457.757057][ T31] #0: ffffffff91cbd048 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1457.757211][ T31] #1: ffff8880358fca60 (k-sk_lock-AF_RXRPC){+.+.}-{0:0}, at: rxrpc_bind+0xc3/0x590 [ 1457.757315][ T31] #2: ffff888037e8c1e0 (&rxnet->local_mutex){+.+.}-{4:4}, at: rxrpc_lookup_local+0xca/0x1220 [ 1457.757458][ T31] [ 1457.757464][ T31] ============================================= [ 1457.757464][ T31] [ 1457.757497][ T31] NMI backtrace for cpu 1 [ 1457.757512][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.757536][ T31] Tainted: [L]=SOFTLOCKUP [ 1457.757542][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1457.757553][ T31] Call Trace: [ 1457.757560][ T31] [ 1457.757570][ T31] dump_stack_lvl+0x100/0x190 [ 1457.757600][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1457.757630][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1457.757654][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1457.757681][ T31] sys_info+0x141/0x190 [ 1457.757700][ T31] watchdog+0xcb1/0x1030 [ 1457.757729][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1457.757754][ T31] ? __pfx_watchdog+0x10/0x10 [ 1457.757778][ T31] ? __kthread_parkme+0x18f/0x230 [ 1457.757805][ T31] ? kthread+0x13a/0x450 [ 1457.757830][ T31] ? __pfx_watchdog+0x10/0x10 [ 1457.757850][ T31] kthread+0x373/0x450 [ 1457.757875][ T31] ? __pfx_kthread+0x10/0x10 [ 1457.757901][ T31] ret_from_fork+0x730/0xd60 [ 1457.757925][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1457.757950][ T31] ? __switch_to+0x800/0x10f0 [ 1457.757977][ T31] ? __pfx_kthread+0x10/0x10 [ 1457.758005][ T31] ret_from_fork_asm+0x1a/0x30 [ 1457.758039][ T31] [ 1457.758065][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1457.758087][ C0] NMI backtrace for cpu 0 [ 1457.758100][ C0] CPU: 0 UID: 0 PID: 2792 Comm: kworker/0:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.758119][ C0] Tainted: [L]=SOFTLOCKUP [ 1457.758125][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1457.758134][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 1457.758152][ C0] RIP: 0010:rcu_read_lock_any_held+0x40/0x90 [ 1457.758167][ C0] Code: c3 cc cc cc cc 89 c3 e8 6e 21 01 00 84 c0 74 5b e8 35 63 01 00 84 c0 74 52 be ff ff ff ff 48 c7 c7 e0 c5 de 8f e8 90 8d e5 09 <85> c0 75 cf be ff ff ff ff 48 c7 c7 80 c5 de 8f e8 7b 8d e5 09 85 [ 1457.758181][ C0] RSP: 0018:ffffc9000d8cf6e8 EFLAGS: 00000092 [ 1457.758193][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 1457.758204][ C0] RDX: 0000000000000046 RSI: ffffffff8e3bd88b RDI: ffffffff8c625680 [ 1457.758214][ C0] RBP: ffffffff92459b04 R08: 0000000000000000 R09: fffffbfff248ad2b [ 1457.758223][ C0] R10: ffffffff9245695f R11: 000001536926e000 R12: 0000000000000000 [ 1457.758233][ C0] R13: ffff888021ebcb00 R14: ffff8880b833bf00 R15: 0000000000001fa5 [ 1457.758242][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 1457.758256][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1457.758266][ C0] CR2: 0000200000001000 CR3: 000000005d363000 CR4: 00000000003526f0 [ 1457.758276][ C0] Call Trace: [ 1457.758281][ C0] [ 1457.758287][ C0] update_se+0xb40/0x1260 [ 1457.758308][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1457.758328][ C0] update_curr+0x6d/0x4b0 [ 1457.758347][ C0] pick_task_fair+0x81b/0x1e10 [ 1457.758368][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1457.758385][ C0] ? sched_clock+0x3a/0x60 [ 1457.758399][ C0] ? lock_acquire+0x1d1/0x380 [ 1457.758415][ C0] ? arch_scale_cpu_capacity+0x15/0xb0 [ 1457.758433][ C0] ? __pfx_pick_task_fair+0x10/0x10 [ 1457.758452][ C0] ? arch_scale_cpu_capacity+0x15/0xb0 [ 1457.758470][ C0] ? update_rq_clock+0x325/0xd20 [ 1457.758490][ C0] __schedule+0x1cf2/0x6920 [ 1457.758513][ C0] ? __pfx___schedule+0x10/0x10 [ 1457.758531][ C0] ? __wake_up+0x3f/0x60 [ 1457.758543][ C0] ? __wake_up+0x3f/0x60 [ 1457.758556][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1457.758574][ C0] preempt_schedule_common+0x3c/0xb0 [ 1457.758592][ C0] preempt_schedule_thunk+0x16/0x40 [ 1457.758609][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1457.758626][ C0] snd_rawmidi_transmit+0xf1/0x130 [ 1457.758642][ C0] snd_vmidi_output_work+0x111/0x390 [ 1457.758656][ C0] ? process_one_work+0xa2c/0x1b10 [ 1457.758675][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1457.758689][ C0] ? process_one_work+0x906/0x1b10 [ 1457.758707][ C0] ? process_one_work+0x906/0x1b10 [ 1457.758727][ C0] process_one_work+0xac7/0x1b10 [ 1457.758751][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1457.758770][ C0] ? lock_acquire+0x1d1/0x380 [ 1457.758787][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1457.758801][ C0] worker_thread+0x5ef/0xe50 [ 1457.758816][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1457.758828][ C0] ? kthread+0x13a/0x450 [ 1457.758849][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1457.758859][ C0] kthread+0x373/0x450 [ 1457.758875][ C0] ? __pfx_kthread+0x10/0x10 [ 1457.758893][ C0] ret_from_fork+0x730/0xd60 [ 1457.758907][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1457.758921][ C0] ? __switch_to+0x800/0x10f0 [ 1457.758938][ C0] ? __pfx_kthread+0x10/0x10 [ 1457.758956][ C0] ret_from_fork_asm+0x1a/0x30 [ 1457.758973][ C0] [ 1457.901399][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1458.911309][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1458.921952][ T31] Tainted: [L]=SOFTLOCKUP [ 1458.926245][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1458.936275][ T31] Call Trace: [ 1458.939526][ T31] [ 1458.942431][ T31] dump_stack_lvl+0x100/0x190 [ 1458.947089][ T31] vpanic+0x553/0x970 [ 1458.951042][ T31] ? __pfx_vpanic+0x10/0x10 [ 1458.955526][ T31] panic+0xd1/0xe0 [ 1458.959217][ T31] ? __pfx_panic+0x10/0x10 [ 1458.963613][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1458.969759][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1458.975901][ T31] ? watchdog.cold+0x1ec/0x234 [ 1458.980685][ T31] watchdog.cold+0x1fd/0x234 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1458.985280][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1458.991084][ T31] ? __pfx_watchdog+0x10/0x10 [ 1458.995752][ T31] ? __kthread_parkme+0x18f/0x230 [ 1459.000768][ T31] ? kthread+0x13a/0x450 [ 1459.005001][ T31] ? __pfx_watchdog+0x10/0x10 [ 1459.009690][ T31] kthread+0x373/0x450 [ 1459.013756][ T31] ? __pfx_kthread+0x10/0x10 [ 1459.018350][ T31] ret_from_fork+0x730/0xd60 [ 1459.022949][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1459.028059][ T31] ? __switch_to+0x800/0x10f0 [ 1459.032738][ T31] ? __pfx_kthread+0x10/0x10 [ 1459.037332][ T31] ret_from_fork_asm+0x1a/0x30 [ 1459.042106][ T31] [ 1459.045299][ T31] Kernel Offset: disabled [ 1459.049596][ T31] Rebooting in 86400 seconds..