last executing test programs: 17m38.672889397s ago: executing program 32 (id=2156): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x801, &(0x7f00000005c0)={0x11, 0x88707fe6d919f312, 0x0, 0x1, 0x5f, 0x6, @local}, 0x14) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, 0x0, 0x20040051) socket$nl_xfrm(0x10, 0x3, 0x6) 15m16.960329885s ago: executing program 2 (id=3069): r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x1, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed040003010902220001000000000904000001437b6a000905000000000000f60705c4", @ANYRES32=r1], 0x0) 15m15.880405549s ago: executing program 2 (id=3074): listns(&(0x7f0000001140)={0x20, 0x0, 0x2, 0x2000000}, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8131, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x80800) r3 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decf7, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) execve(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, 0xffffffffffffffff) sendmmsg$alg(r2, &(0x7f0000003580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0x80001) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}], 0x1, 0x102, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800010a00000000ffffffff021000100000fe0800000000080005000000000008"], 0x2c}}, 0x4040818) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x43f7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000008640)=ANY=[@ANYBLOB="12010000020000402505a0a440000102030109025c0002010000010904000001020d001a052406000105240000c00d240f0100000000000000000306241a0000000905810300028000000904010000020d00000904010102020d000009058202ff"], 0x0) 15m13.361421414s ago: executing program 2 (id=3084): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x1, 0x1b, 0x3, 0x6a, &(0x7f0000000040)="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"}) fsetxattr(r0, &(0x7f0000000480)=@random={'system.', '/dev/ttyS3\x00'}, &(0x7f00000004c0)='/dev/ttyS3\x00', 0xb, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x4, 0x10000, {{0x11, 0x4, 0x0, 0x27, 0x44, 0x66, 0x0, 0xff, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0xcb, 0x1, 0x0, [{@broadcast, 0x3}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xadc}, {@rand_addr=0x64010100, 0x5}, {@local, 0x9}]}, @noop]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@newneigh={0x34, 0x1c, 0x2, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x0, r1, 0x10, 0x89, 0x3}, [@NDA_FLAGS_EXT={0x8}, @NDA_PROBES={0x8, 0x4, 0x4}, @NDA_PROTOCOL={0x5, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r3, r0, 0x0) r4 = gettid() r5 = getegid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000007c0)="dfd043915a4dc241ed6c1976f99da4968a89a031e6196f5188eb242cb256e5eef8a1579a2e295bbfeb292dd6d51afdd244dd25923b49e32c0072de51bcb93c5e45778fb6c8b860776ca60d54c6173b7dcaf01eefcedc8efc4829aa55e2b209ecfbb6556eabf6068fab12cafd84fa1a16bb0507d82c177d5ad3b8b7", 0x7b}, {&(0x7f0000000840)="2923801823715e37d99630d5a4c6f191ebdbaf988cd7475895579765f15cbc9792e0431c10b80f4333b64f5fee6d49c95ee444b86d5651da20a9291eac41ccd2e61a65ac", 0x44}, {&(0x7f00000008c0)="551ad1739acccbcea15c6a150a821674aeea9b7d607e64f38332b2ae2f9206d61cf819d408c0fc3187812dc36ffed4b31545388fbf28022efbfd15b0ab9b64c86b7c006dd7d0f57debf8d053e9f8f4fef5cb8faafa7436e1dc0f8cc1e51fd3229d41a61257b209472e88975868a038a4fe17229b4a585e2c7ce166607c227657548a27398a0cc865eec7fe1668520f", 0x8f}, {&(0x7f0000000980)="6105df586c46f25ce5f708de084cf19b70c6fe91325908432b0d18593c4d6cd994da1e5d0a84c984322cf3c0f924993c63af8a8563b522dcccafffc4ecfb17befd94f41232c30a3e4462579084a9a2d344fb699e6e1c8ba7d82a8101202080dbd9af0138453ca6aa942216b9da442ed68dd2c32fd766b33c1453413d2216ad60421ccaedb8e036430a6126dbf26112abc13780b28139d5891d1f96438267c9f15f2b5c3c9323c53a7a24e34950e03a251549fb", 0xb3}, {&(0x7f0000000a40)="ce2182a62d19451f5e03816acca20ddd1c5892c12fbef8285505e4f2282f6c6db6e6ed122d5c7b0f5b4c2da35b3aa4", 0x2f}, {&(0x7f0000000a80)="667dc65fad759828cb", 0x9}, {&(0x7f0000000ac0)="f445", 0x2}], 0x7, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, r5}}}], 0x20, 0x4c00}, 0x8004) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x200, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20) r8 = dup3(r0, r3, 0x0) r9 = signalfd4(r3, &(0x7f0000000f80), 0x8, 0x80800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x1f, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0xac83}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @jmp={0x5, 0x0, 0x3, 0xa, 0x2, 0x100, 0x1239609f33dc7ed1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x3, 0x0, 0xd, 0x2517, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='syzkaller\x00', 0x0, 0xcc, &(0x7f0000000e80)=""/204, 0x100, 0x2, '\x00', r2, 0x0, r9, 0x8, &(0x7f0000000fc0)={0x6, 0x401}, 0x8, 0x10, &(0x7f0000001000)={0x0, 0x3, 0x2, 0x533}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000010c0)=[r10, r11], &(0x7f0000001100)=[{0x1, 0x1, 0xf}, {0x2, 0x3, 0x2, 0xc}, {0x2, 0x2, 0xe, 0x8}], 0x10, 0x1}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x3, &(0x7f0000001200)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r12, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000001400)=[0x0, 0x0], &(0x7f0000001440)=[0x0], 0x0, 0xb8, &(0x7f0000001480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x8, 0x9, &(0x7f0000001240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000012c0)='GPL\x00', 0x7, 0xae, &(0x7f0000001300)=""/174, 0x100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r9, 0x4, &(0x7f00000016c0)=[r6], &(0x7f0000001700)=[{0x3, 0x5, 0x1, 0xc}, {0x6, 0x2, 0x8, 0x9}, {0x5, 0x5, 0xa, 0x1}, {0x3, 0x4, 0x5, 0xa}]}, 0x94) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001800)={0x0, 0x5b, "a1812ccec7690923decec3494fcfb116deccc067d34bdf42fbed3271c716d19efb85c2b43f2dfd8a9d4f63571b85427be6d4766f93ce07977c30f39c5be283a83a10b1e79c1445b7b7732dd0448c88c7f69fb10dc58f59bb2ab0ee"}, &(0x7f0000001880)=0x63) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000018c0)=@assoc_value={r14, 0x1}, &(0x7f0000001900)=0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r9, &(0x7f0000003a40)={0x130, 0xffffffffffffffda, r15, {0x3, 0x6c73ea7, 0x0, '\x00', {0x7ff, 0x6, 0x80, 0xe, r17, r5, 0x1000, '\x00', 0xe7dc, 0xc0, 0xffffffffffffff60, 0x1800000000, {0x9, 0x5}, {0x4, 0xa}, {0x9, 0x6}, {0x998, 0x4}, 0x9, 0x1, 0x6, 0xfd1}}}, 0x130) fcntl$dupfd(r9, 0x0, r7) ioctl$BTRFS_IOC_BALANCE_CTL(r9, 0x40049421, 0x3) mount$nfs(&(0x7f0000003b80)='GPL\x00', &(0x7f0000003bc0)='./file0\x00', &(0x7f0000003c00), 0x339001, &(0x7f0000003c40)={[{'GPL\x00'}, {'\x00'}, {'{/'}, {'system.'}], [{@uid_eq={'uid', 0x3d, r16}}, {@fowner_lt={'fowner<', r17}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, r17}}]}) sendmsg$key(r8, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003d40)={&(0x7f0000003d00)={0x2, 0x15, 0x0, 0x9, 0x5, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0xfc}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}]}, 0x28}}, 0x8000800) 15m13.15162427s ago: executing program 2 (id=3085): r0 = mq_open(&(0x7f0000003b80)=')@-\xc8q-\x00', 0x40, 0x80, &(0x7f0000003bc0)={0x7, 0x6, 0x0, 0xff}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mq_notify(r0, &(0x7f0000003c00)={0x0, 0x31, 0x1, @tid=r1}) futex(&(0x7f0000004000), 0x5, 0x2, 0x0, &(0x7f0000004000)=0x4, 0xb201fffd) r2 = socket$tipc(0x1e, 0x5, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x869826, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) recvmmsg(r2, &(0x7f00000064c0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/226, 0xe2}], 0x1, &(0x7f00000001c0)=""/255, 0xff}, 0x8000}, {{&(0x7f00000002c0)=@phonet, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/239, 0xef}], 0x4, &(0x7f0000001600)=""/129, 0x81}}, {{&(0x7f00000016c0)=@in6, 0x80, &(0x7f0000001880)=[{&(0x7f0000001740)=""/84, 0x54}, {&(0x7f00000017c0)=""/132, 0x84}], 0x2, &(0x7f00000018c0)=""/130, 0x82}, 0x86a8}, {{&(0x7f0000001980)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001a00)=""/14, 0xe}, {&(0x7f0000001a40)=""/64, 0x40}, {&(0x7f0000001a80)=""/99, 0x63}, {&(0x7f0000001b00)=""/241, 0xf1}, {&(0x7f0000001c00)=""/140, 0x8c}, {&(0x7f0000001cc0)=""/161, 0xa1}, {&(0x7f0000001d80)=""/75, 0x4b}], 0x7, &(0x7f0000001e80)=""/160, 0xa0}, 0xa}, {{&(0x7f0000001f40), 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/135, 0x87}, {&(0x7f0000002080)=""/143, 0x8f}, {&(0x7f0000002140)=""/134, 0x86}, {&(0x7f0000002200)=""/60, 0x3c}, {&(0x7f0000002240)=""/107, 0x6b}, {&(0x7f00000022c0)=""/69, 0x45}], 0x6}, 0x6}, {{&(0x7f00000023c0)=@ieee802154, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002440)=""/116, 0x74}], 0x1, &(0x7f0000002500)=""/16, 0x10}, 0x9}, {{&(0x7f0000002540)=@un=@abs, 0x80, &(0x7f0000003940)=[{&(0x7f00000025c0)=""/254, 0xfe}, {&(0x7f00000026c0)=""/198, 0xc6}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/217, 0xd9}, {&(0x7f00000038c0)=""/97, 0x61}], 0x5, &(0x7f00000039c0)=""/176, 0xb0}, 0x3}, {{&(0x7f0000003a80)=@x25={0x9, @remote}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003b00)=""/124, 0x7c}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/193, 0xc1}, {&(0x7f0000005140)}, {&(0x7f0000005180)=""/157, 0x9d}], 0x5, &(0x7f00000052c0)=""/178, 0xb2}, 0x7}, {{&(0x7f0000005380)=@nfc_llcp, 0x80, &(0x7f0000006480)=[{&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/107, 0x6b}], 0x2}, 0x7}], 0x9, 0x10000, &(0x7f0000006700)={0x77359400}) 15m12.864224785s ago: executing program 2 (id=3086): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x7, 0x7ffc0001}]}) fchdir(0xffffffffffffffff) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000800)={'\x00', 0x7f, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000100)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405", @ANYBLOB="cbff"], 0x48}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x940, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r3, &(0x7f00000000c0)=0x58, 0x5) r6 = io_uring_setup(0x140f, &(0x7f0000000040)={0x0, 0x481f, 0x8000, 0x1, 0x39c, 0x0, r3}) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB], 0x50}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r10, 0xb97534d5fe9704cf, 0x70bd3c, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44884}, 0xc808) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414"], 0x2c}}, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1d) fsopen(0x0, 0xd05ccb39a0695678) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000001) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r6], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x2000c805) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x6, 0x8, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x7, 0x6, 0x7, 0x0, r11}) io_uring_enter(r1, 0x7f43, 0xa4be, 0x3, &(0x7f0000000300), 0x8) io_uring_enter(r6, 0x12a, 0x14, 0x5f, 0x0, 0x0) 15m12.313872359s ago: executing program 2 (id=3087): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, r2, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48d1}, 0x20000080) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r5, 0x1, 0x0, 0x4, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x40000) 15m12.061168165s ago: executing program 33 (id=3087): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, r2, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48d1}, 0x20000080) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r5, 0x1, 0x0, 0x4, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x40000) 14m42.562212133s ago: executing program 4 (id=3219): r0 = socket(0x2, 0x3, 0x3) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000100)=0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r3, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}], 0x1, 0x40000002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r0, 0x0, 0x0, 0x2022, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff2cbd7000ffdbde2500000000", @ANYRESDEC=r2, @ANYBLOB="096d050025100400140012800b0001006970766c616e00000012028008000500", @ANYRES64=r4], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r0) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}, 0x1, 0x0, 0x0, 0x3c7f49e2417fd52c}, 0x80) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x40f00}, 0x94) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000002d00)={0x2c, &(0x7f0000002a00)={0x0, 0x22, 0xf, {0xf, 0x3a, "d10d4c0bfd9eacc234ba432178"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x4, 0x8, 0x5, 0x4, 0x7, 0x9a3, 0x2}]}) 14m42.381392718s ago: executing program 4 (id=3222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100000020008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000020101f2ff000000000000000a00002a0c001980080002000802"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40000c0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x5, @pix={0xb78d0f0, 0x27, 0x47425247, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x3, 0x2, 0x7}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x100102, 0x50) sendfile(r3, r3, 0x0, 0x6) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20008b88) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) getsockopt(r5, 0xc6, 0x9, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r7, 0x40105870, &(0x7f00000002c0)={0x6, 0x5357}) fcntl$dupfd(r8, 0x0, r8) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) 14m41.92839864s ago: executing program 4 (id=3224): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x22180, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001200)="aa660415d925ab895bdfdc5741b1949ba107dcff1f7660ac8249646f121fb8b57fe6d7479794023f9f39af4055c1f3dc30d3a0475861d0977c96963b94a9f9b410bff0763c84a135c8940a", 0x4b}, {&(0x7f0000001280)="d39984cdd04242660d069c4ac57dac43e695b56ac604e9ad41d903ce9177114068ab5a68c24926ae8a24f8cb895ee7da074d792554230b079dfd2808546ad25236ff8b23315711beaa416e272cc01db176e73480285f562398a2c09792e008e986178779", 0x64}], 0x2, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11}}], 0x88}}, {{&(0x7f0000001400)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001440)="995a1c490d697c768d6c079ab1c3740e635f87bb9d7f745c4abc72d5988bbc0490eb1a7710d5e5a9162a1f639385bad819df3460ef675df743d90a331000b57cac69de59cf9791763005d6ffd36d57238f753936580ebf19fb2121ee0868cf8bf8f077bffc8486bd508189ab97ca7f50172da08d3fd9062950ff575ac2d8", 0x7e}, {&(0x7f00000014c0)="81deacfb137b75582d21744885e7d5e185d14a08d2c44d4018fd28f7aed7e1e97316d3e8323e82322f6633dd464ca03a86aea40c58235ef39322e17cc9f0349fd4c42920acbaf00ed39780ad046740ae653453019137a71ce7e2a272566906e059f3f81b88550c28f1b8c57b32055cf9426ef2ea07777fdcd5f6ac96e94fa3f8c7d3ff967e6ed2e5decfd2485514fab049d99d74525c0316f854573ab540a4907be54452fabd0799f00db15286cf961991f03a425bb1f521f58ff3517245b4d3a76ddfa996f20794cabf4441ee73636cb135dee82fc6a366578b1f575ce6", 0xde}, {&(0x7f00000015c0)="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", 0xfd}, {&(0x7f00000016c0)="fa424865a553106ef13de3cb6b4aaedfb8ba7f21aa48e16c1c6413af22d2df50fa5d2c81fddc627050b616426f03d6e5249e514fa62ffeec388f3ee7861ce03576f0afecb199423e3531626cb46dbee0af5a779f5d628e68e33126e8f9e44dfade382f640ee024df774bfd83709fe04ece61d26fb254679ce30b658bd6911f5425d3a5370c1728792d", 0x89}], 0x4, &(0x7f0000001c80)=ANY=[@ANYBLOB="605bd5a9c42b1400000000000000000000000100000009000000000000001c00006d551dbf9e0000000000000000", @ANYRES32=r3, @ANYBLOB="e0000001ac14140c00000000140000000000000000000000020000005035a7d80000000028000000000000000000000007000000070f0b00000000e0000001ac1e01014408c3a000000006002c00000000000000000000000700000001070b817f000001ac1e0001000707150000000089078dac1414bb0000000000140000000000000000000000010000000d0000000000000011000000000000000000000001000000080000000000000014000000000000000000000002000000b705000000000000"], 0xf0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000018c0)="2370fcc694230bb43c284338ee1d6eebe3453b64cf8a3cb8dd761fd1f163a2295cf742ab43c5ce3544563afabe307a7eb24bf2ce16135f1f759018f0ce5e8c8e48bc0c6adbe05ca775c457a95af0d64f68dc2f6799517a8df59b5fcd4770ffe2e87a21638f38bf10be94945ae6da1414d5022dae406d810e0e74754c866e4206637373859c04fdaa390ef4af546aabc6a12af96b1f648fbbbe2e5f598cdc5f7aaaf720bf6bae4846f2ab4ea205a54d08f462a0591e937f3fd747bf4d57f0c00a78b2fa30bf38aab6b60b33579d0f5c07bdc04a56954aba58acefb19687725eebffb1b6728e944f5057b694c9bf575182cac8", 0xf2}, {&(0x7f00000019c0)="6ebb6bada9d0617e2bf61484340b96ac44e84c65fa8e804b69accd89ddca707b5e156efa5606e5d77706c1287ed6791ff9a05be1be5ff0c892694e1006276b0aeda973b47f6a2ad63d5586eac00a7bc9585bc5c5c8a187e20b4158f9936bec22955f7d52bda5c3c6bf0485713bbc8061f67dfb8ad2fed01dfe874251eb5007882e8a0eb6ed9381937619fc9af2e36225301c6dc0a8b7b381b8d0afbad0315334f67c9d079c9d5d93869194bf8677f4495894f4c99f533fd1d7d9e3ea49d76f8dcd81b8f94612eb85100bd9de8581f57ef239b74cee70397bcd75ead7854d964d250a4b636f37e0eaf5c52b7e08a403080078466139c75af1e1", 0xf9}], 0x2, &(0x7f0000001b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010101, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xb0}}], 0x3, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000850) sendto$inet(r4, &(0x7f0000000140)="1fca4adb0f", 0x5, 0x40000, &(0x7f00000011c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) read(r1, &(0x7f00000001c0)=""/4096, 0x1000) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB]) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r8 = eventfd2(0x0, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="6eb3ef930c53dea1", 0x8}], 0x1) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) bind$bt_rfcomm(r6, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xa) connect$bt_rfcomm(r6, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) 14m41.428231853s ago: executing program 4 (id=3227): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05c06, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (fail_nth: 3) 14m40.79663335s ago: executing program 4 (id=3229): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x3}) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000100)) ioctl$KDSKBLED(r0, 0x4b65, 0x5) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000140)) pwrite64(r0, &(0x7f00000001c0)="3a4ba2b845fcd1fe618d9f5c59ee7ccc34a3a09e1b0a66707e867bd8be0bde72da2e5d7385167fa1b466b4a19af1f5c5614a5497e31f8079bb7b53cd05d6825272944c53c5e25a9c7875614cc40df8f244747e7188561029a904eee073e35dc03444392a4e3b76a8aaf50afae77cc1e6e583451aea067a30653972aab35fa494348d5f111f59a0ffdc245a1683b010e086a7488921a05a433ef46b7df0c05a4998ee98aec8b064af9428d2adfa58502362", 0xb1, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) bind$bt_hci(r1, &(0x7f00000002c0)={0x1f, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000004c0)={0x3, &(0x7f0000000300)=[{@none}, {}, {@none}]}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'bond0\x00'}}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c086}, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000640)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000006c0)={0x81, 0x3831354f, 0x3, @discrete={0x0, 0x3}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r4 = openat$cgroup_devices(r1, &(0x7f0000000740)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000780)={'a', ' *:* ', 'm\x00'}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) pause() r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000800), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000840)={0xa, {0x4, 0x9, 0x3}}, 0xa) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000880)) r7 = getpgid(0xffffffffffffffff) sched_setscheduler(r7, 0x0, &(0x7f00000008c0)=0x8) syz_clone(0x0, &(0x7f0000000900)="1e715a5b3ed69189aa8e2c5e3e8e97b93a70d6b99f97dc5a6a03e7fa7aa3e33ead35772462ac263b8f5e85114061ea5f26b8d8ad8a3e1ee20fae19c3cc0a5eff496add12e10d458a362d804b4235b8af4eb7a13a1a94de3c3e3b01ca12cf52c1e08ba2f6101d00c024931ee18ac59f1141b3011a8deb39c7abd06c3383cfcb4256255b14cc92750eea", 0x89, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)="572957d28cd5f66788805fcdb232caae984d5fd8944dc3953c7565ea696999d4a317216f089ef2cec8f50214505e639ea90915044cca22b414acc77745fb") ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000a80)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000b00)=0x4136) syz_emit_ethernet(0x1e, &(0x7f0000000b40)={@multicast, @broadcast, @void, {@can={0xc, {{0x3}, 0x5, 0x2, 0x0, 0x0, "a3aed287ea744f8e"}}}}, &(0x7f0000000b80)={0x1, 0x3, [0xa70, 0x396, 0xe85, 0xd72]}) 14m39.776295635s ago: executing program 4 (id=3232): r0 = io_uring_setup(0x1315, &(0x7f00000002c0)={0x0, 0x18cf, 0x2, 0x0, 0x174}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0x539, &(0x7f0000000080)={0x0, 0x202, 0x2, 0x1, 0x5, 0x0, r0}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x13, r10, 0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000440)={0x2e, 0x3f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0xc9e, 0x2ea, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) 14m39.603511057s ago: executing program 34 (id=3232): r0 = io_uring_setup(0x1315, &(0x7f00000002c0)={0x0, 0x18cf, 0x2, 0x0, 0x174}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0x539, &(0x7f0000000080)={0x0, 0x202, 0x2, 0x1, 0x5, 0x0, r0}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x13, r10, 0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000440)={0x2e, 0x3f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0xc9e, 0x2ea, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) 13m41.452566846s ago: executing program 0 (id=3427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r5, 0x701, 0x2070b924, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044894}, 0xc890) 13m40.39537444s ago: executing program 0 (id=3430): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x1) close(r2) socket$inet_udp(0x2, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) 13m40.216841058s ago: executing program 0 (id=3432): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xdfc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m39.164513407s ago: executing program 0 (id=3435): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)={0x3, 0x2, 0x10000, 0x2, 0x9da5}) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x40, 0x48, 0x0) mq_notify(r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffff851500006e00000300000000000000004b0dd2b74356f617d6ca24b99b3810d81b0881d8294229224eddac075d85684f21f839a658f78ae62d4e8e5fa30c0257de20e14c22dab30e39527924c3f0f40ba16be851e63a8fc40788c818d4dd2b7fb000000000000000005cedc7cea025312af6ad60504560fe7871ab9e27c87c51020fba991f0c1e048508f10a1ea000e41958a5bba67d6bbb58db9a737df62a829568b2095f439d06e5ed2dd76d72c508b127012fec70ec8e6b60d896"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x16, &(0x7f0000000100)=""/127, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000003280)={{0x12, 0x1, 0x201, 0xa, 0x89, 0x37, 0x40, 0x711, 0x903, 0x4db7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0xc0, 0x4, "", [{{0x9, 0x4, 0x6, 0x6, 0x0, 0x23, 0xd2, 0x44, 0x9}}]}}]}}, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x80c4, &(0x7f0000003940)={[], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x32, 0x38, 0x65, 0x65, 0x32, 0x34, 0x38], 0x2d, [0x32, 0x35, 0x66], 0x2d, [0x31, 0x7b, 0x65, 0x61], 0x2d, [0x66, 0x37, 0x34, 0x37], 0x2d, [0x37, 0x66, 0x58f1cfbc355df7ff, 0x63, 0x65, 0x31, 0x30, 0x39]}}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@dont_hash}]}) 13m38.984937606s ago: executing program 0 (id=3437): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7fffffffffffffff, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x4d, 0x1, 0x2, "f83bebf45608e255d91c5debf11c7fffffffffffffff000400080000e9feff00", 0x3831354f}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x980902, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB="0000839100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r3 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000140)=0x3, 0x4) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12015002d5281b08c00901024ffa0102030109021200013daea002090425070013fd42fb"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000002c0)={0x20, 0xf, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) time(0x0) listns(&(0x7f0000000180)={0x20, 0x0, 0xffffffffffffffff, 0x8000000}, &(0x7f0000000040)=[0x0], 0x1, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="20e914cbab91c1"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x20, 0x25227e146caaa3b3, 0xdb, {0xdb, 0x2, "76ec0eadbdcd4a44da75fc148250b014487dec7028c6be6f785f9aa8827c9ec7b1a1ab4ccef594542b7959e15eaa3c58f62111f76231c288bda0c5ec43f470d74d2da76cd7ee31be1c664fd8ceea560897de2a626585c862bafc9611cfc27581b707675a1b9404d387915e2faa7984796262c62b9240e829faa5b9fa259513c0a48b43f81d868741d735b81d580ebda9afb21fd75766cfa4dca5a61589f599b4b0b19a716492db4f7c4777cf3750555e2197fb53ddfb18b569212653b1a2df6f0765e6aabab95655fe956496529e63a2298bba974bc55b4b5b"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c02}}}, &(0x7f0000000680)={0x44, &(0x7f0000000440)={0x0, 0x31, 0x52, "a0dbc5274319dad1af3539c0e8bf54d193d123a6e49f0c5162404a009fa3b6e06672a84afab0c357319deaa0b60e1833a8e34d9b0d5f2ca38c50f9c850b58166620d353c76d78954d06b85790becab6a46e8"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2d}, &(0x7f0000000540)={0x20, 0x81, 0x2, 'H7'}, &(0x7f0000000580)={0x20, 0x82, 0x3, "2de52e"}, &(0x7f00000005c0)={0x20, 0x83, 0x1, "f5"}, &(0x7f0000000600)={0x20, 0x84, 0x1, 'w'}, &(0x7f0000000640)={0x20, 0x85, 0x3, "eef827"}}) 13m36.857389436s ago: executing program 0 (id=3447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000b00)={0xa, 0x0, [{0x80000008, 0x2, 0x2, 0x5, 0x7, 0x10002, 0x3aa}, {0x2, 0x0, 0x6, 0x82e8, 0x200, 0x3, 0x6}, {0x7, 0x9, 0x5, 0x2, 0x0, 0x3, 0x1}, {0x80000019, 0x6, 0x6, 0x6, 0x8b9b, 0x7, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0xc9a9, 0x40000104, 0x5, 0x10000}, {0xd, 0x80000001, 0x3, 0x8001, 0x101, 0x39e, 0x2}, {0xb, 0x4, 0x1, 0x8, 0x807, 0x3, 0x2}, {0xb, 0x679, 0x5, 0x0, 0xf1, 0x0, 0x6}, {0x7, 0x7ff, 0x0, 0x18000000, 0x82e, 0x7, 0xe}, {0x3, 0x8, 0x1, 0xa, 0xffff8000, 0xd0b, 0xd9}]}) 13m36.592745036s ago: executing program 35 (id=3447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000b00)={0xa, 0x0, [{0x80000008, 0x2, 0x2, 0x5, 0x7, 0x10002, 0x3aa}, {0x2, 0x0, 0x6, 0x82e8, 0x200, 0x3, 0x6}, {0x7, 0x9, 0x5, 0x2, 0x0, 0x3, 0x1}, {0x80000019, 0x6, 0x6, 0x6, 0x8b9b, 0x7, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0xc9a9, 0x40000104, 0x5, 0x10000}, {0xd, 0x80000001, 0x3, 0x8001, 0x101, 0x39e, 0x2}, {0xb, 0x4, 0x1, 0x8, 0x807, 0x3, 0x2}, {0xb, 0x679, 0x5, 0x0, 0xf1, 0x0, 0x6}, {0x7, 0x7ff, 0x0, 0x18000000, 0x82e, 0x7, 0xe}, {0x3, 0x8, 0x1, 0xa, 0xffff8000, 0xd0b, 0xd9}]}) 5m6.909696424s ago: executing program 1 (id=6243): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="17", 0x101d0}], 0x1, 0x0, 0x0, 0x8008001}, 0x20048851) (fail_nth: 7) 5m6.780244506s ago: executing program 1 (id=6244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = dup2(r1, r1) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)=0x100002) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000008c0)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x80, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0x5, @pix={0x7, 0xffffffff, 0x7b04651e, 0x8, 0xc, 0x2, 0x1, 0x3, 0x0, 0x3, 0x1, 0x7}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000300)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r9, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r9, &(0x7f00000002c0)={0x130, 0x0, r10, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0x80000000, 0xf, 0x0, 0xffffffffffffffff, r11, 0xa000, '\x00', 0x6, 0xd6, 0xd60b, 0x8000000000000001, {0x200b, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x40c, 0x9}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x8, 0x200, 0x8000}}}, 0x130) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2080810, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x80}}, {@allow_other}, {@allow_other}], [{@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '}!('}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise_type}, {@dont_hash}, {@measure}, {@obj_type={'obj_type', 0x3d, '/dev/video36\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x38, 0x39, 0x66, 0x35, 0x63, 0x39, 0x37], 0x2d, [0x63, 0x63, 0x32, 0x66], 0x2d, [0x66, 0x63, 0x64, 0x32], 0x2d, [0x31, 0x36, 0x66, 0x35], 0x2d, [0x63, 0x62, 0x33, 0x64, 0x8, 0x63, 0x35, 0x31]}}}, {@audit}]}}) 5m6.674168421s ago: executing program 1 (id=6245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024000000000080001cc000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240007800c00024000000000800000010c00014000000000000000080800054010000001140000001100010000000000000000000000000a"], 0xe8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864020001ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) fchdir(0xffffffffffffffff) r3 = getpid() userfaultfd(0x80801) read(r1, &(0x7f00000002c0)=""/39, 0x27) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xaa9b, 0x8, 0x1, 0x159}, &(0x7f0000000780)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x8bd, 0x0, 0x0, 0x1000, 0xffffffff, r3, 0x0, 0x31}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r11) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r14, @ANYRES32=r13, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r14, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r12}, 0x20) setsockopt$inet6_tcp_int(r11, 0x6, 0x19, &(0x7f0000000040)=0x8001, 0x4) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r11, &(0x7f00000002c0)={0x0, 0xfffffffffffffff7, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf2553000000040099000010000044000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r4}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0xf32024bc2b91e676, 0x2000, 0x10000002, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x5, 0x401f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x367, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB="48f097385fa754a815c93960e4e1bc9cbf052ecd3614168667d7d825beeaa8b544c247079eb9079119f50457bb2deb4f1574ed701c368b3d4d2a79a4a1444e5f3c52120dfe90023fdb6fc98daeebc260583422eb6c179dcf61768b0fc16aafbdc400eaaa7c12b33b8af00f30e7906779aca55bb32377602fdd234db11555f52be6b6b14e36c092dbaace88dbaabba364ceb659137268e6b1ea4acae65920c57e9f526ef9bc3418c72e"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r15 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x81, 0xffffffff}) writev(r15, &(0x7f0000000040)=[{0x0}], 0x1) 5m5.604546428s ago: executing program 1 (id=6251): r0 = socket(0x2b, 0x4, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0) 5m5.307817649s ago: executing program 1 (id=6253): socket$inet6_mptcp(0xa, 0x1, 0x106) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x8800, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r4 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m3.535975369s ago: executing program 1 (id=6257): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffb}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2040) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000340)={0x548, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x5}, {0x1, 0x6}, {0x3}, {0x4, 0x9}, {0x7}, {0x4, 0x3}, {0x4, 0x9}, {0x7, 0xa}, {0x5, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x0, 0x0, 0x7af, 0xffff, 0xcc5, 0x5712, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x6, 0xfffc, 0x3, 0x9, 0x5, 0x3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x6, 0x2, 0x2, 0x3, 0x8, 0x6eb, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7e9, 0x6e49, 0x3800, 0x5, 0x1, 0x8, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0xd}, {0x0, 0x2}, {0x3}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x7, 0x5}, {0x5, 0x3}, {0x4, 0x8}, {0x4, 0x8}, {0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x0, 0x9}, {0x3, 0x2}, {0x7}, {0x5, 0x4}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0x5}, {0x4, 0x4}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x9}, {}, {0x0, 0x7}, {0x5, 0x3}, {0x2, 0x6}, {0x2, 0x8}, {}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x6, 0xa}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0xa}, {0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x4, 0x2d, 0x1, 0x6f, 0x2, 0xf, 0x400]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x1b, 0x16, 0x18, 0xc, 0x4, 0x6, 0x1a, 0x60, 0x6, 0x6c, 0x1b, 0x24, 0x22, 0x1, 0x60, 0x0, 0x15]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0xd, 0x2, 0xee, 0x8001, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7ff, 0xa, 0x5, 0x9, 0xb21, 0x200, 0x8]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x48, 0x3, 0x6c, 0x6c, 0x3, 0x12, 0x12, 0x10, 0x5, 0x4, 0x0, 0x18, 0x24, 0x2, 0x36, 0x12, 0x1, 0x3, 0x3, 0x48, 0x24, 0x4, 0x18, 0x4, 0x5, 0x18, 0x3, 0x18, 0x2d, 0x3, 0xc]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x9}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x1b, 0x5, 0x2, 0x6c, 0x1b, 0x6, 0x2, 0x30, 0xb, 0x20, 0x4, 0x48, 0x48, 0x18, 0x16, 0x24, 0x30, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x2}, {0x4, 0x9}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x8}, {0x3}, {0x2, 0x4}, {0x4, 0x4}, {0x3, 0x3}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x6, 0x9}, {0x1, 0x8}, {0x3}, {0x6, 0x4}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5, 0x6}, {0x5, 0xa}, {0x6, 0x2}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0xa}, {0x6, 0x7}, {0x1, 0x1}, {0x4, 0x6}, {0x5, 0xa}, {0x4, 0x1}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3bf1, 0xfff0, 0x7, 0x1, 0xffff, 0x5086, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x2, 0x9}, {0x5}, {0x7, 0x8}, {0x6, 0x9}, {0x4, 0x1}, {0x1}, {0x3, 0x4}, {0x7, 0x6}, {0x1, 0x5}, {0x5, 0x7}, {0x5}, {0x2, 0x2}, {0x2, 0x4}, {0x4, 0x4}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x7}, {0x4, 0x2}, {0x7, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x5, 0x4, 0x6, 0x4, 0x1b, 0x6c, 0x36, 0x1b, 0x4, 0x1b, 0x36, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xf, 0x6, 0x2, 0xfff2, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x6, 0x80, 0x0, 0x3, 0x5, 0x76a6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x101, 0x8, 0x1, 0x6, 0x2, 0x80, 0xd]}}]}]}, @NL80211_ATTR_TX_RATES={0x2a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0x7, 0x60, 0x5, 0x2, 0x12, 0x18, 0x3, 0x3, 0x2, 0x36, 0xb, 0x1b, 0x2, 0x9, 0x60, 0x2, 0x16, 0x0, 0x4, 0x30, 0x36, 0x12, 0xc, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xff, 0x6, 0x5, 0x2, 0x40, 0x6, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe7ea, 0x3ff, 0x2, 0x3, 0xfffd, 0x6, 0x8001, 0x1]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7e, 0x3, 0xffff, 0x800, 0x5, 0x7, 0x0, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8, 0x0, 0xd, 0x6, 0x9, 0x6, 0x1]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0xa}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x3}, {0x3, 0x5}, {0x5, 0x2}, {0x4, 0x9}, {0x5, 0x2}, {0x3, 0x6}, {0x0, 0x8}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x9}, {0x7}, {0x4, 0x5}, {0x1, 0xa}, {0x5}, {0x7}, {0x0, 0x2}, {0x7}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x5}, {0x3, 0x5}, {0x6, 0x2}, {0x3, 0x4}, {0x7, 0x7}, {0x7, 0x7}, {0x1, 0x6}, {0x6}, {0x6}, {0x6, 0x6}, {0x3, 0x1}, {0x4, 0x2}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x1}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x8}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x6}, {0x7, 0x1}, {0x7, 0xa}, {0x6, 0x8}, {0x6, 0x5}, {0x4, 0x7}, {0x4, 0x7}, {0x4, 0x2}, {0x6, 0x5}, {0x2, 0x1}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x1b, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1b, 0x0, 0x1b, 0x1b, 0x30, 0x9, 0x1, 0x2, 0x0, 0x12, 0x1b, 0x48, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x0, 0x3, 0x808, 0x0, 0x3, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x5, 0x3ff, 0x64, 0x8, 0xa, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0xd, 0x9, 0xf4ac, 0x9764, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x8, 0x9, 0x9, 0x400, 0x1, 0xc]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x0, 0x6, 0x4, 0xff7f, 0x3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4775, 0x2, 0x90b, 0xff1a, 0x0, 0x9182, 0x2, 0xf543]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x4, 0xfff7, 0x7, 0x9, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xb88, 0x7, 0x4119, 0x9c1e, 0x5, 0x34b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x22, 0x3, 0x8, 0xf70d, 0x2, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x36, 0x6c, 0x18, 0x48, 0xb, 0x6c, 0x5, 0xc, 0x12, 0x64, 0x60, 0x3, 0x30, 0x60]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf46d, 0x9, 0x4, 0x101, 0xfffe, 0x1, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x793e, 0x4, 0x9, 0x2, 0xffff, 0x5, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0xc, 0x0, 0x4, 0x18, 0x3, 0x36, 0x22, 0xc, 0x24, 0x9, 0x1, 0x9, 0x5, 0x5, 0x1, 0x18, 0x2, 0x60, 0x24, 0x1b, 0x36]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x5, 0x2, 0x12, 0xc, 0x30, 0x24, 0xc, 0x0, 0xc, 0x30, 0x18, 0x1, 0x18, 0x30, 0x24, 0x3, 0x6, 0x36, 0x4, 0x5, 0x4, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x548}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0xf}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1355}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc20}]}, 0x6c}, 0x1, 0x0, 0x0, 0x408c5}, 0x8000) 4m48.418904471s ago: executing program 36 (id=6257): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffb}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2040) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000340)={0x548, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x5}, {0x1, 0x6}, {0x3}, {0x4, 0x9}, {0x7}, {0x4, 0x3}, {0x4, 0x9}, {0x7, 0xa}, {0x5, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x0, 0x0, 0x7af, 0xffff, 0xcc5, 0x5712, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x6, 0xfffc, 0x3, 0x9, 0x5, 0x3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x6, 0x2, 0x2, 0x3, 0x8, 0x6eb, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7e9, 0x6e49, 0x3800, 0x5, 0x1, 0x8, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0xd}, {0x0, 0x2}, {0x3}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x3}, {0x7, 0x8}, {0x7, 0x7}, {0x3, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x7, 0x5}, {0x5, 0x3}, {0x4, 0x8}, {0x4, 0x8}, {0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x0, 0x9}, {0x3, 0x2}, {0x7}, {0x5, 0x4}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0x5}, {0x4, 0x4}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x9}, {}, {0x0, 0x7}, {0x5, 0x3}, {0x2, 0x6}, {0x2, 0x8}, {}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x6, 0xa}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0xa}, {0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x4, 0x2d, 0x1, 0x6f, 0x2, 0xf, 0x400]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x1b, 0x16, 0x18, 0xc, 0x4, 0x6, 0x1a, 0x60, 0x6, 0x6c, 0x1b, 0x24, 0x22, 0x1, 0x60, 0x0, 0x15]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0xd, 0x2, 0xee, 0x8001, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7ff, 0xa, 0x5, 0x9, 0xb21, 0x200, 0x8]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x48, 0x3, 0x6c, 0x6c, 0x3, 0x12, 0x12, 0x10, 0x5, 0x4, 0x0, 0x18, 0x24, 0x2, 0x36, 0x12, 0x1, 0x3, 0x3, 0x48, 0x24, 0x4, 0x18, 0x4, 0x5, 0x18, 0x3, 0x18, 0x2d, 0x3, 0xc]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x9}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x1b, 0x5, 0x2, 0x6c, 0x1b, 0x6, 0x2, 0x30, 0xb, 0x20, 0x4, 0x48, 0x48, 0x18, 0x16, 0x24, 0x30, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x2}, {0x4, 0x9}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x8}, {0x3}, {0x2, 0x4}, {0x4, 0x4}, {0x3, 0x3}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x6, 0x9}, {0x1, 0x8}, {0x3}, {0x6, 0x4}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5, 0x6}, {0x5, 0xa}, {0x6, 0x2}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0xa}, {0x6, 0x7}, {0x1, 0x1}, {0x4, 0x6}, {0x5, 0xa}, {0x4, 0x1}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3bf1, 0xfff0, 0x7, 0x1, 0xffff, 0x5086, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x2, 0x9}, {0x5}, {0x7, 0x8}, {0x6, 0x9}, {0x4, 0x1}, {0x1}, {0x3, 0x4}, {0x7, 0x6}, {0x1, 0x5}, {0x5, 0x7}, {0x5}, {0x2, 0x2}, {0x2, 0x4}, {0x4, 0x4}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x7}, {0x4, 0x2}, {0x7, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x5, 0x4, 0x6, 0x4, 0x1b, 0x6c, 0x36, 0x1b, 0x4, 0x1b, 0x36, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xf, 0x6, 0x2, 0xfff2, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x6, 0x80, 0x0, 0x3, 0x5, 0x76a6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x101, 0x8, 0x1, 0x6, 0x2, 0x80, 0xd]}}]}]}, @NL80211_ATTR_TX_RATES={0x2a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0x7, 0x60, 0x5, 0x2, 0x12, 0x18, 0x3, 0x3, 0x2, 0x36, 0xb, 0x1b, 0x2, 0x9, 0x60, 0x2, 0x16, 0x0, 0x4, 0x30, 0x36, 0x12, 0xc, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xff, 0x6, 0x5, 0x2, 0x40, 0x6, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe7ea, 0x3ff, 0x2, 0x3, 0xfffd, 0x6, 0x8001, 0x1]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7e, 0x3, 0xffff, 0x800, 0x5, 0x7, 0x0, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8, 0x0, 0xd, 0x6, 0x9, 0x6, 0x1]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0xa}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x3}, {0x3, 0x5}, {0x5, 0x2}, {0x4, 0x9}, {0x5, 0x2}, {0x3, 0x6}, {0x0, 0x8}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x9}, {0x7}, {0x4, 0x5}, {0x1, 0xa}, {0x5}, {0x7}, {0x0, 0x2}, {0x7}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x5}, {0x3, 0x5}, {0x6, 0x2}, {0x3, 0x4}, {0x7, 0x7}, {0x7, 0x7}, {0x1, 0x6}, {0x6}, {0x6}, {0x6, 0x6}, {0x3, 0x1}, {0x4, 0x2}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x1}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x8}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x6}, {0x7, 0x1}, {0x7, 0xa}, {0x6, 0x8}, {0x6, 0x5}, {0x4, 0x7}, {0x4, 0x7}, {0x4, 0x2}, {0x6, 0x5}, {0x2, 0x1}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x1b, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1b, 0x0, 0x1b, 0x1b, 0x30, 0x9, 0x1, 0x2, 0x0, 0x12, 0x1b, 0x48, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x0, 0x3, 0x808, 0x0, 0x3, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x5, 0x3ff, 0x64, 0x8, 0xa, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0xd, 0x9, 0xf4ac, 0x9764, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x8, 0x9, 0x9, 0x400, 0x1, 0xc]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x0, 0x6, 0x4, 0xff7f, 0x3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4775, 0x2, 0x90b, 0xff1a, 0x0, 0x9182, 0x2, 0xf543]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x4, 0xfff7, 0x7, 0x9, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xb88, 0x7, 0x4119, 0x9c1e, 0x5, 0x34b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x22, 0x3, 0x8, 0xf70d, 0x2, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x36, 0x6c, 0x18, 0x48, 0xb, 0x6c, 0x5, 0xc, 0x12, 0x64, 0x60, 0x3, 0x30, 0x60]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf46d, 0x9, 0x4, 0x101, 0xfffe, 0x1, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x793e, 0x4, 0x9, 0x2, 0xffff, 0x5, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0xc, 0x0, 0x4, 0x18, 0x3, 0x36, 0x22, 0xc, 0x24, 0x9, 0x1, 0x9, 0x5, 0x5, 0x1, 0x18, 0x2, 0x60, 0x24, 0x1b, 0x36]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x5, 0x2, 0x12, 0xc, 0x30, 0x24, 0xc, 0x0, 0xc, 0x30, 0x18, 0x1, 0x18, 0x30, 0x24, 0x3, 0x6, 0x36, 0x4, 0x5, 0x4, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x548}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0xf}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1355}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc20}]}, 0x6c}, 0x1, 0x0, 0x0, 0x408c5}, 0x8000) 2m47.213903834s ago: executing program 9 (id=6756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x44004000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4) accept(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000180)=0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x8917, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xa4}, 0x1, 0x0, 0x0, 0x40875}, 0x24000840) 2m47.124264423s ago: executing program 9 (id=6758): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x1b, '\x00', @buffer={"119236d5bed72efa055347bbcfd8171539eabab8c6db41f7f54035f4eaafb387", 0x20, '\x00', 0xfffffdfd}, 0xb9ea}, {0x19, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x2b, '\x00', @data=0xd9, 0xe6}]}) 2m47.047875563s ago: executing program 9 (id=6759): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000340)={0x0, 0x904, 0x8000, 0x0, 0x2ba, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a73, 0x20000, 0x2, 0x271, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x2, 0x1, 0x13c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc50a, 0x8, 0x0, 0x1f9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a41, 0x4, 0x1, 0x9f, 0x0, r0}}], 0x4, &(0x7f0000002080)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x31a}, 0x0, 0x0, '\x00', {0x0, 0xc10, 0x0, &(0x7f0000001080)=@buf_4k="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"}}, &(0x7f0000002100)) 2m46.987667621s ago: executing program 9 (id=6760): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000070a000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000805) r5 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0x9fa6, 0xdb00, 0x8, 0xa9}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x1f, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r7, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) 2m46.064060817s ago: executing program 9 (id=6764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000408030000000000000000000a0000070900010073797a310000000006000240891700000900010073797a30000000dc11814ff2a86823782d2880e09970cc002400048008000140000000060800014000000000080002400000000308000140000000070600024060030000"], 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4004014) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000004c0)={0x6, &(0x7f0000000380)=[{0x41, '\x00', @data=0x3, 0x101}, {0x20, '\x00', @data=0x4, 0x7a}]}) sendfile(r1, r1, 0x0, 0xfffa83) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listns(&(0x7f0000000b80)={0x20, 0x0, 0xffffffffffffffff, 0x20000}, 0x0, 0xa00, 0x0) 2m42.999635071s ago: executing program 9 (id=6774): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004990) 2m26.755345231s ago: executing program 37 (id=6774): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004990) 9.648540766s ago: executing program 7 (id=7299): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e010600f800fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB], 0x164}}, 0x0) 9.262276042s ago: executing program 7 (id=7301): r0 = socket$l2tp(0x2, 0x2, 0x73) timer_create(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) unshare(0x42000400) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) timer_delete(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 7.998085416s ago: executing program 8 (id=7305): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}], {0x14}}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e010600f800fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) 7.745243791s ago: executing program 6 (id=7306): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x2f, 0x9c, 0x3, 0x80000000, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x80, 0x9, 0x6}}) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESHEX], 0x28}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0xeab}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="8d8e7f5fbfe634dbf4e451af120c7a3f9ae5d927bd7e849bc8309bc0ca", 0x1d}], 0x1, &(0x7f0000000140)=[@dstopts={{0x28, 0x29, 0x37, {0x32, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7a}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x2, 0x8, 0x0, [@loopback, @private2, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3c}, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}]}}}], 0xa0}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0xd, @empty, 0x6}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000002c0)="0ae6c763a4a80688f09f4ac40e0fc78556dd06f01460e717b9b5a434f30d53af87e9129258897b0757078825ce79dcd94db8c958495bc1e764669868878b5c6b9277ae3a7d1c4b597af8e0db31e03fc23b93bd9bbd74ddb732bbebd5cf5b5f8ea54b23b116d2314978e338e29cf214aa76a788fbea385013c0d404486eb951793f5a000033b671c3a317e49b1aa18f8018d4ae59e1bf363ac266faaeed4b0952000cf8bbf73644038047ad08fe149d67", 0xb0}, {&(0x7f0000000380)="bf696e3e47d8e341283dbabcde40e33872dcf6b850ec7403d09c384ded28f9ff5bda7a5dc0011dc93b3bd49577c84f86909492841cf810dcb441a2bbb541396189a4", 0x42}, {&(0x7f0000000400)="63deb763072a48eeead79bfff274a9360c4938deaf2a98b4308a9eddd02e1cd3ee60e5afbe", 0x25}, {&(0x7f0000000440)="dfaf8ff2ae82141c88be4c35f56c5d69a7b6478ee5a64fe980852b615fc5af6f0ec0c00e1a2308aad60d3aa49fb6d09c9f59228e10f955e2e51cc9fa3a856d8fe1e50bff22bacc40c9174282f06ec8c99ac4acc4b0884a7b5232025ef85d3d0c4a23194e0f77a908e0001cea6b90cd6b50c1203f448972c876ea6ae03715e50a0652c3227446ffa79631ffa8da2dbb15e06164aa06bb64601e036ce9c5821417e255709a50d08c5793df900e745a4e84bd0cdbafa8f4d3f1f04aa669eb5f52030bb5877ebb9a", 0xc6}, {&(0x7f0000000540)="f5011aea4ee10fb6623560b7521008b8c14078750c762aa2e402687a3c92ffb6f0ae7bb8090cccd3016ba2314f735d91353ccb13458ab16b6b28bc3564e43dc84b04c9b8daf0a5e7743fd36159184a109f918e79dcedfa12824695693408e5821b4e34a71c1f1a26f9e548c548cf54819a90db11aa67da8267bdc737168146812fe1d80a020bc46de8d51f6009d286f66d4b3590441e4fb3ad57044e", 0x9c}, {&(0x7f0000000600)="83db57d1d8d4368bc4137c62a9d05e0d6e7969a476c7fc60e2fefb9d5b90e2edc057c59bc177d8209ec4ed819751fd31628106cf033abc606003127b7c3704dd4457e608dcda2c8abf6a505ad2a0e34d2c9728fec7c6d48ddebe0c0f6519b77609d4e5c00a7ae06bd7b90f693df1d522f996a3ef66f3a1e11caf1d2c96fc55915065c93f8c1273ce98e4a46bd6b9836ae2f819eb3574e84caf0c744798e99f5fd295", 0xa2}, {&(0x7f00000006c0)="6132b3aa", 0x4}, {&(0x7f0000000700)="369325", 0x3}], 0x8, &(0x7f00000007c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x101}}, @rthdr={{0xa8, 0x29, 0x39, {0x5c, 0x12, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0xf0}}, {{&(0x7f00000008c0)={0xa, 0x4e20, 0x1000, @mcast1}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000900)="229786b27b351ba91d085b47649cba058d0c97b172c80a8a5100212f06b905aac4103c6392c748a503f73dcc0456250dc8c303c7b2570f47b6df661ae677aed8b960d17ba8c44d4982938f9531244ffffd5198d8e22d6173b51dd6f085e7bd9bdb84af3c986b54f93e7e1d21098143805924e8fa5d7495bc4f8fc1a02a5623097ff43c6311", 0x85}, {&(0x7f00000009c0)="078d4584f8a6588abc1c3c6cdb90aa78fef13856643d6932e8819d9625c1db5cac718e7e5d081b2acdbc2575ee2ed19b65c9dea760341435db862681e6105c72b5365f6bbcde0b5d64292730cc1011da858c85905acb028edd7af2db91b2bbab2f977ad7e9b05fb3d03bddbabf36fbd5d21d", 0x72}, {&(0x7f0000000a40)="c0484b90a571b483972c76e3e4d3b7a26b3e31cde8e05606fdcfac842eb3c222e60377cdc52218f7f3f8eb635b022df473a2dbc924190ee9893594da943c5c1bb8037c1217ef9469353267188fb49ca5ab8a2a3a62303089173db7edf95b8bf613234b9d59e17bc5a284260f7694ae1023abab1c72d5ad6efbed5bc842b9d9816a8556fbd55becd7a1cb7bc52c69ee2be9c1746352941fb03daf7371ce531a11d765649a2236f3e3e4658f39096b18c23cf7789b267372b91f577f4c126530607ab7395663b97b063e939adaf2dc5276f919b8a1b23faaecc909755eebab48b76bea7fa5fd13c78f", 0xe8}, {&(0x7f0000000b40)="b289edb8430536c891140d17c1ed4442ebcce5cc90de1d", 0x17}, {&(0x7f0000000b80)="2153ca1a234fa80353afbe1b3454367f8dcb2047d1aacc42d5ddc0952e360a8a575f32a4b748ec8ad8135a88084805c3190c889e59", 0x35}], 0x5, &(0x7f0000000d00)=[@hopopts_2292={{0xe8, 0x29, 0x36, {0x2b, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0xb}, @calipso={0x7, 0x30, {0x2, 0xa, 0x7f, 0x7, [0x0, 0x8, 0x5, 0x6, 0xfffffffffffffffc]}}, @generic={0x8, 0x53, "43d02cd62730a69b6816cd70bb58d66875b7a0f052060fbd30a7774e19ff9d0e43e7e8815b2b465065d9c17ad435ce3de4fe8731070064843e60d663b632fa182144581aad10f9f1007fd7d3fc4b630cde0e18"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x28, {0x4, 0x8, 0x4, 0x6, [0x33bb, 0x80, 0x7f, 0x6]}}, @pad1, @pad1]}}}, @rthdrdstopts={{0x130, 0x29, 0x37, {0x4, 0x22, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0xad, "92bbcbf3936032ba236f437e3dd5711a32de5c16e6c2f79fabbf4349896e0522897b771b41b83d26587664039ff5f20b6aab6a6d43e42b73399cd007c854f167b9641f22fe95a1171ca935504589730b63a62b27e6767a4d03473bbb8f32295e9a0f0af19794d567c0f1aa4b7b848e622b7534248a6508930644764e01100fc8ebfbf003fcdd0566585522b5752b628c5a9861ac74bc97aec0baa66b679142be0a15ab2bf346d2f8d107cb69e0"}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x9, 0x6, [0x1, 0x4, 0x6, 0x2df5, 0x17b, 0x66, 0x7]}}, @jumbo={0xc2, 0x4, 0x7ff}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r3}}}], 0x240}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000f40)="7bd30b29ce274f93562c88ec0149c0617e3dd0618665ebae732caa9087d5a1a01246dad1f57602808751032e14d0eebe8220f70679844c2973de491b0d389828e56cb12708aadc2c9dc5bdf2b2ccfc167d75be6b22b40ab11203a8c8ebf290e77c929837dd2720e31ce64c1c3a6d", 0x6e}, {&(0x7f0000000fc0)="bbe7e874735d508513f684c76f1ca03d72ec55e4f197b1e3e39cb97fe1c516a2b1ae43dbfce153b72bc3c4eaf7912ad77761a765042265c0221da8c980726ac71a0037875c4fb99d439eadef184d49f8602d0efc81bbb09537cfd86bca2378f6f6bce1316476f44de77afa615284dbba621da7141f0b6f336fd6a502e8fee2f439b0a197a65f6f85fb5021e9128e2823cd334ffc859dd7ef9901c3e5d3103bf55d00b8bb89f34226b65e4210708d3f9e53aeeb9464c201953624493b", 0xbc}, {&(0x7f0000001080)="2a814cfc5a71ed1ec1408e2a868b35f25e7813037125efba6c580abc55aa099ff1395d18e16dcaff2b3267d50e5c024d5c06e9cacec9e03198897df6cb322e4b77aebbf6d2ec32127ab0bbb3dd2c18d523414a4913eaa781daeb1c8a8b0be56ba14e82b540dfe19badc0e80211d4037b8bcd143a9e735e8ec774c27284a59dfc9269b920b27aaf4d5906f5167ad14bdb4ba0d144ed5f9449b085fdcae3a7d3650a07f4b8ccecebc9178079cc9ff93bce26d64c7a62adb8eb8517ba4f47340f4d2c68d6214aa20d3141782c780955181a79f8515b4c563245cfd4d479d23727c5b99fc30c70aa8228c9b2b3", 0xeb}, {&(0x7f0000001180)="b9035468ea751eb9303fdbb62a588cd386e8716516d849cc79e7a88f0533aad44a9e", 0x22}], 0x4, &(0x7f0000001200)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x0, 0x5e, 0x0, [@empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x100}}], 0x80}}], 0x5, 0x2800c080) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 7.711834166s ago: executing program 8 (id=7307): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20040040}}], 0x1, 0x4040) pipe(&(0x7f00000004c0)) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) (async) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) r6 = semget$private(0x0, 0x1, 0x368) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x7) (async) preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x7) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x30314752, 0x0, 0x0, 0x0, 0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x30314752, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001680)={'batadv0\x00', 0x0}) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f00000002c0)=0x3) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f00000002c0)=0x3) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x19, &(0x7f0000001980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xb7}, @generic={0x0, 0xc, 0x1, 0x6}, @ldst={0x2, 0x3, 0x0, 0x1, 0x6, 0xfffffffffffffff0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xd2, &(0x7f0000001580)=""/210, 0x41100, 0x14, '\x00', r9, 0x0, r4, 0x8, &(0x7f0000000040)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x4, 0x4, 0x4}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000017c0)=[r10, r5, r4], &(0x7f0000001800)=[{0x4, 0x4, 0x1, 0x1}, {0x3, 0x2, 0x1, 0x6}, {0x4, 0x5, 0x0, 0x2}, {0x0, 0x3, 0x3, 0xc}, {0x5, 0x4, 0x3, 0x3}, {0x1, 0x5, 0xb, 0x9}, {0x3, 0x3, 0xe, 0x4}, {0x3, 0x5, 0xf}, {0x0, 0x5, 0xf, 0x6}, {0x0, 0x3, 0x6, 0x7}], 0x10, 0x5}, 0x94) semctl$SEM_STAT_ANY(r6, 0x1, 0x14, &(0x7f0000000080)=""/202) 7.310189668s ago: executing program 7 (id=7308): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000001040)=ANY=[@ANYBLOB="1201100181acd840f60d56004bd20102030109022400017f00500f09043900027afa712c09058202200007050209050c02ff03030c099cd55ca01e29c9cfef4bbc8c5c76fec2801b94471e649e10ae72f51b00a6b8e80dce056e6cf3f82ab56a64106ff5cfa3f73aae43d1213b4a51073daa5e4036fe43fb535d85caf15dee9ac66df1f3338f6138322d5e954d5b7ad8bd4f735b3d27bcbac188ab9078cf08b08926cf4c2d145179677640c7e845794ab5e901321fc25777ab536c9e62"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040a281fe83343ae596a955a77c3db71f2b807b76702"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000000)={0x195, [0x20, 0x100, 0xe19e, 0x1, 0xffff, 0x401, 0x7, 0x8, 0xe, 0x94, 0x358, 0x9000, 0x20, 0x5, 0x5, 0x8, 0x3, 0x7, 0x41, 0x8001, 0x3ff, 0x3, 0x2, 0x2, 0x5, 0x3, 0x7, 0x3ff, 0x4, 0x1, 0x0, 0x3, 0xf1de, 0xdca, 0x3, 0x6, 0x2, 0x5, 0x3, 0x4, 0x5dc7, 0xfff8, 0xa804, 0x3, 0x400, 0x2, 0x101, 0x400], 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x10800, 0x4) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b52, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2000, 0x5}]}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) unshare(0x22020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8007, 0x1, 0x5, 0x0, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x9, 0x2, 0x400, 0xde84, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x1000010, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x0, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0xa, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x4, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x0, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x2, 0x4000a9, 0x5, 0x3, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0xfffffc01, 0x5, 0x1c, 0x120000, 0x1, 0x2004, 0x80a2ed, 0x4, 0x200025], [0x7, 0x1, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x4, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x3, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x8}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000001c0)={r6, r8}) 7.106733465s ago: executing program 5 (id=7310): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "869388", 0x0, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00']}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="40180000000a00001c0012800b000100627200000c00028005001600ff000000"], 0x3c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000002a40)={0x2020}, 0x11) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bed000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00001a1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x3ee, "3338d6d0bca2eda87b10e271e93679ad40145282c760a037ae44a726ed33d91e"}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.740557237s ago: executing program 5 (id=7311): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00'], 0x164}}, 0x0) 6.658659396s ago: executing program 5 (id=7312): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1d, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000050010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 6.592724423s ago: executing program 6 (id=7313): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfb", 0x58, 0x5, 0xff}], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_adjtime(0x17, &(0x7f0000000000)={0x8, 0x4, 0x61, 0x7, 0x6, 0x71, 0x5, 0x7, 0x1, 0x7, 0x1, 0x6, 0x7, 0x4, 0xfff, 0x8, 0xc2f3, 0x2fb759ac, 0x3, 0x5, 0x0, 0x5, 0x4, 0x7, 0x8000000000000001, 0x200}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x19) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000280)=ANY=[@ANYBLOB="120100030000004035122582400001020301090269000301084006080b40c3c00fd40001010620020904000000010120000924000000010900420904010000010220000904e8000101022000090501092000071002082501010a81f9ff0904020000010220000904020101010220082501"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143640, 0x15f) copy_file_range(r1, 0x0, r1, 0x0, 0x863, 0x0) read$msr(r1, &(0x7f0000000000)=""/23, 0x17) 6.5925037s ago: executing program 5 (id=7314): r0 = socket$l2tp(0x2, 0x2, 0x73) timer_create(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) unshare(0x42000400) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) timer_delete(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 5.253039334s ago: executing program 5 (id=7316): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sched_getaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) execve(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x310) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 4.35586691s ago: executing program 8 (id=7320): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2d, 0x1001, r0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setresuid(0x0, 0xee00, 0x0) r3 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 4.327932392s ago: executing program 3 (id=7321): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "869388", 0x0, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00']}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="40180000000a00001c0012800b000100627200000c00028005001600ff000000"], 0x3c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000002a40)={0x2020}, 0x11) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bed000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00001a1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x3ee, "3338d6d0bca2eda87b10e271e93679ad40145282c760a037ae44a726ed33d91e"}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.626580016s ago: executing program 3 (id=7322): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e010600f800fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB='\b\x00'], 0x164}}, 0x0) 3.496879413s ago: executing program 7 (id=7323): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000090400800203000000092106040001220500090581032000090807090502"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00}}, 0x1c) 3.314318828s ago: executing program 6 (id=7324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa1f) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32], 0x20) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x2, 0x9, 0x3, 0x4, {0x0, 0x8000000000000000, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) (async) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000000000000030000000000000003"]) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf2515000000580001800d0001"], 0x6c}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 3.262191669s ago: executing program 3 (id=7325): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000004d702f75711ae18c0bbe17b8d8b801ccfd0d2f315a058270589b1c32c33e1cdeb"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008b000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100000000808700000000000000181a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000180000000080000000000000cb0a0000bf91000000000000b7020000030000008500000084000000b70000000005000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 3.243615908s ago: executing program 8 (id=7326): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x2, 0x4, 0x0, 0x83, 0x0, 0x80000001], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd], [0x3, 0xffffffff, 0x0, 0x0, 0x2000, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf4}, {}, {0xffffffff, 0x1}, {0xfffffff, 0xfffffff, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x70000000, 0x4}, {0x1, 0x7f}, {0x2}, {0x0, 0x1}, {0x401}], '\x00', 0x0, 0x0, 0x0, 0xf8}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0xfffffffd, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000340)={@rand_addr, @private, 0x0}, &(0x7f0000000380)=0xc) sendmsg$xdp(r2, &(0x7f0000000ec0)={&(0x7f0000000480)={0x2c, 0xc85a35a901afd91, r8, 0x2c}, 0x10, &(0x7f0000000e00)=[{&(0x7f00000005c0)="2a4ce1d0602756a97bd536f12941f63144c98813a9c320cca31a7a8d1bc1e3bb5ffa57472a1b673aa9e211eb4f6796e4978e739a4102d1d4eb0264f6c711d840fa590e7a0e10637738dd5d033dc9f59a86b1672ed77e5900e16e1b3803f1b19cb0fea25334579dc7a7e4377df1056931c51cfbe0949d3ef2ebec38e2f711c0649e81d009f4997f26c4b962cd558567a182326eef6b11a6411aaef3ce1818b16552ef1d5f0c7895f3a1c51bbdbef4b642f494b1bdca3c0cb9058840ca659b14835171fa1e236a", 0xc6}, {&(0x7f00000006c0)="9eda6ceaa9c5fa303b1062150f67ef3c9d0f3fd4126f993fa15f1511dba8324a685e008b916c06f14d939d1e4b3ddab3617e069d39630e8914b83796ed1fd5ce49c208ee862457026433b13377b89d76f53b3eef864b4502c93429829109e7e1a2c92f712c5568ba01aac6c77b64841a0f4604b168d6fb1ecdd442b165e248c49a7fb6f539ea78f9716aa2340b7b9c4809878a458065be4e3882acac1a", 0x9d}, {&(0x7f0000000780)="1ab9081ed4894996e7abd7e2d4bef92083b2b54a398483d5f1d24df73cbf114d43ab296ff3549342066aa5339c331491a646c4dd1b469a3ec3ff460700cdaef25943112184db8e57244a1ec53e35dcfe9b45dc4df4d88a389771", 0x5a}, {&(0x7f0000000800)="ea3f7f1b157ea173e7c5338c12769fee5ed6c2f05d5cdc0e638118727785cab8ae9fd5e6d2e8cccf34aae14580a0e5d9c1cecf4831c87d135d5112919f4e400ff66b47", 0x43}, {&(0x7f0000000880)="26d7fa3eb2d6fa6fbb3933edf48a83120946d9a91376a7e40cc7f44fa8b499ff854dc68eacf148", 0x27}, {&(0x7f00000008c0)="c0a6948ae0dae5a4a1694aabe35a56702cafa6fc452f03d2361f48b34efa4390faa996", 0x23}, {&(0x7f0000000900)="8b76ff14c5db41cbc98ab5f6717ffbb1cc3cb2aa88d74c2c6fcce6e053d5a8d4c9028fe944ee2ed6f24a", 0x2a}, {&(0x7f0000000940)="316e011ce01e1b12488b1350c810ab14b13a723b48334fec518078b696136bf1eea9838ed3b6cc4ca6f2d6c56001ae1c0d924603d2208c8df9787e766305dcc1351936e2b6269da7347805ba5b35d62cb8fe0d8f61d88647039506101e15238f24beb3e244b0e6b38661e29671f9c84dc8b5eb017e348799fea48d187acd6394ea05f0bc345651e5c34f698b4dc9fcf4882824c33a5b4bb0acf41dda5c11d18bcef66dbbcf400ae523d8bcf374b731edb7f36d12f4e7052f0c07592678550a0ff28b6c6c51ab93b6dd4801a6934bdf112402e36866e0c03301ebe4e7", 0xdc}, {&(0x7f0000000d00)="f359e100b1afcd0278f88d754382282becadbeea381781b573bc01cebd79b4c7821c0519001f6a4aeaeeb5f65157cf297822352069f3dc3ce9e78b3d793211d54594682fab25c02cc157f3b58431325b757979ef04f4910404ce529ef0019a5cc9d615b11a8c1bb77339d05b52345c266073ea6370673afb8e79826f417a6d821ad7e26d00e4f51b8cb2a9c8a24332a6c9d6e99bce28dfeeaab2cd69e36320ec2290dad66fdd0d8cabe31d6acb4e57cbffd9c753e494bf8ee857e06cad768c48170a06c997aa008e", 0xc8}], 0x9, 0x0, 0x0, 0x10}, 0x8000) 3.156773135s ago: executing program 3 (id=7327): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) pselect6(0x40, &(0x7f0000000000)={0xff, 0x6, 0x0, 0x9, 0x7f8, 0x1000000080, 0x6, 0x2}, 0x0, 0x0, 0x0, 0x0) 3.156514098s ago: executing program 6 (id=7328): unshare(0x26020480) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0xfff, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) unshare(0x26020480) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0xfff, 0x4) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) (async) 3.086745376s ago: executing program 3 (id=7329): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.932799064s ago: executing program 8 (id=7330): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x1c, 0x0, 0x5a8510d74205b50f, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) syz_clone(0xb21e0300, 0x0, 0x0, 0x0, 0x0, 0x0) 1.308437236s ago: executing program 6 (id=7331): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280", 0x13}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x2, "83e624170a20290000deff1e0400000027e6ff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000280)={"840d6042cee820000028000000e8ff0000002000000000000000000f00", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0383e04, &(0x7f0000000140)={"c4650da6c04da5a743eadb230a98b1079aa302394a0000d10000000200", r1, 0xffffffffffffffff, 0x2}) 993.982864ms ago: executing program 8 (id=7332): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_normal', 0x143000, 0xb2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000180)={{0x4, 0x6, 0x7ff, 0x10000, 'syz0\x00', 0x6}, 0x2, 0x10, 0x6, r2, 0x4, 0x6, 'syz0\x00', &(0x7f0000000040)=[')[$[!((\x00', '\x00', '/\x00', ']!$@/\\!#$\']#\x00'], 0x18}) lseek(r1, 0x7fffffff, 0x4) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xfffffffffffffd78, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040015}, 0x40040) r4 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/329, @ANYRES64=r1, @ANYBLOB="1be2f026699e204587ddfe019a80f91b9c34a99e24691a2dc8a0e8f0bec763642ed11aad208d8497c8d8140c0c1bb0ac2c89ca89619c6044751d61d3ab858ae033c2911dd374876ac5339896f804077d6f7ba712ea4aad3a0fdd833caab642ff344a7b501cb91ee467717de32d2b0535ba963427a172e20c5355d3b9d00e66d409b025f6ef82bdac9ee5d78212c7b31c0fa0c28ddf57c23953e1340a6f30cda2c18222dcd8ec3e2e598f8383b7d039566563472a9fade691b8b8e9b2c4f2b132db2e4a25975e3300faf9811013c2f6"], 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0xc0046209, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0x80000}, {0x5c, 0xd, 0x9}, {0x6, 0x0, 0x4, 0x7ffffe39}]}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000000)={0x9f5, 0x7}) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000140)={0x0, 0x15}, 0x0, 0x0}) 990.742363ms ago: executing program 6 (id=7333): socket$phonet_pipe(0x23, 0x5, 0x2) open(0x0, 0x108943, 0x148) open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) ioctl$SIOCGSKNS(r1, 0x894c, 0x0) socket(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000980)='/sys/kernel/vmcoreinfo', 0x240000, 0xa0) syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 987.438899ms ago: executing program 3 (id=7334): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="796100000000fffe00007e00000008"], 0x1c}}, 0x4000054) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x8, 0x1000000, 0x0, 0x0, 0x1) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000002040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002000)={&(0x7f0000000bc0)={0x604, r1, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x3f4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x3e4, 0x4, 0x0, 0x1, [{0x3a8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xc3, 0x1, "2611af43e3ca48c0d29c26d411b8b8e6eea94a505d83a0853f0ddc54915239d84df99b2217fe33f29dfab8cf263c9aa5f7ca1fc512e4c47f4b7c748c58d30d7cfba711d2045c1cc8cab7e44b8d48fac2690b60717e3f1879f2420c7c7fee478b164517ddb3102cf2f6abaf8f8f5546e1650b625555bbbe03e5093c110722c35fb29c24834d6711fdd79e22c05301da95744d8b97c5a8d60fa6b45b38aae0a9d9629e6912508b7afb5389ac7a391c68c5f236f19fed3c3bc644680bd60db9f2"}, @NL80211_PKTPAT_MASK={0xe3, 0x1, "01e118778021e17dfdc933be42361459c4a31cc112055916af9d4a91947224919c7c73632677d20630a298a6328528ce50ca35ec519eb6a511a44b1d09328dbdc73a1091408404b1b9b54be8a63c2ac7c8fc847cd14d3e1c7823af7d8e91843d4b267aa5bdc70ad9fb3e516676300199945081f3c42fbfeea4c981f48ecb861c598cbef914034a0e44ca3956cfd3f4274b06090377ea842e4dda0f4333cbc694dae6d85f60dfee18987ffbf8d4ad8e4ca3464b6c4a84060cd4dd46b2f12fe1f3c842a5249178f3c0c79f4cbf78c6397ce41ffe3f53d433da6c47e7daec575b"}, @NL80211_PKTPAT_PATTERN={0xaa, 0x2, "d79f424f886ac931eebec4cf683808e8d56de9df55af43f10c7ac9c1016f574d1417473a59048952ec50b07051c1ebb963d867a09812bda4d9232f8a57079be79ccf4d6dde505ded9affbfff0eaf3fadbcfccd72c9b998198f444e714d20137c139a882c9311c60f2585756a5a4d79c312a33602a47e7fd019dd4379ad38b8ba8bbaca2ca8e77d52120d1a6e285dcf09d1854c4637c171ac3e351536576aa80200d6a6b64e29"}, @NL80211_PKTPAT_PATTERN={0x45, 0x2, "0cb0927cab975f7203f14a0613b6be6f0cd9a52a4bfb3de634c8b98e83294a345f25e53cb471405170cdf494f6c48c7f95e445241aaa43a67ad511d1b642c5b747"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xff}, @NL80211_PKTPAT_PATTERN={0xb0, 0x2, "e9b6239f617cd42eb0f23a5ed69ad4ba3d77be22578d89da9eafe10ea2cff0c25fe3b87864c22fc1babba647623587c5e679935e1c390b9a0ba0aed539b7c16e29600e7ab6da42350c60493b9ecc069afdbbf72047aff64741efc600ea8b3afa6239ec27f5183637bbef89b97d818a3792891f5221537bd123851ead05875783d1ce9ba590a1003562c1b5e473a1e7966e4abd14a16a68763a7cef76a3aa96e28b8347dcd8b6eededef4f6d5"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x75}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_PATTERN={0x35, 0x2, "db7fbbf389aaf36867746196b2574a12c17470af05e3ac478e6c7fa3d64324959058dd0089a975e4094f0c286f64dc58d2"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x70, 0x1, "c48f95700b9f2a343954c79b3e44612d2389f7f00b3f4c29891f2f475986ac28ef946398e98a522e5ecfa8df12"}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1e0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @local}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0xfffffff9, 0x2, 0x9}}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x160, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x100, 0x9, 0xffffffff}}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x10001}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x3a, 0xb, "f75990c8dfe677d7d44c3abb557fc8313beec04989cf84ad7377ddccdd520973e186e540748055803f02eceacda34203f9dadd6e583f"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x800}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xdc, 0x8, {0x0, 0x7fe5, "1b96bd2951d21b4b578e3fcc9a56b30ac6eb24eb71d710f1808054b57b5356bbc3731c419628a121f45f380a046873213eba70a5f6b81f094bab251fe3017a7d05e84e506646733d4239a51b98f6aa28762e3c58568aa89a28017a719d1b800e60355ce0813b98ffb100bcaeb566899e13f034bda49de3e6285c833791815f6607945bb8945755f3a125065cea9b3e6a58d6189c0b57c6027b0d03c3132852c6eb8de881b382350b588fe18b32f503ef455032d6c10968e2b6eebfa36646f41f3faa0d585d041bd9d259fd3fd6ac203c"}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x81}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @local}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x44, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xf7}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x794e}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x100}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x604}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 452.707755ms ago: executing program 5 (id=7335): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x9, 0x7fffffff, 0xc, 0x8, 0x5, 0x79, 0x3, 0x3, 0x100, 0x6, 0x6, 0x6, 0x80000001, 0x1ff, 0xfd, 0xfffffffc, 0x803, 0x10, 0x2, 0x8, 0x0, 0x0, 0x20001e58, 0xffffffff, 0x3, 0x6, 0x80000008, 0xa6b5, 0x4, 0xffffffff]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000640)) 124.523108ms ago: executing program 7 (id=7336): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00'], 0x164}}, 0x0) 0s ago: executing program 7 (id=7337): prctl$PR_SET_IO_FLUSHER(0x41, 0x3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x2000, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): kaller0: entered promiscuous mode [ 1437.086727][T28214] syzkaller0: entered allmulticast mode [ 1437.490044][T24670] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1437.655238][T24670] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1437.655269][T24670] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.656908][T24670] usb 4-1: config 0 descriptor?? [ 1438.128620][T15758] audit_log_start: 9207 callbacks suppressed [ 1438.128636][T15758] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1438.128648][T15758] audit: audit_lost=401874 audit_rate_limit=0 audit_backlog_limit=64 [ 1438.128661][T15758] audit: backlog limit exceeded [ 1438.128676][T15758] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1438.128687][T15758] audit: audit_lost=401875 audit_rate_limit=0 audit_backlog_limit=64 [ 1438.128699][T15758] audit: backlog limit exceeded [ 1438.128722][T15758] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1438.128734][T15758] audit: audit_lost=401876 audit_rate_limit=0 audit_backlog_limit=64 [ 1438.128747][T15758] audit: backlog limit exceeded [ 1438.128888][T15756] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1438.304309][T24670] usb 4-1: USB disconnect, device number 81 [ 1438.488679][T24670] usb 9-1: USB disconnect, device number 47 [ 1438.501809][T24670] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1438.512952][T24670] cp210x 9-1:0.0: device disconnected [ 1439.047097][T28238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7047'. [ 1439.380093][T28244] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1439.386265][T28244] cramfs: wrong magic [ 1440.331967][T28248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7050'. [ 1440.605022][T28252] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7052'. [ 1442.235794][T28271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7058'. [ 1442.772218][ T5794] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1442.922605][ T5794] usb 6-1: Using ep0 maxpacket: 32 [ 1442.930508][ T5794] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1442.930536][ T5794] usb 6-1: config 0 has no interface number 0 [ 1442.930568][ T5794] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1442.965149][ T5794] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1442.965178][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.965198][ T5794] usb 6-1: Product: syz [ 1442.965211][ T5794] usb 6-1: Manufacturer: syz [ 1442.965225][ T5794] usb 6-1: SerialNumber: syz [ 1442.998349][ T5794] usb 6-1: config 0 descriptor?? [ 1443.134419][ T37] kauditd_printk_skb: 30796 callbacks suppressed [ 1443.134437][ T37] audit: type=1400 audit(1782592933.129:3392848): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1443.134474][ T37] audit: type=1400 audit(1782592933.129:3392849): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sysfs" ino=1 [ 1443.134505][ T37] audit: type=1400 audit(1782592933.129:3392850): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10610 comm="udevd" name="/" dev="sda1" ino=2 [ 1443.134535][ T37] audit: type=1400 audit(1782592933.129:3392851): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10610 comm="udevd" name="/" dev="sysfs" ino=1 [ 1443.134567][ T37] audit: type=1400 audit(1782592933.129:3392852): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10610 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1443.134598][ T37] audit: type=1400 audit(1782592933.129:3392853): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10610 comm="udevd" name="platform" dev="sysfs" ino=48 [ 1443.134630][ T37] audit: type=1400 audit(1782592933.129:3392854): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10610 comm="udevd" name="dummy_hcd.3" dev="sysfs" ino=26855 [ 1443.134661][ T37] audit: type=1400 audit(1782592933.129:3392855): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10610 comm="udevd" name="usb4" dev="sysfs" ino=26884 [ 1443.142638][ T37] audit: type=1400 audit(1782592933.129:3392856): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10610 comm="udevd" name="/" dev="sda1" ino=2 [ 1443.142678][ T37] audit: type=1400 audit(1782592933.119:3392815): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=10838 comm="udevd" path="/run/udev/data/b7:6.tmp" dev="tmpfs" ino=18703 [ 1443.585191][T28294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7064'. [ 1445.035046][T28301] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7067'. [ 1445.302554][T28275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1445.623970][ T5794] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1445.624002][ T5794] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1445.624381][ T5794] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1445.624407][ T5794] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1445.624426][ T5794] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1445.624444][ T5794] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1445.624612][ T5794] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1445.667851][ T5794] usb 6-1: USB disconnect, device number 127 [ 1445.972218][T16902] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1446.125218][T16902] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.125264][T16902] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1446.125298][T16902] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 255 [ 1446.125321][T16902] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1446.128488][T16902] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1446.128519][T16902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.128538][T16902] usb 9-1: Product: syz [ 1446.128552][T16902] usb 9-1: Manufacturer: syz [ 1446.128566][T16902] usb 9-1: SerialNumber: syz [ 1446.202324][T24422] Bluetooth: hci6: command 0x0406 tx timeout [ 1446.371967][T16902] cdc_ncm 9-1:1.0: bind() failure [ 1446.374145][T16902] usbtest 9-1:1.0: Linux gadget zero [ 1446.378549][T16902] usbtest 9-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1446.384301][T16902] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1446.384334][T16902] cdc_ncm 9-1:1.1: bind() failure [ 1446.389200][T16902] usbtest 9-1:1.1: couldn't get endpoints, -22 [ 1446.389252][T16902] usbtest 9-1:1.1: probe with driver usbtest failed with error -22 [ 1446.396810][T16902] usb 9-1: USB disconnect, device number 48 [ 1446.438904][T28323] GUP no longer grows the stack in syz.3.7075 (28323): 200000004000-200000005000 (200000002000) [ 1446.438940][T28323] CPU: 0 UID: 0 PID: 28323 Comm: syz.3.7075 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1446.438968][T28323] Tainted: [L]=SOFTLOCKUP [ 1446.438975][T28323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1446.438990][T28323] Call Trace: [ 1446.438997][T28323] [ 1446.439005][T28323] dump_stack_lvl+0xe8/0x150 [ 1446.439032][T28323] __get_user_pages+0x21e9/0x2590 [ 1446.439058][T28323] ? rcu_is_watching+0x15/0xb0 [ 1446.439094][T28323] get_user_pages_remote+0x307/0xb10 [ 1446.439117][T28323] ? __pfx_mtree_load+0x10/0x10 [ 1446.439140][T28323] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1446.439162][T28323] ? __access_remote_vm+0x42c/0x6f0 [ 1446.439187][T28323] __access_remote_vm+0x222/0x6f0 [ 1446.439214][T28323] ? __pfx___access_remote_vm+0x10/0x10 [ 1446.439238][T28323] ? __kmalloc_cache_noprof+0x3a2/0x690 [ 1446.439263][T28323] ? proc_pid_cmdline_read+0x41f/0x900 [ 1446.439286][T28323] proc_pid_cmdline_read+0x46e/0x900 [ 1446.439307][T28323] ? __asan_memset+0x22/0x50 [ 1446.439336][T28323] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1446.439356][T28323] ? bpf_lsm_inode_getlsmprop+0x10/0x10 [ 1446.439377][T28323] ? security_file_permission+0x75/0x260 [ 1446.439399][T28323] ? rw_verify_area+0x250/0x4d0 [ 1446.439426][T28323] vfs_readv+0x588/0x850 [ 1446.439446][T28323] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1446.439468][T28323] ? __pfx_vfs_readv+0x10/0x10 [ 1446.439493][T28323] ? __pfx_do_futex+0x10/0x10 [ 1446.439519][T28323] ? kmem_cache_free+0x187/0x6c0 [ 1446.439548][T28323] __x64_sys_preadv+0x19f/0x2c0 [ 1446.439576][T28323] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1446.439606][T28323] ? rcu_is_watching+0x15/0xb0 [ 1446.439633][T28323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.439652][T28323] do_syscall_64+0x174/0x580 [ 1446.439671][T28323] ? trace_irq_disable+0x3b/0x140 [ 1446.439694][T28323] ? clear_bhb_loop+0x40/0x90 [ 1446.439713][T28323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.439731][T28323] RIP: 0033:0x7f6f731ace59 [ 1446.439748][T28323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.439764][T28323] RSP: 002b:00007f6f71406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1446.439798][T28323] RAX: ffffffffffffffda RBX: 00007f6f73425fa0 RCX: 00007f6f731ace59 [ 1446.439812][T28323] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1446.439824][T28323] RBP: 00007f6f73242e6f R08: 0000000000000000 R09: 0000000000000000 [ 1446.439838][T28323] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1446.439850][T28323] R13: 00007f6f73426038 R14: 00007f6f73425fa0 R15: 00007ffde25f74d8 [ 1446.439874][T28323] [ 1446.451388][T28320] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7073'. [ 1446.722210][T14758] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1446.813725][T28333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7079'. [ 1446.813759][T28333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7079'. [ 1446.891922][T14758] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1446.891952][T14758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.891972][T14758] usb 6-1: Product: syz [ 1446.891998][T14758] usb 6-1: Manufacturer: syz [ 1446.892011][T14758] usb 6-1: SerialNumber: syz [ 1446.931843][T14758] usb 6-1: config 0 descriptor?? [ 1447.118583][T28344] wg1 speed is unknown, defaulting to 1000 [ 1447.155949][T14758] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1448.040558][T28359] input: syz1 as /devices/virtual/input/input152 [ 1448.057175][T28359] 9p: Bad value for 'wfdno' [ 1448.162022][ T37] kauditd_printk_skb: 34284 callbacks suppressed [ 1448.163058][ T37] audit: type=1400 audit(1782592938.099:3410116): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1448.163523][ T37] audit: type=1400 audit(1782592938.099:3410117): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sysfs" ino=1 [ 1448.164296][ T37] audit: type=1400 audit(1782592938.109:3410118): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1448.164716][ T37] audit: type=1400 audit(1782592938.129:3410119): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1448.227680][ T37] audit: type=1400 audit(1782592938.189:3410120): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=28322 comm="syz.5.7076" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1448.228061][ T37] audit: type=1400 audit(1782592938.189:3410122): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28363 comm="syz.8.7087" name="newroot" dev="tmpfs" ino=2 [ 1448.228510][ T37] audit: type=1400 audit(1782592938.199:3410123): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28363 comm="syz.8.7087" name="/" dev="proc" ino=1 [ 1448.228710][ T37] audit: type=1400 audit(1782592938.199:3410124): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28363 comm="syz.8.7087" name="/" dev="proc" ino=1 [ 1448.228883][ T37] audit: type=1400 audit(1782592938.189:3410121): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=28322 comm="syz.5.7076" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1448.229150][ T37] audit: type=1400 audit(1782592938.199:3410125): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=28322 comm="syz.5.7076" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1448.372674][T28365] FAULT_INJECTION: forcing a failure. [ 1448.372674][T28365] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.372784][T28365] CPU: 0 UID: 0 PID: 28365 Comm: syz.8.7087 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1448.372812][T28365] Tainted: [L]=SOFTLOCKUP [ 1448.372820][T28365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1448.372832][T28365] Call Trace: [ 1448.372840][T28365] [ 1448.372848][T28365] dump_stack_lvl+0xe8/0x150 [ 1448.372874][T28365] should_fail_ex+0x467/0x600 [ 1448.372904][T28365] should_failslab+0xa8/0x100 [ 1448.372936][T28365] __kvmalloc_node_noprof+0x16a/0x900 [ 1448.372962][T28365] ? io_alloc_cache_init+0x42/0x140 [ 1448.372986][T28365] io_alloc_cache_init+0x42/0x140 [ 1448.373007][T28365] io_ring_ctx_alloc+0x522/0xc60 [ 1448.373033][T28365] io_uring_create+0x50/0x990 [ 1448.373058][T28365] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1448.373082][T28365] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1448.373108][T28365] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1448.373138][T28365] ? __pfx_ksys_write+0x10/0x10 [ 1448.373167][T28365] ? rcu_is_watching+0x15/0xb0 [ 1448.373194][T28365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.373215][T28365] do_syscall_64+0x174/0x580 [ 1448.373233][T28365] ? clear_bhb_loop+0x40/0x90 [ 1448.373253][T28365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.373273][T28365] RIP: 0033:0x7f92dbe0ce59 [ 1448.373289][T28365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.373306][T28365] RSP: 002b:00007f92da044fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1448.373327][T28365] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f92dbe0ce59 [ 1448.373342][T28365] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 0000000000007840 [ 1448.373355][T28365] RBP: 00007f92da045090 R08: 0000000000000000 R09: 0000000000000101 [ 1448.373368][T28365] R10: 0000200000000200 R11: 0000000000000206 R12: 0000200000000180 [ 1448.373381][T28365] R13: 0000200000000200 R14: 0000200000000100 R15: 00007ffddefa1078 [ 1448.373402][T28365] [ 1448.932723][ T5794] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1448.971139][T14186] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 1448.971185][T14186] Bluetooth: hci2: unexpected event for opcode 0x204b [ 1449.578715][T14758] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1449.580570][ T5794] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1449.580598][ T5794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.614551][ T5794] usb 9-1: config 0 descriptor?? [ 1449.616253][T14758] usb 6-1: USB disconnect, device number 2 [ 1449.743983][ T5794] cp210x 9-1:0.0: cp210x converter detected [ 1449.875739][T28376] ip6gre1: entered promiscuous mode [ 1449.875762][T28376] ip6gre1: entered allmulticast mode [ 1449.902196][ T5722] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 1449.986226][ T5794] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1450.057538][ T5722] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1450.057589][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1450.057617][ T5722] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1450.057643][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 8 [ 1450.077095][ T5722] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1450.077136][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1450.077161][ T5722] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1450.077186][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 8 [ 1450.084031][ T5722] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1450.084076][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1450.084102][ T5722] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1450.084126][ T5722] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 8 [ 1450.098192][ T5722] usb 4-1: string descriptor 0 read error: -22 [ 1450.098283][ T5722] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1450.098305][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.141683][ T5722] adutux 4-1:168.0: interrupt endpoints not found [ 1450.372746][T24670] usb 4-1: USB disconnect, device number 82 [ 1450.463220][ T5722] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1450.532352][T16902] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1450.614045][ T5722] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1450.614073][ T5722] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1450.614090][ T5722] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1450.614109][ T5722] usb 7-1: config 0 has no interface number 0 [ 1450.614142][ T5722] usb 7-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1450.614164][ T5722] usb 7-1: config 0 interface 104 has no altsetting 1 [ 1450.616817][ T5722] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1450.616845][ T5722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.616864][ T5722] usb 7-1: Product: syz [ 1450.616877][ T5722] usb 7-1: Manufacturer: syz [ 1450.616891][ T5722] usb 7-1: SerialNumber: syz [ 1450.619498][ T5722] usb 7-1: config 0 descriptor?? [ 1450.623471][ T5722] asix 7-1:0.104: probe with driver asix failed with error -22 [ 1450.662362][T16902] usb 6-1: device descriptor read/64, error -71 [ 1450.838907][ T5794] usb 7-1: USB disconnect, device number 22 [ 1450.902236][T16902] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1451.119520][T16902] usb 6-1: device descriptor read/64, error -71 [ 1451.314844][T16902] usb usb6-port1: attempt power cycle [ 1451.487806][T28397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7100'. [ 1451.652232][T16902] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1451.672936][T16902] usb 6-1: device descriptor read/8, error -71 [ 1451.699713][T24670] usb 9-1: USB disconnect, device number 49 [ 1451.710031][T24670] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1451.710370][T24670] cp210x 9-1:0.0: device disconnected [ 1451.912187][T16902] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1451.932956][T16902] usb 6-1: device descriptor read/8, error -71 [ 1452.042566][T16902] usb usb6-port1: unable to enumerate USB device [ 1452.170067][T14186] Bluetooth: hci6: connection err: -111 [ 1452.420418][T28421] netlink: 83 bytes leftover after parsing attributes in process `syz.6.7110'. [ 1452.531939][T28422] wg1 speed is unknown, defaulting to 1000 [ 1452.782185][ T5794] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1452.935145][ T5794] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1452.935169][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.939714][ T5794] usb 7-1: config 0 descriptor?? [ 1453.163117][ T37] kauditd_printk_skb: 27942 callbacks suppressed [ 1453.163153][ T37] audit: type=1400 audit(1782592943.149:3428894): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=28424 comm="syz.6.7111" opid=28424 ocomm="syz.6.7111" [ 1453.163378][ T37] audit: type=1400 audit(1782592943.159:3428895): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=28424 comm="syz.6.7111" opid=28424 ocomm="syz.6.7111" [ 1453.163577][ T37] audit: type=1400 audit(1782592943.159:3428896): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz.6.7111" name="newroot" dev="tmpfs" ino=2 [ 1453.163755][ T37] audit: type=1400 audit(1782592943.159:3428897): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz.6.7111" name="/" dev="devtmpfs" ino=1 [ 1453.163931][ T37] audit: type=1400 audit(1782592943.159:3428898): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz.6.7111" name="cpu" dev="devtmpfs" ino=85 [ 1453.164072][ T37] audit: type=1400 audit(1782592943.159:3428899): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz.6.7111" name="0" dev="devtmpfs" ino=86 [ 1453.164250][ T37] audit: type=1400 audit(1782592943.159:3428900): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=28424 comm="syz.6.7111" name="msr" dev="devtmpfs" ino=87 [ 1453.164416][ T37] audit: type=1400 audit(1782592943.159:3428901): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=28424 comm="syz.6.7111" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 [ 1453.300530][ T37] audit: type=1400 audit(1782592943.289:3428902): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz.6.7111" name="newroot" dev="tmpfs" ino=2 [ 1453.470751][ T37] audit: type=1400 audit(1782592943.289:3428903): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28424 comm="syz.6.7111" name="/" dev="proc" ino=1 [ 1453.723513][T14758] usb 7-1: USB disconnect, device number 23 [ 1454.021884][T28434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7113'. [ 1454.021915][T28434] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7113'. [ 1454.172303][ T5794] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1454.338485][ T5794] usb 6-1: Using ep0 maxpacket: 16 [ 1454.340082][ T5794] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.340106][ T5794] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1454.341053][ T5794] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1454.341155][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1454.341175][ T5794] usb 6-1: SerialNumber: syz [ 1454.923500][ T5794] usb 6-1: 0:2 : does not exist [ 1455.184466][T28449] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7116'. [ 1455.184494][T28449] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7116'. [ 1455.184560][T28449] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7116'. [ 1456.176999][T28460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7120'. [ 1456.312187][T24054] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1456.412553][T26323] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1456.466491][T24054] usb 9-1: config 0 has an invalid interface number: 104 but max is 1 [ 1456.466519][T24054] usb 9-1: config 0 has an invalid interface number: 104 but max is 1 [ 1456.466538][T24054] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1456.466558][T24054] usb 9-1: config 0 has no interface number 0 [ 1456.466590][T24054] usb 9-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1456.466611][T24054] usb 9-1: config 0 interface 104 has no altsetting 1 [ 1456.470457][T24054] usb 9-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1456.470485][T24054] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.470505][T24054] usb 9-1: Product: syz [ 1456.470519][T24054] usb 9-1: Manufacturer: syz [ 1456.470533][T24054] usb 9-1: SerialNumber: syz [ 1456.519959][T24054] usb 9-1: config 0 descriptor?? [ 1456.565133][T24054] asix 9-1:0.104: probe with driver asix failed with error -22 [ 1456.585107][T26323] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1456.601121][T26323] usb 7-1: config 66 has an invalid interface number: 116 but max is 1 [ 1456.601147][T26323] usb 7-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.601167][T26323] usb 7-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 1456.601188][T26323] usb 7-1: config 66 has no interface number 0 [ 1456.601252][T26323] usb 7-1: too many endpoints for config 66 interface 116 altsetting 99: 112, using maximum allowed: 30 [ 1456.601286][T26323] usb 7-1: config 66 interface 116 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 1456.601313][T26323] usb 7-1: config 66 interface 116 has no altsetting 0 [ 1456.625842][T26323] usb 7-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1456.625873][T26323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.625892][T26323] usb 7-1: Product: syz [ 1456.626384][T26323] usb 7-1: Manufacturer: syz [ 1456.626401][T26323] usb 7-1: SerialNumber: syz [ 1457.139475][ T5794] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1457.151121][ T5794] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1457.226224][ T5794] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1457.322048][T14758] usb 9-1: USB disconnect, device number 50 [ 1457.334405][ T5794] usb 6-1: USB disconnect, device number 7 [ 1457.384125][T28470] tipc: Enabling of bearer rejected, failed to enable media [ 1457.651738][T28481] binder: 28480:28481 ioctl c028644b 200000000240 returned -22 [ 1457.653253][T28481] binder: 28480:28481 ioctl c008644c 200000000280 returned -22 [ 1457.660549][T28481] binder: 28480:28481 ioctl 5000940c 0 returned -22 [ 1457.984537][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1458.172285][ T37] kauditd_printk_skb: 14700 callbacks suppressed [ 1458.172302][ T37] audit: type=1400 audit(1782592948.159:3440928): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="loop5" dev="sysfs" ino=15743 [ 1458.172337][ T37] audit: type=1400 audit(1782592948.159:3440929): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1458.172855][ T37] audit: type=1400 audit(1782592948.159:3440930): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sysfs" ino=1 [ 1458.172886][ T37] audit: type=1400 audit(1782592948.159:3440931): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1458.172912][ T37] audit: type=1400 audit(1782592948.169:3440932): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1458.172942][ T37] audit: type=1400 audit(1782592948.169:3440933): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="block" dev="sysfs" ino=13338 [ 1458.173761][ T37] audit: type=1400 audit(1782592948.169:3440934): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="loop5" dev="sysfs" ino=15743 [ 1458.173796][ T37] audit: type=1400 audit(1782592948.169:3440935): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="slaves" dev="sysfs" ino=15788 [ 1458.173827][ T37] audit: type=1400 audit(1782592948.169:3440936): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1458.174341][ T37] audit: type=1400 audit(1782592948.169:3440937): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sysfs" ino=1 [ 1458.970221][ T5326] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1459.287445][T26323] usb 7-1: USB disconnect, device number 24 [ 1459.342388][ T5326] usb 6-1: Using ep0 maxpacket: 16 [ 1459.345407][ T5326] usb 6-1: config 8 has an invalid interface number: 16 but max is 2 [ 1459.345434][ T5326] usb 6-1: config 8 has an invalid interface number: 134 but max is 2 [ 1459.345455][ T5326] usb 6-1: config 8 has an invalid interface number: 226 but max is 2 [ 1459.345474][ T5326] usb 6-1: config 8 has no interface number 0 [ 1459.345490][ T5326] usb 6-1: config 8 has no interface number 1 [ 1459.345505][ T5326] usb 6-1: config 8 has no interface number 2 [ 1459.345550][ T5326] usb 6-1: config 8 interface 16 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1459.345575][ T5326] usb 6-1: config 8 interface 16 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1459.345595][ T5326] usb 6-1: config 8 interface 16 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1459.345618][ T5326] usb 6-1: config 8 interface 16 altsetting 2 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1459.345642][ T5326] usb 6-1: config 8 interface 16 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1459.345666][ T5326] usb 6-1: config 8 interface 16 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1459.345695][ T5326] usb 6-1: config 8 interface 134 altsetting 144 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1459.345720][ T5326] usb 6-1: config 8 interface 134 altsetting 144 has a duplicate endpoint with address 0x8, skipping [ 1459.345750][ T5326] usb 6-1: config 8 interface 134 altsetting 144 endpoint 0xE has invalid wMaxPacketSize 0 [ 1459.345772][ T5326] usb 6-1: config 8 interface 134 altsetting 144 endpoint 0x5 has invalid maxpacket 576, setting to 64 [ 1459.345797][ T5326] usb 6-1: config 8 interface 134 altsetting 144 has a duplicate endpoint with address 0xE, skipping [ 1459.345818][ T5326] usb 6-1: config 8 interface 134 altsetting 144 has a duplicate endpoint with address 0xC, skipping [ 1459.345842][ T5326] usb 6-1: config 8 interface 134 altsetting 144 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1459.345874][ T5326] usb 6-1: config 8 interface 226 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1459.345895][ T5326] usb 6-1: config 8 interface 226 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1459.345914][ T5326] usb 6-1: config 8 interface 16 has no altsetting 0 [ 1459.345931][ T5326] usb 6-1: config 8 interface 134 has no altsetting 0 [ 1459.345947][ T5326] usb 6-1: config 8 interface 226 has no altsetting 0 [ 1459.350166][ T5326] usb 6-1: New USB device found, idVendor=0930, idProduct=070a, bcdDevice=68.69 [ 1459.350193][ T5326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.350212][ T5326] usb 6-1: Product: ፘꌇ쫺ᆫ锛谌ᖼ㭑胞賫皑匾釒뮍熽ﮐᱫ婜ꡬǤ䊎㽰꾂﨑뎅ڳ﫭溶ﮃꢐ驷㋔萞膺丹닫鹘켼蘕祮붚㉢⁢ [ 1459.350233][ T5326] usb 6-1: Manufacturer: ੼愈磈ጕ现鍗欎┱柿䜡낞鬿瞛쐿齤怘䍃猉扉伦熟甠퐉풀帅傳㭴쿚Ⳏ탯枴ꑈᐴ醪칎䧲睺♹嘌祠⸳朲ᜎ↳耕篑쟘萵瘇꽵掛ՠ뭏ꣳ㉿㢁俫捶ⓧ隫᣹冢퉓Ṹꮁ䅐ᬚ泎㜓櫮䔇톷셺뜾姹㦨덌魑땊䟖캣䏰隕쯎瓨≚吐዇ㆋྡྷꅳ䉹噶⟱芁 [ 1459.350264][ T5326] usb 6-1: SerialNumber: ホᝒ剕詎ꍶׂ޲貄쁊瑕㬀먚쑯壦饁❳Ḯ涓ꌌ㴙瑿ꓽ᭦篁툲抾뫝䛛ᦶ䲅❗퀛쇖뫼 [ 1459.443919][T28493] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1459.630570][T24670] usb 9-1: new low-speed USB device number 51 using dummy_hcd [ 1459.782238][T24670] usb 9-1: device descriptor read/64, error -71 [ 1460.022199][T24670] usb 9-1: new low-speed USB device number 52 using dummy_hcd [ 1460.682424][T24670] usb 9-1: device descriptor read/64, error -71 [ 1460.792606][T24670] usb usb9-port1: attempt power cycle [ 1460.869793][ T5326] usb 6-1: USB disconnect, device number 8 [ 1460.885005][T28510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1461.017858][T28516] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7139'. [ 1461.132224][T24670] usb 9-1: new low-speed USB device number 53 using dummy_hcd [ 1461.445139][T24670] usb 9-1: device descriptor read/8, error -71 [ 1461.682257][T24670] usb 9-1: new low-speed USB device number 54 using dummy_hcd [ 1461.702977][T24670] usb 9-1: device descriptor read/8, error -71 [ 1461.963640][T24670] usb usb9-port1: unable to enumerate USB device [ 1462.006161][T28525] trusted_key: encrypted_key: key user:syz not found [ 1462.067307][T28530] netlink: 160 bytes leftover after parsing attributes in process `syz.5.7143'. [ 1462.067334][T28530] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1462.070800][T28529] netlink: 'syz.5.7143': attribute type 8 has an invalid length. [ 1462.156881][T28533] FAULT_INJECTION: forcing a failure. [ 1462.156881][T28533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.156914][T28533] CPU: 0 UID: 0 PID: 28533 Comm: syz.7.7144 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1462.156939][T28533] Tainted: [L]=SOFTLOCKUP [ 1462.156946][T28533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1462.156959][T28533] Call Trace: [ 1462.156966][T28533] [ 1462.156973][T28533] dump_stack_lvl+0xe8/0x150 [ 1462.157000][T28533] should_fail_ex+0x467/0x600 [ 1462.157030][T28533] _copy_from_user+0x2d/0xb0 [ 1462.157052][T28533] ___sys_sendmsg+0x1c6/0x360 [ 1462.157074][T28533] ? rcu_is_watching+0x15/0xb0 [ 1462.157099][T28533] ? get_pid_task+0x20/0x1f0 [ 1462.157120][T28533] ? __pfx____sys_sendmsg+0x10/0x10 [ 1462.157143][T28533] ? rcu_is_watching+0x15/0xb0 [ 1462.157180][T28533] ? __fget_files+0x2a/0x420 [ 1462.157205][T28533] ? __fget_files+0x3a8/0x420 [ 1462.157231][T28533] __x64_sys_sendmsg+0x1b7/0x290 [ 1462.157254][T28533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1462.157282][T28533] ? rcu_is_watching+0x15/0xb0 [ 1462.157308][T28533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.157327][T28533] do_syscall_64+0x174/0x580 [ 1462.157346][T28533] ? trace_irq_disable+0x3b/0x140 [ 1462.157367][T28533] ? clear_bhb_loop+0x40/0x90 [ 1462.157389][T28533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.157406][T28533] RIP: 0033:0x7f9dfe8ece59 [ 1462.157423][T28533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.157439][T28533] RSP: 002b:00007f9dfcb46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1462.157460][T28533] RAX: ffffffffffffffda RBX: 00007f9dfeb65fa0 RCX: 00007f9dfe8ece59 [ 1462.157474][T28533] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1462.157486][T28533] RBP: 00007f9dfcb46090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.157497][T28533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.157508][T28533] R13: 00007f9dfeb66038 R14: 00007f9dfeb65fa0 R15: 00007fff1559b448 [ 1462.157528][T28533] [ 1462.252174][T26323] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1462.362280][ T5326] usb 9-1: new low-speed USB device number 55 using dummy_hcd [ 1462.425413][T26323] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 1462.425443][T26323] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 1462.425462][T26323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1462.425481][T26323] usb 4-1: config 0 has no interface number 0 [ 1462.425513][T26323] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1462.425535][T26323] usb 4-1: config 0 interface 104 has no altsetting 1 [ 1462.484289][T26323] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1462.484317][T26323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.484335][T26323] usb 4-1: Product: syz [ 1462.484349][T26323] usb 4-1: Manufacturer: syz [ 1462.484361][T26323] usb 4-1: SerialNumber: syz [ 1462.490519][T26323] usb 4-1: config 0 descriptor?? [ 1462.505006][T26323] asix 4-1:0.104: probe with driver asix failed with error -22 [ 1462.652881][T28542] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7148'. [ 1462.741433][ T5681] usb 4-1: USB disconnect, device number 83 [ 1463.162627][ T5326] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1463.183767][ T37] kauditd_printk_skb: 27605 callbacks suppressed [ 1463.183785][ T37] audit: type=1400 audit(1782592953.169:3457380): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1463.183817][ T37] audit: type=1400 audit(1782592953.169:3457381): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1463.183851][ T37] audit: type=1400 audit(1782592953.169:3457382): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1463.183879][ T37] audit: type=1400 audit(1782592953.169:3457383): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=4960 comm="udevd" name="queue" dev="tmpfs" ino=18991 [ 1463.183907][ T37] audit: type=1400 audit(1782592953.169:3457384): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10750 comm="udevd" name="/" dev="sda1" ino=2 [ 1463.183936][ T37] audit: type=1400 audit(1782592953.169:3457385): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4960 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=18991 [ 1463.183964][ T37] audit: type=1400 audit(1782592953.169:3457386): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10750 comm="udevd" name="/" dev="sysfs" ino=1 [ 1463.183992][ T37] audit: type=1400 audit(1782592953.169:3457387): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=4960 comm="udevd" name="queue" dev="tmpfs" ino=18991 [ 1463.184021][ T37] audit: type=1400 audit(1782592953.169:3457388): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10750 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1463.184049][ T37] audit: type=1400 audit(1782592953.169:3457389): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10750 comm="udevd" name="platform" dev="sysfs" ino=48 [ 1463.312184][ T5326] usb 9-1: Using ep0 maxpacket: 32 [ 1463.316335][ T5326] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1463.316366][ T5326] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 32, changing to 9 [ 1463.316404][ T5326] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1463.316425][ T5326] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.332768][ T5326] usb 9-1: config 0 descriptor?? [ 1463.351758][ T5326] hub 9-1:0.0: USB hub found [ 1463.558858][ T5326] hub 9-1:0.0: 1 port detected [ 1463.722632][T28551] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1463.728928][T28551] cramfs: wrong magic [ 1464.778386][T28560] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7154'. [ 1464.803646][T28560] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7154'. [ 1464.806959][T24670] usb 9-1: USB disconnect, device number 56 [ 1465.256356][T28564] trusted_key: encrypted_key: key user:syz not found [ 1466.089331][T28570] FAULT_INJECTION: forcing a failure. [ 1466.089331][T28570] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.089367][T28570] CPU: 0 UID: 0 PID: 28570 Comm: syz.5.7158 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1466.089394][T28570] Tainted: [L]=SOFTLOCKUP [ 1466.089402][T28570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1466.089414][T28570] Call Trace: [ 1466.089421][T28570] [ 1466.089429][T28570] dump_stack_lvl+0xe8/0x150 [ 1466.089455][T28570] should_fail_ex+0x467/0x600 [ 1466.089484][T28570] should_failslab+0xa8/0x100 [ 1466.089511][T28570] kmem_cache_alloc_node_noprof+0x8f/0x710 [ 1466.089544][T28570] ? __alloc_skb+0x1d7/0x7a0 [ 1466.089566][T28570] __alloc_skb+0x1d7/0x7a0 [ 1466.089586][T28570] netlink_sendmsg+0x5d4/0xb40 [ 1466.089609][T28570] ? lock_release+0x4b/0x3c0 [ 1466.089632][T28570] ? lock_release+0x4b/0x3c0 [ 1466.089657][T28570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1466.089680][T28570] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1466.089708][T28570] ? __kernel_text_address+0xd/0x30 [ 1466.089730][T28570] ? unwind_get_return_address+0x4d/0x90 [ 1466.089756][T28570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1466.089778][T28570] sock_sendmsg_nosec+0x13a/0x180 [ 1466.089806][T28570] ____sys_sendmsg+0x565/0x870 [ 1466.089831][T28570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1466.089854][T28570] ? lock_release+0x4b/0x3c0 [ 1466.089878][T28570] ? import_iovec+0x73/0xa0 [ 1466.089900][T28570] ___sys_sendmsg+0x2a5/0x360 [ 1466.089922][T28570] ? rcu_is_watching+0x15/0xb0 [ 1466.089948][T28570] ? get_pid_task+0x20/0x1f0 [ 1466.089967][T28570] ? __pfx____sys_sendmsg+0x10/0x10 [ 1466.089989][T28570] ? rcu_is_watching+0x15/0xb0 [ 1466.090025][T28570] ? __fget_files+0x2a/0x420 [ 1466.090046][T28570] ? __fget_files+0x3a8/0x420 [ 1466.090071][T28570] __x64_sys_sendmsg+0x1b7/0x290 [ 1466.090095][T28570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1466.090123][T28570] ? rcu_is_watching+0x15/0xb0 [ 1466.090150][T28570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.090169][T28570] do_syscall_64+0x174/0x580 [ 1466.090188][T28570] ? trace_irq_disable+0x3b/0x140 [ 1466.090210][T28570] ? clear_bhb_loop+0x40/0x90 [ 1466.090231][T28570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.090249][T28570] RIP: 0033:0x7f7da159ce59 [ 1466.090266][T28570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1466.090282][T28570] RSP: 002b:00007f7d9f7ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1466.090302][T28570] RAX: ffffffffffffffda RBX: 00007f7da1815fa0 RCX: 00007f7da159ce59 [ 1466.090316][T28570] RDX: 0000000004020044 RSI: 0000200000000280 RDI: 0000000000000003 [ 1466.090328][T28570] RBP: 00007f7d9f7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.090340][T28570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1466.090350][T28570] R13: 00007f7da1816038 R14: 00007f7da1815fa0 R15: 00007fff7d62cb58 [ 1466.090369][T28570] [ 1466.742280][T24054] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1466.892168][T24054] usb 6-1: Using ep0 maxpacket: 16 [ 1466.900663][T24054] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 1466.900689][T24054] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.900707][T24054] usb 6-1: config 0 has no interface number 0 [ 1466.900739][T24054] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 1466.900763][T24054] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1466.900787][T24054] usb 6-1: config 0 interface 98 has no altsetting 0 [ 1467.048358][T24054] usb 6-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 1467.048389][T24054] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.048408][T24054] usb 6-1: Product: syz [ 1467.048421][T24054] usb 6-1: Manufacturer: syz [ 1467.048444][T24054] usb 6-1: SerialNumber: syz [ 1467.055530][T24054] usb 6-1: config 0 descriptor?? [ 1467.062734][T28573] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1467.062910][T28573] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1467.211468][T28584] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1467.217679][T28584] cramfs: wrong magic [ 1467.775083][T28573] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1467.815965][T28573] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1468.051039][T28588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7165'. [ 1468.051184][T28588] FAULT_INJECTION: forcing a failure. [ 1468.051184][T28588] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.051213][T28588] CPU: 1 UID: 0 PID: 28588 Comm: syz.8.7165 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1468.051237][T28588] Tainted: [L]=SOFTLOCKUP [ 1468.051243][T28588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1468.051256][T28588] Call Trace: [ 1468.051263][T28588] [ 1468.051271][T28588] dump_stack_lvl+0xe8/0x150 [ 1468.051299][T28588] should_fail_ex+0x467/0x600 [ 1468.051328][T28588] should_failslab+0xa8/0x100 [ 1468.051355][T28588] kmem_cache_alloc_node_noprof+0x8f/0x710 [ 1468.051379][T28588] ? __alloc_skb+0x1d7/0x7a0 [ 1468.051401][T28588] __alloc_skb+0x1d7/0x7a0 [ 1468.051422][T28588] netlink_ack+0x136/0xb30 [ 1468.051442][T28588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1468.051467][T28588] ? ref_tracker_free+0x668/0x820 [ 1468.051497][T28588] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 1468.051608][T28588] ? __pfx_ref_tracker_free+0x10/0x10 [ 1468.051634][T28588] ? __asan_memcpy+0x40/0x70 [ 1468.051657][T28588] netlink_rcv_skb+0x2a4/0x4a0 [ 1468.051679][T28588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1468.051706][T28588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1468.051731][T28588] ? netlink_deliver_tap+0x2e/0x1b0 [ 1468.051755][T28588] genl_rcv+0x28/0x40 [ 1468.051789][T28588] netlink_unicast+0x7f5/0x990 [ 1468.051813][T28588] netlink_sendmsg+0x813/0xb40 [ 1468.051834][T28588] ? lock_release+0x4b/0x3c0 [ 1468.051857][T28588] ? lock_release+0x4b/0x3c0 [ 1468.051881][T28588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1468.051905][T28588] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1468.051931][T28588] ? __kernel_text_address+0xd/0x30 [ 1468.051954][T28588] ? unwind_get_return_address+0x4d/0x90 [ 1468.051979][T28588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1468.052000][T28588] sock_sendmsg_nosec+0x13a/0x180 [ 1468.052028][T28588] ____sys_sendmsg+0x565/0x870 [ 1468.052053][T28588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1468.052077][T28588] ? lock_release+0x4b/0x3c0 [ 1468.052102][T28588] ? import_iovec+0x73/0xa0 [ 1468.052122][T28588] ___sys_sendmsg+0x2a5/0x360 [ 1468.052142][T28588] ? rcu_is_watching+0x15/0xb0 [ 1468.052167][T28588] ? get_pid_task+0x20/0x1f0 [ 1468.052187][T28588] ? __pfx____sys_sendmsg+0x10/0x10 [ 1468.052211][T28588] ? rcu_is_watching+0x15/0xb0 [ 1468.052245][T28588] ? __fget_files+0x2a/0x420 [ 1468.052268][T28588] ? __fget_files+0x3a8/0x420 [ 1468.052291][T28588] __x64_sys_sendmsg+0x1b7/0x290 [ 1468.052314][T28588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1468.052341][T28588] ? rcu_is_watching+0x15/0xb0 [ 1468.052368][T28588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.052386][T28588] do_syscall_64+0x174/0x580 [ 1468.052402][T28588] ? trace_irq_disable+0x3b/0x140 [ 1468.052425][T28588] ? clear_bhb_loop+0x40/0x90 [ 1468.052445][T28588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.052463][T28588] RIP: 0033:0x7f92dbe0ce59 [ 1468.052479][T28588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.052496][T28588] RSP: 002b:00007f92da066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1468.052516][T28588] RAX: ffffffffffffffda RBX: 00007f92dc085fa0 RCX: 00007f92dbe0ce59 [ 1468.052530][T28588] RDX: 0000000000000000 RSI: 0000200000003540 RDI: 0000000000000003 [ 1468.052543][T28588] RBP: 00007f92da066090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.052555][T28588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.052566][T28588] R13: 00007f92dc086038 R14: 00007f92dc085fa0 R15: 00007ffddefa1078 [ 1468.052588][T28588] [ 1468.196173][ T37] kauditd_printk_skb: 12824 callbacks suppressed [ 1468.196191][ T37] audit: type=1400 audit(1782592958.179:3466701): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="loop7" dev="sysfs" ino=15989 [ 1468.196227][ T37] audit: type=1400 audit(1782592958.189:3466703): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4960 comm="udevd" name="uevent" dev="sysfs" ino=15990 [ 1468.196255][ T37] audit: type=1400 audit(1782592958.189:3466704): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4960 comm="udevd" path="/sys/devices/virtual/block/loop7/uevent" dev="sysfs" ino=15990 [ 1468.197378][ T37] audit: type=1400 audit(1782592958.189:3466705): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4960 comm="udevd" path="/sys/devices/virtual/block/loop7/uevent" dev="sysfs" ino=15990 [ 1468.197416][ T37] audit: type=1400 audit(1782592958.189:3466706): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1468.197445][ T37] audit: type=1400 audit(1782592958.189:3466707): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sysfs" ino=1 [ 1468.197476][ T37] audit: type=1400 audit(1782592958.189:3466708): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1468.197505][ T37] audit: type=1400 audit(1782592958.189:3466709): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1468.197535][ T37] audit: type=1400 audit(1782592958.189:3466710): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="block" dev="sysfs" ino=13338 [ 1468.197566][ T37] audit: type=1400 audit(1782592958.189:3466711): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="loop7" dev="sysfs" ino=15989 [ 1468.231689][T28594] veth0_to_batadv: entered allmulticast mode [ 1468.247662][T24054] asix 6-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1468.247838][T24054] asix 6-1:0.98: probe with driver asix failed with error -71 [ 1468.352183][ T5794] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1468.505516][ T5794] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 1468.505544][ T5794] usb 4-1: config 127 has no interface number 0 [ 1468.505586][ T5794] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1468.520047][ T5794] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1468.520077][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.520104][ T5794] usb 4-1: Product: syz [ 1468.520119][ T5794] usb 4-1: Manufacturer: syz [ 1468.520198][ T5794] usb 4-1: SerialNumber: syz [ 1468.530583][T28590] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1468.532199][T24054] usb 6-1: USB disconnect, device number 9 [ 1468.730633][T28596] dummy0: entered promiscuous mode [ 1468.738944][T28596] erspan0: entered promiscuous mode [ 1468.739944][T28596] debugfs: 'hsr1' already exists in 'hsr' [ 1468.739963][T28596] Cannot create hsr debugfs directory [ 1468.740167][T28596] hsr1: entered allmulticast mode [ 1468.740182][T28596] dummy0: entered allmulticast mode [ 1468.740231][T28596] erspan0: entered allmulticast mode [ 1470.000464][ T5794] asix 4-1:127.57: probe with driver asix failed with error -71 [ 1470.044305][ T5794] usb 4-1: USB disconnect, device number 84 [ 1470.102207][T24054] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 1470.256845][T24054] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.256872][T24054] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1470.300677][T24054] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1470.300707][T24054] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.300726][T24054] usb 9-1: Product: syz [ 1470.300740][T24054] usb 9-1: Manufacturer: syz [ 1470.300755][T24054] usb 9-1: SerialNumber: syz [ 1470.355955][T24054] usb 9-1: 0:2 : does not exist [ 1472.817790][T28605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1473.063434][ T5722] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1473.202921][ T37] kauditd_printk_skb: 18597 callbacks suppressed [ 1473.202943][ T37] audit: type=1400 audit(1782592963.189:3476617): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="block" dev="sysfs" ino=13338 [ 1473.204661][ T37] audit: type=1400 audit(1782592963.199:3476618): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="loop3" dev="sysfs" ino=15497 [ 1473.207010][ T37] audit: type=1400 audit(1782592963.199:3476619): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4960 comm="udevd" path="/sys/devices/virtual/block/loop3/uevent" dev="sysfs" ino=15498 [ 1473.208886][ T37] audit: type=1400 audit(1782592963.199:3476620): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1473.209863][ T37] audit: type=1400 audit(1782592963.199:3476621): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sysfs" ino=1 [ 1473.210897][ T37] audit: type=1400 audit(1782592963.199:3476622): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20737 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1473.211290][ T37] audit: type=1400 audit(1782592963.199:3476623): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1473.215337][ T37] audit: type=1400 audit(1782592963.199:3476625): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1473.219933][ T37] audit: type=1400 audit(1782592963.199:3476624): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20737 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1473.237956][ T37] audit: type=1400 audit(1782592963.219:3476626): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1202 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.100 dest=49596 netif=eth0 [ 1473.697212][T28634] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1473.703825][T28634] cramfs: wrong magic [ 1473.886395][ T5722] usb 6-1: Using ep0 maxpacket: 32 [ 1473.887147][ T5722] usb 6-1: device descriptor read/all, error -71 [ 1474.127776][T28640] netlink: 180 bytes leftover after parsing attributes in process `syz.7.7178'. [ 1474.188442][T24054] usb 9-1: USB disconnect, device number 57 [ 1474.374799][T28644] FAULT_INJECTION: forcing a failure. [ 1474.374799][T28644] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.374834][T28644] CPU: 0 UID: 0 PID: 28644 Comm: syz.3.7182 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1474.374860][T28644] Tainted: [L]=SOFTLOCKUP [ 1474.374868][T28644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1474.374880][T28644] Call Trace: [ 1474.374887][T28644] [ 1474.374895][T28644] dump_stack_lvl+0xe8/0x150 [ 1474.374921][T28644] should_fail_ex+0x467/0x600 [ 1474.374952][T28644] should_failslab+0xa8/0x100 [ 1474.374979][T28644] __kmalloc_node_noprof+0xe7/0x820 [ 1474.375003][T28644] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 1474.375029][T28644] __vmalloc_node_range_noprof+0x5d9/0x1730 [ 1474.375052][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.375085][T28644] ? do_raw_spin_lock+0x12b/0x2f0 [ 1474.375114][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.375160][T28644] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1474.375183][T28644] ? trace_irq_enable+0x3b/0x140 [ 1474.375207][T28644] ? do_raw_spin_lock+0x12b/0x2f0 [ 1474.375226][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.375253][T28644] ? vc_uniscr_check+0x18f/0x7b0 [ 1474.375373][T28644] vzalloc_noprof+0xb2/0xe0 [ 1474.375392][T28644] ? vc_uniscr_check+0x18f/0x7b0 [ 1474.375417][T28644] vc_uniscr_check+0x18f/0x7b0 [ 1474.375443][T28644] ? atomic_notifier_call_chain+0x26/0x180 [ 1474.375470][T28644] do_con_write+0xd69/0x5960 [ 1474.375497][T28644] ? do_con_write+0xff1/0x5960 [ 1474.375531][T28644] ? __pfx_do_con_write+0x10/0x10 [ 1474.375550][T28644] ? do_raw_spin_lock+0x12b/0x2f0 [ 1474.375570][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.375595][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.375621][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.375657][T28644] ? do_raw_spin_lock+0x12b/0x2f0 [ 1474.375676][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.375706][T28644] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1474.375735][T28644] con_write+0x31/0x2e0 [ 1474.375756][T28644] n_tty_write+0xd4f/0x11e0 [ 1474.375779][T28644] ? __might_fault+0xaf/0x130 [ 1474.375810][T28644] ? __pfx_n_tty_write+0x10/0x10 [ 1474.375834][T28644] ? trace_kmalloc+0x2a/0xf0 [ 1474.375854][T28644] ? __pfx_woken_wake_function+0x10/0x10 [ 1474.375876][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.375902][T28644] ? kfree+0x4d/0x6c0 [ 1474.375924][T28644] ? __pfx_n_tty_write+0x10/0x10 [ 1474.375949][T28644] file_tty_write+0x50b/0x980 [ 1474.375973][T28644] vfs_write+0x61e/0xbb0 [ 1474.376001][T28644] ? __pfx_vfs_write+0x10/0x10 [ 1474.376030][T28644] ? __fget_files+0x2a/0x420 [ 1474.376056][T28644] ksys_write+0x156/0x270 [ 1474.376082][T28644] ? __pfx_ksys_write+0x10/0x10 [ 1474.376110][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.376136][T28644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.376155][T28644] do_syscall_64+0x174/0x580 [ 1474.376172][T28644] ? trace_irq_disable+0x3b/0x140 [ 1474.376192][T28644] ? clear_bhb_loop+0x40/0x90 [ 1474.376212][T28644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.376230][T28644] RIP: 0033:0x7f6f731ace59 [ 1474.376247][T28644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.376263][T28644] RSP: 002b:00007f6f71406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1474.376282][T28644] RAX: ffffffffffffffda RBX: 00007f6f73425fa0 RCX: 00007f6f731ace59 [ 1474.376297][T28644] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000006 [ 1474.376308][T28644] RBP: 00007f6f71406090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.376318][T28644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.376329][T28644] R13: 00007f6f73426038 R14: 00007f6f73425fa0 R15: 00007ffde25f74d8 [ 1474.376349][T28644] [ 1474.378669][T28644] syz.3.7182: vmalloc error: size 8192, failed to allocated page array size 16, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1474.378736][T28644] CPU: 0 UID: 0 PID: 28644 Comm: syz.3.7182 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1474.378763][T28644] Tainted: [L]=SOFTLOCKUP [ 1474.378771][T28644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1474.378783][T28644] Call Trace: [ 1474.378790][T28644] [ 1474.378798][T28644] dump_stack_lvl+0xe8/0x150 [ 1474.378824][T28644] warn_alloc+0x24c/0x270 [ 1474.378851][T28644] ? __pfx_warn_alloc+0x10/0x10 [ 1474.378877][T28644] ? __kmalloc_node_noprof+0x39b/0x820 [ 1474.378901][T28644] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 1474.378926][T28644] __vmalloc_node_range_noprof+0xa81/0x1730 [ 1474.378949][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.378987][T28644] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1474.379010][T28644] ? trace_irq_enable+0x3b/0x140 [ 1474.379033][T28644] ? do_raw_spin_lock+0x12b/0x2f0 [ 1474.379053][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.379079][T28644] ? vc_uniscr_check+0x18f/0x7b0 [ 1474.379108][T28644] vzalloc_noprof+0xb2/0xe0 [ 1474.379129][T28644] ? vc_uniscr_check+0x18f/0x7b0 [ 1474.379156][T28644] vc_uniscr_check+0x18f/0x7b0 [ 1474.379185][T28644] ? atomic_notifier_call_chain+0x26/0x180 [ 1474.379208][T28644] do_con_write+0xd69/0x5960 [ 1474.379237][T28644] ? do_con_write+0xff1/0x5960 [ 1474.379273][T28644] ? __pfx_do_con_write+0x10/0x10 [ 1474.379296][T28644] ? do_raw_spin_lock+0x12b/0x2f0 [ 1474.379314][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.379341][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.379371][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.379399][T28644] ? do_raw_spin_lock+0x12b/0x2f0 [ 1474.379419][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.379450][T28644] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1474.379482][T28644] con_write+0x31/0x2e0 [ 1474.379505][T28644] n_tty_write+0xd4f/0x11e0 [ 1474.379531][T28644] ? __might_fault+0xaf/0x130 [ 1474.379561][T28644] ? __pfx_n_tty_write+0x10/0x10 [ 1474.379584][T28644] ? trace_kmalloc+0x2a/0xf0 [ 1474.379604][T28644] ? __pfx_woken_wake_function+0x10/0x10 [ 1474.379625][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.379655][T28644] ? kfree+0x4d/0x6c0 [ 1474.379675][T28644] ? __pfx_n_tty_write+0x10/0x10 [ 1474.379697][T28644] file_tty_write+0x50b/0x980 [ 1474.379717][T28644] vfs_write+0x61e/0xbb0 [ 1474.379745][T28644] ? __pfx_vfs_write+0x10/0x10 [ 1474.379770][T28644] ? __fget_files+0x2a/0x420 [ 1474.379792][T28644] ksys_write+0x156/0x270 [ 1474.379822][T28644] ? __pfx_ksys_write+0x10/0x10 [ 1474.379846][T28644] ? rcu_is_watching+0x15/0xb0 [ 1474.379872][T28644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.379889][T28644] do_syscall_64+0x174/0x580 [ 1474.379904][T28644] ? trace_irq_disable+0x3b/0x140 [ 1474.379924][T28644] ? clear_bhb_loop+0x40/0x90 [ 1474.379944][T28644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.379963][T28644] RIP: 0033:0x7f6f731ace59 [ 1474.379980][T28644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.379995][T28644] RSP: 002b:00007f6f71406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1474.380012][T28644] RAX: ffffffffffffffda RBX: 00007f6f73425fa0 RCX: 00007f6f731ace59 [ 1474.380026][T28644] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000006 [ 1474.380038][T28644] RBP: 00007f6f71406090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.380050][T28644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.380061][T28644] R13: 00007f6f73426038 R14: 00007f6f73425fa0 R15: 00007ffde25f74d8 [ 1474.380081][T28644] [ 1474.392267][T28644] Mem-Info: [ 1474.392281][T28644] active_anon:43 inactive_anon:11547 isolated_anon:0 [ 1474.392281][T28644] active_file:23886 inactive_file:5586 isolated_file:0 [ 1474.392281][T28644] unevictable:768 dirty:223 writeback:0 [ 1474.392281][T28644] slab_reclaimable:7394 slab_unreclaimable:123620 [ 1474.392281][T28644] mapped:44591 shmem:3842 pagetables:1979 [ 1474.392281][T28644] sec_pagetables:0 bounce:0 [ 1474.392281][T28644] kernel_misc_reclaimable:0 [ 1474.392281][T28644] free:1282152 free_pcp:3325 free_cma:0 [ 1474.392329][T28644] Node 0 active_anon:172kB inactive_anon:46188kB active_file:95544kB inactive_file:22212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178364kB dirty:892kB writeback:0kB shmem:13832kB kernel_stack:14980kB pagetables:7744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1474.392375][T28644] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1474.394417][T28644] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1474.394477][T28644] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1474.394508][T28644] Node 0 DMA32 free:1180252kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:172kB inactive_anon:46288kB active_file:95544kB inactive_file:22212kB unevictable:1536kB writepending:892kB zspages:0kB present:3129332kB managed:2566024kB mlocked:0kB bounce:0kB free_pcp:13276kB local_pcp:4772kB free_cma:0kB [ 1474.394565][T28644] lowmem_reserve[]: 0 0 0 0 0 [ 1474.394605][T28644] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1474.394656][T28644] lowmem_reserve[]: 0 0 0 0 0 [ 1474.394687][T28644] Node 1 Normal free:3932996kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1474.395720][T28644] lowmem_reserve[]: 0 0 0 0 0 [ 1474.395754][T28644] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1474.395859][T28644] Node 0 DMA32: 2041*4kB (UME) 1369*8kB (UME) 1483*16kB (UME) 1228*32kB (UME) 864*64kB (UME) 488*128kB (UME) 303*256kB (UME) 125*512kB (UME) 53*1024kB (UME) 15*2048kB (UME) 184*4096kB (UM) = 1180124kB [ 1474.396003][T28644] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1474.396093][T28644] Node 1 Normal: 5*4kB (UM) 8*8kB (UM) 11*16kB (UM) 6*32kB (UM) 8*64kB (UM) 3*128kB (UM) 6*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 959*4096kB (UM) = 3932996kB [ 1474.396232][T28644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1474.396249][T28644] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1474.396265][T28644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1474.396281][T28644] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1474.396296][T28644] 33360 total pagecache pages [ 1474.396304][T28644] 0 pages in swap cache [ 1474.396312][T28644] Free swap = 124996kB [ 1474.396320][T28644] Total swap = 124996kB [ 1474.396327][T28644] 2097051 pages RAM [ 1474.396334][T28644] 0 pages HighMem/MovableOnly [ 1474.396342][T28644] 423882 pages reserved [ 1474.396348][T28644] 0 pages cma reserved [ 1474.502222][ T5722] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1474.652177][ T5722] usb 6-1: Using ep0 maxpacket: 16 [ 1474.661570][ T5722] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1474.661596][ T5722] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.661615][ T5722] usb 6-1: config 0 has no interface number 0 [ 1474.675674][ T5722] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1474.675706][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.675725][ T5722] usb 6-1: Product: syz [ 1474.675745][ T5722] usb 6-1: Manufacturer: syz [ 1474.675759][ T5722] usb 6-1: SerialNumber: syz [ 1474.689510][ T5722] usb 6-1: config 0 descriptor?? [ 1475.058146][T28657] overlayfs: missing 'lowerdir' [ 1475.632220][ T5722] usb 6-1: USB disconnect, device number 11 [ 1476.002217][T24054] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1476.395210][T24054] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1476.397500][T24054] usb 4-1: config 13 has an invalid interface number: 50 but max is 3 [ 1476.397525][T24054] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.397545][T24054] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 1476.397564][T24054] usb 4-1: config 13 has no interface number 0 [ 1476.397597][T24054] usb 4-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1476.397622][T24054] usb 4-1: config 13 interface 50 has no altsetting 0 [ 1476.400277][T24054] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 1476.400303][T24054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.400322][T24054] usb 4-1: Product: syz [ 1476.400336][T24054] usb 4-1: Manufacturer: syz [ 1476.400349][T24054] usb 4-1: SerialNumber: syz [ 1476.655169][T28681] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1476.660542][T28681] cramfs: wrong magic [ 1477.936295][T24054] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1477.938725][ T3980] usb 4-1: Failed to submit usb control message: -71 [ 1477.938753][ T3980] usb 4-1: unable to send the bmi data to the device: -71 [ 1477.938769][ T3980] usb 4-1: unable to get target info from device [ 1477.938791][ T3980] usb 4-1: could not get target info (-71) [ 1477.938849][ T3980] usb 4-1: could not probe fw (-71) [ 1477.983700][T24054] usb 4-1: USB disconnect, device number 85 [ 1478.242592][ T5794] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 1478.350370][ T37] kauditd_printk_skb: 9861 callbacks suppressed [ 1478.350576][ T37] audit: type=1400 audit(1782592968.149:3486314): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1478.351303][ T37] audit: type=1400 audit(1782592968.149:3486315): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1478.351850][ T37] audit: type=1400 audit(1782592968.149:3486316): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="block" dev="sysfs" ino=13338 [ 1478.492263][ T37] audit: type=1400 audit(1782592968.149:3486317): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="loop5" dev="sysfs" ino=15743 [ 1478.492308][ T37] audit: type=1400 audit(1782592968.149:3486318): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="mq" dev="sysfs" ino=15839 [ 1478.492339][ T37] audit: type=1400 audit(1782592968.149:3486319): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1478.492415][ T37] audit: type=1400 audit(1782592968.149:3486320): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sysfs" ino=1 [ 1478.492446][ T37] audit: type=1400 audit(1782592968.149:3486321): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1478.492476][ T37] audit: type=1400 audit(1782592968.149:3486322): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1478.492505][ T37] audit: type=1400 audit(1782592968.149:3486323): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="block" dev="sysfs" ino=13338 [ 1478.698820][ T5794] usb 9-1: config 0 has an invalid interface number: 104 but max is 1 [ 1478.698847][ T5794] usb 9-1: config 0 has an invalid interface number: 104 but max is 1 [ 1478.698866][ T5794] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1478.698886][ T5794] usb 9-1: config 0 has no interface number 0 [ 1478.698918][ T5794] usb 9-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1478.698939][ T5794] usb 9-1: config 0 interface 104 has no altsetting 1 [ 1478.704409][ T5794] usb 9-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1478.704437][ T5794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.704456][ T5794] usb 9-1: Product: syz [ 1478.704470][ T5794] usb 9-1: Manufacturer: syz [ 1478.704484][ T5794] usb 9-1: SerialNumber: syz [ 1478.710875][ T5794] usb 9-1: config 0 descriptor?? [ 1478.715006][ T5794] asix 9-1:0.104: probe with driver asix failed with error -22 [ 1478.802237][T16902] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1478.807740][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.945088][ T5722] usb 9-1: USB disconnect, device number 58 [ 1478.959311][T16902] usb 6-1: Using ep0 maxpacket: 32 [ 1478.993239][T16902] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1478.993270][T16902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.993290][T16902] usb 6-1: Product: syz [ 1478.993305][T16902] usb 6-1: Manufacturer: syz [ 1478.993319][T16902] usb 6-1: SerialNumber: syz [ 1478.997602][T16902] usb 6-1: config 0 descriptor?? [ 1479.653505][T28713] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1479.787832][T16902] airspy 6-1:0.0: usb_control_msg() failed -71 request 0a [ 1479.787858][T16902] airspy 6-1:0.0: Could not detect board [ 1479.787919][T16902] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 1479.822456][T16902] usb 6-1: USB disconnect, device number 12 [ 1480.141027][T28721] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1480.148400][T28721] cramfs: wrong magic [ 1480.933668][T28722] binder: 28720:28722 ioctl c028644b 200000000240 returned -22 [ 1480.941317][T28722] binder: 28720:28722 ioctl c008644c 200000000280 returned -22 [ 1480.944756][T28722] binder: BINDER_SET_CONTEXT_MGR already set [ 1480.944770][T28722] binder: 28720:28722 ioctl 4018620d 200000004a80 returned -16 [ 1481.009831][T28723] binder: 28720:28723 ioctl 5000940c 0 returned -22 [ 1481.639778][T28740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7211'. [ 1481.680634][T28740] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1482.302228][T16902] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1482.455277][T16902] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.455325][T16902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1482.455361][T16902] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 255 [ 1482.455383][T16902] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1482.458513][T16902] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1482.458597][T16902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.458618][T16902] usb 4-1: Product: syz [ 1482.458631][T16902] usb 4-1: Manufacturer: syz [ 1482.458645][T16902] usb 4-1: SerialNumber: syz [ 1482.673946][T16902] cdc_ncm 4-1:1.0: bind() failure [ 1482.677784][T16902] usbtest 4-1:1.0: Linux gadget zero [ 1482.677805][T16902] usbtest 4-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1482.680274][T16902] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1482.680309][T16902] cdc_ncm 4-1:1.1: bind() failure [ 1482.698488][T16902] usbtest 4-1:1.1: couldn't get endpoints, -22 [ 1482.698543][T16902] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 1482.729826][T16902] usb 4-1: USB disconnect, device number 86 [ 1482.882214][T26323] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1483.196042][T26323] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1483.196104][T26323] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.255838][T26323] usb 9-1: config 0 descriptor?? [ 1483.353751][ T37] kauditd_printk_skb: 37465 callbacks suppressed [ 1483.353784][ T37] audit: type=1400 audit(1782592973.349:3502714): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10750 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1483.358187][ T37] audit: type=1400 audit(1782592973.349:3502715): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=10750 comm="udevd" path="/run/udev/data" dev="tmpfs" ino=13 [ 1483.416061][ T37] audit: type=1400 audit(1782592973.349:3502716): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10750 comm="udevd" name="/" dev="sda1" ino=2 [ 1483.416951][ T37] audit: type=1400 audit(1782592973.349:3502717): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1483.420921][ T37] audit: type=1400 audit(1782592973.409:3502718): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10750 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1483.421352][ T37] audit: type=1400 audit(1782592973.409:3502719): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1483.532483][T26323] cp210x 9-1:0.0: cp210x converter detected [ 1483.564592][ T37] audit: type=1400 audit(1782592973.559:3502721): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=28757 comm="syz.8.7216" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1483.564885][ T37] audit: type=1400 audit(1782592973.559:3502722): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=28757 comm="syz.8.7216" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1483.608752][ T37] audit: type=1400 audit(1782592973.449:3502720): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10750 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1483.608792][ T37] audit: type=1400 audit(1782592973.599:3502723): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10750 comm="udevd" name="data" dev="tmpfs" ino=13 [ 1483.769193][T26323] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1483.769697][T26323] cp210x 9-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1483.769719][T26323] cp210x 9-1:0.0: GPIO initialisation failed: -32 [ 1483.797941][T26323] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1483.809607][T26323] usb 9-1: USB disconnect, device number 59 [ 1483.820775][T26323] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1483.821168][T26323] cp210x 9-1:0.0: device disconnected [ 1483.853763][T28770] binder: 28768:28770 ioctl c028644b 200000000240 returned -22 [ 1483.854425][T28770] binder: 28768:28770 ioctl c008644c 200000000280 returned -22 [ 1483.859026][T28770] binder: 28768:28770 ioctl 5000940c 0 returned -22 [ 1484.716748][T28743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1484.874019][T28787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7227'. [ 1484.874146][T28787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1484.892182][ T5794] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1484.956368][T28787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.042249][ T5794] usb 9-1: device descriptor read/64, error -71 [ 1485.085516][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.085562][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.202236][T16902] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1485.270118][T28799] binder: 28798:28799 ioctl c028644b 200000000240 returned -22 [ 1485.271562][T28799] binder: 28798:28799 ioctl c008644c 200000000280 returned -22 [ 1485.282938][T28799] binder: 28798:28799 ioctl 5000940c 0 returned -22 [ 1485.292182][ T5794] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1485.356347][T16902] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 1485.356376][T16902] usb 4-1: config 127 has no interface number 0 [ 1485.356408][T16902] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1485.368011][T16902] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1485.368041][T16902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.368061][T16902] usb 4-1: Product: syz [ 1485.368081][T16902] usb 4-1: Manufacturer: syz [ 1485.368095][T16902] usb 4-1: SerialNumber: syz [ 1485.384654][T28791] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1485.432190][ T5794] usb 9-1: device descriptor read/64, error -71 [ 1485.543541][ T5794] usb usb9-port1: attempt power cycle [ 1485.544706][T24054] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1485.662216][T26323] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1485.695496][T24054] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.695591][T24054] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1485.695612][T24054] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 255 [ 1485.695624][T24054] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1485.699738][T24054] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 1485.699755][T24054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.699774][T24054] usb 7-1: Product: syz [ 1485.699782][T24054] usb 7-1: Manufacturer: syz [ 1485.699789][T24054] usb 7-1: SerialNumber: syz [ 1485.890313][ T5794] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1486.125403][ T5794] usb 9-1: device descriptor read/8, error -71 [ 1486.125541][T26323] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 1486.125562][T26323] usb 6-1: config 127 has no interface number 0 [ 1486.125595][T26323] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1486.137031][T24054] cdc_ncm 7-1:1.0: bind() failure [ 1486.139476][T24054] usbtest 7-1:1.0: Linux gadget zero [ 1486.139494][T24054] usbtest 7-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 1486.143722][T24054] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1486.143796][T24054] cdc_ncm 7-1:1.1: bind() failure [ 1486.146184][T24054] usbtest 7-1:1.1: couldn't get endpoints, -22 [ 1486.146271][T24054] usbtest 7-1:1.1: probe with driver usbtest failed with error -22 [ 1486.188854][T26323] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1486.188873][T26323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.188884][T26323] usb 6-1: Product: syz [ 1486.188892][T26323] usb 6-1: Manufacturer: syz [ 1486.188906][T26323] usb 6-1: SerialNumber: syz [ 1486.267399][T28801] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1486.297570][T24054] usb 7-1: USB disconnect, device number 25 [ 1486.392202][ T5794] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1486.412799][ T5794] usb 9-1: device descriptor read/8, error -71 [ 1486.533452][ T5794] usb usb9-port1: unable to enumerate USB device [ 1487.325871][T16902] asix 4-1:127.57: probe with driver asix failed with error -71 [ 1487.345344][T16902] usb 4-1: USB disconnect, device number 87 [ 1488.166142][T26323] asix 6-1:127.57: probe with driver asix failed with error -71 [ 1488.183352][T26323] usb 6-1: USB disconnect, device number 13 [ 1488.208771][T28824] netlink: 'syz.8.7239': attribute type 2 has an invalid length. [ 1488.210789][T28824] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7239'. [ 1488.362312][ T37] kauditd_printk_skb: 23073 callbacks suppressed [ 1488.362330][ T37] audit: type=1400 audit(1782592978.349:3519761): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=28822 comm="syz.7.7240" saddr=::1 src=20004 daddr=::1 dest=20004 netif=lo [ 1488.362366][ T37] audit: type=1400 audit(1782592978.349:3519762): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1488.362411][ T37] audit: type=1400 audit(1782592978.349:3519763): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1488.362442][ T37] audit: type=1400 audit(1782592978.349:3519764): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=28822 comm="syz.7.7240" saddr=::1 src=20004 daddr=::1 dest=20004 netif=lo [ 1488.362475][ T37] audit: type=1400 audit(1782592978.349:3519765): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1488.362508][ T37] audit: type=1400 audit(1782592978.349:3519766): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=4960 comm="udevd" name="queue" dev="tmpfs" ino=19427 [ 1488.362544][ T37] audit: type=1400 audit(1782592978.349:3519767): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=28822 comm="syz.7.7240" saddr=::1 src=20004 daddr=::1 dest=20004 netif=lo [ 1488.362575][ T37] audit: type=1400 audit(1782592978.349:3519768): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4960 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=19427 [ 1488.362605][ T37] audit: type=1400 audit(1782592978.349:3519770): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=4960 comm="udevd" name="queue" dev="tmpfs" ino=19427 [ 1488.362635][ T37] audit: type=1400 audit(1782592978.349:3519769): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=28822 comm="syz.7.7240" saddr=::1 src=20004 daddr=::1 dest=20004 netif=lo [ 1488.455319][ T5722] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1488.636524][ T5722] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1488.646587][ T5722] usb 9-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1488.646612][ T5722] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 1488.659138][ T5722] usb 9-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1488.659168][ T5722] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.659186][ T5722] usb 9-1: Product: syz [ 1488.659199][ T5722] usb 9-1: Manufacturer: syz [ 1488.659212][ T5722] usb 9-1: SerialNumber: syz [ 1488.672950][ T5722] usb 9-1: config 0 descriptor?? [ 1488.754174][T28834] binder: 28833:28834 ioctl c028644b 200000000240 returned -22 [ 1488.758466][T28834] binder: 28833:28834 ioctl c008644c 200000000280 returned -22 [ 1488.786230][T28834] binder: 28833:28834 ioctl 5000940c 0 returned -22 [ 1488.939578][T28838] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7245'. [ 1489.010069][ T5722] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1489.016233][ T5722] usb 9-1: 0:2 : does not exist [ 1489.016288][ T5722] usb 9-1: unit 4 not found! [ 1489.394821][ T5722] usb 9-1: USB disconnect, device number 64 [ 1489.406505][T16902] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1489.414791][T16902] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1489.751189][T28850] FAULT_INJECTION: forcing a failure. [ 1489.751189][T28850] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.751224][T28850] CPU: 1 UID: 0 PID: 28850 Comm: syz.8.7250 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1489.751250][T28850] Tainted: [L]=SOFTLOCKUP [ 1489.751256][T28850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1489.751267][T28850] Call Trace: [ 1489.751274][T28850] [ 1489.751281][T28850] dump_stack_lvl+0xe8/0x150 [ 1489.751308][T28850] should_fail_ex+0x467/0x600 [ 1489.751337][T28850] should_failslab+0xa8/0x100 [ 1489.751363][T28850] __kmalloc_cache_noprof+0x84/0x690 [ 1489.751387][T28850] ? rtnl_newlink+0x136/0x1bd0 [ 1489.751410][T28850] rtnl_newlink+0x136/0x1bd0 [ 1489.751430][T28850] ? kasan_save_track+0x4f/0x80 [ 1489.751452][T28850] ? kasan_save_track+0x3e/0x80 [ 1489.751472][T28850] ? kasan_save_free_info+0x40/0x50 [ 1489.751504][T28850] ? __kasan_slab_free+0x5c/0x80 [ 1489.751526][T28850] ? kmem_cache_free+0x187/0x6c0 [ 1489.751550][T28850] ? dev_hard_start_xmit+0x2df/0x870 [ 1489.751574][T28850] ? __netlink_deliver_tap+0x5b4/0x860 [ 1489.751597][T28850] ? netlink_deliver_tap+0x19c/0x1b0 [ 1489.751626][T28850] ? netlink_unicast+0x7b8/0x990 [ 1489.751644][T28850] ? netlink_sendmsg+0x813/0xb40 [ 1489.751668][T28850] ? __pfx_rtnl_newlink+0x10/0x10 [ 1489.751686][T28850] ? do_syscall_64+0x174/0x580 [ 1489.751705][T28850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.751739][T28850] ? rcu_is_watching+0x15/0xb0 [ 1489.751767][T28850] ? trace_irq_enable+0x3b/0x140 [ 1489.751793][T28850] ? nlmon_xmit+0xb0/0x100 [ 1489.751818][T28850] ? kmem_cache_free+0x187/0x6c0 [ 1489.751842][T28850] ? nlmon_xmit+0xb0/0x100 [ 1489.751870][T28850] ? rcu_is_watching+0x15/0xb0 [ 1489.751896][T28850] ? lock_release+0x4b/0x3c0 [ 1489.751920][T28850] ? rcu_is_watching+0x15/0xb0 [ 1489.751948][T28850] ? rcu_is_watching+0x15/0xb0 [ 1489.751974][T28850] ? trace_irq_enable+0x3b/0x140 [ 1489.751997][T28850] ? __dev_queue_xmit+0x291/0x3890 [ 1489.752022][T28850] ? __dev_queue_xmit+0x1f31/0x3890 [ 1489.752047][T28850] ? rcu_is_watching+0x15/0xb0 [ 1489.752074][T28850] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1489.752090][T28850] ? rcu_is_watching+0x15/0xb0 [ 1489.752113][T28850] ? __pfx_rtnl_newlink+0x10/0x10 [ 1489.752130][T28850] ? rcu_is_watching+0x15/0xb0 [ 1489.752153][T28850] ? __pfx_rtnl_newlink+0x10/0x10 [ 1489.752169][T28850] ? lock_release+0x4b/0x3c0 [ 1489.752190][T28850] ? bpf_lsm_capable+0x9/0x20 [ 1489.752211][T28850] ? security_capable+0x7e/0x2c0 [ 1489.752236][T28850] ? __pfx_rtnl_newlink+0x10/0x10 [ 1489.752253][T28850] rtnetlink_rcv_msg+0x802/0xc00 [ 1489.752272][T28850] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1489.752291][T28850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1489.752308][T28850] ? ref_tracker_free+0x668/0x820 [ 1489.752338][T28850] ? __pfx_ref_tracker_free+0x10/0x10 [ 1489.752365][T28850] ? __asan_memcpy+0x40/0x70 [ 1489.752383][T28850] ? __skb_clone+0x5c/0x6c0 [ 1489.752406][T28850] netlink_rcv_skb+0x226/0x4a0 [ 1489.752427][T28850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1489.752446][T28850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1489.752472][T28850] ? netlink_deliver_tap+0x2e/0x1b0 [ 1489.752497][T28850] netlink_unicast+0x7f5/0x990 [ 1489.752520][T28850] netlink_sendmsg+0x813/0xb40 [ 1489.752540][T28850] ? lock_release+0x4b/0x3c0 [ 1489.752560][T28850] ? lock_release+0x4b/0x3c0 [ 1489.752583][T28850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.752604][T28850] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1489.752643][T28850] ? __kernel_text_address+0xd/0x30 [ 1489.752665][T28850] ? unwind_get_return_address+0x4d/0x90 [ 1489.752689][T28850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.752710][T28850] sock_sendmsg_nosec+0x13a/0x180 [ 1489.752738][T28850] ____sys_sendmsg+0x565/0x870 [ 1489.752762][T28850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1489.752786][T28850] ? lock_release+0x4b/0x3c0 [ 1489.752809][T28850] ? import_iovec+0x73/0xa0 [ 1489.752830][T28850] ___sys_sendmsg+0x2a5/0x360 [ 1489.752851][T28850] ? rcu_is_watching+0x15/0xb0 [ 1489.752876][T28850] ? get_pid_task+0x20/0x1f0 [ 1489.752897][T28850] ? __pfx____sys_sendmsg+0x10/0x10 [ 1489.752920][T28850] ? rcu_is_watching+0x15/0xb0 [ 1489.752957][T28850] ? __fget_files+0x2a/0x420 [ 1489.752976][T28850] ? __fget_files+0x3a8/0x420 [ 1489.753001][T28850] __x64_sys_sendmsg+0x1b7/0x290 [ 1489.753023][T28850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1489.753050][T28850] ? rcu_is_watching+0x15/0xb0 [ 1489.753076][T28850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.753094][T28850] do_syscall_64+0x174/0x580 [ 1489.753112][T28850] ? trace_irq_disable+0x3b/0x140 [ 1489.753133][T28850] ? clear_bhb_loop+0x40/0x90 [ 1489.753154][T28850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.753172][T28850] RIP: 0033:0x7f92dbe0ce59 [ 1489.753190][T28850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.753206][T28850] RSP: 002b:00007f92da066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1489.753228][T28850] RAX: ffffffffffffffda RBX: 00007f92dc085fa0 RCX: 00007f92dbe0ce59 [ 1489.753243][T28850] RDX: 0000000000004840 RSI: 0000200000000340 RDI: 0000000000000003 [ 1489.753257][T28850] RBP: 00007f92da066090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.753270][T28850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.753283][T28850] R13: 00007f92dc086038 R14: 00007f92dc085fa0 R15: 00007ffddefa1078 [ 1489.753304][T28850] [ 1490.281720][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1490.436884][T28853] fido_id[28853]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1490.749093][ T5722] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 1491.004306][ T5722] usb 9-1: config 127 has an invalid interface number: 57 but max is 0 [ 1491.004332][ T5722] usb 9-1: config 127 has no interface number 0 [ 1491.004365][ T5722] usb 9-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1491.007726][ T5722] usb 9-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1491.007754][ T5722] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.007773][ T5722] usb 9-1: Product: syz [ 1491.007787][ T5722] usb 9-1: Manufacturer: syz [ 1491.007801][ T5722] usb 9-1: SerialNumber: syz [ 1491.011867][T28855] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1491.202244][ T5794] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1491.432775][ T5794] usb 6-1: device descriptor read/64, error -71 [ 1491.706350][ T5794] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1491.862199][ T5794] usb 6-1: device descriptor read/64, error -71 [ 1491.924255][T28871] binder: 28870:28871 ioctl c028644b 200000000240 returned -22 [ 1491.924689][T28871] binder: 28870:28871 ioctl c008644c 200000000280 returned -22 [ 1491.930181][T28871] binder: 28870:28871 ioctl 5000940c 0 returned -22 [ 1491.973898][ T5794] usb usb6-port1: attempt power cycle [ 1492.252650][ T5681] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1492.313771][ T5794] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1492.315220][ T5722] asix 9-1:127.57: probe with driver asix failed with error -71 [ 1492.338444][ T5722] usb 9-1: USB disconnect, device number 65 [ 1492.338471][ T5794] usb 6-1: device descriptor read/8, error -71 [ 1492.380445][T28875] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7258'. [ 1492.412599][ T5681] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1492.412629][ T5681] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.412647][ T5681] usb 7-1: Product: syz [ 1492.412661][ T5681] usb 7-1: Manufacturer: syz [ 1492.412675][ T5681] usb 7-1: SerialNumber: syz [ 1492.418810][ T5681] usb 7-1: config 0 descriptor?? [ 1492.573084][ T5794] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1492.597031][ T5794] usb 6-1: device descriptor read/8, error -71 [ 1492.625056][T28873] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7257'. [ 1492.713637][ T5794] usb usb6-port1: unable to enumerate USB device [ 1493.266910][ T5681] usb 7-1: Firmware version (0.0) predates our first public release. [ 1493.266936][ T5681] usb 7-1: Please update to version 0.2 or newer [ 1493.373232][ T37] kauditd_printk_skb: 19048 callbacks suppressed [ 1493.373609][ T37] audit: type=1400 audit(1782592983.369:3535651): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1493.374195][ T37] audit: type=1400 audit(1782592983.369:3535652): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sysfs" ino=1 [ 1493.375268][ T37] audit: type=1400 audit(1782592983.369:3535653): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1493.376278][ T37] audit: type=1400 audit(1782592983.369:3535654): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="platform" dev="sysfs" ino=48 [ 1493.377013][ T37] audit: type=1400 audit(1782592983.369:3535656): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="dummy_udc.6" dev="sysfs" ino=31947 [ 1493.377532][ T37] audit: type=1400 audit(1782592983.369:3535655): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=15756 comm="udevd" path="/sys/devices/platform/dummy_udc.6/udc/dummy_udc.6/uevent" dev="sysfs" ino=31963 [ 1493.378165][ T37] audit: type=1400 audit(1782592983.369:3535657): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="gadget.6" dev="sysfs" ino=31985 [ 1493.378855][ T37] audit: type=1400 audit(1782592983.369:3535658): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4960 comm="udevd" name="uevent" dev="sysfs" ino=31986 [ 1493.379513][ T37] audit: type=1400 audit(1782592983.369:3535659): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=15756 comm="udevd" path="/sys/devices/platform/dummy_udc.6/udc/dummy_udc.6/uevent" dev="sysfs" ino=31963 [ 1493.381105][ T37] audit: type=1400 audit(1782592983.369:3535660): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4960 comm="udevd" path="/sys/devices/platform/dummy_udc.6/gadget.6/uevent" dev="sysfs" ino=31986 [ 1493.636167][ T5681] usb 7-1: USB disconnect, device number 26 [ 1493.817491][T28887] netlink: 'syz.8.7262': attribute type 10 has an invalid length. [ 1493.834637][T28887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1493.836355][T28887] bond0: (slave team0): Enslaving as an active interface with an up link [ 1494.229468][T28899] FAULT_INJECTION: forcing a failure. [ 1494.229468][T28899] name (null), interval 1, probability 0, space 0, times 1 [ 1494.229502][T28899] CPU: 1 UID: 0 PID: 28899 Comm: syz.8.7266 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1494.229530][T28899] Tainted: [L]=SOFTLOCKUP [ 1494.229538][T28899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1494.229549][T28899] Call Trace: [ 1494.229556][T28899] [ 1494.229564][T28899] dump_stack_lvl+0xe8/0x150 [ 1494.229590][T28899] should_fail_ex+0x467/0x600 [ 1494.229617][T28899] null_queue_rq+0x339/0xe70 [ 1494.229645][T28899] ? pid_list_refill_irq+0x7a0/0x8a0 [ 1494.229676][T28899] null_queue_rqs+0x158/0x260 [ 1494.229704][T28899] ? blk_mq_dispatch_queue_requests+0x116/0x800 [ 1494.229732][T28899] blk_mq_dispatch_queue_requests+0x426/0x800 [ 1494.229763][T28899] ? rcu_is_watching+0x15/0xb0 [ 1494.229795][T28899] blk_mq_flush_plug_list+0x428/0x540 [ 1494.229820][T28899] ? blk_add_rq_to_plug+0x300/0x450 [ 1494.229845][T28899] ? blk_mq_submit_bio+0x1c7e/0x2aa0 [ 1494.229869][T28899] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1494.229896][T28899] ? blk_mq_submit_bio+0x2f8/0x2aa0 [ 1494.229925][T28899] __blk_flush_plug+0x3ed/0x4d0 [ 1494.229954][T28899] ? __pfx___blk_flush_plug+0x10/0x10 [ 1494.229985][T28899] __submit_bio+0x465/0x560 [ 1494.230082][T28899] ? __pfx___submit_bio+0x10/0x10 [ 1494.230106][T28899] ? blk_add_trace_bio+0x2e/0x2f0 [ 1494.230135][T28899] ? blk_add_trace_bio+0x2e/0x2f0 [ 1494.230163][T28899] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1494.230193][T28899] ? rcu_is_watching+0x15/0xb0 [ 1494.230221][T28899] ? rcu_is_watching+0x15/0xb0 [ 1494.230247][T28899] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1494.230274][T28899] ? submit_bio_noacct+0xfac/0x1ba0 [ 1494.230304][T28899] submit_bio_wait+0x12a/0x250 [ 1494.230324][T28899] ? __pfx_submit_bio_wait+0x10/0x10 [ 1494.230350][T28899] ? bio_init+0x14b/0x2d0 [ 1494.230380][T28899] blkdev_direct_IO+0x1124/0x17b0 [ 1494.230413][T28899] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1494.230444][T28899] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1494.230473][T28899] ? __pfx_bio_wait_end_io+0x10/0x10 [ 1494.230497][T28899] ? __alloc_pages_noprof+0x80/0x100 [ 1494.230523][T28899] ? trace_kmalloc+0x2a/0xf0 [ 1494.230543][T28899] ? kiocb_write_and_wait+0xae/0x1b0 [ 1494.230564][T28899] blkdev_read_iter+0x22a/0x430 [ 1494.230594][T28899] copy_splice_read+0x605/0xab0 [ 1494.230624][T28899] ? __pfx_copy_splice_read+0x10/0x10 [ 1494.230646][T28899] ? rcu_is_watching+0x15/0xb0 [ 1494.230673][T28899] ? lockdep_unlock+0x5d/0xd0 [ 1494.230691][T28899] ? graph_lock+0x59/0xb0 [ 1494.230711][T28899] ? register_lock_class+0xe8/0x2e0 [ 1494.230737][T28899] ? alloc_pipe_info+0x35d/0x4c0 [ 1494.230766][T28899] ? __pfx_filemap_splice_read+0x10/0x10 [ 1494.230786][T28899] splice_direct_to_actor+0x4c1/0xcc0 [ 1494.230813][T28899] ? kstrtouint+0x6e/0xe0 [ 1494.230844][T28899] ? __pfx_direct_splice_actor+0x10/0x10 [ 1494.230868][T28899] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1494.230894][T28899] do_splice_direct+0x19b/0x2a0 [ 1494.230918][T28899] ? __pfx_do_splice_direct+0x10/0x10 [ 1494.230943][T28899] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1494.230969][T28899] ? bpf_lsm_file_permission+0x9/0x20 [ 1494.230988][T28899] ? security_file_permission+0x75/0x260 [ 1494.231009][T28899] ? rw_verify_area+0x209/0x4d0 [ 1494.231035][T28899] do_sendfile+0x540/0x7e0 [ 1494.231059][T28899] ? __pfx_do_sendfile+0x10/0x10 [ 1494.231080][T28899] ? fdget_pos+0x252/0x320 [ 1494.231106][T28899] __se_sys_sendfile64+0x144/0x1a0 [ 1494.231126][T28899] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1494.231147][T28899] ? rcu_is_watching+0x15/0xb0 [ 1494.231183][T28899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.231203][T28899] do_syscall_64+0x174/0x580 [ 1494.231221][T28899] ? clear_bhb_loop+0x40/0x90 [ 1494.231241][T28899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.231261][T28899] RIP: 0033:0x7f92dbe0ce59 [ 1494.231278][T28899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1494.231294][T28899] RSP: 002b:00007f92da066028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1494.231315][T28899] RAX: ffffffffffffffda RBX: 00007f92dc085fa0 RCX: 00007f92dbe0ce59 [ 1494.231330][T28899] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1494.231341][T28899] RBP: 00007f92da066090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.231353][T28899] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.231365][T28899] R13: 00007f92dc086038 R14: 00007f92dc085fa0 R15: 00007ffddefa1078 [ 1494.231384][T28899] [ 1494.512296][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1494.844634][T28902] trusted_key: encrypted_key: key user:syz not found [ 1494.937180][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1494.968298][T28907] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7270'. [ 1495.040270][ T10] usb 7-1: config index 0 descriptor too short (expected 30262, got 54) [ 1495.040297][ T10] usb 7-1: config 71 has too many interfaces: 126, using maximum allowed: 32 [ 1495.040319][ T10] usb 7-1: config 71 has an invalid interface number: 201 but max is 125 [ 1495.040337][ T10] usb 7-1: config 71 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.040354][ T10] usb 7-1: config 71 has 1 interface, different from the descriptor's value: 126 [ 1495.040374][ T10] usb 7-1: config 71 has no interface number 0 [ 1495.040400][ T10] usb 7-1: config 71 interface 201 has no altsetting 0 [ 1495.101933][ T10] usb 7-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 1495.101951][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 1495.101961][ T10] usb 7-1: Product: syz [ 1495.101969][ T10] usb 7-1: Manufacturer: syz [ 1495.101977][ T10] usb 7-1: SerialNumber: syz [ 1495.547283][ T5326] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1496.091931][ T5326] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1496.109668][ T5326] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.109693][ T5326] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1496.141744][ T5326] usb 4-1: string descriptor 0 read error: -22 [ 1496.143010][ T5326] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1496.143037][ T5326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.169665][ T5326] usb 4-1: selecting invalid altsetting 1 [ 1496.171544][ T5326] usb 4-1: unit 6 not found! [ 1496.180170][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7265'. [ 1496.370533][T28916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7274'. [ 1496.409228][ T10] rndis_host 7-1:71.201: skipping garbage [ 1496.409251][ T10] rndis_host 7-1:71.201: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1496.427756][ T10] cdc_acm 7-1:71.201: Zero length descriptor references [ 1496.427785][ T10] cdc_acm 7-1:71.201: probe with driver cdc_acm failed with error -22 [ 1496.452198][ T10] usb 7-1: USB disconnect, device number 27 [ 1496.627763][T28909] loop2: detected capacity change from 0 to 7 [ 1496.630873][T28909] Dev loop2: unable to read RDB block 7 [ 1496.630920][T28909] loop2: AHDI p1 p2 p3 [ 1496.630936][T28909] loop2: partition table partially beyond EOD, truncated [ 1496.631079][T28909] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1496.631097][T28909] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1496.715829][ T5326] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1496.830272][ T5326] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1496.853300][ T5326] usb 4-1: USB disconnect, device number 88 [ 1497.304283][T10610] udevd[10610]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1498.386583][ T37] kauditd_printk_skb: 21374 callbacks suppressed [ 1498.386634][ T37] audit: type=1400 audit(1782592988.359:3552314): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=28933 comm="syz.6.7278" path="/dev/cec6" dev="devtmpfs" ino=990 [ 1498.612879][ T37] audit: type=1400 audit(1782592988.499:3552316): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1202 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.100 dest=49596 netif=eth0 [ 1498.612924][ T37] audit: type=1400 audit(1782592988.599:3552317): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28944 comm="kworker/u8:13" name="/" dev="sda1" ino=2 [ 1498.612955][ T37] audit: type=1400 audit(1782592988.599:3552318): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28944 comm="kworker/u8:13" name="sbin" dev="sda1" ino=1267 [ 1498.612986][ T37] audit: type=1400 audit(1782592988.599:3552319): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28944 comm="kworker/u8:13" name="modprobe" dev="sda1" ino=1312 [ 1498.613016][ T37] audit: type=1400 audit(1782592988.599:3552320): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=28944 comm="kworker/u8:13" path="/sbin/modprobe" dev="sda1" ino=1312 [ 1498.613049][ T37] audit: type=1400 audit(1782592988.599:3552321): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28944 comm="kworker/u8:13" name="/" dev="sda1" ino=2 [ 1498.613077][ T37] audit: type=1400 audit(1782592988.599:3552322): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28944 comm="kworker/u8:13" name="sbin" dev="sda1" ino=1267 [ 1498.613107][ T37] audit: type=1400 audit(1782592988.599:3552323): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28944 comm="kworker/u8:13" name="/" dev="sda1" ino=2 [ 1498.613137][ T37] audit: type=1400 audit(1782592988.599:3552324): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28944 comm="kworker/u8:13" name="/" dev="sda1" ino=2 [ 1498.826081][T28946] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7282'. [ 1499.117805][T28952] netlink: 7986 bytes leftover after parsing attributes in process `syz.3.7283'. [ 1500.367296][T28958] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7286'. [ 1500.855299][T28966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7290'. [ 1501.102227][ T5326] usb 9-1: new full-speed USB device number 66 using dummy_hcd [ 1501.391890][ T10] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1501.502176][ T5326] usb 9-1: config 127 has an invalid interface number: 57 but max is 0 [ 1501.502205][ T5326] usb 9-1: config 127 has no interface number 0 [ 1501.502239][ T5326] usb 9-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1501.507338][ T5326] usb 9-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1501.507364][ T5326] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.507382][ T5326] usb 9-1: Product: syz [ 1501.507394][ T5326] usb 9-1: Manufacturer: syz [ 1501.507407][ T5326] usb 9-1: SerialNumber: syz [ 1501.576877][T28967] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1501.647400][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1501.648012][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 1501.650518][ T10] usb 6-1: language id specifier not provided by device, defaulting to English [ 1501.675412][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 1501.675445][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.675464][ T10] usb 6-1: Product: syz [ 1501.675479][ T10] usb 6-1: Manufacturer: 㜢孙⎃퓰氠쟏ﭠﾴ鳖靶㔡ǝ靦锜놀㪓♖ᣄ࿃䋼 [ 1501.675497][ T10] usb 6-1: SerialNumber: syz [ 1501.763462][T28976] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7294'. [ 1501.948228][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1501.948270][ T10] usb 6-1: MIDIStreaming interface descriptor not found [ 1502.524295][ T10] usb 6-1: USB disconnect, device number 18 [ 1502.846175][T28984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7296'. [ 1503.205237][T17382] udevd[17382]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1503.392573][ T37] kauditd_printk_skb: 15286 callbacks suppressed [ 1503.392591][ T37] audit: type=1400 audit(1782592993.389:3564021): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1503.392727][ T37] audit: type=1400 audit(1782592993.389:3564022): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sysfs" ino=1 [ 1503.392867][ T37] audit: type=1400 audit(1782592993.389:3564023): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1503.393004][ T37] audit: type=1400 audit(1782592993.389:3564024): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1503.393303][ T37] audit: type=1400 audit(1782592993.389:3564025): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="block" dev="sysfs" ino=13338 [ 1503.393443][ T37] audit: type=1400 audit(1782592993.389:3564026): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="loop5" dev="sysfs" ino=15743 [ 1503.393971][ T37] audit: type=1400 audit(1782592993.389:3564027): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="mq" dev="sysfs" ino=15839 [ 1503.394007][ T37] audit: type=1400 audit(1782592993.389:3564028): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28986 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1503.394373][ T37] audit: type=1400 audit(1782592993.389:3564029): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28986 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1503.394405][ T37] audit: type=1400 audit(1782592993.389:3564030): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28986 comm="syz-executor" name="290" dev="tmpfs" ino=1533 [ 1503.624852][T28987] netlink: zone id is out of range [ 1503.624865][T28987] netlink: del zone limit has 4 unknown bytes [ 1504.127017][ T5326] asix 9-1:127.57: probe with driver asix failed with error -71 [ 1504.168509][ T5326] usb 9-1: USB disconnect, device number 66 [ 1504.496144][T28993] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7299'. [ 1504.660024][T28998] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.7300'. [ 1504.660582][T28995] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.7300'. [ 1504.774617][T29003] wg1 speed is unknown, defaulting to 1000 [ 1505.262169][ T10] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1505.416717][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.416747][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1505.416761][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1505.452239][ T5326] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1505.477618][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1505.477647][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.477666][ T10] usb 4-1: Product: syz [ 1505.477679][ T10] usb 4-1: Manufacturer: syz [ 1505.477692][ T10] usb 4-1: SerialNumber: syz [ 1505.526567][T29000] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1505.546255][ T10] cdc_mbim 4-1:1.0: skipping garbage [ 1505.612187][ T5326] usb 6-1: Using ep0 maxpacket: 8 [ 1505.629620][ T5326] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1505.673060][ T5326] usb 6-1: string descriptor 0 read error: -22 [ 1505.673148][ T5326] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1505.673170][ T5326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.729194][T29009] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1505.752461][ T5326] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1505.752501][ T5326] usb 6-1: MIDIStreaming interface descriptor not found [ 1506.006889][T29011] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7305'. [ 1506.074256][ T5326] usb 6-1: USB disconnect, device number 19 [ 1506.264337][T10839] udevd[10839]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.773223][T29000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.773531][T29000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.093526][ T10] cdc_mbim 4-1:1.0: bind() failure [ 1507.104094][ T10] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1507.113279][ T10] usb 4-1: USB disconnect, device number 89 [ 1507.144928][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7311'. [ 1507.419726][T29034] wg1 speed is unknown, defaulting to 1000 [ 1507.472183][T14758] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1507.602240][T14758] usb 7-1: device descriptor read/64, error -71 [ 1507.892240][T14758] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1508.022194][T14758] usb 7-1: device descriptor read/64, error -71 [ 1508.024768][T29039] wg1 speed is unknown, defaulting to 1000 [ 1508.187091][T14758] usb usb7-port1: attempt power cycle [ 1508.405095][ T37] kauditd_printk_skb: 18825 callbacks suppressed [ 1508.405107][ T37] audit: type=1400 audit(1782592998.399:3580825): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=29030 comm="syz.6.7313" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1508.406889][ T37] audit: type=1400 audit(1782592998.399:3580826): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=29030 comm="syz.6.7313" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1508.473891][ T37] audit: type=1400 audit(1782592998.469:3580827): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=29030 comm="syz.6.7313" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1508.474343][ T37] audit: type=1400 audit(1782592998.469:3580828): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=29030 comm="syz.6.7313" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1508.522035][ T37] audit: type=1400 audit(1782592998.509:3580829): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1202 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.100 dest=49596 netif=eth0 [ 1508.555932][ T37] audit: type=1400 audit(1782592998.549:3580830): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23792 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1508.555979][ T37] audit: type=1400 audit(1782592998.549:3580831): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23792 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1508.556088][ T37] audit: type=1400 audit(1782592998.549:3580832): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23792 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1508.556146][ T37] audit: type=1400 audit(1782592998.549:3580833): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23792 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1508.556391][ T37] audit: type=1400 audit(1782592998.549:3580834): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=23792 comm="syz-executor" name="297" dev="tmpfs" ino=1570 [ 1508.752157][T14758] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1508.774433][T14758] usb 7-1: device descriptor read/8, error -71 [ 1509.102186][T14758] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1509.142913][T14758] usb 7-1: device descriptor read/8, error -71 [ 1509.253833][T14758] usb usb7-port1: unable to enumerate USB device [ 1510.530310][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7322'. [ 1511.022210][T26323] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1511.052225][T14758] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1511.182828][T26323] usb 7-1: Using ep0 maxpacket: 32 [ 1511.185919][T26323] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1511.185951][T26323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1511.185968][T26323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1511.185990][T26323] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1511.186002][T26323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.190375][T26323] usb 7-1: config 0 descriptor?? [ 1511.192620][T29075] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1511.265602][T26323] hub 7-1:0.0: USB hub found [ 1511.269026][T14758] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1511.269042][T14758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.300184][T14758] usb 4-1: config 0 descriptor?? [ 1511.309920][T14758] cp210x 4-1:0.0: cp210x converter detected [ 1511.415439][T29081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.416374][T29081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.738392][T14758] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1511.741331][T14758] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1511.741356][T14758] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 1511.802718][T14758] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1511.957164][T16902] usb 4-1: USB disconnect, device number 90 [ 1511.972773][T16902] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1511.973166][T16902] cp210x 4-1:0.0: device disconnected [ 1512.075694][T26323] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1512.081201][T26323] usbhid 7-1:0.0: can't add hid device: -71 [ 1512.081286][T26323] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1512.125844][T26323] usb 7-1: USB disconnect, device number 32 [ 1513.142208][ T5722] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1513.298945][ T5722] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1513.298979][ T5722] usb 9-1: can't read configurations, error -61 [ 1513.412358][ T37] kauditd_printk_skb: 23770 callbacks suppressed [ 1513.412376][ T37] audit: type=1400 audit(1782593003.409:3592164): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="mq" dev="sysfs" ino=15839 [ 1513.412629][ T37] audit: type=1400 audit(1782593003.409:3592165): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sda1" ino=2 [ 1513.412840][ T37] audit: type=1400 audit(1782593003.409:3592166): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="/" dev="sysfs" ino=1 [ 1513.412988][ T37] audit: type=1400 audit(1782593003.409:3592167): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1513.413138][ T37] audit: type=1400 audit(1782593003.409:3592168): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1513.413291][ T37] audit: type=1400 audit(1782593003.409:3592169): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="block" dev="sysfs" ino=13338 [ 1513.413435][ T37] audit: type=1400 audit(1782593003.409:3592170): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4960 comm="udevd" name="loop5" dev="sysfs" ino=15743 [ 1513.413582][ T37] audit: type=1400 audit(1782593003.409:3592171): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4960 comm="udevd" name="mq" dev="sysfs" ino=15839 [ 1513.413877][ T37] audit: type=1400 audit(1782593003.409:3592172): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4960 comm="udevd" path="/sys/devices/virtual/block/loop5/mq" dev="sysfs" ino=15839 [ 1513.414839][ T37] audit: type=1400 audit(1782593003.409:3592173): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4960 comm="udevd" path="/sys/devices/virtual/block/loop5/mq" dev="sysfs" ino=15839 [ 1513.432539][ T5722] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1513.594425][ T5722] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1513.594458][ T5722] usb 9-1: can't read configurations, error -61 [ 1513.594728][ T5722] usb usb9-port1: attempt power cycle [ 1513.776621][T29102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7336'. [ 1513.882373][ T38] INFO: task syz.9.6774:27160 blocked for more than 144 seconds. [ 1513.882398][ T38] Tainted: G L syzkaller #0 [ 1513.882412][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1513.882422][ T38] task:syz.9.6774 state:D stack:27504 pid:27160 tgid:27158 ppid:25652 task_flags:0x400040 flags:0x00080002 [ 1513.882479][ T38] Call Trace: [ 1513.882486][ T38] [ 1513.882496][ T38] __schedule+0x16dc/0x5500 [ 1513.882531][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1513.882555][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1513.882584][ T38] ? rcu_is_watching+0x15/0xb0 [ 1513.882615][ T38] ? do_raw_spin_unlock+0xf5/0x210 [ 1513.882635][ T38] ? __pfx___schedule+0x10/0x10 [ 1513.882661][ T38] ? rcu_is_watching+0x15/0xb0 [ 1513.882689][ T38] rt_mutex_schedule+0x76/0xf0 [ 1513.882716][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1513.882745][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1513.882771][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1513.882797][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1513.882820][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1513.882850][ T38] ? lock_acquire+0x5f/0x350 [ 1513.882875][ T38] ? __asan_memset+0x22/0x50 [ 1513.882898][ T38] ? nfsd_nl_listener_get_doit+0x11a/0x6a0 [ 1513.882928][ T38] mutex_lock_nested+0x168/0x1d0 [ 1513.882955][ T38] nfsd_nl_listener_get_doit+0x11a/0x6a0 [ 1513.882983][ T38] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1513.883015][ T38] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1513.883048][ T38] genl_family_rcv_msg_doit+0x233/0x340 [ 1513.883079][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1513.883114][ T38] genl_rcv_msg+0x614/0x7a0 [ 1513.883143][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1513.883168][ T38] ? ref_tracker_free+0x668/0x820 [ 1513.883198][ T38] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1513.883227][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 1513.883259][ T38] netlink_rcv_skb+0x226/0x4a0 [ 1513.883282][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1513.883319][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1513.883349][ T38] genl_rcv+0x28/0x40 [ 1513.883375][ T38] netlink_unicast+0x7f5/0x990 [ 1513.883400][ T38] netlink_sendmsg+0x813/0xb40 [ 1513.883427][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1513.883451][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1513.883479][ T38] ? rcu_is_watching+0x15/0xb0 [ 1513.883518][ T38] ? futex_unqueue+0x22/0x240 [ 1513.883545][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1513.883568][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 1513.883618][ T38] ____sys_sendmsg+0x565/0x870 [ 1513.883645][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1513.883669][ T38] ? lock_release+0x4b/0x3c0 [ 1513.883693][ T38] ? import_iovec+0x73/0xa0 [ 1513.883717][ T38] ___sys_sendmsg+0x2a5/0x360 [ 1513.883741][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 1513.883765][ T38] ? futex_wait+0x2a2/0x390 [ 1513.883798][ T38] ? __fget_files+0x2a/0x420 [ 1513.883821][ T38] ? __fget_files+0x3a8/0x420 [ 1513.883847][ T38] __x64_sys_sendmsg+0x1b7/0x290 [ 1513.883871][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1513.883900][ T38] ? rcu_is_watching+0x15/0xb0 [ 1513.883927][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.883948][ T38] do_syscall_64+0x174/0x580 [ 1513.883966][ T38] ? trace_irq_disable+0x3b/0x140 [ 1513.883989][ T38] ? clear_bhb_loop+0x40/0x90 [ 1513.884011][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.884030][ T38] RIP: 0033:0x7f1b5e35ce59 [ 1513.884046][ T38] RSP: 002b:00007f1b5c5b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1513.884073][ T38] RAX: ffffffffffffffda RBX: 00007f1b5e5d5fa0 RCX: 00007f1b5e35ce59 [ 1513.884089][ T38] RDX: 0000000004004990 RSI: 0000200000000040 RDI: 0000000000000003 [ 1513.884103][ T38] RBP: 00007f1b5e3f2e6f R08: 0000000000000000 R09: 0000000000000000 [ 1513.884115][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1513.884127][ T38] R13: 00007f1b5e5d6038 R14: 00007f1b5e5d5fa0 R15: 00007fff11edbf38 [ 1513.884149][ T38] [ 1513.884183][ T38] INFO: lockdep is turned off. [ 1513.884192][ T38] NMI backtrace for cpu 1 [ 1513.884207][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1513.884234][ T38] Tainted: [L]=SOFTLOCKUP [ 1513.884241][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1513.884254][ T38] Call Trace: [ 1513.884262][ T38] [ 1513.884269][ T38] dump_stack_lvl+0xe8/0x150 [ 1513.884292][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1513.884324][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1513.884347][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1513.884373][ T38] sys_info+0x135/0x170 [ 1513.884395][ T38] watchdog+0xfd7/0x1030 [ 1513.884420][ T38] ? watchdog+0x1c7/0x1030 [ 1513.884443][ T38] kthread+0x388/0x470 [ 1513.884463][ T38] ? __pfx_watchdog+0x10/0x10 [ 1513.884481][ T38] ? __pfx_kthread+0x10/0x10 [ 1513.884500][ T38] ret_from_fork+0x514/0xb70 [ 1513.884538][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1513.884558][ T38] ? __switch_to+0xc89/0x1420 [ 1513.884588][ T38] ? __pfx_kthread+0x10/0x10 [ 1513.884608][ T38] ret_from_fork_asm+0x1a/0x30 [ 1513.884643][ T38] [ 1513.884650][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1513.884679][ C0] NMI backtrace for cpu 0 [ 1513.884695][ C0] CPU: 0 UID: 0 PID: 3980 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1513.884721][ C0] Tainted: [L]=SOFTLOCKUP [ 1513.884727][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1513.884739][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1513.884859][ C0] RIP: 0010:curve25519_generate_public+0x652/0x3050 [ 1513.884887][ C0] Code: f6 56 18 f3 4d 0f 38 f6 f5 66 4c 0f 38 f6 f0 4c 89 77 30 48 c7 c0 00 00 00 00 f3 48 0f 38 f6 c2 66 49 0f 38 f6 c0 48 89 47 38 <48> 89 f9 4c 89 ff 48 c7 c2 26 00 00 00 c4 62 bb f6 69 20 31 f6 f3 [ 1513.884902][ C0] RSP: 0018:ffffc9000f5973e0 EFLAGS: 00000246 [ 1513.884918][ C0] RAX: 0436d4063f246bd1 RBX: c825c47e26df1544 RCX: ffffffff8ba787c0 [ 1513.884932][ C0] RDX: 0436d4063f246bd1 RSI: ffffc9000f597520 RDI: ffffc9000f597580 [ 1513.884946][ C0] RBP: ffffc9000f5976d0 R08: 0000000000000000 R09: 4bb68cf7be326e8b [ 1513.884960][ C0] R10: 81dfb9741f1c3e9c R11: 479d1017267b7972 R12: 0000000000000110 [ 1513.884974][ C0] R13: 50b97de14270698b R14: 8deed481e624ae99 R15: ffffc9000f597540 [ 1513.884991][ C0] FS: 0000000000000000(0000) GS:ffff888126144000(0000) knlGS:0000000000000000 [ 1513.885006][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1513.885018][ C0] CR2: 00007f9dff6956b8 CR3: 000000006fb84000 CR4: 00000000003526f0 [ 1513.885035][ C0] Call Trace: [ 1513.885042][ C0] [ 1513.885050][ C0] ? trace_irq_enable+0x3b/0x140 [ 1513.885074][ C0] ? __pfx_curve25519_generate_public+0x10/0x10 [ 1513.885120][ C0] wg_noise_handshake_create_initiation+0x223/0x810 [ 1513.885146][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 1513.885172][ C0] ? kasan_save_track+0x4f/0x80 [ 1513.885192][ C0] ? kasan_save_track+0x3e/0x80 [ 1513.885211][ C0] ? kasan_save_free_info+0x40/0x50 [ 1513.885241][ C0] ? trace_pelt_se_tp+0x3b/0x150 [ 1513.885262][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1513.885289][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1513.885311][ C0] ? rcu_is_watching+0x15/0xb0 [ 1513.885337][ C0] ? rcu_is_watching+0x15/0xb0 [ 1513.885363][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1513.885385][ C0] ? rcu_is_watching+0x15/0xb0 [ 1513.885411][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1513.885433][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1513.885455][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 1513.885479][ C0] wg_packet_handshake_send_worker+0x18c/0x370 [ 1513.885507][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1513.885540][ C0] ? lock_acquire+0x5f/0x350 [ 1513.885564][ C0] ? rcu_is_watching+0x15/0xb0 [ 1513.885590][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1513.885615][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1513.885651][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1513.885675][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1513.885696][ C0] ? assign_work+0x3cf/0x5d0 [ 1513.885722][ C0] worker_thread+0xa47/0xfb0 [ 1513.885752][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1513.885783][ C0] kthread+0x388/0x470 [ 1513.885808][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1513.885833][ C0] ? __pfx_kthread+0x10/0x10 [ 1513.885852][ C0] ret_from_fork+0x514/0xb70 [ 1513.885872][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1513.885892][ C0] ? __switch_to+0xc89/0x1420 [ 1513.885920][ C0] ? __pfx_kthread+0x10/0x10 [ 1513.885939][ C0] ret_from_fork_asm+0x1a/0x30 [ 1513.885968][ C0] [ 1513.886686][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1513.886711][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1513.886738][ T38] Tainted: [L]=SOFTLOCKUP [ 1513.886746][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1513.886759][ T38] Call Trace: [ 1513.886766][ T38] [ 1513.886775][ T38] vpanic+0x56c/0xa60 [ 1513.886801][ T38] ? __pfx_vpanic+0x10/0x10 [ 1513.886829][ T38] panic+0xc5/0xd0 [ 1513.886851][ T38] ? __pfx_panic+0x10/0x10 [ 1513.886878][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1513.886907][ T38] watchdog+0x1030/0x1030 [ 1513.886933][ T38] ? watchdog+0x1c7/0x1030 [ 1513.886956][ T38] kthread+0x388/0x470 [ 1513.886976][ T38] ? __pfx_watchdog+0x10/0x10 [ 1513.886996][ T38] ? __pfx_kthread+0x10/0x10 [ 1513.887016][ T38] ret_from_fork+0x514/0xb70 [ 1513.887038][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1513.887059][ T38] ? __switch_to+0xc89/0x1420 [ 1513.887090][ T38] ? __pfx_kthread+0x10/0x10 [ 1513.887110][ T38] ret_from_fork_asm+0x1a/0x30 [ 1513.887139][ T38] [ 1513.887296][ T38] Kernel Offset: disabled