last executing test programs: 12.395963263s ago: executing program 4 (id=494): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 12.20083188s ago: executing program 4 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB=' \v)'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000020700000a4c000000090a3f0400000000010000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a3100000000080003400000011c08000640ffffff00140000001100010000000000000000000700000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1, 0x1) 11.707764808s ago: executing program 2 (id=499): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f003, 0x5}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f020}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x89, @empty, 0xff1}}, 0x3, 0x9, 0x3, 0xc, 0x7, 0x0, 0xf2}, &(0x7f0000000180)=0x9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000007c0)={0x2, 'macsec0\x00', 0x3}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x3af0, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3adc, 0x1, [@m_pedit={0x3ad8, 0x1, 0x0, 0x0, {{0xa}, {0x3a7c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x1, 0x3cb2104f, 0x10000000, 0x7, 0x4406}, 0xac, 0x3, [{0x3, 0x5, 0x2, 0x8, 0x580000, 0x5}, {0x3, 0x7, 0x6, 0x101, 0x87ce, 0x7ff}]}, [{0x7ff, 0x4, 0x10, 0x7bc7b8ed, 0x6398, 0x7}, {0x3c27, 0xf, 0x9, 0x10, 0x8, 0x222a7023}, {0x8, 0x9, 0xffffffce, 0x9, 0x5, 0xd}, {0x3, 0x0, 0x3d, 0x2}, {0x7, 0x10b00222, 0x4, 0x3, 0x5, 0x2}, {0x4ba, 0x2, 0xa0, 0x1ff, 0xdd59, 0x7fffffff}, {0x9, 0x3, 0x80000001, 0x1, 0x3147, 0x40}, {0x8001, 0x0, 0x6, 0x10000, 0x81, 0xc}, {0x8000, 0x5, 0x7, 0x2e, 0xa, 0xb}, {0x2, 0x8, 0x5, 0x7, 0xb, 0x4}, {0x0, 0x0, 0x1, 0xa8ed, 0x7}, {0xf4, 0x7fff, 0x7, 0x1, 0x7, 0x7fffffff}, {0x5, 0x7, 0x7, 0x90e, 0xa0, 0x1}, {0x8, 0x3, 0xf6e, 0x0, 0x3, 0x7}, {0x0, 0xed, 0xfffffff3, 0x5, 0x7, 0x1}, {0x6f, 0xf6, 0xc39, 0x86, 0x7fffffff, 0xc}, {0x2, 0x7f, 0x100, 0x4e41, 0x6, 0x1a800000}, {0x5, 0x8, 0x8, 0x7f, 0x3, 0x4}, {0x2, 0x8001, 0x7ff, 0xfffffff9, 0x7fffffff, 0x7}, {0xc00, 0x7, 0x2, 0x46ea, 0x10000, 0x4}, {0x71, 0x9, 0x6, 0xfffffffa, 0x93f, 0x40}, {0x401, 0xdb, 0xd6, 0x0, 0x80000001, 0x1}, {0xfffffff4, 0x3, 0x2, 0x0, 0xcd, 0x5}, {0x3, 0x8, 0x0, 0x8, 0x9, 0x3}, {0x5, 0x6, 0xb9cbf58, 0x4, 0xeb1a, 0x80000000}, {0x5, 0x9, 0xb9, 0x7ee, 0x9, 0x5}, {0x84b5, 0xf, 0x410e, 0xffff, 0x8000, 0x101}, {0x1, 0x21b, 0x9, 0x6, 0x11c2, 0x6}, {0x5, 0x5, 0x5, 0x60000000, 0x6, 0x9}, {0xdfaa, 0xfffffff8, 0x4, 0x6, 0x8}, {0x9, 0x2, 0x6, 0x9, 0x0, 0x6}, {0xcd6, 0xffffffff, 0x10, 0x6, 0xcad1, 0x7}, {0xd67d, 0x5, 0x889, 0x3, 0x9, 0x8000}, {0x0, 0x16cc, 0x2, 0xbf9, 0x3, 0x6}, {0xffff, 0x4, 0x37d, 0xc2fb, 0x9, 0xffffffff}, {0x80000001, 0x3, 0xf, 0x23, 0x13, 0x2}, {0x7, 0x17e, 0x2, 0x8, 0x40, 0x1927}, {0x5, 0x4, 0xcd9b, 0xaa1, 0x7}, {0xfffffff9, 0x3, 0x0, 0xd0, 0x7f, 0x7}, {0x2, 0x1, 0x7, 0x100, 0xf, 0x2}, {0x7, 0xffffffff, 0x80000000, 0x801, 0xb4d0, 0x7}, {0x1, 0x7, 0xb69, 0x9, 0x6, 0x8001}, {0x1, 0x89, 0x2, 0xfff, 0x9, 0x8}, {0x1, 0x10000, 0x1, 0x5, 0xffff5ab1, 0x1ff}, {0x93a0, 0x0, 0x4, 0x1200, 0x8, 0x7fffffff}, {0x9, 0x4, 0x8, 0x80000000, 0xb7, 0x1}, {0x4, 0x47f, 0x5d, 0xf93, 0x5, 0x9}, {0x0, 0xf1, 0x4, 0x1, 0x400, 0x1}, {0x8, 0x6, 0x8001, 0x5, 0x9, 0x9}, {0x4, 0x3, 0xdce5, 0x3, 0xffffffff, 0x1}, {0x4, 0x1, 0x2, 0x2, 0x4}, {0x8, 0x81, 0xfffffff8, 0x13, 0x4000000, 0x200}, {0xfffffff7, 0xfffffff7, 0xea, 0x80000000, 0xe8e, 0x7}, {0x9, 0xffffffff, 0x6, 0x6, 0x8, 0xc501}, {0x4, 0x401, 0x1f, 0x6, 0x9, 0x7}, {0x3, 0x7, 0x9, 0x3, 0x3a6f, 0x10001}, {0x9, 0x8f, 0x8, 0x7, 0x9, 0x8}, {0x4000000, 0x9, 0x8, 0x1ff, 0x2d, 0xf5}, {0x9, 0x2, 0x6f, 0x7, 0x2, 0x1}, {0x0, 0x7, 0x4, 0x3, 0xee2, 0x88}, {0x3, 0x1ff, 0xffff5d5c, 0x2, 0x10, 0x3}, {0x9, 0xd, 0x7, 0x1, 0xd, 0x7fffffff}, {0x8001, 0x81, 0x7ff, 0x611, 0x7fff, 0x7}, {0x2, 0xfffffffa, 0x7, 0x200, 0x36e0, 0x3}, {0xca, 0x5, 0x0, 0x3, 0x8, 0xc2b}, {0x100, 0x6, 0x7, 0x2, 0x10000, 0x6}, {0xfffffff9, 0x6, 0x0, 0x800, 0x40, 0xbd}, {0xbc1e, 0x4, 0x80, 0xf, 0x3}, {0x5, 0xe, 0x401, 0x8, 0xff, 0xca72}, {0x10, 0xb9, 0x10000, 0x21, 0x82, 0xff}, {0xffff, 0x81, 0x294e, 0x6, 0x40, 0xa35}, {0x3c, 0x200, 0x8000, 0x1, 0x80, 0x6}, {0x8, 0x5, 0x80000001, 0x8, 0x7}, {0x7, 0x8, 0x4c5, 0x6, 0x1, 0x48}, {0x5, 0x9, 0x9, 0x46bc, 0x6, 0x6}, {0x8, 0xa9c3, 0x6, 0xffffffff, 0x7c}, {0x3, 0x7, 0x6, 0xa, 0x6, 0x2}, {0xe74, 0x8de0, 0x9, 0x9, 0x5, 0x3}, {0x2, 0x1, 0x1, 0xa, 0x6}, {0x0, 0x4, 0x8, 0x3, 0x100, 0x46}, {0xe, 0x7, 0x7, 0xfffffff9, 0x3, 0x9}, {0x7, 0x101, 0x3, 0xfffffff7, 0x0, 0xfffffffc}, {0x1, 0xef5, 0x7, 0x3, 0x98, 0x200}, {0x1, 0x354, 0x7, 0x100, 0x1, 0x6d45be1}, {0x8, 0x0, 0x8, 0x6, 0x9, 0x1}, {0x1ff, 0x8, 0x1, 0x768, 0x59b, 0x3}, {0x10000, 0xfffffffb, 0x1, 0xde, 0x9, 0xd}, {0xfffffff8, 0xc2, 0xffff, 0x7, 0x1bf9e570, 0x101}, {0xbb2, 0xe3, 0x0, 0x7, 0x80, 0x81}, {0x8, 0x7, 0x4, 0x7fffffff, 0x0, 0x800}, {0x2, 0x0, 0x8, 0x1, 0x0, 0x9}, {0x4, 0xfffffffa, 0x8, 0xc07, 0x7, 0x3}, {0x2, 0x80, 0x4, 0x2, 0x1000, 0x4}, {0x5, 0x41, 0x8c98, 0x3, 0x80000000, 0x7}, {0x9, 0x6, 0x0, 0x4, 0x6, 0x411}, {0x4, 0x2, 0x0, 0x1, 0xf1, 0x1}, {0x1, 0x52, 0x70f, 0x9a00, 0x8, 0x5}, {0xffffffff, 0x5, 0x0, 0x1, 0x8, 0x2}, {0x80000000, 0x43, 0x3, 0x5, 0xb, 0x7}, {0x7, 0xfffffffd, 0x8001, 0x6, 0x6, 0xc34}, {0x6, 0x1000, 0x7, 0x8, 0x6, 0x10}, {0x8, 0x7fffffff, 0x6, 0x1, 0x2, 0x4}, {0x6, 0x1, 0x3, 0x9, 0x0, 0x7}, {0x0, 0x3, 0x2, 0x5, 0x48b0, 0x3ff}, {0x7ff, 0x10001, 0x6, 0xc, 0x4, 0x2}, {0x8, 0x6, 0x7, 0x2, 0x7, 0x3}, {0x401, 0xfffffffe, 0x5, 0x6, 0xb0a, 0xfffffffb}, {0x5, 0x9, 0x7, 0x7fff, 0x9, 0xd}, {0x84d, 0x800, 0xffff, 0x7, 0x3, 0xfffffb14}, {0xfffffffe, 0x3, 0x1, 0xfffffffa, 0x80, 0x4}, {0x8, 0x8, 0x1000, 0x8, 0x5, 0x200}, {0xffffff80, 0x401, 0x514, 0x7, 0xd501, 0x4}, {0x3, 0x9da, 0x6, 0x1, 0x800, 0x5}, {0x7ff, 0x5, 0x4, 0x8, 0x5, 0x4}, {0x5, 0x0, 0x2, 0xe, 0xfffffff9, 0x4}, {0x9, 0x6, 0x9, 0x6, 0x6, 0xb}, {0x8, 0x5, 0x10, 0x7fff, 0xfffffff8, 0xb95}, {0x7, 0x101, 0x3, 0x7, 0xfffffff7, 0x9}, {0x4, 0x1, 0x2, 0x7, 0x6, 0x2}, {0x1000, 0x81, 0x2, 0x7, 0x8, 0x6}, {0x4, 0xdb4, 0x0, 0x3, 0x6, 0x5}, {0xc10, 0x401, 0x6, 0x8, 0x7, 0x800}, {0x8, 0x400, 0xa, 0x1, 0x400, 0x7fffffff}, {0x6, 0xa1, 0x10001, 0x3, 0x8, 0x6}, {0x7, 0x4, 0x3, 0xad, 0x7f, 0xef}, {0x9, 0xeba0, 0x7fff, 0x8, 0x9, 0x3}, {0x3, 0x200, 0xbe97, 0xef7, 0x3, 0x1}, {0x0, 0x5, 0x5, 0x80000001, 0xfffffffa, 0x1}], [{0x3}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x5}, {0x1, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x3, 0x1}, {0x4}, {}, {0x2}, {}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0xa3a0245d64111255}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x3}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x5}, {0x1}, {}, {}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x5, 0x2}, {0x3}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x0, 0x1dcf, 0x10000000, 0x2, 0x4}, 0x38, 0x0, [{0x5, 0xf1, 0x1, 0x59ed, 0x5}, {0x7, 0x3, 0x4, 0x6, 0x8, 0x6}, {0x9f, 0xd9d2, 0x7, 0x33, 0x5, 0x1}, {0x5266, 0x6, 0xe, 0xd840, 0xffffffff, 0x3}, {0x7, 0x1, 0x0, 0x7f, 0x6, 0x3}, {0x6, 0x1, 0x2, 0x9, 0x7ff, 0xfc}, {0x3, 0x0, 0xfffffff8, 0x197, 0x0, 0x40}]}, [{0x7fffffff, 0x6091, 0x3, 0x7, 0x8, 0xd}, {0x9, 0x8, 0x3, 0x6, 0x8, 0x2}, {0x9, 0x9, 0x6e9, 0x4, 0x100, 0x4}, {0x6, 0x4, 0x3, 0x2, 0x5, 0xaf2}, {0x1, 0xfffffff9, 0xffffffff, 0x2, 0x10001, 0x8}, {0x7, 0x7, 0xfffffffa, 0x7}, {0x78, 0x7f, 0x6, 0x5, 0x1, 0x100}, {0x1000, 0x7, 0x8, 0x0, 0x3ff, 0x7}, {0x0, 0x4, 0x2, 0x0, 0x9dd, 0x5}, {0x8d8, 0x7, 0x4, 0x2bd, 0x6, 0x7}, {0x7, 0xfff, 0x1, 0x3, 0xa, 0x81}, {0x8, 0x3, 0x3, 0x7fffffff, 0x9, 0x1}, {0x3, 0x7, 0x1, 0xff, 0xcc, 0x68d8}, {0x0, 0x81, 0x5, 0x9, 0xfffffe01, 0x6}, {0x1, 0x80000000, 0x2, 0x3, 0x6, 0x41}, {0x37e, 0xe0000000, 0x4, 0x0, 0x2cdf9a00, 0x1e11}, {0x8001, 0x101, 0x7, 0xa, 0x1, 0x7}, {0xfff00, 0x7, 0x7fffffff, 0x2, 0x3, 0x8}, {0x7, 0xffffffff, 0x3, 0x8, 0x0, 0x2}, {0x0, 0x0, 0x7fffffff, 0xfffffc00, 0x2, 0x3}, {0x5, 0xffffffff, 0x8000, 0x9, 0x7, 0xfffff7e2}, {0x0, 0x8, 0x10, 0x7f, 0x4}, {0x7, 0x2ea7, 0x6, 0x80000001, 0x9, 0x2}, {0x5, 0x3, 0x800, 0x8, 0x8, 0x3}, {0x3, 0x4, 0x4bcc, 0x8, 0x1ac, 0x6}, {0x3, 0x5, 0x6, 0x5, 0x28f4, 0x2}, {0x9e8a, 0x3, 0x200, 0x48cf, 0xab39, 0x2}, {0x5, 0x85, 0x5, 0x9, 0x48cd, 0x10}, {0xfffffffe, 0x6, 0x400, 0x2, 0xf6db, 0xfffff3ec}, {0x0, 0x2, 0xd52, 0x3d, 0x8c55, 0x6}, {0x3, 0x1, 0xe24, 0x0, 0x81, 0x7f}, {0x0, 0x3, 0x4, 0x9, 0x3, 0xffffff8e}, {0xaf21e6a, 0x2, 0x10001, 0x3, 0x3, 0x3}, {0x6, 0x400, 0x7ff, 0xfe, 0x8, 0x5}, {0x7fffffff, 0x1000, 0x6, 0xb3, 0xcf1d, 0xbbd9}, {0x61, 0x101, 0x59, 0x5, 0x2, 0x800}, {0x3, 0x6, 0x10001, 0x0, 0x5, 0x1ff}, {0x10, 0xda4, 0x3, 0x7, 0x6, 0x4}, {0xffffffff, 0x2, 0xb, 0x4fe5, 0x513b, 0x2}, {0x1, 0x356b35f1, 0x6, 0x10001, 0x4, 0x5}, {0xfffffffd, 0x400, 0x0, 0x401, 0x87c}, {0x8, 0x6, 0x9, 0x4, 0x5, 0x1}, {0x7ff, 0x7, 0x3ff, 0x2, 0x8000, 0xffffffff}, {0x851, 0x9, 0xfffff69e, 0x6, 0x9, 0x4}, {0x3, 0x3, 0x92d6, 0xd, 0x27f8c000, 0x9}, {0x2, 0x7fff, 0xe, 0x6, 0x1, 0x1}, {0x2, 0x2, 0x8, 0x9, 0xc, 0x4}, {0x8d5, 0x2, 0x1, 0x7, 0x5, 0x100}, {0x81, 0x9, 0x8, 0x194, 0x4, 0xb8}, {0x5, 0x8, 0x8, 0xd52, 0xffff7fff, 0xedb}, {0x80000001, 0x0, 0x8, 0x1, 0xfffffffd, 0x10000}, {0x7fffffff, 0x1000, 0x1, 0xa5ff, 0x0, 0x1ff}, {0x4, 0x8a2, 0xfffffff8, 0x400, 0x2, 0xd}, {0x7688, 0x4, 0xdda, 0x8, 0x81, 0x3}, {0x0, 0xd523, 0x6, 0x0, 0xfffffffc}, {0x1, 0x3eff, 0xfffffffd, 0x9, 0x3, 0xf}, {0x1, 0xe, 0xffffffad, 0x8, 0x5}, {0x0, 0x6, 0xffffffff, 0x8001, 0xff, 0x9}, {0x0, 0xffffffff, 0xf, 0x0, 0x8, 0x2}, {0xdafc, 0x7, 0x5, 0x1000, 0xa481, 0x8}, {0x6, 0x0, 0x2, 0x1ff, 0x4, 0x7}, {0x9, 0x400, 0x3, 0x7, 0x2}, {0x23800000, 0x7f, 0x20, 0x7, 0x2, 0x10001}, {0xa49, 0x5, 0x7, 0x73, 0xfffffff8, 0xffffffff}, {0x3, 0x1ff, 0x1, 0x4, 0xf, 0x1}, {0x4, 0x3, 0xd32, 0x8001, 0x1, 0x80000000}, {0x1, 0x9, 0x2, 0xe1d, 0x2, 0xffffa531}, {0x4, 0x0, 0x8cee, 0x0, 0x2}, {0x200, 0xbac, 0x5, 0x6, 0x5, 0x101}, {0x0, 0x6, 0xa, 0x4, 0x10001, 0x6}, {0xc9, 0x4ca6, 0x7fff, 0x17c, 0xf10f, 0x8}, {0x2, 0x5, 0x7, 0x1, 0x3, 0x40}, {0x7, 0x5, 0x6, 0x7f, 0x7, 0x81}, {0x81, 0x7, 0x5, 0x9, 0x1, 0x6}, {0xa, 0x9, 0x1, 0x9, 0x3}, {0x6, 0x6, 0x9, 0x0, 0x4, 0x200}, {0xffff, 0xead, 0x9, 0x200, 0xfffffff0, 0x6}, {0x0, 0x1ff, 0xeb, 0x6, 0xf291}, {0x8, 0x6, 0x0, 0xaadd, 0x80, 0x849}, {0x0, 0xb74, 0x41, 0x0, 0x6, 0x86e}, {0x1, 0x7dd, 0xade, 0x9, 0xfff}, {0xba90, 0x6, 0x3, 0x81, 0x5534, 0x9e89d73b}, {0x4, 0xf9, 0x8, 0x300, 0x2, 0x6}, {0x2, 0xffff, 0x6, 0x80, 0x5, 0xa}, {0x9b6, 0x4, 0x2, 0x3, 0x2, 0x87}, {0x5, 0x6d, 0x8, 0x8, 0x6, 0x1a748b1f}, {0x4, 0x7, 0x200, 0x0, 0x2, 0xd944}, {0x1, 0x8, 0x9, 0x4, 0x2, 0x36f}, {0x5, 0xffff8ab0, 0x0, 0x1, 0x2, 0x5}, {0xfffffff7, 0x3, 0x0, 0x8, 0x8f, 0xd}, {0x9, 0x8, 0x2, 0xfffffffb, 0x3, 0x1000}, {0x8, 0x0, 0x144a, 0x0, 0x9, 0x3ff}, {0x3, 0x0, 0x3, 0xfffff0b4, 0x2, 0x1}, {0xfffffffa, 0xffffff81, 0x4, 0x8000, 0x1, 0x4}, {0x0, 0xc, 0x3, 0x4, 0x14, 0x49}, {0x0, 0x401, 0x3ff, 0x10000, 0x9, 0xd2aa}, {0x8b2b, 0x3, 0xffff8000, 0x6, 0x7, 0x2}, {0x3, 0x1000, 0x6982171b, 0x0, 0x48c6, 0x7}, {0xd, 0x8001, 0x4, 0x200, 0xfffffffa, 0xfffffffe}, {0x491c, 0x8, 0x8, 0xb0df, 0x80000000, 0x3}, {0x7fffffff, 0x2000, 0xd, 0x8, 0xffffffff, 0x8}, {0x3404, 0x3, 0x819f, 0xffff, 0x8000, 0x8069}, {0x8, 0xf, 0x40, 0x3, 0x80000000, 0x3}, {0x8, 0x100, 0x1, 0x860b, 0x3, 0xddcb}, {0x2, 0x2, 0x3, 0x80000001, 0xd917, 0x25a}, {0x80, 0x7f, 0x5, 0x200, 0x7f, 0x3}, {0x8, 0x7, 0x2, 0xd, 0x6, 0x4}, {0x10000, 0x6, 0x5, 0x8, 0x8, 0xcb0}, {0x6, 0x4, 0x4, 0x6, 0xb58, 0xffffae73}, {0x0, 0x2, 0x1, 0xc, 0xfffffffb, 0x7}, {0x6, 0x6b31, 0x6, 0x1, 0x9, 0x7bb}, {0x6, 0x5, 0x5, 0x1, 0x1, 0x2}, {0x1, 0x207f, 0x1, 0x4, 0x7f, 0xc76}, {0xdd2, 0x2d, 0x0, 0x0, 0x16c69164, 0x401}, {0x0, 0x786c94f3, 0x6, 0x6, 0xffffffff, 0x7}, {0xfb3, 0x3, 0x400, 0x5, 0x1, 0x4}, {0x2, 0x80000001, 0x78c, 0x3, 0x1bbe4eeb, 0x3}, {0x3ff, 0x3, 0x4, 0x7fffffff, 0x6, 0x9}, {0x62d, 0x10, 0x46, 0xfffffffc, 0x780, 0x9}, {0xffff, 0x0, 0x1, 0x7fffffff, 0x2, 0x400}, {0x1, 0x5, 0x0, 0x3ff, 0xa43, 0x8001}, {0x688, 0x8000, 0x7f, 0x80000001, 0x7, 0x5}, {0x0, 0x5, 0x5, 0x9, 0x87, 0x2}, {0x81, 0xfffffff1, 0x2, 0x5, 0x5, 0x4}, {0x3, 0xffff, 0x6, 0x5, 0x7, 0x1}, {0xfffffffe, 0x65f, 0x6, 0x7fff, 0xb24, 0x401}, {0x8, 0x4, 0x0, 0xf, 0x8, 0x400}, {0x4, 0x3ff, 0x3, 0x1, 0x4, 0x80000001}], [{0x4}, {0x3}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x3, 0x4ce746ba6bf55883}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0xee0327b345c692ef, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x5}, {0x2}, {}, {0x2}, {0x3}, {0x2}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}]}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xd, 0x5, 0xfffffffffffffffd, 0x638, 0x9}, 0x2, 0xc, [{0x4, 0x10000000, 0x7fff, 0x280, 0x1ff, 0x5}, {0x2, 0x4, 0x5, 0x9, 0x9, 0x4}, {0x8, 0xb, 0x6, 0xfffffffe, 0x64c, 0x9ef}]}, [{0x1da4, 0x2, 0x5, 0x0, 0x3f5fd3ec, 0x248}, {0x3, 0xfe9e, 0x0, 0x3ff, 0x4, 0x7}, {0x0, 0x7, 0xffffffff, 0x9, 0x5, 0x3}, {0x10000, 0x3b19b772, 0x3, 0x6, 0x3, 0x8001}, {0x3, 0x2, 0x1, 0x400, 0x2, 0xeb8b}, {0x1, 0x5, 0x0, 0x6, 0x1, 0x7234}, {0x9, 0x40, 0x9, 0xe, 0x401, 0x8}, {0x3, 0x49, 0x7, 0x100, 0x10000, 0x9}, {0x3ee8, 0x2, 0x40, 0x5, 0x8, 0x800}, {0x25a, 0x3, 0xf, 0x81, 0x4, 0xfffffff7}, {0x7, 0xfff, 0x1, 0x7, 0xfffffe01, 0x9}, {0x0, 0x5, 0x9, 0x7a0d, 0x9, 0x15e}, {0x2, 0x8, 0x7f, 0xe8, 0x5, 0x8}, {0x2, 0x2, 0x97ed, 0xd17, 0x9, 0x2}, {0xbb4, 0xa65d, 0x3, 0x8, 0x6, 0xa}, {0xc, 0xe, 0x7, 0x10001, 0x6, 0x7}, {0x6, 0x6, 0x7fff, 0x200, 0x3, 0x9}, {0xf27f, 0x7, 0x8, 0x9, 0x80000000, 0x6}, {0x3, 0xd, 0x1, 0x6, 0x0, 0xd}, {0x8b3, 0x4, 0x6, 0x3ff, 0x9e55, 0x1}, {0x4d94, 0x219000, 0x6, 0x9, 0x1, 0x3}, {0x3, 0x0, 0x7, 0xfffffff7, 0x4, 0x5}, {0x1, 0x3, 0x2e, 0xffffffff, 0xfffffffe, 0x7}, {0x8, 0x1ff, 0x1, 0xe, 0x561, 0x6}, {0x2, 0x0, 0x0, 0x2, 0x4, 0x2}, {0x3, 0x5, 0xfc14608, 0x6, 0x3, 0x9}, {0x10000, 0xe, 0x9, 0x2, 0x40f00, 0x3}, {0x29, 0xe, 0x5, 0x1000, 0x80000000, 0x2}, {0x1e0f, 0x1, 0x8, 0x3, 0x6, 0x5}, {0x3, 0x6, 0x9b, 0x3ff, 0xfffffa1d}, {0x8, 0x10, 0x9, 0xffff, 0x800, 0x7ff}, {0x3, 0x5, 0x6, 0x1bd3, 0xc, 0xffffffff}, {0xf, 0x8, 0x0, 0x6, 0x2, 0x5}, {0xa3, 0x3, 0x9, 0xfffff000, 0x81, 0x6}, {0x5273, 0x8, 0x8, 0x10001, 0x3, 0x5}, {0xfffffffc, 0x8, 0x8, 0x5, 0x7, 0xf2b8}, {0xffffffff, 0x0, 0x0, 0x4, 0x8, 0x1}, {0x8, 0xa, 0x2, 0x5, 0x6, 0x7}, {0x8, 0xc, 0x7, 0x63, 0xfffffffc, 0x1}, {0xf, 0x4, 0x5, 0x6, 0x6, 0x6}, {0x4, 0x12, 0x0, 0x2, 0x5, 0xd5c}, {0xf9, 0x1, 0xb0, 0x9, 0x5, 0x80000000}, {0xfffffff7, 0x5, 0x6, 0x5, 0x556, 0x73}, {0x80000001, 0x0, 0x36, 0x3, 0x100, 0x5}, {0x10, 0x38, 0x5, 0xb, 0x7f, 0x46}, {0xd, 0xc2af, 0x7fffffff, 0xb, 0x2, 0x600000}, {0x4, 0x4, 0x7948, 0x80000001, 0x8, 0xfffffff7}, {0x0, 0x1000, 0x4, 0x4, 0x80, 0x6}, {0xffff9039, 0xdf, 0x901, 0x1ff, 0x2, 0x8001}, {0x401, 0x5, 0x8, 0x7, 0x4, 0xde83}, {0x9, 0x5, 0x2, 0x1ff, 0x200, 0x101}, {0x1, 0x6, 0x4, 0x2, 0x5, 0x6}, {0x2, 0x401, 0x4, 0xfffffff9, 0x9ce, 0x5}, {0x8c, 0xd76, 0xa37, 0x4b651b06, 0x6, 0x9}, {0x1, 0x5d, 0x0, 0x6, 0x2, 0x2}, {0x1, 0x6, 0x0, 0xfffffffb, 0xfffffff9, 0xe0}, {0x1, 0x10001, 0x6, 0x0, 0xfc8, 0x8000}, {0x6, 0xe950, 0x41, 0x5, 0xf1, 0x9}, {0x8000, 0x1, 0x0, 0x101, 0xffff4910, 0x3}, {0xfffffff3, 0x101, 0x7, 0x0, 0x2, 0x5}, {0x9, 0x101, 0x7, 0x81, 0x4, 0x2cae}, {0x3, 0x0, 0x2, 0x6, 0x11, 0x6}, {0x9, 0x2, 0x3, 0x1000, 0x2, 0x8}, {0x5, 0xadb, 0x8, 0x2, 0x4, 0x3}, {0xe, 0x5, 0x5f, 0x80000000, 0xffffffd6, 0x2}, {0x4, 0x8, 0x718, 0x4, 0x7, 0x1}, {0xabb, 0x1, 0x9, 0x1, 0x9d7, 0x8}, {0x3, 0x4, 0xfffffffc, 0x8, 0x101, 0x1eee}, {0x5, 0x8, 0x3, 0x1, 0xf4ac82f}, {0x7, 0x0, 0x7fffffff, 0x6, 0x7, 0xfffffffe}, {0x4, 0x3, 0x40, 0x97c8, 0x4, 0xffffffff}, {0x8, 0x6, 0x2, 0x3, 0x0, 0xfffffffd}, {0x3, 0x40, 0xfffffff7, 0xc, 0x8000, 0x71a}, {0x80000001, 0x0, 0x7f, 0x3ff, 0x2, 0x3}, {0x4, 0x0, 0x400, 0x100, 0x2, 0xb}, {0x40, 0xd, 0x4, 0x9, 0xffff, 0xf5}, {0x3ff, 0x2c, 0x80000001, 0x766f0718, 0x1, 0x8}, {0xfffffffd, 0x0, 0x5, 0x9, 0xd, 0x4}, {0x2, 0x0, 0x4, 0x8, 0x9d60, 0x3}, {0xb7, 0x200, 0x6, 0x0, 0x7}, {0x5, 0x1, 0xc2d, 0x2d, 0x0, 0x2}, {0x2, 0xfffffff7, 0xe, 0x9, 0x6, 0x5}, {0x6, 0x0, 0x100, 0x4, 0xc, 0xffffffff}, {0x7fff, 0x4, 0xff, 0x10001, 0x5, 0x6}, {0x4, 0x6, 0x0, 0xe4, 0x1, 0x8}, {0x6, 0x3, 0x8, 0x8001, 0x80000000, 0x9}, {0x200, 0x3, 0x200, 0x7, 0x5, 0x5}, {0xb, 0x7fff, 0xfe, 0x3ff, 0x9, 0xc8}, {0x7, 0x7, 0xff, 0x80000000, 0x10000, 0x5}, {0x4, 0xfffffff9, 0x3, 0x3a, 0xd6, 0xb}, {0x8, 0x1, 0xfff, 0x9, 0x6, 0x59}, {0x8, 0x1, 0x5, 0x1c2, 0x7, 0xa}, {0x0, 0x4040000, 0x2, 0x3, 0xffffff81, 0xc}, {0x91, 0x3, 0xdb8, 0x9, 0x8}, {0x40000, 0xfff, 0x6, 0x3, 0x80000000}, {0x8, 0x58, 0x6, 0x9, 0xff}, {0x8, 0xf02d, 0xffffe295, 0x1, 0xfffffff6, 0x76d}, {0x8, 0x17, 0xab, 0x80000001, 0x5, 0x5}, {0x0, 0x100000, 0x5, 0x94, 0x33467eab, 0x9}, {0x1ff, 0xa, 0x2, 0x0, 0x80000000}, {0x5, 0x7fff, 0x2, 0x9, 0x11, 0x1}, {0x0, 0x7fff, 0x5, 0xe18, 0x6, 0x3}, {0x1, 0x400, 0x7, 0x6, 0x101, 0x4}, {0xd51, 0x9, 0x5, 0x5, 0x8, 0x200}, {0x5, 0x4, 0x2, 0x9, 0x8, 0x7}, {0x7fffffff, 0x3ff, 0x1ff, 0xd0, 0x200, 0xa25}, {0x5c, 0x9, 0xfffffffa, 0x400, 0x0, 0x852}, {0xffffffff, 0x9, 0x8000, 0x0, 0x401, 0x7ff}, {0x2, 0x3, 0x10, 0x5, 0x10, 0x10001}, {0x7, 0x0, 0x200, 0x9, 0xfff, 0x3}, {0x1000000, 0x4, 0x4, 0xaf9b, 0x0, 0x87ca}, {0x8001, 0xd5, 0x9811, 0x4, 0xf, 0xa1a1}, {0x400, 0x10001, 0x6, 0x4, 0xfffffe01, 0x101}, {0x9, 0x1, 0x7, 0x1, 0xfffff124, 0x10001}, {0x0, 0x4, 0x3, 0x81, 0x2, 0x400}, {0xfff, 0x40, 0x8001, 0xfffffffd, 0x1, 0x7}, {0x6, 0xfffffffa, 0x8, 0x3, 0x5, 0xd}, {0x9, 0x9, 0xfffff801, 0x5, 0x7ff, 0x1}, {0x4, 0x400, 0xffffffff, 0x82a, 0x2, 0x4}, {0x7a84, 0x28, 0x3, 0xb02, 0x8000, 0x7fff}, {0x6aef47cf, 0x80, 0x8000, 0xd, 0xd, 0x1}, {0xe, 0x6, 0xfff, 0x4, 0xf8e, 0x8}, {0x4d5f, 0x43ed, 0x3ff, 0x715a, 0x8, 0x6}, {0x3, 0x1, 0xf08, 0x3, 0x3, 0xfffffff7}, {0xb, 0x3, 0x4, 0x6, 0x8, 0x6}, {0x5, 0xffb, 0x5, 0x6, 0x3, 0xa}, {0x4, 0x2, 0x80000001, 0xd, 0x5, 0x7}, {0x7fff, 0x6, 0x2, 0x8001, 0xffffffff, 0x7}], [{0x0, 0x1}, {0x4}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x4}, {0x2}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x17e23f32477e572a}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x2, 0xa8b38001235954f9}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x397ce2e766585afa}, {0x5}, {0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x3}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {0xcb6f4bfa78a83b69}, {0x3}, {0x3}, {0x4, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x4}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x3af2, 0xfffffffd, 0x1, 0x0, 0x3e}, 0x1, 0x2, [{0x2, 0x2, 0x7, 0xa00000, 0x1b1, 0x40}, {0x1ff, 0x32a1, 0x1ff, 0x9, 0x8, 0xd}]}, [{0x7fff, 0x0, 0x601, 0x200, 0x10000}, {0x200, 0xe, 0x9, 0x80, 0x9, 0x33}, {0x9e48, 0xde97, 0xb80, 0xe4b, 0x9}, {0x5, 0x5, 0x3, 0xfc, 0x200, 0x9}, {0x6, 0x3e0, 0x1, 0x363b6377, 0x9, 0x7ff}, {0xd46, 0x4, 0xbab, 0x1, 0x4, 0x1}, {0x7, 0x4, 0xd, 0xb3, 0xb3, 0x9}, {0x7, 0x3, 0x60f, 0x9, 0x8000, 0x4}, {0x800, 0x40, 0x13f9, 0x8f, 0xfffffffa, 0xd}, {0x80000001, 0x2add, 0x3, 0x80, 0x1000000, 0x1}, {0x4, 0x122, 0xfd, 0x6, 0xb, 0xf}, {0xffff8000, 0x8, 0x1, 0x0, 0x0, 0x9}, {0x7, 0x3, 0x8, 0x0, 0x7, 0x4}, {0x2, 0x9, 0x81, 0x9, 0xfffff73c, 0xffff0001}, {0x0, 0x7f, 0x401, 0xf, 0x7, 0x73}, {0x3, 0xf, 0xffffffff, 0x9, 0xfffffe82, 0xd7}, {0x26d9040c, 0xc, 0x0, 0x0, 0x200, 0xffffffff}, {0x800, 0x3ff, 0xfffffffb, 0xf, 0x2, 0x8}, {0x9, 0x3, 0x8, 0xffff, 0x1, 0x4a18519}, {0x7, 0x6, 0x2, 0x3, 0x3, 0x4}, {0x7fff, 0x5, 0x2, 0x3, 0x3}, {0x7ff, 0x6, 0x0, 0xbf2c, 0x9, 0x9}, {0x3, 0x3, 0x30, 0xffffd604, 0x3, 0x3}, {0xfb, 0x9, 0x6, 0x1, 0x6, 0xfff}, {0x8, 0x9, 0xc, 0x5, 0x7ff, 0x7fffffff}, {0x8d0, 0x100, 0x22, 0x5, 0x2, 0xfffffffa}, {0x40, 0xa32, 0x2, 0x632e, 0x4}, {0x7, 0x887, 0x2, 0x7acb5808, 0xb662, 0xff}, {0x1, 0x3, 0xfffffff7, 0x40, 0x5, 0x5}, {0x785, 0x6, 0x4, 0x8a5, 0x6, 0x8001}, {0x4, 0x80000000, 0xd, 0x80000001, 0x4, 0x1d}, {0x800, 0xf94, 0x6, 0x0, 0x5, 0x1000}, {0x8, 0xf3c, 0x0, 0x3, 0x1, 0x10}, {0xfffeffff, 0xe, 0xd86, 0x3, 0x0, 0xc1cc}, {0x4, 0x60d, 0x83ec, 0x5, 0xfffffd1d, 0xe2}, {0x80000000, 0x274, 0xd931, 0x2, 0xc, 0x6}, {0x1ff, 0x80000000, 0x7ff, 0x5, 0x4, 0xbc}, {0x8001, 0xfff, 0x3, 0x7, 0x3, 0x3}, {0xffff8000, 0x8, 0x2a2, 0x5dd, 0x5, 0xfff}, {0x10, 0x7, 0x400000, 0x6, 0x1, 0xe2c}, {0x7f, 0x9, 0x1, 0x8001, 0x9, 0x10}, {0x8, 0x200, 0x7, 0x4, 0x3, 0x1938e811}, {0xffff196d, 0xc6, 0x5, 0x5, 0xb3c}, {0x0, 0xe7c, 0x5, 0x8, 0x6, 0x1}, {0x8, 0x2, 0x8, 0x2, 0x5, 0xe00}, {0x6, 0x1, 0x4, 0x60600000, 0xffffffff, 0x1}, {0xb6, 0x1a80000, 0x2, 0x3, 0x83, 0x7ff}, {0x4, 0x7, 0x4c, 0x80000000, 0xef5b, 0xc}, {0x3, 0x5, 0x6, 0x401, 0x90000000, 0xc0e}, {0x5, 0x2, 0xfffffffa, 0xc446, 0xfff, 0x82e}, {0x65f, 0x7, 0x1, 0x10, 0x3, 0x80000001}, {0x29, 0x1159, 0x7, 0x0, 0xb08, 0xd18}, {0xb, 0x1, 0x4, 0x7f, 0x6, 0x6}, {0x7f, 0x3, 0x3, 0xf340, 0xffffffff, 0x1}, {0x3d, 0x2, 0x665a, 0x2, 0xfff, 0x3ff}, {0x0, 0x5, 0x0, 0xff, 0x20, 0x7}, {0x10001, 0x10000, 0x10, 0x9, 0x81, 0x38a1}, {0xfffffff8, 0x0, 0x0, 0x6d1c4f26, 0x4, 0x1}, {0x8, 0x7fffffff, 0x8, 0x4, 0x8001, 0x5}, {0xffff090b, 0xa, 0xf84, 0x5, 0x7, 0x3}, {0x7, 0x2, 0x7ff, 0x4, 0x4, 0x3}, {0x0, 0x6, 0x4, 0x1, 0x6}, {0x9a, 0x5, 0x1a2a, 0xf00, 0x1, 0x3}, {0x101, 0x2, 0xfff, 0x25a6be6c, 0x9, 0x61}, {0x9, 0x2, 0xb4, 0x100, 0x72}, {0x33, 0x2, 0x1, 0xfffffffa, 0x2, 0xffff}, {0x10, 0x7, 0x37, 0x4, 0x5, 0x8}, {0xf, 0x7, 0x81, 0xff, 0x0, 0x4}, {0x5, 0x4, 0xd3, 0x5, 0x2, 0x7}, {0x0, 0x9, 0x80000000, 0xff, 0x0, 0xffff}, {0x8001, 0x2, 0x9, 0xa5c, 0x7, 0xfffffeff}, {0xffffffc8, 0xcb5, 0x7fff, 0x6, 0x5b8b, 0x8}, {0x9, 0xf, 0xa28, 0x6, 0x6}, {0x29c, 0x800, 0x2, 0x6, 0x9, 0x2}, {0x2, 0x7fff, 0x8db, 0x7fff, 0x2, 0x7}, {0x3, 0x0, 0x7f, 0x7ff, 0x0, 0x7}, {0xfffeffff, 0x657, 0x200, 0x0, 0x2, 0x4}, {0xffffffff, 0x4, 0x9, 0x4, 0xffff, 0x9}, {0x3, 0x9, 0x1, 0x0, 0x2, 0x9}, {0x3, 0xfad0, 0x3, 0x4, 0x6, 0x6}, {0x6, 0x7, 0x4, 0x9, 0x3ff, 0xf}, {0x5, 0x66a7, 0x3d5, 0xd, 0xd3, 0x1}, {0x1ffc0, 0x7, 0x45e, 0x6, 0x0, 0xd63b}, {0xd, 0x3, 0xd158, 0xc, 0x1, 0x4}, {0x3, 0x7, 0x2, 0x95, 0x1, 0xfffffb0d}, {0xa5, 0x800, 0x3, 0x4, 0x6, 0x101}, {0x5, 0xffffffff, 0xabb, 0x1, 0x1, 0x93}, {0xc, 0x9, 0x9, 0x0, 0x4}, {0x80000000, 0x6, 0x7, 0xffffffff, 0x7, 0xffffffff}, {0x2, 0xdf, 0x10000, 0x7, 0xad, 0x7}, {0xdc31, 0x800, 0x4, 0x8, 0x7, 0x5}, {0x3, 0xfffffff7, 0xb, 0x400, 0x4, 0x4}, {0xe1, 0x93, 0x7ff, 0x1, 0x1000, 0x93}, {0xfffffff9, 0xac, 0x0, 0x4, 0x48900, 0x6}, {0x5, 0x9, 0x1, 0x6, 0x5, 0x2}, {0x7, 0x8000, 0x6, 0x5, 0x0, 0x9}, {0x9, 0x280, 0x0, 0x80000000, 0x5, 0x3}, {0x1, 0x81, 0x9, 0x8, 0xe8, 0x6}, {0x81, 0x4, 0x754565d6, 0x6, 0x4, 0xffff}, {0xf, 0x6, 0xa43, 0x1, 0xfff, 0x8}, {0x9, 0xffffffff, 0xf49d, 0xb0e4, 0x8}, {0x4, 0x9, 0x3, 0x0, 0xffff4c42, 0xffffff86}, {0xfec5, 0x57, 0x200, 0xa, 0x6, 0x8}, {0xffffff7f, 0x6, 0xfffff801, 0x6, 0x3, 0x6}, {0x80000000, 0x7fffffff, 0x3, 0x3ff, 0x4435, 0x400}, {0x8000, 0x8001, 0x5a, 0x6, 0x1ae, 0x7}, {0x8001, 0xa541, 0xffffe000, 0x1000, 0x8001, 0x9}, {0x264, 0x66, 0x0, 0x7, 0x3, 0xea}, {0x3, 0xd83c, 0xe0, 0x4, 0x4, 0x1}, {0x14000000, 0x3, 0x6, 0x4166, 0x8, 0x1}, {0x5, 0x7, 0x5, 0x6, 0x172, 0xa95}, {0x80000000, 0x9, 0xfffff1fd, 0x0, 0x9, 0x1}, {0x0, 0x7702, 0x8000, 0xfffffe00, 0x1, 0xffff8a64}, {0x5, 0x1, 0x3, 0x10001, 0x8, 0x7f}, {0x0, 0x7, 0x7, 0x6, 0x2}, {0x0, 0x10, 0x4, 0x0, 0xfffffffc, 0x5}, {0x8, 0x8, 0x5, 0x5, 0xe9, 0x8}, {0x3a, 0x0, 0x7fff, 0x0, 0xfffffffd, 0x3}, {0x7fffffff, 0x2, 0xc32b, 0x7, 0x8, 0x1}, {0xfff, 0x2, 0x400, 0x0, 0x80000000, 0x9}, {0x0, 0x8, 0x8, 0x10000, 0xba, 0x8}, {0x2, 0x1, 0x3ebe, 0x1, 0x0, 0x4}, {0x7fffffff, 0x2, 0x10, 0x2, 0xb0a7, 0x3}, {0x4, 0x1, 0x0, 0x9, 0x70000000, 0x200}, {0xc3, 0x9, 0x6, 0x80, 0x8001, 0x5}, {0xa, 0x5, 0xe, 0xc, 0x2, 0x8}, {0xfffffffe, 0xa144, 0x0, 0x0, 0x7d, 0x3}, {0x6b, 0xa1, 0x7ff, 0xc, 0x8001, 0x2}], [{0x5}, {0x1, 0x1}, {0x2}, {0x1}, {0x5}, {0x4, 0x1}, {}, {}, {}, {0x5}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x4}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x8322f8e19a2d56d3}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0xa, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4}, {0x1}, {0x3}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x4fb15077004f5d0}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {}, {0xdb4da6053876890c, 0x1}, {0x3, 0x1}, {0x3, 0x11c88569e5d2c7ab}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {0x8}, {0x2, 0xe83e89281a29bd4b}, {0x4}, {0x3}, {0x51007315f7f08d37, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x3}, {0x4}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {}, {}, {}, {0x4, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}]}}]}, {0x31, 0x6, "e3d560095332f701f9e57b677524d89e970d6122be920e7aa0305dc9c1c1cdea3c6716e34e8c8203691bd47b4b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x3af0}}, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x2000) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) 11.379632397s ago: executing program 2 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x13, 0x10, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./dev/ttyUSB0\x00', 0x4000, 0x106) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x61, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x48080) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="44001029", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000000050004000100000006001a004e230000050021000100000008001800ac1414bb0600030007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x100) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1bb2512b86180a81, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, 0xfffffffffffffffe) 10.63686395s ago: executing program 1 (id=501): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904060000ff4f9b000904b000003a3846000904"], 0x0) syz_usb_control_io$uac3(r5, &(0x7f00000007c0)={0x14, &(0x7f0000000600)={0x40, 0x21, 0x44, {0x44, 0x11, "0043af969115b335580337f007f7105ff770d33fab8bf11ab438eaac31b2b78c6ba10e22228714113b3bafe064c7c31e64a67e8f25073d60df028eb21e442e69e280"}}, &(0x7f0000000700)={0x0, 0x3, 0x90, @string={0x90, 0x3, "69d73693b78871180c313d31f78a8c0170feff60d95fcfea51294f780c70b94c3658a5707d96c0a1630dddf7e30dda043de83c0417eabdd02e6e2c00e98eafcafae49a17dc3f2ae96634c3777a1025ece953c07ed8528a242d7a4af737583b08756ebca701a0d3c1ea0a95f0e19b1fc0ff241555cf0ab9d83e580c5fd6d8cb92b345ba49cd931fdf40f8aebf2d5d"}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0x40, 0x14}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x3, "4cfe64"}, &(0x7f00000009c0)={0x20, 0x83, 0x1, "e4"}, &(0x7f0000000a00)=ANY=[@ANYBLOB="200000ec2f"], &(0x7f0000000a40)={0x20, 0x85, 0x3, "ebd12a"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, &(0x7f0000000380)={0x7162, r9}, 0x0) sendmsg$kcm(r9, &(0x7f0000001280)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x81, @mcast2, 0x200}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000240)="805fab74f221c958e2fd16ad", 0xc}, {&(0x7f00000003c0)="0fe95f1af5f0f6b6e07ee7c07e7ddab8a2bb4bac2e28782855232ec1b69fb1bdad01f95c7acfab1f74dfe4b8eccf9db8f69344a0060c7fd996bb06bd3aae6f00d28e887aed70dab49f2d0ea4e2e73e8e3802d2bbbfb32a549fb3bf5c6c11b6e18ca5fe4faa9f0fa2ad686f48d3443c23ca98791a528a7dbf3de6167b5698211370f150241692a657a8b4a84e92f18d0274ab", 0x92}, {&(0x7f0000000480)="582fa09b4402bb608becc2a4c023c88357ed39d401455fc5c3e37d4d2382e1ef2c24c9b137655603dbdaccc493e4b601415acd1b5e3a630de16a0b56db2424dd600bcf442bad41e968c9f50394f7265b3d71c06c24e5b04f304d261779f0589d6fde099151b071f7b1e95bd9cafe383dfbc5535f3d595bd486", 0x79}, {&(0x7f0000000500)="9878e479ada0730bb0c1856dc7d44d0924bd5c09b87a78f32721e57fe37cee71854522b1746883eb109a5d922cf9d145132638376961cdf864f38a5bd0aed4a37d386c9409a702eba6a0c44872ad188c19c2dccd8bf9eb540dcc28ebb580d8aad18ec905a7e1d3886cb503", 0x6b}, {&(0x7f0000000b40)="03cd1acec2e2bc6cc81ddb1d8e5fec673e554dfa793d1f19862382ef4dfe98954fa839c9ca3e405e876a3c244b373f96c8ee2003c081117ae8b88c53da6e097c13ae29a0f72eded561026082ca2ded292423f941e74e8b3fabfeffac2f5a89147260c24ba684aff60caa7245a50fb7ee5f8d5b6f4f466e58d0b04bf2f5ba775333e534f78ad4ee53a509812848b36c277069878eb65a3799851160030a5e41c5454f0fe7bc8d0e63f80a3ee08ecfdef9b12d0c625225d19cee66e8be6a03dcf07da6a8860122f769ee2648b5718f874b0552a4bf9a2b5833bab0f57ba175ff62bdbe03982e5c8bc08781d2671f41232a4fd3d7c5f10546b3", 0xf8}, {&(0x7f0000000c40)="cf82c79c722dd9a32d0998b0c656b26d25a1d25739ef9612bbd5ce619603832499583dceec3acdddc8e7ea17d4b9b33126d1353d27cd517bf5897d6895fd3b2a98", 0x41}, {&(0x7f0000000e00)="9320b023f3a733a82cd1f6aab7b99ef5a0576816e7b7f9b804dc6fd82c248d39ec044d3e8ff8b505b4e34cc311ebc84d1c217434c51d98dea823b87fc9f799d3fd452432bd90969208134c990e9a510207f6960124710101fb3fd6baad2379e224d050dcfc95f0ab92f80a505027858cce5637e811dbfcffcb38", 0x7a}, {&(0x7f0000000e80)="e6157034739034cfaa7fbea77631674e65438be3b31fc5de7d0134b2674dcab8cdcb287e03bc4bf23e302f8e6776aef528eca390b705495df19119c06053f56f44e255b3e61457c3147754e90b07528446ddc7cbf3fbb7755541643d94062a8ea718aefa627aeb26aeef74bcee65a73bc6ca8d55e710ed5a78947b066a4ff34cd7b63734c3e69dfe065d3abace75f765e5c6c468b42371a505211b60b924d119c135b1a3caf76044c58c5aba655f3905194db25ce546358d1a376103b3907b1e9b003aaedf6d1ab87413a4881a685d8e81e6f86158", 0xd5}, {&(0x7f0000000f80)="2be866425405425385ed84e83cee21d612c4a70a7c681f6d1a4be94cac5e0737342e76bcf2fb14af91edcadbdd3ef4751f3ff40a0a18d128b3dfc69e41d5e359a0466e258f359b6b2a56c0328c3921e8d6e7ef5afa1dbe5a4019d17b23c257764b72ebe083e31824f48aa961935033a6e9b2199b93c7733692", 0x79}], 0x9, &(0x7f00000010c0)=[{0xf0, 0x111, 0x8, "8a1921b80ba16f210550251b9816aabaa7fde5e108440d1d4fba8745f2f7e088bee509b2055a33b0f8d7724c4d2f3891212989ff8389afb96f1a679b5b76e46606545406e9315624d1d136b9496c878e4bf1c4ee7c5dcc0eeae2f1649fa2d340399c541ae7c8d0039eaf82fe1fc1aa01cf9c06278a58819e32196bc4a6f635480e8e8afb7919127ba91bacd4143839ffbdfcf17a8edc5152d5d8cfcac98379549444fb5337ee9aebedffec39e35a09b60d0077df09ec501203110dfee818c289e1c8c187dd0cc2739374f0334e8171294335bc2d5db7c98d5e93"}, {0xb8, 0x117, 0xf, "cb00beec67f604e4ead4333faa805800997b610fa2e87e51ddec9c594c03a3a5babf7bb0ddc76f3d95d328f05dac9cbec13500825159cdff64757275c90e5f0b0158108eebb7d35a6e8f7de7d1ac43bd5f7d0dea698c0dad832e00650bdfb3699d077c8492bb85667e37eb4d311bd2dd2d0d9927129af7dd72b21cf30a72e9ded8b73499d165208e087a7bff66e170cfd9bd5e1643fe048a109e4da7523e5b4e3e"}], 0x1a8}, 0x8000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) 9.406335039s ago: executing program 4 (id=504): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x18, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioprio_set$pid(0x3, r1, 0x6000) syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) pselect6(0x40, &(0x7f0000000000)={0x78, 0x400, 0x0, 0x6, 0x841, 0x200000000005, 0x2, 0x2}, 0x0, 0x0, 0x0, 0x0) 8.411542939s ago: executing program 2 (id=506): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x44, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x9e1b, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2b01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000801000)="0000000000000000ffff0000009acf00ffff00000092cf0067000010008b0000670000200089", 0x26) write(0xffffffffffffffff, &(0x7f0000802400)="0000200000e5", 0x6) write(0xffffffffffffffff, &(0x7f0000803000)="cd80", 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400000, &(0x7f0000800000/0x400000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000400)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4}, {0x0, 0xffffffff, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x87}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0xb, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1000, 0x67, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x7f}, {0x2000, 0x7ff}, 0x31, 0x0, 0x30000}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000800)={[], 0x3000, 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r4) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000000010104000000000000000002000000180001801400018008000100ac1414aa08000200ac141400240002801400018008000100e000000108000200e00000010c00028005ad0100000000000800074000000002"], 0x58}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x385002, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r9) 8.238511506s ago: executing program 0 (id=507): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfd, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x20000884}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x1e, 0x4, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, 0x0) socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x2, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000004010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="01002cbd7000fedbdf251200000008000300", @ANYRES32=r9, @ANYBLOB="0a00060008021100000100000c0043000e0000004161083bd2fd01293109000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2e4, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1c}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}, @NL80211_ATTR_BSS_BASIC_RATES={0x18, 0x24, [{0x2}, {0x1b}, {0x16, 0x1}, {0x6, 0x1}, {0x4}, {0x36, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x16, 0x1}, {0x5, 0x1}, {0xc}, {0x36, 0x1}, {0xc, 0x1}, {0x12}, {0xb}, {0x5, 0x1}, {0x2}, {0x48}, {0x16, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_MESH_SETUP={0xf8, 0x70, [@NL80211_MESH_SETUP_IE={0xc8, 0x3, "63c012c21ca3ad047205ecff66026ab7a9cfe7989d4c2cc5f0f43ae931293b7fc5494a2f7fd232fd9f0bee347755a7f15543ba7d08ea23978260dc66d09944c419654f01a1fad69779dbc98752870c63ef8236e677a1fb082c22494919e0e07463f361a2a8568261fe5c0e1fd92f91c329c05dc84f4406edbfacc7077bfed4a57b6e9e90512a36b80dd60520dc7d54d4102aa14abfe5f89188da37668bf91ed0da95151edfbfb4c256f4c9c2ae406e9ce58a62b91372a512bfcc342595b6a4b67d5a99d8"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x1b, 0x6c, 0x6, 0x6, 0x1, 0x12, 0xb, 0x48, 0x36, 0x1b, 0x48, 0x1b, 0x36, 0x12, 0xb, 0x16, 0x48]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x5, 0x9}, {0x2, 0x2}, {0x6, 0x7}, {0x4}, {0x2, 0x9}, {0x6, 0x5}, {0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x6, 0xa}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x6}, {0x3, 0x9}, {0x4, 0x2}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x5}, {0x6, 0xa}, {0x5, 0x8}, {0x6, 0x1}, {0x6, 0x5}, {0x4, 0x4}, {0x7, 0x1}, {0x3, 0x7}, {0x4, 0x2}, {0x4, 0x1}, {0x3, 0x5}, {0x7, 0x9}, {0x5, 0x5}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x30, 0x12, 0x4, 0x9, 0xb, 0x16, 0x2, 0x6c, 0x9, 0x2, 0x9, 0x12, 0x4, 0x16, 0x1b, 0x3, 0x4, 0x12, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0xdc, 0x1, 0x7, 0x797, 0x6d4, 0xce6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x605, 0x6, 0x7ff, 0x361, 0x200, 0x96e1, 0x5]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x9, 0x18, 0x18, 0x1, 0x6, 0x9, 0x1, 0x18, 0x18, 0x1, 0x9, 0x9, 0x60, 0x1, 0x60, 0x18, 0x5, 0x48, 0x1, 0x16, 0x6c, 0x18, 0x4, 0x4, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x4, 0xc, 0x6c, 0x18, 0xc, 0x30, 0xb, 0x4, 0x60, 0x60, 0x4, 0x24, 0x60, 0x3, 0x6d, 0x4, 0x0, 0x12, 0x4, 0x6, 0xc, 0x9, 0x16, 0x18, 0x24, 0x6c, 0x1, 0x30, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x46f8, 0x8, 0x3, 0x7, 0xf, 0x1]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x1b, 0x3, 0x9, 0x1b, 0x2, 0x60, 0x9, 0x12, 0x1, 0x24, 0x9, 0x5, 0x6c, 0xc, 0xb, 0x2, 0x36, 0x1b, 0x16, 0x16, 0x9, 0x3, 0x6c, 0x6c, 0x1b, 0x36, 0x5, 0x24, 0x2]}]}]}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0x16}, {0x5}, {0x12, 0x1}, {0x1, 0x1}, {0x36, 0x1}, {0x18, 0x1}, {0x1, 0x1}, {0x48}, {0x48, 0x1}, {0xc}, {0x36, 0x1}, {0x6c}, {0x19, 0x1}, {0x2, 0x1}, {0x1b, 0x1}, {0x2}, {0x2, 0x1}, {0x30, 0x1}, {0x3a, 0x1}, {0x1b}, {0x30, 0x1}, {0x6, 0x1}, {0x12}, {0x16, 0x1}, {0x5}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4800}, 0x84) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/97) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x48000000000}}, './dev/ttyS0\x00'}) 7.517471858s ago: executing program 2 (id=509): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d00c, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000008}, 0x20008000) 7.308945572s ago: executing program 2 (id=510): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='iocharset', &(0x7f0000000200)='\x00\x00\x00@\x8d\xd0\x1c2\xce8\x11f\xce\xc2\x96f\xc4\x0e\x00\x16$\xd1=\x01;a^P\x02\xdbc\xe9\xfb8.\xe2\x8d\tq\xab\xc4\xa0(\xdb\xc2R\xd8\x91\xe9\xff\xbepF\x8eQ$:\xc7\x06\x89\xa3{\xe6\xfd;\xcb\xdb\xfd\xfa\xd3\xd50\xa5\xa7\x8e\x19\xe4\x13\xf6D\xbb$\xa3e\xa6,\x18\xf0_|\x99\xda\x0f\xec\xea\xe4\xbfz+\xce\xc4\x14\x1f\xaeK\xb3\xbe\xf3\xa1\x85\xb4\x03BVU\x92x\xe9\xbd{\xda\x1a\xac\xa9\x03\x0f\xf8%\x8e\xac\x9b\xf6\x86\xeb\xb4\x131\n\x96\xd7\xae\xfd4)f\x11Ro\x84*j>\al\x7f\x12\tA\xdd\xb5F\x8f\x86^\x1d\xacyO\xbe/K\x80\xa4_\x03x\xc3-ZH\x12\xf4\x8a\x15\'R\x89\x8c\x06RW\xd9\x92\xba\xa6\xe64', 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a000000000000010000000900030073797a300000000028000480080002400000000008000140000040051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005140000001100010000000000000000000000000a"], 0xf0}}, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x7fffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) unshare(0x2000200) unshare(0x40000200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @remote}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) write(r2, &(0x7f0000000100)="8ad90de396ba88355df2edece17fce741afefbce3142fbef76a75d6ee33ca0ee24ab8afc66f354be49c344bbfc04c6702faa2dd6621875a1bb2d5f70317122ce16450de77e9c824c18a7eebde87b18397656b2f649a9cb2648bdd0b7ed84f7369b718659cf9c88d9efeb316a66374f6e71ab60ce9360c39a950133f4c539465c4581f282cfc31fcf1334e156bb540e39198f17886d6597278075b4ad32c74373130b085d25b5ea2167de860ce3a2b1a84d9137e641beee9875c38b179f66211e95d94fddba27afdd21cec4b1b8694f9aaa273a55fc5d7601120a62558f6df3f8bd4fd21342e5653fd5e6150e472c8fa7ce6e", 0xf2) close(0x3) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0}, 0x0) 7.136311186s ago: executing program 0 (id=511): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) cachestat(r0, &(0x7f0000000000)={0x7ffc}, &(0x7f0000000040), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x4000, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72a}, 0x50) syz_emit_ethernet(0x16d, &(0x7f0000000280)={@multicast, @broadcast, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x7, 0x1, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x12f, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x40, 0x1001, 0x0, 0x0, {[@mss={0x2, 0x4, 0x6004}]}}, {"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"}}}}}}}, 0x0) 7.041984314s ago: executing program 3 (id=512): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="00002194c5fc"], 0x6) socket$kcm(0x10, 0x3, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x4) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e459, 0x700000000000000) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000007f0000000100010049000000013e0abf370a59c5795bd9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) unshare(0x22020400) fdatasync(0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1, @ANYBLOB="02ccf8bd3cb22496801cbdde7353cd75e9852c614649534a9ce121f3cbacbb60c84253", @ANYRESDEC=r3, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x40001) 5.982342631s ago: executing program 4 (id=513): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x181002, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x20800) r2 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r5, 0x11}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x9, 0x54000, 0x4, r5, 0x1}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r10, 0x1, 0x4070bd26, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) r11 = fcntl$getown(r0, 0x9) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@rand_addr=0x64010102, 0x4d5, 0x33}, @in6=@empty, {0x3}, {}, {0x0, 0x22}, 0x0, 0x3507, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) read$FUSE(r7, &(0x7f0000001000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(r8, &(0x7f0000003940)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003840)=[{&(0x7f00000005c0)={0x268, 0x3c, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}, @nested={0x19a, 0xf2, 0x0, 0x1, [@generic="8b665b7a8bd1d650f1e662a6c6c377035b9ec6b1ff83ca42480270d6deb1bf24695425b4fcc4f5d0847f6ef6025fce189c1e5359a3a00d72b41939c3b3199a460e2b57296699517898a87359cf8e9aeaf071915e59a143159ebea2a0e3462f7d7bf222bd0b7bc44f57f26397f25b349226b4e7e2ab85be45f8a763201d6d924dd9c9c271fe2262cc8c3f2a6dad10e85bcd16d34b65305a0ff7913c2c8257b601f58e13abfdd6ba136c0590c80e17d7cac2f58db641c9aeb08ea6b1cd86eda032bbf97dd773014335c6e42b765ded618de5c2faeb0fe53b7a019739c701f29406bf8d11371079d9077015e40272711170", @generic="fbe292fec1cc17472e3aceb997209c538e3b540e1dc4eec6b455e38bd00b1e48af436c53366f59fe4c1bc6dd9ffc8e3aabd1fb23987933b94151ace25b4bb50bcac81fcc68b9577ec9bd7498261ede4061896e9fa77e8bc24d42d8aff03ac579b5710d6c712e4c214fecd39c06abbd030d177051ee38f46222cc7f50bf5575b5ab740871c66c630834622019780d7567554b7eb40191b2624e9fe02adc06bba6578d3111380e"]}, @nested={0x44, 0x58, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @u32=0xffff}, @generic="a59caf20ad32428cf30cb754fcfcc3746c0b6c72135171910e2233d3da8e152a36aa33c030a8817d8348c3c0", @typed={0x8, 0xae, 0x0, 0x0, @fd=r0}, @generic, @nested={0x4, 0x14f}]}, @generic="02b0936e743e294029e0f667e316158533556bcc33b36ca3d3857615404cc8aa24a1f2317f0de5d947268073a60c23345e99ff7a4f41490eed8abbfa80c4a964306461c11af90a001386095a1cf2a546707636c83a57963f0587485d5e5890f3e71363d6f8a472", @typed={0x8, 0x159, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x268}, {&(0x7f0000000880)={0x72c, 0x3b, 0x100, 0x70bd27, 0x25dfdbfd, "", [@generic="e0827cc039fea5d76e4ebb17a71ca353a41514ee05e5f223ffe043a5e15de161f380bd0087d92ed5d49514ed12b252b0fc601de0e2ff58463cd5c26fb371eec01304fcc23b1f0600d604f4e6aedd58ba51d9930aa96f7a2f3f8ab0e174f65caf38f2fc7f2ce163dcc7073b03029983ac5042e0eeef51c52a6dbb00b42b232c2dc8418be321b7f9b1f5ae57b3b8c0f017d8858fac1736f8f00d1f1deac1ff87e3bcf125a6cfaa700c2b", @typed={0xdb, 0x3, 0x0, 0x0, @binary="9eff1ef9e2b64c993b6794261e0bb95a9b540107d3599f468371da7ecdb856dd0faef003d387df1d40fdb47a2ccda9ea1cedb6e7ef6f2045f1d13cd2924dc4a4187f2b575794d7c2577996006ff5dd18b8ed162a62fd821257195d50d8f602d26894d6045195715cd288f80adc470638e06d55a54799b48cb8ae53234dc5fcb41f21a1523b4a3bea5f6cc7b3e3625eaebcc10cdc5e01e22d50a0c5a9fde304b0607e221cc25d9509cc7463c3cb2e5c98497f517c38b5daf149737ef779d4461ea11bdb01110e0a932f10b9ed80a914b74df95cc3d87bde"}, @generic="bcde6cc28d54", @nested={0x56, 0x144, 0x0, 0x1, [@nested={0x4, 0xf1}, @generic="0333e9172d062f3fe97cea92ed202fc49d330edaff0e88326e92380bf7767932cf783c3491ecb0062034bb40fc73cbf9871a", @typed={0x14, 0x156, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x1b, 0x0, 0x0, @fd=r1}]}, @generic="b2f2153b4d8eefb65181f83d879a9f77bca869eae9e5cc6acea9c40473edb43c92fb8512460c6d120fb9c2c366fd22874969281f0748505a57e99c1846e1b85d30ceaed97415f7e944e4bbe7ee1e2e4a6f8a805fc4ea5e24fa8a1118adb1e818b667e1424a9d2e71757c19f97fd2a654e0ebfa9146a67b4ab0d6a622f7a5e16269e9e0c6f5994d51a2ffae3d4e0180c61f0a0bb8a1a7e293544e2d4e5edab85436d266116c80b79f8027faa5d331508fb26bdc13ac3210a2c643f1cef122c8484a8351bbedfedaf89800f40baba19d5efd417ec0", @nested={0x20, 0x104, 0x0, 0x1, [@typed={0x8, 0x160, 0x0, 0x0, @fd=r0}, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x34d, 0x9a, 0x0, 0x1, [@generic="beac70d6a190f789aa213ec0f9741e4574ff47f998d6d03e5588e14470a22e695fa5702e34c355027fd907b5373af41a972dcc388773a7b1ecc05f70c077b8cd25abc792622c214b4266ce3e087c7f23668c52c858c063768ffb6deb35a9f3f5fe6e1923b7f3d3b80e31a6b12e26c9a2a6e8aeb16847cd86fa129082646c9446cc488e83b7a529b0a4e2db8deec629c3020ebb1920cafe56b2e3371ad23d7b20642eff5aebd134d73601ebee46b0480987b1fbb5c80d12b3d44d84fd01dcb6c8f4980808e65a9dd114de411a82009465b91feb820162df292ca19672aba70c771c54276d33e49e6ac56fed307dec76316b457e", @nested={0x4, 0x2f}, @generic="6c53b19c8262b9ab2ef31374012056c3274f9920ddc2c4b2caa6940aba808fe9dad77ac6fa7746e1f7b6af2505e1fdb5b962adf44b9bc97e3b", @generic="6202f78b554922d5b2c7b9f71381aaa7d09529abe261f95681187da34480ee68dd8038288c50763894c38f0c3a946e5a9f723bee7a10b52590c9038c7bd197a3d3b57033cac6f0f701c29fb6231359713ac19d62f5a5bda47aa0ea0d6c8bd1f9bc3935b44462d3a67844c48967ca90e803ebf3e301a7789c895c47b0f02f81be949b90340319f8a13013bde95af7452ade6445a0a8bb8da25538fd9d7f512c429a48209f7072c1936494b72e577aff702affdedede2ec0a724d365c6646a421e800c9fe20d7ef1b0b68a88ee68d41054767c74108a27", @generic="7bfbb99f399fb412601e9742e7c3a788dd94ee1c6156c095a41f823900e50d7df548c411cd0098694e35152d2f0a8623d80ffb8eba6d722f8d954b2d699916fc25eab6940e51fc855788e85852389ae678a228c58341e7ddfbc5ad27d3490e0e6401e5951cd9dffdcedb9b94eb3fe9e9e5cb82668286", @typed={0xf, 0xd9, 0x0, 0x0, @str='^\x83],\',**\x9b}\x00'}, @generic="c692f7e0f1511bca30905d1555e196e0afe45e3d371cb2ca60e9fd99b8fbea79aa9772ab12e9373f44477fe8a1805adf1b08c40c23ad2c8be15e63ea69118e95d2ada61f430ddd89ab7958aa9bc8505889cfc91626940933babec93e5d3cedd112302d4569a89330270a144c0f98e05422b5a6c5d7b72d6ac50a6807c190b2d40268a11b3cd6606d19f21c5f0d33fefd7e84e07fa15bacd5f249ce4f161ac068a19dbbc7019fde061c79b5d018a9a783531ddb1baf", @typed={0x8, 0x106, 0x0, 0x0, @pid=r11}]}, @generic="249f880d212a54af139f71240613b9384e4030ad62a3a75baf64e9ecb6cfbfeff6e8f5e8f32e5538cee65b0206415afa93ea9127793ab465559108fd0ca9cb", @generic="bdcb545cb46b34d5a0b7a6dcbae5328c552d51549c553e78518580d2032523ed5134a27799bea18a21ea867a1208c0099bca490fed2460fd193f8cab64ce7cb298558217af7776cded253635866007b2cb61c523ef6bd545364a78c1cf5ac1965e3c9022ff024780fa6a960892ed57e2c478761d7e8b23c38d1f4c5d8c7dd1bdb8ea2b14df1e12cc5229e08e7c97746f7052495c95b33b735d97fb98fbf2f29948ce261b229f87ee1ea16aaf1739ce1957c69c"]}, 0x72c}, {&(0x7f0000000fc0)={0x20, 0x27, 0x200, 0x70bd27, 0x25dfdbfc, "", [@nested={0x8, 0xa4, 0x0, 0x1, [@nested={0x4, 0x94}]}, @typed={0x8, 0xad, 0x0, 0x0, @u32=0x1}]}, 0x20}, {&(0x7f0000003040)={0x3a4, 0x31, 0x8, 0x70bd25, 0x25dfdbfb, "", [@nested={0x8, 0x49, 0x0, 0x1, [@nested={0x4, 0x53}]}, @typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x22, 0x0, 0x0, @fd=r12}, @nested={0x177, 0x105, 0x0, 0x1, [@nested={0x4, 0x142}, @generic="bffd3578f5a012bb16dc279cc599c3c9a76df4e6822af37cc6584011fdae5088e032f34f66bd2fe3995de3cb7f8f0a4c0274988c3d961f5268f373b779a3f47e3456713bf54c0fc4585eea7f81c2f0e6a0594c870ea495f62aed8f469873b6bb65c1ce3b64177ffad9972e3a08505a14258621c40859bc68ceb081cc056644a1efa68d1047c54136d609c7c26404f4054325eefdb2", @generic="a67f89a2ad4db3ea81ffcff9db0863af69b34c480d1a6ac15e8e384d1323f545115d12e588ab1245f72387c1a65c2a25e811bb3c506756210609955c0fe3af484f31d75a3f4c2510a9666df37f0f67063589800c887ce3ca4adb2baf3e0bcd478ba8e7327c18680780d7c3280c4e8074a39e7c68bc", @generic="f339c7017cb61a6d7d1de99a65fac3873067e36be3af6c1190251720f1cc5884c7476c7212c48d4cd790bfb8941effe60e6045f388c454b7f023524412f5d24e14893587897151363a812a2cfee838a833230c2b23421ce687f65fc4676bb9f2b1", @nested={0x4, 0x115}]}, @typed={0x8, 0x141, 0x0, 0x0, @uid=r13}, @generic="7a3ded863724feffc39fbc4b06ff4350ee34fa45a283e3cfc4c1a364b317919d7502355d722911b9ad4903b95ffa29675928b3338bbe7d93331e07b646d991377f9833e4be1497845bb3ea2b6bea049b190959e2cdc7c7c91c7ae92f82246cb8a0517a3c834459e4808fc95eb444622e6458e85c84c27b0158b132654c310e970c2dd305a026f28c38b05c97f3c0baa553b8058b9ab82dae629a5a38cfa797", @generic="707041912ecf441099f781cea645f406d864b52d451881ab2e1b48a38a914b49022a279c2c6713611defc5c2b1e015280a8f5516bfe23ec8085d73b7f49925a4e69bd5144bb40ba030830db38a6a8fdec911dc828fd8278b0426019c3d8a8f0fc068a7add92ac1", @generic="ff63947cf8c7c4fc2acc1a28ed52e654bfbcbaa911bd6f5e5c217dbd67f3fcacb40e2cb72396c63eb62f92e0692e150920a39c180ee638fbf9cdf5539cfbe16bba3bded55c6e95e6688b893e04e55597781ed4859ae80235ea3177317c68c2f74aece6cb46d99e8e60788a6b4292745209c78a5952eb198fb9aee7631214ee82cda25214a1a289e3e9506f42be100b9be319d1640cc0ac849b01bf6337e2a6e3b4b372e2501617ae7c0fd8b9772c431610ead5261db82fe4b236a2e9b6fd14eb8982057eca134b7ee0420aaa85fcfb83ea884ae147f894ee3ec1284f0856e9fa29cc3cbce19117f860636022", @typed={0x8, 0xc2, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x3a4}, {&(0x7f0000003980)={0x418, 0x26, 0x800, 0x70bd29, 0x25dfdbff, "", [@nested={0xc, 0x26, 0x0, 0x1, [@nested={0x4, 0x97}, @nested={0x4, 0x78}]}, @generic="dc3a9d8042d710cb318c740838531a97da591249f4cd0a668a4cddc1315c97bc6ec3b9952ea4b8ce003bf21fcc760fdb8a5bcd7b3611b7723237b4464cd44d322ee481051ea54e36411b821aca355c5fd9d2acd48648f780d4cbf5a83c7686e8b5eb6d65a37a4c62cbdbdd21122808216c1334ca53", @generic="f35848418af75b7318397f0514b3a72e37fb9be963611c971a12ac9e18eca5d3ce435ae194ef44a42e9e9a4c842ea76c708aea638eb9a2c1402824510158898e32a533dfc2da9348538e9fa339877f1b49bb2c2b9518bba665379b16efbde60661f775c9db7361861820f0ab9448fefe29f16b28aa8a05b512d41026e1aa67122cdadb53ef7f577587ba4fbd08baac0aff8a35323d8e5905ff6c495ee8ea85e9f5f20d15f537b6af14d320d7461f9a248f789ec315f0185265808029f48ac6368b672fefcc81853b92aef294b9ed4149529c65ca4f", @generic="4b3ccbba011872438ade16638685703b34364042bbeed380bed9b04b40b4955a6e50d4709a8dabc3934744a0185d15eeecb2ecd258b3147d4036eabd9394bee5cd6a249894ce618f924a0f896c31036facbbb43581013c14158d54667d780915093a5e47d1203066d0a76c9146426d14a4903f3b007e676147aad176f5d3c4696e7046cf88ebbd210400b940161e9bc0252f4ae794d0fff1b0e6f4714dc5fcab685f198499d30a264e32475422d4564271f366271f410ec83571a53419918cf10e538f210fddebe58bfc04054a596144571331dfa8c2e369fca2debbb4ca6fc277b4d813bf85664dc7", @nested={0x1c6, 0xba, 0x0, 0x1, [@nested={0x4, 0x53}, @typed={0x6, 0x20, 0x0, 0x0, @str='!\x00'}, @generic="23e9bd0d9111e3a4cfffe64fb7a01c4a9446803410c5555ecc9c9ae2a7d771041d28e60215535babff8667111627389f4ab92e22e40f2546b4f57c3691e0c6edca4e70433ee204a3aa1465dabec890dd4159903b", @typed={0x8, 0x15e, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x6f, 0x1e, 0x0, 0x0, @binary="301af41c9fe91ca233b6b6d3d1ce62d339a4ce340bc7886091692a4903ac9eb3403f7ab13895d50dc596976a9545687fa8d0416d6851680facd9df7faef7c8a88ff935a0b727991e0500c77bf22a219d8fc94461716bb92e165188e368606d5bbd838f3f32d77040178b7b"}, @generic="1de1c16d47a6f716fbd996dc14db876e4f311db41ec654aaeae4d66b60b0d2c029d6849d51da8cdc8ae7132e7534939b62cb4e3c4de810255978e21abfcba309ca12299509725cb1258f81c178eb602e03c414819b4b2a51f940ea90567544725ece0fd5e73b8f6ce11643874ee1dccf3d4f8b14abb346eb709392a54d7ff02c361448c7860a29e4bfac3f2c29564ea6a2627288074f640f4eba5b887245006aa77365a84a7dbfe3a710221ecadc187ad93a27a9d145e6e70a17ec3fdf463bd4164750c57d7fb465b0fd3559f83eb7b9c625f7c6d9bef29d817a2a55e2b97e2ac2b9"]}]}, 0x418}], 0x5, &(0x7f00000038c0)=[@rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [r7, r1, r6, r6, r0, r0, r2, r6, r7]}}], 0x48, 0x10}, 0x40090) 4.921021115s ago: executing program 4 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="180000002d000100fcffffff0800000008001100", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1, 0x0, 0x0, 0x4}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x87, 0x7ffc0001}]}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) memfd_create(&(0x7f0000000180)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4/\xf9\xc7c\xea\x96\xb9\xb2!\xd4\x86\xff\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ct\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6M&pF\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\x83E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x126zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x40000002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x4, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000440)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r8, 0x541e, 0x0) 4.869880627s ago: executing program 0 (id=515): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000000440)=0xe8) r6 = geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = msgget$private(0x0, 0x7fc) msgrcv(r8, 0xffffffffffffffff, 0x0, 0x0, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0xee01, r9, r9) fstat(r7, &(0x7f0000000180)) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r10, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x4}, [{0x2, 0x7, 0xee00}, {0x2, 0x2}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1, r3}, {0x2, 0x4, r4}, {0x2, 0x4, r5}, {0x2, 0x4, r6}], {0x4, 0x1}, [{0x8, 0x4, r11}, {0x8, 0x0, r12}, {0x8, 0x1, r13}, {0x8, 0x2, r14}], {0x10, 0x3}, {0x20, 0x6}}, 0x7c, 0x3) 4.597007535s ago: executing program 3 (id=516): r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x7, 0x5}, 0x30, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) r4 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x10, 0x1, 0x7, 0x6, {{0x2d, 0x4, 0x2, 0x7, 0xb4, 0x68, 0x0, 0x9, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, {[@cipso={0x86, 0x5c, 0x3, [{0x5, 0x6, "1deed6d1"}, {0xc, 0x8, "ac6fd93ff3e7"}, {0x6, 0x6, "2cad4db1"}, {0x0, 0xf, "27bfd6a0572fad3779cdd9a806"}, {0x0, 0x9, "2d9b89d2300871"}, {0x5, 0x10, "c7d2c2d51226caef91b78b52cb97"}, {0x0, 0x9, "325624b01133e8"}, {0x5, 0x3, "0f"}, {0x2, 0xe, "8ba8785efe6e21d83ed90b90"}]}, @ssrr={0x89, 0xf, 0xa7, [@broadcast, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0x34, 0x7a, 0x3, 0x9, [{@loopback}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010101, 0x101}, {@local, 0x5}, {@empty, 0x7}]}]}}}}}) r6 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x12, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0xb2, &(0x7f0000000300)=""/178, 0x41100, 0x3, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0xf, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x3, 0x1, 0x9}, {0x2, 0x5, 0xb, 0x9}, {0x2, 0x5, 0x10, 0x2}, {0x2, 0x1, 0x4, 0x8}], 0x10, 0x6}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x6e0, 0x0, 0x1}]}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'veth0_vlan\x00', @random="0135014010ff"}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 4.542402971s ago: executing program 1 (id=517): syz_usb_connect$uac2(0x4, 0xf4, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2019, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x4d, 0x0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xff, 0x42, 0xc}, [@sample_rate={0x9, 0x24, 0xd, 0x4, 0x0, 0x6, [0x1]}, @extension_unit={0x8, 0x24, 0x9, 0x1, 0x7ff, 0x9, ')'}, @source_unit={0x8, 0x24, 0xa, 0x7f, 0x0, 0x0, 0x4, 0x1}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x403, 0x3, 0xa0, 0x8, 0x4, 0xb1, 0x9, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x1, [0x0]}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0xff, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xfa, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x89, 0x8, "9b"}, @as_header={0x10, 0x24, 0x1, 0x5, 0xb2, 0x3, 0x1, 0x5, 0x6, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x8, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x49, 0x9, 0x56, 0x3, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x82dc, 0x0, 0xef}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0x9, "02", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x1, 0x8, {0x8, 0x25, 0x1, 0x81, 0x3f, 0xc, 0x8}}}}}}}}]}}, 0x0) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffd}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x34b78b83}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x1, 0x0, 0x80000000}, {}, {}, {}, {0x10}, {0x0, 0x3}, {0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x5}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0xa, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x50, 0xe, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE, @NFTA_SET_HANDLE={0x0, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x118}, 0x1, 0x0, 0x0, 0x24008094}, 0x0) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x2}) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, r6, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x90e, 0x73}}}}, [@NL80211_ATTR_IE={0x65, 0x2a, [@gcr_ga={0xbd, 0x6}, @preq={0x82, 0x57, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x7f, 0x2, 0x7, @device_b, 0x8001, @value=@device_b, 0x4, 0x4, 0x5, [{{}, @device_b, 0xa2}, {{0x0, 0x0, 0x1}, @device_a, 0x1}, {{0x1}, @device_a, 0x1}, {{}, @device_b, 0x2}, {{0x1}, @device_b, 0x9645}]}}]}, @NL80211_ATTR_IE={0x35, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x9, @void, @val=0x1c, @val="ddf181b97a89449954ea55da6fc2c325"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x30}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x6, 0x1, 0xbea8}}]}, @NL80211_ATTR_IE={0x4}]}, 0xc4}}, 0x41) 3.633923875s ago: executing program 3 (id=521): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0xfffffffffffff646, 0x18381) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24048898}, 0x0) timer_create(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f002, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 3.532216856s ago: executing program 0 (id=522): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfd, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x20000884}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x1e, 0x4, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, 0x0) socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x2, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000004010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fedbdf251200000008000300", @ANYRES32=r9, @ANYBLOB="0a00060008021100000100000c0043000e0000004161083bd2fd01293109000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2e4, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1c}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}, @NL80211_ATTR_BSS_BASIC_RATES={0x18, 0x24, [{0x2}, {0x1b}, {0x16, 0x1}, {0x6, 0x1}, {0x4}, {0x36, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x16, 0x1}, {0x5, 0x1}, {0xc}, {0x36, 0x1}, {0xc, 0x1}, {0x12}, {0xb}, {0x5, 0x1}, {0x2}, {0x48}, {0x16, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_MESH_SETUP={0xf8, 0x70, [@NL80211_MESH_SETUP_IE={0xc8, 0x3, "63c012c21ca3ad047205ecff66026ab7a9cfe7989d4c2cc5f0f43ae931293b7fc5494a2f7fd232fd9f0bee347755a7f15543ba7d08ea23978260dc66d09944c419654f01a1fad69779dbc98752870c63ef8236e677a1fb082c22494919e0e07463f361a2a8568261fe5c0e1fd92f91c329c05dc84f4406edbfacc7077bfed4a57b6e9e90512a36b80dd60520dc7d54d4102aa14abfe5f89188da37668bf91ed0da95151edfbfb4c256f4c9c2ae406e9ce58a62b91372a512bfcc342595b6a4b67d5a99d8"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x1b, 0x6c, 0x6, 0x6, 0x1, 0x12, 0xb, 0x48, 0x36, 0x1b, 0x48, 0x1b, 0x36, 0x12, 0xb, 0x16, 0x48]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x9}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x5, 0x9}, {0x2, 0x2}, {0x6, 0x7}, {0x4}, {0x2, 0x9}, {0x6, 0x5}, {0x6}, {0x0, 0x1}, {0x4, 0x7}, {0x6, 0xa}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x6}, {0x3, 0x9}, {0x4, 0x2}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x5}, {0x6, 0xa}, {0x5, 0x8}, {0x6, 0x1}, {0x6, 0x5}, {0x4, 0x4}, {0x7, 0x1}, {0x3, 0x7}, {0x4, 0x2}, {0x4, 0x1}, {0x3, 0x5}, {0x7, 0x9}, {0x5, 0x5}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x30, 0x12, 0x4, 0x9, 0xb, 0x16, 0x2, 0x6c, 0x9, 0x2, 0x9, 0x12, 0x4, 0x16, 0x1b, 0x3, 0x4, 0x12, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0xdc, 0x1, 0x7, 0x797, 0x6d4, 0xce6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x605, 0x6, 0x7ff, 0x361, 0x200, 0x96e1, 0x5]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x9, 0x18, 0x18, 0x1, 0x6, 0x9, 0x1, 0x18, 0x18, 0x1, 0x9, 0x9, 0x60, 0x1, 0x60, 0x18, 0x5, 0x48, 0x1, 0x16, 0x6c, 0x18, 0x4, 0x4, 0x4, 0x6]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x4, 0xc, 0x6c, 0x18, 0xc, 0x30, 0xb, 0x4, 0x60, 0x60, 0x4, 0x24, 0x60, 0x3, 0x6d, 0x4, 0x0, 0x12, 0x4, 0x6, 0xc, 0x9, 0x16, 0x18, 0x24, 0x6c, 0x1, 0x30, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x46f8, 0x8, 0x3, 0x7, 0xf, 0x1]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x1b, 0x3, 0x9, 0x1b, 0x2, 0x60, 0x9, 0x12, 0x1, 0x24, 0x9, 0x5, 0x6c, 0xc, 0xb, 0x2, 0x36, 0x1b, 0x16, 0x16, 0x9, 0x3, 0x6c, 0x6c, 0x1b, 0x36, 0x5, 0x24, 0x2]}]}]}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0x16}, {0x5}, {0x12, 0x1}, {0x1, 0x1}, {0x36, 0x1}, {0x18, 0x1}, {0x1, 0x1}, {0x48}, {0x48, 0x1}, {0xc}, {0x36, 0x1}, {0x6c}, {0x19, 0x1}, {0x2, 0x1}, {0x1b, 0x1}, {0x2}, {0x2, 0x1}, {0x30, 0x1}, {0x3a, 0x1}, {0x1b}, {0x30, 0x1}, {0x6, 0x1}, {0x12}, {0x16, 0x1}, {0x5}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4800}, 0x84) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/97) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x48000000000}}, './dev/ttyS0\x00'}) 2.929561646s ago: executing program 1 (id=523): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000580)={0x2, 0x8000}) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) listen(r8, 0x4) connect$vsock_stream(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r9 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000100)={&(0x7f0000000280)=[{0xb, 0x2e11, 0x0, 0x0}], 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x7, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x20) syz_ublk_add_dev(r2, r3, r4, r1, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4000000000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x80}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r2, r14, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x0, 0xb2, 0x0, r2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x4, 0x2, 0x2ab, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f3e, 0x1, 0x9, 0x102, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x2, 0x21b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r13, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000f80)={&(0x7f0000000600)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x2}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000680)="7e46583812d675c87730f7f63678b5b2e339991af752a8b93a6b4b9e50d0308aaa4992fc4ed52361a156b0127fdedbd4a496ecc945b1fa97bcdd3158da8fb6347211082dbfad0a312988093b297277f38b764998e862fb2f0a0590e18553063e507be1f3556a1d592a6bc826dd6359518782e476f714199acd6487506dab022b8f0b1bd4d2769539c370ebfd98902bb4af7dfb", 0x93}, {&(0x7f0000000740)="383f41e47aa835d263240332bf503f58fa93a50ddbaeb9d441411248198a1880155a6729e6e86ac1e51d2ec4e93d47c662853737d8f3717b447a44a96264c4cefdaf9975ca1f1f5a011c6dfbb07b78585e0fc9f4213770f3d619dc9b27bfaf361757a4913b463fecabfef94fbfd6f4abfb0b6284817dc3621bc922d91e8f53dc597e84123f9c86c88c1a98e8f613c4522517429e37ab02fec375540c4b6fef", 0x9f}, {&(0x7f0000000800)="e8756ace711a14ad0de5c75c8c6d77233065b61a8a500ad6615d58d62b34205b1c84373da57dc66f09a915d9c99c5741f2b1d5bfafdd11e36692bf2629af8aa804eb3849b35e249e9d5ff23d70204ffa7e22adef0c56e6ee771d545e2ef2938d4334ac13", 0x64}, {&(0x7f0000000880)="acf49cdcf310af15b33b2c0856b0fc0021b5408bfeb7929e73970392b313926d4927d6ff0bd3b9bace5f882cbced905c1e61d8fbc62b824760ebedd557b8e78c2eb1aa78f2f29b558161e577bcdb6b549f99d2d839ca01c3513fb91fba4064", 0x5f}, {&(0x7f0000000900)="bb5e9da7827f36b169adc5bc54e2f23da6b4833401b6e06c382ab676f16ac97161e93c76799ecaaab2c68ac9c5c45977cd42d91a27ef1aa4cff0b25b64a8a148eb9b66947d68997b4321b9c394f823a85dcafb865c8c8386d2c490ed1be4881dba956baca1fd978c147a6eb65b2faaa8a3c30d2b725592ad3e4f258fdf68bb2df98e0efc4c112cffb5feb8278e33c8348a2937ee6bb70cd7af7a877fc28a58ff7f4b130c3923bd164c6fd6855058eb223d35c4560cde20b8cc0e8da9b73a519d9733e069d4ebc9de5f2970166de4f4cc0b4df61fec548732e6d9", 0xda}, {&(0x7f0000000a00)="bbeb297cadcd3dc0bb0bd1d6ea6de7e49c3cabade3b5912adb9766dc8eac8f3e8f58d159231792c594695f1a68d98e81a66885f445771ebcdce76097521887a17211b627e3fc4a9787ed17442b9b31ba6cae73d3c6ae0a7429374074d1e5e5cae232542749ba327936b90fc50660a5327e853d6fab4a9dabd40c2bb68960a66f92f1726734bfa68167ee07074f88f309e406623b49e847062081aacbb001374375c8939fb6885f51899730e4e951245355bdc879687e53cfb1faa26a836fd33b3b40aefbe6b5a5658ee7718dc904d88999ecb6585576482c9540414e8a15544cbf62943817ff61ae4dd1d18d8bbd6bba", 0xf0}, {&(0x7f0000000b00)="5dbd5d90f37df0b517a9ddce3a0b8154be48bd166fe6d2a9e0d6e5f04ede33097ddadbbfd04eff3f7deac3d3469090d888a0f364a7de17c46f323ea88f6045995d57daaa30382c6df1cd7c6cfccbcd3f84001831d88b3b708c543fa8e3bfd3e9b2ed0e7e91f872dbed9ce483bee81e58ebc6b84a60f68a1db731ad50396a7b042d6114bcf6ca76722e8046c5fb6e58409b0c52cd1ce28675d97c45b58861d09726eb69c15d61d42732bec6795dd255684c78c062e5d0ca3470557ac6fb9cec96d579d1af4f6b2e67219745b6cdf49da864e0fdfbbb692d3dc3234704cb5fe39e79f76d12", 0xe4}, {&(0x7f0000000c00)="b9361eb61fbc12b6a64cc3021845c32155bcbc40", 0x14}, {&(0x7f0000000c40)="680558464371b740fa0f21b31b9dd476c99a736bb9aaa21f7ca5b3cfd16b0103400c7df63629ce7bbe82246856a87aa7deb25491e615e38d644caf5470132b32b3ce0e4df70043c897e3d2fddcf6e3e1fedccd3ec1af95fa178c9661e4e950f097d88c7b1f058560be224926bc3064cee950967f2acf399dc949c65b84c91ffa94cb3ca058e325f75c67ab64c0ece0923cd42745f4d950602990db080fc86b64f44c86132a0faa04421dc7f103e7279918f77b223500484b79", 0xb9}, {&(0x7f0000000dc0)="1c09be11c004c375f2f0350b0938c76ded05bef383e54c8907bce0a694fb4f71dff973d86ff3913e4203f1bf895c9dc1e62923a20da742b23bf3339b9cb7b6ed4c4c2840e041665e3608cad913aa24cfb3d6c5a8bcd38ec6ece50daea54d149a256f9069969185c55b992acfb52c86af2e3674301ef5d24556214a928fec570a9ef92f160b0e97d7672b723ffb1d39dd4733892ecb5ab0d21c6c3005ffc13dbccc99ea0d504c262c992c02ef25127dcd1b5e57740b9338a4794d9e44039ae674cf72079ae6a7fb83cae58aa0c7f8bb2667b53751ad6a046531f0e646e32b153bc871b3a675af24321d76f44ca2155c", 0xef}], 0xa}, 0x20008801) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0xe, 0xffffffffffffffff, 0x14, {0x8fff, 0x4}}, 0x1) 2.499548678s ago: executing program 0 (id=524): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x1a9202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000011c0)=[{{&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f0000000500)=""/148, 0x94}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x3, &(0x7f00000006c0)=""/17, 0x11}, 0x400}, {{&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000780)=""/168, 0xa8}, {&(0x7f0000000840)=""/72, 0x48}, {&(0x7f00000008c0)=""/91, 0x5b}, {&(0x7f0000000940)=""/246, 0xf6}, {&(0x7f0000000a40)=""/64, 0x40}, {&(0x7f0000000a80)=""/118, 0x76}], 0x6, &(0x7f0000000b80)=""/191, 0xbf}, 0x4ef6}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c40)=""/218, 0xda}, {&(0x7f0000000d40)=""/49, 0x31}, {&(0x7f0000000d80)=""/110, 0x6e}, {&(0x7f0000000e00)=""/173, 0xad}, {&(0x7f0000000ec0)=""/26, 0x1a}], 0x5}, 0x29}, {{&(0x7f0000000f80)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001080)=[{&(0x7f0000001000)=""/92, 0x5c}], 0x1, &(0x7f00000010c0)=""/199, 0xc7}, 0x7ff}], 0x4, 0x2022, &(0x7f00000012c0)={0x0, 0x3938700}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x102, @empty, 'lo\x00'}}, 0x1e) close(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)) close(0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r6 = dup(r5) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x14000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}}) 2.377119181s ago: executing program 3 (id=525): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES64=r0], 0x4c}}, 0x4080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000340)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000680)="8158c9551d9b3ff4503008dc3a58ce6b41fe205053bc08b17b062b8b1f385a8081e5fa91938baef64ce407c067b93f5e35d2b15a0d556a9447e2fff1ec66e0c93c52f0823fb02657006aacfc548f24e086181b244fdecbccb12b1e328213301efe7ba5", 0x63}, {&(0x7f0000000440)="683e3d77cb97c73b26478f354a8768cc74212f44db5b26173896ab5d6f24e6178dbbb287d1785b078e2ae96527dfae66ed6ff81644d1e574e454a04a7fb462fb26b63b08d55822d2be48860b8d2caef0dc2e076077bd00fde7b6e8d5625f5d6807587372712cc0a482898f85c6acf77f1569aa31282c65cddc7915e6d432d08530b3aacc78996fb2b1e016e0507492df34cbf1f886ad9281402c980712f1", 0x9e}, {&(0x7f0000000500)="11e8f33873e61163ee5b4dadc3b6223af7099ffd443e0f16dad99580489f2c9529d253ab0380c3fc9d4a34628a3cc4297b0c778a4a9a444d26e6add446f040df4cd51218dba9a43ba8db841220ad94f217385cef7f8532563dd6dd71295eed7730ae2a3865345bbb611948e06003c885267b4db96c666c6b872c59cb70ace20b1e17662554a8069a9fd1c02c92ca7f987053acbda8b844ef46eb49d99dccf3c8a1c15a580679f58cca892b0c2126a17d330211b90dd99db3d0ddc21763dee6d6dea0847fbcf823a286e17ce2f4e384dc6433f846e1f77f0eff7855e1c24e3f2b607aee9c1211d6a12a0fc728c4a0c1c01556", 0xf2}], 0x3}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x47, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername(r8, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r9, &(0x7f0000000000)='7', 0x1) memfd_secret(0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x844) 1.22266459s ago: executing program 3 (id=526): r0 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) close(r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000080)='4', 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x6, 0x5, 0x7, 0x9, 0x6b, @remote, @remote, 0x7, 0x8000, 0x1, 0x401}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r10, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) socket$inet(0xa, 0x801, 0x84) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYRES16=r7, @ANYRES16=r3, @ANYBLOB="100025bd7000fddbdf2502000000240001800800030003000000080003000100000008000300020000000800030000000000740001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r1, @ANYBLOB="08000300020000001400020070696d36726567300000000000000000080003000100000014000200767863616e31000000000000000000001400020064756d6d79300000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="200001801400100076ab63616e310000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="4c00018008000100", @ANYRESHEX=r8, @ANYBLOB="1400020062617461647630000000000000000000140002006970365f76746930000000000000000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="7e7cf148e49dfb6f37e1fb953b80454a8c7090f408ca58d6919fc371a6801f2000577dd098b1d9dfa20143f4a7db7323e12a40dd99e4eb83b1a9cb73a6000000000000e741299f9b84e90a0bf7fa3c8d7ac9c88227704a1fb3c99327a0ffe59be4c639a1d73d7339f288782de841e914e5b344072f1ff510740991d778f3dc7f67a5b2342b9cb2ba1702e61a35825370af91d258f63368e9d66b32329005c100f67bce2368b90aa34131c92b688157f41c61e3bea6c021f0196766e5a1a9940c845f0ff702e10ffbd7af3b1176a10a00332f3c6043851dd46f7dc95c2722ce00d3b1254a0a3ca1a73b63de88018944e250dbd6feba696f93599e848da249f67eb6eec72deef35b94a46847c20bb2ceae061d2c47e471d403e37dac81a35e9290b8161fcafe2ccf227126242f457c931288adc79ee093f76d18db9725b4bbb527fd8708d91cc9baf2a55248582b245e49c0e0da24b3faf4ab991821f307ab39ae450cfbdc63bd8206eea0982c0f26d0b13b"], 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xf, 0x7}, {0x0, 0xc}, {0xffff, 0x7}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x3400000}]}, 0x34}}, 0xf4a236c36a38ca49) 1.203566885s ago: executing program 1 (id=527): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="00002194c5fc"], 0x6) socket$kcm(0x10, 0x3, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x4) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) 265.629644ms ago: executing program 1 (id=528): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0xffff7db9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0xffffffff, 0x39b6, 0x4, 0xfffffffc}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f00000011c0)=""/230) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r7, 0x401, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x5, 0x9, 0x4, 0x1, 0x86, 0x9, 0xe6d4, 0x2, 0x6, 0xf8e, 0xa2, 0x3, 0x6, 0x1, 0xd1c3, 0xf]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048054}, 0x20000080) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r8) r9 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 2.004252ms ago: executing program 1 (id=529): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x181002, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x20800) r2 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r5, 0x11}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x9, 0x54000, 0x4, r5, 0x1}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r10, 0x1, 0x4070bd26, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) fcntl$getown(r0, 0x9) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@rand_addr=0x64010102, 0x4d5, 0x33}, @in6=@empty, {0x3}, {}, {0x0, 0x22}, 0x0, 0x3507, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) read$FUSE(r7, &(0x7f0000001000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(r8, &(0x7f0000003940)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003840)=[{&(0x7f00000005c0)={0x268, 0x3c, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}, @nested={0x19a, 0xf2, 0x0, 0x1, [@generic="8b665b7a8bd1d650f1e662a6c6c377035b9ec6b1ff83ca42480270d6deb1bf24695425b4fcc4f5d0847f6ef6025fce189c1e5359a3a00d72b41939c3b3199a460e2b57296699517898a87359cf8e9aeaf071915e59a143159ebea2a0e3462f7d7bf222bd0b7bc44f57f26397f25b349226b4e7e2ab85be45f8a763201d6d924dd9c9c271fe2262cc8c3f2a6dad10e85bcd16d34b65305a0ff7913c2c8257b601f58e13abfdd6ba136c0590c80e17d7cac2f58db641c9aeb08ea6b1cd86eda032bbf97dd773014335c6e42b765ded618de5c2faeb0fe53b7a019739c701f29406bf8d11371079d9077015e40272711170", @generic="fbe292fec1cc17472e3aceb997209c538e3b540e1dc4eec6b455e38bd00b1e48af436c53366f59fe4c1bc6dd9ffc8e3aabd1fb23987933b94151ace25b4bb50bcac81fcc68b9577ec9bd7498261ede4061896e9fa77e8bc24d42d8aff03ac579b5710d6c712e4c214fecd39c06abbd030d177051ee38f46222cc7f50bf5575b5ab740871c66c630834622019780d7567554b7eb40191b2624e9fe02adc06bba6578d3111380e"]}, @nested={0x44, 0x58, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @u32=0xffff}, @generic="a59caf20ad32428cf30cb754fcfcc3746c0b6c72135171910e2233d3da8e152a36aa33c030a8817d8348c3c0", @typed={0x8, 0xae, 0x0, 0x0, @fd=r0}, @generic, @nested={0x4, 0x14f}]}, @generic="02b0936e743e294029e0f667e316158533556bcc33b36ca3d3857615404cc8aa24a1f2317f0de5d947268073a60c23345e99ff7a4f41490eed8abbfa80c4a964306461c11af90a001386095a1cf2a546707636c83a57963f0587485d5e5890f3e71363d6f8a472", @typed={0x8, 0x159, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x268}, {&(0x7f0000000880)={0x738, 0x3b, 0x100, 0x70bd27, 0x25dfdbfd, "", [@generic="e0827cc039fea5d76e4ebb17a71ca353a41514ee05e5f223ffe043a5e15de161f380bd0087d92ed5d49514ed12b252b0fc601de0e2ff58463cd5c26fb371eec01304fcc23b1f0600d604f4e6aedd58ba51d9930aa96f7a2f3f8ab0e174f65caf38f2fc7f2ce163dcc7073b03029983ac5042e0eeef51c52a6dbb00b42b232c2dc8418be321b7f9b1f5ae57b3b8c0f017d8858fac1736f8f00d1f1deac1ff87e3bcf125a6cfaa700c2b", @typed={0xdb, 0x3, 0x0, 0x0, @binary="9eff1ef9e2b64c993b6794261e0bb95a9b540107d3599f468371da7ecdb856dd0faef003d387df1d40fdb47a2ccda9ea1cedb6e7ef6f2045f1d13cd2924dc4a4187f2b575794d7c2577996006ff5dd18b8ed162a62fd821257195d50d8f602d26894d6045195715cd288f80adc470638e06d55a54799b48cb8ae53234dc5fcb41f21a1523b4a3bea5f6cc7b3e3625eaebcc10cdc5e01e22d50a0c5a9fde304b0607e221cc25d9509cc7463c3cb2e5c98497f517c38b5daf149737ef779d4461ea11bdb01110e0a932f10b9ed80a914b74df95cc3d87bde"}, @generic="bcde6cc28d54", @nested={0x56, 0x144, 0x0, 0x1, [@nested={0x4, 0xf1}, @generic="0333e9172d062f3fe97cea92ed202fc49d330edaff0e88326e92380bf7767932cf783c3491ecb0062034bb40fc73cbf9871a", @typed={0x14, 0x156, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x1b, 0x0, 0x0, @fd=r1}]}, @generic="b2f2153b4d8eefb65181f83d879a9f77bca869eae9e5cc6acea9c40473edb43c92fb8512460c6d120fb9c2c366fd22874969281f0748505a57e99c1846e1b85d30ceaed97415f7e944e4bbe7ee1e2e4a6f8a805fc4ea5e24fa8a1118adb1e818b667e1424a9d2e71757c19f97fd2a654e0ebfa9146a67b4ab0d6a622f7a5e16269e9e0c6f5994d51a2ffae3d4e0180c61f0a0bb8a1a7e293544e2d4e5edab85436d266116c80b79f8027faa5d331508fb26bdc13ac3210a2c643f1cef122c8484a8351bbedfedaf89800f40baba19d5efd417ec0", @nested={0x20, 0x104, 0x0, 0x1, [@typed={0x8, 0x160, 0x0, 0x0, @fd=r0}, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x359, 0x9a, 0x0, 0x1, [@generic="beac70d6a190f789aa213ec0f9741e4574ff47f998d6d03e5588e14470a22e695fa5702e34c355027fd907b5373af41a972dcc388773a7b1ecc05f70c077b8cd25abc792622c214b4266ce3e087c7f23668c52c858c063768ffb6deb35a9f3f5fe6e1923b7f3d3b80e31a6b12e26c9a2a6e8aeb16847cd86fa129082646c9446cc488e83b7a529b0a4e2db8deec629c3020ebb1920cafe56b2e3371ad23d7b20642eff5aebd134d73601ebee46b0480987b1fbb5c80d12b3d44d84fd01dcb6c8f4980808e65a9dd114de411a82009465b91feb820162df292ca19672aba70c771c54276d33e49e6ac56fed307dec76316b457e", @nested={0x4, 0x2f}, @generic="6c53b19c8262b9ab2ef31374012056c3274f9920ddc2c4b2caa6940aba808fe9dad77ac6fa7746e1f7b6af2505e1fdb5b962adf44b9bc97e3b", @generic="6202f78b554922d5b2c7b9f71381aaa7d09529abe261f95681187da34480ee68dd8038288c50763894c38f0c3a946e5a9f723bee7a10b52590c9038c7bd197a3d3b57033cac6f0f701c29fb6231359713ac19d62f5a5bda47aa0ea0d6c8bd1f9bc3935b44462d3a67844c48967ca90e803ebf3e301a7789c895c47b0f02f81be949b90340319f8a13013bde95af7452ade6445a0a8bb8da25538fd9d7f512c429a48209f7072c1936494b72e577aff702affdedede2ec0a724d365c6646a421e800c9fe20d7ef1b0b68a88ee68d41054767c74108a27", @generic="7bfbb99f399fb412601e9742e7c3a788dd94ee1c6156c095a41f823900e50d7df548c411cd0098694e35152d2f0a8623d80ffb8eba6d722f8d954b2d699916fc25eab6940e51fc855788e85852389ae678a228c58341e7ddfbc5ad27d3490e0e6401e5951cd9dffdcedb9b94eb3fe9e9e5cb82668286", @typed={0xf, 0xd9, 0x0, 0x0, @str='^\x83],\',**\x9b}\x00'}, @generic="c692f7e0f1511bca30905d1555e196e0afe45e3d371cb2ca60e9fd99b8fbea79aa9772ab12e9373f44477fe8a1805adf1b08c40c23ad2c8be15e63ea69118e95d2ada61f430ddd89ab7958aa9bc8505889cfc91626940933babec93e5d3cedd112302d4569a89330270a144c0f98e05422b5a6c5d7b72d6ac50a6807c190b2d40268a11b3cd6606d19f21c5f0d33fefd7e84e07fa15bacd5f249ce4f161ac068a19dbbc7019fde061c79b5d018a9a783531ddb1baf", @typed={0x14, 0x4c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @generic="249f880d212a54af139f71240613b9384e4030ad62a3a75baf64e9ecb6cfbfeff6e8f5e8f32e5538cee65b0206415afa93ea9127793ab465559108fd0ca9cb", @generic="bdcb545cb46b34d5a0b7a6dcbae5328c552d51549c553e78518580d2032523ed5134a27799bea18a21ea867a1208c0099bca490fed2460fd193f8cab64ce7cb298558217af7776cded253635866007b2cb61c523ef6bd545364a78c1cf5ac1965e3c9022ff024780fa6a960892ed57e2c478761d7e8b23c38d1f4c5d8c7dd1bdb8ea2b14df1e12cc5229e08e7c97746f7052495c95b33b735d97fb98fbf2f29948ce261b229f87ee1ea16aaf1739ce1957c69c"]}, 0x738}, {&(0x7f0000000fc0)={0x20, 0x27, 0x200, 0x70bd27, 0x25dfdbfc, "", [@nested={0x8, 0xa4, 0x0, 0x1, [@nested={0x4, 0x94}]}, @typed={0x8, 0xad, 0x0, 0x0, @u32=0x1}]}, 0x20}, {&(0x7f0000003040)={0x3a4, 0x31, 0x8, 0x70bd25, 0x25dfdbfb, "", [@nested={0x8, 0x49, 0x0, 0x1, [@nested={0x4, 0x53}]}, @typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x22, 0x0, 0x0, @fd=r11}, @nested={0x177, 0x105, 0x0, 0x1, [@nested={0x4, 0x142}, @generic="bffd3578f5a012bb16dc279cc599c3c9a76df4e6822af37cc6584011fdae5088e032f34f66bd2fe3995de3cb7f8f0a4c0274988c3d961f5268f373b779a3f47e3456713bf54c0fc4585eea7f81c2f0e6a0594c870ea495f62aed8f469873b6bb65c1ce3b64177ffad9972e3a08505a14258621c40859bc68ceb081cc056644a1efa68d1047c54136d609c7c26404f4054325eefdb2", @generic="a67f89a2ad4db3ea81ffcff9db0863af69b34c480d1a6ac15e8e384d1323f545115d12e588ab1245f72387c1a65c2a25e811bb3c506756210609955c0fe3af484f31d75a3f4c2510a9666df37f0f67063589800c887ce3ca4adb2baf3e0bcd478ba8e7327c18680780d7c3280c4e8074a39e7c68bc", @generic="f339c7017cb61a6d7d1de99a65fac3873067e36be3af6c1190251720f1cc5884c7476c7212c48d4cd790bfb8941effe60e6045f388c454b7f023524412f5d24e14893587897151363a812a2cfee838a833230c2b23421ce687f65fc4676bb9f2b1", @nested={0x4, 0x115}]}, @typed={0x8, 0x141, 0x0, 0x0, @uid=r12}, @generic="7a3ded863724feffc39fbc4b06ff4350ee34fa45a283e3cfc4c1a364b317919d7502355d722911b9ad4903b95ffa29675928b3338bbe7d93331e07b646d991377f9833e4be1497845bb3ea2b6bea049b190959e2cdc7c7c91c7ae92f82246cb8a0517a3c834459e4808fc95eb444622e6458e85c84c27b0158b132654c310e970c2dd305a026f28c38b05c97f3c0baa553b8058b9ab82dae629a5a38cfa797", @generic="707041912ecf441099f781cea645f406d864b52d451881ab2e1b48a38a914b49022a279c2c6713611defc5c2b1e015280a8f5516bfe23ec8085d73b7f49925a4e69bd5144bb40ba030830db38a6a8fdec911dc828fd8278b0426019c3d8a8f0fc068a7add92ac1", @generic="ff63947cf8c7c4fc2acc1a28ed52e654bfbcbaa911bd6f5e5c217dbd67f3fcacb40e2cb72396c63eb62f92e0692e150920a39c180ee638fbf9cdf5539cfbe16bba3bded55c6e95e6688b893e04e55597781ed4859ae80235ea3177317c68c2f74aece6cb46d99e8e60788a6b4292745209c78a5952eb198fb9aee7631214ee82cda25214a1a289e3e9506f42be100b9be319d1640cc0ac849b01bf6337e2a6e3b4b372e2501617ae7c0fd8b9772c431610ead5261db82fe4b236a2e9b6fd14eb8982057eca134b7ee0420aaa85fcfb83ea884ae147f894ee3ec1284f0856e9fa29cc3cbce19117f860636022", @typed={0x8, 0xc2, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x3a4}, {&(0x7f0000003980)={0x418, 0x26, 0x800, 0x70bd29, 0x25dfdbff, "", [@nested={0xc, 0x26, 0x0, 0x1, [@nested={0x4, 0x97}, @nested={0x4, 0x78}]}, @generic="dc3a9d8042d710cb318c740838531a97da591249f4cd0a668a4cddc1315c97bc6ec3b9952ea4b8ce003bf21fcc760fdb8a5bcd7b3611b7723237b4464cd44d322ee481051ea54e36411b821aca355c5fd9d2acd48648f780d4cbf5a83c7686e8b5eb6d65a37a4c62cbdbdd21122808216c1334ca53", @generic="f35848418af75b7318397f0514b3a72e37fb9be963611c971a12ac9e18eca5d3ce435ae194ef44a42e9e9a4c842ea76c708aea638eb9a2c1402824510158898e32a533dfc2da9348538e9fa339877f1b49bb2c2b9518bba665379b16efbde60661f775c9db7361861820f0ab9448fefe29f16b28aa8a05b512d41026e1aa67122cdadb53ef7f577587ba4fbd08baac0aff8a35323d8e5905ff6c495ee8ea85e9f5f20d15f537b6af14d320d7461f9a248f789ec315f0185265808029f48ac6368b672fefcc81853b92aef294b9ed4149529c65ca4f", @generic="4b3ccbba011872438ade16638685703b34364042bbeed380bed9b04b40b4955a6e50d4709a8dabc3934744a0185d15eeecb2ecd258b3147d4036eabd9394bee5cd6a249894ce618f924a0f896c31036facbbb43581013c14158d54667d780915093a5e47d1203066d0a76c9146426d14a4903f3b007e676147aad176f5d3c4696e7046cf88ebbd210400b940161e9bc0252f4ae794d0fff1b0e6f4714dc5fcab685f198499d30a264e32475422d4564271f366271f410ec83571a53419918cf10e538f210fddebe58bfc04054a596144571331dfa8c2e369fca2debbb4ca6fc277b4d813bf85664dc7", @nested={0x1c6, 0xba, 0x0, 0x1, [@nested={0x4, 0x53}, @typed={0x6, 0x20, 0x0, 0x0, @str='!\x00'}, @generic="23e9bd0d9111e3a4cfffe64fb7a01c4a9446803410c5555ecc9c9ae2a7d771041d28e60215535babff8667111627389f4ab92e22e40f2546b4f57c3691e0c6edca4e70433ee204a3aa1465dabec890dd4159903b", @typed={0x8, 0x15e, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x6f, 0x1e, 0x0, 0x0, @binary="301af41c9fe91ca233b6b6d3d1ce62d339a4ce340bc7886091692a4903ac9eb3403f7ab13895d50dc596976a9545687fa8d0416d6851680facd9df7faef7c8a88ff935a0b727991e0500c77bf22a219d8fc94461716bb92e165188e368606d5bbd838f3f32d77040178b7b"}, @generic="1de1c16d47a6f716fbd996dc14db876e4f311db41ec654aaeae4d66b60b0d2c029d6849d51da8cdc8ae7132e7534939b62cb4e3c4de810255978e21abfcba309ca12299509725cb1258f81c178eb602e03c414819b4b2a51f940ea90567544725ece0fd5e73b8f6ce11643874ee1dccf3d4f8b14abb346eb709392a54d7ff02c361448c7860a29e4bfac3f2c29564ea6a2627288074f640f4eba5b887245006aa77365a84a7dbfe3a710221ecadc187ad93a27a9d145e6e70a17ec3fdf463bd4164750c57d7fb465b0fd3559f83eb7b9c625f7c6d9bef29d817a2a55e2b97e2ac2b9"]}]}, 0x418}], 0x5, &(0x7f00000038c0)=[@rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [r7, r1, r6, r6, r0, r0, r2, r6, r7]}}], 0x48, 0x10}, 0x40090) 0s ago: executing program 0 (id=530): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x43be, &(0x7f0000000140)={0x0, 0xf611, 0x200, 0xffffffff, 0x389}) r1 = syz_io_uring_setup(0xeec, &(0x7f0000000400)={0x0, 0x595f, 0x40, 0x0, 0xed, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000000c0)) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f00000001c0)={0x34, 0x89, 0x8, 0x4, 0x0, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x9e, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000240)}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) syz_open_dev$hidraw(&(0x7f0000000080), 0x5, 0x501800) r8 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r8) kernel console output (not intermixed with test programs): 02154 phy0 wpan0: encryption failed: -22 [ 189.571865][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.574447][ T190] gspca_spca501: reg write: error -110 [ 189.574458][ T190] spca501 3-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 189.574505][ T190] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 189.762216][ T31] audit: type=1400 audit(1789047356.040:493): avc: denied { write } for pid=7020 comm="syz.3.321" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 189.782649][ T31] audit: type=1400 audit(1789047356.050:494): avc: denied { read write } for pid=7022 comm="syz.1.322" name="sg0" dev="devtmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 189.783052][ T31] audit: type=1400 audit(1789047356.050:495): avc: denied { open } for pid=7022 comm="syz.1.322" path="/dev/sg0" dev="devtmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 189.789059][ T31] audit: type=1400 audit(1789047356.050:496): avc: denied { read } for pid=7022 comm="syz.1.322" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 189.789415][ T31] audit: type=1400 audit(1789047356.050:497): avc: denied { open } for pid=7022 comm="syz.1.322" path="/72/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 189.791231][ T31] audit: type=1400 audit(1789047356.050:498): avc: denied { mounton } for pid=7022 comm="syz.1.322" path="/72/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 189.794045][ T31] audit: type=1400 audit(1789047356.050:499): avc: denied { ioctl } for pid=7022 comm="syz.1.322" path="/dev/sg0" dev="devtmpfs" ino=857 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 190.112972][ T31] audit: type=1400 audit(1789047356.390:500): avc: denied { create } for pid=7026 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.207943][ T31] audit: type=1400 audit(1789047356.480:501): avc: denied { write } for pid=7028 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 190.209624][ T7029] netlink: 104 bytes leftover after parsing attributes in process `syz.3.325'. [ 190.438216][ T190] kernel write not supported for file /dsp1 (pid: 190 comm: kworker/0:2) [ 190.631775][ T5598] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 190.744047][ T190] usb 3-1: USB disconnect, device number 19 [ 190.784738][ T5598] usb 5-1: Using ep0 maxpacket: 8 [ 190.789708][ T5598] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 190.790621][ T5598] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 190.790644][ T5598] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 190.790665][ T5598] usb 5-1: config 0 has no interface number 1 [ 190.790680][ T5598] usb 5-1: config 0 has no interface number 2 [ 190.790733][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.820665][ T5598] usb 5-1: config 0 descriptor?? [ 191.073035][ T5598] qcserial 5-1:0.6: Qualcomm USB modem converter detected [ 191.132143][ T7045] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 191.132168][ T7045] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.138744][ T7045] vhci_hcd vhci_hcd.0: Device attached [ 191.142493][ T7046] vhci_hcd: connection closed [ 191.153703][ T5921] vhci_hcd vhci_hcd.1: stop threads [ 191.154226][ T5921] vhci_hcd vhci_hcd.1: release socket [ 191.154255][ T5921] vhci_hcd vhci_hcd.1: disconnect device [ 191.268293][ T7050] netlink: 36 bytes leftover after parsing attributes in process `syz.3.330'. [ 191.268314][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 191.635411][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 191.635503][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 191.635527][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 191.635560][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 191.635610][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 192.068299][ T7066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.334'. [ 192.069089][ T7066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.334'. [ 192.081187][ T7066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7066 comm=syz.2.334 [ 192.413056][ T5787] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 192.582899][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 192.584725][ T5787] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 192.587145][ T5787] usb 4-1: config 0 has an invalid interface number: 6 but max is 2 [ 192.587719][ T5787] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 192.587743][ T5787] usb 4-1: config 0 has no interface number 1 [ 192.587757][ T5787] usb 4-1: config 0 has no interface number 2 [ 192.587790][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.616337][ T5787] usb 4-1: config 0 descriptor?? [ 192.850027][ T5787] qcserial 4-1:0.6: Qualcomm USB modem converter detected [ 193.932102][ T5699] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 194.171990][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 194.174194][ T5699] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 194.175433][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.175464][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.175499][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.209142][ T5699] usb 2-1: config 0 descriptor?? [ 194.644078][ T5699] hub 2-1:0.0: USB hub found [ 194.709475][ T5699] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 195.348099][ T5700] usb 5-1: USB disconnect, device number 25 [ 195.360858][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.372333][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.432668][ T5700] qcserial 5-1:0.6: device disconnected [ 195.671668][ T5332] usb 4-1: USB disconnect, device number 18 [ 195.672780][ T5332] qcserial 4-1:0.6: device disconnected [ 195.984494][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 195.984518][ T31] audit: type=1400 audit(1789047362.240:513): avc: denied { ioctl } for pid=7091 comm="syz.0.339" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 196.566560][ T5332] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 196.774577][ T5332] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 196.825347][ T5332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.825599][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 196.825632][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 196.825662][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 196.825737][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 196.825784][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 196.825814][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 196.825881][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 196.825912][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 196.825967][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 196.826038][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 196.826071][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 196.826102][ T5332] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.826157][ T5332] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.826210][ T5332] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 197.086904][ T5699] usbhid 2-1:0.0: can't add hid device: -71 [ 197.087603][ T5699] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 197.199884][ T5332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.199975][ T5332] usb 4-1: Product: syz [ 197.200029][ T5332] usb 4-1: Manufacturer: syz [ 197.200078][ T5332] usb 4-1: SerialNumber: syz [ 197.315210][ T5699] usb 2-1: USB disconnect, device number 15 [ 197.486698][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.487159][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.487700][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.605527][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.606102][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.606609][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.607262][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.607798][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.672907][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.674501][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.675453][ T7098] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.926693][ T5332] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 197.942179][ T5332] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 197.981541][ T5332] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 198.011819][ T5332] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 198.143577][ T5332] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 198.880559][ T31] audit: type=1400 audit(1789047365.150:514): avc: denied { mount } for pid=7108 comm="syz.1.343" name="/" dev="ramfs" ino=14745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 199.277515][ T5332] usb 4-1: USB disconnect, device number 19 [ 199.356366][ T5332] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 199.370949][ T5332] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 199.379433][ T5332] keyspan 4-1:1.0: device disconnected [ 199.729230][ T7132] netlink: 'syz.4.347': attribute type 1 has an invalid length. [ 199.789613][ T31] audit: type=1400 audit(1789047366.060:515): avc: denied { getopt } for pid=7129 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 200.007613][ T7132] bond2: entered promiscuous mode [ 200.011501][ T7132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.570426][ T31] audit: type=1400 audit(1789047366.840:516): avc: denied { bind } for pid=7108 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.570474][ T31] audit: type=1400 audit(1789047366.840:517): avc: denied { setopt } for pid=7108 comm="syz.1.343" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.572188][ T31] audit: type=1400 audit(1789047366.840:518): avc: denied { connect } for pid=7108 comm="syz.1.343" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.986825][ T7142] netlink: 40 bytes leftover after parsing attributes in process `syz.4.349'. [ 200.988560][ T7139] netlink: 40 bytes leftover after parsing attributes in process `syz.4.349'. [ 201.014687][ T7141] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 201.029444][ T31] audit: type=1400 audit(1789047367.300:519): avc: denied { write } for pid=7143 comm="syz.0.351" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 201.053232][ T31] audit: type=1400 audit(1789047367.300:520): avc: denied { ioctl } for pid=7143 comm="syz.0.351" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 201.085862][ T7141] bond2: entered promiscuous mode [ 201.097016][ T7141] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.099774][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'. [ 201.122200][ T7147] bond2: entered allmulticast mode [ 201.250349][ T7141] bridge2: entered promiscuous mode [ 201.257731][ T31] audit: type=1400 audit(1789047367.530:521): avc: denied { write } for pid=7148 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 201.257907][ T7141] bridge2: entered allmulticast mode [ 201.260583][ T31] audit: type=1400 audit(1789047367.530:522): avc: denied { create } for pid=7148 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.261383][ T7141] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 201.323504][ T31] audit: type=1400 audit(1789047367.600:523): avc: denied { accept } for pid=7148 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.331555][ T7145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'. [ 201.376803][ T7151] syzkaller0: entered promiscuous mode [ 201.376828][ T7151] syzkaller0: entered allmulticast mode [ 201.720388][ T31] audit: type=1400 audit(1789047367.990:524): avc: denied { getopt } for pid=7148 comm="syz.0.352" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.723624][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.352'. [ 201.723644][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'. [ 201.765933][ T31] audit: type=1400 audit(1789047368.030:525): avc: denied { connect } for pid=7148 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.047570][ T7163] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 (while UP) [ 202.981904][ T5598] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 203.144503][ T5598] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 203.147080][ T5598] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.147128][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 203.147157][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 203.147183][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 203.147208][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 203.147234][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 203.147259][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 203.147284][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 203.147310][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 203.147334][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 203.147359][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 203.147383][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 203.147407][ T5598] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.147429][ T5598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.147452][ T5598] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 203.181892][ T190] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 203.323976][ T5598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.324004][ T5598] usb 5-1: Product: syz [ 203.333716][ T5598] usb 5-1: Manufacturer: syz [ 203.333736][ T5598] usb 5-1: SerialNumber: syz [ 203.350984][ T7167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.351107][ T7167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.351219][ T7167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.351342][ T7167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.351425][ T7167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.351534][ T7167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.380903][ T190] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 203.405860][ T190] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.405906][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 203.405954][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 203.405977][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 203.405999][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 203.406019][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 203.406040][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 203.406062][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 203.406107][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 203.406130][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 203.406155][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 203.406179][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 203.406203][ T190] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.406246][ T190] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.406268][ T190] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 203.446267][ T7167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.446380][ T7167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.446496][ T7167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.446596][ T7167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.446685][ T7167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.528733][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.528752][ T190] usb 4-1: Product: syz [ 203.528761][ T190] usb 4-1: Manufacturer: syz [ 203.528769][ T190] usb 4-1: SerialNumber: syz [ 203.600111][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.600209][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.600293][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.600377][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.600461][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.600555][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.615990][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.616119][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.616209][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.616300][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.616387][ T7169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.620024][ T5598] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 203.714960][ T5598] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 203.716828][ T190] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 203.718149][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 203.747388][ T5598] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 203.758877][ T5598] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 203.759925][ T190] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 203.778978][ T190] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 203.780408][ T5598] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 203.805860][ T190] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 203.996179][ T190] usb 4-1: USB disconnect, device number 20 [ 204.100450][ T190] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 204.147031][ T190] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 204.152225][ T190] keyspan 4-1:1.0: device disconnected [ 204.264629][ T31] audit: type=1400 audit(1789047370.540:526): avc: denied { map } for pid=7185 comm="syz.2.363" path="socket:[14101]" dev="sockfs" ino=14101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 204.371469][ T7188] netlink: 'syz.2.364': attribute type 1 has an invalid length. [ 204.401337][ T7188] bond1: entered promiscuous mode [ 204.401851][ T7188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.422558][ T5787] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 204.456205][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'. [ 204.456371][ T7188] bond1: entered allmulticast mode [ 204.474602][ T7188] bridge1: entered promiscuous mode [ 204.474743][ T7188] bridge1: entered allmulticast mode [ 204.475230][ T7188] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 204.573416][ T5787] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 204.578599][ T5787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.578652][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 204.578677][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 204.578700][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 204.578724][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 204.578747][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 204.578769][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 204.578790][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 204.578813][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 204.578835][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 204.578858][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 204.578880][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 204.578902][ T5787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.578922][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.578944][ T5787] usb 1-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 204.622534][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.622560][ T5787] usb 1-1: Product: syz [ 204.622576][ T5787] usb 1-1: Manufacturer: syz [ 204.622590][ T5787] usb 1-1: SerialNumber: syz [ 204.709933][ T7184] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.710034][ T7184] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.710121][ T7184] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.710206][ T7184] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.710304][ T7184] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.710391][ T7184] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.710478][ T7184] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.710564][ T7184] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.710650][ T7184] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.710735][ T7184] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.710820][ T7184] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.715666][ T9] usb 5-1: USB disconnect, device number 26 [ 204.863627][ T5787] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 204.864923][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 204.868683][ T31] audit: type=1400 audit(1789047371.140:527): avc: denied { append } for pid=7190 comm="syz.2.365" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.915649][ T5787] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 204.932626][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 204.934539][ T5787] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 204.954889][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 204.986112][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 204.987564][ T9] keyspan 5-1:1.0: device disconnected [ 205.119786][ T7191] Bluetooth: MGMT ver 1.23 [ 205.119929][ T31] audit: type=1400 audit(1789047371.390:528): avc: denied { write } for pid=7190 comm="syz.2.365" path="socket:[14221]" dev="sockfs" ino=14221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.298839][ T7195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.366'. [ 205.312454][ T5787] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 205.439498][ T5332] usb 1-1: USB disconnect, device number 23 [ 205.462569][ T5787] usb 2-1: Using ep0 maxpacket: 8 [ 205.463545][ T5787] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 205.466838][ T5787] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 205.466863][ T5787] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 205.466885][ T5787] usb 2-1: config 0 has no interface number 1 [ 205.466901][ T5787] usb 2-1: config 0 has no interface number 2 [ 205.466958][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.536875][ T5787] usb 2-1: config 0 descriptor?? [ 205.571387][ T5332] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 205.598292][ T5332] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 205.599944][ T5332] keyspan 1-1:1.0: device disconnected [ 205.671994][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 205.744476][ T5787] qcserial 2-1:0.6: Qualcomm USB modem converter detected [ 205.834458][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 205.845402][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.845445][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 205.845471][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 205.845494][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 205.845517][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 205.845540][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 205.845562][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 205.846497][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 205.846525][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 205.846547][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 205.846568][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 205.846589][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 205.846610][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.846629][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.846649][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 205.851700][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.851724][ T9] usb 3-1: Product: syz [ 205.851738][ T9] usb 3-1: Manufacturer: syz [ 205.851753][ T9] usb 3-1: SerialNumber: syz [ 205.855307][ T7203] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 205.855404][ T7203] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 205.855508][ T7203] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 205.855613][ T7203] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 205.855697][ T7203] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 205.855804][ T7203] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 205.855910][ T7203] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 205.855993][ T7203] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 205.856098][ T7203] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 205.856206][ T7203] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 205.856316][ T7203] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 205.861123][ T9] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 205.864006][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 206.045826][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 206.060273][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 206.074659][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 206.452843][ T5332] usb 3-1: USB disconnect, device number 20 [ 206.454487][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 206.528198][ T5332] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 206.549328][ T5332] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 206.550928][ T5332] keyspan 3-1:1.0: device disconnected [ 206.914001][ T5700] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 207.088088][ T5700] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.090595][ T5700] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 47, changing to 9 [ 207.090626][ T5700] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 25968, setting to 1024 [ 207.099192][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.099216][ T5700] usb 1-1: Product: syz [ 207.099231][ T5700] usb 1-1: Manufacturer: syz [ 207.099246][ T5700] usb 1-1: SerialNumber: syz [ 207.316429][ T7210] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 207.556379][ T31] audit: type=1400 audit(1789047373.760:529): avc: denied { setopt } for pid=7217 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 207.935491][ T7210] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 209.099134][ T7229] capability: warning: `syz.4.374' uses deprecated v2 capabilities in a way that may be insecure [ 209.136017][ T59] IPVS: starting estimator thread 0... [ 209.334509][ T7232] IPVS: using max 38 ests per chain, 91200 per kthread [ 209.421614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 209.624182][ T7240] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 209.728194][ T5699] usb 2-1: USB disconnect, device number 16 [ 209.729693][ T5699] qcserial 2-1:0.6: device disconnected [ 209.791347][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.376'. [ 209.953535][ T7240] bond3: entered promiscuous mode [ 209.973092][ T7240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.973851][ T7244] bond3: entered allmulticast mode [ 210.021890][ T5332] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 210.055196][ T7248] bridge3: entered promiscuous mode [ 210.055296][ T7248] bridge3: entered allmulticast mode [ 210.094736][ T7248] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 210.096497][ T5700] cdc_ncm 1-1:1.0: bind() failure [ 210.120399][ T5700] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 210.121019][ T5700] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 210.122124][ T5700] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 210.130613][ T5700] usb 1-1: USB disconnect, device number 24 [ 210.171694][ T5332] usb 5-1: Using ep0 maxpacket: 8 [ 210.174372][ T5332] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 210.177976][ T5332] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 210.178001][ T5332] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 210.178021][ T5332] usb 5-1: config 0 has no interface number 1 [ 210.178037][ T5332] usb 5-1: config 0 has no interface number 2 [ 210.178116][ T5332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.246051][ T5332] usb 5-1: config 0 descriptor?? [ 210.401438][ T7250] ubi: bad wear-leveling threshold 813332851 [ 210.570861][ T5332] qcserial 5-1:0.6: Qualcomm USB modem converter detected [ 210.596483][ T7254] fuse: Bad value for 'fd' [ 210.716301][ T31] audit: type=1400 audit(1789047376.850:530): avc: denied { create } for pid=7253 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.716347][ T31] audit: type=1400 audit(1789047376.890:531): avc: denied { mount } for pid=7249 comm="syz.3.378" name="/" dev="rpc_pipefs" ino=14956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 211.135364][ T7261] 9p: Bad value for 'wfdno' [ 211.232046][ T31] audit: type=1400 audit(1789047377.430:532): avc: denied { bind } for pid=7258 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.232091][ T31] audit: type=1400 audit(1789047377.430:533): avc: denied { listen } for pid=7258 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 211.557894][ T5699] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 211.902455][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 211.904719][ T5699] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 211.909798][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 211.909828][ T5699] usb 2-1: Product: syz [ 211.909844][ T5699] usb 2-1: Manufacturer: syz [ 211.909860][ T5699] usb 2-1: SerialNumber: syz [ 211.952570][ T5699] usb 2-1: config 0 descriptor?? [ 211.971883][ T5699] gspca_main: sq905-2.14.0 probing 2770:9120 [ 212.163440][ T31] audit: type=1400 audit(1789047378.440:534): avc: denied { read } for pid=7258 comm="syz.1.380" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 212.163946][ T31] audit: type=1400 audit(1789047378.440:535): avc: denied { open } for pid=7258 comm="syz.1.380" path="/81/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 212.224122][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.383'. [ 212.242582][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 212.290296][ T7276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.361858][ T5332] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 212.391438][ T7276] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 212.415098][ T7278] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 212.419653][ T7278] bond2 (unregistering): Released all slaves [ 212.516572][ T5332] usb 4-1: Using ep0 maxpacket: 16 [ 212.517116][ T5332] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 212.518309][ T5332] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 212.518336][ T5332] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 212.518358][ T5332] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 212.518379][ T5332] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 212.518399][ T5332] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 212.518422][ T5332] usb 4-1: config 0 has no interface number 0 [ 212.518467][ T5332] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 212.518497][ T5332] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 212.518521][ T5332] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 212.518552][ T5332] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.518579][ T5332] usb 4-1: config 0 interface 125 has no altsetting 2 [ 212.598856][ T5332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.598884][ T5332] usb 4-1: Product: syz [ 212.598923][ T5332] usb 4-1: Manufacturer: syz [ 212.598939][ T5332] usb 4-1: SerialNumber: syz [ 212.673591][ T5332] usb 4-1: config 0 descriptor?? [ 212.687813][ T5332] usb 4-1: selecting invalid altsetting 2 [ 212.687842][ T5332] uss720 4-1:0.125: probe with driver uss720 failed with error -22 [ 212.715937][ T190] usb 5-1: USB disconnect, device number 27 [ 212.717170][ T190] qcserial 5-1:0.6: device disconnected [ 212.727908][ T7278] FAULT_INJECTION: forcing a failure. [ 212.727908][ T7278] name failslab, interval 1, probability 0, space 0, times 0 [ 212.727977][ T7278] CPU: 1 UID: 0 PID: 7278 Comm: syz.2.384 Not tainted syzkaller #0 PREEMPT(full) [ 212.728005][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 212.728019][ T7278] Call Trace: [ 212.728027][ T7278] [ 212.728037][ T7278] dump_stack_lvl+0x100/0x190 [ 212.728079][ T7278] should_fail_ex.cold+0x5/0xa [ 212.728120][ T7278] should_failslab+0xc2/0x120 [ 212.728150][ T7278] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 212.728178][ T7278] ? sock_alloc_inode+0x26/0x2c0 [ 212.728209][ T7278] ? __pfx_sock_alloc_inode+0x10/0x10 [ 212.728238][ T7278] sock_alloc_inode+0x26/0x2c0 [ 212.728265][ T7278] ? __pfx_sock_alloc_inode+0x10/0x10 [ 212.728293][ T7278] alloc_inode+0x68/0x250 [ 212.728315][ T7278] sock_alloc+0x44/0x280 [ 212.728338][ T7278] ? security_socket_create+0x7f/0x250 [ 212.728373][ T7278] __sock_create+0xc2/0x860 [ 212.728409][ T7278] __sys_socket+0x14d/0x260 [ 212.728440][ T7278] ? __pfx___sys_socket+0x10/0x10 [ 212.728484][ T7278] __x64_sys_socket+0x72/0xb0 [ 212.728524][ T7278] ? lockdep_hardirqs_on+0x7d/0x110 [ 212.728555][ T7278] do_syscall_64+0x123/0x790 [ 212.728588][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.728610][ T7278] RIP: 0033:0x7fb602f9e159 [ 212.728630][ T7278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.728650][ T7278] RSP: 002b:00007fb603ed3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 212.728672][ T7278] RAX: ffffffffffffffda RBX: 00007fb603226090 RCX: 00007fb602f9e159 [ 212.728685][ T7278] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 212.728696][ T7278] RBP: 00007fb60303503b R08: 0000000000000000 R09: 0000000000000000 [ 212.728706][ T7278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.728717][ T7278] R13: 00007fb603226128 R14: 00007fb603226090 R15: 00007fffd3c26628 [ 212.728740][ T7278] [ 212.893497][ T9] usb 4-1: USB disconnect, device number 21 [ 212.928012][ T7278] socket: no more sockets [ 213.309210][ T5699] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 213.309279][ T5699] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 213.358835][ T5699] usb 2-1: USB disconnect, device number 17 [ 213.896214][ T31] audit: type=1400 audit(1789047380.170:536): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 214.175961][ T7293] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 214.253768][ T31] audit: type=1400 audit(1789047380.530:537): avc: denied { mount } for pid=7290 comm="syz.0.386" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 214.261746][ T7297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.389'. [ 214.304345][ T7293] bond2: entered promiscuous mode [ 214.304806][ T7293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.305797][ T7297] bond2: entered allmulticast mode [ 214.456599][ T7296] xt_l2tp: v2 sid > 0xffff: 117440512 [ 214.486926][ T7296] No such timeout policy "syz1" [ 214.621253][ T7297] bridge2: entered promiscuous mode [ 214.621968][ T7297] bridge2: entered allmulticast mode [ 214.622573][ T7297] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 214.849700][ T31] audit: type=1400 audit(1789047381.120:538): avc: denied { getopt } for pid=7300 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.258353][ T31] audit: type=1400 audit(1789047381.530:539): avc: denied { mounton } for pid=7303 comm="syz.1.393" path="/83/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 215.399131][ T5332] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 215.503269][ T7311] tipc: Started in network mode [ 215.503298][ T7311] tipc: Node identity 7f000001, cluster identity 4711 [ 215.527251][ T7311] tipc: New replicast peer: 127.0.0.2 [ 215.527603][ T7311] tipc: Enabled bearer , priority 10 [ 215.552909][ T5332] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 215.556683][ T5332] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 215.556701][ T5332] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.573495][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 215.573521][ T5332] usb 3-1: Product: syz [ 215.573536][ T5332] usb 3-1: Manufacturer: syz [ 215.573551][ T5332] usb 3-1: SerialNumber: syz [ 215.593682][ T5332] usb 3-1: config 0 descriptor?? [ 215.594315][ T7306] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 215.630097][ T5332] usb 3-1: selecting invalid altsetting 0 [ 215.681673][ T190] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 215.845123][ T190] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 215.849282][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.849308][ T190] usb 4-1: Product: syz [ 215.849323][ T190] usb 4-1: Manufacturer: syz [ 215.849337][ T190] usb 4-1: SerialNumber: syz [ 215.891751][ T190] usb 4-1: config 0 descriptor?? [ 216.220362][ T7306] xt_CT: No such helper "syz1" [ 216.246078][ T7316] usb 3-1: BOGUS urb xfer, pipe 0 != type 3 [ 216.787731][ T5700] tipc: Node number set to 2130706433 [ 216.893020][ T5787] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 216.931655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 216.950907][ T190] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 022 [ 217.053009][ T5787] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 217.059860][ T5787] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.059887][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 217.059901][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 217.059915][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 217.059928][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 217.059941][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 217.059954][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 217.059967][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 217.059980][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 217.059992][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 217.060004][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 217.060016][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 217.060028][ T5787] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.060039][ T5787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.060050][ T5787] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 217.092556][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.092582][ T5787] usb 5-1: Product: syz [ 217.092597][ T5787] usb 5-1: Manufacturer: syz [ 217.092611][ T5787] usb 5-1: SerialNumber: syz [ 217.114997][ T7319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.115135][ T7319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.115241][ T7319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.115348][ T7319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.115433][ T7319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.115538][ T7319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.115643][ T7319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.115733][ T7319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.115832][ T7319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.115935][ T7319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.116019][ T7319] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 217.126697][ T31] audit: type=1400 audit(1789047383.400:540): avc: denied { write } for pid=7309 comm="syz.3.394" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 217.134992][ T5787] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 217.163303][ T5787] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 217.190014][ T5787] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 217.205266][ T5787] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 217.228894][ T5787] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 217.303013][ T31] audit: type=1400 audit(1789047383.580:541): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 217.572820][ T5332] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 217.730830][ T5332] usb 2-1: not running at top speed; connect to a high speed hub [ 217.731030][ T5332] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 217.742366][ T5332] usb 2-1: config index 0 descriptor too short (expected 161, got 153) [ 217.742384][ T5332] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.742401][ T5332] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.742428][ T5332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.777506][ T5332] gspca_main: spca501-2.14.0 probing 0000:0000 [ 218.183065][ T7329] nvme nvme0: failed to connect socket: -111 [ 218.205000][ T5699] usb 5-1: USB disconnect, device number 28 [ 218.356217][ T5699] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 218.366122][ T5699] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 218.373558][ T5699] keyspan 5-1:1.0: device disconnected [ 218.400790][ T5787] usb 4-1: USB disconnect, device number 22 [ 218.535137][ T5332] gspca_spca501: reg write: error -110 [ 218.535186][ T5332] spca501 2-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 218.535495][ T5332] spca501 2-1:1.0: probe with driver spca501 failed with error -22 [ 219.139301][ T5700] usb 3-1: USB disconnect, device number 21 [ 219.599466][ T7349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.402'. [ 219.659325][ T7343] bond3 (unregistering): Released all slaves [ 220.210432][ T5699] usb 2-1: USB disconnect, device number 18 [ 220.351685][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 220.544419][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 220.546145][ T9] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 220.547053][ T9] usb 1-1: config 0 has an invalid interface number: 6 but max is 2 [ 220.547067][ T9] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 220.547079][ T9] usb 1-1: config 0 has no interface number 1 [ 220.547089][ T9] usb 1-1: config 0 has no interface number 2 [ 220.547120][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.610605][ T9] usb 1-1: config 0 descriptor?? [ 220.794877][ T31] audit: type=1400 audit(1789047387.070:542): avc: denied { execute } for pid=7353 comm="syz.4.405" path="/file0" dev="ramfs" ino=15522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 221.525513][ T31] audit: type=1400 audit(1789047387.800:543): avc: denied { create } for pid=7356 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.529054][ T31] audit: type=1400 audit(1789047387.800:544): avc: denied { setopt } for pid=7356 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.949963][ T7367] FAULT_INJECTION: forcing a failure. [ 221.949963][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [ 221.949985][ T7367] CPU: 0 UID: 0 PID: 7367 Comm: syz.4.407 Not tainted syzkaller #0 PREEMPT(full) [ 221.949998][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 221.950006][ T7367] Call Trace: [ 221.950010][ T7367] [ 221.950014][ T7367] dump_stack_lvl+0x100/0x190 [ 221.950037][ T7367] should_fail_ex.cold+0x5/0xa [ 221.950059][ T7367] should_failslab+0xc2/0x120 [ 221.950075][ T7367] __kmalloc_noprof+0xfc/0x840 [ 221.950088][ T7367] ? tomoyo_encode2+0xfb/0x3c0 [ 221.950104][ T7367] tomoyo_encode2+0xfb/0x3c0 [ 221.950119][ T7367] tomoyo_encode+0x29/0x50 [ 221.950131][ T7367] tomoyo_realpath_from_path+0x18c/0x690 [ 221.950148][ T7367] tomoyo_path_number_perm+0x23c/0x580 [ 221.950166][ T7367] ? tomoyo_path_number_perm+0x22e/0x580 [ 221.950184][ T7367] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.950207][ T7367] ? __lock_acquire+0x5c0/0x1f40 [ 221.950227][ T7367] ? __fget_files+0x34/0x3d0 [ 221.950241][ T7367] ? find_held_lock+0x2b/0x80 [ 221.950256][ T7367] ? hook_file_ioctl_common+0x140/0x440 [ 221.950274][ T7367] ? __fget_files+0x21f/0x3d0 [ 221.950290][ T7367] security_file_ioctl+0xd3/0x230 [ 221.950302][ T7367] __x64_sys_ioctl+0xb7/0x210 [ 221.950315][ T7367] do_syscall_64+0x123/0x790 [ 221.950332][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.950344][ T7367] RIP: 0033:0x7fa51e79e159 [ 221.950354][ T7367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.950365][ T7367] RSP: 002b:00007fa51f5d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.950377][ T7367] RAX: ffffffffffffffda RBX: 00007fa51ea26090 RCX: 00007fa51e79e159 [ 221.950384][ T7367] RDX: 00002000000000c0 RSI: 0000000040a85323 RDI: 0000000000000003 [ 221.950391][ T7367] RBP: 00007fa51f5d1090 R08: 0000000000000000 R09: 0000000000000000 [ 221.950398][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.950405][ T7367] R13: 00007fa51ea26128 R14: 00007fa51ea26090 R15: 00007fff1b494078 [ 221.950421][ T7367] [ 221.968150][ T7367] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.555533][ T9] usb 1-1: Could not set interface, error -71 [ 222.758004][ T9] usb 1-1: USB disconnect, device number 25 [ 223.288522][ T31] audit: type=1400 audit(1789047389.540:545): avc: denied { read } for pid=7370 comm="syz.0.409" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 224.311507][ T31] audit: type=1400 audit(1789047389.800:546): avc: denied { read } for pid=7373 comm="syz.4.411" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 224.311560][ T31] audit: type=1400 audit(1789047389.800:547): avc: denied { open } for pid=7373 comm="syz.4.411" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 224.803074][ T5332] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 224.897985][ T5787] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 224.952296][ T5332] usb 3-1: Using ep0 maxpacket: 8 [ 224.952943][ T5332] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 225.065120][ T5332] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 225.065145][ T5332] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 225.065163][ T5332] usb 3-1: config 0 has no interface number 1 [ 225.065179][ T5332] usb 3-1: config 0 has no interface number 2 [ 225.065233][ T5332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.102670][ T5787] usb 1-1: Using ep0 maxpacket: 32 [ 225.111421][ T5332] usb 3-1: config 0 descriptor?? [ 225.126917][ T5787] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 225.129390][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.129418][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.129452][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.651937][ T5787] usb 1-1: config 0 descriptor?? [ 225.693855][ T5332] qcserial 3-1:0.6: Qualcomm USB modem converter detected [ 226.231546][ T5787] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 226.261837][ T5787] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 226.763015][ T5787] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 226.973568][ T5787] ft260 0003:0403:6030.000F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 227.477025][ T5787] ft260 0003:0403:6030.000F: failed to retrieve status: -32, no wakeup [ 227.793492][ T5332] usb 3-1: USB disconnect, device number 22 [ 227.794977][ T5332] qcserial 3-1:0.6: device disconnected [ 227.965518][ T7406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.418'. [ 228.178805][ T5699] Process accounting resumed [ 228.278766][ T190] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 228.630829][ T5787] usb 1-1: USB disconnect, device number 26 [ 228.856427][ T190] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 228.895403][ T31] audit: type=1400 audit(1789047395.120:548): avc: denied { setopt } for pid=7408 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.895671][ T31] audit: type=1400 audit(1789047395.120:549): avc: denied { getopt } for pid=7408 comm="syz.1.417" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.131822][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.131850][ T190] usb 5-1: Product: syz [ 229.131865][ T190] usb 5-1: Manufacturer: syz [ 229.131880][ T190] usb 5-1: SerialNumber: syz [ 229.148486][ T190] usb 5-1: config 0 descriptor?? [ 229.354486][ T190] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 029 [ 230.023616][ T9] usb 5-1: USB disconnect, device number 29 [ 230.039538][ T7424] i2c i2c-1: failure sending STOP [ 230.263342][ T190] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 230.263900][ T5598] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 230.422600][ T5598] usb 3-1: Using ep0 maxpacket: 8 [ 230.427895][ T5598] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 230.463220][ T5598] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 230.463249][ T5598] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 230.463270][ T5598] usb 3-1: config 0 has no interface number 1 [ 230.463287][ T5598] usb 3-1: config 0 has no interface number 2 [ 230.463342][ T5598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.472188][ T190] usb 4-1: Using ep0 maxpacket: 8 [ 230.543753][ T190] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 230.546152][ T190] usb 4-1: config 0 has an invalid interface number: 6 but max is 2 [ 230.546180][ T190] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 230.546200][ T190] usb 4-1: config 0 has no interface number 1 [ 230.546218][ T190] usb 4-1: config 0 has no interface number 2 [ 230.546282][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.549954][ T5598] usb 3-1: config 0 descriptor?? [ 230.555452][ T7432] syzkaller1: entered promiscuous mode [ 230.555471][ T7432] syzkaller1: entered allmulticast mode [ 230.560786][ T31] audit: type=1400 audit(1789047396.830:550): avc: denied { ioctl } for pid=7431 comm="syz.0.423" path="socket:[16459]" dev="sockfs" ino=16459 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.650664][ T190] usb 4-1: config 0 descriptor?? [ 230.868491][ T190] qcserial 4-1:0.6: Qualcomm USB modem converter detected [ 231.645604][ T31] audit: type=1400 audit(1789047397.920:551): avc: denied { shutdown } for pid=7439 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.253629][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 232.384629][ T31] audit: type=1400 audit(1789047398.660:552): avc: denied { mount } for pid=7447 comm="syz.1.427" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 232.442479][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 232.444491][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.444553][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 232.444579][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 232.444678][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 232.444702][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 232.444724][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 232.444746][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 232.444767][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 232.444787][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 232.444827][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 232.444848][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 232.444869][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 232.444889][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.444905][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.444924][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 232.448775][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.448800][ T9] usb 5-1: Product: syz [ 232.448816][ T9] usb 5-1: Manufacturer: syz [ 232.448833][ T9] usb 5-1: SerialNumber: syz [ 232.511825][ T31] audit: type=1400 audit(1789047398.780:553): avc: denied { bind } for pid=7447 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 232.532022][ T7449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 232.602153][ T7445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 232.602254][ T7445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 232.602346][ T7445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 232.602434][ T7445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 232.602530][ T7445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 232.602620][ T7445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 232.602710][ T7445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 232.602796][ T7445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 232.602882][ T7445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 232.602993][ T7445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 232.603083][ T7445] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 232.766016][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 232.766071][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 232.792696][ T9] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 232.797219][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 232.941001][ T5598] usb 3-1: Could not set interface, error -71 [ 232.999156][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 233.015130][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 233.034418][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 233.040297][ T5598] usb 3-1: USB disconnect, device number 23 [ 233.149446][ T31] audit: type=1400 audit(1789047399.420:554): avc: denied { name_bind } for pid=7456 comm="syz.2.429" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 233.236127][ T31] audit: type=1400 audit(1789047399.510:555): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 233.279451][ T7454] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.428'. [ 233.279466][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.428'. [ 233.318901][ T5700] usb 5-1: USB disconnect, device number 30 [ 233.400061][ T5700] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 233.417406][ T5700] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 233.425043][ T5700] keyspan 5-1:1.0: device disconnected [ 234.132246][ T5598] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 234.299158][ T31] audit: type=1400 audit(1789047400.570:556): avc: denied { append } for pid=7465 comm="syz.4.431" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.356528][ T5787] usb 4-1: USB disconnect, device number 23 [ 234.357391][ T5787] qcserial 4-1:0.6: device disconnected [ 234.361841][ T5598] usb 3-1: Using ep0 maxpacket: 32 [ 234.369776][ T5598] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 234.376329][ T5598] usb 3-1: config 0 has no interfaces? [ 234.385489][ T5598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.385513][ T5598] usb 3-1: Product: syz [ 234.385528][ T5598] usb 3-1: Manufacturer: syz [ 234.385542][ T5598] usb 3-1: SerialNumber: syz [ 234.447932][ T5598] usb 3-1: config 0 descriptor?? [ 234.771691][ T5699] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 234.934439][ T5699] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 234.935375][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.935410][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 234.935425][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 234.935437][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 234.935450][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 234.935464][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 234.935478][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 234.935490][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 234.935502][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 234.935514][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 234.935526][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 234.935538][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 234.935549][ T5699] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.935560][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.935572][ T5699] usb 2-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 234.937341][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.937365][ T5699] usb 2-1: Product: syz [ 234.937382][ T5699] usb 2-1: Manufacturer: syz [ 234.937398][ T5699] usb 2-1: SerialNumber: syz [ 235.144030][ T7468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.144144][ T7468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.144244][ T7468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.144360][ T7468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.144483][ T7468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.144602][ T7468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.144716][ T7468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.144812][ T7468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.144929][ T7468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.145046][ T7468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.145160][ T7468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.150300][ T5699] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 235.241276][ T5699] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 235.253391][ T5699] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 235.256480][ T5699] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 235.260973][ T5699] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 235.416866][ T7480] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 235.562025][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.436'. [ 235.589382][ T7480] bond3: entered promiscuous mode [ 235.589629][ T7480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.629321][ T7483] bond3: entered allmulticast mode [ 235.682729][ T7480] bridge1: entered promiscuous mode [ 235.682896][ T7480] bridge1: entered allmulticast mode [ 235.683422][ T7480] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 236.245443][ T9] usb 3-1: USB disconnect, device number 24 [ 236.375693][ T5598] usb 2-1: USB disconnect, device number 19 [ 236.607806][ T5598] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 236.639371][ T31] audit: type=1400 audit(1789047402.910:557): avc: denied { read } for pid=5261 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 236.645215][ T5598] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 236.663865][ T5598] keyspan 2-1:1.0: device disconnected [ 236.991699][ T5700] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 237.160011][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 237.162163][ T5700] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 237.164788][ T5700] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 237.164813][ T5700] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 237.164833][ T5700] usb 3-1: config 0 has no interface number 1 [ 237.164849][ T5700] usb 3-1: config 0 has no interface number 2 [ 237.164901][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.175281][ T5700] usb 3-1: config 0 descriptor?? [ 237.595630][ T5700] usb 3-1: Could not set interface, error -71 [ 237.706397][ T5699] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 237.784270][ T31] audit: type=1400 audit(1789047404.060:558): avc: denied { bind } for pid=7502 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.863998][ T5700] usb 3-1: USB disconnect, device number 25 [ 237.894818][ T5699] usb 1-1: Using ep0 maxpacket: 32 [ 237.896076][ T5699] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 237.898638][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.898656][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.898676][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.960373][ T5699] usb 1-1: config 0 descriptor?? [ 238.093273][ T31] audit: type=1400 audit(1789047404.370:559): avc: denied { shutdown } for pid=7508 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.890550][ T5699] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 239.028552][ T31] audit: type=1400 audit(1789047405.300:560): avc: denied { append } for pid=7520 comm="syz.1.447" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 239.185298][ T31] audit: type=1400 audit(1789047405.460:561): avc: denied { ioctl } for pid=7524 comm="syz.3.449" path="socket:[15932]" dev="sockfs" ino=15932 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.226729][ T31] audit: type=1400 audit(1789047405.500:562): avc: denied { write } for pid=7524 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.271866][ T5787] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 239.393266][ T5700] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 239.421643][ T5787] usb 2-1: Using ep0 maxpacket: 16 [ 239.424524][ T5787] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.425527][ T5787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.425569][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.425595][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.425614][ T5787] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.425633][ T5787] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.429866][ T5787] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.429882][ T5787] usb 2-1: Manufacturer: syz [ 239.522253][ T5787] usb 2-1: config 0 descriptor?? [ 239.553816][ T5700] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 239.556333][ T5700] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 239.556369][ T5700] usb 3-1: config 0 interface 0 has no altsetting 0 [ 239.561936][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 239.561961][ T5700] usb 3-1: Product: syz [ 239.561976][ T5700] usb 3-1: Manufacturer: syz [ 239.561990][ T5700] usb 3-1: SerialNumber: syz [ 239.567846][ T5700] usb 3-1: config 0 descriptor?? [ 239.568475][ T7525] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 239.600847][ T5700] usb 3-1: selecting invalid altsetting 0 [ 239.821780][ T5787] rc_core: IR keymap rc-hauppauge not found [ 239.821797][ T5787] Registered IR keymap rc-empty [ 239.822201][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.853285][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.874751][ T5787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 239.876533][ T5787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 239.918535][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.932037][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.951945][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.971983][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.992172][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.011762][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.031931][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.051759][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.071820][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.079104][ T7525] xt_CT: No such helper "syz1" [ 240.094491][ T5787] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.120065][ T5787] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 240.120112][ T5787] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 240.239644][ T5700] usb 2-1: USB disconnect, device number 20 [ 240.306805][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.451'. [ 240.985336][ T5699] usb 1-1: USB disconnect, device number 27 [ 241.014149][ T7544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.332263][ T5787] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 241.482163][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 241.482972][ T5787] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 241.483873][ T5787] usb 4-1: config 0 has an invalid interface number: 6 but max is 2 [ 241.483897][ T5787] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 241.483917][ T5787] usb 4-1: config 0 has no interface number 1 [ 241.483933][ T5787] usb 4-1: config 0 has no interface number 2 [ 241.483988][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.489977][ T5787] usb 4-1: config 0 descriptor?? [ 241.706675][ T5787] qcserial 4-1:0.6: Qualcomm USB modem converter detected [ 241.745325][ T31] audit: type=1400 audit(1789047408.020:563): avc: denied { map } for pid=7554 comm="syz.4.457" path="/dev/video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 241.981465][ T7523] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 241.987339][ T5700] usb 3-1: USB disconnect, device number 26 [ 242.101699][ T5787] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 242.271787][ T5787] usb 5-1: Using ep0 maxpacket: 8 [ 242.272281][ T5787] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 242.273034][ T5787] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 242.273048][ T5787] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 242.273059][ T5787] usb 5-1: config 0 has no interface number 1 [ 242.273069][ T5787] usb 5-1: config 0 has no interface number 2 [ 242.273099][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.519476][ T5787] usb 5-1: config 0 descriptor?? [ 242.760623][ T5787] qcserial 5-1:0.6: Qualcomm USB modem converter detected [ 243.077634][ T31] audit: type=1400 audit(1789047409.350:564): avc: denied { write } for pid=7570 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.531729][ T31] audit: type=1400 audit(1789047409.750:565): avc: denied { write } for pid=7572 comm="syz.0.461" name="functions" dev="configfs" ino=12184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.079723][ T31] audit: type=1400 audit(1789047410.350:566): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 244.381643][ T31] audit: type=1400 audit(1789047410.650:567): avc: denied { ioctl } for pid=7570 comm="syz.2.460" path="socket:[16011]" dev="sockfs" ino=16011 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.813003][ T5787] usb 4-1: USB disconnect, device number 24 [ 244.814433][ T5787] qcserial 4-1:0.6: device disconnected [ 244.945057][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.463'. [ 245.233901][ T7592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7592 comm=syz.1.466 [ 245.321999][ T5787] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 245.472244][ T5787] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 245.473223][ T5787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.473269][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 245.473295][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 245.473318][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 245.473332][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 245.473344][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 245.473356][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 245.473368][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 245.473380][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 245.473392][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 245.473404][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 245.473416][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 245.473428][ T5787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.473439][ T5787] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.473450][ T5787] usb 4-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 245.476665][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.476691][ T5787] usb 4-1: Product: syz [ 245.476705][ T5787] usb 4-1: Manufacturer: syz [ 245.476720][ T5787] usb 4-1: SerialNumber: syz [ 245.480274][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.480374][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.480464][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.480679][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.480776][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.480868][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.480960][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.481058][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.481161][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.481258][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.481354][ T7588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.483353][ T5787] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 245.504107][ T5787] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 245.524951][ T5787] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 245.528984][ T5787] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 245.532548][ T5787] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 245.627640][ T5332] usb 5-1: USB disconnect, device number 31 [ 245.662363][ T5332] qcserial 5-1:0.6: device disconnected [ 246.100559][ T7604] FAULT_INJECTION: forcing a failure. [ 246.100559][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 246.100610][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.0.469 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.100641][ T7604] Tainted: [L]=SOFTLOCKUP [ 246.100650][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 246.100668][ T7604] Call Trace: [ 246.100675][ T7604] [ 246.100685][ T7604] dump_stack_lvl+0x100/0x190 [ 246.100721][ T7604] should_fail_ex.cold+0x5/0xa [ 246.100747][ T7604] should_failslab+0xc2/0x120 [ 246.100771][ T7604] kmem_cache_alloc_noprof+0x92/0x6a0 [ 246.100794][ T7604] ? __proc_create+0xc1/0x8f0 [ 246.100824][ T7604] ? __proc_create+0x247/0x8f0 [ 246.100862][ T7604] __proc_create+0x247/0x8f0 [ 246.100893][ T7604] ? __pfx___proc_create+0x10/0x10 [ 246.100935][ T7604] _proc_mkdir+0xb9/0x210 [ 246.100955][ T7604] ? __pfx__proc_mkdir+0x10/0x10 [ 246.100975][ T7604] ? proc_net_ns_init+0x42/0x420 [ 246.101009][ T7604] ? __pfx_netfilter_net_init+0x10/0x10 [ 246.101032][ T7604] netfilter_net_init+0x37b/0x4a0 [ 246.101051][ T7604] ? sysctl_net_init+0x27/0x30 [ 246.101090][ T7604] ops_init+0x1e2/0x5f0 [ 246.101119][ T7604] setup_net+0x118/0x3a0 [ 246.101143][ T7604] ? __pfx_setup_net+0x10/0x10 [ 246.101174][ T7604] copy_net_ns+0x345/0x7a0 [ 246.101203][ T7604] create_new_namespaces+0x3ea/0xac0 [ 246.101235][ T7604] unshare_nsproxy_namespaces+0xf2/0x220 [ 246.101262][ T7604] ksys_unshare+0x4a2/0xa70 [ 246.101287][ T7604] ? __pfx_ksys_unshare+0x10/0x10 [ 246.101322][ T7604] __x64_sys_unshare+0x31/0x40 [ 246.101346][ T7604] do_syscall_64+0x123/0x790 [ 246.101376][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.101398][ T7604] RIP: 0033:0x7fd84ad9e159 [ 246.101417][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.101436][ T7604] RSP: 002b:00007fd84bc65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 246.101465][ T7604] RAX: ffffffffffffffda RBX: 00007fd84b025fa0 RCX: 00007fd84ad9e159 [ 246.101480][ T7604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 246.101493][ T7604] RBP: 00007fd84ae3503b R08: 0000000000000000 R09: 0000000000000000 [ 246.101506][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.101519][ T7604] R13: 00007fd84b026038 R14: 00007fd84b025fa0 R15: 00007ffc13131388 [ 246.101551][ T7604] [ 246.110766][ T7604] cannot create netfilter proc entry [ 246.549312][ T31] audit: type=1400 audit(1789047412.820:568): avc: denied { read } for pid=7607 comm="syz.1.470" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 246.549677][ T31] audit: type=1400 audit(1789047412.820:569): avc: denied { open } for pid=7607 comm="syz.1.470" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 247.308068][ T5722] kernel read not supported for file /video9 (pid: 5722 comm: kworker/0:6) [ 247.365308][ T5700] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 247.394221][ T5714] usb 4-1: USB disconnect, device number 25 [ 247.447418][ T5714] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 247.526842][ T5714] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 247.539295][ T5714] keyspan 4-1:1.0: device disconnected [ 247.555035][ T5700] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice=c0.ed [ 247.555061][ T5700] usb 1-1: too many configurations: 95, using maximum allowed: 8 [ 247.558300][ T5700] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 247.558321][ T5700] usb 1-1: can't read configurations, error -61 [ 247.741845][ T5700] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 248.083248][ T5700] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice=c0.ed [ 248.083289][ T5700] usb 1-1: too many configurations: 95, using maximum allowed: 8 [ 248.086389][ T5700] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 248.086422][ T5700] usb 1-1: can't read configurations, error -61 [ 248.086702][ T5700] usb usb1-port1: attempt power cycle [ 248.347948][ T7620] sctp_transport_update_pmtu: 104 callbacks suppressed [ 248.347977][ T7620] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.349804][ T7620] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.351465][ T7620] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.354241][ T7620] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.365168][ T7620] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.367653][ T7620] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.369684][ T7620] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.371898][ T7620] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.373901][ T7620] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.375849][ T7620] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.761671][ T5700] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 248.783449][ T5700] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice=c0.ed [ 248.783492][ T5700] usb 1-1: too many configurations: 95, using maximum allowed: 8 [ 248.819437][ T5700] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 248.819473][ T5700] usb 1-1: can't read configurations, error -61 [ 249.191684][ T5700] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 249.223566][ T5700] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice=c0.ed [ 249.223608][ T5700] usb 1-1: too many configurations: 95, using maximum allowed: 8 [ 249.270948][ T5700] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 249.270989][ T5700] usb 1-1: can't read configurations, error -61 [ 249.298728][ T5700] usb usb1-port1: unable to enumerate USB device [ 250.272728][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.272782][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.379791][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.476'. [ 250.751939][ T5787] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 250.753710][ T5700] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 250.906987][ T5700] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 250.907931][ T5700] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.907974][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 250.908001][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 250.908026][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 250.908050][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 250.908075][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 250.908099][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 250.908122][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 250.908145][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 250.908168][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 250.908190][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 250.908213][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 250.908236][ T5700] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.908256][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.908278][ T5700] usb 1-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 250.918949][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.918974][ T5700] usb 1-1: Product: syz [ 250.918989][ T5700] usb 1-1: Manufacturer: syz [ 250.919003][ T5700] usb 1-1: SerialNumber: syz [ 250.931527][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 250.939571][ T7632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.939692][ T7632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.939778][ T7632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.939899][ T7632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.940003][ T7632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.940107][ T7632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.940197][ T7632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.940304][ T7632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.940407][ T7632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.940491][ T7632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.940594][ T7632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 250.943121][ T5787] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 250.958530][ T5700] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 250.959840][ T5700] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 250.974867][ T5787] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 250.974915][ T5787] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 250.974935][ T5787] usb 3-1: config 0 has no interface number 1 [ 250.974951][ T5787] usb 3-1: config 0 has no interface number 2 [ 250.975008][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.039901][ T5700] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 251.049374][ T5700] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 251.061103][ T5700] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 251.133439][ T5787] usb 3-1: config 0 descriptor?? [ 251.367476][ T5787] qcserial 3-1:0.6: Qualcomm USB modem converter detected [ 251.480536][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 251.527125][ T7654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.481'. [ 251.661697][ T5787] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 251.832292][ T5787] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 251.833192][ T5787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.833234][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.833259][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.833292][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.835508][ T5787] usb 4-1: config 0 descriptor?? [ 252.623851][ T5787] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 252.793822][ T5787] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 252.793854][ T5787] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 252.793875][ T5787] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 252.793896][ T5787] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 252.797457][ T5332] usb 1-1: USB disconnect, device number 32 [ 252.873251][ T5787] hid-picolcd 0003:04D8:F002.0011: No report with id 0xf4 found [ 252.873278][ T5787] hid-picolcd 0003:04D8:F002.0011: No report with id 0xf3 found [ 253.004390][ T5332] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 253.029999][ T5787] kernel read not supported for file /video9 (pid: 5787 comm: kworker/1:8) [ 253.049051][ T5332] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 253.076703][ T5332] keyspan 1-1:1.0: device disconnected [ 253.079402][ T31] audit: type=1400 audit(1789047419.350:570): avc: denied { accept } for pid=7650 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.081180][ T5700] usb 4-1: USB disconnect, device number 26 [ 253.521712][ T5787] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 253.542118][ T5722] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 253.691975][ T5722] usb 5-1: Using ep0 maxpacket: 32 [ 253.692076][ T5787] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 253.692957][ T5787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.692996][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 253.693020][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 253.693043][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 253.693067][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 253.693090][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 253.693112][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 253.693133][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 253.693155][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 253.693177][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 253.693198][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 253.693220][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 253.693242][ T5787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.693261][ T5787] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.693282][ T5787] usb 2-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 253.697292][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.697316][ T5787] usb 2-1: Product: syz [ 253.697331][ T5787] usb 2-1: Manufacturer: syz [ 253.697353][ T5787] usb 2-1: SerialNumber: syz [ 253.701255][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.701373][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.701488][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.701643][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.701738][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.701986][ T5722] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 253.702033][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.702145][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.702254][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.702372][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.702460][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.702567][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.704993][ T5787] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 253.708124][ T5787] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 253.719357][ T5787] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 253.723867][ T5787] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 253.728844][ T5787] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 253.733137][ T31] audit: type=1400 audit(1789047420.000:571): avc: denied { bind } for pid=7675 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 253.764763][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.764796][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.764844][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.939292][ T5722] usb 5-1: config 0 descriptor?? [ 254.110432][ T5332] usb 3-1: USB disconnect, device number 27 [ 254.118052][ T5332] qcserial 3-1:0.6: device disconnected [ 254.848345][ T5722] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 254.946479][ T6025] IPVS: starting estimator thread 0... [ 255.102772][ T7688] IPVS: using max 38 ests per chain, 91200 per kthread [ 255.113870][ T7689] FAULT_INJECTION: forcing a failure. [ 255.113870][ T7689] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 255.113902][ T7689] CPU: 0 UID: 0 PID: 7689 Comm: syz.0.490 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.113929][ T7689] Tainted: [L]=SOFTLOCKUP [ 255.113935][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 255.113946][ T7689] Call Trace: [ 255.113952][ T7689] [ 255.113959][ T7689] dump_stack_lvl+0x100/0x190 [ 255.113991][ T7689] should_fail_ex.cold+0x5/0xa [ 255.114018][ T7689] _copy_from_user+0x2e/0xd0 [ 255.114038][ T7689] memdup_user+0x6b/0xe0 [ 255.114066][ T7689] strndup_user+0x78/0xe0 [ 255.114101][ T7689] __x64_sys_mount+0x17f/0x310 [ 255.114129][ T7689] ? __pfx___x64_sys_mount+0x10/0x10 [ 255.114163][ T7689] do_syscall_64+0x123/0x790 [ 255.114190][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.114209][ T7689] RIP: 0033:0x7fd84ad9e159 [ 255.114224][ T7689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.114241][ T7689] RSP: 002b:00007fd84bc44028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 255.114260][ T7689] RAX: ffffffffffffffda RBX: 00007fd84b026090 RCX: 00007fd84ad9e159 [ 255.114273][ T7689] RDX: 0000200000000400 RSI: 0000200000000200 RDI: 0000200000000300 [ 255.114284][ T7689] RBP: 00007fd84bc44090 R08: 0000000000000000 R09: 0000000000000000 [ 255.114296][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.114306][ T7689] R13: 00007fd84b026128 R14: 00007fd84b026090 R15: 00007ffc13131388 [ 255.114333][ T7689] [ 255.617854][ T5722] usb 2-1: USB disconnect, device number 21 [ 255.676852][ T5722] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 255.693391][ T5722] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 255.704047][ T5722] keyspan 2-1:1.0: device disconnected [ 255.925620][ T5332] usb 5-1: USB disconnect, device number 32 [ 256.513101][ T7709] netlink: 260 bytes leftover after parsing attributes in process `syz.2.498'. [ 256.534217][ T5722] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 256.592019][ T5598] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 256.682956][ T5722] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 256.682998][ T5722] usb 5-1: too many configurations: 94, using maximum allowed: 8 [ 256.692980][ T5722] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 254, using maximum allowed: 30 [ 256.693025][ T5722] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 256.693052][ T5722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.694483][ T5722] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 254, using maximum allowed: 30 [ 256.694521][ T5722] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 256.694546][ T5722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.696347][ T5722] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 254, using maximum allowed: 30 [ 256.696383][ T5722] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 256.696408][ T5722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.700568][ T5722] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 254, using maximum allowed: 30 [ 256.700605][ T5722] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 256.700632][ T5722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.706039][ T5722] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 254, using maximum allowed: 30 [ 256.706076][ T5722] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 256.706102][ T5722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.707019][ T5722] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 254, using maximum allowed: 30 [ 256.707054][ T5722] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 256.707079][ T5722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.707909][ T5722] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 254, using maximum allowed: 30 [ 256.707944][ T5722] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 256.707969][ T5722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.712938][ T5722] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 254, using maximum allowed: 30 [ 256.712975][ T5722] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 256.713001][ T5722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.715207][ T5722] usb 5-1: New USB device strings: Mfr=196, Product=98, SerialNumber=123 [ 256.715229][ T5722] usb 5-1: Product: syz [ 256.715244][ T5722] usb 5-1: Manufacturer: syz [ 256.715258][ T5722] usb 5-1: SerialNumber: syz [ 256.729772][ T5722] usb 5-1: config 0 descriptor?? [ 256.751748][ T5598] usb 2-1: Using ep0 maxpacket: 8 [ 256.753545][ T5598] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 256.755396][ T5598] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 256.755420][ T5598] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.755445][ T5598] usb 2-1: config 0 has no interface number 0 [ 256.764197][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.764222][ T5598] usb 2-1: Product: syz [ 256.764236][ T5598] usb 2-1: Manufacturer: syz [ 256.764251][ T5598] usb 2-1: SerialNumber: syz [ 256.773486][ T5598] usb 2-1: config 0 descriptor?? [ 256.793951][ T7714] FAULT_INJECTION: forcing a failure. [ 256.793951][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 256.793984][ T7714] CPU: 0 UID: 0 PID: 7714 Comm: syz.2.499 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.794012][ T7714] Tainted: [L]=SOFTLOCKUP [ 256.794019][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 256.794030][ T7714] Call Trace: [ 256.794038][ T7714] [ 256.794046][ T7714] dump_stack_lvl+0x100/0x190 [ 256.794083][ T7714] should_fail_ex.cold+0x5/0xa [ 256.794113][ T7714] should_failslab+0xc2/0x120 [ 256.794138][ T7714] __kmalloc_cache_noprof+0x91/0x6d0 [ 256.794171][ T7714] ? sctp_auth_shkey_create+0x9e/0x210 [ 256.794205][ T7714] sctp_auth_shkey_create+0x9e/0x210 [ 256.794235][ T7714] sctp_endpoint_new+0x589/0xb20 [ 256.794271][ T7714] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 256.794298][ T7714] ? lockdep_init_map_type+0x5c/0x250 [ 256.794323][ T7714] ? lockdep_init_map_type+0x5c/0x250 [ 256.794345][ T7714] ? lockdep_init_map_type+0x5c/0x250 [ 256.794370][ T7714] sctp_init_sock+0xe2b/0x1300 [ 256.794398][ T7714] ? __pfx_sctp_init_sock+0x10/0x10 [ 256.794426][ T7714] inet_create+0x94c/0x1060 [ 256.794462][ T7714] ? inet_create+0x94/0x1060 [ 256.794494][ T7714] __sock_create+0x339/0x860 [ 256.794529][ T7714] __sys_socket+0x14d/0x260 [ 256.794560][ T7714] ? __pfx___sys_socket+0x10/0x10 [ 256.794596][ T7714] __x64_sys_socket+0x72/0xb0 [ 256.794622][ T7714] ? lockdep_hardirqs_on+0x7d/0x110 [ 256.794647][ T7714] do_syscall_64+0x123/0x790 [ 256.794675][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.794695][ T7714] RIP: 0033:0x7fb602f9e159 [ 256.794712][ T7714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.794730][ T7714] RSP: 002b:00007fb603ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 256.794750][ T7714] RAX: ffffffffffffffda RBX: 00007fb603225fa0 RCX: 00007fb602f9e159 [ 256.794763][ T7714] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002 [ 256.794775][ T7714] RBP: 00007fb60303503b R08: 0000000000000000 R09: 0000000000000000 [ 256.794788][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.794801][ T7714] R13: 00007fb603226038 R14: 00007fb603225fa0 R15: 00007fffd3c26628 [ 256.794830][ T7714] [ 256.845371][ T5700] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 256.848380][ T7715] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 257.012043][ T5700] usb 1-1: Using ep0 maxpacket: 8 [ 257.016752][ T5700] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 257.021297][ T5598] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 257.024486][ T5700] usb 1-1: config 0 has an invalid interface number: 6 but max is 2 [ 257.024509][ T5700] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 257.024529][ T5700] usb 1-1: config 0 has no interface number 1 [ 257.024544][ T5700] usb 1-1: config 0 has no interface number 2 [ 257.024617][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.042775][ T5700] usb 1-1: config 0 descriptor?? [ 257.058864][ T5598] usb 2-1: USB disconnect, device number 22 [ 257.273322][ T5700] qcserial 1-1:0.6: Qualcomm USB modem converter detected [ 257.376035][ T7704] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 257.522014][ T5722] usbhid 5-1:0.0: can't add hid device: -71 [ 257.522121][ T5722] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 257.540018][ T5722] usb 5-1: USB disconnect, device number 33 [ 257.665014][ T5598] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 257.845074][ T5598] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 257.846008][ T5598] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.846055][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 257.846081][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 257.846105][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 257.846129][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 257.846153][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 257.846177][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 257.846199][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 257.846222][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 257.846244][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 257.846267][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 257.846290][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 257.846343][ T5598] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.846366][ T5598] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.846388][ T5598] usb 3-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 257.855731][ T5598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.855757][ T5598] usb 3-1: Product: syz [ 257.855773][ T5598] usb 3-1: Manufacturer: syz [ 257.855788][ T5598] usb 3-1: SerialNumber: syz [ 257.890281][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.890414][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.890533][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.890647][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.890792][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.890901][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.895515][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.895646][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.895795][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.895908][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.899479][ T7718] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 257.909382][ T5598] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 257.915590][ T5598] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 257.922240][ T5598] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 257.926400][ T5598] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 257.929696][ T5598] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 258.927985][ T5787] usb 3-1: USB disconnect, device number 28 [ 258.982536][ T5787] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 259.012446][ T5722] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 259.015021][ T5787] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 259.021547][ T5787] keyspan 3-1:1.0: device disconnected [ 259.172346][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 259.173101][ T5722] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 259.378057][ T5722] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 259.378085][ T5722] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 259.378106][ T5722] usb 2-1: config 0 has no interface number 1 [ 259.378122][ T5722] usb 2-1: config 0 has no interface number 2 [ 259.378756][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.391092][ T5722] usb 2-1: config 0 descriptor?? [ 259.746891][ T5722] qcserial 2-1:0.6: Qualcomm USB modem converter detected [ 259.785779][ T5787] usb 1-1: USB disconnect, device number 33 [ 259.788672][ T5787] qcserial 1-1:0.6: device disconnected [ 259.962277][ T5598] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 260.122152][ T5598] usb 5-1: Using ep0 maxpacket: 32 [ 260.122671][ T5598] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 260.123565][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.123602][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.123638][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.158158][ T5598] usb 5-1: config 0 descriptor?? [ 260.649943][ T5598] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 260.944849][ T7762] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 262.246846][ T5332] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 262.402120][ T5332] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 262.405139][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.405164][ T5332] usb 3-1: Product: syz [ 262.405179][ T5332] usb 3-1: Manufacturer: syz [ 262.405193][ T5332] usb 3-1: SerialNumber: syz [ 262.407001][ T5332] usb 3-1: config 0 descriptor?? [ 262.430936][ T5332] gspca_main: se401-2.14.0 probing 047d:5003 [ 262.467618][ T5714] usb 2-1: USB disconnect, device number 23 [ 262.468672][ T5714] qcserial 2-1:0.6: device disconnected [ 263.291958][ T5787] usb 5-1: USB disconnect, device number 34 [ 263.526077][ T31] audit: type=1326 audit(1789047429.800:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.514" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51e79e159 code=0x7ffc0000 [ 263.526285][ T31] audit: type=1326 audit(1789047429.800:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.514" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51e79e159 code=0x7ffc0000 [ 263.526660][ T31] audit: type=1326 audit(1789047429.800:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.514" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51e79e159 code=0x7ffc0000 [ 263.526850][ T31] audit: type=1326 audit(1789047429.800:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.514" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa51e79e159 code=0x7ffc0000 [ 263.527236][ T31] audit: type=1326 audit(1789047429.800:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.514" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51e79e159 code=0x7ffc0000 [ 263.527413][ T31] audit: type=1326 audit(1789047429.800:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.514" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51e79e159 code=0x7ffc0000 [ 263.527640][ T31] audit: type=1326 audit(1789047429.800:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.514" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51e79e159 code=0x7ffc0000 [ 263.528020][ T31] audit: type=1326 audit(1789047429.800:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.514" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51e79e159 code=0x7ffc0000 [ 263.528205][ T31] audit: type=1326 audit(1789047429.800:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7777 comm="syz.4.514" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa51e79e159 code=0x7ffc0000 [ 263.528586][ T31] audit: type=1400 audit(1789047429.800:581): avc: denied { name_connect } for pid=7777 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 263.724026][ T5332] usb 3-1: reset full-speed USB device number 29 using dummy_hcd [ 263.870351][ T7780] FAULT_INJECTION: forcing a failure. [ 263.870351][ T7780] name failslab, interval 1, probability 0, space 0, times 0 [ 263.870387][ T7780] CPU: 0 UID: 0 PID: 7780 Comm: syz.3.516 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.870418][ T7780] Tainted: [L]=SOFTLOCKUP [ 263.870426][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 263.870439][ T7780] Call Trace: [ 263.870446][ T7780] [ 263.870455][ T7780] dump_stack_lvl+0x100/0x190 [ 263.870494][ T7780] should_fail_ex.cold+0x5/0xa [ 263.870523][ T7780] should_failslab+0xc2/0x120 [ 263.870550][ T7780] kmem_cache_alloc_noprof+0x92/0x6a0 [ 263.870574][ T7780] ? security_file_alloc+0x34/0x2c0 [ 263.870602][ T7780] security_file_alloc+0x34/0x2c0 [ 263.870626][ T7780] init_file+0x95/0x480 [ 263.870653][ T7780] alloc_empty_file+0x79/0x1c0 [ 263.870682][ T7780] alloc_file_pseudo+0x183/0x290 [ 263.870710][ T7780] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 263.870738][ T7780] ? _raw_spin_unlock+0x28/0x50 [ 263.870760][ T7780] ? alloc_fd+0x471/0x7a0 [ 263.870787][ T7780] __anon_inode_getfile+0xe8/0x280 [ 263.870809][ T7780] __anon_inode_getfd+0x5c/0xe0 [ 263.870831][ T7780] __x64_sys_fsopen+0x190/0x220 [ 263.870853][ T7780] do_syscall_64+0x123/0x790 [ 263.870880][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.870902][ T7780] RIP: 0033:0x7f9ab4d9e159 [ 263.870917][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.870932][ T7780] RSP: 002b:00007f9ab5d26028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 263.870951][ T7780] RAX: ffffffffffffffda RBX: 00007f9ab5025fa0 RCX: 00007f9ab4d9e159 [ 263.870964][ T7780] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 263.870975][ T7780] RBP: 00007f9ab4e3503b R08: 0000000000000000 R09: 0000000000000000 [ 263.870987][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.871000][ T7780] R13: 00007f9ab5026038 R14: 00007f9ab5025fa0 R15: 00007ffdc64471f8 [ 263.871027][ T7780] [ 263.901675][ T5332] usb 3-1: device descriptor read/64, error -32 [ 264.097618][ T7789] @ÿ: renamed from veth0_vlan (while UP) [ 264.195304][ T5332] usb 3-1: reset full-speed USB device number 29 using dummy_hcd [ 264.334247][ T5332] usb 3-1: device descriptor read/64, error -32 [ 264.393225][ T5787] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 264.551638][ T5787] usb 2-1: Using ep0 maxpacket: 8 [ 264.552868][ T5787] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 264.557147][ T5787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.557190][ T5787] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 264.557217][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 264.557243][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 264.557270][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.557295][ T5787] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.565207][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.565233][ T5787] usb 2-1: Product: syz [ 264.565247][ T5787] usb 2-1: Manufacturer: syz [ 264.565261][ T5787] usb 2-1: SerialNumber: syz [ 264.575609][ T5787] usb 2-1: config 0 descriptor?? [ 264.577316][ T7785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 264.597320][ T5787] ati_remote 2-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 264.796155][ T5787] usb 2-1: USB disconnect, device number 24 [ 265.239584][ T5332] gspca_se401: read req failed req 0x06 error -19 [ 265.246003][ T5332] usb 3-1: USB disconnect, device number 29 [ 265.593047][ T7808] ubi0: detaching mtd0 [ 265.638947][ T7808] ubi0: mtd0 is detached [ 266.637635][ T7824] FAULT_INJECTION: forcing a failure. [ 266.637635][ T7824] name failslab, interval 1, probability 0, space 0, times 0 [ 266.637682][ T7824] CPU: 0 UID: 0 PID: 7824 Comm: syz.3.525 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.637711][ T7824] Tainted: [L]=SOFTLOCKUP [ 266.637717][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 266.637728][ T7824] Call Trace: [ 266.637733][ T7824] [ 266.637738][ T7824] dump_stack_lvl+0x100/0x190 [ 266.637761][ T7824] should_fail_ex.cold+0x5/0xa [ 266.637778][ T7824] should_failslab+0xc2/0x120 [ 266.637793][ T7824] kmem_cache_alloc_noprof+0x92/0x6a0 [ 266.637812][ T7824] ? d_instantiate+0x8a/0xb0 [ 266.637837][ T7824] ? alloc_empty_file+0x5b/0x1c0 [ 266.637869][ T7824] alloc_empty_file+0x5b/0x1c0 [ 266.637893][ T7824] alloc_file_pseudo+0x183/0x290 [ 266.637911][ T7824] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 266.637926][ T7824] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 266.637942][ T7824] ? __do_sys_memfd_secret+0x130/0x570 [ 266.637960][ T7824] __do_sys_memfd_secret+0x266/0x570 [ 266.637976][ T7824] do_syscall_64+0x123/0x790 [ 266.637993][ T7824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.638005][ T7824] RIP: 0033:0x7f9ab4d9e159 [ 266.638016][ T7824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.638027][ T7824] RSP: 002b:00007f9ab5d05028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 266.638040][ T7824] RAX: ffffffffffffffda RBX: 00007f9ab5026090 RCX: 00007f9ab4d9e159 [ 266.638048][ T7824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.638055][ T7824] RBP: 00007f9ab4e3503b R08: 0000000000000000 R09: 0000000000000000 [ 266.638062][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.638069][ T7824] R13: 00007f9ab5026128 R14: 00007f9ab5026090 R15: 00007ffdc64471f8 [ 266.638084][ T7824] [ 268.206391][ C0] Illegal XDP return value 16128 on prog (id 61) dev lo, expect packet loss! [ 311.716309][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.716364][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.156393][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.156447][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 428.192526][ T32] INFO: task kworker/u8:7:1006 blocked in I/O wait for more than 143 seconds. [ 428.192557][ T32] Tainted: G L syzkaller #0 [ 428.192570][ T32] "echo 0 > /proc/sys/kernel/hung_task_time ** replaying previous printk message ** [ 428.192570][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.192578][ T32] task:kworker/u8:7 state:D stack:25064 pid:1006 tgid:1006 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 428.192664][ T32] Workqueue: writeback wb_workfn (flush-8:0) [ 428.192703][ T32] Call Trace: [ 428.192711][ T32] [ 428.192724][ T32] __schedule+0x1259/0x6920 [ 428.192750][ T32] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 428.192776][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.192826][ T32] ? __pfx___schedule+0x10/0x10 [ 428.192848][ T32] ? find_held_lock+0x2b/0x80 [ 428.192877][ T32] ? schedule+0x225/0x2c0 [ 428.192908][ T32] ? rq_qos_wait+0x21c/0x330 [ 428.192933][ T32] schedule+0xdd/0x2c0 [ 428.192956][ T32] io_schedule+0x8a/0xf0 [ 428.192979][ T32] rq_qos_wait+0x22d/0x330 [ 428.193006][ T32] ? __pfx_rq_qos_wait+0x10/0x10 [ 428.193031][ T32] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 428.193056][ T32] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 428.193092][ T32] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 428.193122][ T32] wbt_wait+0x18a/0x310 [ 428.193142][ T32] ? __pfx_wbt_wait+0x10/0x10 [ 428.193164][ T32] ? blk_rq_merge_ok+0xa1/0x5b0 [ 428.193187][ T32] ? __pfx_dd_bio_merge+0x10/0x10 [ 428.193217][ T32] ? __pfx_wbt_wait+0x10/0x10 [ 428.193238][ T32] __rq_qos_throttle+0x56/0xa0 [ 428.193264][ T32] blk_mq_submit_bio+0xc03/0x3000 [ 428.193295][ T32] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 428.193330][ T32] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 428.193360][ T32] __submit_bio+0x90/0x3d0 [ 428.193382][ T32] submit_bio_noacct_nocheck+0x549/0xc00 [ 428.193410][ T32] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 428.193437][ T32] ? __pfx___might_resched+0x10/0x10 [ 428.193472][ T32] submit_bio_noacct+0xc93/0x2130 [ 428.193501][ T32] ext4_io_submit+0xf7/0x1a0 [ 428.193527][ T32] ext4_do_writepages+0x9d8/0x3e80 [ 428.193554][ T32] ? arch_stack_walk+0x94/0xf0 [ 428.193592][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.193624][ T32] ? __pfx_ext4_do_writepages+0x10/0x10 [ 428.193669][ T32] ? ext4_writepages+0x34a/0x750 [ 428.193694][ T32] ext4_writepages+0x34a/0x750 [ 428.193723][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 428.193765][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.193788][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 428.193818][ T32] do_writepages+0x278/0x600 [ 428.193843][ T32] ? __pfx_do_writepages+0x10/0x10 [ 428.193864][ T32] ? reacquire_held_locks+0xdd/0x1f0 [ 428.193886][ T32] ? writeback_sb_inodes+0x3e1/0x1c50 [ 428.193913][ T32] __writeback_single_inode+0x164/0x1560 [ 428.193937][ T32] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 428.193962][ T32] ? __pfx___writeback_single_inode+0x10/0x10 [ 428.193982][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 428.194014][ T32] writeback_sb_inodes+0x766/0x1c50 [ 428.194053][ T32] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 428.194080][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.194135][ T32] ? _raw_spin_unlock+0x28/0x50 [ 428.194159][ T32] ? move_expired_inodes+0x5ea/0x8f0 [ 428.194199][ T32] __writeback_inodes_wb+0xf8/0x2d0 [ 428.194229][ T32] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 428.194253][ T32] ? queue_io+0x287/0x530 [ 428.194286][ T32] wb_writeback+0x6f6/0xb50 [ 428.194319][ T32] ? __pfx_wb_writeback+0x10/0x10 [ 428.194347][ T32] ? get_nr_inodes+0x100/0x150 [ 428.194376][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.194403][ T32] wb_workfn+0x93f/0xc80 [ 428.194433][ T32] ? __pfx_wb_workfn+0x10/0x10 [ 428.194471][ T32] ? process_one_work+0x906/0x1b10 [ 428.194501][ T32] ? process_one_work+0x906/0x1b10 [ 428.194536][ T32] process_one_work+0xac7/0x1b10 [ 428.194579][ T32] ? __pfx_process_one_work+0x10/0x10 [ 428.194611][ T32] ? lock_acquire+0x1d1/0x380 [ 428.194642][ T32] ? __pfx_wb_workfn+0x10/0x10 [ 428.194669][ T32] worker_thread+0x5ef/0xe50 [ 428.194711][ T32] ? kthread+0x13a/0x450 [ 428.194737][ T32] ? __pfx_worker_thread+0x10/0x10 [ 428.194765][ T32] kthread+0x373/0x450 [ 428.194791][ T32] ? __pfx_kthread+0x10/0x10 [ 428.194820][ T32] ret_from_fork+0x730/0xd60 [ 428.194845][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 428.194870][ T32] ? __switch_to+0x800/0x10f0 [ 428.194899][ T32] ? __pfx_kthread+0x10/0x10 [ 428.194928][ T32] ret_from_fork_asm+0x1a/0x30 [ 428.194967][ T32] [ 428.195038][ T32] INFO: task jbd2/sda1-8:4928 blocked in I/O wait for more than 143 seconds. [ 428.195064][ T32] Tainted: G L syzkaller #0 [ 428.195076][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.195084][ T32] task:jbd2/sda1-8 state:D stack:25864 pid:4928 tgid:4928 ppid:2 task_flags:0x240040 flags:0x00080000 [ 428.195150][ T32] Call Trace: [ 428.195156][ T32] [ 428.195168][ T32] __schedule+0x1259/0x6920 [ 428.195199][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.195239][ T32] ? __pfx___schedule+0x10/0x10 [ 428.195267][ T32] ? find_held_lock+0x2b/0x80 [ 428.195295][ T32] ? schedule+0x225/0x2c0 [ 428.195324][ T32] schedule+0xdd/0x2c0 [ 428.195348][ T32] io_schedule+0x8a/0xf0 [ 428.195373][ T32] bit_wait_io+0xd/0xe0 [ 428.195397][ T32] __wait_on_bit+0x65/0x180 [ 428.195423][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 428.195452][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 428.195484][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 428.195514][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 428.195536][ T32] ? __pfx___might_resched+0x10/0x10 [ 428.195562][ T32] __wait_on_buffer+0x64/0x70 [ 428.195592][ T32] jbd2_journal_commit_transaction+0x37ef/0x6700 [ 428.195646][ T32] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 428.195678][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 428.195703][ T32] ? debug_object_deactivate+0x2e4/0x3b0 [ 428.195729][ T32] ? __pfx_debug_object_deactivate+0x10/0x10 [ 428.195758][ T32] ? _raw_spin_lock_irqsave+0x52/0x60 [ 428.195783][ T32] ? find_held_lock+0x2b/0x80 [ 428.195809][ T32] ? __try_to_del_timer_sync+0x107/0x160 [ 428.195841][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 428.195878][ T32] ? __timer_delete_sync+0x151/0x1c0 [ 428.195903][ T32] kjournald2+0x200/0x760 [ 428.195941][ T32] ? __pfx_kjournald2+0x10/0x10 [ 428.195967][ T32] ? find_held_lock+0x2b/0x80 [ 428.195993][ T32] ? __kthread_parkme+0xbb/0x230 [ 428.196019][ T32] ? rcu_is_watching+0x13/0xc0 [ 428.196047][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 428.196082][ T32] ? __kthread_parkme+0x18f/0x230 [ 428.196111][ T32] ? kthread+0x13a/0x450 [ 428.196136][ T32] ? __pfx_kjournald2+0x10/0x10 [ 428.196161][ T32] kthread+0x373/0x450 [ 428.196187][ T32] ? __pfx_kthread+0x10/0x10 [ 428.196220][ T32] ret_from_fork+0x730/0xd60 [ 428.196244][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 428.196270][ T32] ? __switch_to+0x800/0x10f0 [ 428.196297][ T32] ? __pfx_kthread+0x10/0x10 [ 428.196327][ T32] ret_from_fork_asm+0x1a/0x30 [ 428.196366][ T32] [ 428.196383][ T32] INFO: task syz-executor:5584 blocked in I/O wait for more than 143 seconds. [ 428.196401][ T32] Tainted: G L syzkaller #0 [ 428.196412][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.196421][ T32] task:syz-executor state:D stack:22432 pid:5584 tgid:5584 ppid:5583 task_flags:0x440100 flags:0x00080000 [ 428.196486][ T32] Call Trace: [ 428.196492][ T32] [ 428.196504][ T32] __schedule+0x1259/0x6920 [ 428.196528][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.196567][ T32] ? __pfx___schedule+0x10/0x10 [ 428.196590][ T32] ? find_held_lock+0x2b/0x80 [ 428.196617][ T32] ? schedule+0x225/0x2c0 [ 428.196646][ T32] schedule+0xdd/0x2c0 [ 428.196670][ T32] io_schedule+0x8a/0xf0 [ 428.196695][ T32] bit_wait_io+0xd/0xe0 [ 428.196719][ T32] __wait_on_bit+0x65/0x180 [ 428.196744][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 428.196773][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 428.196799][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 428.196829][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 428.196857][ T32] do_get_write_access+0x836/0x11e0 [ 428.196894][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 428.196922][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 428.196955][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 428.196988][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 428.197019][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 428.197043][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 428.197072][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 428.197098][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 428.197125][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 428.197151][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 428.197177][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 428.197208][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 428.197237][ T32] ext4_dirty_inode+0xd9/0x130 [ 428.197264][ T32] ? rcu_is_watching+0x13/0xc0 [ 428.197291][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 428.197318][ T32] file_update_time_flags+0x49c/0x520 [ 428.197354][ T32] ext4_page_mkwrite+0x324/0x1860 [ 428.197391][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 428.197420][ T32] ? __pfx_vm_normal_page+0x10/0x10 [ 428.197443][ T32] ? find_held_lock+0x2b/0x80 [ 428.197475][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 428.197508][ T32] do_page_mkwrite+0x17a/0x440 [ 428.197533][ T32] do_wp_page+0x9ed/0x45c0 [ 428.197566][ T32] ? lock_acquire+0x1d1/0x380 [ 428.197588][ T32] ? __pfx_do_wp_page+0x10/0x10 [ 428.197614][ T32] ? lock_acquire+0x1d1/0x380 [ 428.197636][ T32] ? do_raw_spin_lock+0x128/0x260 [ 428.197662][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 428.197697][ T32] __handle_mm_fault+0x1cd2/0x2f60 [ 428.197731][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 428.197758][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 428.197792][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 428.197838][ T32] handle_mm_fault+0x363/0xa20 [ 428.197873][ T32] do_user_addr_fault+0x59c/0x12f0 [ 428.197910][ T32] exc_page_fault+0x6f/0xd0 [ 428.197937][ T32] asm_exc_page_fault+0x26/0x30 [ 428.197960][ T32] RIP: 0033:0x7f36d8a701e3 [ 428.197978][ T32] RSP: 002b:00007ffd48deea90 EFLAGS: 00010216 [ 428.197995][ T32] RAX: 00007f36d15de744 RBX: 00007ffd48deebc0 RCX: 0000000000000000 [ 428.198009][ T32] RDX: 00007f36d15de740 RSI: 0000000000000008 RDI: 00007ffd48deebc0 [ 428.198023][ T32] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 428.198036][ T32] R10: 00007ffd48deeba0 R11: 0000000000000000 R12: 0000000000000000 [ 428.198050][ T32] R13: 00000000000218bc R14: fffffffffffde744 R15: 0000000000000000 [ 428.198081][ T32] [ 428.198134][ T32] INFO: task syz.3.525:7825 blocked in I/O wait for more than 143 seconds. [ 428.198152][ T32] Tainted: G L syzkaller #0 [ 428.198163][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.198171][ T32] task:syz.3.525 state:D stack:23400 pid:7825 tgid:7825 ppid:5597 task_flags:0x400640 flags:0x00080000 [ 428.198233][ T32] Call Trace: [ 428.198240][ T32] [ 428.198252][ T32] __schedule+0x1259/0x6920 [ 428.198275][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.198318][ T32] ? __pfx___schedule+0x10/0x10 [ 428.198340][ T32] ? find_held_lock+0x2b/0x80 [ 428.198368][ T32] ? schedule+0x225/0x2c0 [ 428.198396][ T32] schedule+0xdd/0x2c0 [ 428.198420][ T32] io_schedule+0x8a/0xf0 [ 428.198444][ T32] folio_wait_bit_common+0x414/0xa80 [ 428.198475][ T32] ? folio_wait_bit_common+0x2a0/0xa80 [ 428.198507][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 428.198541][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 428.198563][ T32] ? __filemap_get_folio_mpol+0x369/0x1320 [ 428.198599][ T32] filemap_fault+0x647/0x3130 [ 428.198635][ T32] ? __pfx_filemap_fault+0x10/0x10 [ 428.198672][ T32] ? find_held_lock+0x2b/0x80 [ 428.198702][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 428.198726][ T32] __do_fault+0x10b/0x440 [ 428.198752][ T32] do_fault+0xb3f/0x1830 [ 428.198782][ T32] ? __pfx_do_fault+0x10/0x10 [ 428.198805][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 428.198833][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 428.198862][ T32] ? __pte_offset_map+0x179/0x310 [ 428.198891][ T32] __handle_mm_fault+0x150b/0x2f60 [ 428.198928][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 428.198957][ T32] ? pte_offset_map_lock+0x174/0x320 [ 428.198981][ T32] ? find_held_lock+0x2b/0x80 [ 428.199008][ T32] ? find_held_lock+0x2b/0x80 [ 428.199036][ T32] ? follow_page_pte+0x536/0x1050 [ 428.199079][ T32] handle_mm_fault+0x363/0xa20 [ 428.199115][ T32] __get_user_pages+0x8ae/0x2c30 [ 428.199151][ T32] ? lock_acquire+0x1d1/0x380 [ 428.199174][ T32] ? __pfx___get_user_pages+0x10/0x10 [ 428.199200][ T32] ? __pfx___might_resched+0x10/0x10 [ 428.199231][ T32] get_dump_page+0x27e/0x3d0 [ 428.199257][ T32] ? __pfx_get_dump_page+0x10/0x10 [ 428.199282][ T32] ? dump_user_range+0x65e/0xad0 [ 428.199312][ T32] dump_user_range+0x18d/0xad0 [ 428.199341][ T32] ? __pfx_dump_user_range+0x10/0x10 [ 428.199374][ T32] ? __pfx_writenote+0x10/0x10 [ 428.199397][ T32] ? elf_core_dump+0x1f25/0x3d20 [ 428.199426][ T32] elf_core_dump+0x2d68/0x3d20 [ 428.199473][ T32] ? __pfx_elf_core_dump+0x10/0x10 [ 428.199496][ T32] ? kasan_save_stack+0x3f/0x50 [ 428.199519][ T32] ? kasan_save_stack+0x30/0x50 [ 428.199542][ T32] ? kasan_save_track+0x14/0x30 [ 428.199564][ T32] ? __kasan_kmalloc+0xaa/0xb0 [ 428.199586][ T32] ? vfs_coredump+0x21f6/0x54a0 [ 428.199607][ T32] ? get_signal+0x1f2a/0x21e0 [ 428.199629][ T32] ? arch_do_signal_or_restart+0x91/0x7e0 [ 428.199665][ T32] ? 0xffffffffff600000 [ 428.199722][ T32] ? lock_acquire+0x1d1/0x380 [ 428.199744][ T32] ? get_signal+0x1f2a/0x21e0 [ 428.199777][ T32] ? vfs_coredump+0x281a/0x54a0 [ 428.199797][ T32] vfs_coredump+0x281a/0x54a0 [ 428.199832][ T32] ? __pfx_vfs_coredump+0x10/0x10 [ 428.199855][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.199885][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.199912][ T32] ? lock_acquire+0x1d1/0x380 [ 428.199934][ T32] ? unwind_next_frame+0xbd/0x2090 [ 428.199968][ T32] ? lock_acquire+0x1d1/0x380 [ 428.199998][ T32] ? bpf_ksym_find+0x128/0x1c0 [ 428.200029][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 428.200071][ T32] ? arch_stack_walk+0xa6/0xf0 [ 428.200108][ T32] ? __sigqueue_free+0xbe/0x2a0 [ 428.200136][ T32] ? stack_trace_save+0x8e/0xc0 [ 428.200166][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 428.200199][ T32] ? stack_depot_save_flags+0x27/0x9f0 [ 428.200226][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.200303][ T32] ? proc_coredump_connector+0x2d3/0x4f0 [ 428.200335][ T32] ? __pfx_proc_coredump_connector+0x10/0x10 [ 428.200373][ T32] ? rcu_is_watching+0x13/0xc0 [ 428.200405][ T32] get_signal+0x1f2a/0x21e0 [ 428.200442][ T32] ? __pfx_get_signal+0x10/0x10 [ 428.200480][ T32] arch_do_signal_or_restart+0x91/0x7e0 [ 428.200512][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 428.200562][ T32] irqentry_exit+0x402/0xa10 [ 428.200594][ T32] asm_exc_page_fault+0x26/0x30 [ 428.200615][ T32] RIP: 0033:0x7f9ab4d9e161 [ 428.200633][ T32] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 428.200650][ T32] RAX: 0000000000000000 RBX: 00007f9ab5026090 RCX: 00007f9ab4d9e159 [ 428.200665][ T32] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 428.200679][ T32] RBP: 00007f9ab4e3503b R08: 0000000000000000 R09: 0000000000000000 [ 428.200693][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 428.200707][ T32] R13: 00007f9ab5026128 R14: 00007f9ab5026090 R15: 00007ffdc64471f8 [ 428.200739][ T32] [ 428.200748][ T32] INFO: task syz.3.526:7832 blocked in I/O wait for more than 143 seconds. [ 428.200765][ T32] Tainted: G L syzkaller #0 [ 428.200778][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.200786][ T32] task:syz.3.526 state:D stack:27128 pid:7832 tgid:7832 ppid:5597 task_flags:0x440040 flags:0x00080002 [ 428.200853][ T32] Call Trace: [ 428.200860][ T32] [ 428.200872][ T32] __schedule+0x1259/0x6920 [ 428.200897][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.200937][ T32] ? __pfx___schedule+0x10/0x10 [ 428.200959][ T32] ? find_held_lock+0x2b/0x80 [ 428.200988][ T32] ? schedule+0x225/0x2c0 [ 428.201018][ T32] schedule+0xdd/0x2c0 [ 428.201042][ T32] io_schedule+0x8a/0xf0 [ 428.201068][ T32] bit_wait_io+0xd/0xe0 [ 428.201093][ T32] __wait_on_bit+0x65/0x180 [ 428.201120][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 428.201150][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 428.201178][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 428.201209][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 428.201238][ T32] do_get_write_access+0x836/0x11e0 [ 428.201279][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 428.201308][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 428.201342][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 428.201376][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 428.201406][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 428.201431][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 428.201466][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 428.203529][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 428.203573][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 428.203598][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 428.203622][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 428.203650][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 428.203676][ T32] ext4_dirty_inode+0xd9/0x130 [ 428.203701][ T32] ? rcu_is_watching+0x13/0xc0 [ 428.203726][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 428.203750][ T32] file_update_time_flags+0x49c/0x520 [ 428.203783][ T32] ext4_page_mkwrite+0x324/0x1860 [ 428.203817][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 428.203852][ T32] do_page_mkwrite+0x17a/0x440 [ 428.203875][ T32] do_fault+0x659/0x1830 [ 428.203897][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 428.203923][ T32] ? __pfx_do_fault+0x10/0x10 [ 428.203943][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 428.203966][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 428.203991][ T32] ? __pte_offset_map+0x179/0x310 [ 428.204016][ T32] __handle_mm_fault+0x150b/0x2f60 [ 428.204047][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 428.204072][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 428.204103][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 428.204145][ T32] handle_mm_fault+0x363/0xa20 [ 428.204177][ T32] do_user_addr_fault+0x59c/0x12f0 [ 428.204209][ T32] exc_page_fault+0x6f/0xd0 [ 428.204235][ T32] asm_exc_page_fault+0x26/0x30 [ 428.204254][ T32] RIP: 0033:0x7f9ab4c727a9 [ 428.204269][ T32] RSP: 002b:00007ffdc6447290 EFLAGS: 00010202 [ 428.204285][ T32] RAX: 0000001b329f7000 RBX: ffffffff81d0812c RCX: 0000001b329f6ff8 [ 428.204298][ T32] RDX: 0000001b32424220 RSI: 0000000000000008 RDI: 00007f9ab5b55720 [ 428.204311][ T32] RBP: 0000000000000104 R08: 00007f9ab5010000 R09: 00007f9ab5012000 [ 428.204323][ T32] R10: 0000000081d08130 R11: 0000000000000008 R12: 00007f9ab5026038 [ 428.204335][ T32] R13: 000000000000015d R14: ffffffff81d08cd4 R15: 00007f9ab5b55720 [ 428.204348][ T32] ? pwq_tryinc_nr_active+0x234/0x8c0 [ 428.204378][ T32] ? work_busy+0x1fc/0x360 [ 428.204412][ T32] [ 428.204421][ T32] INFO: task syz.0.530:7839 blocked in I/O wait for more than 143 seconds. [ 428.204438][ T32] Tainted: G L syzkaller #0 [ 428.204449][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.204461][ T32] task:syz.0.530 state:D stack:26968 pid:7839 tgid:7839 ppid:5596 task_flags:0x440040 flags:0x00080002 [ 428.205761][ T32] Call Trace: [ 428.205767][ T32] [ 428.205778][ T32] __schedule+0x1259/0x6920 [ 428.205802][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.205838][ T32] ? __pfx___schedule+0x10/0x10 [ 428.205858][ T32] ? find_held_lock+0x2b/0x80 [ 428.205885][ T32] ? schedule+0x225/0x2c0 [ 428.205911][ T32] schedule+0xdd/0x2c0 [ 428.205932][ T32] io_schedule+0x8a/0xf0 [ 428.205954][ T32] bit_wait_io+0xd/0xe0 [ 428.205976][ T32] __wait_on_bit+0x65/0x180 [ 428.205999][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 428.206025][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 428.206050][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 428.206078][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 428.206102][ T32] do_get_write_access+0x836/0x11e0 [ 428.206136][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 428.206161][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 428.206191][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 428.206222][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 428.206250][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 428.206271][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 428.206297][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 428.206321][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 428.206345][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 428.206368][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 428.206391][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 428.206420][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 428.206445][ T32] ext4_dirty_inode+0xd9/0x130 [ 428.206475][ T32] ? rcu_is_watching+0x13/0xc0 [ 428.206500][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 428.206525][ T32] file_update_time_flags+0x49c/0x520 [ 428.206557][ T32] ext4_page_mkwrite+0x324/0x1860 [ 428.206594][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 428.206629][ T32] do_page_mkwrite+0x17a/0x440 [ 428.206652][ T32] do_fault+0x659/0x1830 [ 428.206686][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 428.206709][ T32] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 428.206738][ T32] ? __pfx_do_fault+0x10/0x10 [ 428.206759][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 428.206783][ T32] ? _raw_spin_unlock+0x28/0x50 [ 428.206804][ T32] ? __pmd_alloc+0x3fb/0x950 [ 428.206830][ T32] __handle_mm_fault+0x150b/0x2f60 [ 428.206860][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 428.206885][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 428.206916][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 428.206957][ T32] handle_mm_fault+0x363/0xa20 [ 428.206989][ T32] do_user_addr_fault+0x59c/0x12f0 [ 428.207022][ T32] exc_page_fault+0x6f/0xd0 [ 428.207046][ T32] asm_exc_page_fault+0x26/0x30 [ 428.207076][ T32] RIP: 0033:0x7fd84ac6baa3 [ 428.207091][ T32] RSP: 002b:00007ffc131314f0 EFLAGS: 00010246 [ 428.207106][ T32] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32164000 [ 428.207118][ T32] RDX: 0000001b32124000 RSI: 0000000000400000 RDI: 00007fd84afe0708 [ 428.207131][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.207142][ T32] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 428.207153][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc13131780 [ 428.207181][ T32] [ 428.207189][ T32] INFO: task syz.1.529:7840 blocked in I/O wait for more than 143 seconds. [ 428.210086][ T32] Tainted: G L syzkaller #0 [ 428.210098][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.210106][ T32] task:syz.1.529 state:D stack:27456 pid:7840 tgid:7840 ppid:5594 task_flags:0x440040 flags:0x00080002 [ 428.210169][ T32] Call Trace: [ 428.210175][ T32] [ 428.210186][ T32] __schedule+0x1259/0x6920 [ 428.210208][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 428.210244][ T32] ? __pfx___schedule+0x10/0x10 [ 428.210264][ T32] ? find_held_lock+0x2b/0x80 [ 428.210289][ T32] ? schedule+0x225/0x2c0 [ 428.210315][ T32] schedule+0xdd/0x2c0 [ 428.210337][ T32] io_schedule+0x8a/0xf0 [ 428.210358][ T32] bit_wait_io+0xd/0xe0 [ 428.210381][ T32] __wait_on_bit+0x65/0x180 [ 428.210404][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 428.210429][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 428.210453][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 428.210486][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 428.210511][ T32] do_get_write_access+0x836/0x11e0 [ 428.210545][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 428.210570][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 428.210600][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 428.210630][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 428.210663][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 428.210685][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 428.210712][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 428.210736][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 428.210760][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 428.210783][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 428.210806][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 428.210834][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 428.210860][ T32] ext4_dirty_inode+0xd9/0x130 [ 428.210886][ T32] ? rcu_is_watching+0x13/0xc0 [ 428.210909][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 428.210934][ T32] touch_atime+0x65f/0x770 [ 428.210959][ T32] ext4_file_mmap_prepare+0x56d/0x670 [ 428.210984][ T32] ? __pfx_ext4_file_mmap_prepare+0x10/0x10 [ 428.211016][ T32] __mmap_region+0xeb2/0x32c0 [ 428.211050][ T32] ? __pfx___mmap_region+0x10/0x10 [ 428.211077][ T32] ? get_page_from_freelist+0x110d/0x35d0 [ 428.211108][ T32] ? bpf_ksym_find+0x128/0x1c0 [ 428.211151][ T32] ? __pfx_get_page_from_freelist+0x10/0x10 [ 428.211180][ T32] ? prepare_alloc_pages+0x1f0/0x5b0 [ 428.211217][ T32] ? lock_acquire+0x1d1/0x380 [ 428.211245][ T32] ? unwind_next_frame+0xbd/0x2090 [ 428.211276][ T32] ? lock_acquire+0x1d1/0x380 [ 428.211296][ T32] ? is_bpf_text_address+0x25/0x1a0 [ 428.211319][ T32] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 428.211348][ T32] ? find_held_lock+0x2b/0x80 [ 428.211372][ T32] ? is_bpf_text_address+0x8a/0x1a0 [ 428.211395][ T32] ? is_bpf_text_address+0x8a/0x1a0 [ 428.211465][ T32] ? __pfx_mt_find+0x10/0x10 [ 428.213552][ T32] mmap_region+0x5a8/0x6d0 [ 428.213576][ T32] ? __pfx_mmap_region+0x10/0x10 [ 428.213595][ T32] ? shmem_mapping+0xd/0x50 [ 428.213624][ T32] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 428.213652][ T32] ? security_mmap_addr+0x71/0x1e0 [ 428.213674][ T32] ? __get_unmapped_area+0x255/0x3e0 [ 428.213701][ T32] do_mmap+0x12c7/0x1c30 [ 428.213729][ T32] ? lock_acquire+0x1d1/0x380 [ 428.213749][ T32] ? __pfx_do_mmap+0x10/0x10 [ 428.213772][ T32] ? __pfx___might_resched+0x10/0x10 [ 428.213791][ T32] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 428.213820][ T32] ? security_current_getlsmprop_subj+0x6e/0x130 [ 428.213853][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 428.213885][ T32] vm_mmap_pgoff+0x28d/0x470 [ 428.213911][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 428.213930][ T32] ? __fget_files+0x215/0x3d0 [ 428.213957][ T32] ? __fget_files+0x21f/0x3d0 [ 428.213985][ T32] ksys_mmap_pgoff+0x3cb/0x610 [ 428.214010][ T32] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 428.214031][ T32] ? __do_sys_prctl+0x14e/0x2270 [ 428.214061][ T32] ? __pfx___do_sys_prctl+0x10/0x10 [ 428.214091][ T32] __x64_sys_mmap+0x125/0x190 [ 428.214117][ T32] do_syscall_64+0x123/0x790 [ 428.214144][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.214164][ T32] RIP: 0033:0x7f11cb39dec2 [ 428.214180][ T32] RSP: 002b:00007fffb38c88b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 428.214198][ T32] RAX: ffffffffffffffda RBX: 0000001b32264000 RCX: 00007f11cb39dec2 [ 428.214211][ T32] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b32264000 [ 428.214223][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 428.214244][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000074 [ 428.214257][ T32] R13: 00000000000927c0 R14: 0000000000041789 R15: 00007fffb38c8b90 [ 428.214284][ T32] [ 428.214305][ T32] [ 428.214305][ T32] Showing all locks held in the system: [ 428.214317][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 428.214330][ T32] #0: ffffffff8edd8738 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 428.214381][ T32] #1: ffffffff9bc6ac78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 428.214435][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 428.214448][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 428.214514][ T32] locks held by kworker/u8:7/1006: 4, on CPU#1: [ 428.214527][ T32] #0: ffff888021af1940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 428.214581][ T32] #1: ffffc90004f6fd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 428.214633][ T32] #2: ffff888025ada0e8 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x21/0xf0 [ 428.214684][ T32] #3: ffff888025ad8c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 428.214746][ T32] locks held by syslogd/4948: 1, last CPU#0: [ 428.214759][ T32] #0: ffff888025bd0e70 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 428.214810][ T32] locks held by syz-executor/5584: 3, on CPU#1: [ 428.214823][ T32] #0: ffff88807675aa88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 428.214875][ T32] #1: ffff888025ada558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 428.214920][ T32] #2: ffff8880374ae938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 428.214979][ T32] locks held by syz.3.525/7825: 3, on CPU#0: [ 428.214992][ T32] #0: ffff88807c6cc460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 428.216750][ T32] #1: ffff88807c995038 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x151/0xad0 [ 428.216795][ T32] #2: ffff88807f578e28 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x2db/0x3130 [ 428.216850][ T32] locks held by syz.3.526/7832: 3, on CPU#1: [ 428.216864][ T32] #0: ffff888034e07e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 428.216921][ T32] #1: ffff888025ada558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 428.216961][ T32] #2: ffff8880374ae938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 428.217005][ T32] locks held by syz.0.530/7839: 3, on CPU#1: [ 428.217019][ T32] #0: ffff8880580debc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 428.217068][ T32] #1: ffff888025ada558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 428.217112][ T32] #2: ffff8880374ae938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 428.217157][ T32] locks held by syz.1.529/7840: 3, on CPU#1: [ 428.217170][ T32] #0: ffff88801c085038 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 428.217214][ T32] #1: ffff888025ada460 (sb_writers#5){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x56d/0x670 [ 428.217266][ T32] #2: ffff8880374ae938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 428.217311][ T32] [ 428.217316][ T32] ============================================= [ 428.217316][ T32] [ 428.217338][ T32] NMI backtrace for cpu 0 [ 428.217353][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 428.217378][ T32] Tainted: [L]=SOFTLOCKUP [ 428.217384][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 428.217395][ T32] Call Trace: [ 428.217401][ T32] [ 428.217408][ T32] dump_stack_lvl+0x100/0x190 [ 428.217436][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 428.217470][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 428.217491][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 428.217515][ T32] sys_info+0x141/0x190 [ 428.217541][ T32] watchdog+0xcb1/0x1030 [ 428.217567][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 428.217590][ T32] ? __pfx_watchdog+0x10/0x10 [ 428.217611][ T32] ? __kthread_parkme+0x18f/0x230 [ 428.217636][ T32] ? kthread+0x13a/0x450 [ 428.217658][ T32] ? __pfx_watchdog+0x10/0x10 [ 428.217677][ T32] kthread+0x373/0x450 [ 428.217701][ T32] ? __pfx_kthread+0x10/0x10 [ 428.217727][ T32] ret_from_fork+0x730/0xd60 [ 428.217749][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 428.217771][ T32] ? __switch_to+0x800/0x10f0 [ 428.217796][ T32] ? __pfx_kthread+0x10/0x10 [ 428.217821][ T32] ret_from_fork_asm+0x1a/0x30 [ 428.217854][ T32] [ 428.217862][ T32] Sending NMI from CPU 0 to CPUs 1: [ 428.217886][ C1] NMI backtrace for cpu 1 [ 428.217897][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.217920][ C1] Tainted: [L]=SOFTLOCKUP [ 428.217926][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 428.217936][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 428.217953][ C1] Code: 9e 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 18 d9 ce fc eb a2 e8 a1 d9 [ 428.217973][ C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 428.217985][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 428.217996][ C1] RDX: 00000000000003fd RSI: ffffffff85b07780 RDI: ffffffff9bc6aca0 [ 428.218007][ C1] RBP: ffffffff9bc6ac60 R08: 0000000000000001 R09: 000000000000001f [ 428.218017][ C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 428.218027][ C1] R13: 0000000000000020 R14: fffffbfff378d5e9 R15: dffffc0000000000 [ 428.218041][ C1] FS: 0000000000000000(0000) GS:ffff888123c5a000(0000) knlGS:0000000000000000 [ 428.218056][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.218067][ C1] CR2: 000055a60d10b168 CR3: 000000007d23f000 CR4: 00000000003526f0 [ 428.218078][ C1] Call Trace: [ 428.218083][ C1] [ 428.218089][ C1] wait_for_lsr+0x13a/0x210 [ 428.218110][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 428.218131][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 428.218150][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 428.218167][ C1] serial8250_console_write+0xf46/0x1330 [ 428.218194][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 428.218215][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 428.218241][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 428.218270][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 428.218297][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 428.218322][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 428.218345][ C1] ? do_raw_spin_lock+0xb0/0x260 [ 428.218369][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 428.218389][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 428.218409][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 428.218432][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 428.218459][ C1] nbcon_kthread_func+0x613/0x7d0 [ 428.218476][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 428.218495][ C1] ? __kthread_parkme+0x18f/0x230 [ 428.218515][ C1] ? kthread+0x13a/0x450 [ 428.218534][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 428.218549][ C1] kthread+0x373/0x450 [ 428.218568][ C1] ? __pfx_kthread+0x10/0x10 [ 428.218591][ C1] ret_from_fork+0x730/0xd60 [ 428.218608][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 428.218625][ C1] ? __switch_to+0x800/0x10f0 [ 428.218646][ C1] ? __pfx_kthread+0x10/0x10 [ 428.218667][ C1] ret_from_fork_asm+0x1a/0x30 [ 428.218690][ C1] [ 428.222790][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 431.558440][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 431.569118][ T32] Tainted: [L]=SOFTLOCKUP [ 431.573441][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 431.583497][ T32] Call Trace: [ 431.586784][ T32] [ 431.589721][ T32] dump_stack_lvl+0x100/0x190 [ 431.594411][ T32] vpanic+0x553/0x970 [ 431.598394][ T32] ? __pfx_vpanic+0x10/0x10 [ 431.602904][ T32] panic+0xd1/0xe0 [ 431.606627][ T32] ? __pfx_panic+0x10/0x10 [ 431.611049][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 431.617204][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 431.623356][ T32] ? watchdog.cold+0x1ec/0x234 [ 431.628151][ T32] watchdog.cold+0x1fd/0x234 [ 431.632756][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 431.638567][ T32] ? __pfx_watchdog+0x10/0x10 [ 431.643253][ T32] ? __kthread_parkme+0x18f/0x230 [ 431.648290][ T32] ? kthread+0x13a/0x450 [ 431.652544][ T32] ? __pfx_watchdog+0x10/0x10 [ 431.657219][ T32] kthread+0x373/0x450 [ 431.661292][ T32] ? __pfx_kthread+0x10/0x10 [ 431.665897][ T32] ret_from_fork+0x730/0xd60 [ 431.670490][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 431.675608][ T32] ? __switch_to+0x800/0x10f0 [ 431.680290][ T32] ? __pfx_kthread+0x10/0x10 [ 431.684886][ T32] ret_from_fork_asm+0x1a/0x30 [ 431.689666][ T32] [ 431.692906][ T32] Kernel Offset: disabled [ 431.697212][ T32] Rebooting in 86400 seconds..