last executing test programs: 1m46.10252582s ago: executing program 2 (id=2144): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x2, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00cc00000050050208000500", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_group_source_req(r4, 0x29, 0x5, &(0x7f0000000400)={0x5, {{0xa, 0x4e23, 0x8, @private1, 0x6}}, {{0xa, 0x4e24, 0x2bd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}, 0x108) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x4, 0x8, 0x1894}, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.state\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002800000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r5, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000001840)={0x90000001}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20004010}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000202010400010000000000010a000008060007400000800008000440fffffff708000b0073697000080028408177bdff332cf79b000020082485e1e45c91301674814819440001800c0000800500017314ffbc62027b3a0000ffff000340000400000c0002"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x40000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x214000, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x77, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b31ed}, 0x1c) 1m44.020864111s ago: executing program 2 (id=2149): r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x3, 0x1, 0x4}, 0x1}, 0x18) 1m42.96843754s ago: executing program 2 (id=2152): syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$watch_queue(&(0x7f0000000300), 0x80) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}, {0xffffffffffffffff, 0x1001}], 0x20000000000000ec, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x300, 0x70bdac, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x6, 0xe}, {0x4, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/158, 0x9e}], 0x4}, 0x60002000) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000001c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7f8000, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004000) 1m41.525916694s ago: executing program 4 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) 1m39.676272173s ago: executing program 4 (id=2157): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1001}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000a00)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x1405, 0x100, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) 1m36.859191743s ago: executing program 2 (id=2161): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000440)={0xc0000000, 0x6, "77e7477fba6a2ed1e67bbefba62c43fb28650f3e3e1bdc37fa01787cf245e2a8", 0x6f, 0x2, 0x286, 0x200000000000, 0x8, 0x10, 0xffff, 0x5, [0x8001, 0x6, 0x6, 0x6]}) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200) 1m36.364494444s ago: executing program 2 (id=2163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x840) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r3) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x3, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) ptrace$getregset(0x4204, r3, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) ptrace$setregset(0x4205, r3, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000002000010000000000fcdbdf250a805f04000000031800030014000200fc020000000000000000000000000001140001002001000000000000000000000000000114000200ff020000000000000000000000007e40"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="000036f556d793514f972480140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 1m32.764702462s ago: executing program 4 (id=2166): kexec_load(0x5, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f1", 0xdc, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f6c59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add00"/126, 0x7e, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd", 0x69, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330", 0x42}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea9", 0x96}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m30.944513107s ago: executing program 2 (id=2169): socket$inet6(0xa, 0x2, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x67) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000680)={'ni_daq_700\x00', [0x3, 0x1f, 0xcd, 0x2, 0x2001, 0x100, 0x3, 0xfffffffa, 0x8, 0xb, 0x2, 0x20b51, 0xffffffff, 0x401, 0x0, 0xf, 0x0, 0x3, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0xd, 0x40048, 0x9, 0x2, 0x9, 0x8, 0x8, 0xa]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x495a4000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 1m29.574257639s ago: executing program 32 (id=2169): socket$inet6(0xa, 0x2, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x67) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000680)={'ni_daq_700\x00', [0x3, 0x1f, 0xcd, 0x2, 0x2001, 0x100, 0x3, 0xfffffffa, 0x8, 0xb, 0x2, 0x20b51, 0xffffffff, 0x401, 0x0, 0xf, 0x0, 0x3, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0xd, 0x40048, 0x9, 0x2, 0x9, 0x8, 0x8, 0xa]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x495a4000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 1m29.553858528s ago: executing program 4 (id=2173): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000440)={0xc0000000, 0x6, "77e7477fba6a2ed1e67bbefba62c43fb28650f3e3e1bdc37fa01787cf245e2a8", 0x6f, 0x2, 0x286, 0x200000000000, 0x8, 0x10, 0xffff, 0x5, [0x8001, 0x6, 0x6, 0x6]}) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200) 1m29.30470226s ago: executing program 4 (id=2174): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x84) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) unshare(0x2040400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r4 = userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000d8a000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x80010, 0xffffffffffffffff, 0x28f43000) read(r4, &(0x7f00000002c0)=""/153, 0x99) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000662000/0x4000)=nil, 0x4000}, 0x845ab677f2cfd01}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0e, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x40) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 1m23.032268668s ago: executing program 4 (id=2187): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) userfaultfd(0x80001) fsopen(&(0x7f0000000140)='fuseblk\x00', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = fanotify_init(0x0, 0x0) fanotify_mark(r7, 0x1, 0x800002b, r4, 0x0) splice(r4, 0x0, r6, 0x0, 0x50, 0x8) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x0, 0x0, 0xffff}}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x2e00, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xff79, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x200, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r9, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m22.221336045s ago: executing program 33 (id=2187): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) userfaultfd(0x80001) fsopen(&(0x7f0000000140)='fuseblk\x00', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = fanotify_init(0x0, 0x0) fanotify_mark(r7, 0x1, 0x800002b, r4, 0x0) splice(r4, 0x0, r6, 0x0, 0x50, 0x8) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x0, 0x0, 0xffff}}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x2e00, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xff79, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x200, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r9, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 14.874303671s ago: executing program 1 (id=2321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080ffffff000000000100000008000100030000002400048005000300010000000500030000000000050003008000000005008000020000000800020003"], 0x48}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080ffffff000000000100000008000100030000002400048005000300010000000500030000000000050003008000000005008000020000000800020003"], 0x48}}, 0x0) unshare(0x28000600) msgget$private(0x0, 0x0) (async) r2 = msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) msgsnd(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgctl$IPC_RMID(0x0, 0x0) (async) msgctl$IPC_RMID(0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r7, 0x5423, 0x0) (async) ioctl$TIOCSETD(r7, 0x5423, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r8, &(0x7f0000000a80), 0x0}, 0x20) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f0000000040)) (async) ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f0000000040)) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x20041, 0x0) (async) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x20041, 0x0) ioctl$GIO_CMAP(r10, 0x4b70, &(0x7f00000000c0)) 14.524073789s ago: executing program 1 (id=2324): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x84) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) unshare(0x2040400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r4 = userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000d8a000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x80010, 0xffffffffffffffff, 0x28f43000) read(r4, &(0x7f00000002c0)=""/153, 0x99) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 14.144467386s ago: executing program 1 (id=2328): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{&(0x7f0000002780)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000000080)="4925e65f", 0x4}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @private=0xa010104}, 0x10, &(0x7f0000003400)=[{&(0x7f0000002f80)="84", 0x1}], 0x1}}], 0x3, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="07004000a9c3f4ebcda64dc156442480f254221d7e97beab530ed486db5714bf90b296093b554444b908dc42bc2826e18ac4a5c9a7555a1954327b54ad4123373521f7a4"], 0x48) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48412ba8000000021600000000000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988461d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0xffffffffffffff47, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4040800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r3, 0x80284504, &(0x7f0000000000)=""/52) r4 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="4008090000000b86b14cca66fe494cfcafa9665258435e998de18dea2e020b01f7fbe5841a93c45b1339c8bcc3e08b829a849fb31fdf280a1bad591da12ae7f4d9cb0694c481acb73209683d9183a617d50ef89a0f4a30e7f5d3921b79ba63983d24edf7853d87ad85ee7910f3"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x24, 0x2, 0x0, "11010100001400000100b64c0000005c4b7c1500"}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_128={{0x304}, "a185c1bb5673346f", "c95d9f84366f9dcf1c2e8c65b4dd7e56", "b726034b"}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="18000000690015"], 0x18}], 0x1}, 0x8000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x13) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0x48f, 0x0, 0x200}]}) r11 = dup(r7) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$VIDIOC_S_OUTPUT(r11, 0xc004562f, &(0x7f0000000280)=0x4) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) 13.957246035s ago: executing program 6 (id=2330): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000440)={0xc0000000, 0x6, "77e7477fba6a2ed1e67bbefba62c43fb28650f3e3e1bdc37fa01787cf245e2a8", 0x6f, 0x2, 0x286, 0x200000000000, 0x8, 0x10, 0xffff, 0x5, [0x8001, 0x6, 0x6, 0x6]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/254, 0x41, 0xfe, 0x1}, 0x28) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200) 12.785648489s ago: executing program 5 (id=2331): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, r1, 0x9) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) io_setup(0x1, &(0x7f0000000100)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000080)="2a309d090b9f7db4e2540a331ffc67e561a6a68b55", 0x15) 10.528386865s ago: executing program 6 (id=2334): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a032", 0xb) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(0x0, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006006e6f6e6500120000080008"], 0x58}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000024c0)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x8, [@enum64={0x1, 0xa, 0x0, 0x13, 0x0, 0x5, [{0x6, 0x9, 0xfffffff8}, {0xe, 0x9, 0x4}, {0xc, 0x0, 0xffffffff}, {0x9, 0x3, 0x7fffffff}, {0x9, 0x6b, 0xdc5c}, {0x3, 0x40, 0x3e4}, {0x3, 0x9, 0x1}, {0x10, 0x1, 0x8}, {0x7, 0xfffffff8, 0x6}, {0x4000b, 0x4, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x4f]}}, 0x0, 0xa4, 0x0, 0x1}, 0x28) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000240)={'pcl711\x00', [0x100, 0x7, 0x1, 0x7, 0x81, 0x1000, 0x0, 0x10001, 0x0, 0xa, 0x0, 0xfffffffc, 0x3, 0xb6ac, 0x9, 0xffffffff, 0x20000006, 0x1ff, 0xfe9, 0x404, 0xa, 0xa, 0x1, 0x9, 0x4, 0x7, 0x80, 0x0, 0x81, 0x7, 0xff]}) 10.426844209s ago: executing program 5 (id=2336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000110201"], 0x80}}, 0x0) 9.959708265s ago: executing program 5 (id=2338): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x84) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) unshare(0x2040400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r4 = userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000d8a000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x80010, 0xffffffffffffffff, 0x28f43000) read(r4, &(0x7f00000002c0)=""/153, 0x99) ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000662000/0x4000)=nil, 0x4000}, 0x845ab677f2cfd01}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 9.76166756s ago: executing program 3 (id=2340): connect$unix(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x101081, 0x0) 8.837836395s ago: executing program 6 (id=2341): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x433b, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/197, 0xc5, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 7.440618202s ago: executing program 3 (id=2342): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f0000000980)={0x0, 0x11, 0x2, "9504"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0}) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/87, 0x57}, {0x0}], 0x2) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b80)={0x0, 0x11, 0xd0, {0xd0, 0xd, "0530dc47b13be37cc04fe2460eea8cc58df843c818c259af7e71755885dcc70b38cad6263ed48037ede545878c86b94c3319a2319ea8dedc912667685cd856479383154ef9f03b2b735b4015b2cb946984621b7b3681c1bda2d957bad635ce4324018b1e1063921d9d93e9928ce71b9ba817feb76ec954dc1dc67e6559e54e71063a5a756660178ded6279b7a3b9fc3707e4681fbe5f0a0dcad7cd14f9fa5bc119ce78018229e042051195a03c9419d028096b3f5a8f1eac2a37bb95fc8c52ebe105b900e063966515be98b60c06"}}, &(0x7f0000000c80)={0x0, 0x3, 0x37, @string={0x37, 0x3, "e2f1aeda874e60736fff96a27dd8d425289246766c44303f1dbcde35888259a557de062b5f8f01841b0576ae7f6c47655dc510be42"}}, &(0x7f0000000cc0)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x3, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6f6114144c94452861832f0407438687"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x5, 0x9, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0xf, 0xfe, "8ff9d701", "a13a3517"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x1, 0x8, 0x80, 0x3, 0x305e, 0x6}}}, &(0x7f0000001240)={0x84, &(0x7f0000000dc0)={0x0, 0xe, 0x7d, "62228dd50e14905da79ee43652e58c88464c6df93018095438190ff395b69b815f2db9b44b98b142e06a31247af55e4973aa55ee6a68cc17dc6443f4f225aa32cf45a0de2f691f794c387aa0dd2478f002a45462329c5d189c486db5a5702af9d0ab34362bb224b2df0ec7fabdd292976279061c9ed3100734c4a7bd42"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000f40)={0x20, 0x0, 0x8, {0x2, 0x20, [0xf0f0]}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001000)={0x40, 0xb, 0x2, "54ca"}, &(0x7f0000001040)={0x40, 0xf, 0x2}, &(0x7f0000001080)={0x40, 0x13, 0x6}, &(0x7f00000010c0)={0x40, 0x17, 0x6}, &(0x7f0000001100)={0x40, 0x19, 0x2, "decc"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x1d}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0xc}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 7.164781461s ago: executing program 1 (id=2344): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000440)={0xc0000000, 0x6, "77e7477fba6a2ed1e67bbefba62c43fb28650f3e3e1bdc37fa01787cf245e2a8", 0x6f, 0x2, 0x286, 0x200000000000, 0x8, 0x10, 0xffff, 0x5, [0x8001, 0x6, 0x6, 0x6]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/254, 0x41, 0xfe, 0x1}, 0x28) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200) 7.120967923s ago: executing program 6 (id=2345): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) unshare(0x2e020400) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x3, 0xf98, 0x80, 0x0, 0xd}) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200010800000018280000eecc95e9c4f3b6c3", @ANYRES32, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.086680372s ago: executing program 5 (id=2346): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582", @ANYBLOB="bdb0"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x4, 0x62, &(0x7f0000000800)=""/98) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xc, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x10, 0x700, 0x0, 0x1, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x64, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000430009f3ce3b8e976efffffffffffffc01ffffff"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000042c0)=@newtaction={0x2d04, 0x30, 0x1, 0x0, 0x0, {}, [{0x2cf0, 0x1, [@m_pedit={0x2c80, 0x13, 0x0, 0x0, {{0xa}, {0x2b7c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x4, 0x8, 0x2, 0x6, 0x792782d3}, 0x8, 0x0, [{0x4, 0x4, 0x7, 0x7000000, 0x1, 0x40}]}, [{0x4, 0x9, 0x7ff, 0x24b, 0x7, 0x10000}, {0x2, 0x206, 0x2, 0x9, 0x1, 0x1}, {0x7fffffff, 0x2, 0x1ff, 0x6, 0x6030, 0x651}, {0x9, 0x8000, 0x3, 0xc969, 0x1, 0xdff}, {0x3, 0x3ff, 0x7, 0x5, 0x2, 0x6}, {0xa5, 0x40, 0x2, 0x5, 0x8, 0x8001}, {0x5, 0xd4e, 0xffff2ecb, 0xfffffffe, 0x5, 0x3}, {0x3, 0x84, 0x7, 0x10001, 0x0, 0x7}, {0x5, 0x7ff, 0x4, 0x2, 0xffff6921, 0x3}, {0x1, 0x9, 0x1, 0xf74, 0x6}, {0xaa, 0x7ff, 0x8000, 0xb2, 0x2, 0x3}, {0xf3f, 0x45, 0x8, 0xe, 0xffffffff, 0xe015}, {0x6, 0x3ff, 0x10001, 0x6, 0x5, 0x4}, {0xf, 0xfffffc01, 0x8, 0xcbb, 0x100, 0x800}, {0x7, 0x3, 0x7, 0x1, 0x7f, 0xfffffff7}, {0x7ff, 0x0, 0x8, 0x62e4, 0x7ff, 0x7ff}, {0xb, 0x7, 0x2, 0x2, 0xc, 0xa}, {0x89c, 0xb, 0x6, 0x400, 0x7, 0x7}, {0x9, 0xa9c, 0x1, 0x8a70, 0x6, 0x70d}, {0x3, 0xfe5, 0xfffffc01, 0x0, 0x8, 0x8}, {0xa25, 0x7, 0x1, 0x4, 0x3ff, 0x2}, {0x2, 0x9, 0x1ff, 0x2, 0x8, 0x4}, {0x2, 0x6, 0xffffffff, 0x9014, 0x400, 0x1}, {0xf, 0x9, 0x5, 0x6, 0x3, 0x3}, {0x0, 0x9, 0x3, 0x3, 0x0, 0x10}, {0x7, 0x92b, 0x7fff, 0x2, 0x3, 0xeb}, {0x8ae, 0x0, 0x8, 0x4, 0x0, 0x6}, {0x200, 0x1000, 0x0, 0x3, 0x4, 0x2}, {0x8, 0xa, 0x6, 0x3f, 0x9, 0x3ff}, {0x1, 0x0, 0x100, 0x7, 0xc3, 0x8}, {0x4, 0x101, 0xa7, 0x3, 0xfffffffb, 0x4}, {0x7, 0x8001, 0x1, 0x0, 0x2b940, 0x5}, {0x0, 0x7, 0x2, 0x1, 0x1, 0x7}, {0x8, 0x0, 0x1000, 0x7fff, 0x5, 0x5}, {0x10, 0x9, 0x9, 0x1000, 0x9, 0x2}, {0x1, 0xd45, 0xf, 0x86e, 0x10001, 0x3ff}, {0x529000a1, 0x1, 0xa7, 0x8000, 0x5, 0x4d7}, {0x7, 0xffff, 0x0, 0x10000, 0x2, 0x6}, {0x1fffc, 0x4, 0x6, 0xffffffff, 0xea3a, 0xffffff9a}, {0x80, 0x48, 0x6, 0xff, 0x2, 0x2}, {0xe, 0x8, 0x7, 0x10001, 0x80000001, 0xa}, {0x3d, 0xe, 0x5, 0x1000, 0x80000001, 0x1}, {0x9ea, 0x6, 0xfffffffd, 0x7c, 0x2, 0x8001}, {0x2, 0x8, 0x3a3580a7, 0x9, 0x5, 0x9}, {0x1, 0x5, 0x850, 0x6, 0x400, 0x5}, {0x6, 0x7f, 0x2, 0x9, 0xfffffffe, 0x3}, {0x30c00000, 0xb71, 0x2, 0x5, 0x3, 0x2}, {0xa, 0x8, 0x0, 0x1, 0xbb7, 0x5}, {0x101, 0x4, 0x3, 0x1d8, 0x6, 0x14c}, {0x1, 0x4, 0x7f, 0x101, 0x1b9}, {0xfffffff9, 0x1, 0x8, 0x40, 0xffffffff, 0x3}, {0xa0, 0x4, 0x4, 0x9cb, 0xe, 0x7f}, {0x7a90, 0xf, 0x6, 0x3, 0x9, 0x440d}, {0x80, 0x81, 0x0, 0x6, 0x7, 0x9}, {0x8, 0x5, 0xcf3, 0x4, 0x200, 0x5}, {0x5, 0x6, 0xe, 0xc, 0x2, 0x3}, {0x65, 0x2a, 0x4, 0x800, 0x9, 0x6}, {0x9, 0x80000001, 0x1, 0x0, 0x3, 0x1ff}, {0x1, 0x80000000, 0x2d, 0xafa, 0xf, 0x7}, {0x0, 0x10001, 0xd, 0x7, 0xff, 0x5}, {0xe, 0x3, 0x3, 0xf947, 0x80, 0xc}, {0x3, 0x7, 0x8, 0x1000, 0x3, 0xff}, {0x3, 0x2, 0x1, 0x0, 0x3, 0x3}, {0x1000, 0x1, 0x7fb6, 0x9, 0x4}, {0x8000, 0x9, 0x2, 0x3, 0x81, 0x5}, {0x6273, 0xfffffffe, 0x0, 0xd, 0x2}, {0x5, 0x4, 0x6, 0x3, 0x0, 0x2}, {0xffff8000, 0xa3, 0xe970, 0x6, 0x7, 0x5}, {0x7, 0x25c5, 0x7, 0xffff6bc1, 0x0, 0x3ff}, {0x2e, 0x9, 0xaf, 0x4, 0x9, 0x7f}, {0x0, 0x3, 0x9, 0x4, 0x7, 0x8}, {0x6, 0x2, 0xffffffff, 0xffffffff, 0x8, 0xfffffeff}, {0x8001, 0x8, 0xfffffff7, 0xa7c, 0x7, 0x80000000}, {0xfffffffa, 0x2, 0x7f, 0x5, 0x30, 0x7fffffff}, {0x6, 0xb622, 0x7, 0x3, 0x7f, 0x9}, {0x0, 0x9, 0x0, 0x1000, 0x6, 0x9}, {0xfffffffc, 0x2, 0x21, 0x7, 0xd0d, 0x800}, {0x5, 0x7, 0x3, 0xff, 0x8, 0x1}, {0x9f, 0x401, 0x0, 0x6, 0x80, 0x5}, {0x19, 0x9, 0xc, 0x5, 0x9, 0x4337}, {0x80000000, 0x4, 0x0, 0x0, 0x1, 0x400}, {0x7, 0x5f25, 0x76, 0xb7d, 0x8001, 0x5}, {0xc, 0x8, 0x7, 0x7e, 0x6, 0x3}, {0x7, 0x8efe, 0x4, 0x3, 0x7, 0x6}, {0x0, 0xe2f, 0x8, 0xae18, 0x7, 0x5}, {0x2, 0x0, 0x7fffffff, 0xff, 0x7, 0x8}, {0x4, 0x4, 0x5, 0x2, 0xffff, 0x1}, {0x8001, 0x6d, 0x1, 0x100, 0x7f, 0x5}, {0xd6, 0x93c, 0x4, 0x10001, 0x55, 0x9}, {0x4, 0x3, 0x8001, 0x9, 0x3, 0x8}, {0xd, 0x41, 0x8001, 0x81, 0x6, 0xe0000}, {0x784, 0x7d4, 0x8000, 0x8, 0x4, 0x8001}, {0xc, 0x4, 0x7, 0x0, 0x9, 0x4}, {0x9, 0x0, 0xcd08, 0x3ff, 0x7fffffff, 0x10000}, {0x6, 0x2, 0x1, 0x8, 0x66, 0x2}, {0x3, 0x1, 0x8, 0x9, 0x100, 0x7}, {0x3, 0xe0000000, 0xa, 0x5, 0x9d, 0x4}, {0x0, 0x401, 0xfff, 0xffffff0d, 0x7f, 0x8}, {0x1, 0x6f44, 0x1, 0x74d0, 0x8, 0x9}, {0x6, 0x81, 0x0, 0x3, 0x400, 0x80}, {0x4, 0x8, 0x7, 0xffffffff, 0xfffffffc, 0xfffffc01}, {0x40, 0x1, 0xa408, 0xffff, 0x40, 0x80000000}, {0x80000000, 0x3, 0x1, 0x9, 0x1000, 0x1ff}, {0x1ff, 0x4, 0x9, 0x6, 0x2, 0x606ceae3}, {0x4, 0x1000, 0x5, 0x1, 0xc42e, 0x6}, {0x0, 0x9, 0x5, 0xfffffffe, 0x8, 0x9}, {0x2, 0xff, 0xff, 0x9, 0x4, 0x1}, {0x8, 0x101, 0x4e1, 0x4, 0x9, 0x8}, {0xff1, 0x9, 0xffffffff, 0x5, 0x7, 0x8b73}, {0x7, 0x8, 0x8, 0x400, 0x3, 0x5}, {0xbd, 0x80, 0xffffffff, 0x0, 0x8, 0xa}, {0x2, 0x8d, 0xb, 0x6, 0x0, 0x1}, {0x800, 0xa53, 0x1000000, 0x8, 0x7, 0x81}, {0xb7ec, 0x5e5, 0x7ff, 0x2090, 0x2, 0x4}, {0x10000, 0x6, 0x8, 0x7, 0x2, 0x10000}, {0x4, 0x4, 0x4, 0x3, 0x80000001, 0x65f}, {0x8, 0x7fffffff, 0x4, 0xf, 0xc6b, 0x9}, {0x6, 0x7f, 0x4, 0x800, 0x6, 0x7fff}, {0x6, 0x5, 0x2, 0x0, 0x7, 0x4}, {0x1, 0xffff, 0x4, 0x5, 0x5, 0x7fffffff}, {0x44, 0x1, 0x6, 0x1, 0x9, 0x6}, {0x7000, 0x7, 0x1fd, 0x7fff, 0x2e1, 0x7}, {0x1, 0x101, 0x800, 0x9, 0x8, 0xc}, {0x6, 0x0, 0x0, 0x1e31, 0x7, 0xfff}, {0x4, 0xffffff80, 0x8, 0x9, 0x9, 0x2}, {0x8521, 0x4, 0xfffffffe, 0xac, 0x5, 0x7fff}, {0xd, 0x7, 0x4, 0xff, 0x3, 0x9}, {0x0, 0x1ff, 0x2, 0x22, 0x33c4, 0xdfa6}], [{0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2}, {}, {0x5}, {0x4}, {0x4}, {0x5}, {}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3e63a7026941919, 0x1}, {0x6}, {0x4}, {0x0, 0x1}, {0x45c626cfc25395c1}, {0x2}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0xe3cd6c72b08527f7}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x3}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {}, {0xb, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x2}, {0x3}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x0, 0xffff6d77, 0x8, 0x2, 0x5e}, 0x1, 0x2, [{0x1, 0x80000000, 0x3, 0x4e, 0x2, 0x3}, {0x3, 0xcd, 0x1, 0x3, 0x1, 0x2}, {0x8, 0x2, 0x6, 0x9, 0x3, 0x4}, {0x9b4f, 0xffffffff, 0x80000001, 0x81, 0x4a, 0x2}, {0x5ba, 0x7, 0x4, 0x609, 0x9c3c, 0x6}]}, [{0xcf4, 0x2, 0x8000000a, 0x8000, 0x324e, 0xf}, {0x4, 0x7, 0x9, 0xc, 0x0, 0x2}, {0x8, 0x0, 0xfffffffc, 0xa, 0x0, 0x8}, {0x7, 0xfff, 0x0, 0xa96, 0x5194, 0x4}, {0x8, 0x200, 0xfff, 0x1000, 0xe, 0x20000005}, {0x401, 0xf0000000, 0x4, 0x7ff, 0x773f, 0x7}, {0x0, 0x81, 0x1, 0x1, 0xea98, 0x8}, {0x1, 0x2, 0x330, 0x81, 0x6776, 0x5}, {0x401, 0x8001, 0x8, 0x4, 0x6, 0x7}, {0x9, 0x3, 0xe, 0x2, 0x2aea, 0x7f}, {0x32f, 0x8, 0xffff, 0x2, 0xfffffff7, 0x2}, {0x2, 0x1, 0xa8, 0x8b, 0x4, 0x8046}, {0x7, 0x6, 0x5, 0xf, 0x83b, 0x9}, {0x6, 0x3, 0xfffffffd, 0x81, 0x9, 0x8}, {0x64e260f6, 0x101, 0x6b9, 0x5, 0x1ff, 0x4}, {0x81, 0x783, 0x8, 0x4, 0x1007, 0x101}, {0x6, 0x10001, 0x4, 0xfffffffe, 0xee8, 0xffff}, {0xfffffffe, 0x9, 0x7fff, 0x7fff, 0x65ee7be2, 0x200}, {0x4, 0x3, 0x3, 0x6, 0x7, 0x3a20}, {0xff, 0x2, 0x9, 0x1, 0x3, 0x6}, {0xffffba2f, 0x4, 0x2, 0xc, 0x7, 0x7}, {0xff, 0x1ff, 0x81, 0x7f, 0x3}, {0x9, 0x5, 0x1, 0x3, 0x5, 0x5}, {0x1, 0xf, 0x9, 0xfffffffa, 0x9, 0xd}, {0xffffff80, 0x5, 0xfffffff2, 0x0, 0x10001, 0x3}, {0x200, 0x8, 0x5ae56f6e, 0xf, 0x9, 0x743}, {0x2, 0xd, 0x4, 0x9, 0x8, 0x9}, {0x0, 0x44, 0x200, 0x2, 0x1, 0xab}, {0x9b, 0x0, 0x5, 0x4, 0xffffff65, 0xfffffeff}, {0x7, 0x2, 0xf3c6, 0x0, 0xffffffff, 0x1}, {0x5, 0x3, 0x8, 0xc, 0x401, 0x3}, {0x7, 0xffffff4c, 0x3, 0x80000000, 0x4, 0x6}, {0x95, 0x8, 0x81, 0x4, 0x81, 0x17}, {0x5, 0x6, 0x2, 0xc, 0x4, 0x1}, {0xfff, 0x8, 0x8, 0x1000, 0x8, 0x2}, {0x9e6, 0x9, 0x663a, 0x4, 0x9, 0x80}, {0x1, 0x55, 0xffffffff, 0x4, 0x1, 0x3}, {0x5, 0x9, 0x9, 0x8, 0x9, 0xffff}, {0x4, 0x9, 0x4, 0x2, 0x5, 0x5}, {0x8, 0xa5, 0xa500, 0xc3, 0xffffffff, 0xe0a6}, {0x8, 0x0, 0x80000000, 0x5, 0x8}, {0x6, 0x7, 0x100}, {0x3, 0xfffffec9, 0x9, 0x200, 0x1, 0x9}, {0xe, 0x14, 0x10, 0x7, 0x97da, 0x5}, {0x7bdfdc63, 0x18, 0x9, 0x2, 0x3, 0xffffffff}, {0xe5, 0x9, 0xffff, 0xb, 0x9, 0x80000000}, {0x1, 0x8, 0x9, 0x40, 0x6, 0x7}, {0xffff, 0xfffffbff, 0x5, 0xffffffce, 0x2, 0x1}, {0x80000000, 0xe, 0x80, 0x9, 0xffff0000, 0x3}, {0x3, 0x9, 0x8, 0x3, 0x5, 0x3}, {0x4, 0xc3, 0x6, 0x0, 0x0, 0x1ff}, {0x9, 0x8, 0x7, 0x7f, 0x6}, {0x10, 0x100, 0xe77, 0xf, 0x8000, 0x3}, {0x9, 0x101, 0x1, 0x6, 0x81, 0x4}, {0x6, 0xfffffffc, 0xffffffa5, 0x7, 0x81, 0x2}, {0xf, 0x4, 0x7, 0x9, 0x7, 0x2}, {0x9, 0xfffff8b9, 0x4b, 0x80}, {0x8, 0x5, 0x10001, 0x2, 0x9, 0x3ff}, {0x3, 0x3, 0x0, 0xa, 0x9db, 0x3f2ec040}, {0xd5, 0xfff, 0x0, 0x1, 0x80000001, 0xba}, {0x800, 0xb, 0xaa4, 0xfffffff7, 0x7f, 0x1}, {0x8, 0x40, 0x9, 0x9, 0x8, 0x3}, {0x3, 0x3, 0x9, 0x0, 0xe2, 0x9}, {0x5, 0x0, 0x0, 0x2, 0x9, 0xc28}, {0x4, 0x1, 0xcdba, 0x52, 0x100, 0x7}, {0x3, 0x3, 0x4bc0, 0x1, 0x1, 0xcd}, {0xc9, 0x0, 0x9, 0x7, 0x5, 0x8}, {0x800, 0x83e, 0x4, 0x8, 0x5, 0x7}, {0x6, 0xfffffff7, 0x4, 0x9, 0x1, 0xffff8000}, {0x6797, 0x1, 0x1, 0x6, 0x4, 0x100}, {0xffffff90, 0x8000, 0x2, 0x4, 0xfffeffff, 0x9}, {0xffffffff, 0x8, 0x8, 0x6, 0x883, 0x5a3}, {0xffff7f27, 0x4, 0x4, 0x4, 0x10000, 0x3a}, {0x5, 0x80, 0xab5a, 0x4, 0x71eb, 0xc}, {0x1ff, 0x8, 0x1, 0x4, 0x1, 0x868}, {0x8ac, 0x8, 0xb, 0xfffffffb, 0xb298, 0x25}, {0x7, 0x4da6, 0x5, 0xf, 0x10001, 0x200}, {0xffff4f8d, 0xffff, 0x8, 0x400, 0x3, 0x100}, {0x401, 0x5a19, 0x0, 0x7, 0x9, 0x7d4}, {0x8, 0x4, 0x6, 0x3ff, 0xc, 0x1}, {0x9, 0x8001, 0x3, 0x3, 0xe, 0x80000000}, {0xd91, 0xf00000, 0x5, 0x70b8, 0x7, 0x9}, {0x8, 0xfffffff9, 0x8, 0x6, 0x22, 0x800}, {0x4, 0xf, 0x2, 0xfe5f, 0xbbd7, 0x5cedae2a}, {0xbc, 0x1, 0x7f, 0x5, 0x8}, {0x0, 0x3, 0x6, 0x9, 0xb, 0x1}, {0xffff6e86, 0x7, 0xff, 0x9, 0xbc, 0x5}, {0x40, 0x80000000, 0x7ff, 0x3ff, 0x1, 0x8}, {0x1, 0x7, 0x0, 0x6, 0xfa, 0x1}, {0x4, 0x80000001, 0x4, 0x8, 0x3, 0x4}, {0x3ff, 0x5464, 0x7, 0x7, 0x3, 0x2a5}, {0x2, 0x1, 0x3, 0x80000001, 0x7, 0x294e}, {0x3, 0x47db, 0x4, 0xfffffffa, 0x8, 0x8}, {0x5, 0x4, 0x7f, 0xf728, 0xfffffff7, 0xda44}, {0xe6c20d9c, 0xb, 0x7, 0x80, 0x100}, {0x2, 0x400, 0x1, 0x2, 0x7fff, 0x6}, {0x2, 0x4, 0x6, 0x6, 0x5, 0x24000}, {0x3, 0x4, 0xce9, 0x1, 0x5, 0x7f}, {0x1, 0xd, 0xffffffff, 0x9c2, 0x0, 0x8001}, {0x6, 0x9, 0x4, 0xb, 0x5, 0x5}, {0x1, 0x4, 0x4, 0x1, 0x2, 0x7fff}, {0x4, 0x6, 0x1, 0x6, 0xfffffffc, 0x3}, {0x5, 0x3, 0xe000, 0x25, 0xe, 0x6}, {0xffffffb1, 0x200, 0x8001, 0x8, 0x5, 0x4b9}, {0x7, 0x8, 0x0, 0xffff0d62, 0xfff, 0x1}, {0x2, 0x7fffffff, 0x5, 0x3, 0xd8, 0x1}, {0x2, 0xc6b6, 0x6, 0x8, 0xaf67, 0x3}, {0x3, 0x437b, 0x33, 0x4, 0x9, 0x1}, {0x10000, 0xa, 0x0, 0xd, 0x3, 0x9}, {0xe0, 0x8, 0x0, 0x4, 0x1, 0x400}, {0x52, 0x1, 0x51f, 0x6, 0x6, 0x1}, {0x1, 0x2, 0x6, 0xffffffff, 0x5, 0x3}, {0x0, 0x6, 0x2, 0x10, 0x101, 0x10}, {0x1, 0xfffffffa, 0x3, 0x8, 0x6, 0x1}, {0x7ff, 0x5, 0x0, 0x8, 0x100}, {0x2, 0x9, 0x10, 0x9, 0x0, 0x1}, {0x440, 0xac, 0xfffffff6, 0x401, 0x2}, {0x1ff, 0xfffffffa, 0xa82, 0x3, 0xa2, 0x9}, {0x8, 0x200, 0xa549, 0x8, 0x0, 0x8}, {0x7ff, 0x7, 0x8, 0x7, 0x1, 0xfffffff1}, {0x0, 0x6b, 0x5, 0x4, 0x0, 0x6}, {0x100, 0x8, 0x3, 0x9, 0x1, 0xfffffffc}, {0xfffffff7, 0x6, 0x7ff, 0xffffffff, 0x1, 0xae6f}, {0x0, 0xfffffffb, 0x5, 0x2, 0x7, 0x3}, {0xe6, 0x1, 0x101, 0x8, 0xfffffffd, 0x200}, {0x101, 0x200, 0x0, 0xfffffff9, 0x4, 0x7}, {0x4, 0x3, 0x9, 0x3c, 0xffff8000, 0x9}, {0xfffeffff, 0xaad, 0x6, 0xffffffff, 0x5a70, 0x2}], [{0x2, 0x1}, {0x3}, {0x1}, {}, {0x0, 0x1}, {0x9, 0x2}, {0x3}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0xecce33a44dd369fb}, {0x7, 0x1}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x1}, {}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3}, {}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0xd7fb2b1493d8002}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x2}, {}, {0x3}, {0xc026685ce908ad1d}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x4}, {0x4}, {0x2, 0x1}, {0x4}, {0x2}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x1, 0x9bc, 0xfffffffffffffffb, 0x600, 0x8}, 0x0, 0x4, [{0x3, 0x4, 0x5, 0xff, 0x7, 0x554}, {0x5, 0x81, 0xd, 0x80, 0xa317, 0xfffffffb}]}, [{0x8, 0x80, 0xfff, 0x7, 0x3, 0x80}, {0x5, 0xe, 0x3e, 0x5, 0xd3, 0x2}, {0xfffffff8, 0x8, 0x36, 0x0, 0x7, 0x3}, {0x9, 0x4, 0x9, 0x1, 0x80000001, 0x9}, {0x33d, 0x9, 0x3, 0x0, 0x4, 0x3}, {0x1, 0x4, 0x6, 0xffffffff, 0x101, 0x4000}, {0x2, 0x8, 0x6, 0x2, 0x100, 0x1}, {0x0, 0x0, 0x6, 0x8, 0x800}, {0x6, 0x3, 0x5, 0x2, 0xa, 0x7}, {0x0, 0xfffffc00, 0x0, 0x7, 0x654000, 0x6}, {0xf74, 0x7ff, 0x3, 0x6, 0x8, 0x7}, {0x7, 0xac45, 0x40, 0x1, 0x8, 0x1000}, {0x0, 0xbc92, 0x9, 0x0, 0x9, 0xfffffffb}, {0x7, 0xfffffffe, 0x8, 0xfffffff9, 0x5b2, 0x484}, {0x6, 0x6, 0x80000000, 0x6, 0x7fffffff}, {0xffff, 0xe, 0x3, 0x3, 0x5, 0x800}, {0x6, 0x401, 0x9, 0x8, 0x3, 0x8e}, {0xffffff46, 0xfffffffc, 0xfff, 0x4, 0x6e, 0x4}, {0xfffffffa, 0x0, 0x0, 0x4, 0x9, 0xbc42}, {0xa, 0x9, 0xfffffffc, 0xfff, 0x1, 0x9}, {0x0, 0xffffffff, 0x5ca7, 0x8, 0x5460, 0x2}, {0x9, 0x0, 0x8, 0x3, 0xfffffff0, 0x1000}, {0x5, 0x0, 0x9640, 0x0, 0x9, 0xe16}, {0x4, 0x0, 0xa5f4, 0x3c000000, 0x3, 0x80000000}, {0x3, 0x169, 0x8, 0x4, 0xaa98, 0x4}, {0x1a3, 0x9, 0x5, 0xff, 0x7, 0x9}, {0xf8, 0x5, 0x401, 0x6, 0x2, 0x9}, {0xc3b, 0x40, 0x5, 0x2, 0x143}, {0x3, 0x2, 0x48e, 0x200, 0x8, 0xfffff9d1}, {0x6, 0x9, 0x1, 0x5, 0x4784, 0x3}, {0x7, 0x32, 0x80, 0x7, 0xa5, 0x9}, {0x7, 0x6, 0x80000001, 0xffffffff, 0x10}, {0x3, 0x6, 0x2, 0x4, 0x0, 0xfffc0000}, {0xfffff800, 0x0, 0x9c, 0x5, 0xf1, 0x5}, {0x6, 0xc2, 0x54, 0xc8, 0x10001}, {0x0, 0x3, 0x0, 0x5, 0x5, 0x7fffffff}, {0x1000, 0xc, 0x200, 0x10, 0x8000}, {0x9, 0x40, 0x8, 0x4, 0xc3, 0x241a}, {0xb, 0x9, 0x5, 0x0, 0x10, 0x2}, {0x2, 0x6, 0x4, 0x0, 0x400, 0x5}, {0x1000, 0x7f, 0xc922, 0x800, 0x9}, {0x3c, 0x2, 0x30000, 0x3607, 0x8, 0x7}, {0xdfda, 0x7ff, 0x0, 0x3, 0x5, 0x97}, {0x7e5, 0x6, 0x7, 0x800, 0x4, 0x9}, {0x988, 0xa, 0x80000001, 0x7fffffff, 0x7fff, 0x9}, {0x8, 0x1000, 0x0, 0x8, 0x0, 0x6}, {0x0, 0x8, 0x8, 0x10b648ed, 0x7, 0x4}, {0xd68d, 0x9, 0x81, 0x5, 0x3, 0xb}, {0xfffffff8, 0x7, 0x9, 0xc, 0xfffff8ff, 0x3}, {0xdece, 0x328, 0x9, 0x1, 0x1b1d0baa, 0x3}, {0x9, 0xfff, 0x4, 0xfffff703, 0x9, 0x401}, {0x2, 0xf, 0xa, 0x63, 0xb, 0x80}, {0xda6b, 0x9, 0x0, 0x8, 0x1, 0x4}, {0x101, 0x8, 0x1, 0x100, 0x7fff, 0x2}, {0x9, 0x1000, 0x80000001, 0x7, 0x3, 0xf}, {0x401, 0x9, 0x193c, 0xffff, 0x0, 0x4}, {0x5, 0x9, 0x10001, 0xfa, 0x2, 0xe}, {0x3, 0xfffffff9, 0x7, 0x3, 0xdcae, 0x7}, {0x9, 0xd62b, 0xb6e, 0x80000000, 0x5, 0x1}, {0xffffff39, 0x1, 0x0, 0x9, 0x80, 0xa}, {0x2, 0x4, 0x200, 0xaa8, 0xe851, 0x3}, {0x9, 0xffff, 0x6, 0x80000001, 0x7fff, 0x100000}, {0x7fff, 0x6, 0x0, 0x8, 0x2, 0x7e8}, {0x4142, 0x3f, 0x1, 0x4bc1, 0x9, 0x9}, {0x5305, 0x8, 0x9, 0x0, 0xffff, 0x80}, {0x6, 0xf, 0x7000, 0x3, 0x80, 0x4}, {0x8, 0x83e, 0x6, 0x10000, 0x4, 0x2}, {0x447c6e08, 0x1, 0x100, 0x4, 0x4, 0xffffffc0}, {0xffff8e41, 0x5, 0x4, 0xad66, 0x1, 0x6}, {0x2, 0x880, 0x8, 0x2, 0x3, 0x5b0}, {0x5, 0x7284cf03, 0x5, 0x40, 0x10000}, {0x10, 0x7, 0xfffffff7, 0x2, 0xb, 0xfffffe00}, {0x1, 0xd80, 0xa8, 0x3e7, 0x6, 0x2}, {0x0, 0x1, 0x8, 0xa716, 0x3, 0x2}, {0x6, 0x4, 0xff, 0x7, 0xb8aa, 0x1}, {0xffffffff, 0x1, 0x4, 0x5, 0x80, 0xbbd}, {0x6, 0x4, 0x0, 0xfffffffd, 0x3, 0x8a2}, {0x101, 0x391, 0x5, 0x2, 0xb2, 0x6}, {0x2, 0x3a4, 0x2, 0x8, 0x7, 0xfff}, {0xab, 0x5, 0x7fff, 0x0, 0x3489, 0xfffffff3}, {0x5, 0x8, 0x1, 0x80000000, 0xc54, 0x2}, {0x1, 0x3, 0xd6a8, 0x0, 0x8, 0x3}, {0x18b, 0x8, 0x9, 0x9, 0x3, 0xfffffffe}, {0x1, 0x3, 0x40, 0x8000, 0x1f43, 0xff}, {0x80, 0x8, 0x174200, 0x1c76c362, 0x0, 0x7}, {0x83, 0x3b8, 0x6, 0x7, 0x7fffffff, 0x3da}, {0x6, 0x2, 0x8, 0x221468e1, 0x1, 0xc}, {0xb, 0xda2d, 0x6, 0x7a, 0x2, 0x9}, {0x1, 0x8, 0x40000, 0x80000001, 0x3, 0x2}, {0x8, 0x10001, 0x80000001, 0x10001, 0x41}, {0x6, 0x7fffffff, 0x292c00, 0x28c, 0xc000, 0xa8}, {0xbeee, 0x6b, 0x0, 0xc, 0x101, 0x9}, {0x0, 0x800, 0x0, 0x1, 0x0, 0x8}, {0xc, 0x80, 0xfffffdb9, 0x4, 0x3ff}, {0x3, 0x8e, 0x7, 0x4, 0x5, 0x38}, {0x9, 0x6, 0x10, 0x0, 0x2b5}, {0x9, 0x7fffffff, 0x0, 0x2, 0x6, 0x40}, {0x1, 0x183, 0x0, 0x9, 0x0, 0x2}, {0x1ff, 0x1b9, 0x9, 0x9, 0xfffffbff, 0x8}, {0x3, 0x0, 0x4, 0x1, 0x3, 0x1000}, {0x8, 0x6, 0x6d34, 0x7, 0x9, 0x574}, {0x6, 0x6, 0x9, 0xfffffff9, 0xff, 0x3}, {0x2, 0x0, 0x0, 0x3ff, 0x2, 0x1}, {0x3, 0x7, 0xfffffff3, 0x7, 0x100, 0x4}, {0x3ff, 0xe, 0x10001, 0x4, 0xd673, 0x7fff}, {0x3, 0x8, 0x1ff, 0x8, 0x10001, 0x939b}, {0x8000, 0x0, 0x6, 0x5, 0x2, 0x6c5e}, {0x2, 0x8, 0x10, 0x4, 0x8, 0xfffffff3}, {0x1, 0x10, 0x7, 0x0, 0x1, 0xa76f}, {0x80000001, 0xf347, 0x0, 0x328, 0x0, 0x8a6}, {0x3, 0xb, 0x4, 0x8, 0x5, 0x290}, {0xd4, 0x1, 0xd6, 0x2, 0xc92e, 0x3c}, {0x9, 0x40, 0x8000, 0x0, 0x7f, 0x4a}, {0x8, 0x9, 0x6, 0x387, 0x9, 0xfffffff7}, {0x9, 0xa, 0x5, 0x6, 0xe, 0x101}, {0x1f0a2285, 0x1ff, 0x8, 0x7, 0x1, 0x8}, {0xbf2, 0x2, 0x2, 0x101, 0x1, 0x7ff}, {0xffff, 0x80, 0xffffffff, 0xfffffff7, 0x4, 0x6}, {0x6, 0xfffffffb, 0x2, 0x1, 0x4}, {0x400, 0x2, 0x4, 0x1, 0x9, 0x8000}, {0x4, 0x5, 0x5937, 0x5, 0x14000}, {0x3, 0xfffffff7, 0x80000000, 0x8, 0x8001, 0x6}, {0x8, 0x10, 0x5, 0x0, 0x7, 0x4800000}, {0x1, 0x200, 0x4, 0x6, 0x7fffffff, 0xd}, {0x7, 0x6, 0x6, 0x1, 0x8, 0x3}, {0xfffff0b8, 0x9f, 0x800, 0x10001, 0x8, 0x7}, {0x8, 0x7f, 0x8, 0x5, 0x6, 0x2}, {0x4d, 0x4, 0x6, 0xff, 0x40000, 0x5}], [{0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x5}, {0x3eba7f6b81f3698b, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x6}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x5}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x5}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2ab6cc8b1a892599}, {0x4, 0x1}, {0x3}, {}, {0x6}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x3}, {0x5}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x845fe0f076b8f618}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x5, 0x866ca4b936d04af0}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x7}]}}, @TCA_PEDIT_KEYS_EX={0x58, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0xd9, 0x6, "d511d1f707692e22902a722aaba08ef392a2f37b2bbbffe6e1c3ba7ff8c131c9fdfa628ec6281c01aa2fd78f8961af035e41a72764cb9f91a8a2fa56382e7ec46689995a86dc8bc4c3fcff86519c886ce1192cd528ebb2a9af4f315e5cacf0d0c20d2bfe2becd4b93157a96399cf8d516e0e75adc2d96060a005cb599498a4afb03255952a4952d70988b183b2582873642383e69bc98771d6f5563feb581a86e7e00d7d7f8be36546efa8f69ac448bfb4c876c9600316f505f449e82590e067aca714efb848c7352f36b027c0ebaa1df0529fb2c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x1, 0x0, {0x8, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xfffffffe}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x2d04}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nfs_export_off, 0x3a}], [{@context={'context', 0x3d, 'unconfined_u'}}], 0x2f}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) lseek(r7, 0xfffffe, 0x2) close(r6) r8 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_GETDRIVER(r8, 0x41045508, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x6}}, 0x20) r9 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) pread64(r9, 0x0, 0x0, 0x0) sendto$unix(r5, &(0x7f0000000240)="65aaeb5005026b946eae04b12b557624a912f04b0a5e2c53b7535e972f67eef8988b457c82bcebe7439ac9e3c495f79b907eded3e5cbd96674b0356253df46f797f24a1fbdbb024f8f069bdca0be81e71a9b4b106ecd562307ee37614a13c603c226c179b2cb3b71e27175036a328ad08a952cf5c4f8dc2bb399ea85706133f5ef31425a1ecf8a8d0842d8df501ae6621c197680e38a5b75bda1ff446e4b5b8f9cc23f47f4daadd41e1c", 0xaa, 0x4004004, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 6.972898856s ago: executing program 0 (id=2347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)="5c64e1f0", 0x4}], 0x1}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf2531000000080001004900000008005200", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) 6.510774112s ago: executing program 0 (id=2348): prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 6.377543663s ago: executing program 3 (id=2349): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10005, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r5, 0x0) shutdown(r5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) userfaultfd(0x801) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r7, 0x4018aee2, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0xd}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002000)={0x1f, 0x0, @any, 0x6, 0x1}, 0xe) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r8, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r8, &(0x7f00000020c0)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) r12 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') preadv2(r12, &(0x7f0000000000)=[{&(0x7f0000000500)=""/247, 0xf7}], 0x1, 0x7e2b, 0x5, 0x1) syz_fuse_handle_req(r12, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0xfffffffffffffff5, 0x6, {0x83, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xf, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r10, r11, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.288675979s ago: executing program 6 (id=2350): r0 = syz_usb_connect(0x0, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0xc9, 0xa0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "2bf224"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x7, 0x719c, 0x2}, {0x6, 0x24, 0x1a, 0x9d5, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x7, 0x1, 0x40, 0x8, 0x3}, @dmm={0x7, 0x24, 0x14, 0xfff8, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x7, 0x6}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xa, 0xe, 0xff, 0x20, 0x6}, 0x1a, &(0x7f0000000100)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x8, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x4, 0x2800}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x3, 0x8}]}, 0x5, [{0x90, &(0x7f0000000180)=@string={0x90, 0x3, "2bde8e3583427d4ca0a289db8d0743a24773be6dcc7b50ed573b9c44575b7908b9e7533bd70826a50000eef45b498473d8cc59e589125c770fc57d48ddb8d320c3156bdab86b0490ef161953e00209d97633c5c42a414fb5a56dc9ee3f8c32b9c443bc9a1156405ae4a92ce37f276770254330b98552dd2b1c3e01fbfb54df5903f98a63ce0ab41d00923c62a63b"}}, {0xf9, &(0x7f00000002c0)=@string={0xf9, 0x3, "7068960d30a48edfa85e3066690bd638cc98a35bff64e479937b0f209bf2c7d9cf0b507f8dea0e8076f4208be4d4277077aee8845a6269d47ea5e2a1d1cb4ba3551947b8228df037aea6fd7fca8cd9ebe88dea0d056ab7222d9fd52cabbf082b64007b16e53a3e1ac939a4a7036c599e98eab6254b25bd02cae45cc058dbe60656d9bde5eb355737514155704f7ff2b59a6787752915dfeb48ef526a866c2d9a5fc1fc29be7dce9e151c6dd0eb02c80f07f2c0818b1498d5192c8391177db4da440d13ec82dfeb09b19c6c32141aa74315328216296a1a87992dff088eb94c6e2ed2f2c95d07c46a5002d31f83eecf6aac7a1ddbfcd6fe"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x436}}, {0x88, &(0x7f0000000440)=@string={0x88, 0x3, "321dbdce4815fad43fc4cd2ee4674ab63709120f341d9f137eaa67cc1e1deb0423725da59cd3c9557f0e0d721fb4925be050d1bd86b2cc9b7d771f1eb783e12282c248eeb52a858e38e6f4ff9164fb017137e2c3943868e1a5c17bb61ada6e52b5a1ff8ebb02a066e654a20e46dfc6aca717329cd39b920cb77106dacb37763b4225a3c50ca7"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x410}}]}) r1 = syz_usb_connect$cdc_ncm(0x1, 0x8e, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0xe, 0x50, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ffcbb0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0xfffa, 0x7}, {0x6, 0x24, 0x1a, 0xe, 0x1}, [@acm={0x4, 0x24, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xe, 0x2}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0xfffd, 0x8, 0x1, 0xdc, 0x3, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1f, 0x4c, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xe, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x60, 0x21, 0x7}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x300, 0xb1, 0x5, 0x40, 0x8, 0x7}, 0x23, &(0x7f0000000800)={0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xf5, "4bc5f40d024207a8e0d860858c915af0"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0xf, 0x2}, @ptm_cap={0x3}]}, 0x8, [{0x85, &(0x7f0000000840)=@string={0x85, 0x3, "25b42f8b5e8c48b31ccdac3cc5905ad4b53aaff32fc81029cd3858d7e8e26deda61e5b0fe53de30061a62e9a963dfc1dcecc7b375a5a6bc11b10b6188eebe2b6a7e19d707e7e5da6c97ad60aa14941dcaf9452dbf1ae9eb042fd7774ccdf61239601c6c453d2518f7b90fe25a5c4eaccf80c1eb963b1afa43e3341a084e7b61f6fc521"}}, {0x90, &(0x7f0000000900)=@string={0x90, 0x3, "af89431f1512058afc86bd0d06c5cd6cf9757c17792f073696bba8a24603aef437ad47ff99d2bdf5fb42ee6893f193699ae689b41d71547e998020f6b46e90152aaf32185e28ad04b4a440c48671fd4478dfc39bf4bef573ffb16de57562605399964aaf57b8f56a038c5c91d8ebbb883c01fc22e18bc88bf3c97a19c68634fc89f48d47e2a58079076361eb27ee"}}, {0x2f, &(0x7f00000009c0)=@string={0x2f, 0x3, "7fcc4d5f07db8caf729fd7eb3c8547b77e22a5d0f2fe1a5406542f796a06edf86ca16ebc247796711a1ee2df91"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x80a}}, {0xa3, &(0x7f0000000a80)=@string={0xa3, 0x3, "b3dbc16d6d190a102c24be251c544527377f144f92f0d07bf671952d151f7ad70df471fa9557a96c83ad774a774464b1151ddaffdacaac94ac2163142bc9c6eb0ead83ae9912057e4d3d19b21c4d9414615fdde65ac0dfdc52ba703855f24328296556936b76e600194fb32efa78634bd8ea567f008a379dbf622215114c1f6e70ebfd9b7b7c2f2314e66ef493c69e473c3369ae7f24d60417d606b3d4d953a866"}}, {0x93, &(0x7f0000000b40)=@string={0x93, 0x3, "934aa2f634284cf9019a91e6a451403498bba9c4a7d28ccac664c8b92e22e6b39e8a6f58223dc4cc586eed69f55934b1ba0559deb9f8cdbb0bf992d9cf31d067523576aaed2bb89de712490a0f55cf73065cd8edf87cead66c6adda2266044b948cb6ea05de453ef5565c3d0fc8ede3b1a56d0a087f87460cb4775f048a9e187eac8b85e635f3c4c702e6014f0f4d3a1c3"}}, {0xb4, &(0x7f0000000c00)=@string={0xb4, 0x3, "cb4616f37cbe0c80dff50f90e33b808fd70bf5c93945696c534c29701ca6c78e1ac8476f2986c3ff0f1fe4d234abbbb3dd06391bb796fa7af5d2236a9b8bc4041bac3b1931c6fc878e95b2422abc85768291da33d86a36b89a86df9a9142299fe2f4b2a1cc6315a82cdf2a979e060c4e6dc25c771f57565bad4986f22c1c5fec306b3b62948c254f3e38c9e8b62dfd424052adc07bd259ce58d218ccfdb31c5cd7e10491dfe0ebad6e39f84dafc44e51b8aa"}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 5.217219941s ago: executing program 1 (id=2351): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0xc, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x5, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x87, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x5, 0xfffffffffffffffd, 0xc595, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000], 0xeeee8000, 0x2010d3}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.047125802s ago: executing program 3 (id=2352): syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x1) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xffffffff) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) (fail_nth: 1) 3.71036813s ago: executing program 0 (id=2353): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a032", 0xb) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(0x0, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006006e6f6e6500120000080008"], 0x58}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000060000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b0073697b000600010002000000080005"], 0xc4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x8, [@enum64={0x1, 0xa, 0x0, 0x13, 0x0, 0x5, [{0x6, 0x9, 0xfffffff8}, {0xe, 0x9, 0x4}, {0xc, 0x0, 0xffffffff}, {0x9, 0x3, 0x7fffffff}, {0x9, 0x6b, 0xdc5c}, {0x3, 0x40, 0x3e4}, {0x3, 0x9, 0x1}, {0x10, 0x1, 0x8}, {0x7, 0xfffffff8, 0x6}, {0x4000b, 0x4, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x4f]}}, 0x0, 0xa4, 0x0, 0x1}, 0x28) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000240)={'pcl711\x00', [0x100, 0x7, 0x1, 0x7, 0x81, 0x1000, 0x0, 0x10001, 0x0, 0xa, 0x0, 0xfffffffc, 0x3, 0xb6ac, 0x9, 0xffffffff, 0x20000006, 0x1ff, 0xfe9, 0x404, 0xa, 0xa, 0x1, 0x9, 0x4, 0x7, 0x80, 0x0, 0x81, 0x7, 0xff]}) 2.203018161s ago: executing program 0 (id=2354): syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) socket(0x1, 0x803, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "7c1afa6b76001fe2156a0a7c8e9c7397"}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) 2.025000337s ago: executing program 5 (id=2355): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r3, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r5, r6, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.024705312s ago: executing program 3 (id=2356): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) creat(&(0x7f0000000200)='./bus\x00', 0x84) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) unshare(0x2040400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r4 = userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000d8a000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x80010, 0xffffffffffffffff, 0x28f43000) read(r4, &(0x7f00000002c0)=""/153, 0x99) ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000662000/0x4000)=nil, 0x4000}, 0x845ab677f2cfd01}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.844387574s ago: executing program 1 (id=2357): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x2}) syz_emit_ethernet(0x30, &(0x7f00000000c0)={@multicast, @multicast, @void, {@arp={0x806, @generic={0x310, 0x88e7, 0x6, 0x0, 0x4, @random="8cb0b77809cc", "", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "eedfdea39ced1dcfb4e78f821f59"}}}}, &(0x7f0000000100)={0x1, 0x4, [0x3bb, 0xcdf, 0xc9d, 0x863]}) fcntl$addseals(r0, 0x409, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = fcntl$getown(r1, 0x9) write$P9_RGETLOCK(r2, &(0x7f0000000180)={0x24, 0x37, 0x1, {0x1, 0x2, 0x4cee7a73, r3, 0x6, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, 0x24) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f00000001c0)=0x6) r4 = signalfd4(r0, &(0x7f0000000200)={[0x8001]}, 0x8, 0x0) read$FUSE(r4, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000002280)) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000023c0), 0x404800, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000002400)={0xaa, 0x4}) r8 = eventfd2(0x1, 0x0) prlimit64(r6, 0x9, &(0x7f0000002440)={0x2, 0x7}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000002480)={0x0, {0x16, 0xffffffffffffffff, 0x5, 0x35a66d3, 0x2c8b448d}}) ioctl$DVB_DEMUX_DMX_QBUF(r4, 0xc0186f3f, &(0x7f00000024c0)={0xfffffffc, 0x40, 0x7f, 0xff, 0x2, 0xfffffff8}) rt_sigprocmask(0x0, &(0x7f0000002500)={[0x6c]}, &(0x7f0000002540), 0x8) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000002580)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8001, 0x2, 0x8, 0x6, 0xa, 0x2}, {0x5, 0xd21, 0x7, 0x3ff, 0xe, 0x10001}], ['\x00', '\x00']}) openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x4000, 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000002700)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000002780)={0x0, 0x45cc, 0x8, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_G_TUNER(r9, 0xc054561d, &(0x7f0000002b80)={0x4, "14a1cdf909ceba0ddf0fc43e39adbdac35ad18d30298ea86df160e9c11b9a33f", 0x4, 0x10, 0x9, 0x7250000, 0x8, 0x3, 0x1f, 0x5}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002c00), 0x48100) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r10, 0xc0a85322, &(0x7f0000002c40)) r11 = syz_usb_connect$uac1(0x1, 0xcc, &(0x7f0000002d00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x79, 0x60, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1c}, [@mixer_unit={0x9, 0x24, 0x4, 0x5, 0xf3, "da709256"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x3, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x8, 0x1, "07a987e72a10"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x8, 0x82, "fdb25170b0653f"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x60, 0x3, 0x6, "c089"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x0, 0x3, {0x7, 0x25, 0x1, 0xc, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x5b7, 0xff, 0x9c}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xa7, 0x3, 0x1, 0x91, "16eee6"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf5, 0x3, 0x80, 0x4, "", "ff0b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0xc7, 0x6, {0x7, 0x25, 0x1, 0x0, 0x3c, 0xd}}}}}}}}]}}, &(0x7f0000002ec0)={0xa, &(0x7f0000002e00)={0xa, 0x6, 0x300, 0x7, 0x9, 0x4, 0x40, 0x4}, 0x15, &(0x7f0000002e40)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0xd89, 0xf00f, 0xa, [0xc000]}]}, 0x1, [{0x2e, &(0x7f0000002e80)=@string={0x2e, 0x3, "8e3f1e00fd5335e86f166112631d46be76a5dc7cfcc2e168c071dc010b08c4a19e1575c732074ac8af91b507"}}]}) syz_usb_control_io$uac1(r11, &(0x7f0000003080)={0x14, &(0x7f0000002f00)={0x40, 0x0, 0x3b, {0x3b, 0x1, "fcee50dca650d65213993c3d81e4ca8707a47e949f349bdb1a31337cee890ce170cab6ee46d63707082e977d7593c86d7267e8e9dfee846349"}}, &(0x7f0000002f80)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "1152485d5d96bfe5192be4852f80026905382d6b9c05c880471a0e751ee385bf0604bbe8fcee170153c5b4d1572c0e5b11080427abb9ea8edfd602c918a992814c2919e82e6ae7b81c33e6f9db0e788b7516e05818d650b0d322aa78d00ef22a78f82f43d7c60762643439ed7b8e17510cb14cdd2848f51cb229bd45b1c89e3af71732f1a933fd4243bd76ce16f1b6d69841f3b3c07728c74eff88e891dd0b7e3768bceb0571ce49e3d7bef029ad2a91f598ffc8ffdf3be75883b284e0705331ed42055c9a81f30c889396a2918b861631eb335653f106a5dbf542"}}}, &(0x7f00000032c0)={0x44, &(0x7f00000030c0)={0x20, 0x17, 0x13, "a032986b03376dc19476a6be93264dcbe3b382"}, &(0x7f0000003100)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003140)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003180)={0x20, 0x81, 0x1, "d5"}, &(0x7f00000031c0)={0x20, 0x82, 0x2, '\t\\'}, &(0x7f0000003200)={0x20, 0x83, 0x1, 'j'}, &(0x7f0000003240)={0x20, 0x84, 0x3, "a5ca0f"}, &(0x7f0000003280)={0x20, 0x85, 0x3, "20c39f"}}) ioctl$F2FS_IOC_COMPRESS_FILE(r8, 0xf518, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000003380)={0x50, 0xffffffffffffffda, r5, {0x7, 0x2d, 0x652, 0x200, 0x28a7, 0x3, 0x6, 0x4, 0x0, 0x0, 0x8, 0xff}}, 0x50) 701.113865ms ago: executing program 0 (id=2358): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)="5c64e1f0", 0x4}], 0x1}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf2531000000080001004900000008005200", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) 673.927508ms ago: executing program 3 (id=2359): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f0000000980)={0x0, 0x11, 0x2, "9504"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0}) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/87, 0x57}, {0x0}], 0x2) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b80)={0x0, 0x11, 0xd0, {0xd0, 0xd, "0530dc47b13be37cc04fe2460eea8cc58df843c818c259af7e71755885dcc70b38cad6263ed48037ede545878c86b94c3319a2319ea8dedc912667685cd856479383154ef9f03b2b735b4015b2cb946984621b7b3681c1bda2d957bad635ce4324018b1e1063921d9d93e9928ce71b9ba817feb76ec954dc1dc67e6559e54e71063a5a756660178ded6279b7a3b9fc3707e4681fbe5f0a0dcad7cd14f9fa5bc119ce78018229e042051195a03c9419d028096b3f5a8f1eac2a37bb95fc8c52ebe105b900e063966515be98b60c06"}}, &(0x7f0000000c80)={0x0, 0x3, 0x37, @string={0x37, 0x3, "e2f1aeda874e60736fff96a27dd8d425289246766c44303f1dbcde35888259a557de062b5f8f01841b0576ae7f6c47655dc510be42"}}, &(0x7f0000000cc0)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x3, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6f6114144c94452861832f0407438687"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x5, 0x9, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0xf, 0xfe, "8ff9d701", "a13a3517"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x1, 0x8, 0x80, 0x3, 0x305e, 0x6}}}, &(0x7f0000001240)={0x84, &(0x7f0000000dc0)={0x0, 0xe, 0x7d, "62228dd50e14905da79ee43652e58c88464c6df93018095438190ff395b69b815f2db9b44b98b142e06a31247af55e4973aa55ee6a68cc17dc6443f4f225aa32cf45a0de2f691f794c387aa0dd2478f002a45462329c5d189c486db5a5702af9d0ab34362bb224b2df0ec7fabdd292976279061c9ed3100734c4a7bd42"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000f40)={0x20, 0x0, 0x8, {0x2, 0x20, [0xf0f0]}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001000)={0x40, 0xb, 0x2, "54ca"}, &(0x7f0000001040)={0x40, 0xf, 0x2}, &(0x7f0000001080)={0x40, 0x13, 0x6}, &(0x7f00000010c0)={0x40, 0x17, 0x6}, &(0x7f0000001100)={0x40, 0x19, 0x2, "decc"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x1d}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0xc}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 142.203077ms ago: executing program 6 (id=2360): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) unshare(0x2e020400) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x3, 0xf98, 0x80, 0x0, 0xd}) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200010800000018280000eecc95e9c4f3b6c3", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf98000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.545671ms ago: executing program 5 (id=2361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a032", 0xb) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(0x0, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006006e6f6e6500120000080008"], 0x58}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 0s ago: executing program 0 (id=2362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000000000000008020900000110005000000000c00090008001100", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() (async) r1 = getpid() r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') ioctl$NS_GET_USERNS(r2, 0x8008b70d, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) removexattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)=@random={'trusted.', 'ns/user\x00'}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) (async) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\xd56&\x97NF\x15^g\xd2R\xfb\x9285p\xcb\xa3\xf1\"\xee\xc7M4\xa3\xd9\xbb\xfd\x9b\x8fx\x8a>u\x96\x00\x94\xfb\x10l\xab\xb0\x954\xfa\x1a7\x8e\xe6\x87E\xae\xc1\xee\xa6\x98\xc1EfB\x0e\x109\x88\xb9\x91\xd9`k+<\x96B\xb3\f\xe6\xead\xdf\xed\x00\x96\x02\xeb\x05\xc6\xf2\xa1k\b\x0e\xc7S:h(z\x88^i6>rQc\xf4`\x11\xa4\x8cc\xc7~\x1d\x1d\xdafJ\xff\xaa\x91\xe7KO\x11\x18\x14\xa8\'\x87\x05\x89@\x97\x10\xb8\x13\xb5\xfdt\xc5\xa8x\xd6\xfa\xc4\xefV\xc6e[\xac\xb0\xc5l\\^Q\xc1?*\x03~\xbc\x88OG\xb9\xd8\x8a\xdaHt\x12\xe7\x13\x81`\xd70\x0f\xb2\xfai\xfaQs\x0e\xc2\x1a!\xb7\xa3\x1d\\]\xa0\xcd\x95\x1a\x00'/210}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\xd56&\x97NF\x15^g\xd2R\xfb\x9285p\xcb\xa3\xf1\"\xee\xc7M4\xa3\xd9\xbb\xfd\x9b\x8fx\x8a>u\x96\x00\x94\xfb\x10l\xab\xb0\x954\xfa\x1a7\x8e\xe6\x87E\xae\xc1\xee\xa6\x98\xc1EfB\x0e\x109\x88\xb9\x91\xd9`k+<\x96B\xb3\f\xe6\xead\xdf\xed\x00\x96\x02\xeb\x05\xc6\xf2\xa1k\b\x0e\xc7S:h(z\x88^i6>rQc\xf4`\x11\xa4\x8cc\xc7~\x1d\x1d\xdafJ\xff\xaa\x91\xe7KO\x11\x18\x14\xa8\'\x87\x05\x89@\x97\x10\xb8\x13\xb5\xfdt\xc5\xa8x\xd6\xfa\xc4\xefV\xc6e[\xac\xb0\xc5l\\^Q\xc1?*\x03~\xbc\x88OG\xb9\xd8\x8a\xdaHt\x12\xe7\x13\x81`\xd70\x0f\xb2\xfai\xfaQs\x0e\xc2\x1a!\xb7\xa3\x1d\\]\xa0\xcd\x95\x1a\x00'/210}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.0.1610'. [ 767.019591][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.020159][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.540050][T11777] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 768.571439][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1624'. [ 770.275452][ T821] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 770.450054][ T821] usb 3-1: Using ep0 maxpacket: 8 [ 770.453299][ T821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 770.457353][ T821] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 770.457377][ T821] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 770.457396][ T821] usb 3-1: Product: syz [ 770.457409][ T821] usb 3-1: Manufacturer: syz [ 770.457422][ T821] usb 3-1: SerialNumber: syz [ 770.683170][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 770.727837][ T821] usb 3-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 770.727863][ T821] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 770.727877][ T821] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 770.932363][ T821] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 770.932444][ T821] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 771.047066][ T821] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 771.106590][ T821] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 771.118636][ T821] usb 3-1: USB disconnect, device number 53 [ 771.265034][ T821] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 771.331765][ T821] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 771.347926][ T821] visor 3-1:1.0: device disconnected [ 771.546910][T11801] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 771.631394][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1632'. [ 772.027354][ T5955] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 772.177412][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 772.184459][ T5955] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 772.184485][ T5955] usb 3-1: config 0 has no interface number 0 [ 772.184551][ T5955] usb 3-1: config 0 interface 83 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 772.184577][ T5955] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8F has invalid maxpacket 1801, setting to 1024 [ 772.186805][ T5955] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 772.186821][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.186832][ T5955] usb 3-1: Product: syz [ 772.186840][ T5955] usb 3-1: Manufacturer: syz [ 772.186847][ T5955] usb 3-1: SerialNumber: syz [ 772.275406][ T5955] usb 3-1: config 0 descriptor?? [ 772.276327][T11819] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 772.301874][ T5955] redrat3 3-1:0.83: Couldn't find all endpoints [ 772.476097][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1637'. [ 772.494792][ T5955] usb 3-1: USB disconnect, device number 54 [ 776.710549][T11855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.710928][T11855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.136512][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1649'. [ 781.437791][T11888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.438148][T11888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.453536][T11888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.455543][T11888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.694640][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 783.137472][T11896] FAULT_INJECTION: forcing a failure. [ 783.137472][T11896] name failslab, interval 1, probability 0, space 0, times 0 [ 783.137508][T11896] CPU: 0 UID: 0 PID: 11896 Comm: syz.0.1660 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 783.137534][T11896] Tainted: [L]=SOFTLOCKUP [ 783.137540][T11896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 783.137550][T11896] Call Trace: [ 783.137557][T11896] [ 783.137564][T11896] dump_stack_lvl+0xe8/0x150 [ 783.137591][T11896] should_fail_ex+0x46b/0x600 [ 783.137616][T11896] should_failslab+0xa8/0x100 [ 783.137640][T11896] kmem_cache_alloc_noprof+0x87/0x680 [ 783.137660][T11896] ? do_getname+0x2e/0x250 [ 783.137688][T11896] do_getname+0x2e/0x250 [ 783.137711][T11896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.137731][T11896] __se_sys_unlinkat+0x4f/0x1a0 [ 783.137755][T11896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.137774][T11896] do_syscall_64+0x15f/0x560 [ 783.137800][T11896] ? clear_bhb_loop+0x40/0x90 [ 783.137822][T11896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.137839][T11896] RIP: 0033:0x7f649363ce59 [ 783.137857][T11896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.137871][T11896] RSP: 002b:00007f649188e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 783.137898][T11896] RAX: ffffffffffffffda RBX: 00007f64938b5fa0 RCX: 00007f649363ce59 [ 783.137911][T11896] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 783.137923][T11896] RBP: 00007f649188e090 R08: 0000000000000000 R09: 0000000000000000 [ 783.137935][T11896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.137947][T11896] R13: 00007f64938b6038 R14: 00007f64938b5fa0 R15: 00007ffd31aa7158 [ 783.137975][T11896] [ 784.992695][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 784.992822][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 785.129460][ T5608] Bluetooth: hci3: unexpected event for opcode 0x007f [ 785.472913][T11906] ceph: No mds server is up or the cluster is laggy [ 786.433799][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 786.433990][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 789.762136][T11956] fuse: fd is not a fuse device [ 792.755596][ T5608] Bluetooth: hci2: unexpected event for opcode 0x007f [ 794.558108][T12002] FAULT_INJECTION: forcing a failure. [ 794.558108][T12002] name failslab, interval 1, probability 0, space 0, times 0 [ 794.558143][T12002] CPU: 1 UID: 0 PID: 12002 Comm: syz.1.1688 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 794.558167][T12002] Tainted: [L]=SOFTLOCKUP [ 794.558173][T12002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.558183][T12002] Call Trace: [ 794.558190][T12002] [ 794.558197][T12002] dump_stack_lvl+0xe8/0x150 [ 794.558226][T12002] should_fail_ex+0x46b/0x600 [ 794.558252][T12002] should_failslab+0xa8/0x100 [ 794.558276][T12002] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 794.558297][T12002] ? __alloc_skb+0x1d0/0x7d0 [ 794.558317][T12002] ? lockdep_hardirqs_on+0x7a/0x110 [ 794.558347][T12002] __alloc_skb+0x1d0/0x7d0 [ 794.558368][T12002] ? netlink_ack_tlv_len+0x6c/0x210 [ 794.558394][T12002] netlink_ack+0x146/0xa50 [ 794.558423][T12002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 794.558444][T12002] ? ref_tracker_free+0x673/0x820 [ 794.558470][T12002] ? __pfx_ref_tracker_free+0x10/0x10 [ 794.558488][T12002] ? __asan_memcpy+0x40/0x70 [ 794.558511][T12002] ? __skb_clone+0x63/0x7a0 [ 794.558543][T12002] netlink_rcv_skb+0x2b6/0x4b0 [ 794.558569][T12002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 794.558592][T12002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 794.558626][T12002] ? netlink_deliver_tap+0x2e/0x1b0 [ 794.558649][T12002] ? netlink_deliver_tap+0x2e/0x1b0 [ 794.558676][T12002] netlink_unicast+0x780/0x920 [ 794.558709][T12002] netlink_sendmsg+0x813/0xb40 [ 794.558742][T12002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.558773][T12002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 794.558796][T12002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.558818][T12002] sock_write_iter+0x4a1/0x4f0 [ 794.558840][T12002] ? __pfx_sock_write_iter+0x10/0x10 [ 794.558880][T12002] vfs_write+0x629/0xba0 [ 794.558909][T12002] ? __pfx_vfs_write+0x10/0x10 [ 794.558939][T12002] ? __fget_files+0x2a/0x420 [ 794.558966][T12002] ksys_write+0x156/0x270 [ 794.558989][T12002] ? __pfx_ksys_write+0x10/0x10 [ 794.559018][T12002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.559039][T12002] do_syscall_64+0x15f/0x560 [ 794.559063][T12002] ? trace_irq_disable+0x3b/0x140 [ 794.559084][T12002] ? clear_bhb_loop+0x40/0x90 [ 794.559106][T12002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.559122][T12002] RIP: 0033:0x7f73938cce59 [ 794.559139][T12002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.559154][T12002] RSP: 002b:00007f7391b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 794.559173][T12002] RAX: ffffffffffffffda RBX: 00007f7393b45fa0 RCX: 00007f73938cce59 [ 794.559185][T12002] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 794.559195][T12002] RBP: 00007f7391b26090 R08: 0000000000000000 R09: 0000000000000000 [ 794.559205][T12002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.559216][T12002] R13: 00007f7393b46038 R14: 00007f7393b45fa0 R15: 00007ffeb541d9f8 [ 794.559245][T12002] [ 794.577428][ T5330] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 794.727372][ T5330] usb 3-1: Using ep0 maxpacket: 16 [ 794.729946][ T5330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 794.729991][ T5330] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 794.730013][ T5330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.735044][ T5330] usb 3-1: config 0 descriptor?? [ 794.923998][ T5608] Bluetooth: hci0: unexpected event for opcode 0x007f [ 795.961571][ T5330] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 795.961605][ T5330] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 795.961628][ T5330] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 795.961650][ T5330] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 795.961673][ T5330] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 795.961697][ T5330] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 795.961722][ T5330] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 795.961747][ T5330] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 795.961772][ T5330] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 795.961797][ T5330] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 795.961823][ T5330] greenasia 0003:0E8F:0012.0009: collection stack underflow [ 795.961844][ T5330] greenasia 0003:0E8F:0012.0009: item 0 0 0 12 parsing failed [ 795.962524][ T5330] greenasia 0003:0E8F:0012.0009: parse failed [ 795.962587][ T5330] greenasia 0003:0E8F:0012.0009: probe with driver greenasia failed with error -22 [ 796.304205][ T5955] usb 3-1: USB disconnect, device number 55 [ 797.071989][T12022] FAULT_INJECTION: forcing a failure. [ 797.071989][T12022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.072025][T12022] CPU: 0 UID: 0 PID: 12022 Comm: syz.1.1693 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 797.072052][T12022] Tainted: [L]=SOFTLOCKUP [ 797.072058][T12022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 797.072069][T12022] Call Trace: [ 797.072076][T12022] [ 797.072084][T12022] dump_stack_lvl+0xe8/0x150 [ 797.072112][T12022] should_fail_ex+0x46b/0x600 [ 797.072138][T12022] _copy_to_user+0x31/0xb0 [ 797.072163][T12022] simple_read_from_buffer+0xe1/0x170 [ 797.072202][T12022] proc_fail_nth_read+0x1be/0x230 [ 797.072224][T12022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 797.072246][T12022] ? rw_verify_area+0x2ac/0x4e0 [ 797.072266][T12022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 797.072287][T12022] vfs_read+0x212/0xa80 [ 797.072315][T12022] ? __pfx_vfs_read+0x10/0x10 [ 797.072338][T12022] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 797.072363][T12022] ? lockdep_hardirqs_on+0x7a/0x110 [ 797.072388][T12022] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 797.072412][T12022] ? mutex_lock_nested+0x152/0x1d0 [ 797.072431][T12022] ? fdget_pos+0x252/0x320 [ 797.072458][T12022] ksys_read+0x156/0x270 [ 797.072481][T12022] ? __pfx_ksys_read+0x10/0x10 [ 797.072510][T12022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.072530][T12022] do_syscall_64+0x15f/0x560 [ 797.072554][T12022] ? trace_irq_disable+0x3b/0x140 [ 797.072575][T12022] ? clear_bhb_loop+0x40/0x90 [ 797.072598][T12022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.072617][T12022] RIP: 0033:0x7f739388d68e [ 797.072634][T12022] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 797.072650][T12022] RSP: 002b:00007f7391b25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 797.072671][T12022] RAX: ffffffffffffffda RBX: 00007f7391b266c0 RCX: 00007f739388d68e [ 797.072685][T12022] RDX: 000000000000000f RSI: 00007f7391b260a0 RDI: 0000000000000004 [ 797.072697][T12022] RBP: 00007f7391b26090 R08: 0000000000000000 R09: 0000000000000000 [ 797.072708][T12022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.072719][T12022] R13: 00007f7393b46038 R14: 00007f7393b45fa0 R15: 00007ffeb541d9f8 [ 797.072751][T12022] [ 798.593889][ T5608] Bluetooth: hci2: unexpected event for opcode 0x007f [ 799.967447][ T5330] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 800.187312][ T5330] usb 2-1: Using ep0 maxpacket: 16 [ 800.189538][ T5330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.189562][ T5330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 800.192208][ T5330] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 800.192235][ T5330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.192255][ T5330] usb 2-1: Product: syz [ 800.192269][ T5330] usb 2-1: Manufacturer: syz [ 800.192283][ T5330] usb 2-1: SerialNumber: syz [ 800.208659][ T5330] usb 2-1: 0:2 : does not exist [ 800.436287][ T5330] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 800.484630][ T5330] usb 2-1: USB disconnect, device number 51 [ 800.485678][T12059] openvswitch: netlink: Flow key attr not present in new flow. [ 800.640056][ T5608] Bluetooth: hci2: unexpected event for opcode 0x007f [ 801.318936][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.808522][ T5955] libceph: connect (1)[c::]:6789 error -101 [ 802.808717][ T5955] libceph: mon0 (1)[c::]:6789 connect error [ 803.067857][ T5330] libceph: connect (1)[c::]:6789 error -101 [ 803.068046][ T5330] libceph: mon0 (1)[c::]:6789 connect error [ 803.792396][T12081] ceph: No mds server is up or the cluster is laggy [ 804.215905][ T5330] libceph: connect (1)[c::]:6789 error -101 [ 804.216103][ T5330] libceph: mon0 (1)[c::]:6789 connect error [ 805.832249][ T5955] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 807.461418][ T5955] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 807.461447][ T5955] usb 3-1: config 0 has no interface number 0 [ 807.461491][ T5955] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 807.461518][ T5955] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 807.472813][ T5955] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 807.472845][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 807.472865][ T5955] usb 3-1: Manufacturer: syz [ 807.472881][ T5955] usb 3-1: SerialNumber: syz [ 807.478556][ T5955] usb 3-1: config 0 descriptor?? [ 808.113603][ T5955] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input28 [ 808.580650][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.580720][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.432503][ T821] usb 3-1: USB disconnect, device number 56 [ 810.474811][T12141] FAULT_INJECTION: forcing a failure. [ 810.474811][T12141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.474846][T12141] CPU: 1 UID: 0 PID: 12141 Comm: syz.4.1720 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 810.474871][T12141] Tainted: [L]=SOFTLOCKUP [ 810.474877][T12141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 810.474888][T12141] Call Trace: [ 810.474895][T12141] [ 810.474903][T12141] dump_stack_lvl+0xe8/0x150 [ 810.474929][T12141] should_fail_ex+0x46b/0x600 [ 810.474954][T12141] _copy_from_user+0x2d/0xb0 [ 810.474977][T12141] do_ipv6_getsockopt+0x2d9/0x2610 [ 810.475007][T12141] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 810.475027][T12141] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 810.475055][T12141] ? __lock_acquire+0x6b5/0x2cf0 [ 810.475082][T12141] ? _parse_integer_limit+0x1ae/0x1f0 [ 810.475114][T12141] ? __lock_acquire+0x6b5/0x2cf0 [ 810.475145][T12141] ? get_pid_task+0x20/0x1f0 [ 810.475173][T12141] ? __lock_acquire+0x6b5/0x2cf0 [ 810.475201][T12141] ? __might_fault+0xaf/0x130 [ 810.475227][T12141] ipv6_getsockopt+0xbd/0x2b0 [ 810.475251][T12141] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 810.475275][T12141] ? sock_common_getsockopt+0x2d/0xb0 [ 810.475296][T12141] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 810.475318][T12141] do_sock_getsockopt+0x51d/0x7e0 [ 810.475348][T12141] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 810.475385][T12141] ? __fget_files+0x3a6/0x420 [ 810.475403][T12141] ? __fget_files+0x2a/0x420 [ 810.475427][T12141] __x64_sys_getsockopt+0x1aa/0x250 [ 810.475457][T12141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.475478][T12141] do_syscall_64+0x15f/0x560 [ 810.475503][T12141] ? trace_irq_disable+0x3b/0x140 [ 810.475524][T12141] ? clear_bhb_loop+0x40/0x90 [ 810.475546][T12141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.475564][T12141] RIP: 0033:0x7f7d8201ce59 [ 810.475582][T12141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.475598][T12141] RSP: 002b:00007f7d8026e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 810.475617][T12141] RAX: ffffffffffffffda RBX: 00007f7d82295fa0 RCX: 00007f7d8201ce59 [ 810.475631][T12141] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 810.475641][T12141] RBP: 00007f7d8026e090 R08: 0000200000000800 R09: 0000000000000000 [ 810.475652][T12141] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 810.475664][T12141] R13: 00007f7d82296038 R14: 00007f7d82295fa0 R15: 00007ffc1cdb54e8 [ 810.475693][T12141] [ 811.879164][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 811.879358][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 812.189560][ T5608] Bluetooth: hci2: unexpected event for opcode 0x007f [ 812.238327][T12145] ceph: No mds server is up or the cluster is laggy [ 812.246757][ T5330] libceph: connect (1)[c::]:6789 error -101 [ 812.246939][ T5330] libceph: mon0 (1)[c::]:6789 connect error [ 813.895632][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 816.354891][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 816.575421][ T2194] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.577871][ T2194] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.577922][ T2194] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.577957][ T2194] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.895133][ T5955] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 818.454732][ T5955] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 818.454942][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.455058][ T5955] usb 2-1: Product: syz [ 818.455210][ T5955] usb 2-1: Manufacturer: syz [ 818.455402][ T5955] usb 2-1: SerialNumber: syz [ 818.845102][ T5955] usb 2-1: config 0 descriptor?? [ 819.323553][ T5955] usb 2-1: Firmware: major: 236, minor: 109, hardware type: UNKNOWN (126) [ 819.522531][ T5955] usb 2-1: no permanent extended address found, random address set [ 819.522671][ T5955] usb 2-1: atusb_probe: initialization failed, error = -524 [ 819.588994][ T5955] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 819.742083][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.742652][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.466223][T12232] dlm: non-version read from control device 0 [ 821.050610][ T5330] usb 2-1: USB disconnect, device number 52 [ 828.198337][ T5608] Bluetooth: hci2: unexpected event for opcode 0x007f [ 832.228161][ T6064] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 833.384085][ T6064] usb 2-1: Using ep0 maxpacket: 32 [ 833.387837][ T6064] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 833.387866][ T6064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.437040][ T6064] usb 2-1: config 0 descriptor?? [ 833.486427][ T6064] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 834.621447][ T6064] gspca_vc032x: reg_r err -110 [ 834.621488][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621498][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621506][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621516][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621524][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621532][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621540][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621548][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621555][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621563][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621571][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621579][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621586][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621593][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621600][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621608][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621617][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621625][ T6064] gspca_vc032x: I2c Bus Busy Wait 00 [ 834.621636][ T6064] gspca_vc032x: Unknown sensor... [ 834.621727][ T6064] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 834.834872][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.848608][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.503604][ T6064] usb 2-1: USB disconnect, device number 53 [ 837.655314][ T5608] Bluetooth: hci1: unexpected event for opcode 0x007f [ 843.246421][T12396] netlink: 'syz.2.1789': attribute type 2 has an invalid length. [ 843.246443][T12396] netlink: 'syz.2.1789': attribute type 2 has an invalid length. [ 843.246456][T12396] netlink: 'syz.2.1789': attribute type 2 has an invalid length. [ 843.246468][T12396] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 843.246481][T12396] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 848.428781][ T5608] Bluetooth: hci3: unexpected event for opcode 0x007f [ 852.206922][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 856.470350][ T5608] Bluetooth: hci1: unexpected event for opcode 0x007f [ 861.504643][T12506] 8021q: VLANs not supported on wg1 [ 866.887026][T12537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1823'. [ 868.432918][ T5608] Bluetooth: hci4: unexpected event for opcode 0x007f [ 870.221600][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.221671][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.777783][ T37] kauditd_printk_skb: 79 callbacks suppressed [ 870.777801][ T37] audit: type=1326 audit(1780228190.448:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12563 comm="syz.3.1831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d150ce59 code=0x7ffc0000 [ 870.777847][ T37] audit: type=1326 audit(1780228190.448:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12563 comm="syz.3.1831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d150ce59 code=0x7ffc0000 [ 870.778055][ T37] audit: type=1326 audit(1780228190.448:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12563 comm="syz.3.1831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d150ce59 code=0x7ffc0000 [ 870.778652][ T37] audit: type=1326 audit(1780228190.448:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12563 comm="syz.3.1831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d150ce59 code=0x7ffc0000 [ 870.778798][ T37] audit: type=1326 audit(1780228190.448:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12563 comm="syz.3.1831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d150ce59 code=0x7ffc0000 [ 870.812422][ T37] audit: type=1326 audit(1780228190.458:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12563 comm="syz.3.1831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f60d150ce59 code=0x7ffc0000 [ 870.812477][ T37] audit: type=1326 audit(1780228190.458:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12563 comm="syz.3.1831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d150ce59 code=0x7ffc0000 [ 870.812519][ T37] audit: type=1326 audit(1780228190.458:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12563 comm="syz.3.1831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d150ce59 code=0x7ffc0000 [ 870.812560][ T37] audit: type=1326 audit(1780228190.458:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12563 comm="syz.3.1831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d150ce59 code=0x7ffc0000 [ 870.812602][ T37] audit: type=1326 audit(1780228190.458:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12563 comm="syz.3.1831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f60d150ce59 code=0x7ffc0000 [ 874.711808][ T5741] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 874.941612][ T5741] usb 3-1: Using ep0 maxpacket: 32 [ 875.358763][ T5741] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 875.358779][ T5741] usb 3-1: config 0 has no interface number 0 [ 875.358805][ T5741] usb 3-1: config 0 interface 83 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 875.358819][ T5741] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8F has invalid maxpacket 1801, setting to 1024 [ 875.362149][ T5741] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 875.362185][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.362208][ T5741] usb 3-1: Product: syz [ 875.362220][ T5741] usb 3-1: Manufacturer: syz [ 875.362234][ T5741] usb 3-1: SerialNumber: syz [ 875.394422][ T5741] usb 3-1: config 0 descriptor?? [ 875.395328][T12585] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 875.425931][ T5741] redrat3 3-1:0.83: Couldn't find all endpoints [ 875.603280][ T5741] usb 3-1: USB disconnect, device number 57 [ 877.206603][ T5608] Bluetooth: hci3: unexpected event for opcode 0x007f [ 877.512217][T12612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.512843][T12612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.519026][T12612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.519611][T12612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.188145][ T5608] Bluetooth: hci0: unexpected event for opcode 0x007f [ 879.652632][ T5731] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 879.939991][ T5731] usb 2-1: Using ep0 maxpacket: 16 [ 880.038506][ T5731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.038535][ T5731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 880.065009][ T5731] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 880.065040][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.065060][ T5731] usb 2-1: Product: syz [ 880.065075][ T5731] usb 2-1: Manufacturer: syz [ 880.065088][ T5731] usb 2-1: SerialNumber: syz [ 880.232225][ T5731] usb 2-1: 0:2 : does not exist [ 881.200657][ T5741] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 881.289192][ T5731] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 881.492663][ T5741] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 881.492691][ T5741] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 881.517611][ T5741] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 881.517643][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.517664][ T5741] usb 3-1: Product: syz [ 881.517679][ T5741] usb 3-1: Manufacturer: syz [ 881.517693][ T5741] usb 3-1: SerialNumber: syz [ 882.675264][ T5741] usb 3-1: config 0 descriptor?? [ 883.293302][ T5741] usb 3-1: can't set config #0, error -71 [ 883.339602][ T5741] usb 3-1: USB disconnect, device number 58 [ 883.546960][ T5731] usb 2-1: USB disconnect, device number 54 [ 884.918599][ T5330] libceph: connect (1)[c::]:6789 error -101 [ 884.918777][ T5330] libceph: mon0 (1)[c::]:6789 connect error [ 885.024698][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.178507][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 885.218760][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 885.288065][ T5731] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 885.461169][T12658] ceph: No mds server is up or the cluster is laggy [ 885.462733][ T5731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.462772][ T5731] usb 2-1: config 0 interface 0 has no altsetting 0 [ 885.466902][ T5731] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 885.466931][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.466951][ T5731] usb 2-1: Product: syz [ 885.466965][ T5731] usb 2-1: Manufacturer: syz [ 885.466978][ T5731] usb 2-1: SerialNumber: syz [ 885.671976][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 886.265474][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 886.265688][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 886.756903][ T5731] usb 2-1: config 0 descriptor?? [ 887.157223][ T5731] usb 2-1: can't set config #0, error -71 [ 887.160672][ T5731] usb 2-1: USB disconnect, device number 55 [ 887.483594][ T5608] Bluetooth: hci0: unexpected event for opcode 0x007f [ 890.570937][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 893.155510][T12718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 893.542552][T12724] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 893.754836][ T5608] Bluetooth: hci4: unexpected event for opcode 0x007f [ 897.203388][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.205706][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.843815][T12779] FAULT_INJECTION: forcing a failure. [ 900.843815][T12779] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 900.843852][T12779] CPU: 0 UID: 0 PID: 12779 Comm: syz.4.1885 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 900.843879][T12779] Tainted: [L]=SOFTLOCKUP [ 900.843886][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 900.843898][T12779] Call Trace: [ 900.843905][T12779] [ 900.843913][T12779] dump_stack_lvl+0xe8/0x150 [ 900.843943][T12779] should_fail_ex+0x46b/0x600 [ 900.843969][T12779] prepare_alloc_pages+0x22a/0x6b0 [ 900.844001][T12779] __alloc_frozen_pages_noprof+0x12f/0x380 [ 900.844029][T12779] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 900.844058][T12779] ? __pfx_policy_nodemask+0x10/0x10 [ 900.844079][T12779] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 900.844101][T12779] ? reacquire_held_locks+0x104/0x190 [ 900.844133][T12779] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 900.844158][T12779] alloc_pages_mpol+0xd1/0x380 [ 900.844185][T12779] alloc_pages_noprof+0xd2/0x2f0 [ 900.844210][T12779] __pmd_alloc+0x3a/0x5e0 [ 900.844237][T12779] handle_mm_fault+0xe90/0x13c0 [ 900.844286][T12779] ? handle_mm_fault+0xe7/0x13c0 [ 900.844313][T12779] ? __pfx_handle_mm_fault+0x10/0x10 [ 900.844353][T12779] ? lock_mm_and_find_vma+0xa7/0x340 [ 900.844381][T12779] do_user_addr_fault+0x75b/0x1340 [ 900.844418][T12779] exc_page_fault+0x6a/0xc0 [ 900.844444][T12779] asm_exc_page_fault+0x26/0x30 [ 900.844462][T12779] RIP: 0010:__get_user_4+0x14/0x20 [ 900.844483][T12779] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 900.844497][T12779] RSP: 0018:ffffc900059d7d68 EFLAGS: 00050287 [ 900.844515][T12779] RAX: 00002000000000c0 RBX: ffffc900059d7dbc RCX: 0000000000000046 [ 900.844527][T12779] RDX: 00007ffffffff000 RSI: ffffffff8d8673e4 RDI: ffffffff8ba759e0 [ 900.844539][T12779] RBP: ffffc900059d7ee0 R08: ffffffff8214147f R09: ffff88802a6d10b0 [ 900.844552][T12779] R10: ffffc900059d7de0 R11: fffff52000b3afbf R12: ffffc900059d7de0 [ 900.844563][T12779] R13: dffffc0000000000 R14: 00002000000000c0 R15: 00002000000000c0 [ 900.844581][T12779] ? __might_fault+0xaf/0x130 [ 900.844614][T12779] cap_validate_magic+0x2c/0x1a0 [ 900.844637][T12779] __se_sys_capset+0xda/0x440 [ 900.844660][T12779] ? __pfx___se_sys_capset+0x10/0x10 [ 900.844684][T12779] ? ksys_write+0x248/0x270 [ 900.844708][T12779] ? __pfx_ksys_write+0x10/0x10 [ 900.844738][T12779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.844758][T12779] do_syscall_64+0x15f/0x560 [ 900.844786][T12779] ? trace_irq_disable+0x3b/0x140 [ 900.844808][T12779] ? clear_bhb_loop+0x40/0x90 [ 900.844831][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.844849][T12779] RIP: 0033:0x7f7d8201ce59 [ 900.844866][T12779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.844882][T12779] RSP: 002b:00007f7d8024d028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 900.844900][T12779] RAX: ffffffffffffffda RBX: 00007f7d82296090 RCX: 00007f7d8201ce59 [ 900.844914][T12779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 900.844925][T12779] RBP: 00007f7d8024d090 R08: 0000000000000000 R09: 0000000000000000 [ 900.844937][T12779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.844948][T12779] R13: 00007f7d82296128 R14: 00007f7d82296090 R15: 00007ffc1cdb54e8 [ 900.844980][T12779] [ 901.763710][T12776] 8021q: VLANs not supported on wg1 [ 902.121423][T12785] devpts: Bad value for 'max' [ 904.059233][ T5608] Bluetooth: hci1: unexpected event for opcode 0x007f [ 909.516877][T12833] 8021q: VLANs not supported on wg1 [ 911.608350][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 911.608546][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 911.927647][T12646] libceph: connect (1)[c::]:6789 error -101 [ 911.927838][T12646] libceph: mon0 (1)[c::]:6789 connect error [ 912.018654][T12841] ceph: No mds server is up or the cluster is laggy [ 917.679736][ T5741] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 917.839099][ T5741] usb 2-1: Using ep0 maxpacket: 32 [ 917.841485][ T5741] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 917.841513][ T5741] usb 2-1: config 0 has no interface number 0 [ 917.841558][ T5741] usb 2-1: config 0 interface 83 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 917.841584][ T5741] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8F has invalid maxpacket 1801, setting to 1024 [ 917.844392][ T5741] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 917.844421][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.844440][ T5741] usb 2-1: Product: syz [ 917.844455][ T5741] usb 2-1: Manufacturer: syz [ 917.844469][ T5741] usb 2-1: SerialNumber: syz [ 917.931076][ T5741] usb 2-1: config 0 descriptor?? [ 917.932148][T12874] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 917.952368][ T5741] redrat3 2-1:0.83: Couldn't find all endpoints [ 918.163718][ T5741] usb 2-1: USB disconnect, device number 56 [ 922.976320][ T5608] Bluetooth: hci3: unexpected event for opcode 0x007f [ 923.203471][ T5741] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 923.365874][ T5741] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 923.365908][ T5741] usb 3-1: config 0 has no interface number 0 [ 923.365951][ T5741] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.365976][ T5741] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.365998][ T5741] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 923.366038][ T5741] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 923.366060][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.383195][ T5741] usb 3-1: config 0 descriptor?? [ 924.990269][ T5741] usbhid 3-1:0.1: can't add hid device: -71 [ 924.990393][ T5741] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 924.998125][ T5741] usb 3-1: USB disconnect, device number 59 [ 926.600785][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.606487][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.625113][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.625445][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.836681][ T5608] Bluetooth: hci1: unexpected event for opcode 0x007f [ 932.220609][T12993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.221441][T12993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.332464][ T9128] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 932.492159][ T9128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.492204][ T9128] usb 2-1: config 0 interface 0 has no altsetting 0 [ 932.495158][ T9128] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 932.495187][ T9128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.495207][ T9128] usb 2-1: Product: syz [ 932.495221][ T9128] usb 2-1: Manufacturer: syz [ 932.495235][ T9128] usb 2-1: SerialNumber: syz [ 932.507660][ T9128] usb 2-1: config 0 descriptor?? [ 932.533315][ T9128] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 932.620833][ T9128] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 932.621783][ T9128] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 932.621841][ T9128] usb 2-1: media controller created [ 932.676774][ T9128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.769254][ T9128] DVB: Unable to find symbol tda10046_attach() [ 932.769272][ T9128] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 932.769287][ T9128] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 932.990176][T12989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.001504][T12989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.510125][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.510194][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.991728][ T9128] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 936.212419][ T9128] usb 2-1: USB disconnect, device number 57 [ 936.446887][T13012] cgroup: Unknown subsys name 'audit' [ 937.453075][ T5608] Bluetooth: hci1: unexpected event for opcode 0x007f [ 938.115696][T13023] comedi: No check for data length of config insn id 5007 is implemented [ 938.115714][T13023] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 938.115727][T13023] comedi: Assuming n=15 is correct [ 938.116711][T13023] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1943'. [ 939.847724][T13032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1945'. [ 942.425133][ T5741] libceph: connect (1)[c::]:6789 error -101 [ 942.425329][ T5741] libceph: mon0 (1)[c::]:6789 connect error [ 942.445399][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 943.390421][T13044] ceph: No mds server is up or the cluster is laggy [ 943.451505][ T5330] libceph: connect (1)[c::]:6789 error -101 [ 943.530600][ T5330] libceph: mon0 (1)[c::]:6789 connect error [ 945.281670][T13066] devpts: Bad value for 'max' [ 946.782408][ T5608] Bluetooth: hci0: unexpected event for opcode 0x007f [ 948.379892][ T5741] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 948.540222][ T5741] usb 3-1: Using ep0 maxpacket: 32 [ 948.543129][ T5741] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 948.543166][ T5741] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 948.543192][ T5741] usb 3-1: config 0 interface 0 has no altsetting 0 [ 948.543226][ T5741] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 948.543249][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.550626][ T5741] usb 3-1: config 0 descriptor?? [ 949.191454][ T5741] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0 [ 949.191494][ T5741] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0 [ 949.191523][ T5741] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0 [ 949.191548][ T5741] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0 [ 949.191574][ T5741] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0 [ 949.191601][ T5741] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0 [ 949.191627][ T5741] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0 [ 949.191653][ T5741] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0 [ 949.191680][ T5741] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0 [ 949.191706][ T5741] megaworld 0003:07B5:0312.000A: unknown main item tag 0x0 [ 949.300705][ T5741] megaworld 0003:07B5:0312.000A: hidraw0: USB HID v0.06 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 949.300743][ T5741] megaworld 0003:07B5:0312.000A: no inputs found [ 949.478136][ T5741] usb 3-1: USB disconnect, device number 60 [ 949.535378][T13089] fido_id[13089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 952.936897][ T5608] Bluetooth: hci2: unexpected event for opcode 0x007f [ 952.998867][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 953.000509][T13125] devpts: Bad value for 'max' [ 954.590955][T13133] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1982'. [ 954.598303][T13133] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1982'. [ 956.298233][T12646] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 956.451957][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.452511][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.479614][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.489640][T12646] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 956.489671][T12646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.489692][T12646] usb 2-1: Product: syz [ 956.489706][T12646] usb 2-1: Manufacturer: syz [ 956.489719][T12646] usb 2-1: SerialNumber: syz [ 956.522963][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.926035][T12646] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 959.926090][T12646] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 959.926983][T12646] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 960.001577][T12646] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 960.027696][T12646] usb 2-1: USB disconnect, device number 58 [ 965.386932][ T5608] Bluetooth: hci2: unexpected event for opcode 0x007f [ 969.543270][T13216] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 969.543290][T13216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.916729][ T821] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 971.090769][ T821] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 971.090799][ T821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 971.094605][ T821] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 971.094633][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.094643][ T821] usb 2-1: Product: syz [ 971.094651][ T821] usb 2-1: Manufacturer: syz [ 971.094659][ T821] usb 2-1: SerialNumber: syz [ 971.119455][ T821] usb 2-1: config 0 descriptor?? [ 971.212113][ T821] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 972.268257][ T5330] usb 2-1: USB disconnect, device number 59 [ 975.237711][ T5608] Bluetooth: hci4: unexpected event for opcode 0x007f [ 978.650581][T13272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.651171][T13272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.777902][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 979.345288][T13276] netlink: 'syz.1.2014': attribute type 4 has an invalid length. [ 979.345311][T13276] netlink: 'syz.1.2014': attribute type 7 has an invalid length. [ 979.345322][T13276] netlink: 'syz.1.2014': attribute type 8 has an invalid length. [ 979.345337][T13276] netlink: 'syz.1.2014': attribute type 7 has an invalid length. [ 979.345350][T13276] netlink: 208720 bytes leftover after parsing attributes in process `syz.1.2014'. [ 980.164967][T13282] FAULT_INJECTION: forcing a failure. [ 980.164967][T13282] name failslab, interval 1, probability 0, space 0, times 0 [ 980.165018][T13282] CPU: 0 UID: 0 PID: 13282 Comm: syz.0.2023 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 980.165044][T13282] Tainted: [L]=SOFTLOCKUP [ 980.165051][T13282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 980.165063][T13282] Call Trace: [ 980.165070][T13282] [ 980.165078][T13282] dump_stack_lvl+0xe8/0x150 [ 980.165107][T13282] should_fail_ex+0x46b/0x600 [ 980.165132][T13282] ? __pfx_sock_alloc_inode+0x10/0x10 [ 980.165153][T13282] should_failslab+0xa8/0x100 [ 980.165177][T13282] ? __pfx_sock_alloc_inode+0x10/0x10 [ 980.165194][T13282] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 980.165216][T13282] ? sock_alloc_inode+0x2c/0x190 [ 980.165240][T13282] ? __pfx_sock_alloc_inode+0x10/0x10 [ 980.165259][T13282] sock_alloc_inode+0x2c/0x190 [ 980.165285][T13282] ? __pfx_sock_alloc_inode+0x10/0x10 [ 980.165304][T13282] alloc_inode+0x6a/0x1b0 [ 980.165329][T13282] __sock_create+0x12d/0x9d0 [ 980.165348][T13282] ? __lock_acquire+0x6b5/0x2cf0 [ 980.165380][T13282] mptcp_subflow_create_socket+0xfb/0x800 [ 980.165411][T13282] ? lockdep_hardirqs_on+0x7a/0x110 [ 980.165437][T13282] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 980.165460][T13282] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 980.165491][T13282] __mptcp_nmpc_sk+0x14e/0x790 [ 980.165509][T13282] ? __local_bh_enable+0x1e1/0x2f0 [ 980.165531][T13282] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 980.165550][T13282] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 980.165570][T13282] ? lockdep_hardirqs_on+0x7a/0x110 [ 980.165599][T13282] mptcp_setsockopt+0xf12/0x3540 [ 980.165630][T13282] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 980.165657][T13282] ? __fget_files+0x2a/0x420 [ 980.165676][T13282] ? sock_common_setsockopt+0x36/0xc0 [ 980.165698][T13282] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 980.165722][T13282] do_sock_setsockopt+0x17c/0x1b0 [ 980.165752][T13282] __x64_sys_setsockopt+0x143/0x1b0 [ 980.165783][T13282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.165804][T13282] do_syscall_64+0x15f/0x560 [ 980.165828][T13282] ? trace_irq_disable+0x3b/0x140 [ 980.165850][T13282] ? clear_bhb_loop+0x40/0x90 [ 980.165872][T13282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.165890][T13282] RIP: 0033:0x7f649363ce59 [ 980.165908][T13282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.165923][T13282] RSP: 002b:00007f649188e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 980.165944][T13282] RAX: ffffffffffffffda RBX: 00007f64938b5fa0 RCX: 00007f649363ce59 [ 980.165959][T13282] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000003 [ 980.165970][T13282] RBP: 00007f649188e090 R08: 0000000000000001 R09: 0000000000000000 [ 980.165981][T13282] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.165994][T13282] R13: 00007f64938b6038 R14: 00007f64938b5fa0 R15: 00007ffd31aa7158 [ 980.166024][T13282] [ 980.166056][T13282] socket: no more sockets [ 982.585249][ T5608] Bluetooth: hci0: unexpected event for opcode 0x007f [ 986.549147][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 987.160055][T13327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.160776][T13327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.193536][T13327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.194614][T13327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.391836][ T5608] Bluetooth: hci2: unexpected event for opcode 0x007f [ 990.064351][T13360] netlink: 'syz.2.2045': attribute type 4 has an invalid length. [ 990.064367][T13360] netlink: 'syz.2.2045': attribute type 7 has an invalid length. [ 990.064374][T13360] netlink: 'syz.2.2045': attribute type 8 has an invalid length. [ 990.064382][T13360] netlink: 'syz.2.2045': attribute type 7 has an invalid length. [ 990.064389][T13360] netlink: 208720 bytes leftover after parsing attributes in process `syz.2.2045'. [ 991.249084][T12646] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 991.604919][T12646] usb 2-1: Using ep0 maxpacket: 16 [ 991.606962][T12646] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.607014][T12646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 991.607053][T12646] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 991.607076][T12646] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.608259][T12646] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 991.608284][T12646] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 991.608305][T12646] usb 2-1: Manufacturer: syz [ 991.807098][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 992.529889][T12646] usb 2-1: config 0 descriptor?? [ 993.607154][T12646] usb 2-1: can't set config #0, error -71 [ 993.693594][T12646] usb 2-1: USB disconnect, device number 60 [ 993.860957][T13374] FAULT_INJECTION: forcing a failure. [ 993.860957][T13374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.860992][T13374] CPU: 1 UID: 0 PID: 13374 Comm: syz.0.2050 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 993.861018][T13374] Tainted: [L]=SOFTLOCKUP [ 993.861025][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 993.861036][T13374] Call Trace: [ 993.861043][T13374] [ 993.861051][T13374] dump_stack_lvl+0xe8/0x150 [ 993.861079][T13374] should_fail_ex+0x46b/0x600 [ 993.861105][T13374] _copy_to_user+0x31/0xb0 [ 993.861130][T13374] simple_read_from_buffer+0xe1/0x170 [ 993.861160][T13374] proc_fail_nth_read+0x1be/0x230 [ 993.861182][T13374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.861205][T13374] ? rw_verify_area+0x2ac/0x4e0 [ 993.861225][T13374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.861246][T13374] vfs_read+0x212/0xa80 [ 993.861275][T13374] ? __pfx_vfs_read+0x10/0x10 [ 993.861298][T13374] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 993.861325][T13374] ? lockdep_hardirqs_on+0x7a/0x110 [ 993.861350][T13374] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 993.861376][T13374] ? mutex_lock_nested+0x152/0x1d0 [ 993.861395][T13374] ? fdget_pos+0x252/0x320 [ 993.861422][T13374] ksys_read+0x156/0x270 [ 993.861445][T13374] ? __pfx_ksys_read+0x10/0x10 [ 993.861474][T13374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.861495][T13374] do_syscall_64+0x15f/0x560 [ 993.861519][T13374] ? trace_irq_disable+0x3b/0x140 [ 993.861548][T13374] ? clear_bhb_loop+0x40/0x90 [ 993.861571][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.861588][T13374] RIP: 0033:0x7f64935fd68e [ 993.861606][T13374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 993.861621][T13374] RSP: 002b:00007f649188dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 993.861640][T13374] RAX: ffffffffffffffda RBX: 00007f649188e6c0 RCX: 00007f64935fd68e [ 993.861654][T13374] RDX: 000000000000000f RSI: 00007f649188e0a0 RDI: 0000000000000003 [ 993.861666][T13374] RBP: 00007f649188e090 R08: 0000000000000000 R09: 0000000000000000 [ 993.861677][T13374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.861688][T13374] R13: 00007f64938b6038 R14: 00007f64938b5fa0 R15: 00007ffd31aa7158 [ 993.861719][T13374] [ 995.370813][ T9128] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 995.562902][ T9128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.562928][ T9128] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 995.562980][ T9128] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 995.563003][ T9128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.605437][ T9128] usb 2-1: config 0 descriptor?? [ 995.639716][ T9128] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 995.639764][ T9128] dvb-usb: bulk message failed: -22 (3/0) [ 995.673535][ T9128] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 995.676809][ T9128] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 995.676875][ T9128] usb 2-1: media controller created [ 995.686089][ T9128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 995.732835][T13387] FAULT_INJECTION: forcing a failure. [ 995.732835][T13387] name failslab, interval 1, probability 0, space 0, times 0 [ 995.732859][T13387] CPU: 0 UID: 0 PID: 13387 Comm: syz.0.2055 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 995.732874][T13387] Tainted: [L]=SOFTLOCKUP [ 995.732878][T13387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 995.732885][T13387] Call Trace: [ 995.732890][T13387] [ 995.732894][T13387] dump_stack_lvl+0xe8/0x150 [ 995.732912][T13387] should_fail_ex+0x46b/0x600 [ 995.732927][T13387] should_failslab+0xa8/0x100 [ 995.732941][T13387] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 995.732953][T13387] ? __alloc_skb+0x1d0/0x7d0 [ 995.732965][T13387] ? lockdep_hardirqs_on+0x7a/0x110 [ 995.732987][T13387] __alloc_skb+0x1d0/0x7d0 [ 995.733002][T13387] netlink_sendmsg+0x5d4/0xb40 [ 995.733021][T13387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 995.733035][T13387] ? unwind_get_return_address+0x4d/0x90 [ 995.733051][T13387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 995.733064][T13387] ____sys_sendmsg+0x94c/0x9c0 [ 995.733082][T13387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 995.733100][T13387] ? import_iovec+0x73/0xa0 [ 995.733114][T13387] ___sys_sendmsg+0x2a5/0x360 [ 995.733127][T13387] ? __lock_acquire+0x6b5/0x2cf0 [ 995.733143][T13387] ? __pfx____sys_sendmsg+0x10/0x10 [ 995.733173][T13387] ? __fget_files+0x2a/0x420 [ 995.733182][T13387] ? __fget_files+0x3a6/0x420 [ 995.733196][T13387] __x64_sys_sendmsg+0x1c3/0x2a0 [ 995.733212][T13387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 995.733231][T13387] ? __pfx_ksys_write+0x10/0x10 [ 995.733247][T13387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.733258][T13387] do_syscall_64+0x15f/0x560 [ 995.733271][T13387] ? trace_irq_disable+0x3b/0x140 [ 995.733284][T13387] ? clear_bhb_loop+0x40/0x90 [ 995.733296][T13387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.733306][T13387] RIP: 0033:0x7f649363ce59 [ 995.733317][T13387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.733335][T13387] RSP: 002b:00007f649188e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 995.733348][T13387] RAX: ffffffffffffffda RBX: 00007f64938b5fa0 RCX: 00007f649363ce59 [ 995.733356][T13387] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 995.733363][T13387] RBP: 00007f649188e090 R08: 0000000000000000 R09: 0000000000000000 [ 995.733370][T13387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.733376][T13387] R13: 00007f64938b6038 R14: 00007f64938b5fa0 R15: 00007ffd31aa7158 [ 995.733392][T13387] [ 995.892437][ T9128] dvb-usb: bulk message failed: -22 (6/0) [ 995.892519][ T9128] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 995.903789][ T9128] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 995.950904][ T9128] dvb-usb: schedule remote query interval to 150 msecs. [ 995.950930][ T9128] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 995.969308][ T9128] usb 2-1: USB disconnect, device number 61 [ 996.496534][ T9128] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 996.924238][T12646] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 997.430654][T13399] netlink: 'syz.3.2058': attribute type 4 has an invalid length. [ 997.430671][T13399] netlink: 'syz.3.2058': attribute type 7 has an invalid length. [ 997.430678][T13399] netlink: 'syz.3.2058': attribute type 8 has an invalid length. [ 997.430687][T13399] netlink: 'syz.3.2058': attribute type 7 has an invalid length. [ 997.430694][T13399] netlink: 208720 bytes leftover after parsing attributes in process `syz.3.2058'. [ 997.463170][T12646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.463210][T12646] usb 3-1: config 0 interface 0 has no altsetting 0 [ 997.465395][T12646] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 997.465426][T12646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.465445][T12646] usb 3-1: Product: syz [ 997.465459][T12646] usb 3-1: Manufacturer: syz [ 997.465474][T12646] usb 3-1: SerialNumber: syz [ 997.470958][T12646] usb 3-1: config 0 descriptor?? [ 997.479688][T12646] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 997.485820][T12646] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 997.487318][T12646] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 997.487371][T12646] usb 3-1: media controller created [ 997.502808][T12646] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 997.588905][T12646] DVB: Unable to find symbol tda10046_attach() [ 997.588916][T12646] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 997.588927][T12646] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 998.883664][T13404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2060'. [ 998.883691][T13404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2060'. [ 999.951827][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.951996][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.083547][T12646] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1000.125382][T12646] usb 3-1: USB disconnect, device number 61 [ 1001.392107][T13414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.392747][T13414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.723187][ T5608] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1004.058822][T13441] netem: change failed [ 1004.361644][T13449] devpts: Bad value for 'max' [ 1011.136759][T13464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2078'. [ 1011.774080][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2078'. [ 1011.825641][T13471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.826375][T13471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.411905][ T5608] Bluetooth: hci2: unexpected event for opcode 0x007f [ 1012.756705][T13488] devpts: Bad value for 'max' [ 1016.320493][T13520] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1016.320522][T13520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1018.041548][T13544] devpts: Bad value for 'max' [ 1018.159780][ T5330] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1018.336132][ T5330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.336175][ T5330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1018.359621][ T5330] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1018.359638][ T5330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.359649][ T5330] usb 3-1: Product: syz [ 1018.359657][ T5330] usb 3-1: Manufacturer: syz [ 1018.359664][ T5330] usb 3-1: SerialNumber: syz [ 1018.365042][T13555] FAULT_INJECTION: forcing a failure. [ 1018.365042][T13555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.365077][T13555] CPU: 0 UID: 0 PID: 13555 Comm: syz.1.2098 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1018.365104][T13555] Tainted: [L]=SOFTLOCKUP [ 1018.365110][T13555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1018.365121][T13555] Call Trace: [ 1018.365128][T13555] [ 1018.365135][T13555] dump_stack_lvl+0xe8/0x150 [ 1018.365161][T13555] should_fail_ex+0x46b/0x600 [ 1018.365188][T13555] strncpy_from_user+0x36/0x2b0 [ 1018.365217][T13555] do_getname+0x77/0x250 [ 1018.365243][T13555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.365264][T13555] __se_sys_mknod+0x24/0x150 [ 1018.365286][T13555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.365306][T13555] do_syscall_64+0x15f/0x560 [ 1018.365331][T13555] ? trace_irq_disable+0x3b/0x140 [ 1018.365353][T13555] ? clear_bhb_loop+0x40/0x90 [ 1018.365376][T13555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.365395][T13555] RIP: 0033:0x7f73938cce59 [ 1018.365413][T13555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.365430][T13555] RSP: 002b:00007f7391b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1018.365450][T13555] RAX: ffffffffffffffda RBX: 00007f7393b45fa0 RCX: 00007f73938cce59 [ 1018.365464][T13555] RDX: 0000000000000006 RSI: 1a46631c92953944 RDI: 0000200000000000 [ 1018.365478][T13555] RBP: 00007f7391b26090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.365491][T13555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.365502][T13555] R13: 00007f7393b46038 R14: 00007f7393b45fa0 R15: 00007ffeb541d9f8 [ 1018.365532][T13555] [ 1018.601013][ T5330] usb 3-1: config 0 descriptor?? [ 1018.628168][ T5330] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1018.646298][ T5330] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1018.647243][ T5330] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1018.648187][ T5330] usb 3-1: media controller created [ 1018.701835][ T5330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1018.821699][ T5330] DVB: Unable to find symbol tda10046_attach() [ 1018.821717][ T5330] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1018.821731][ T5330] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1019.005243][T13562] FAULT_INJECTION: forcing a failure. [ 1019.005243][T13562] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.005276][T13562] CPU: 0 UID: 0 PID: 13562 Comm: syz.1.2099 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1019.005292][T13562] Tainted: [L]=SOFTLOCKUP [ 1019.005296][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1019.005303][T13562] Call Trace: [ 1019.005308][T13562] [ 1019.005313][T13562] dump_stack_lvl+0xe8/0x150 [ 1019.005338][T13562] should_fail_ex+0x46b/0x600 [ 1019.005370][T13562] should_failslab+0xa8/0x100 [ 1019.005396][T13562] __kmalloc_noprof+0xdf/0x7b0 [ 1019.005417][T13562] ? tomoyo_encode+0x28b/0x550 [ 1019.005442][T13562] tomoyo_encode+0x28b/0x550 [ 1019.005458][T13562] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1019.005469][T13562] ? tomoyo_domain+0xd7/0x130 [ 1019.005482][T13562] ? tomoyo_path_number_perm+0x219/0x630 [ 1019.005498][T13562] tomoyo_path_number_perm+0x246/0x630 [ 1019.005525][T13562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1019.005552][T13562] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.005581][T13562] ? do_raw_spin_lock+0x12b/0x2f0 [ 1019.005624][T13562] ? __fget_files+0x2a/0x420 [ 1019.005636][T13562] ? __fget_files+0x2a/0x420 [ 1019.005645][T13562] ? __fget_files+0x3a6/0x420 [ 1019.005654][T13562] ? __fget_files+0x2a/0x420 [ 1019.005666][T13562] security_file_ioctl+0xc3/0x2a0 [ 1019.005695][T13562] __se_sys_ioctl+0x47/0x170 [ 1019.005717][T13562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.005738][T13562] do_syscall_64+0x15f/0x560 [ 1019.005764][T13562] ? trace_irq_disable+0x3b/0x140 [ 1019.005784][T13562] ? clear_bhb_loop+0x40/0x90 [ 1019.005797][T13562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.005807][T13562] RIP: 0033:0x7f73938cce59 [ 1019.005819][T13562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.005828][T13562] RSP: 002b:00007f7391b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.005847][T13562] RAX: ffffffffffffffda RBX: 00007f7393b45fa0 RCX: 00007f73938cce59 [ 1019.005861][T13562] RDX: 0000200000000740 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 1019.005874][T13562] RBP: 00007f7391b26090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.005886][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.005897][T13562] R13: 00007f7393b46038 R14: 00007f7393b45fa0 R15: 00007ffeb541d9f8 [ 1019.005933][T13562] [ 1019.005963][T13562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1019.167211][T13542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.167781][T13542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.852789][ T5330] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1019.875460][ T5330] usb 3-1: USB disconnect, device number 62 [ 1024.996987][T13604] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1024.997020][T13604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1026.441584][ T9128] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1026.603801][ T9128] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1026.603846][ T9128] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1026.606188][ T9128] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1026.606218][ T9128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.606239][ T9128] usb 3-1: Product: syz [ 1026.606254][ T9128] usb 3-1: Manufacturer: syz [ 1026.606268][ T9128] usb 3-1: SerialNumber: syz [ 1026.619667][ T9128] cdc_mbim 3-1:1.0: skipping garbage [ 1027.017950][T13623] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1027.325130][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 1027.439026][T13625] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2113'. [ 1028.008800][ T31] IPVS: starting estimator thread 0... [ 1028.119334][T13626] IPVS: using max 10 ests per chain, 24000 per kthread [ 1028.234612][T13628] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1028.451652][T13613] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1028.454214][ T9128] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1028.454241][ T9128] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 1028.672487][T13631] devpts: Bad value for 'max' [ 1028.815342][ T9128] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 1029.044552][ T9128] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1029.046480][ T9128] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1029.053447][ T9128] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1029.082421][ T9128] usb 3-1: USB disconnect, device number 63 [ 1034.607564][T13666] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1035.134099][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'. [ 1035.756593][ T31] IPVS: starting estimator thread 0... [ 1035.898733][T13677] IPVS: using max 16 ests per chain, 38400 per kthread [ 1036.015757][T13684] netlink: 'syz.4.2128': attribute type 16 has an invalid length. [ 1036.015778][T13684] netlink: 'syz.4.2128': attribute type 17 has an invalid length. [ 1036.017176][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 1036.017192][ T37] audit: type=1326 audit(1780228346.805:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13682 comm="syz.4.2128" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8201ce59 code=0x7ffc0000 [ 1036.017484][ T37] audit: type=1326 audit(1780228346.815:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13682 comm="syz.4.2128" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8201ce59 code=0x7ffc0000 [ 1036.027791][ T37] audit: type=1326 audit(1780228346.815:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13682 comm="syz.4.2128" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7d81fd9b51 code=0x7ffc0000 [ 1036.028123][ T37] audit: type=1326 audit(1780228346.824:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13682 comm="syz.4.2128" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7d8201dc49 code=0x7ffc0000 [ 1036.028866][ T37] audit: type=1326 audit(1780228346.824:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13682 comm="syz.4.2128" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7d81fd9bbb code=0x7ffc0000 [ 1036.029247][ T37] audit: type=1326 audit(1780228346.824:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13682 comm="syz.4.2128" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7d8201ce59 code=0x7ffc0000 [ 1036.707874][T13694] trusted_key: encrypted_key: master key parameter 'ʢaΧi؉LjQ|e.9PHJEO ǭ݇o6 e_YYY:lB_/ꥹR"' is invalid [ 1036.783709][T13695] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1041.362121][T13723] FAULT_INJECTION: forcing a failure. [ 1041.362121][T13723] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.362157][T13723] CPU: 0 UID: 0 PID: 13723 Comm: syz.2.2140 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1041.362184][T13723] Tainted: [L]=SOFTLOCKUP [ 1041.362191][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1041.362203][T13723] Call Trace: [ 1041.362211][T13723] [ 1041.362220][T13723] dump_stack_lvl+0xe8/0x150 [ 1041.362248][T13723] should_fail_ex+0x46b/0x600 [ 1041.362274][T13723] should_failslab+0xa8/0x100 [ 1041.362298][T13723] __kmalloc_noprof+0xdf/0x7b0 [ 1041.362317][T13723] ? kfree+0x4d/0x6c0 [ 1041.362334][T13723] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1041.362366][T13723] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1041.362387][T13723] ? tomoyo_domain+0xd7/0x130 [ 1041.362411][T13723] ? tomoyo_path_number_perm+0x219/0x630 [ 1041.362437][T13723] tomoyo_path_number_perm+0x246/0x630 [ 1041.362464][T13723] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1041.362487][T13723] ? __lock_acquire+0x6b5/0x2cf0 [ 1041.362514][T13723] ? do_raw_spin_lock+0x12b/0x2f0 [ 1041.362566][T13723] ? __fget_files+0x2a/0x420 [ 1041.362594][T13723] ? __fget_files+0x2a/0x420 [ 1041.362611][T13723] ? __fget_files+0x3a6/0x420 [ 1041.362627][T13723] ? __fget_files+0x2a/0x420 [ 1041.362649][T13723] security_file_ioctl+0xc3/0x2a0 [ 1041.362677][T13723] __se_sys_ioctl+0x47/0x170 [ 1041.362699][T13723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.362720][T13723] do_syscall_64+0x15f/0x560 [ 1041.362744][T13723] ? trace_irq_disable+0x3b/0x140 [ 1041.362766][T13723] ? clear_bhb_loop+0x40/0x90 [ 1041.362788][T13723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.362807][T13723] RIP: 0033:0x7f2d4c66ce59 [ 1041.362824][T13723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.362840][T13723] RSP: 002b:00007f2d4a8c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1041.362860][T13723] RAX: ffffffffffffffda RBX: 00007f2d4c8e5fa0 RCX: 00007f2d4c66ce59 [ 1041.362874][T13723] RDX: 0000200000000040 RSI: 0000000080044d08 RDI: 0000000000000003 [ 1041.362887][T13723] RBP: 00007f2d4a8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.362899][T13723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.362911][T13723] R13: 00007f2d4c8e6038 R14: 00007f2d4c8e5fa0 R15: 00007fffa074d6c8 [ 1041.362942][T13723] [ 1041.362950][T13723] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1041.720878][T13728] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1041.720944][T13728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1044.870499][T13745] netlink: 'syz.3.2147': attribute type 4 has an invalid length. [ 1044.870515][T13745] netlink: 'syz.3.2147': attribute type 7 has an invalid length. [ 1044.870522][T13745] netlink: 'syz.3.2147': attribute type 8 has an invalid length. [ 1044.870531][T13745] netlink: 'syz.3.2147': attribute type 7 has an invalid length. [ 1044.870538][T13745] netlink: 208720 bytes leftover after parsing attributes in process `syz.3.2147'. [ 1046.719529][T13758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1046.739083][T13759] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1046.948470][ T1406] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1047.119928][ T5608] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1047.187631][ T1406] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1047.516955][T13766] JFS: charset not found [ 1048.572087][ T5330] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1048.799197][ T5330] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1048.804348][ T5330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1048.804367][ T5330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1048.804378][ T5330] usb 3-1: Product: syz [ 1048.804386][ T5330] usb 3-1: Manufacturer: syz [ 1048.804394][ T5330] usb 3-1: SerialNumber: syz [ 1049.132088][ T5330] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1049.785997][T13780] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1049.786033][T13780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1051.913681][ T6064] usb 3-1: USB disconnect, device number 64 [ 1052.028008][ T6064] usblp0: removed [ 1052.391039][T13789] netlink: 'syz.2.2161': attribute type 4 has an invalid length. [ 1052.391063][T13789] netlink: 'syz.2.2161': attribute type 7 has an invalid length. [ 1052.391076][T13789] netlink: 'syz.2.2161': attribute type 8 has an invalid length. [ 1052.391092][T13789] netlink: 'syz.2.2161': attribute type 7 has an invalid length. [ 1052.391105][T13789] netlink: 208720 bytes leftover after parsing attributes in process `syz.2.2161'. [ 1053.586230][T12646] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1053.876124][T12646] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1053.876153][T12646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.876165][T12646] usb 2-1: Product: syz [ 1053.876172][T12646] usb 2-1: Manufacturer: syz [ 1053.876180][T12646] usb 2-1: SerialNumber: syz [ 1055.484836][T13799] FAULT_INJECTION: forcing a failure. [ 1055.484836][T13799] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.484935][T13799] CPU: 1 UID: 0 PID: 13799 Comm: syz.0.2160 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1055.484963][T13799] Tainted: [L]=SOFTLOCKUP [ 1055.484971][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1055.484983][T13799] Call Trace: [ 1055.484991][T13799] [ 1055.485000][T13799] dump_stack_lvl+0xe8/0x150 [ 1055.485033][T13799] should_fail_ex+0x46b/0x600 [ 1055.485060][T13799] should_failslab+0xa8/0x100 [ 1055.485086][T13799] __kmalloc_noprof+0xdf/0x7b0 [ 1055.485108][T13799] ? percpu_ref_get_many+0x21/0x1e0 [ 1055.485141][T13799] ? io_cache_alloc_new+0x40/0x100 [ 1055.485169][T13799] io_cache_alloc_new+0x40/0x100 [ 1055.485193][T13799] __io_prep_rw+0x2bd/0xed0 [ 1055.485228][T13799] ? __pfx___io_prep_rw+0x10/0x10 [ 1055.485252][T13799] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1055.485287][T13799] io_prep_read+0x33/0x110 [ 1055.485309][T13799] ? blk_start_plug_nr_ios+0x7e/0x1c0 [ 1055.485338][T13799] io_submit_sqes+0xbd3/0x22e0 [ 1055.485392][T13799] __se_sys_io_uring_enter+0x34a/0x1c40 [ 1055.485423][T13799] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1055.485454][T13799] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1055.485479][T13799] ? fput+0xa0/0xd0 [ 1055.485505][T13799] ? ksys_write+0x248/0x270 [ 1055.485529][T13799] ? __pfx_ksys_write+0x10/0x10 [ 1055.485556][T13799] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1055.485581][T13799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.485603][T13799] do_syscall_64+0x15f/0x560 [ 1055.485627][T13799] ? trace_irq_disable+0x3b/0x140 [ 1055.485650][T13799] ? clear_bhb_loop+0x40/0x90 [ 1055.485674][T13799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.485693][T13799] RIP: 0033:0x7f649363ce59 [ 1055.485712][T13799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.485729][T13799] RSP: 002b:00007f649188e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1055.485750][T13799] RAX: ffffffffffffffda RBX: 00007f64938b5fa0 RCX: 00007f649363ce59 [ 1055.485764][T13799] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1055.485777][T13799] RBP: 00007f649188e090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.485789][T13799] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1055.485802][T13799] R13: 00007f64938b6038 R14: 00007f64938b5fa0 R15: 00007ffd31aa7158 [ 1055.485834][T13799] [ 1056.245802][T12646] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1056.245862][T12646] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1056.246778][T12646] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1056.334507][T12646] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1056.377965][T12646] usb 2-1: USB disconnect, device number 62 [ 1056.839328][ T6064] IPVS: starting estimator thread 0... [ 1056.860120][ T5608] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1056.929083][T13815] IPVS: using max 8 ests per chain, 19200 per kthread [ 1057.646510][T12368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.646546][T12368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.471845][T13825] netlink: 'syz.4.2173': attribute type 4 has an invalid length. [ 1059.471883][T13825] netlink: 'syz.4.2173': attribute type 7 has an invalid length. [ 1059.479083][T13825] netlink: 'syz.4.2173': attribute type 8 has an invalid length. [ 1059.479108][T13825] netlink: 'syz.4.2173': attribute type 7 has an invalid length. [ 1059.479122][T13825] netlink: 208720 bytes leftover after parsing attributes in process `syz.4.2173'. [ 1060.065256][T13828] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1060.065289][T13828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1060.404524][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1060.489578][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1060.494400][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1060.536014][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1060.579904][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1060.933378][T12368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.933414][T12368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.562837][T12368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.562861][T12368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.064557][T13853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2179'. [ 1062.993600][ T5605] Bluetooth: hci2: command tx timeout [ 1063.303260][T12368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.303304][T12368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.645992][T13863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2181'. [ 1064.666851][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.666916][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.167765][ T5605] Bluetooth: hci2: command tx timeout [ 1065.286015][ T5330] usb 5-1: USB disconnect, device number 57 [ 1065.324053][T13868] FAULT_INJECTION: forcing a failure. [ 1065.324053][T13868] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.324089][T13868] CPU: 1 UID: 0 PID: 13868 Comm: syz.1.2184 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1065.324115][T13868] Tainted: [L]=SOFTLOCKUP [ 1065.324123][T13868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1065.324134][T13868] Call Trace: [ 1065.324143][T13868] [ 1065.324151][T13868] dump_stack_lvl+0xe8/0x150 [ 1065.324179][T13868] should_fail_ex+0x46b/0x600 [ 1065.324204][T13868] should_failslab+0xa8/0x100 [ 1065.324226][T13868] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1065.324247][T13868] ? __alloc_skb+0x1d0/0x7d0 [ 1065.324267][T13868] ? lockdep_hardirqs_on+0x7a/0x110 [ 1065.324295][T13868] __alloc_skb+0x1d0/0x7d0 [ 1065.324338][T13868] netlink_sendmsg+0x5d4/0xb40 [ 1065.324369][T13868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1065.324393][T13868] ? unwind_get_return_address+0x4d/0x90 [ 1065.324421][T13868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1065.324443][T13868] ____sys_sendmsg+0x94c/0x9c0 [ 1065.324473][T13868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1065.324506][T13868] ? import_iovec+0x73/0xa0 [ 1065.324532][T13868] ___sys_sendmsg+0x2a5/0x360 [ 1065.324555][T13868] ? __lock_acquire+0x6b5/0x2cf0 [ 1065.324581][T13868] ? __pfx____sys_sendmsg+0x10/0x10 [ 1065.324638][T13868] ? __fget_files+0x2a/0x420 [ 1065.324655][T13868] ? __fget_files+0x3a6/0x420 [ 1065.324682][T13868] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1065.324710][T13868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1065.324744][T13868] ? __pfx_ksys_write+0x10/0x10 [ 1065.324774][T13868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.324795][T13868] do_syscall_64+0x15f/0x560 [ 1065.324819][T13868] ? trace_irq_disable+0x3b/0x140 [ 1065.324841][T13868] ? clear_bhb_loop+0x40/0x90 [ 1065.324864][T13868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.324882][T13868] RIP: 0033:0x7f73938cce59 [ 1065.324900][T13868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.324917][T13868] RSP: 002b:00007f7391b26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1065.324937][T13868] RAX: ffffffffffffffda RBX: 00007f7393b45fa0 RCX: 00007f73938cce59 [ 1065.324952][T13868] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1065.324965][T13868] RBP: 00007f7391b26090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.324977][T13868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.324988][T13868] R13: 00007f7393b46038 R14: 00007f7393b45fa0 R15: 00007ffeb541d9f8 [ 1065.325018][T13868] [ 1065.784578][T13872] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1065.784612][T13872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1066.165210][T13880] FAULT_INJECTION: forcing a failure. [ 1066.165210][T13880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.165246][T13880] CPU: 0 UID: 0 PID: 13880 Comm: syz.1.2186 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1066.165272][T13880] Tainted: [L]=SOFTLOCKUP [ 1066.165278][T13880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1066.165289][T13880] Call Trace: [ 1066.165297][T13880] [ 1066.165305][T13880] dump_stack_lvl+0xe8/0x150 [ 1066.165332][T13880] should_fail_ex+0x46b/0x600 [ 1066.165353][T13880] _copy_from_user+0x2d/0xb0 [ 1066.165374][T13880] ucma_write+0x166/0x2f0 [ 1066.165397][T13880] ? __pfx_ucma_write+0x10/0x10 [ 1066.165421][T13880] ? rw_verify_area+0x25b/0x4e0 [ 1066.165446][T13880] vfs_writev+0x4c6/0x9a0 [ 1066.165469][T13880] ? __pfx_ucma_write+0x10/0x10 [ 1066.165492][T13880] ? __pfx_vfs_writev+0x10/0x10 [ 1066.165529][T13880] ? __fget_files+0x2a/0x420 [ 1066.165550][T13880] ? __fget_files+0x3a6/0x420 [ 1066.165566][T13880] ? __fget_files+0x2a/0x420 [ 1066.165591][T13880] do_writev+0x15a/0x2e0 [ 1066.165616][T13880] ? __pfx_do_writev+0x10/0x10 [ 1066.165643][T13880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.165664][T13880] do_syscall_64+0x15f/0x560 [ 1066.165688][T13880] ? trace_irq_disable+0x3b/0x140 [ 1066.165711][T13880] ? clear_bhb_loop+0x40/0x90 [ 1066.165733][T13880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.165750][T13880] RIP: 0033:0x7f73938cce59 [ 1066.165769][T13880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.165785][T13880] RSP: 002b:00007f7391b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1066.165805][T13880] RAX: ffffffffffffffda RBX: 00007f7393b45fa0 RCX: 00007f73938cce59 [ 1066.165818][T13880] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000a [ 1066.165830][T13880] RBP: 00007f7391b26090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.165841][T13880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.165852][T13880] R13: 00007f7393b46038 R14: 00007f7393b45fa0 R15: 00007ffeb541d9f8 [ 1066.165881][T13880] [ 1066.476242][T13829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.476361][T13829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.476602][T13829] bridge_slave_0: entered allmulticast mode [ 1066.484298][T13829] bridge_slave_0: entered promiscuous mode [ 1066.583058][T13829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.585976][T13829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.586713][T13829] bridge_slave_1: entered allmulticast mode [ 1066.603610][T13829] bridge_slave_1: entered promiscuous mode [ 1066.987446][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1067.033902][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1067.037585][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1067.072560][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1067.075510][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1067.168443][T12646] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1067.363257][T12646] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1067.364467][T12646] usb 2-1: config 2 has an invalid interface number: 101 but max is 0 [ 1067.364492][T12646] usb 2-1: config 2 has no interface number 0 [ 1067.364524][T12646] usb 2-1: config 2 interface 101 has no altsetting 0 [ 1067.366520][T13829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.366872][T12646] usb 2-1: New USB device found, idVendor=05ac, idProduct=0276, bcdDevice=27.4c [ 1067.366898][T12646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.366917][T12646] usb 2-1: Product: syz [ 1067.366931][T12646] usb 2-1: Manufacturer: syz [ 1067.366945][T12646] usb 2-1: SerialNumber: syz [ 1067.401128][ T5605] Bluetooth: hci2: command tx timeout [ 1067.417848][T13829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.241238][T12646] usbhid 2-1:2.101: couldn't find an input interrupt endpoint [ 1068.268389][T12646] usb 2-1: USB disconnect, device number 63 [ 1068.502158][T12368] bridge_slave_1: left allmulticast mode [ 1068.502194][T12368] bridge_slave_1: left promiscuous mode [ 1068.502445][T12368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.847182][T12368] bridge_slave_0: left allmulticast mode [ 1068.847218][T12368] bridge_slave_0: left promiscuous mode [ 1068.847483][T12368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.955107][T13918] netlink: 'syz.3.2192': attribute type 10 has an invalid length. [ 1069.281994][ T5605] Bluetooth: hci4: command tx timeout [ 1069.564686][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2194'. [ 1069.614511][ T5605] Bluetooth: hci2: command tx timeout [ 1070.067367][T13925] random: crng reseeded on system resumption [ 1071.185264][T12368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.259554][T12368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.313741][T12368] bond0 (unregistering): Released all slaves [ 1071.399050][T13829] team0: Port device team_slave_0 added [ 1071.410167][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 1071.496852][ T5605] Bluetooth: hci4: command tx timeout [ 1071.798394][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1071.836528][T13918] syz_tun: entered promiscuous mode [ 1071.851886][T13918] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1071.884698][T13829] team0: Port device team_slave_1 added [ 1072.269447][T12368] tipc: Left network mode [ 1072.382434][T13829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.382451][T13829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.382479][T13829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.446350][T13829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.446368][T13829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.446395][T13829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.717992][T13941] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1072.718025][T13941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.794409][T12368] IPVS: stopping master sync thread 8606 ... [ 1073.000306][T13829] hsr_slave_0: entered promiscuous mode [ 1073.002440][T13829] hsr_slave_1: entered promiscuous mode [ 1073.716731][ T5605] Bluetooth: hci4: command tx timeout [ 1074.501955][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1075.399979][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'. [ 1075.402169][T13981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2206'. [ 1076.054672][ T5605] Bluetooth: hci4: command tx timeout [ 1076.247364][T13986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.684345][ T37] audit: type=1326 audit(1780228384.864:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13988 comm="syz.3.2208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60d150ce59 code=0x0 [ 1077.304303][T14004] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1077.304336][T14004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.479917][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1078.895466][T14025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1079.104317][T14028] geneve2: entered promiscuous mode [ 1080.064043][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'. [ 1080.090773][T14037] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2216'. [ 1080.494506][T12368] hsr_slave_0: left promiscuous mode [ 1080.815454][T12368] hsr_slave_1: left promiscuous mode [ 1080.819101][T12368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.819131][T12368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.857970][T12368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.857999][T12368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.621700][T12368] veth1_macvtap: left promiscuous mode [ 1081.639237][T12368] veth0_macvtap: left promiscuous mode [ 1081.639594][T12368] veth1_vlan: left promiscuous mode [ 1081.639773][T12368] veth0_vlan: left promiscuous mode [ 1082.184843][T14048] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1082.184870][T14048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1083.768054][T12368] team0 (unregistering): Port device team_slave_1 removed [ 1083.853993][T14066] fuse: fd is not a fuse device [ 1083.870470][T12368] team0 (unregistering): Port device team_slave_0 removed [ 1084.429922][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.530115][T14074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.534454][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.182409][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2226'. [ 1085.235825][T14078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2226'. [ 1085.896764][T12646] IPVS: starting estimator thread 0... [ 1085.984297][T14079] IPVS: using max 12 ests per chain, 28800 per kthread [ 1086.015424][T13885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.015535][T13885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.015671][T13885] bridge_slave_0: entered allmulticast mode [ 1086.037952][T13885] bridge_slave_0: entered promiscuous mode [ 1086.056662][T13885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.056782][T13885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.057025][T13885] bridge_slave_1: entered allmulticast mode [ 1086.101128][T13885] bridge_slave_1: entered promiscuous mode [ 1086.173072][T13829] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1086.190860][T13829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1086.265853][T13829] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1086.337499][T13829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1086.415758][T13829] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1086.440753][T13829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1086.453611][T13885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.473131][T13829] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1086.612428][T13829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1086.640737][T13885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.755260][T13885] team0: Port device team_slave_0 added [ 1086.763962][T13885] team0: Port device team_slave_1 added [ 1086.931482][T13885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.931493][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.931509][T13885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.983279][T13885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.983290][T13885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.983306][T13885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.655459][T14107] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1087.655495][T14107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1088.126873][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1088.274442][T13885] hsr_slave_0: entered promiscuous mode [ 1088.275734][T13885] hsr_slave_1: entered promiscuous mode [ 1088.276628][T13885] debugfs: 'hsr0' already exists in 'hsr' [ 1088.276652][T13885] Cannot create hsr debugfs directory [ 1088.547051][T12368] IPVS: stop unused estimator thread 0... [ 1088.801896][T14130] fuse: Bad value for 'rootmode' [ 1088.889913][T13829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.949961][T13829] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.094418][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.094616][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.465424][T12368] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.579310][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.579442][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.782556][T13885] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1089.845548][T13885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1089.861770][T13885] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1089.890332][T13885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1090.302036][T12368] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.435008][T13885] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1090.532642][T13885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1090.549012][T13885] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1090.560308][T14149] FAULT_INJECTION: forcing a failure. [ 1090.560308][T14149] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1090.560344][T14149] CPU: 1 UID: 0 PID: 14149 Comm: syz.0.2238 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1090.560372][T14149] Tainted: [L]=SOFTLOCKUP [ 1090.560379][T14149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1090.560391][T14149] Call Trace: [ 1090.560398][T14149] [ 1090.560406][T14149] dump_stack_lvl+0xe8/0x150 [ 1090.560446][T14149] should_fail_ex+0x46b/0x600 [ 1090.560473][T14149] prepare_alloc_pages+0x22a/0x6b0 [ 1090.560505][T14149] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1090.560531][T14149] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1090.560571][T14149] __alloc_pages_noprof+0x10/0x100 [ 1090.560596][T14149] alloc_pages_bulk_noprof+0x6c0/0x8c0 [ 1090.560620][T14149] ? copy_splice_read+0x16f/0xab0 [ 1090.560633][T14149] copy_splice_read+0x19f/0xab0 [ 1090.560645][T14149] ? _parse_integer_limit+0x1ae/0x1f0 [ 1090.560677][T14149] ? __pfx_copy_splice_read+0x10/0x10 [ 1090.560704][T14149] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1090.560729][T14149] ? lockdep_hardirqs_on+0x7a/0x110 [ 1090.560754][T14149] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1090.560778][T14149] ? sock_splice_read+0xcd/0x100 [ 1090.560803][T14149] splice_file_to_pipe+0x452/0x6c0 [ 1090.560834][T14149] do_splice+0x1187/0x1940 [ 1090.560876][T14149] ? __pfx_do_splice+0x10/0x10 [ 1090.560904][T14149] __se_sys_splice+0x353/0x490 [ 1090.560929][T14149] ? __pfx___se_sys_splice+0x10/0x10 [ 1090.560953][T14149] ? __x64_sys_splice+0x21/0xf0 [ 1090.560972][T14149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.560992][T14149] do_syscall_64+0x15f/0x560 [ 1090.561016][T14149] ? trace_irq_disable+0x3b/0x140 [ 1090.561038][T14149] ? clear_bhb_loop+0x40/0x90 [ 1090.561060][T14149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.561078][T14149] RIP: 0033:0x7f649363ce59 [ 1090.561097][T14149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.561112][T14149] RSP: 002b:00007f649188e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1090.561132][T14149] RAX: ffffffffffffffda RBX: 00007f64938b5fa0 RCX: 00007f649363ce59 [ 1090.561146][T14149] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1090.561157][T14149] RBP: 00007f649188e090 R08: 0000000000000f3a R09: 0000000000000000 [ 1090.561170][T14149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.561181][T14149] R13: 00007f64938b6038 R14: 00007f64938b5fa0 R15: 00007ffd31aa7158 [ 1090.561210][T14149] [ 1090.688426][T13885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1090.897102][ T5605] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1091.438013][T12368] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.690477][T12368] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.841391][T14175] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 1093.374328][ T5605] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 1093.393180][T13885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.491927][T14184] fuse: Bad value for 'rootmode' [ 1093.596097][T13885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.618458][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.618592][ T8531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.840935][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.841061][ T8531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.458666][T12368] bridge_slave_0: left allmulticast mode [ 1094.458691][T12368] bridge_slave_0: left promiscuous mode [ 1094.465830][T12368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.441595][ T5741] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1095.638607][ T5741] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1095.638634][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.638645][ T5741] usb 2-1: Product: syz [ 1095.638653][ T5741] usb 2-1: Manufacturer: syz [ 1095.638660][ T5741] usb 2-1: SerialNumber: syz [ 1096.555656][T12368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.856899][T12368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.904355][T12368] bond0 (unregistering): Released all slaves [ 1096.974085][T12368] bond1 (unregistering): Released all slaves [ 1097.161869][T12368] bond2 (unregistering): Released all slaves [ 1097.866723][ T5741] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1097.866780][ T5741] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1097.918529][T13829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.005298][ T5741] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1098.142929][ T5741] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1098.219228][ T5741] usb 2-1: USB disconnect, device number 64 [ 1098.258886][T14230] FAULT_INJECTION: forcing a failure. [ 1098.258886][T14230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.258918][T14230] CPU: 1 UID: 0 PID: 14230 Comm: syz.0.2253 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1098.258941][T14230] Tainted: [L]=SOFTLOCKUP [ 1098.258947][T14230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1098.258957][T14230] Call Trace: [ 1098.258963][T14230] [ 1098.258970][T14230] dump_stack_lvl+0xe8/0x150 [ 1098.258995][T14230] should_fail_ex+0x46b/0x600 [ 1098.259017][T14230] _copy_from_user+0x2d/0xb0 [ 1098.259036][T14230] memdup_user+0x5e/0xd0 [ 1098.259051][T14230] strndup_user+0x68/0xd0 [ 1098.259066][T14230] __se_sys_mount+0x9d/0x420 [ 1098.259089][T14230] ? ksys_write+0x248/0x270 [ 1098.259108][T14230] ? __pfx___se_sys_mount+0x10/0x10 [ 1098.259135][T14230] ? __x64_sys_mount+0x20/0xc0 [ 1098.259155][T14230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.259176][T14230] do_syscall_64+0x15f/0x560 [ 1098.259197][T14230] ? trace_irq_disable+0x3b/0x140 [ 1098.259216][T14230] ? clear_bhb_loop+0x40/0x90 [ 1098.259234][T14230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.259249][T14230] RIP: 0033:0x7f649363ce59 [ 1098.259264][T14230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.259278][T14230] RSP: 002b:00007f649188e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1098.259295][T14230] RAX: ffffffffffffffda RBX: 00007f64938b5fa0 RCX: 00007f649363ce59 [ 1098.259306][T14230] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1098.259317][T14230] RBP: 00007f649188e090 R08: 0000200000000040 R09: 0000000000000000 [ 1098.259327][T14230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.259337][T14230] R13: 00007f64938b6038 R14: 00007f64938b5fa0 R15: 00007ffd31aa7158 [ 1098.259361][T14230] [ 1098.829385][T14236] fuse: Unknown parameter 'use00000000000000000000' [ 1100.062560][T13829] veth0_vlan: entered promiscuous mode [ 1100.781964][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1100.998640][T13829] veth1_vlan: entered promiscuous mode [ 1101.188144][T13885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.670338][T13829] veth0_macvtap: entered promiscuous mode [ 1102.717867][T13829] veth1_macvtap: entered promiscuous mode [ 1102.928753][T12368] hsr_slave_0: left promiscuous mode [ 1102.965026][T12368] hsr_slave_1: left promiscuous mode [ 1102.970198][T12368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.970226][T12368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.011421][T12368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.011456][T12368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.131173][T12368] veth1_macvtap: left promiscuous mode [ 1104.131287][T12368] veth0_macvtap: left promiscuous mode [ 1104.131527][T12368] veth1_vlan: left promiscuous mode [ 1104.131695][T12368] veth0_vlan: left promiscuous mode [ 1104.692478][T14323] fuse: Unknown parameter 'use00000000000000000000' [ 1105.371333][T12368] team0 (unregistering): Port device team_slave_1 removed [ 1105.437878][T12368] team0 (unregistering): Port device team_slave_0 removed [ 1105.617337][ T91] smbdirect: ib_dev[syz1] removed [ 1105.869331][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1105.934114][ T5730] infiniband syz1: ib_query_port failed (-19) [ 1106.073534][T13829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.161194][T13829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.171916][ T9128] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1106.272204][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.341811][ T9128] usb 2-1: Using ep0 maxpacket: 32 [ 1106.470040][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.472908][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.473924][T13885] veth0_vlan: entered promiscuous mode [ 1106.475434][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.989832][T13885] veth1_vlan: entered promiscuous mode [ 1107.013814][ T9128] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 1107.013844][ T9128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.013864][ T9128] usb 2-1: config 0 has no interface number 0 [ 1107.013914][ T9128] usb 2-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1107.128083][ T9128] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1107.128113][ T9128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.128124][ T9128] usb 2-1: Product: syz [ 1107.128132][ T9128] usb 2-1: Manufacturer: syz [ 1107.128140][ T9128] usb 2-1: SerialNumber: syz [ 1107.221914][ T9128] usb 2-1: config 0 descriptor?? [ 1107.387879][ T9128] redrat3 2-1:0.83: Couldn't find all endpoints [ 1107.626449][T12646] usb 2-1: USB disconnect, device number 65 [ 1108.897277][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.897300][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.074024][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1109.093406][T13885] veth0_macvtap: entered promiscuous mode [ 1109.280442][T13885] veth1_macvtap: entered promiscuous mode [ 1109.336081][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.336102][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.577261][T13885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.594526][T13885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.695276][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.696930][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.699783][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.731423][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.894140][T12368] IPVS: stop unused estimator thread 0... [ 1112.499800][ T1354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.499822][ T1354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.970661][ T8531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.970683][ T8531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.405232][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1113.943770][ T5605] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1121.449738][ T5605] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1123.596905][T14523] trusted_key: encrypted_key: keylen parameter is missing [ 1128.688834][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2302'. [ 1129.348176][ T9128] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1129.551260][ T9128] usb 2-1: Using ep0 maxpacket: 16 [ 1129.553720][ T9128] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1129.553770][ T9128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1129.558562][ T9128] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1129.558592][ T9128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.558613][ T9128] usb 2-1: Product: syz [ 1129.558628][ T9128] usb 2-1: Manufacturer: syz [ 1129.558642][ T9128] usb 2-1: SerialNumber: syz [ 1129.654959][ T9128] usb 2-1: config 0 descriptor?? [ 1129.679904][ T9128] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1129.679940][ T9128] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1130.318287][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1130.318443][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1130.539628][T14600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.544049][T14600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.423344][ T9128] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1131.423847][ T9128] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1131.424319][ T9128] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1131.424337][ T9128] em28xx 2-1:0.0: No AC97 audio processor [ 1132.080147][T14607] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2315'. [ 1132.516369][T14361] usb 2-1: USB disconnect, device number 66 [ 1132.518005][ T9128] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1132.553343][T14361] em28xx 2-1:0.0: Disconnecting em28xx [ 1132.646364][T14361] em28xx 2-1:0.0: Freeing device [ 1132.673856][ T9128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.673884][ T9128] usb 6-1: config 0 has no interfaces? [ 1132.676026][ T9128] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1132.676045][ T9128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.676056][ T9128] usb 6-1: Product: syz [ 1132.676064][ T9128] usb 6-1: Manufacturer: syz [ 1132.676071][ T9128] usb 6-1: SerialNumber: syz [ 1132.744989][ T9128] usb 6-1: config 0 descriptor?? [ 1134.131549][T14629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2320'. [ 1134.395485][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'. [ 1134.417847][T14639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2322'. [ 1134.417945][T14639] netem: invalid attributes len -8 [ 1134.417957][T14639] netem: change failed [ 1134.744271][ T37] audit: type=1326 audit(1780228439.197:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.0.2326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649363ce59 code=0x7ffc0000 [ 1134.745216][ T37] audit: type=1326 audit(1780228439.197:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.0.2326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649363ce59 code=0x7ffc0000 [ 1134.745500][ T37] audit: type=1326 audit(1780228439.206:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.0.2326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f649363ce59 code=0x7ffc0000 [ 1134.745727][ T37] audit: type=1326 audit(1780228439.206:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.0.2326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649363ce59 code=0x7ffc0000 [ 1134.745981][ T37] audit: type=1326 audit(1780228439.206:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.0.2326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649363ce59 code=0x7ffc0000 [ 1134.792183][ T37] audit: type=1326 audit(1780228439.253:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.0.2326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649363ce59 code=0x7ffc0000 [ 1134.792233][ T37] audit: type=1326 audit(1780228439.253:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.0.2326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649363ce59 code=0x7ffc0000 [ 1134.792276][ T37] audit: type=1326 audit(1780228439.253:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.0.2326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f649363ce59 code=0x7ffc0000 [ 1134.794400][ T37] audit: type=1326 audit(1780228439.253:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.0.2326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649363ce59 code=0x7ffc0000 [ 1134.795667][ T37] audit: type=1326 audit(1780228439.253:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14646 comm="syz.0.2326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f649363ce59 code=0x7ffc0000 [ 1135.343219][T14651] F2FS-fs: Conflicting test_dummy_encryption options [ 1135.350935][T14651] netlink: 'syz.3.2327': attribute type 8 has an invalid length. [ 1136.050515][ T5330] usb 6-1: USB disconnect, device number 2 [ 1136.466597][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2329'. [ 1136.616228][T12646] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1137.316439][T14662] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2330'. [ 1138.163586][T12646] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1138.163605][T12646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.163616][T12646] usb 2-1: Product: syz [ 1138.163624][T12646] usb 2-1: Manufacturer: syz [ 1138.163632][T12646] usb 2-1: SerialNumber: syz [ 1139.294916][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2334'. [ 1140.111028][ T5741] IPVS: starting estimator thread 0... [ 1140.168563][T12646] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1140.168600][T12646] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1140.205567][T14693] IPVS: using max 11 ests per chain, 26400 per kthread [ 1140.206111][T12646] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1140.500651][T12646] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1140.502580][T14700] fuse: fd is not a fuse device [ 1140.645001][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'. [ 1140.670377][T14701] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2339'. [ 1140.939441][T12646] usb 2-1: USB disconnect, device number 67 [ 1141.957443][T14716] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2344'. [ 1142.362068][T14361] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1142.588398][T14361] usb 6-1: Using ep0 maxpacket: 32 [ 1142.698425][T14361] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1142.698455][T14361] usb 6-1: config 0 has no interface number 0 [ 1142.698501][T14361] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1142.698531][T14361] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1142.701473][T14361] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1142.701512][T14361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.701534][T14361] usb 6-1: Product: syz [ 1142.701554][T14361] usb 6-1: Manufacturer: syz [ 1142.701573][T14361] usb 6-1: SerialNumber: syz [ 1142.825609][T14361] usb 6-1: config 0 descriptor?? [ 1142.850095][T14361] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1142.850130][T14361] em28xx 6-1:0.89: Video interface 89 found: isoc [ 1143.815950][T14730] overlay: Bad value for 'nfs_export' [ 1143.871520][T14719] ucma_write: process 59 (syz.5.2346) changed security contexts after opening file descriptor, this is not allowed. [ 1144.800751][T14361] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1145.231474][T14361] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1145.231509][T14361] em28xx 6-1:0.89: board has no eeprom [ 1145.475163][T14361] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1145.475192][T14361] em28xx 6-1:0.89: analog set to isoc mode. [ 1145.476484][ T5730] em28xx 6-1:0.89: Registering V4L2 extension [ 1145.656818][ T9128] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1145.861874][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'. [ 1145.887691][T14769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2353'. [ 1146.694626][ T9128] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.694672][ T9128] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1146.704404][ T9128] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1146.704433][ T9128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.704454][ T9128] usb 7-1: Product: syz [ 1146.704468][ T9128] usb 7-1: Manufacturer: syz [ 1146.704483][ T9128] usb 7-1: SerialNumber: syz [ 1146.801247][ T9128] usb 7-1: config 0 descriptor?? [ 1146.804854][ T9128] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1146.853527][ T9128] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1146.860832][ T5730] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1146.865970][ T5730] em28xx 6-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1146.867443][ T9128] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1146.867507][ T9128] usb 7-1: media controller created [ 1146.869966][ T5730] em28xx 6-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1146.870395][ T5730] em28xx 6-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 1146.953733][ T5730] em28xx 6-1:0.89: Config register raw data: 0xfffffffb [ 1146.961831][ T5730] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1146.961851][ T5730] em28xx 6-1:0.89: No AC97 audio processor [ 1146.977742][ T9128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1147.113558][ T9128] DVB: Unable to find symbol tda10046_attach() [ 1147.113582][ T9128] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1147.113595][ T9128] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1147.336582][T14754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.340677][T14754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.922610][T14361] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 1148.086781][ T9128] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1148.097592][T14361] usb 2-1: Invalid ep0 maxpacket: 64 [ 1148.256002][T14361] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 1148.276597][ T9128] usb 7-1: USB disconnect, device number 2 [ 1148.425228][T14361] usb 2-1: Invalid ep0 maxpacket: 64 [ 1148.426088][T14361] usb usb2-port1: attempt power cycle [ 1148.796765][T14361] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 1148.825727][T14361] usb 2-1: Invalid ep0 maxpacket: 64 [ 1148.832832][ T5730] usb 6-1: Decoder not found [ 1148.832853][ T5730] em28xx 6-1:0.89: failed to create media graph [ 1148.832934][ T5730] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1148.903247][T14804] =========================[ 1148.903247][T14804] ================================================================== [ 1148.903265][T14804] BUG: KASAN: use-after-free in v4l2_open+0x398/0x3a0 [ 1148.903302][T14804] Read of size 4 at addr ffff8880611a49d0 by task v4l_id/14804 [ 1148.903319][T14804] [ 1148.903335][T14804] CPU: 0 UID: 0 PID: 14804 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1148.903362][T14804] Tainted: [L]=SOFTLOCKUP [ 1148.903379][T14804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1148.903391][T14804] Call Trace: [ 1148.903401][T14804] [ 1148.903411][T14804] dump_stack_lvl+0xe8/0x150 [ 1148.903433][T14804] print_address_description+0x55/0x1e0 [ 1148.903454][T14804] ? v4l2_open+0x398/0x3a0 [ 1148.903476][T14804] print_report+0x58/0x70 [ 1148.903495][T14804] kasan_report+0x117/0x150 [ 1148.903515][T14804] ? v4l2_open+0x398/0x3a0 [ 1148.903538][T14804] v4l2_open+0x398/0x3a0 [ 1148.903561][T14804] chrdev_open+0x4d0/0x5f0 [ 1148.903584][T14804] ? __pfx_chrdev_open+0x10/0x10 [ 1148.903605][T14804] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 1148.903627][T14804] ? __pfx_chrdev_open+0x10/0x10 [ 1148.903647][T14804] do_dentry_open+0x83d/0x13e0 [ 1148.903676][T14804] vfs_open+0x3b/0x350 [ 1148.903697][T14804] ? path_openat+0x2e2b/0x38a0 [ 1148.903717][T14804] path_openat+0x2e43/0x38a0 [ 1148.903747][T14804] ? __pfx_path_openat+0x10/0x10 [ 1148.903765][T14804] ? kasan_save_track+0x4f/0x80 [ 1148.903779][T14804] ? kasan_save_track+0x3e/0x80 [ 1148.903794][T14804] ? __kasan_slab_alloc+0x6c/0x80 [ 1148.903810][T14804] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1148.903833][T14804] ? do_raw_spin_lock+0x12b/0x2f0 [ 1148.903854][T14804] do_file_open+0x23e/0x4a0 [ 1148.903872][T14804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1148.903898][T14804] ? __pfx_do_file_open+0x10/0x10 [ 1148.903915][T14804] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1148.903943][T14804] ? alloc_fd+0x64e/0x6c0 [ 1148.903971][T14804] do_sys_openat2+0x113/0x200 [ 1148.903996][T14804] ? __pfx_do_sys_openat2+0x10/0x10 [ 1148.904021][T14804] ? exc_page_fault+0x6a/0xc0 [ 1148.904042][T14804] ? do_user_addr_fault+0xc6f/0x1340 [ 1148.904059][T14804] __x64_sys_openat+0x138/0x170 [ 1148.904078][T14804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.904092][T14804] do_syscall_64+0x15f/0x560 [ 1148.904109][T14804] ? trace_irq_disable+0x3b/0x140 [ 1148.904126][T14804] ? clear_bhb_loop+0x40/0x90 [ 1148.904140][T14804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.904154][T14804] RIP: 0033:0x7ff3be58e407 [ 1148.904168][T14804] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1148.904180][T14804] RSP: 002b:00007fff71cfc9e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1148.904196][T14804] RAX: ffffffffffffffda RBX: 00007ff3be4a0880 RCX: 00007ff3be58e407 [ 1148.904207][T14804] RDX: 0000000000000000 RSI: 00007fff71cfcf1b RDI: ffffffffffffff9c [ 1148.904216][T14804] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1148.904225][T14804] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1148.904233][T14804] R13: 00007fff71cfcc30 R14: 00007ff3bed24000 R15: 0000559469cb84d8 [ 1148.904250][T14804] [ 1148.904255][T14804] [ 1148.904260][T14804] The buggy address belongs to the physical page: [ 1148.904279][T14804] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880611a4340 pfn:0x611a4 [ 1148.904295][T14804] flags: 0x80000000000000(node=0|zone=1) [ 1148.904316][T14804] raw: 0080000000000000 ffffea0001765108 ffff8880b8842cc0 0000000000000000 [ 1148.904328][T14804] raw: ffff8880611a4340 0000000000000000 00000000ffffffff 0000000000000000 [ 1148.904335][T14804] page dumped because: kasan: bad access detected [ 1148.904347][T14804] page_owner tracks the page as freed [ 1148.904353][T14804] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5730, tgid 5730 (kworker/0:5), ts 1145476566471, free_ts 1148892734024 [ 1148.904401][T14804] post_alloc_hook+0x22d/0x280 [ 1148.904418][T14804] get_page_from_freelist+0x27c8/0x2840 [ 1148.904435][T14804] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1148.904452][T14804] alloc_pages_mpol+0xd1/0x380 [ 1148.904468][T14804] ___kmalloc_large_node+0x4e/0x120 [ 1148.904482][T14804] __kmalloc_large_noprof+0x1a/0x90 [ 1148.904494][T14804] em28xx_v4l2_init+0xe7/0x2f50 [ 1148.904505][T14804] em28xx_init_extension+0x120/0x1c0 [ 1148.904523][T14804] process_scheduled_works+0xb5d/0x1860 [ 1148.904537][T14804] worker_thread+0xa53/0xfc0 [ 1148.904550][T14804] kthread+0x388/0x470 [ 1148.904567][T14804] ret_from_fork+0x514/0xb70 [ 1148.904582][T14804] ret_from_fork_asm+0x1a/0x30 [ 1148.904598][T14804] page last free pid 5730 tgid 5730 stack trace: [ 1148.904608][T14804] __free_frozen_pages+0xfa6/0x10f0 [ 1148.904625][T14804] em28xx_v4l2_init+0x16c5/0x2f50 [ 1148.904636][T14804] em28xx_init_extension+0x120/0x1c0 [ 1148.904652][T14804] process_scheduled_works+0xb5d/0x1860 [ 1148.904666][T14804] worker_thread+0xa53/0xfc0 [ 1148.904678][T14804] kthread+0x388/0x470 [ 1148.904692][T14804] ret_from_fork+0x514/0xb70 [ 1148.904705][T14804] ret_from_fork_asm+0x1a/0x30 [ 1148.904721][T14804] [ 1148.904725][T14804] Memory state around the buggy address: [ 1148.904733][T14804] ffff8880611a4880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1148.904744][T14804] ffff8880611a4900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1148.904753][T14804] >ffff8880611a4980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1148.904761][T14804] ^ [ 1148.904769][T14804] ffff8880611a4a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1148.904778][T14804] ffff8880611a4a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1148.904786][T14804] ================================================================== [ 1148.907446][T14804] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1148.907471][T14804] CPU: 0 UID: 0 PID: 14804 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1148.907498][T14804] Tainted: [L]=SOFTLOCKUP [ 1148.907505][T14804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1148.907516][T14804] Call Trace: [ 1148.907524][T14804] [ 1148.907532][T14804] vpanic+0x56c/0xa60 [ 1148.907559][T14804] ? __pfx_vpanic+0x10/0x10 [ 1148.907580][T14804] ? __pfx___schedule+0x10/0x10 [ 1148.907605][T14804] panic+0xc5/0xd0 [ 1148.907623][T14804] ? __pfx_panic+0x10/0x10 [ 1148.907644][T14804] ? preempt_schedule_thunk+0x16/0x30 [ 1148.907673][T14804] ? v4l2_open+0x398/0x3a0 [ 1148.907696][T14804] check_panic_on_warn+0x89/0xb0 [ 1148.907724][T14804] ? v4l2_open+0x398/0x3a0 [ 1148.907746][T14804] end_report+0x73/0x170 [ 1148.907766][T14804] ? v4l2_open+0x398/0x3a0 [ 1148.907787][T14804] kasan_report+0x128/0x150 [ 1148.907809][T14804] ? v4l2_open+0x398/0x3a0 [ 1148.907834][T14804] v4l2_open+0x398/0x3a0 [ 1148.907858][T14804] chrdev_open+0x4d0/0x5f0 [ 1148.907882][T14804] ? __pfx_chrdev_open+0x10/0x10 [ 1148.907904][T14804] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 1148.907926][T14804] ? __pfx_chrdev_open+0x10/0x10 [ 1148.907947][T14804] do_dentry_open+0x83d/0x13e0 [ 1148.907977][T14804] vfs_open+0x3b/0x350 [ 1148.907999][T14804] ? path_openat+0x2e2b/0x38a0 [ 1148.908019][T14804] path_openat+0x2e43/0x38a0 [ 1148.908052][T14804] ? __pfx_path_openat+0x10/0x10 [ 1148.908073][T14804] ? kasan_save_track+0x4f/0x80 [ 1148.908089][T14804] ? kasan_save_track+0x3e/0x80 [ 1148.908106][T14804] ? __kasan_slab_alloc+0x6c/0x80 [ 1148.908123][T14804] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1148.908145][T14804] ? do_raw_spin_lock+0x12b/0x2f0 [ 1148.908170][T14804] do_file_open+0x23e/0x4a0 [ 1148.908188][T14804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1148.908214][T14804] ? __pfx_do_file_open+0x10/0x10 [ 1148.908232][T14804] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1148.908262][T14804] ? alloc_fd+0x64e/0x6c0 [ 1148.908290][T14804] do_sys_openat2+0x113/0x200 [ 1148.908316][T14804] ? __pfx_do_sys_openat2+0x10/0x10 [ 1148.908340][T14804] ? exc_page_fault+0x6a/0xc0 [ 1148.908370][T14804] ? do_user_addr_fault+0xc6f/0x1340 [ 1148.908392][T14804] __x64_sys_openat+0x138/0x170 [ 1148.908418][T14804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.908436][T14804] do_syscall_64+0x15f/0x560 [ 1148.908461][T14804] ? trace_irq_disable+0x3b/0x140 [ 1148.908482][T14804] ? clear_bhb_loop+0x40/0x90 [ 1148.908502][T14804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.908519][T14804] RIP: 0033:0x7ff3be58e407 [ 1148.908536][T14804] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1148.908551][T14804] RSP: 002b:00007fff71cfc9e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1148.908572][T14804] RAX: ffffffffffffffda RBX: 00007ff3be4a0880 RCX: 00007ff3be58e407 [ 1148.908586][T14804] RDX: 0000000000000000 RSI: 00007fff71cfcf1b RDI: ffffffffffffff9c [ 1148.908600][T14804] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1148.908611][T14804] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1148.908622][T14804] R13: 00007fff71cfcc30 R14: 00007ff3bed24000 R15: 0000559469cb84d8 [ 1148.908642][T14804] [ 1148.909089][T14804] Kernel Offset: disabled