last executing test programs: 2m58.891717039s ago: executing program 3 (id=43): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000000}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000004c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x5c, 0x4, 0xe3f, 0x306, 0x6, 0x6, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8481, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r8, 0x7, 0x2, r8}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r5, 0x0, 0xffff, 0xffc4, &(0x7f0000000480)='|0', 0x1}) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c00400001020301"], 0x0) socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2m55.512013079s ago: executing program 3 (id=57): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0xfffe, 0xfffe, 0x2, 0xfffff7f6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000007c0), 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x6}}, 0x20) 2m54.991420957s ago: executing program 3 (id=58): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x1, 0x10) mknodat$null(r0, &(0x7f00000001c0)='./trace\x00', 0x100, 0x103) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x30) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x52, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}}, 0x14}}, 0x8800) 2m54.131998153s ago: executing program 3 (id=62): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x20c042, 0x0) read$dsp(r0, &(0x7f0000000340)=""/140, 0x8c) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x74}}, 0x4000004) mkdirat(0xffffffffffffff9c, 0x0, 0x158) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000180002801400018008"], 0x50}}, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="3e0f208367660f89590000000f20d86635200000000f22d8660fdb5929670f08260ff89201000f01c3b89a098ec80f01c4cc", 0x32}], 0x1, 0xb, &(0x7f00000002c0), 0x0) 2m50.103984663s ago: executing program 3 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x6}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xd, 0x0, 0x20008045}, 0x0) 2m49.559247916s ago: executing program 3 (id=78): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x48301, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) r4 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900002000000010902270001010080fa0904000003ff00000007050202000200070581020002"], 0x0) syz_usb_ep_read(r4, 0x2, 0x40, &(0x7f0000000200)) syz_usb_ep_read(r4, 0x2, 0x40, &(0x7f0000000240)) syz_usb_ep_write(r4, 0x81, 0x6, &(0x7f0000000110)="00000000ffff") syz_usb_ep_write(r4, 0x81, 0x0, 0x0) splice(r2, &(0x7f0000000080)=0x10000005, r3, &(0x7f0000000100), 0x3, 0x14) 2m47.988534438s ago: executing program 32 (id=78): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x48301, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) r4 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900002000000010902270001010080fa0904000003ff00000007050202000200070581020002"], 0x0) syz_usb_ep_read(r4, 0x2, 0x40, &(0x7f0000000200)) syz_usb_ep_read(r4, 0x2, 0x40, &(0x7f0000000240)) syz_usb_ep_write(r4, 0x81, 0x6, &(0x7f0000000110)="00000000ffff") syz_usb_ep_write(r4, 0x81, 0x0, 0x0) splice(r2, &(0x7f0000000080)=0x10000005, r3, &(0x7f0000000100), 0x3, 0x14) 2m43.584711431s ago: executing program 4 (id=96): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2m43.387934699s ago: executing program 4 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() (async) openat$dir(0xffffffffffffff9c, 0x0, 0x141000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) (async) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) (async) truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) (async) open(0x0, 0x12000, 0x95) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004840, 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x3a3401, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) 2m40.516595887s ago: executing program 0 (id=100): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r0, &(0x7f0000000400)=""/207, 0xcf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\x00'}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x40047452, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @local, @broadcast}, &(0x7f0000000340)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@empty, 0x65, r6}) sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) 2m40.259124386s ago: executing program 4 (id=102): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800599c6d0eab070004000523"], 0xfe33) ioctl$SIOCSIFHWADDR(r1, 0x8948, &(0x7f00000002c0)={'bond0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32, @ANYBLOB="080002"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x4e, "7eed5100000080000000400000010000000000000000000000b100"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000010, 0x0, 0xffffffffffffffff}]}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f00000002c0)=0x3) unshare(0x22020600) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448df, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb8864450003000000000000019078ac1e0001ac1414aa030490781200183f2500000000000100000100007f0000017f000001"], 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x201) 2m40.239017208s ago: executing program 0 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) 2m40.096310895s ago: executing program 0 (id=105): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f68, 0xb}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101200, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x0, 0x0, 0x0, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0xc004) 2m40.031581332s ago: executing program 0 (id=106): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x4, 0x8, 0xb, 0x8, 0x3, 0x3e, 0xffffffff, 0x1b8, 0x40, 0x2ec, 0x3, 0x2, 0x38, 0xb5d27af80b9cebc0, 0x9, 0x6b1, 0x3fe}, [{0x5, 0x4000, 0xe, 0xb, 0x7, 0x5, 0xe54, 0xb92}], "0f16838854e0d38c52a667e04898d0918a169a3b3da9a3ef6e2ab9333d44700000f2dc17fc9670f5750107106e8b85d8c53ae6f2677af496c413b6ef4062f9f9ec3e04a9d1ab9f24f15d16f20f9fbacd2b9c1e7a54b2a31c152ae10a00000084555e21dbfc00153f4021c7e6c58bc7561201dbbd661d7000c0ab7d487ae42fd9596680989c56ab778375591347e637aeb89db9a97c9404f13d3b0421cf94ff67736b26257b4f22f807906fe0757503a715e57637535b891113c227beaffb8f78d76e47c5e37ff00549"}, 0x40) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1}}}, 0x4) pipe2(&(0x7f00000000c0), 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2m39.949647s ago: executing program 4 (id=107): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = getuid() sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@updsa={0x120, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfb, {{@in=@multicast1, @in=@loopback, 0x4e23, 0x3, 0x4e20, 0x0, 0xa, 0x80, 0xa0, 0x29, r1, r2}, {@in6=@mcast1, 0x4d5, 0x3c}, @in=@loopback, {0x923, 0x5, 0x0, 0x9, 0x7, 0xffffffffffffffff, 0x3dc1, 0x18}, {0x7, 0x2, 0xffffffffffffff01, 0xffffffffffff8001}, {0x2, 0x3, 0x8}, 0x70bd2c, 0x0, 0x2, 0x3, 0x4, 0xc}, [@address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in=@local, 0xa, 0x4, 0x1}}, @iptfs_pkt_size={0x8, 0x29, 0x1}]}, 0x120}, 0x1, 0x0, 0x0, 0x40014}, 0xc0) setxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@ng={0x4, 0x1, "e3e370ea8ee0"}, 0x8, 0x1) getgid() ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000300)={0x5, 0x0, r0}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000340)=0x2) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000380)={0x2, 0x200, 0x7, 0x5, 0x3, 0x559}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x141001, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r4, 0x4, 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0]}, 0x40) fsetxattr$security_evm(r3, &(0x7f0000000540), &(0x7f0000000580)=@v2={0x3, 0x3, 0x9, 0x5, 0xca, "5bb00c37b6d7c59785685bc5ec0b72eb7fa5c457c4db62fc354646ae36739ba3eccf6ba86c58de93aeda1adde18a0b0f28529831821af705d6c0fda03825de3b70e9a89f82b1d0d2a50e19ae82b9ff18959aa56da3654be5b208a23f3484e23b21f9b46a9591c96d00f0dcf53a8ca0dddffd10134c0fe274f328bfda2d6e8532ec6cedb9073319170b6ea0ddef41b5dc7b2e745ea89f1f95466d03e6fcba38f9c0874141a870044fe773c7ed510863f2869517ce2147bafde434812a686f4c5e8f41da3f7e5f7a8eff00"}, 0xd3, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000680)={0x8, 'xfrm0\x00', {'tunl0\x00'}, 0xfff}) truncate(&(0x7f00000006c0)='./file0\x00', 0x6ae) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000700)) timer_create(0x5, &(0x7f0000000900)={0x0, 0x2, 0x0, @thr={&(0x7f0000000740)="3819b66bd1cb6809d3d49d46333b2a7ef1524a56706aa7bd167d1236005ff468517de6d2885ad5e9827ff9ef004983ebd4b93b1537a2270c723d6eee3647905027d3ae7988394db49de555ca09ceceacbdc5b41a8f07a9512ad58f0d3d8376cafd064a9111d04c45f45d934616cfdcd748e7fba693696d5cd7e45fde59bc89de513909242fb0fa00e7667f09d4a7bd4ccf4e044b9260009cf0f8441521ca1c349ad8c0427cfb1bb3e5", &(0x7f0000000800)="351a2e95033323e6e6f26f128f09b21a333c973e298ed84593e8a3b3778635e9ef6cf36e19ac376d15005df403d94f3bb47784fa9b6707a3f7d282e70afe4728a1cb43325cd96ad21dde6c22b78d75db119f78675a48934d49b41320612140ac33d60bb59d32138873d5d9eb3dd63a90f561696f5e37f0cd2d172ff9040b002823e0dc3e7ab9a581ee34067f68ff2f4a54a00d8039c29951c17e92681318e429ee94fa9f542b89d0e3bfcee883283989429a75763a049b5963f4a9e58bdc36e5b760d5b4f9e4f50c20520e71846ad298032fbe6f5f8919baa1b5ac17ef16d7"}}, &(0x7f0000000940)=0x0) timer_settime(r5, 0x0, &(0x7f0000000980)={{}, {0x77359400}}, &(0x7f00000009c0)) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000a80)=@multiplanar_mmap={0xd, 0x2, 0x4, 0x200, 0x3ff, {0x77359400}, {0x1, 0x1, 0x4, 0x5, 0x3, 0x9, "1789b187"}, 0x8, 0x1, {&(0x7f0000000a00)=[{0x8, 0x3, {0x5}, 0x8}, {0x9b23, 0x7f, {0xffffffffffffda43}, 0xfff}]}, 0x7, 0x0, r4}) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000b00)=""/131) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000bc0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000c00)="d5b3a3d76de1f5a1af27d7bc58c580bd7dc4f4678d4ef1cace9b67fb09ee6ce516543e0577cac7947b27f8f30363c2994cb2aa4319c42ef143ddb98a2d85c5333d094e5100f117a6f57a868e14da95ac6fd135cf1892b24c0ce6c18010b99e13a688fbdb6f8e0d5e85b681caa5b5", 0x6e}, {&(0x7f0000000c80)="7edf308432f4ce5bc2ef24e7309de852eb8f461fd1d29e3cfaeb7117b1c7035134fa04658efc1ab589643b3e4f52638b66c4edf4a3648183480692ee597fc0e678a8b7d4a339eb41306e7717b4caae7838ab5fff71408e1827883bf6aa248b462a392f7e2e3695e201e0e60a68a1a959571901cd94e9213bd904502627610158b5dec2b0a42d287d4d59ce9eeedd8deea2b1e522e77295ad74410c", 0x9b}], 0x2, &(0x7f0000000d80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf5c1}}], 0x68}}], 0x1, 0x800) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000e40)='cgroup.threads\x00', 0x2, 0x0) fstat(r6, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r7, 0xffffffff80000400, r8, &(0x7f0000000f00)) getsockname$llc(r3, &(0x7f0000000f40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000f80)=0x10) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000fc0)={0x3}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x5, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}]}, &(0x7f0000001040)='GPL\x00', 0x2cf, 0x21, &(0x7f0000001080)=""/33, 0x41100, 0x20, '\x00', r1, 0x0, r4, 0x8, &(0x7f00000010c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x5, 0xe, 0x7fff, 0x2ca8}, 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001200)={@fallback=r4, r9, 0x37, 0x8, 0x0, @void, @value=r3}, 0x20) syz_usb_connect(0x6, 0x957, &(0x7f0000001240)={{0x12, 0x1, 0x201, 0xf6, 0xd7, 0x80, 0x40, 0x421, 0x2f, 0x6c27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x945, 0x4, 0x7, 0x0, 0x0, 0x5, "", [{{0x9, 0x4, 0x3a, 0x1, 0x1, 0x2, 0x2, 0xff, 0x58, [@hid_hid={0x9, 0x21, 0xa2, 0xe, 0x1, {0x22, 0x90a}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "ba3d4bd0"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0xf0c}, [@country_functional={0x10, 0x24, 0x7, 0x4, 0x2, [0x6, 0x3, 0xb, 0x6, 0x3]}, @obex={0x5, 0x24, 0x15, 0x5}, @dmm={0x7, 0x24, 0x14, 0xfff3, 0x48}, @dmm={0x7, 0x24, 0x14, 0x180}]}], [{{0x9, 0x5, 0xc, 0x0, 0x200, 0x0, 0x14, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x9}, @generic={0xe4, 0x21, "6e60fc3dd1156e77c181a907c85046079bccc794339d4bad6e4c45351e8731f6a9c390a19eb0966b287f6c0754b24ece7d76d445c53fd460a89ec3b09bec2064fa903d2e2982881740a7f30465368be3d1e9ad9d709ddd22200cf16594ac26175d0d8c07c27dd37fbe2c63b326b5c278066e37fe1b473f7fafaae99ad3596176a582dc680087a9a7fa9e1361f5649192e842cbb86910756f7215bb44d70cd3bf2ac174969150cb7e0f49d8e4a359650274aeff95e9751a31c2997dd3e07c6765d54ea8bd8cb509560c1ccae317a9440d50369aafda461f220503a8f75511f8efa478"}]}}]}}, {{0x9, 0x4, 0xb7, 0x92, 0xf, 0xdb, 0xf4, 0xc2, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0xb2, 0x7, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xfa, 0xfc, 0x8, [@generic={0xb, 0x11, "efd5fc3ca673a01e3e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x3, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x29, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x10e9}]}}, {{0x9, 0x5, 0xf, 0x0, 0x663b4dbcce8f7407, 0x5, 0x3, 0x7, [@generic={0x24, 0x5, "fb2a8e64e2ff7017f80aaae949879562565a7322a3211f0d7f28763df7786b388337"}]}}, {{0x9, 0x5, 0x62194ed0d014ef83, 0x0, 0x40, 0x4, 0xf6, 0x0, [@generic={0xf4, 0x3, "ca236cfe8e75106c6e730d438851352bd3535b7aa7d09d5da482eb74fe3735f330b2085edd7c085c48136ca7657bb9b3885c50246d93290beb87d48b74fc9ad5ad8f3e95a988678f29998e9d3df929b4b17d254b50906b68f6b4cf359b75cde2d8f5d28a0fb30004bed5651857b86f1eff4a994f917eecb7c5085d20837b29310f4ac2bdff92e8e8af705b3f1adb81a22a58bce33c1b89c1910eba174840379f8b0949f4ba8c0cde9f34876186b11c9368bb11d6441ddf58e3598242789676cecb8a82e3ca70a56046d9f1e8bebea394d219fe8c5f37895994332268bbb7d119a57f8a1f9528d071dc0ad9619d14c9dc13ae"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x0, 0x8, 0x24, [@generic={0xa1, 0x9, "46edc0efb60b797b11e830b127aa796f66021d42448529ca62e2a4fd9f0d60f10bc1b85e6b5d2b61598c78016459a3345bb29fbcac4e6e1d809ab560b795bd61e7a26d54de124d037f26b52e8d9d764b79bda9251f4375851cfc95d19574e9119b82558f28f45498f271290a2f353bbbc4de45f55f123fe4aa3b6a70f231a3f639483930605261464792df78c1fc62b04ccc5bbdb72f3544038f7cfdc8383c"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x7, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}, @generic={0x75, 0x8, "13322011f4d85aff996092d750795590c709169f6728e94fb1c56599f5fee6b5df75a4d1479e4c215f109014f61ae1b0601f92f05b9b4d9d4834125a2c99899011a6ef1f23e4a7e9391213271dca8b2caa7c6201a9db38df9c087b90df54e318687394cf9a345c22e121b77671db1c0e0fc6cc"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x7, 0x2, 0x7}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x1, 0xa, 0x7f, [@generic={0x40, 0xe, "cb3194764163e411d0879198234ae1b7b131e6e74128a08f2407cf13437d02860ea10793b13927e3ea32d33fc303455caadd05d8489e31f17ab3a8d81048"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x9, 0x9, [@generic={0x7e, 0x5, "39e1b1b6f4fb9261509aaea661f9f9ea6b62e52894312378e2b02584d6eaab38860be002a5632df4a640e8ea7927237d030955194eb7dab6b81eb9e118cb29fd4545fd02ee27d66dd55d6be2c6dc1e892d8c873783592bf80eb6a1c37d7113bf68de4f1218613f2a3190b7b699d21150b8655faaadf92c7791aed81f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x13, 0x5}]}}, {{0x9, 0x5, 0xd, 0x8, 0x7cf, 0x0, 0x5, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7fff}, @generic={0x9b, 0xf, "a4fd4af33880176ebb4bcea7b071d525ee1249037a17475457aa8dba70e8e3c85cb2ca243c9c6d30ea82953aa13582aa0ce170e2584daf817403ea95558c7f41a666284548e2df4fb6e063c758841bfcf6433bc62e8a1bedb722ef532ab153443b5cb813bfdd37b3bf3e6a07b681279244cc51daf30da384fcdfa590d93ea02cfd9d6781812d0508d9df51edd0785712aeee2b4595c50f5fe1"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0xa, 0x0, 0x8f, [@generic={0xe8, 0xf, "0da5840b055a1954690773b37adafa4bc3f4c399a8f73a47edac3aa207abfca015473128f580a171882322c8a54bd1dddb9277a59952e309b8c3a3e36d26b06293fa3b7c0212b67a4151ab226c668a7f21383caa51600ef5905da7962b9ab553ef4f79b2e549204548dccb990d72cc407075617ffdabdceecd53182baa35cac63d52bd4f5f726966eeb614263c12793fbf53816a696da1f2bfe527fe7e95b8d337c4d5068baf17499a8b4a124076f0aa7b26969d9bf2d0a3fb5e8b42b06a455cff8c045eec629a3989dd65ae95998b6ca0f1c6ac43c97b7a17706bbe07e51ef4f03ac3d47301"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x6, 0x8a, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x4, 0x1, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xa1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x9, 0x2, [@generic={0x7, 0x30, "d8d59c2a52"}]}}]}}, {{0x9, 0x4, 0xad, 0x3, 0x8, 0x49, 0x88, 0xa4, 0x5, [@generic={0x12, 0x4, "9df81dde96b984a4e0901ebc2830e603"}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "268c164b"}, {0x5, 0x24, 0x0, 0x92}, {0xd, 0x24, 0xf, 0x1, 0x200000, 0x8000, 0xfff7, 0x7}, {0x6, 0x24, 0x1a, 0xe6}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @country_functional={0x8, 0x24, 0x7, 0xc, 0x6, [0xfc01]}]}], [{{0x9, 0x5, 0x3, 0x9, 0x20, 0x0, 0x4, 0x9}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x40, 0x83, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x6, 0x0, 0x7, [@generic={0x3d, 0x9, "3ffe898dad030a8d810b3de686249890eeec16964f45080b48f54b481afbea27a73175aecfbe8fc01ae684e28a627f7307c4557a13efbca2bda050"}, @generic={0x39, 0x23, "b4ddcb9f53bd357f9e8aeab02d590da22c6b977f1608125c905b82f6de72d8bc682a4b0f3a698c434999f0cf4ad456d50d9dc65d92ec11"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x44, 0x80, 0x5, [@generic={0x1f, 0x21, "aeb2ec27d779c7f8d1059fc0bc2fdb190ca8e0020608745f3c902d69dd"}, @generic={0x8a, 0x9, "51c9a2ce8ae6be872b98c433ede912acab767ec906af67c6fbc634d7db35e90d18aae90ead3131aabe6a58b1a44ff63078f25c0b1c57be2489209203aa6bd66d5d6d597022b6435b722fec55c4e4e1a1207bf63a1aab686a3b53493cfe9c4c5f96d1aa6a5556c632ff901004018180d0499c59d72789b7ecb35789edd1987fd8441cbc23b60633d1"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0xfd, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xa}, @generic={0x59, 0x21, "1975129ea2a126201fd166821e47acbdb114072488f1b24649affa0f634b4be0e770e873ff6bcd2cc7d5e6f80f74108a190d5194a831da119895919df19ce7b4e8e728f0b1dd5834744bec754a38806a02f4a10d8df595"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0x9, 0x6, [@generic={0x63, 0xa, "d84295b74dcc28df4a3d2c756dc9943cb0bc0a7ee157f17b926cd38db91a30dcdca15a50012498180564b2b1a6e35b2c11fe3d27764a347e113b8698ddb36d0d87c49589c19230126c8fd105003d15fa496e8ca511677f92d5493b772e7572d0e6"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x71, 0x4, 0x3, [@generic={0x2c, 0xa, "e1d02a6eed89b25c779aabcd1f9eb9c55fda1b800064dc8b1a60e9e6007ae794a5af72a1e0a05752267b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x9, 0x8, 0xa6}}]}}, {{0x9, 0x4, 0x3c, 0x7, 0x0, 0xd4, 0x3f, 0x68, 0x26}}]}}]}}, &(0x7f0000001e40)={0xa, &(0x7f0000001bc0)={0xa, 0x6, 0x310, 0x8, 0x7, 0x0, 0x20, 0xf0}, 0x2a, &(0x7f0000001c00)={0x5, 0xf, 0x2a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x13, 0xb, 0x43, 0xc560, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x95, 0x0, 0xb769, [0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x9, 0x81}]}, 0x6, [{0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x2409}}, {0x4f, &(0x7f0000001c80)=@string={0x4f, 0x3, "6c750959e25aa1e03c4948332aa563bb76e916e14e525ddb2df470c4c2de1743a8ec18d687a47b987af36d45a09cbd8e2984de0b7a61083ea69bbeeb9eb065f2ec1989a81bef2ae27526afb798"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x80a}}, {0x7e, &(0x7f0000001d80)=@string={0x7e, 0x3, "95414c9af57dff25a4bdc603c469b130f98c21cc4a083e9c154e355d1c244da40c2ffb67759e8fac958be93481d229a23bfd8def65268e53962c3d8b72742585e94bc9ac568b4d511f6153f2eed6f742ab4b0b7502ac0267b1d884384d01d7af4ad49d46722c8239b04a1bfaf0b6b0a8d156609bed19f2586077f297"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x1845}}]}) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2, 0x0) read$FUSE(r10, &(0x7f0000001f00)={0x2020}, 0x2020) 2m39.12374247s ago: executing program 4 (id=108): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000001080)={"43d064455ca79c3698dcca60005c1ba163b1d8f04d69d873792c0cbfc95dacc7cd39a49df12a052d0d8f1bd04b722b4f262437efc030e706916de618763f4600660b41f320706e06860fe29f1bb455ef507156d0a5738f130784a1aad99f74b3e592254eede14eb1b64af356cfaa8ff002c4deed28995dc5e6ee13c4a1b39ba72979c5f3ed91ff89e73e09f7f88fe58bce505f0500764c95c8bed7499213d10731b60ed6c8806ab094843295ac02f06dc46485bb56f2eb2eb3c5ef1e50a2431a2082b54c4b0e1357daaefd30e08322fb5f922f6d9fa3226faf7aeb9630aabe81617fe2849d8ab92fb80f07dfa9d831f4f7ef48923e28553f0c31cf1343d4c0d4dee937e639670fc2ceab9e5048d5bcd9f52a9c90ddd1fee1fda90a114fdf7298b7607c5294efdea04743a0045e96aae496fcb06636a8620f6e007ee5f5c24ab0d0f85cfb3a7820dbe2241b017e917eafb27d13feba7de3a28dd4c29c7959ae5c0724c848f8960fbea5f7b7a35ac32fa6bbf869030a1b61fb0d20a5631dcea68ffa7d456869c4e79f6033f38fa88ccd53dc1feb5381c01dd71ec0446e3633270b7fb961e04ad7e1f44e3fd0d96c724499e1ec2cff23a3d5a97952ec0a44dd967491dc45d4df48ad83027df0be02e35ca4c107bdf957f4c7a831dff89f998a2e1302445dc02b5fc38f7c8a6260723e535062319cb68cb309e91b88c55014bb436c5d9f6bf35cbe24605821baf9ea6aaa31cb2dd74e29865e954000000046f3369aedbfb70b3716c1c0234a0deb9abfac12686d45ba97952e8a50480c5f44e038b1a4d5cd9301d02b942afacfaa30b6ef315d72eaf41dddda49f8d34042d1a6cd45d9f9df4c83b8c8b55959d58843ab3564d3f49d81ed2ccd42bb8ad9c8e4b92c2df872c9383c88f4b1bbaf116fff233f55d99b43677eb29ad63e00ea4eee69c72a604b2cdd7641d9c682d1d4ea8e5bd0de857ac1a55b2d6374a4a18af8f27887ffb4b2168e764a5aa9b303a35873d2177de8c5a00be39726baa6d336b6a36b8ec6743454b4542f3fb3ca678a0ecca17ba7c2655931f38ed26219fde45ab8469db2a156953b028abec63c6b841c8bd9f9f0861e7aeb8195013444d2d326cad53718e40be06aea644573a9ef22b13692a17ed8a451af9e2de15b4bfce7c257063e28c07e4c3301a1bff37d72efc14d34ddabbb286f53264e0c8122f215de4f2e06f6e0472674c2476a61ad2e309abfed7e3367bc7373876507764e60b193e8c5abbe95f42adfc74dd25c9098dfba8272f7361d0000000000000000000000000000000000000000000000000000e000"}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x4, 0x1a4a, 0x8, 0x0, 0x6, 0x4}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2m39.063419896s ago: executing program 0 (id=109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0x2bf}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r1, 0x8000000) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000540)=""/233, 0xe9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2m38.851971095s ago: executing program 0 (id=110): r0 = timerfd_create(0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000034c0)={&(0x7f0000000880)=[{0xf7e, 0x1000, 0x3a, &(0x7f0000000740)="1f5a0622a6ba91142ce166e95b6c8923d8ab933d07ad7f1c6765906c2598cf73567bc906211dc3c5bf7513177f928ea0d548b3c9ed4a8a1cd284"}], 0x1}) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x104}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) write(r3, &(0x7f0000000960)='1', 0x1) 2m37.222706449s ago: executing program 4 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0x25dfd9ff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 2m23.345942456s ago: executing program 33 (id=110): r0 = timerfd_create(0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000034c0)={&(0x7f0000000880)=[{0xf7e, 0x1000, 0x3a, &(0x7f0000000740)="1f5a0622a6ba91142ce166e95b6c8923d8ab933d07ad7f1c6765906c2598cf73567bc906211dc3c5bf7513177f928ea0d548b3c9ed4a8a1cd284"}], 0x1}) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x104}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) write(r3, &(0x7f0000000960)='1', 0x1) 2m21.891643879s ago: executing program 34 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0x25dfd9ff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 2m5.73834981s ago: executing program 7 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000080)) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a0009012bbd21eb5f0bfb06a659e2"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m2.468230767s ago: executing program 7 (id=241): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x46, 0x2801) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x0, &(0x7f0000000380)}) (fail_nth: 3) 2m2.201814365s ago: executing program 7 (id=243): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040014) ioctl(0xffffffffffffffff, 0x1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) r6 = openat(0xffffffffffffffff, 0x0, 0x10440, 0x8) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x48, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7b}, @void, @val={0xc, 0x99, {0x1, 0x7d}}}}, [@NL80211_ATTR_VENDOR_DATA={0x1e, 0xc5, "65150b1dc9107b5ea5ab95a28c3685310463b68f2d1a45eab2fc"}]}, 0x48}, 0x1, 0x0, 0x0, 0xf62d1ff2bddc1bee}, 0x4000040) read$msr(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xb9, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd840010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47", 0x0, 0x34, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000000180)={0x8}) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000080)={0x2b, &(0x7f0000000340)=[{0xa000006, 0x0, 0x0, 0x1, 0x5}]}) 2m1.939532583s ago: executing program 7 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='8086 1096', 0x9) 2m1.83088s ago: executing program 7 (id=246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x6, @local, 0x6}, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x56}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e20, 0x800, @private2, 0x6}, @in6={0xa, 0x4e20, 0xd0cac62, @local, 0x8}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3}, @in={0x2, 0x4e23, @broadcast}], 0xfffffffffffffeeb) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'batadv_slave_1\x00', 0x400}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000380)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) sendmsg$NFT_BATCH(r4, 0x0, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2m1.615451779s ago: executing program 7 (id=247): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800599c6d0eab070004000523"], 0xfe33) ioctl$SIOCSIFHWADDR(r1, 0x8948, &(0x7f00000002c0)={'bond0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32, @ANYBLOB="080002"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x4e, "7eed5100000080000000400000010000000000000000000000b100"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000010, 0x0, 0xffffffffffffffff}]}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000002c0)=0x3) unshare(0x22020600) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448df, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb8864450003000000000000019078ac1e0001ac1414aa030490781200183f2500000000000100000100007f0000017f000001"], 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x201) 2m1.175312669s ago: executing program 35 (id=247): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800599c6d0eab070004000523"], 0xfe33) ioctl$SIOCSIFHWADDR(r1, 0x8948, &(0x7f00000002c0)={'bond0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32, @ANYBLOB="080002"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x4e, "7eed5100000080000000400000010000000000000000000000b100"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000010, 0x0, 0xffffffffffffffff}]}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000002c0)=0x3) unshare(0x22020600) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448df, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb8864450003000000000000019078ac1e0001ac1414aa030490781200183f2500000000000100000100007f0000017f000001"], 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x201) 47.486447216s ago: executing program 5 (id=503): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x50}}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffd8f}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x1, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0xc050) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0xb, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x4, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x3, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 43.646287343s ago: executing program 5 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x4e, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x4e, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 43.524412115s ago: executing program 5 (id=521): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x8) 43.489453866s ago: executing program 5 (id=522): r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x600c0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000001340)=[{0x37ed, 0x0, 0x0, 0x0}, {0x6, 0x201, 0x1, &(0x7f0000000240)='O'}], 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./debug\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000008) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0x0, 0xffff}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x881}, 0x240040c1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x30) creat(&(0x7f0000000080)='./file0\x00', 0x111) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000907ae340919567b6b8672729f4f4b4a1e867e9aa60f89921521ede261d37686c88becb18e9c96af3fc80767bd4fddfbeee630685a973be22c461874c854df354a6d726ad0985b7060f70d6e345e221ec0026cb67ad49298d20b29a951bad159da5377a944e32028e1291e03b0d2b00968a74f3e728e849067d20f2a3a216d1b3168fd40aa7181f89b68237b238a57ecfd6431e99a44ec63dd24804bfb9c12d6159f10fbf8c8f5bf40d0cccd7724f", @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf2502000000080008000a010101080002000700000018000100252d5c25405e2d295e2f2c26297d2c2a3a2c2600050001000000000014000600fe8000000000000000000000000000bb14000500fe8000000000000000000000000000aa080008000000000008000800e0000001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x404c005) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 43.375237679s ago: executing program 5 (id=523): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) ptrace(0x10, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x101800, 0x101) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000) (async) r5 = dup3(r4, r2, 0x0) recvmmsg(r5, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1}, 0xffff}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x2}}, 'my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file/file0\x00'}) sendmmsg$alg(r6, &(0x7f0000001b40)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="6137682e3853fbafbb531b982ae4fe0f4832b83bf99f49f52b69e69db3f82c7805920c0e54d8c8ac1a939feb307feb04fd6ee0b0ae5824848ea18be260af1a6e2306eae5563d00b21b5b646822bc4cec54df5674720af80fc25ff87f403c09ab6a9118f16c2e9e25f4d4d4f05a187540693f382a8c72883c00bc6cef6d9d5d7b3f402048e12efe4a71d893522c1d5e55663c930fb7067dd15b68490c17249ef1979579f600d823b39fd50f567163ce", 0xaf}, {&(0x7f0000000640)}, {&(0x7f0000000680)="2f1394479377e6dcb5f898f26c7bb6d67ecd0d37cdf80ad52c32b7a10269a733578122f76efe470f5a7b701a82e77ed07a5da2abad4b404527a5b1c622d4e97c415925c3a0139aa7013b727a72e8df4ec6f058c2bf307f4f15db87f524883304e6b25932430fd783cd27b17f0dd0a0e8a08c5fb66e5028382306594d16403430fe9c", 0x82}], 0x3, &(0x7f0000000880)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xc8, 0x117, 0x2, 0xaf, "7b0c00f3092e87f5704684f6868b6365812cfe9f988625abce2a7173b3ab68f2e7059275e18929f9143657d4b5a29934701bc0f81cc2239766247eabcf2a0f0dbea6ce606319e20bf1e4452c79ca54b90ac615835e76f6367403fbc8826f8b04419a3379ded63ba5168dbdc5c476b3cf417f01c3e55d1329264691f5d27b4d4ddf8250549cf8c2a47f86e7050e7ca618ad4210286435c0f63679a5db2dee6444a8c41afafd27d4e22e3fc52066f747"}, @iv={0xf0, 0x117, 0x2, 0xdb, "1801698eac5f02ecfcf241e5a56ae386ce8164897ed94f6ea741f85cc6335e5b9247e61f6f2c346894e2e573392436436321d15cc9ad495cb97e8a4518579b9b5748072f53b8bf65a2947e1d7127eb22fb3237eae2189aeac3c59c2a692df6c43d8a4dc69d2c849ca95e167923d7e363163adbdf9695ea53c14a80259fae4933f627e51283e8b81a26794dd339ce4274aba03d6d5d1388b6858f7298d6554ad37737829314225c7045b458e43bea81e9e4f7264c4669e9c2be61a57a92d07977d9ffcdae2fd1fd8e2b251d2b9e090464cb0d706673466a535a2990"}, @iv={0x78, 0x117, 0x2, 0x5e, "920b4c97b9afab5ce8ce4869800616bb167e3cf1983c982a0cb1c280476b6df0910191878eab3db7780f6afdb3ba61239bc99ab9ca0257898f374658a98efbd88ff391a4eedee4a112947cbaf32b8316a2559c13620db3245560c501fb63"}, @assoc={0x18, 0x117, 0x4, 0x13f}, @op={0x18}], 0x1290, 0x20000000}], 0x1, 0x4000000) (async) capget(&(0x7f0000000480)={0x20071026}, 0x0) 42.988746495s ago: executing program 5 (id=526): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x7e, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) (rerun: 32) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000d6"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$uac2(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x40, 0x8, 0x60, {0x60, 0x6, "82b9edb408eee300581f6d54f8dc9eeefddd736b3dd40111d93e1df4f7a23efa64e9f52bd86427a923c86c9e2dd54256bc77eff7fd9d8f53e3e1cddf121e20a7d5f1cf479f0daf5acdb491af535e3ca4191a029f7c2fe195e569b43e6429"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="200ed8000000baa7f25db27a2dd55a744b5d2445872583c18c9bc402b8adfd94af9d16e991e0e3c6b770a2d049c73f5d89190f5043b07a81b911853e097a8289a8a0a83981463203e41fadb47099ee9986c0976f80c8a040609c554a19d398fc6d323f0d338b53526597f22e80761480c9b4da6bfe30929f6292d50c17a4f7de8de7f63253367550dbf543edcdfb65c519240cf9ef7f24e3c5d33c262de87ca03ed3805a2be98575b4d12aee5359c81fdd185eeb42809c74d987d0ae3dd7bf3f50ecad307f8ca8bf77f7066752100200"/222], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}}) (async, rerun: 64) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000001, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r3 = socket(0x2b, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) (async, rerun: 32) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (rerun: 32) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) (async) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x9f4, {}, {}, @raw32={[0x2600]}}], 0x1c) (async) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) close(0x3) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="14010000290001002d020000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) 42.475470006s ago: executing program 36 (id=526): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x7e, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) (rerun: 32) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000d6"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$uac2(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x40, 0x8, 0x60, {0x60, 0x6, "82b9edb408eee300581f6d54f8dc9eeefddd736b3dd40111d93e1df4f7a23efa64e9f52bd86427a923c86c9e2dd54256bc77eff7fd9d8f53e3e1cddf121e20a7d5f1cf479f0daf5acdb491af535e3ca4191a029f7c2fe195e569b43e6429"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="200ed8000000baa7f25db27a2dd55a744b5d2445872583c18c9bc402b8adfd94af9d16e991e0e3c6b770a2d049c73f5d89190f5043b07a81b911853e097a8289a8a0a83981463203e41fadb47099ee9986c0976f80c8a040609c554a19d398fc6d323f0d338b53526597f22e80761480c9b4da6bfe30929f6292d50c17a4f7de8de7f63253367550dbf543edcdfb65c519240cf9ef7f24e3c5d33c262de87ca03ed3805a2be98575b4d12aee5359c81fdd185eeb42809c74d987d0ae3dd7bf3f50ecad307f8ca8bf77f7066752100200"/222], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}}) (async, rerun: 64) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000001, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r3 = socket(0x2b, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) (async, rerun: 32) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (rerun: 32) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) (async) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x9f4, {}, {}, @raw32={[0x2600]}}], 0x1c) (async) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) close(0x3) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="14010000290001002d020000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) 9.612341665s ago: executing program 1 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x300, 0x1, 0x6, 0xfffffffffffffffe}) 8.112009246s ago: executing program 1 (id=648): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000001080)={"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"}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 6.681993956s ago: executing program 9 (id=654): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r1 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240000007058402400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) write$P9_RREADLINK(r2, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) syz_usb_disconnect(r1) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x48080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) socket$kcm(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xd80}, 0x1, 0x0, 0x0, 0x41}, 0x2004c880) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) 6.369952313s ago: executing program 2 (id=656): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = dup(r2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1, r3}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04000900000065"], 0x28}, 0x1, 0x0, 0x0, 0xec}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x55, 0x5, 0x40, '\x00', 0xe}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x40007}, 0x94) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r12) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r13, 0xc004743e, 0x110e22fff6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffe8) 6.018585374s ago: executing program 8 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0}) r3 = socket$kcm(0x10, 0x2, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r6, 0x40104d01, &(0x7f0000000a00)) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x202020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x24, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0xa, 0x5, 0x2, 0x20, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @generic={0x5, 0xb, 0x4, 0x3, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x25}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0xfffffffd, 0x75, &(0x7f0000000340)=""/117, 0xc3000, 0x1c, '\x00', r5, 0x0, r1, 0x8, &(0x7f00000003c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xf, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1, r6, r7], 0x0, 0x10, 0xaff}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={r2, 0x6, 0x7fffffff, 0x7, 0x3, [], [0x8, 0x4, 0x8, 0xffff0001], [0x24, 0x9, 0x10001], [0xa, 0xc, 0xffffffffffffffff, 0xff]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000214000780080012400006000008001300000000080d000300686173683a6e657400000000050005000200000005000400000000000900020073797a31000000000500010007"], 0x5c}}, 0x0) 5.708269911s ago: executing program 8 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = dup(r2) syz_ublk_setup_queues(r4, r3, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe170, 0x80, 0x3, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f74, 0x2, 0x1, 0x337, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd59c, 0x4, 0x0, 0x33a, 0x0, r4}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000440)=0x200000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x94, 0x82, 0xff, 0x40, 0x586, 0x1000, 0xaa5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x62, 0x40, 0x0, "", [{{0x9, 0x4, 0x56, 0x4, 0x2, 0x45, 0x43, 0xda, 0xb9, [], [{{0x9, 0x5, 0xe, 0x2, 0x8, 0x9, 0x4, 0x66}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x31, 0x9, 0x16}}]}}]}}]}}, &(0x7f0000000900)={0x12, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_gettime(0x3, &(0x7f0000000040)) r7 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010202010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xc, 0x3, 0x10, 0x13, 0x0, 0x823c, 0x60, 0x3, 0x27, 0x3, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000080)={0x6, 0x80000, "038b0765c281f69c18e84f7fa710c3654ce54f02578cfaff", {0x7, 0xe}, 0x8}) 5.524751807s ago: executing program 2 (id=661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@remote, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x1, 0x40, 0x8, 0x100, 0x6, 0x808082}) 5.405606073s ago: executing program 2 (id=662): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1f, 0x7, &(0x7f0000000000)=0x3, 0x4) 4.942213012s ago: executing program 9 (id=663): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x5c, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x74, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090262000101000000090400001202060000052406000005240000000d24010000000006241af7ff230c24130017e56b9ecbee"], 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x300, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000060000000000000000e2001e25b9bb47bc00", [0x8, 0xffffffff9673e35a]}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendmsg$tipc(r0, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x40001) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0) 4.577696322s ago: executing program 6 (id=664): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lstat(&(0x7f0000000040)='./my_sys\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r4, &(0x7f0000000100)=""/83, 0x53, 0x801f5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) (fail_nth: 7) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, &(0x7f0000000800), 0x0) syz_emit_ethernet(0x41, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "001863"}}}}}, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) 4.510660698s ago: executing program 2 (id=665): r0 = io_uring_setup(0x85822, &(0x7f0000000580)={0x0, 0x8270, 0x100, 0x3, 0x846}) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000340), 0x0) 4.015759806s ago: executing program 8 (id=666): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@empty, @multicast1, 0x16, 0x19}}) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="24000000010006", 0x7) 4.015404468s ago: executing program 2 (id=667): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) r2 = syz_ublk_setup_io_uring(0x23, &(0x7f0000000340)={0x0, 0x0, 0x10000, 0x2, 0x27e, 0x0, r0}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="70e7c1d345bd7deba3a7df31dd36aa231210f61b2fe94e6dc26977799a4f6f35eecdf3b6ae8e1130db11c01bfbe2ebe2d3dea3f79a5e8abbdddfaceca90fc0260c1eeae6f8976c03b1a213001b7ad7e4c44dd2641c35604a48a9a776b41c48716dc7888ec41fe764e83033809ef88d888a56aab67c982f0cb671fa41f88a8840a9eae0a8452be58caad281125e71e0f10303ca2df4e2b9a1226a002d6b6f9deff52459f7ac23ae0eef39e6c98a25929c7be25a44ceff17ff6b25fbedf0c0ac96585d2e6a8c25b25ae9d09be4982e2acd3e15", 0xd2, 0x10123}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000733000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) 3.501392119s ago: executing program 6 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0x2e3c, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0x27c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xba12663a254f322, 0x5}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x250, 0x2, [@m_connmark={0x13c, 0x13, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x4d, 0x6, 0x1, 0x3ff}, 0x80}}]}, {0xed, 0x6, "f6f50e4f1209659002552e754117d02f6a15ff482c3c396f14a1f4ac27144e0c93e17a1024f3b75c46594d18f8d55845f2172099bba57e57aa1bfd7a277fc130e4bd9b6e419a497e4332ece0da1f0f4a2f2b270dd69379e6e706dd97c6343857be0c8a8de492f828efb2f6dcce47bbc145b1707da9f1fb56830774252588a187ecef0c9e7657235fc43a5eea9754bd2907977e13f7b6506311824636ba267c23556ec56793c72708a1ced9ed89e9e5b4830fdb2b84b25c28d60b3e42179d07e8c7c135e3ca7067087d65fe82416dc1b22141cc48d4ecbb67957af7432a61d87a8ba725e4251424a709"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x110, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x6, 0x4, 0x3, 0x0, 0x7f}}]}, {0xcd, 0x6, "dd3250e9d8432596ffa806169243b5dfe25427cbdbe18508f2ad470a5b6c0b71c137f772aa8423a557742b206087e8514a63a0f700200b52b82056e8c1b5057dc3d5994713b2516988d23ecad8a7d74a9b1436f2ea1596f239e7e6f9d16c5a2e0f99e7b1bd8daf2e388dac30320c5af530516c72effd0be9804ac555ea94a7af91f782136cdc0714b85775a04918ee4cc6888787bef8a7ea2ff8719f6ea958d1c3bf43b9dab1460884c3fd5343c0ff92e083c9c4643b86542ab19d54d274212f9a29de4e77dbd8df27"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2b5c, 0x2, [@TCA_CGROUP_ACT={0x2b58, 0x1, [@m_pedit={0x2b54, 0xb, 0x0, 0x0, {{0xa}, {0x2b28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x2, 0x97c, 0x1, 0x6, 0x200}, 0x8a, 0x80, [{0x8, 0x5875f981, 0x6, 0x4, 0xa, 0x8}, {0x6, 0xec4a, 0xff, 0xfffffffe, 0x7}]}, [{0x8, 0xac1f, 0x100, 0xfffffff0, 0x2, 0x7}, {0xfffff000, 0x7, 0x80000000, 0x7, 0x200, 0x8}, {0x1800, 0x9, 0x6, 0xfffffff7, 0xffff, 0x7}, {0x4, 0xd5, 0x8, 0x0, 0x4447, 0x5}, {0x4, 0xc63f, 0x1, 0x1, 0xed1, 0x2}, {0xffffffff, 0xe8, 0x800, 0x83b, 0x8, 0x6}, {0xc, 0xffff7fff, 0x3, 0x5, 0x7f, 0xfffffffb}, {0xb, 0x9, 0x408, 0x80, 0x6, 0x768}, {0xffff8bff, 0x8, 0x3c27, 0x3, 0xc, 0x75ef2317}, {0x5, 0x8, 0x1, 0x4, 0x5, 0x3}, {0x8, 0x8, 0x80000000, 0x7, 0x0, 0x10}, {0xfff, 0x8, 0x80000000, 0x80, 0x6, 0x5}, {0xa0, 0x101, 0x6, 0x3, 0x0, 0xdf}, {0x4, 0x5, 0x2, 0x3, 0xfffff000, 0xaa6}, {0x7, 0x80000000, 0x8, 0xfffffff4, 0xfe6, 0x75}, {0x3, 0xa6, 0x0, 0x2, 0x40, 0x8}, {0x4, 0x9d3, 0x6, 0x5, 0xd, 0x4}, {0xfd3afc0, 0x3, 0x5, 0x2, 0xff, 0xfffffabf}, {0x5, 0x2, 0xfff, 0x2, 0x2, 0x81}, {0xcb09, 0xb, 0x3ff, 0x6, 0xa, 0x3}, {0x1000, 0x1, 0x200, 0x2, 0x5, 0xff}, {0x4a6, 0xd3, 0x0, 0x8, 0x4, 0x9}, {0x3, 0x4, 0x7fffffff, 0x8, 0x7, 0xe921}, {0x6, 0x4, 0x7fff, 0xc16, 0x9, 0x8}, {0xffff, 0x7, 0x7, 0x10000, 0xffffffff, 0xffff8001}, {0x6, 0xb, 0x28dc, 0x6, 0x7fff, 0x9}, {0x4, 0x8001, 0x1000, 0x60d1, 0x1, 0x1}, {0x5, 0x1, 0x4, 0xffff7fff, 0xe4c, 0x7cc28a0b}, {0x9, 0x8, 0x200020, 0xdb78, 0x4, 0x7}, {0x80, 0xffffffff, 0x4, 0x400, 0xffff5956, 0x8}, {0x1, 0x1000, 0x4, 0x4, 0xffffffff}, {0x6, 0x7fff, 0x3, 0x27a8, 0x9a3, 0x7}, {0x4, 0x80, 0x1ff, 0xffffffff, 0x5, 0x5}, {0x2, 0x62, 0x6e, 0x1000, 0x3, 0xff}, {0x7, 0x8, 0x2, 0xffffffff, 0x400, 0x10001}, {0x0, 0x7ff, 0x8, 0x7, 0xff, 0x69c}, {0x7, 0x7, 0x3, 0x2, 0x1, 0x2}, {0xd1b4, 0x2, 0x0, 0x2, 0x3ff, 0x6}, {0x636cf16a, 0x7fffffff, 0x80000000, 0x3, 0x7f, 0x660b}, {0x4, 0xb3, 0xc2c, 0x2, 0x5, 0x4}, {0xffff3de5, 0x5, 0x3, 0x6, 0x4b7, 0x7fffffff}, {0x10c3, 0x4, 0x4, 0xfffff1ce, 0x800, 0x4}, {0x750, 0x0, 0x7, 0x7, 0x6, 0x3}, {0x7, 0xff, 0x1bdf, 0x5, 0x7ff, 0x5}, {0xff, 0x1206f6e2, 0x0, 0x800, 0x2, 0x200}, {0x5, 0x1a, 0x400, 0x3, 0x608b, 0x9}, {0x4, 0x2, 0x2, 0x4, 0x9, 0x2}, {0x200, 0x8, 0x1, 0x6, 0x11f7, 0x7}, {0xffff, 0x2, 0x200, 0x9, 0xffff, 0x100}, {0x0, 0xffff8000, 0x6, 0xfff, 0xb1e, 0xc33}, {0x8, 0x76f, 0x5, 0x7, 0xffffffff, 0x9}, {0x80000001, 0x9, 0x3, 0x7, 0x80, 0xd}, {0x5, 0x80000001, 0x9, 0x3, 0xb5f, 0x3}, {0x4, 0xcfb, 0x7, 0x1, 0x2, 0x80000000}, {0x7fff, 0x8, 0x165, 0xb59c, 0x7, 0x2}, {0x14, 0x4, 0x527, 0x8, 0x10000}, {0xac1, 0x5, 0x2, 0x7, 0x4, 0xd3}, {0x1, 0xc7, 0x15, 0xb, 0x9, 0x4}, {0x9, 0x0, 0x8, 0x7, 0x5, 0x7fffffff}, {0x2, 0x5, 0x2, 0x1, 0x1a3f9ae0, 0xc}, {0x9, 0x8, 0x6, 0xd1, 0x9, 0x7}, {0x6, 0x334, 0xe7cf, 0x8000, 0x3a0, 0x9}, {0x67, 0x0, 0xc, 0x4, 0x400, 0x86c}, {0x3, 0x0, 0xfffffff6, 0x80000000, 0x3}, {0x0, 0xb6, 0x2, 0x6e52, 0x2, 0x3}, {0x4, 0x4, 0x81, 0x8, 0x8, 0x7}, {0xfffffffc, 0x9, 0x2, 0x0, 0x1, 0x7fff}, {0x1, 0x7fffffff, 0xffffffff, 0xe5d, 0x5, 0x7de7}, {0x1, 0x5a, 0x0, 0xfffffff9, 0x3, 0x7b}, {0x369f, 0x0, 0x1c18, 0x401, 0x3, 0x931}, {0xfff, 0x12fc, 0x7, 0x67d, 0x8001, 0x10}, {0x4, 0x7f, 0x9, 0x81, 0x101, 0x5}, {0x2, 0x8001, 0x925, 0x8, 0x7, 0xfffffff8}, {0xf2d, 0x7ee, 0x80000000, 0x988, 0x9, 0x6}, {0x0, 0x2, 0x5, 0x120000, 0x0, 0x9a}, {0x100, 0xfffffffe, 0x1ff, 0x5, 0x8, 0xfffffffb}, {0xfffffff8, 0x9, 0x7ff, 0x70, 0x9, 0x1}, {0x5, 0x3, 0x0, 0x8, 0x1, 0x80}, {0x81, 0x8, 0x5, 0x5, 0x1000, 0x800}, {0xd, 0x3, 0x3, 0x3, 0x21, 0x728e357b}, {0x0, 0x1, 0x9, 0x4, 0x2, 0xb}, {0xfffffffa, 0x80, 0x7, 0x10001, 0x6, 0x4}, {0x5afba23, 0xfffff43e, 0x9, 0xfffffff9, 0x3, 0x4}, {0x5, 0x40, 0x81, 0x6, 0x400, 0x2c000000}, {0x0, 0x1, 0x9, 0x200, 0x4, 0x100000}, {0x1, 0x400, 0xf, 0x9, 0x0, 0x40}, {0x5, 0x4361, 0x7, 0x5f, 0x3, 0x8}, {0x1, 0xcb46, 0x7f, 0x4, 0x7f, 0x2}, {0x401, 0x10000, 0x2, 0x2, 0x2, 0xfffff74e}, {0x8000, 0x1, 0x0, 0xfffffffd, 0x2, 0x6}, {0x9, 0x10, 0x2, 0x1, 0x3, 0xfc}, {0x7, 0x7, 0x5, 0x1, 0x8ca4, 0x6}, {0x5, 0x9a9, 0xffffffff, 0x8, 0xffffffbd, 0xfffffff9}, {0x1, 0x2, 0x452111f6, 0xfffffffb, 0x6, 0x9}, {0x5, 0x4, 0x7, 0x2, 0x9, 0x9}, {0x4, 0x8000, 0x9, 0xf, 0xd3be, 0xffffffff}, {0x5, 0x6, 0x8, 0x2, 0x3, 0x2}, {0x5, 0x8, 0x10000, 0x10001, 0xfffffffe, 0x6}, {0x7, 0x90, 0x1, 0x2, 0x6, 0x9}, {0x0, 0x6, 0xfff, 0x2, 0x1, 0x80000001}, {0x5, 0x9, 0xc, 0x6, 0x964, 0xffffffff}, {0xb, 0x4, 0x8, 0x81, 0xf513, 0x343}, {0x0, 0x1, 0xfffff801, 0x319, 0x2800000, 0x40}, {0x6, 0x8, 0x40, 0x7, 0x0, 0x5}, {0x3, 0x3, 0xd, 0x8, 0x10001, 0x2}, {0x2, 0x4, 0x7, 0x8, 0x400, 0x2}, {0x100, 0x8, 0x7fffffff, 0x0, 0x6, 0x9}, {0x8, 0x10, 0x7afb, 0x6, 0x1923f85c, 0x5}, {0x3, 0x9, 0x2, 0x3, 0x6, 0x7}, {0x6, 0x3, 0x7fffffff, 0x1, 0x4, 0x1c000000}, {0x1, 0xfffffffe, 0x3ff, 0x7fffffff, 0x1ff, 0x6}, {0x8000, 0xffff73df, 0xb, 0x66f3, 0x8001, 0x2}, {0x80, 0x521b6b31, 0x7, 0x3, 0x3, 0x6}, {0x6, 0x3, 0x0, 0x7, 0xfffffff7, 0x8}, {0x401, 0xe, 0xc, 0x7, 0x5f51, 0xbee}, {0x6, 0xb, 0x6, 0x3800, 0x8, 0x9}, {0x3, 0x4, 0x8, 0x6, 0x3, 0x4}, {0x1a70, 0x2, 0x8, 0x400, 0xe05, 0x7}, {0xffff, 0xc4, 0x684e, 0x9, 0x81, 0x93c}, {0x2, 0x3, 0x2, 0xffff, 0x80000001, 0x101}, {0x4, 0x12ef, 0x8001, 0x1b, 0x2, 0xf1d00}, {0xfffffff2, 0xb82, 0x101, 0x6, 0x3, 0xff}, {0x4, 0x816f, 0xbee, 0x4, 0x0, 0x3}, {0xb, 0x10, 0x0, 0x3, 0x9, 0x2}, {0x5, 0x9, 0x3, 0x81, 0x9}, {0xfff, 0x1, 0x6, 0x7, 0x4, 0x4a}, {0xb8b, 0x1, 0xb, 0xc, 0x40}, {0x4, 0xf1e0, 0x6ba2, 0x8001, 0x7, 0x416d}], [{0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0xa46238420b1f4f47}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x2}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x7, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x42b87ee76b9da29f}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x4}, {0x1}, {0x4}, {0x5}, {0x1}, {0x4}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xd0, 0x572, 0x3}, 0x7f, 0x2, [{0xfffffff6, 0x5, 0x7, 0x9, 0x2, 0xd}]}, [{0x8001, 0x3, 0x4, 0x6, 0x9, 0x5}, {0x0, 0x2, 0x40, 0x7e2, 0xfffffffd, 0x7fffffff}, {0x8, 0x1, 0x8, 0x2, 0xb348, 0x400}, {0x101, 0x7, 0x8, 0x2, 0xfffffffa}, {0x6, 0x1, 0x414587ef, 0x8, 0xffffffff, 0x6}, {0x6, 0x9, 0x7fff, 0x9, 0x2, 0x8}, {0x7, 0x9, 0x6, 0x2, 0x1ff, 0x4}, {0xc, 0x5, 0x6, 0xffff, 0x1, 0x2}, {0x0, 0x1b4, 0xf, 0xf8b, 0x7, 0xca}, {0xb, 0x1, 0x5, 0x71, 0xc}, {0x0, 0x0, 0x7, 0x80, 0x66}, {0x8, 0xe4ee, 0x7, 0x6, 0x97, 0x1000}, {0x38ef, 0x6, 0x900000, 0x7, 0x0, 0x4}, {0x0, 0x5, 0xfffe00, 0xe2, 0xffffff00, 0x8}, {0x2, 0xe000, 0x7, 0x1, 0xffffff01, 0x80}, {0xd, 0x7fff, 0x15e, 0x1, 0x3, 0x7}, {0x6, 0xffffffff, 0x6, 0x1ff, 0x7, 0x3}, {0x7f, 0xfff, 0x8, 0xf4, 0x6c0, 0x2}, {0x5, 0x0, 0x8, 0x4, 0xffffffff, 0x5}, {0x400, 0x5, 0x0, 0x7, 0x1, 0x3}, {0x2, 0x8, 0x6a, 0x4, 0x36, 0x8001}, {0x3ff, 0x1, 0x0, 0xffffffff, 0x7, 0x6}, {0x2, 0x8fe, 0x123, 0xd, 0x5, 0x4}, {0xfffffff8, 0x2, 0x6, 0x2, 0x3, 0x6d2}, {0x7, 0xbee6, 0x6, 0x8000, 0x4, 0x1000}, {0x9, 0x9, 0x1, 0x2, 0x0, 0x1000}, {0x0, 0x5, 0xfffffe00, 0x5, 0x8, 0x5}, {0x784, 0x3, 0xfff, 0xfc, 0x200, 0x7fffffff}, {0x9, 0xfffff801, 0x7, 0x686, 0x80000001, 0x9}, {0xc, 0xc597214, 0x9, 0x170e, 0x23, 0x6}, {0x80000001, 0x0, 0x7, 0x3, 0x3, 0xffff}, {0x7fffffff, 0x3, 0x9, 0x6c1, 0xdb, 0xff}, {0x1, 0x8, 0x8001, 0xb, 0x7, 0x3}, {0x10001, 0x2, 0xf, 0x7, 0x100, 0x7}, {0x9, 0x7, 0x0, 0x8, 0x5a40, 0x4}, {0x7fff, 0x39, 0x3, 0x9, 0x236, 0x8}, {0x4, 0xfff, 0x0, 0x8001, 0x40, 0x8}, {0x101, 0x8000, 0x6, 0x1, 0xc57f, 0x1}, {0x1, 0x8903, 0x4, 0x8, 0x1c98}, {0x518e31c, 0x5, 0x1000, 0x2, 0x5, 0x4}, {0x7, 0x2, 0xfd, 0x6, 0x5, 0x1}, {0x800, 0x7fffffff, 0x3, 0xfffff800, 0x10000, 0x8}, {0xc, 0x1, 0x401, 0x3, 0x6d, 0x978c}, {0xa1, 0x9a, 0x44d, 0x9, 0x194, 0x5}, {0x7, 0x0, 0x9, 0xc, 0x6e, 0x7}, {0x5, 0x5, 0x9, 0x101, 0x4, 0x5}, {0x4, 0x0, 0xfffff697, 0x6, 0x6, 0x3}, {0xe, 0x10001, 0xc637, 0x5, 0x7ff, 0x2}, {0x5, 0x0, 0x3, 0x1, 0xf, 0x87}, {0x2, 0x3, 0x7, 0xa, 0x80000000, 0x9}, {0xfffff461, 0x7fffffff, 0x71, 0x2, 0x80000001, 0x8}, {0x3, 0x3, 0x8000, 0x7f, 0x9, 0x2}, {0x8, 0x3, 0xffff, 0xe220, 0x9, 0x96}, {0x3, 0x9, 0xffffcaec, 0x6, 0x8, 0xfffffffe}, {0x1, 0x7f, 0x1, 0xffffc3a6, 0x401, 0x9}, {0x40000000, 0x6, 0xffff, 0x7, 0x7, 0x2}, {0xbab7, 0x5, 0x6, 0x1a, 0x5, 0x2}, {0x0, 0xfffffffa, 0x1, 0x80000001, 0x28c, 0x40}, {0xebb, 0x8001, 0x4, 0xa, 0x4, 0x3}, {0x2, 0x35a, 0x2, 0x4, 0x4, 0x3}, {0x2, 0x2, 0x5, 0x3, 0x5, 0x8}, {0x2, 0x4, 0x4, 0xf3, 0x9, 0x3}, {0x2, 0xc51, 0x4, 0x4, 0x3ff, 0x7}, {0xf, 0x0, 0x8, 0x6, 0x1cc, 0x2}, {0x1, 0x5, 0x1, 0x9, 0x100}, {0x5, 0x3, 0x5, 0x8, 0x9, 0x6}, {0x4, 0x4, 0x2, 0x9356, 0x9, 0x392}, {0x400, 0x5ba5, 0x5, 0x3, 0x0, 0x9}, {0xffff1b0f, 0x8001, 0xffffdb93, 0x81, 0xffff, 0x2}, {0x9, 0x5, 0x7, 0x1, 0x8, 0xf}, {0x9, 0x4, 0x80000001, 0x2, 0xfaca, 0x28e}, {0x2, 0x4, 0x3, 0x9, 0x4, 0x37}, {0xdd, 0xb7a0, 0x7f, 0x7, 0x1ff, 0xff}, {0xb, 0x9, 0x1, 0x3, 0x100, 0xf4}, {0x2, 0x6, 0xc1, 0x9, 0x1000, 0x2}, {0x8, 0x3, 0x9, 0x0, 0x0, 0x9e}, {0x8, 0x10001, 0x40ee, 0x7, 0x3, 0x7f}, {0x7, 0x8, 0x4, 0x7f, 0x6a79, 0x4}, {0x487d, 0x0, 0x10000, 0x2a, 0x100, 0x64c4686e}, {0x8, 0xce7a, 0xb, 0x23c9036d, 0x7, 0x10}, {0xff, 0xcfb, 0x80000000, 0x1, 0xe, 0x4d4}, {0x31e0e21f, 0x6, 0x7bd, 0x5, 0x1000, 0x8}, {0xe, 0xb667, 0x610, 0x8, 0x8, 0xd2c5}, {0x80000000, 0x7, 0x7, 0x1ff, 0xa694, 0x4}, {0x2, 0x9, 0x1a1, 0x200, 0xf072, 0xfffff72e}, {0x7, 0x8000, 0x5, 0x4, 0x7, 0x1}, {0x8d56, 0x3, 0xb9, 0x9, 0x10001, 0xfffffffd}, {0xc, 0x4, 0x7, 0xafb6, 0x3a48, 0x8}, {0xf, 0x6, 0x2, 0xa638, 0xffffffff, 0x6}, {0x1, 0x80, 0x200, 0x1ff, 0x3, 0x4}, {0x4, 0x22b4, 0x3, 0x3, 0x9, 0x3a}, {0xe, 0x800, 0x9, 0x6, 0x92, 0x800}, {0xb, 0x4, 0x8, 0x7, 0xed70, 0x2}, {0x1, 0x6ef, 0x80000000, 0x10000, 0x80, 0x5}, {0x8, 0x7fffffff, 0xe5f9, 0x5, 0x80000001, 0x8}, {0x1, 0x10000, 0xb, 0x8000, 0x2, 0xc7}, {0x0, 0x5, 0x8, 0x1f31, 0x61}, {0x7ff, 0xd292, 0x8, 0xfffffffc, 0x3, 0x8}, {0x0, 0x2, 0x1000, 0xffffff98, 0x4800000}, {0x401, 0x9, 0x4, 0x4, 0x4, 0x10001}, {0x5, 0x9, 0xfffffff9, 0x7, 0x9}, {0xe, 0xd94, 0x4, 0x2, 0x4, 0x9}, {0x3ff, 0x3, 0x7, 0xf0f0, 0x7, 0x10}, {0x80, 0xff, 0x101, 0x4, 0x7, 0x8001}, {0x120000, 0x4, 0x7, 0x73a, 0xf48e, 0x1}, {0x10, 0x7, 0x3, 0x0, 0x1, 0xfffffff7}, {0x3ff, 0x9, 0x9e, 0x8, 0x5, 0x7}, {0xa4, 0x2, 0xffff, 0x9, 0x7}, {0xb, 0x9, 0x40, 0xd8, 0x1, 0x3400000}, {0x2, 0x8e, 0x68fc, 0xff, 0x6, 0x5}, {0x2, 0x0, 0x3, 0x9, 0x275, 0x2}, {0x6, 0x1ff, 0x10, 0x5, 0x400, 0xfff}, {0x4, 0x0, 0xffffff80, 0x80000001, 0x1, 0x6}, {0x4, 0x6, 0x0, 0x1000, 0x7feb, 0x4}, {0x4, 0x520c, 0x618, 0x3, 0x6, 0xa}, {0x3, 0x81, 0x0, 0x9, 0x5, 0xffffffff}, {0x7, 0x7, 0x3, 0x0, 0x80, 0x1}, {0x40, 0x3, 0x3, 0x101, 0x0, 0x31}, {0x2, 0xfffffff8, 0x9, 0xf, 0x1, 0x1}, {0xfffffff9, 0x5, 0xb, 0x1, 0x8, 0x1}, {0xfffffff9, 0x7, 0xff, 0x7, 0x8, 0x6}, {0x5, 0xffffffff, 0x7f80000, 0x8001, 0x1000100, 0x4}, {0x5, 0x8, 0x5, 0x5, 0x4, 0xfffffff7}, {0x0, 0xffffff9e, 0x6, 0x5, 0x4, 0x40}, {0x4, 0x0, 0x4, 0x7, 0x47, 0x4}, {0x8, 0x6, 0x81, 0x5, 0x8e6c, 0x6}, {0x8, 0x9, 0xd, 0x7, 0xfffffffd, 0x3}, {0xc9f, 0x1, 0x3, 0x2, 0x5, 0x271}], [{0x3, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x9a2bdb8565d0b58f, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x38776387de302820}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x2dbe85d22b710ec5}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {}, {}, {0x1, 0x1}, {0x2, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x3}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xfff, 0x5, 0x7, 0x10, 0x4}, 0xe, 0x8, [{0x2a7, 0xfffffffd, 0x9bc8, 0x0, 0xa, 0x9}, {0x5, 0x7, 0x3, 0xb5b, 0x8, 0x3}, {0x7ee, 0xa1, 0xffffff7f, 0x4, 0x2, 0xfff}, {0xffffffff, 0x2, 0x2, 0x9, 0x4, 0x3ff}, {0xe, 0x9, 0x2, 0x6521667, 0x1000}]}, [{0x6, 0x4e98, 0x7c159ba2, 0x9, 0xd9, 0x80}, {0x7f, 0x9, 0x9, 0xfffffffb, 0x100, 0x6}, {0x4, 0x8, 0x4, 0x2, 0x80000001, 0x5}, {0xfe, 0x7fffffff, 0x100, 0x1, 0x0, 0x9d}, {0x0, 0x2e, 0x6, 0x8, 0xba48, 0x1ff}, {0x1, 0xb5, 0x5, 0x2, 0x7, 0x7}, {0x9, 0x5, 0xf69, 0x8, 0x401, 0x9}, {0x39086aa7, 0xe0, 0x6, 0x1, 0x7, 0x4}, {0x5, 0x8, 0x2, 0x81, 0x4, 0x7}, {0x7, 0x7fffffff, 0x7fff, 0x0, 0x1, 0x1}, {0x8851, 0x8, 0xffff, 0x5, 0x5, 0x2}, {0x0, 0xffff, 0x8, 0x9, 0x6, 0x5246}, {0x7, 0x7fff, 0x9, 0x7d, 0xb8e, 0x2}, {0xca43, 0x311, 0x800, 0x7fffffff, 0x8001, 0xdf}, {0x698100, 0x5, 0x9, 0x1, 0x800, 0x4}, {0x10000, 0x5, 0x5, 0xc01e, 0x7, 0x400}, {0x5, 0xeb4, 0x4, 0x0, 0x4, 0x5286}, {0x1, 0x9, 0x5, 0x2, 0x0, 0x55}, {0xe9, 0x101, 0x5, 0x2, 0x8, 0xcde5}, {0x0, 0x2, 0x10001, 0x3ff, 0x99, 0x7}, {0x0, 0x2, 0x1, 0x3, 0x8, 0x9}, {0x6, 0x2, 0x10, 0x9eb, 0x8, 0x949f}, {0x7, 0x7, 0x9, 0x7, 0x40, 0x7}, {0x5, 0x0, 0x4716, 0x4, 0x1, 0x1}, {0x0, 0x7bd, 0x7fff, 0x180a, 0x7fff, 0x7}, {0x45, 0xb, 0x4, 0xb, 0xcb7, 0x6}, {0x7, 0x2374, 0x10, 0x7, 0x9, 0x7}, {0x6, 0x0, 0x8001, 0xff, 0x3, 0x8}, {0x1, 0x8, 0x7, 0xe35, 0x8, 0x7f}, {0x5, 0x6, 0x7, 0xffffffff, 0x401, 0x8}, {0x2, 0x2a0a, 0xea6e, 0x1, 0x8, 0x80}, {0xffffffff, 0x3ff, 0x1, 0x9, 0xf, 0xff}, {0xda, 0x66bf, 0x7, 0xd4, 0x7, 0x5}, {0x8, 0x80, 0x40, 0x10001, 0x0, 0x7ff}, {0x0, 0x0, 0x8, 0x6, 0x5, 0x6}, {0x4, 0x1, 0x9, 0x5, 0x5, 0x3e}, {0x80000001, 0x8, 0x38e, 0xac74, 0x7, 0x10000}, {0x7, 0x3, 0x7, 0x9, 0x49, 0x7fffffff}, {0x3, 0x401, 0x9, 0x0, 0x0, 0x5}, {0x9, 0x6, 0x3, 0x80000001, 0x4, 0x1}, {0x4, 0x0, 0x6, 0x8, 0x80000000, 0x7}, {0x584, 0x7fffffff, 0x5, 0x8000, 0xfffffffc, 0x4}, {0x4, 0x8, 0x3ff, 0x3, 0x1, 0x8}, {0x8001, 0x8, 0xff, 0x5, 0x7f, 0x80000001}, {0x2, 0xc, 0x101, 0x7, 0x6, 0x7}, {0x1, 0x5, 0x101, 0x1, 0x94e, 0x4}, {0xfe, 0x6, 0x5f2, 0x3, 0xfffff000}, {0x9de2, 0x4, 0x80000001, 0x2, 0x6, 0x3}, {0x9, 0x3, 0x5, 0x0, 0x70, 0x4}, {0x213a, 0x8, 0x2, 0x5, 0x7, 0xb2}, {0xfffffff7, 0x1, 0xf9ec, 0x2, 0x7ff, 0x40000000}, {0x7, 0x10001, 0x7, 0x1ff, 0x3, 0x2}, {0x6, 0x2, 0x80000001, 0x0, 0xd, 0x7ff}, {0x4, 0xc, 0x3, 0x6, 0x7, 0x3}, {0x9, 0x0, 0x5254, 0x58, 0x4, 0x927}, {0xffffff74, 0x100, 0x2, 0xfa, 0x81}, {0x9, 0x3, 0x79000000, 0x3, 0x8, 0xfffffffc}, {0x200, 0x9, 0x8d2c, 0xfffffffc, 0x2, 0x10000000}, {0xa, 0x2, 0x40, 0x5, 0xffffffaa, 0x18}, {0x0, 0x3, 0x5, 0x6, 0x0, 0x9515}, {0xd, 0x4, 0x2, 0x7, 0x83, 0xdc}, {0x6, 0x1, 0x1, 0x9, 0x7f, 0x3}, {0x54, 0x3, 0x1, 0x5, 0x800, 0xb}, {0xfffffff7, 0x6, 0x8, 0xffffffff, 0xa, 0x7}, {0x7, 0x9, 0x1, 0x8c, 0xff, 0x795000}, {0x6, 0x80, 0x1, 0x4, 0x7ff, 0x74}, {0x3, 0x7, 0x9, 0x6, 0x4, 0x800}, {0x1, 0x3, 0x8, 0x0, 0x8, 0x8000}, {0xfff, 0x5b, 0x6, 0x8, 0xffffffff, 0x1}, {0x0, 0x0, 0x3, 0x9, 0xb, 0x400}, {0x5, 0x4, 0x3, 0x4f3, 0x9, 0x1ff}, {0x7, 0x401, 0x5, 0x3, 0x6, 0x3}, {0x6, 0x2, 0x4, 0x0, 0x100, 0x6}, {0x35e, 0xd, 0x9, 0x800, 0x4, 0x3}, {0x4, 0x4, 0x10, 0x5, 0xff, 0x3}, {0x2, 0x0, 0xa, 0x80, 0x7f, 0x3}, {0xd110, 0x200, 0x7, 0x8, 0x2d, 0x3}, {0x6, 0x2, 0xda843d7, 0x0, 0x188316d3, 0x8}, {0xb, 0x2, 0x1977, 0xdbe, 0x4, 0x9}, {0xfffffffa, 0x5, 0x1, 0x1, 0x6, 0x7}, {0x7fff, 0x8000, 0x101, 0x4, 0x1, 0x8}, {0x3, 0x10001, 0x9, 0x4, 0x8, 0xffff}, {0x7fffffff, 0x7d79, 0x1, 0x8, 0x9, 0xc}, {0x2, 0x9, 0xb1f4, 0x3, 0x20000000, 0x1fa6}, {0x81, 0x4, 0x1c0000, 0x6, 0xc, 0x800}, {0x80, 0x100, 0x0, 0x0, 0x0, 0xfff}, {0x4, 0x8, 0x8, 0x1, 0x5, 0x5}, {0x3, 0x1, 0x5, 0x9, 0x30e6, 0xa}, {0x8, 0x10, 0x5, 0x6, 0x6, 0x8}, {0x83df, 0x4, 0x9, 0x25f1, 0x1, 0x100}, {0x9, 0x3ff, 0x3, 0x6, 0x5, 0x3}, {0x9, 0x80, 0x1, 0x4, 0x6}, {0x0, 0x4270, 0x9, 0x9, 0x9, 0x2}, {0x5, 0x6d5, 0x8, 0xc0, 0x6, 0x3}, {0x40, 0x5, 0x7ff8, 0x4, 0x4, 0xfffffffc}, {0x8, 0x200, 0x5, 0x9, 0x200, 0x8001}, {0x5, 0x80, 0x100, 0x5, 0x7, 0x5d2}, {0x3, 0x8, 0x5, 0xfffffe00, 0x200}, {0xd, 0x1, 0xbb, 0x4, 0x4, 0x2a7}, {0x1, 0x1c000, 0x3, 0x0, 0x4ba2, 0x3}, {0x80000001, 0x8, 0x1000, 0x1, 0x5, 0x6}, {0x1a, 0x6000000, 0x80000000, 0x2, 0xfffffff9, 0x7}, {0x2, 0x233, 0x6, 0x134, 0xff, 0x7}, {0x0, 0x7, 0xffffffff, 0xff, 0x2, 0x5}, {0x4000000, 0x10000, 0x2, 0x0, 0xffff, 0x4}, {0x2, 0x7f, 0xffffffff, 0x1, 0x7, 0x80000001}, {0x2, 0x10, 0x8, 0x1fb, 0xee, 0x4}, {0xfffff8b3, 0xff, 0xe, 0x9, 0x1, 0x9}, {0xb, 0x3, 0x7, 0x8, 0x8, 0x800}, {0x4, 0x0, 0x1, 0x1, 0x8000, 0x1}, {0x0, 0x7fffffff, 0x4, 0x800, 0x4, 0x7a9b}, {0x3, 0x6, 0xffff3c3c, 0xaf5a, 0x2, 0xbe0}, {0xec, 0x4f, 0x6, 0x2000, 0x8, 0x1}, {0x3, 0x2, 0x90000000, 0x411, 0x1}, {0x1, 0x1ff, 0x4, 0x7, 0x9, 0x5}, {0x2, 0xe, 0x2, 0x9, 0x9, 0x6}, {0x88ac, 0x401, 0x40, 0x6, 0x9, 0x4}, {0x7fff, 0x1a, 0x8, 0xe468000, 0x400, 0x518}, {0x8, 0x2, 0x74, 0x7, 0x64d6, 0x8000}, {0x3, 0x8, 0x7, 0x1, 0x10001, 0x401}, {0x8, 0x3, 0x464, 0x2, 0x9, 0x81}, {0xa2, 0x3, 0x2, 0x7f, 0x5, 0x7}, {0x2, 0x2bec41ce, 0x0, 0x5, 0x1000, 0x401}, {0x10001, 0x6, 0x2, 0x7, 0x1, 0xe}, {0x1, 0x6, 0xfff, 0xd, 0x0, 0x90}, {0x5, 0x0, 0x1, 0x9, 0x2, 0x2}, {0x4, 0x3, 0x9, 0xe, 0xbf, 0xfffffff8}, {0x9, 0x6, 0x7, 0xd1, 0x81, 0x9}], [{0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x353c1e9c68583be0}, {0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x4}, {0x3}, {0x2, 0x1}, {0x3}, {0x7}, {0x2}, {0x2, 0x1}, {0x1}, {}, {}, {}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x4, 0x22bf1690da1ec7cf}, {0x6}, {}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0xf}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x4}, {}, {0x0, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x5, 0x4}, {0xe, 0x1}, {0x3, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x2e3c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r1, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) setresgid(0xee00, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050200010000fddbdf25120000008a04e40904000000000000008014000200626f6e645f736c6162655f31000000000000"], 0x34}}, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) 3.485014642s ago: executing program 2 (id=669): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='u\x01\x80\x00\v\xdbI\xc0\x86\x8a\xa3\x7f\x00\xba\x8dx\xf3l\xb1\x00\xcc\x04\xa3\x8f\x16\x8d\xe5\xe3z\x05\xb0\v\x97\xb6\xa4WG\xc3\x92\x1b\xc3\xad\x15\xfc\x9fN4\x8a\xa1J\x93c\xa1\xabB\xcaS\xf4\x7f\xfd \xc6uK\x06}\xd2A\x1e\xe9G\x16\xad(\xc0r\x17n\xbd\x95\xc0!\t\xae\xf3\xa6\xe9\x1a\x8b\b\xf9\x94\xb6e\x17q\x938\xed\x1f+k6\x86n9)9\xfd?\x98\xeb\xe2G\x02\x03\xd5\xb9', &(0x7f0000000240)='?<\x82~\xd7\a\x00\x00\x00=\x8e\x81\x1e\t~\x11\xf7\x82\xd1m\x06(\xe3\x87\x14\xb2\xc4\x18\x9e^\xac\xfe,\x1aa&\x1e\x8c}~\x8c\xca\fM\x83S\xb5}5:\xc1\xc2', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0xb, &(0x7f0000000000)) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x200c}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x1}, 0x0) pipe2$9p(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x2000000c}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) sendmmsg$inet(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000840)}}], 0x1, 0x28d1) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000102c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x5, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0xff, 0x84b5}, {0x9c, 0x4, 0x9, 0x3, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x7, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x9}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x0, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x1, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x80006, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x5, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x1, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x10001, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0x0, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xc9c, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x5, 0x7ffffffe, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x3ff, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x3, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x1, 0x9, 0x3, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0x8fff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x2, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x1f, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x80007, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x6, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0xa, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0xffffffff, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x7, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7ffffffd}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x40, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x0, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0xe000000, 0x1, 0x80000000}, {0x40, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0xff, 0x2}, {0x6, 0x80000000, 0x4, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x6, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x3, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x8, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x4, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0x10000000}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x3bc0db6a65e45a54}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000000000", @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x80}}, 0x4048884) 2.622129856s ago: executing program 1 (id=671): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='-- -4\n', 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) fsopen(&(0x7f0000000300)='squashfs\x00', 0x1) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) write$P9_RWALK(r2, 0x0, 0x30) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000001a80)=""/4161, 0x1041}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000400)=""/129, 0x81}, {&(0x7f0000000500)=""/4082, 0xff2}, {&(0x7f0000000100)=""/60, 0x3c}], 0x6}, 0xd}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x2000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)=ANY=[@ANYBLOB="20000000020101020000000000000008000000002000"/32], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x50) 2.582158796s ago: executing program 9 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getrlimit(0x8, &(0x7f0000000080)) getpid() syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x8, 0x7f, 0x6, &(0x7f00000002c0)={0x10, "dbe59aa96be76f16b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc9"}}) 2.372055724s ago: executing program 6 (id=673): r0 = socket$inet(0x2, 0x2, 0x1) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x102898, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, r2, &(0x7f0000000340)={0x8000000002000000, 0x8, 0x2000008, 0x2, 0x24, 0xffffffffffffffff, 0x9c59, 0xfffffffffffffffc, 0x100fff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, 0x0, &(0x7f00000008c0)="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", 0x1c8, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000180)='omfs\x00', 0x11d8010, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r9, r9, r9}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) 2.343318245s ago: executing program 1 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)="6252657175657374547970653d2daf", 0xf) fsopen(&(0x7f0000000100)='vfat\x00', 0x0) 2.271481851s ago: executing program 8 (id=675): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x6dc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}}, 0x80, 0x0}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0xfffffffffffffe4b) dup3(r1, r0, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x7fffffffffffffff, 0x6, 0x8, 0x8, 0x9}}]}) read(r4, &(0x7f0000000100)=""/215, 0xd7) 2.171884854s ago: executing program 1 (id=676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12"], 0x1000f) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.479723074s ago: executing program 9 (id=677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000140)={0xc000, 0x104000}) 1.393786387s ago: executing program 8 (id=678): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x809, 0x1233c1) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f0000019480)={0x80980914, 0x7, "9a555c14c966e1344198b9aaaa7da8c83e58e12800", 0x2000000000000, 0x100000004, 0x4, 0xfffffffffffffffe, 0x200008, 0x5, 0x4, 0x7, [0x9, 0x0, 0x9, 0xfffffffb]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x6, 0x28, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x12, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x1, 0x2, 0x7, 0x7, 0x18, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) utime(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0xfffffffffffffffb, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x77d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='100000', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.25578355s ago: executing program 6 (id=679): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000012bf14000000000000000000fe80000000000000000000000000002bfffffffd0000000014000d00200100000000000000000000000000000c001a"], 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)='%pI4 \x00'}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) listen(r0, 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 1.213435667s ago: executing program 9 (id=680): ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff0007058103"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) move_mount(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x64) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="05"], 0x10) 1.020121732s ago: executing program 6 (id=681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 879.551595ms ago: executing program 1 (id=682): openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) gettimeofday(0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) close(r0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff000705810340"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) move_mount(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x64) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0xc040) dup2(0xffffffffffffffff, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="120000000400000004000000f928000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000180)=r4}, 0x20) timer_create(0x7, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000100)={0x0}) 691.590755ms ago: executing program 8 (id=683): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) mprotect(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110325bd540000000000130000000c0009800800020000000000"], 0x20}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRES16=r5, @ANYBLOB="01002605"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000010) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002dbd7000fedbdf250a000000080001007063690011000200303030303a30303a31302e30000000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030003000000"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x4008010) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05090000000000000000242000bb0e0001000f0002006e86380542355ca7e7fc6e0d0000000000000000000000003bc319d7165cf637e577b83e0b257b89cfb33a8be1f32c250eb29627d308aa225fb637f5d43c1b2a5ac6896dab3952aab30af13962f057aa01245090b430ec2dcbfb4507d33279448eb80e4ce2ce565938a9b4f1308f36422776b86e6e8e4e689dbe4279b26d4ab27980f726675c4ce563351920940917ddb6f1c3079832bf82da004b68d9dec5f8048303e91f1864a1fe28108e75a6d80dc0ffe67c38911fa267a73fb6f06a5e59e3a5f8f2f56d9db38e23b86804e6e7ba9be50407310d7e0a6e3e80d1a12f207f453f492c0700115de89ae8bd4257c1d692daa4c3"], 0x34}}, 0x4) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x8000003d) close_range(r7, r10, 0x2) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r2, 0xffe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000096000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007e00000095"], &(0x7f0000000340)='syzkaller\x00', 0x40000009, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) 0s ago: executing program 6 (id=684): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3d35383a340890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001040), 0x498a01) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4d, 0x0, &(0x7f0000001d40)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue0\x00', 0x2}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) kernel console output (not intermixed with test programs): _pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.308141][ T7542] ? __pfx___schedule+0x10/0x10 [ 189.308160][ T7542] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 189.308181][ T7542] __vmalloc_node_noprof+0xad/0xf0 [ 189.308203][ T7542] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 189.308227][ T7542] __vmalloc_noprof+0xa3/0x120 [ 189.308249][ T7542] ? __pfx___vmalloc_noprof+0x10/0x10 [ 189.308280][ T7542] bpf_prog_alloc_no_stats+0x59/0x690 [ 189.308304][ T7542] bpf_prog_alloc+0x3b/0x200 [ 189.308323][ T7542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 189.308344][ T7542] bpf_prog_load+0x49e/0x2a80 [ 189.308372][ T7542] ? __pfx_bpf_prog_load+0x10/0x10 [ 189.308396][ T7542] ? irqentry_exit+0x24d/0xa10 [ 189.308433][ T7542] __sys_bpf+0x1f46/0x4a30 [ 189.308450][ T7542] ? rcu_is_watching+0x13/0xc0 [ 189.308478][ T7542] ? __pfx___sys_bpf+0x10/0x10 [ 189.308507][ T7542] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 189.308527][ T7542] ? __schedule+0x3130/0x6920 [ 189.308543][ T7542] ? acpi_os_map_iomem+0x4e0/0x5e0 [ 189.308570][ T7542] ? kvm_sched_clock_read+0x11/0x20 [ 189.308587][ T7542] ? sched_clock+0x3a/0x60 [ 189.308618][ T7542] ? __pfx_sched_clock_cpu+0x10/0x10 [ 189.308648][ T7542] ? find_held_lock+0x2b/0x80 [ 189.308671][ T7542] ? __schedule+0x315b/0x6920 [ 189.308687][ T7542] ? __schedule+0x315b/0x6920 [ 189.308705][ T7542] ? rcu_is_watching+0x13/0xc0 [ 189.308727][ T7542] ? trace_sched_exit_tp+0x120/0x160 [ 189.308765][ T7542] ? __pfx___schedule+0x10/0x10 [ 189.308787][ T7542] ? __x64_sys_bpf+0xce/0x140 [ 189.308808][ T7542] __x64_sys_bpf+0xce/0x140 [ 189.308826][ T7542] ? do_syscall_64+0xae/0x790 [ 189.308845][ T7542] do_syscall_64+0x123/0x790 [ 189.308867][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.308885][ T7542] RIP: 0033:0x7fc1de79e159 [ 189.308900][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.308915][ T7542] RSP: 002b:00007fc1dc9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.308932][ T7542] RAX: ffffffffffffffda RBX: 00007fc1dea26090 RCX: 00007fc1de79e159 [ 189.308943][ T7542] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 189.308954][ T7542] RBP: 00007fc1dc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.308964][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.308975][ T7542] R13: 00007fc1dea26128 R14: 00007fc1dea26090 R15: 00007ffc82351be8 [ 189.308999][ T7542] [ 189.309061][ T7542] Mem-Info: [ 189.309072][ T7542] active_anon:34732 inactive_anon:0 isolated_anon:0 [ 189.309072][ T7542] active_file:499 inactive_file:49055 isolated_file:0 [ 189.309072][ T7542] unevictable:0 dirty:450 writeback:0 [ 189.309072][ T7542] slab_reclaimable:12402 slab_unreclaimable:109750 [ 189.309072][ T7542] mapped:55964 shmem:21008 pagetables:1603 [ 189.309072][ T7542] sec_pagetables:0 bounce:0 [ 189.309072][ T7542] kernel_misc_reclaimable:0 [ 189.309072][ T7542] free:1238935 free_pcp:15472 free_cma:0 [ 189.309172][ T7542] Node 0 active_anon:138928kB inactive_anon:0kB active_file:1996kB inactive_file:195752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:223576kB dirty:1576kB writeback:0kB shmem:84032kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13976kB pagetables:6264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 189.309255][ T7542] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:280kB dirty:224kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 189.309334][ T7542] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.309440][ T7542] lowmem_reserve[]: 0 2470 2471 2471 2471 [ 189.309738][ T7542] Node 0 DMA32 free:994084kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:138928kB inactive_anon:0kB active_file:1996kB inactive_file:195752kB unevictable:0kB writepending:1576kB zspages:0kB present:3129332kB managed:2530272kB mlocked:0kB bounce:0kB free_pcp:54220kB local_pcp:21632kB free_cma:0kB [ 189.309868][ T7542] lowmem_reserve[]: 0 0 0 0 0 [ 189.310303][ T7542] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.310402][ T7542] lowmem_reserve[]: 0 0 0 0 0 [ 189.310678][ T7542] Node 1 Normal free:3946296kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:468kB unevictable:0kB writepending:224kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:7640kB local_pcp:7640kB free_cma:0kB [ 189.310805][ T7542] lowmem_reserve[]: 0 0 0 0 0 [ 189.311081][ T7542] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 189.311980][ T7542] Node 0 DMA32: 737*4kB (UME) 132*8kB (UM) 81*16kB (UME) 36*32kB (UE) 192*64kB (UME) 150*128kB (UME) 73*256kB (UM) 3*512kB (ME) 10*1024kB (UME) 6*2048kB (M) 223*4096kB (UM) = 994100kB [ 189.313160][ T7542] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 189.313921][ T7542] Node 1 Normal: 2*4kB (M) 4*8kB (UM) 9*16kB (UM) 6*32kB (UM) 9*64kB (UM) 5*128kB (UM) 3*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 960*4096kB (M) = 3946296kB [ 189.314984][ T7542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.315001][ T7542] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 189.315017][ T7542] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.315067][ T7542] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.315117][ T7542] 70608 total pagecache pages [ 189.315161][ T7542] 0 pages in swap cache [ 189.315204][ T7542] Free swap = 124996kB [ 189.315246][ T7542] Total swap = 124996kB [ 189.315290][ T7542] 2097051 pages RAM [ 189.315336][ T7542] 0 pages HighMem/MovableOnly [ 189.315377][ T7542] 432848 pages reserved [ 189.315404][ T7542] 0 pages cma reserved [ 190.071807][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 190.071823][ T31] audit: type=1400 audit(1788318219.363:602): avc: denied { read } for pid=7540 comm="syz.8.403" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 190.071858][ T31] audit: type=1400 audit(1788318219.363:603): avc: denied { open } for pid=7540 comm="syz.8.403" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 190.525620][ T7545] syz.8.405 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 190.525650][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.8.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.525675][ T7545] Tainted: [L]=SOFTLOCKUP [ 190.525681][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 190.525692][ T7545] Call Trace: [ 190.525698][ T7545] [ 190.525704][ T7545] dump_stack_lvl+0x100/0x190 [ 190.525733][ T7545] dump_header+0xfb/0x606 [ 190.525753][ T7545] oom_kill_process.cold+0xd/0x380 [ 190.525774][ T7545] out_of_memory+0x340/0x14f0 [ 190.525808][ T7545] ? __pfx_out_of_memory+0x10/0x10 [ 190.525836][ T7545] mem_cgroup_out_of_memory+0xc6/0x130 [ 190.525854][ T7545] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 190.525871][ T7545] ? find_held_lock+0x2b/0x80 [ 190.525900][ T7545] ? do_raw_spin_unlock+0x145/0x1e0 [ 190.525922][ T7545] ? _raw_spin_unlock+0x28/0x50 [ 190.525950][ T7545] try_charge_memcg+0x783/0xf60 [ 190.525977][ T7545] ? __pfx_try_charge_memcg+0x10/0x10 [ 190.525998][ T7545] ? find_held_lock+0x2b/0x80 [ 190.526019][ T7545] ? rcu_read_unlock+0x17/0x60 [ 190.526040][ T7545] ? rcu_read_unlock+0x17/0x60 [ 190.526070][ T7545] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 190.526101][ T7545] ? kasan_save_track+0x14/0x30 [ 190.526120][ T7545] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 190.526139][ T7545] ? __d_alloc+0x35/0xa50 [ 190.526164][ T7545] __d_alloc+0x35/0xa50 [ 190.526187][ T7545] d_alloc+0x4a/0x1e0 [ 190.526209][ T7545] lookup_one_qstr_excl+0x171/0x250 [ 190.526230][ T7545] ? mnt_want_write+0x164/0x420 [ 190.526248][ T7545] filename_create+0x1cf/0x400 [ 190.526265][ T7545] ? __pfx_filename_create+0x10/0x10 [ 190.526282][ T7545] ? lock_acquire+0x1d1/0x380 [ 190.526300][ T7545] ? find_held_lock+0x2b/0x80 [ 190.526324][ T7545] filename_mkdirat+0xb9/0x5e0 [ 190.526349][ T7545] ? __pfx_filename_mkdirat+0x10/0x10 [ 190.526368][ T7545] ? strncpy_from_user+0x19d/0x2d0 [ 190.526397][ T7545] ? do_getname+0x191/0x390 [ 190.526421][ T7545] __x64_sys_mkdirat+0x89/0xc0 [ 190.526441][ T7545] do_syscall_64+0x123/0x790 [ 190.526461][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.526478][ T7545] RIP: 0033:0x7fc1de79e159 [ 190.526492][ T7545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.526509][ T7545] RSP: 002b:00007fc1df597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 190.526526][ T7545] RAX: ffffffffffffffda RBX: 00007fc1dea25fa0 RCX: 00007fc1de79e159 [ 190.526537][ T7545] RDX: 00000000000001ff RSI: 0000200000000200 RDI: ffffffffffffff9c [ 190.526548][ T7545] RBP: 00007fc1de835024 R08: 0000000000000000 R09: 0000000000000000 [ 190.526558][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.526568][ T7545] R13: 00007fc1dea26038 R14: 00007fc1dea25fa0 R15: 00007ffc82351be8 [ 190.526592][ T7545] [ 190.537065][ T7545] memory: usage 8kB, limit 8kB, failcnt 49 [ 190.537080][ T7545] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 190.537091][ T7545] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 190.537101][ T7545] Memory cgroup stats for /syz8/test: [ 190.537216][ T7545] cache 0 [ 190.537224][ T7545] rss 0 [ 190.537230][ T7545] rss_huge 0 [ 190.537236][ T7545] shmem 0 [ 190.537242][ T7545] mapped_file 0 [ 190.537249][ T7545] dirty 0 [ 190.537255][ T7545] writeback 0 [ 190.537261][ T7545] workingset_refault_anon 0 [ 190.537268][ T7545] workingset_refault_file 0 [ 190.537275][ T7545] swap 0 [ 190.537281][ T7545] swapcached 0 [ 190.537287][ T7545] pgpgin 0 [ 190.537292][ T7545] pgpgout 0 [ 190.537298][ T7545] pgfault 0 [ 190.537303][ T7545] pgmajfault 0 [ 190.537309][ T7545] inactive_anon 0 [ 190.537315][ T7545] active_anon 0 [ 190.537320][ T7545] inactive_file 0 [ 190.537326][ T7545] active_file 0 [ 190.537332][ T7545] unevictable 0 [ 190.537338][ T7545] hierarchical_memory_limit 8192 [ 190.537344][ T7545] hierarchical_memsw_limit 9223372036854771712 [ 190.537352][ T7545] total_cache 0 [ 190.537357][ T7545] total_rss 0 [ 190.537363][ T7545] total_rss_huge 0 [ 190.537369][ T7545] total_shmem 0 [ 190.537374][ T7545] total_mapped_file 0 [ 190.537381][ T7545] total_dirty 0 [ 190.537386][ T7545] total_writeback 0 [ 190.537392][ T7545] total_workingset_refault_anon 0 [ 190.537399][ T7545] total_workingset_refault_file 0 [ 190.537405][ T7545] total_swap 0 [ 190.537411][ T7545] total_swapcached 0 [ 190.537417][ T7545] total_pgpgin 0 [ 190.537423][ T7545] total_pgpgout 0 [ 190.537429][ T7545] total_pgfault 0 [ 190.537435][ T7545] total_pgmajfault 0 [ 190.537441][ T7545] total_inactive_anon 0 [ 190.537447][ T7545] total_active_anon 0 [ 190.537453][ T7545] total_inactive_file 0 [ 190.537459][ T7545] total_active_file 0 [ 190.537465][ T7545] total_unevictable 0 [ 190.537470][ T7545] anon_cost 0 [ 190.537476][ T7545] file_cost 0 [ 190.537483][ T7545] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.405,pid=7544,uid=0 [ 190.538199][ T7545] Memory cgroup out of memory: Killed process 7544 (syz.8.405) total-vm:104432kB, anon-rss:1428kB, file-rss:23112kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 191.094739][ T43] kworker/u8:2 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 191.094773][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.094800][ T43] Tainted: [L]=SOFTLOCKUP [ 191.094805][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 191.094815][ T43] Workqueue: writeback wb_workfn (flush-250:0) [ 191.094840][ T43] Call Trace: [ 191.094845][ T43] [ 191.094852][ T43] dump_stack_lvl+0x100/0x190 [ 191.094876][ T43] dump_header+0xfb/0x606 [ 191.094896][ T43] out_of_memory.cold+0xd/0x170 [ 191.094919][ T43] ? __pfx_out_of_memory+0x10/0x10 [ 191.094946][ T43] mem_cgroup_out_of_memory+0xc6/0x130 [ 191.094962][ T43] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 191.094977][ T43] ? find_held_lock+0x2b/0x80 [ 191.095002][ T43] ? do_raw_spin_unlock+0x145/0x1e0 [ 191.095022][ T43] ? _raw_spin_unlock+0x28/0x50 [ 191.095049][ T43] try_charge_memcg+0x783/0xf60 [ 191.095075][ T43] ? __pfx_try_charge_memcg+0x10/0x10 [ 191.095096][ T43] ? find_held_lock+0x2b/0x80 [ 191.095116][ T43] ? rcu_read_unlock+0x17/0x60 [ 191.095136][ T43] ? rcu_read_unlock+0x17/0x60 [ 191.095165][ T43] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 191.095196][ T43] ? kasan_save_track+0x14/0x30 [ 191.095215][ T43] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 191.095232][ T43] ? alloc_buffer_head+0x21/0x140 [ 191.095258][ T43] alloc_buffer_head+0x21/0x140 [ 191.095281][ T43] folio_alloc_buffers+0x197/0x8e0 [ 191.095303][ T43] create_empty_buffers+0x3a/0x660 [ 191.095319][ T43] ? find_held_lock+0x2b/0x80 [ 191.095342][ T43] folio_create_buffers+0x13b/0x1a0 [ 191.095360][ T43] __block_write_full_folio+0xed/0xfb0 [ 191.095379][ T43] ? __pfx_blkdev_get_block+0x10/0x10 [ 191.095408][ T43] block_write_full_folio+0x3b5/0x4e0 [ 191.095427][ T43] ? __pfx_blkdev_get_block+0x10/0x10 [ 191.095452][ T43] blkdev_writepages+0xc7/0x150 [ 191.095476][ T43] ? __pfx_blkdev_writepages+0x10/0x10 [ 191.095504][ T43] ? do_writepages+0x4b5/0x600 [ 191.095527][ T43] ? do_writepages+0x4b5/0x600 [ 191.095551][ T43] ? __pfx_blkdev_writepages+0x10/0x10 [ 191.095575][ T43] do_writepages+0x278/0x600 [ 191.095601][ T43] ? __pfx_do_writepages+0x10/0x10 [ 191.095624][ T43] ? reacquire_held_locks+0xdd/0x1f0 [ 191.095640][ T43] ? writeback_sb_inodes+0x3e1/0x1c50 [ 191.095658][ T43] __writeback_single_inode+0x164/0x1560 [ 191.095675][ T43] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 191.095693][ T43] ? __pfx___writeback_single_inode+0x10/0x10 [ 191.095710][ T43] ? do_raw_spin_unlock+0x145/0x1e0 [ 191.095733][ T43] writeback_sb_inodes+0x766/0x1c50 [ 191.095760][ T43] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 191.095783][ T43] ? __lock_acquire+0x4c5/0x1ec0 [ 191.095823][ T43] ? _raw_spin_unlock+0x28/0x50 [ 191.095846][ T43] ? move_expired_inodes+0x5ea/0x8f0 [ 191.095875][ T43] __writeback_inodes_wb+0xf8/0x2d0 [ 191.095895][ T43] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 191.095912][ T43] ? queue_io+0x287/0x530 [ 191.095936][ T43] wb_writeback+0x6f6/0xb50 [ 191.095959][ T43] ? __pfx_wb_writeback+0x10/0x10 [ 191.095979][ T43] ? get_nr_inodes+0x100/0x150 [ 191.095999][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 191.096024][ T43] wb_workfn+0x8f4/0xc80 [ 191.096045][ T43] ? __pfx_wb_workfn+0x10/0x10 [ 191.096068][ T43] ? process_one_work+0x906/0x1b10 [ 191.096090][ T43] ? process_one_work+0x906/0x1b10 [ 191.096117][ T43] process_one_work+0xac7/0x1b10 [ 191.096149][ T43] ? __pfx_process_one_work+0x10/0x10 [ 191.096173][ T43] ? lock_acquire+0x1d1/0x380 [ 191.096196][ T43] ? __pfx_wb_workfn+0x10/0x10 [ 191.096215][ T43] worker_thread+0x5ef/0xe50 [ 191.096244][ T43] ? __pfx_worker_thread+0x10/0x10 [ 191.096267][ T43] ? kthread+0x13a/0x450 [ 191.096287][ T43] ? __pfx_worker_thread+0x10/0x10 [ 191.096308][ T43] kthread+0x373/0x450 [ 191.096327][ T43] ? __pfx_kthread+0x10/0x10 [ 191.096350][ T43] ret_from_fork+0x730/0xd60 [ 191.096369][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 191.096387][ T43] ? __switch_to+0x800/0x10f0 [ 191.096409][ T43] ? __pfx_kthread+0x10/0x10 [ 191.096431][ T43] ret_from_fork_asm+0x1a/0x30 [ 191.096459][ T43] [ 191.109317][ T43] memory: usage 8kB, limit 8kB, failcnt 179 [ 191.109331][ T43] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 191.109340][ T43] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 191.109350][ T43] Memory cgroup stats for /syz8/test: [ 191.109454][ T43] cache 4096 [ 191.109461][ T43] rss 0 [ 191.109466][ T43] rss_huge 0 [ 191.109472][ T43] shmem 0 [ 191.109477][ T43] mapped_file 0 [ 191.109482][ T43] dirty 0 [ 191.109488][ T43] writeback 0 [ 191.109493][ T43] workingset_refault_anon 0 [ 191.109499][ T43] workingset_refault_file 0 [ 191.109505][ T43] swap 0 [ 191.109510][ T43] swapcached 0 [ 191.109516][ T43] pgpgin 1 [ 191.109521][ T43] pgpgout 0 [ 191.109527][ T43] pgfault 29 [ 191.109542][ T43] pgmajfault 1 [ 191.110341][ T43] inactive_anon 0 [ 191.110348][ T43] active_anon 0 [ 191.110354][ T43] inactive_file 0 [ 191.110360][ T43] active_file 4096 [ 191.110366][ T43] unevictable 0 [ 191.110371][ T43] hierarchical_memory_limit 8192 [ 191.110378][ T43] hierarchical_memsw_limit 9223372036854771712 [ 191.110385][ T43] total_cache 4096 [ 191.110390][ T43] total_rss 0 [ 191.110396][ T43] total_rss_huge 0 [ 191.110401][ T43] total_shmem 0 [ 191.110407][ T43] total_mapped_file 0 [ 191.110413][ T43] total_dirty 0 [ 191.110418][ T43] total_writeback 0 [ 191.110424][ T43] total_workingset_refault_anon 0 [ 191.110430][ T43] total_workingset_refault_file 0 [ 191.110437][ T43] total_swap 0 [ 191.110443][ T43] total_swapcached 0 [ 191.110448][ T43] total_pgpgin 1 [ 191.110454][ T43] total_pgpgout 0 [ 191.110460][ T43] total_pgfault 29 [ 191.110465][ T43] total_pgmajfault 1 [ 191.110471][ T43] total_inactive_anon 0 [ 191.110477][ T43] total_active_anon 0 [ 191.110483][ T43] total_inactive_file 0 [ 191.110488][ T43] total_active_file 4096 [ 191.110494][ T43] total_unevictable 0 [ 191.110500][ T43] anon_cost 0 [ 191.110505][ T43] file_cost 0 [ 191.110511][ T43] Out of memory and no killable processes... [ 193.469355][ T31] audit: type=1400 audit(1788318223.693:604): avc: denied { write } for pid=7562 comm="syz.8.409" name="direction" dev="configfs" ino=19048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 193.469596][ T31] audit: type=1400 audit(1788318223.693:605): avc: denied { open } for pid=7562 comm="syz.8.409" path="/28/my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction" dev="configfs" ino=19048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 193.535973][ T31] audit: type=1400 audit(1788318223.753:606): avc: denied { read } for pid=7562 comm="syz.8.409" name="direction" dev="configfs" ino=19048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 193.536566][ T31] audit: type=1800 audit(1788318223.753:607): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.409" name="direction" dev="configfs" ino=19048 res=0 errno=0 [ 193.562571][ T31] audit: type=1400 audit(1788318223.783:608): avc: denied { map } for pid=7562 comm="syz.8.409" path="/28/my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction" dev="configfs" ino=19048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 193.941773][ T5615] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 194.095842][ T5615] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 194.105729][ T5615] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.105782][ T5615] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.133073][ T5615] usb 9-1: config 0 descriptor?? [ 194.351838][ T5615] usbhid 9-1:0.0: can't add hid device: -71 [ 194.351932][ T5615] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 194.367450][ T5615] usb 9-1: USB disconnect, device number 6 [ 194.791934][ T5706] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 194.943400][ T5706] usb 9-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 194.954046][ T5706] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.954103][ T5706] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.982602][ T5706] usb 9-1: config 0 descriptor?? [ 195.160036][ T31] audit: type=1400 audit(1788318225.373:609): avc: denied { sqpoll } for pid=7581 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 195.194394][ T7582] binder: 7581:7582 ioctl 4018620d 0 returned -22 [ 195.201625][ T7582] binder: 7581:7582 ioctl c0306201 0 returned -14 [ 195.455684][ T5831] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 195.653281][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 195.666146][ T5831] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 195.694489][ T5831] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 195.694516][ T5831] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 195.694535][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.694549][ T5831] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 195.705446][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.705466][ T5831] usb 3-1: Product: syz [ 195.705478][ T5831] usb 3-1: Manufacturer: syz [ 195.705490][ T5831] usb 3-1: SerialNumber: syz [ 195.707699][ T5831] usb 3-1: config 0 descriptor?? [ 195.709700][ T5831] hub 3-1:0.0: bad descriptor, ignoring hub [ 195.709716][ T5831] hub 3-1:0.0: probe with driver hub failed with error -5 [ 196.140660][ T5831] usb 3-1: USB disconnect, device number 27 [ 196.495878][ T7599] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6106] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7599] [ 196.504404][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.5.417'. [ 196.592756][ T31] audit: type=1400 audit(1788318226.813:610): avc: denied { ioctl } for pid=7600 comm="syz.1.418" path="/98/my_configfs/usb_gadget/g1/UDC" dev="configfs" ino=19987 ioctlcmd=0xaebd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 196.620692][ T31] audit: type=1400 audit(1788318226.843:611): avc: denied { audit_write } for pid=7584 comm="syz.6.415" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 196.634337][ T7601] UDC core: g1: couldn't find an available UDC or it's busy [ 196.706543][ T31] audit: type=1400 audit(1788318226.923:612): avc: denied { watch } for pid=7584 comm="syz.6.415" path="/53/bus" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 196.706609][ T31] audit: type=1400 audit(1788318226.923:613): avc: denied { watch_sb watch_reads } for pid=7584 comm="syz.6.415" path="/53/bus" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 196.822746][ T5706] usbhid 9-1:0.0: can't add hid device: -71 [ 196.823669][ T5706] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 196.826110][ T5706] usb 9-1: USB disconnect, device number 7 [ 197.206674][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.422'. [ 197.214706][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.8.422'. [ 197.245577][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.422'. [ 197.245743][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.422'. [ 197.245880][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.422'. [ 197.246033][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.422'. [ 197.246159][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.422'. [ 197.246297][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.422'. [ 197.246438][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.422'. [ 197.250553][ T7626] input: syz0 as /devices/virtual/input/input35 [ 197.280575][ T31] audit: type=1400 audit(1788318227.503:614): avc: denied { open } for pid=7623 comm="syz.1.424" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 197.353675][ T31] audit: type=1400 audit(1788318227.573:615): avc: denied { setopt } for pid=7608 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.996834][ T31] audit: type=1400 audit(1788318228.213:616): avc: denied { mount } for pid=7629 comm="syz.8.426" name="/" dev="rpc_pipefs" ino=19319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 198.150329][ T7642] syzkaller0: entered promiscuous mode [ 198.156999][ T7642] syzkaller0: entered allmulticast mode [ 198.233159][ T7640] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.233345][ T7640] block device autoloading is deprecated and will be removed. [ 198.441777][ T10] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 198.566864][ T31] audit: type=1400 audit(1788318228.783:617): avc: denied { getopt } for pid=7635 comm="syz.5.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.569078][ T31] audit: type=1400 audit(1788318228.783:618): avc: denied { getopt } for pid=7650 comm="syz.6.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.623181][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 198.633188][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 198.633228][ T10] usb 3-1: config 0 has no interface number 0 [ 198.633274][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 198.658070][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.658103][ T10] usb 3-1: Product: syz [ 198.658128][ T10] usb 3-1: Manufacturer: syz [ 198.658145][ T10] usb 3-1: SerialNumber: syz [ 198.682537][ T10] usb 3-1: config 0 descriptor?? [ 198.891981][ T5615] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 199.069928][ T5615] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.084292][ T5615] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.084362][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.111617][ T5615] usb 7-1: config 0 descriptor?? [ 199.239028][ T210] IPVS: starting estimator thread 0... [ 199.404809][ T7664] IPVS: using max 41 ests per chain, 98400 per kthread [ 199.779333][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 199.837574][ T5615] usbhid 7-1:0.0: can't add hid device: -71 [ 199.837679][ T5615] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 199.853205][ T5615] usb 7-1: USB disconnect, device number 15 [ 200.064273][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 200.064317][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 200.064456][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 200.085034][ T10] usb 3-1: USB disconnect, device number 28 [ 200.261749][ T5706] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 200.341763][ T5615] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 200.351477][ T7674] netlink: 'syz.5.440': attribute type 1 has an invalid length. [ 200.392195][ T5706] usb 9-1: device descriptor read/64, error -71 [ 200.464069][ T7674] bond1: entered promiscuous mode [ 200.483435][ T7674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.493991][ T5615] usb 7-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 200.494164][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 200.494176][ T31] audit: type=1800 audit(1788318230.713:624): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.440" name="(" dev="sda1" ino=2055 res=0 errno=0 [ 200.531584][ T5615] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.531636][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.553452][ T5615] usb 7-1: config 0 descriptor?? [ 200.632960][ T5706] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 200.772922][ T5706] usb 9-1: device descriptor read/64, error -71 [ 200.862870][ T31] audit: type=1400 audit(1788318231.083:625): avc: denied { getopt } for pid=7683 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 200.892609][ T5706] usb usb9-port1: attempt power cycle [ 200.903414][ T31] audit: type=1400 audit(1788318231.123:626): avc: denied { ioctl } for pid=7683 comm="syz.2.443" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 201.041137][ T7686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7686 comm=syz.5.442 [ 201.242400][ T5706] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 201.275452][ T5706] usb 9-1: device descriptor read/8, error -71 [ 201.521988][ T5706] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 201.545394][ T5706] usb 9-1: device descriptor read/8, error -71 [ 201.555786][ T31] audit: type=1400 audit(1788318231.773:627): avc: denied { firmware_load } for pid=7689 comm="syz.2.444" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 201.662534][ T5706] usb usb9-port1: unable to enumerate USB device [ 201.752421][ T5827] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 202.794878][ T31] audit: type=1400 audit(1788318232.483:628): avc: denied { write } for pid=7701 comm="syz.5.447" name="instances" dev="tracefs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 202.794942][ T31] audit: type=1400 audit(1788318232.483:629): avc: denied { add_name } for pid=7701 comm="syz.5.447" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 202.794987][ T31] audit: type=1400 audit(1788318232.483:630): avc: denied { create } for pid=7701 comm="syz.5.447" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 202.913611][ T5827] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.917766][ T5827] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.917786][ T5827] usb 3-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config [ 202.917801][ T5827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.917832][ T5827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 98, changing to 7 [ 202.917852][ T5827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50965, setting to 1024 [ 202.926237][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.926258][ T5827] usb 3-1: Product: syz [ 202.926271][ T5827] usb 3-1: Manufacturer: syz [ 202.930137][ T5827] cdc_wdm 3-1:1.0: skipping garbage [ 202.930150][ T5827] cdc_wdm 3-1:1.0: skipping garbage [ 202.933409][ T5706] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 202.933776][ T5827] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 203.054079][ T5615] usbhid 7-1:0.0: can't add hid device: -71 [ 203.054175][ T5615] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 203.069966][ T5615] usb 7-1: USB disconnect, device number 16 [ 203.111992][ T5706] usb 2-1: Using ep0 maxpacket: 32 [ 203.114066][ T5706] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 203.115841][ T5706] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 203.115861][ T5706] usb 2-1: config 0 has no interface number 0 [ 203.121451][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.121471][ T5706] usb 2-1: Product: syz [ 203.121483][ T5706] usb 2-1: Manufacturer: syz [ 203.121496][ T5706] usb 2-1: SerialNumber: syz [ 203.132654][ T5706] usb 2-1: config 0 descriptor?? [ 203.513595][ T5827] usb 3-1: USB disconnect, device number 29 [ 204.090318][ T7714] loop5: detected capacity change from 0 to 7 [ 204.097144][ T7714] Dev loop5: unable to read RDB block 7 [ 204.102980][ T7714] loop5: unable to read partition table [ 204.103172][ T7714] loop5: partition table beyond EOD, truncated [ 204.103194][ T7714] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 204.149182][ T7716] __nla_validate_parse: 60 callbacks suppressed [ 204.150106][ T7716] netlink: 24 bytes leftover after parsing attributes in process `syz.5.448'. [ 204.295583][ T4970] Dev loop5: unable to read RDB block 7 [ 204.301262][ T4970] loop5: unable to read partition table [ 204.307515][ T4970] loop5: partition table beyond EOD, truncated [ 204.341869][ T5706] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 204.341903][ T5706] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 204.621756][ T5827] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 204.761806][ T5827] usb 6-1: device descriptor read/64, error -71 [ 204.769779][ T5706] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 204.769943][ T5706] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 204.786680][ T5706] usb 2-1: USB disconnect, device number 31 [ 205.311772][ T5827] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 205.314610][ T7691] syz.2.444 (7691) used greatest stack depth: 18864 bytes left [ 205.387829][ T31] audit: type=1400 audit(1788318235.603:631): avc: denied { ioctl } for pid=7730 comm="syz.2.456" path="socket:[20240]" dev="sockfs" ino=20240 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.442280][ T5827] usb 6-1: device descriptor read/64, error -71 [ 205.804523][ T5827] usb usb6-port1: attempt power cycle [ 206.295440][ T5827] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 206.344316][ T5827] usb 6-1: device descriptor read/8, error -71 [ 206.398235][ T31] audit: type=1400 audit(1788318236.593:632): avc: denied { accept } for pid=7736 comm="syz.1.458" lport=34501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.621750][ T5827] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 206.652224][ T5827] usb 6-1: device descriptor read/8, error -71 [ 206.772732][ T5827] usb usb6-port1: unable to enumerate USB device [ 206.839460][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 206.853070][ T7743] syzkaller0: entered promiscuous mode [ 206.858613][ T7743] syzkaller0: entered allmulticast mode [ 208.197286][ T31] audit: type=1400 audit(1788318238.413:633): avc: denied { listen } for pid=7760 comm="syz.6.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.216851][ T31] audit: type=1400 audit(1788318238.413:634): avc: denied { setopt } for pid=7760 comm="syz.6.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.277654][ T31] audit: type=1400 audit(1788318238.493:635): avc: denied { write } for pid=7760 comm="syz.6.465" path="socket:[20259]" dev="sockfs" ino=20259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.448150][ T7769] input: syz0 as /devices/virtual/input/input36 [ 208.469516][ T31] audit: type=1400 audit(1788318238.683:636): avc: denied { ioctl } for pid=7760 comm="syz.6.465" path="socket:[20259]" dev="sockfs" ino=20259 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.560376][ T7772] FAULT_INJECTION: forcing a failure. [ 208.560376][ T7772] name failslab, interval 1, probability 0, space 0, times 0 [ 208.560423][ T7772] CPU: 1 UID: 0 PID: 7772 Comm: syz.1.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.560446][ T7772] Tainted: [L]=SOFTLOCKUP [ 208.560451][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 208.560459][ T7772] Call Trace: [ 208.560464][ T7772] [ 208.560471][ T7772] dump_stack_lvl+0x100/0x190 [ 208.560498][ T7772] should_fail_ex.cold+0x5/0xa [ 208.560521][ T7772] should_failslab+0xc2/0x120 [ 208.560540][ T7772] __kmalloc_noprof+0xfc/0x840 [ 208.560557][ T7772] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 208.560586][ T7772] kernfs_fop_write_iter+0x26a/0x5f0 [ 208.560613][ T7772] vfs_write+0x6af/0x1050 [ 208.560638][ T7772] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 208.560664][ T7772] ? __pfx_vfs_write+0x10/0x10 [ 208.560686][ T7772] ? find_held_lock+0x2b/0x80 [ 208.560723][ T7772] ksys_write+0x12a/0x250 [ 208.560737][ T7772] ? __pfx_ksys_write+0x10/0x10 [ 208.560758][ T7772] do_syscall_64+0x123/0x790 [ 208.560779][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.560796][ T7772] RIP: 0033:0x7fca4299e159 [ 208.560810][ T7772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.560825][ T7772] RSP: 002b:00007fca438a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.560841][ T7772] RAX: ffffffffffffffda RBX: 00007fca42c25fa0 RCX: 00007fca4299e159 [ 208.560851][ T7772] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 208.560861][ T7772] RBP: 00007fca438a5090 R08: 0000000000000000 R09: 0000000000000000 [ 208.560870][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.560880][ T7772] R13: 00007fca42c26038 R14: 00007fca42c25fa0 R15: 00007ffc08ab6338 [ 208.560902][ T7772] [ 208.598982][ T7769] ipvlan3: entered allmulticast mode [ 208.598999][ T7769] macvlan1: entered allmulticast mode [ 208.599012][ T7769] veth1_vlan: entered allmulticast mode [ 208.604561][ T7769] batman_adv: batadv0: Adding interface: ipvlan3 [ 208.604584][ T7769] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.604606][ T7769] batman_adv: batadv0: Interface activated: ipvlan3 [ 209.554775][ T7791] netlink: 280 bytes leftover after parsing attributes in process `syz.1.473'. [ 209.708429][ T7796] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 211.025550][ T7804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.473'. [ 211.154067][ T31] audit: type=1400 audit(1788318241.373:637): avc: denied { getopt } for pid=7808 comm="syz.8.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 211.741854][ T7817] FAULT_INJECTION: forcing a failure. [ 211.741854][ T7817] name fail_futex, interval 1, probability 0, space 0, times 1 [ 211.741899][ T7817] CPU: 1 UID: 0 PID: 7817 Comm: syz.2.480 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.741926][ T7817] Tainted: [L]=SOFTLOCKUP [ 211.741932][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 211.741941][ T7817] Call Trace: [ 211.741946][ T7817] [ 211.741953][ T7817] dump_stack_lvl+0x100/0x190 [ 211.741980][ T7817] should_fail_ex.cold+0x5/0xa [ 211.742004][ T7817] get_futex_key+0x1d0/0x14f0 [ 211.742027][ T7817] ? __pfx_get_futex_key+0x10/0x10 [ 211.742046][ T7817] ? find_held_lock+0x2b/0x80 [ 211.742071][ T7817] ? seq_read_iter+0x6b/0x1270 [ 211.742087][ T7817] ? lock_acquire+0x1d1/0x380 [ 211.742106][ T7817] futex_wake+0xf4/0x5e0 [ 211.742128][ T7817] ? selinux_file_permission+0x8f/0x6d0 [ 211.742156][ T7817] ? __pfx_futex_wake+0x10/0x10 [ 211.742182][ T7817] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 211.742199][ T7817] ? find_held_lock+0x2b/0x80 [ 211.742219][ T7817] ? ksys_read+0x190/0x250 [ 211.742234][ T7817] ? ksys_read+0x190/0x250 [ 211.742250][ T7817] do_futex+0x2b2/0x440 [ 211.742272][ T7817] ? __pfx_do_futex+0x10/0x10 [ 211.742294][ T7817] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.742318][ T7817] __x64_sys_futex+0x34f/0x4d0 [ 211.742340][ T7817] ? fput+0x7c/0x100 [ 211.742358][ T7817] ? __pfx___x64_sys_futex+0x10/0x10 [ 211.742377][ T7817] ? ksys_read+0x1ac/0x250 [ 211.742392][ T7817] ? __pfx_ksys_read+0x10/0x10 [ 211.742421][ T7817] do_syscall_64+0x123/0x790 [ 211.742441][ T7817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.742458][ T7817] RIP: 0033:0x7f473619e159 [ 211.742473][ T7817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.742489][ T7817] RSP: 002b:00007f47371350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 211.742506][ T7817] RAX: ffffffffffffffda RBX: 00007f4736425fa8 RCX: 00007f473619e159 [ 211.742516][ T7817] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4736425fac [ 211.742527][ T7817] RBP: 00007f4736425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 211.742537][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.742547][ T7817] R13: 00007f4736426038 R14: 00007fff4b4bedd0 R15: 00007fff4b4beeb8 [ 211.742569][ T7817] [ 212.261117][ T7824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.403730][ T31] audit: type=1400 audit(1788318242.623:638): avc: denied { read append } for pid=7823 comm="syz.2.483" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 212.430070][ T31] audit: type=1400 audit(1788318242.643:639): avc: denied { open } for pid=7823 comm="syz.2.483" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 212.921864][ T5713] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 212.942020][ T5706] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 213.094361][ T5706] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 213.095196][ T5706] usb 9-1: config 0 has an invalid interface number: 205 but max is 0 [ 213.095216][ T5706] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 213.095231][ T5706] usb 9-1: config 0 has no interface number 0 [ 213.095251][ T5706] usb 9-1: config 0 interface 205 has no altsetting 0 [ 213.099757][ T5706] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.099777][ T5706] usb 9-1: Product: syz [ 213.099789][ T5706] usb 9-1: Manufacturer: syz [ 213.099801][ T5706] usb 9-1: SerialNumber: syz [ 213.112257][ T5713] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 213.117026][ T5706] usb 9-1: config 0 descriptor?? [ 213.119131][ T5706] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 213.124892][ T5706] dvb-usb: bulk message failed: -22 (3/0) [ 213.147017][ T5713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.147061][ T5713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.147084][ T5713] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 213.169925][ T5706] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 213.176057][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 213.176082][ T5713] usb 3-1: Product: syz [ 213.176098][ T5713] usb 3-1: Manufacturer: syz [ 213.181620][ T5706] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 213.181657][ T5706] usb 9-1: media controller created [ 213.192197][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.219021][ T5706] dvb-usb: bulk message failed: -22 (6/0) [ 213.219118][ T5706] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 213.232129][ T5706] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input37 [ 213.234778][ T5706] dvb-usb: schedule remote query interval to 150 msecs. [ 213.234809][ T5706] dvb-usb: bulk message failed: -22 (3/0) [ 213.259415][ T5706] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 213.340862][ T5713] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 213.349706][ T5713] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 213.361747][ T5713] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 213.385884][ T7835] netlink: 'syz.8.487': attribute type 1 has an invalid length. [ 213.387741][ T31] audit: type=1400 audit(1788318243.603:640): avc: denied { execute } for pid=7838 comm="syz.5.490" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 213.396120][ T5706] dvb-usb: bulk message failed: -22 (1/0) [ 213.396150][ T5706] dvb-usb: error while querying for an remote control event. [ 213.466393][ T7835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.473082][ T987] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 213.488269][ T7841] bond1: (slave veth0_to_bond): making interface the new active one [ 213.500225][ T7841] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 213.551806][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 213.551854][ T5827] dvb-usb: error while querying for an remote control event. [ 213.622243][ T987] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 213.629824][ T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.629844][ T987] usb 2-1: Product: syz [ 213.629857][ T987] usb 2-1: Manufacturer: syz [ 213.629869][ T987] usb 2-1: SerialNumber: syz [ 213.636017][ T987] usb 2-1: config 0 descriptor?? [ 213.695322][ T7835] bond1: entered promiscuous mode [ 213.695360][ T7835] veth0_to_bond: entered promiscuous mode [ 213.695549][ T7835] bond1: entered allmulticast mode [ 213.695561][ T7835] veth0_to_bond: entered allmulticast mode [ 213.861805][ T5706] dvb-usb: bulk message failed: -22 (1/0) [ 213.861834][ T5706] dvb-usb: error while querying for an remote control event. [ 213.867863][ T5706] usb 3-1: USB disconnect, device number 30 [ 213.876260][ T5706] garmin_gps 3-1:1.0: device disconnected [ 214.021986][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 214.035827][ T5831] dvb-usb: error while querying for an remote control event. [ 214.107487][ T7848] binder: 7836:7848 ioctl 4018620d 0 returned -22 [ 214.125790][ T7848] binder: 7836:7848 ioctl c0306201 0 returned -14 [ 214.134307][ T5706] usb 2-1: USB disconnect, device number 32 [ 214.192476][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 214.193045][ T5831] dvb-usb: error while querying for an remote control event. [ 214.248467][ T5831] usb 9-1: USB disconnect, device number 12 [ 214.742771][ T5831] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 215.261894][ T5706] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 215.411753][ T5706] usb 7-1: Using ep0 maxpacket: 32 [ 215.417423][ T5706] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 215.428353][ T5706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.428389][ T5706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.428419][ T5706] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 215.428455][ T5706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.474045][ T5706] usb 7-1: config 0 descriptor?? [ 215.513874][ T31] audit: type=1400 audit(1788318245.733:641): avc: denied { mount } for pid=7859 comm="syz.5.494" name="/" dev="ramfs" ino=20898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 215.537345][ T7861] netlink: 56 bytes leftover after parsing attributes in process `syz.5.494'. [ 215.927663][ T5706] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000F/input/input38 [ 216.016772][ T5706] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000F/input/input39 [ 216.061434][ T5706] kye 0003:0458:5011.000F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 216.150263][ T31] audit: type=1400 audit(1788318246.363:642): avc: denied { append } for pid=7849 comm="syz.6.489" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 216.216246][ T5706] usb 7-1: USB disconnect, device number 17 [ 216.364344][ T7882] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5600] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7882] [ 216.407309][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'. [ 217.130863][ T31] audit: type=1400 audit(1788318247.343:643): avc: denied { ioctl } for pid=7887 comm="syz.8.501" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 217.181806][ T5827] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 217.332432][ T5827] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 217.333370][ T5827] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.333404][ T5827] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.333422][ T5827] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.333443][ T5827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.333466][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.339102][ T5827] usb 6-1: config 0 descriptor?? [ 218.564920][ T7890] netlink: 32 bytes leftover after parsing attributes in process `syz.5.503'. [ 218.564956][ T7890] netlink: 32 bytes leftover after parsing attributes in process `syz.5.503'. [ 218.688676][ T31] audit: type=1400 audit(1788318248.903:644): avc: denied { ioctl } for pid=7915 comm="syz.6.511" path="socket:[21699]" dev="sockfs" ino=21699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.688737][ T31] audit: type=1400 audit(1788318248.903:645): avc: denied { read } for pid=7888 comm="syz.5.503" lport=41094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.897506][ T5827] input: HID 1532:011d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1532:011D.0010/input/input40 [ 219.703411][ T5827] hid-rmi 0003:1532:011D.0010: input,hidraw0: USB HID v0.00 Joystick [HID 1532:011d] on usb-dummy_hcd.5-1/input0 [ 219.726481][ T5827] usb 6-1: USB disconnect, device number 28 [ 219.774402][ T5615] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 219.933850][ T5615] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 219.934702][ T5615] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.934736][ T5615] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.934758][ T5615] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 219.936244][ T5615] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 219.936263][ T5615] usb 9-1: Product: syz [ 219.936275][ T5615] usb 9-1: Manufacturer: syz [ 219.941896][ T5615] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 219.946084][ T5615] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 219.946280][ T5615] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 220.162083][ T5719] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 220.322207][ T5719] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 220.332832][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.343405][ T5719] usb 3-1: config 0 descriptor?? [ 220.412589][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 220.553554][ T10] usb 7-1: device descriptor read/64, error -71 [ 220.617871][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.522'. [ 220.627022][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.522'. [ 220.792015][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 220.851008][ T7956] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6910] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7956] [ 220.870628][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.8.524'. [ 220.925373][ T10] usb 7-1: device descriptor read/64, error -71 [ 221.012762][ T7936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.013196][ T7936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.047285][ T10] usb usb7-port1: attempt power cycle [ 221.056733][ T5719] usb 3-1: Cannot set autoneg [ 221.056909][ T5719] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 221.096791][ T5719] usb 3-1: USB disconnect, device number 31 [ 221.314841][ T1435] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.326759][ T7960] xt_hashlimit: size too large, truncated to 1048576 [ 221.332352][ T7961] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5600] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7961] [ 221.338876][ T7961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 221.431748][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 221.452361][ T10] usb 7-1: device descriptor read/8, error -71 [ 221.653108][ T1435] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.701776][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 221.722864][ T10] usb 7-1: device descriptor read/8, error -71 [ 221.723404][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.727186][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.727820][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.728408][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.728818][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.832253][ T10] usb usb7-port1: unable to enumerate USB device [ 222.475219][ T31] audit: type=1400 audit(1788318252.653:646): avc: denied { setopt } for pid=7974 comm="syz.1.531" lport=51502 faddr=::ffff:172.30.0.2 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 222.475274][ T31] audit: type=1400 audit(1788318252.693:647): avc: denied { write } for pid=7974 comm="syz.1.531" lport=51502 faddr=::ffff:172.30.0.2 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 222.591579][ T1435] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.684949][ T1435] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.134561][ T31] audit: type=1400 audit(1788318253.353:648): avc: denied { read } for pid=5265 comm="dhcpcd" name="n39" dev="tmpfs" ino=4007 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.156329][ T31] audit: type=1400 audit(1788318253.353:649): avc: denied { open } for pid=5265 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=4007 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.156369][ T31] audit: type=1400 audit(1788318253.353:650): avc: denied { getattr } for pid=5265 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=4007 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.189826][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.8.537'. [ 223.353392][ T7983] binder: 7982:7983 ioctl c018620b 0 returned -14 [ 223.436185][ T1435] bridge_slave_1: left allmulticast mode [ 223.436223][ T1435] bridge_slave_1: left promiscuous mode [ 223.436425][ T1435] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.488650][ T1435] bridge_slave_0: left allmulticast mode [ 223.488692][ T1435] bridge_slave_0: left promiscuous mode [ 223.488839][ T1435] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.541563][ T8004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.608915][ T31] audit: type=1400 audit(1788318253.823:651): avc: denied { getopt } for pid=8005 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.750242][ T7983] netlink: 'syz.2.533': attribute type 2 has an invalid length. [ 223.750276][ T7983] netlink: 'syz.2.533': attribute type 7 has an invalid length. [ 223.761922][ T52] Bluetooth: hci3: command tx timeout [ 223.891395][ T8017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.901329][ T8017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.966112][ T1435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.991947][ T1435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.002579][ T1435] bond0 (unregistering): Released all slaves [ 224.023256][ T1435] bond1 (unregistering): Released all slaves [ 224.190039][ T7983] Uýo: entered promiscuous mode [ 224.269170][ T31] audit: type=1400 audit(1788318254.353:652): avc: denied { write } for pid=8001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.269232][ T31] audit: type=1400 audit(1788318254.353:653): avc: denied { create } for pid=8001 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.269282][ T31] audit: type=1400 audit(1788318254.353:654): avc: denied { write } for pid=8001 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=4026 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.269319][ T31] audit: type=1400 audit(1788318254.353:655): avc: denied { append } for pid=8001 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=4026 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.342846][ T1435] tipc: Left network mode [ 224.406601][ T31] audit: type=1400 audit(1788318254.623:656): avc: denied { write } for pid=8028 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.406655][ T31] audit: type=1400 audit(1788318254.623:657): avc: denied { unlink } for pid=8028 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=4026 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.633203][ T5265] 8021q: adding VLAN 0 to HW filter on device eth5 [ 224.940420][ T8043] FAULT_INJECTION: forcing a failure. [ 224.940420][ T8043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.940489][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.6.544 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.940515][ T8043] Tainted: [L]=SOFTLOCKUP [ 224.940522][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 224.940532][ T8043] Call Trace: [ 224.940539][ T8043] [ 224.940546][ T8043] dump_stack_lvl+0x100/0x190 [ 224.940575][ T8043] should_fail_ex.cold+0x5/0xa [ 224.940596][ T8043] ? prepare_alloc_pages+0x16d/0x5b0 [ 224.940620][ T8043] should_fail_alloc_page+0xeb/0x140 [ 224.940643][ T8043] prepare_alloc_pages+0x1f0/0x5b0 [ 224.940669][ T8043] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 224.940697][ T8043] ? __kernel_text_address+0xd/0x30 [ 224.940725][ T8043] ? unwind_get_return_address+0x59/0xa0 [ 224.940750][ T8043] ? arch_stack_walk+0xa6/0xf0 [ 224.940782][ T8043] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.940810][ T8043] ? __pfx_stack_trace_save+0x10/0x10 [ 224.940838][ T8043] ? stack_depot_save_flags+0x27/0x9f0 [ 224.940859][ T8043] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 224.940885][ T8043] ? kasan_save_stack+0x3f/0x50 [ 224.940903][ T8043] ? kasan_save_stack+0x30/0x50 [ 224.940920][ T8043] ? kasan_save_track+0x14/0x30 [ 224.940937][ T8043] ? __kasan_kmalloc+0xaa/0xb0 [ 224.940954][ T8043] ? __kmalloc_noprof+0x32f/0x840 [ 224.940971][ T8043] ? copy_splice_read+0x1a3/0xbb0 [ 224.940992][ T8043] ? do_splice_read+0x285/0x370 [ 224.941012][ T8043] ? splice_direct_to_actor+0x2a1/0xa30 [ 224.941033][ T8043] ? do_splice_direct+0x174/0x240 [ 224.941053][ T8043] ? do_sendfile+0xadc/0xe20 [ 224.941095][ T8043] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 224.941132][ T8043] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 224.941159][ T8043] ? rcu_is_watching+0x13/0xc0 [ 224.941186][ T8043] ? __kmalloc_noprof+0x350/0x840 [ 224.941204][ T8043] ? copy_splice_read+0x1a3/0xbb0 [ 224.941229][ T8043] copy_splice_read+0x1e1/0xbb0 [ 224.941257][ T8043] ? __pfx_copy_splice_read+0x10/0x10 [ 224.941281][ T8043] ? look_up_lock_class+0x55/0x120 [ 224.941299][ T8043] ? rcu_is_watching+0x13/0xc0 [ 224.941328][ T8043] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 224.941349][ T8043] ? __pfx_copy_splice_read+0x10/0x10 [ 224.941370][ T8043] do_splice_read+0x285/0x370 [ 224.941395][ T8043] splice_direct_to_actor+0x2a1/0xa30 [ 224.941424][ T8043] ? __pfx_direct_splice_actor+0x10/0x10 [ 224.941450][ T8043] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 224.941480][ T8043] do_splice_direct+0x174/0x240 [ 224.941502][ T8043] ? __pfx_do_splice_direct+0x10/0x10 [ 224.941523][ T8043] ? avc_policy_seqno+0x9/0x20 [ 224.941544][ T8043] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 224.941567][ T8043] ? bpf_lsm_file_permission+0x9/0x10 [ 224.941589][ T8043] ? security_file_permission+0x76/0x210 [ 224.941608][ T8043] ? rw_verify_area+0xce/0x6d0 [ 224.941636][ T8043] do_sendfile+0xadc/0xe20 [ 224.941666][ T8043] ? __pfx_do_sendfile+0x10/0x10 [ 224.941699][ T8043] __x64_sys_sendfile64+0x1d8/0x220 [ 224.941718][ T8043] ? ksys_write+0x1ac/0x250 [ 224.941734][ T8043] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 224.941755][ T8043] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 224.941785][ T8043] do_syscall_64+0x123/0x790 [ 224.941807][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.941825][ T8043] RIP: 0033:0x7f8520d9e159 [ 224.941841][ T8043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.941859][ T8043] RSP: 002b:00007f8521c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 224.941878][ T8043] RAX: ffffffffffffffda RBX: 00007f8521026180 RCX: 00007f8520d9e159 [ 224.941891][ T8043] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000009 [ 224.941901][ T8043] RBP: 00007f8521c91090 R08: 0000000000000000 R09: 0000000000000000 [ 224.941912][ T8043] R10: 0000000000110000 R11: 0000000000000246 R12: 0000000000000002 [ 224.941922][ T8043] R13: 00007f8521026218 R14: 00007f8521026180 R15: 00007ffcdb2c4fa8 [ 224.941947][ T8043] [ 225.121758][ T5615] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 225.422435][ T5615] usb 2-1: device descriptor read/64, error -71 [ 225.449306][ T1435] hsr_slave_0: left promiscuous mode [ 225.454874][ T1435] hsr_slave_1: left promiscuous mode [ 225.455618][ T1435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.455633][ T1435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.468237][ T1435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.468251][ T1435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.494156][ T1435] veth1_macvtap: left promiscuous mode [ 225.494192][ T1435] veth0_macvtap: left promiscuous mode [ 225.880103][ T52] Bluetooth: hci3: command tx timeout [ 225.961876][ T5615] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 226.111739][ T5615] usb 2-1: device descriptor read/64, error -71 [ 226.221868][ T5615] usb usb2-port1: attempt power cycle [ 226.314687][ T1435] team0 (unregistering): Port device team_slave_1 removed [ 226.352884][ T1435] team0 (unregistering): Port device team_slave_0 removed [ 226.562751][ T5615] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 226.583207][ T5615] usb 2-1: device descriptor read/8, error -71 [ 226.809068][ T31] audit: type=1400 audit(1788318257.023:658): avc: denied { ioctl } for pid=8062 comm="syz.2.549" path="socket:[22065]" dev="sockfs" ino=22065 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 226.823195][ T5615] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 226.842193][ T5615] usb 2-1: device descriptor read/8, error -71 [ 226.957677][ T5615] usb usb2-port1: unable to enumerate USB device [ 227.276953][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.280978][ T7967] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.281063][ T7967] bridge_slave_0: entered allmulticast mode [ 227.282260][ T7967] bridge_slave_0: entered promiscuous mode [ 227.292455][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.292557][ T7967] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.292633][ T7967] bridge_slave_1: entered allmulticast mode [ 227.293697][ T7967] bridge_slave_1: entered promiscuous mode [ 227.435942][ T7967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.605319][ T7967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.954615][ T52] Bluetooth: hci3: command tx timeout [ 228.180605][ T7967] team0: Port device team_slave_0 added [ 228.201441][ T7967] team0: Port device team_slave_1 added [ 228.338435][ T31] audit: type=1400 audit(1788318258.503:659): avc: denied { write } for pid=8073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.342121][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.342425][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.405899][ T31] audit: type=1400 audit(1788318258.623:660): avc: denied { write } for pid=8103 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.496523][ T8096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.552'. [ 228.512184][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.512212][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.512232][ T7967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.519837][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.519849][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.519867][ T7967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.657231][ T5265] 8021q: adding VLAN 0 to HW filter on device eth6 [ 228.683664][ T7967] hsr_slave_0: entered promiscuous mode [ 228.690647][ T7967] hsr_slave_1: entered promiscuous mode [ 228.691326][ T7967] debugfs: 'hsr0' already exists in 'hsr' [ 228.691341][ T7967] Cannot create hsr debugfs directory [ 229.855030][ T5827] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 229.994594][ T52] Bluetooth: hci3: command tx timeout [ 230.187943][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 230.214733][ T5827] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 230.258499][ T5827] usb 2-1: config 31 has an invalid interface number: 197 but max is 0 [ 230.258534][ T5827] usb 2-1: config 31 has no interface number 0 [ 230.414326][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.414374][ T5827] usb 2-1: Product: syz [ 230.414400][ T5827] usb 2-1: Manufacturer: syz [ 230.414417][ T5827] usb 2-1: SerialNumber: syz [ 230.899185][ T5827] gspca_main: etoms-2.14.0 probing 102c:6151 [ 230.980434][ T31] audit: type=1400 audit(1788318261.193:661): avc: denied { bind } for pid=8125 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 231.004735][ T31] audit: type=1400 audit(1788318261.223:662): avc: denied { setopt } for pid=8125 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 231.026266][ T31] audit: type=1400 audit(1788318261.253:663): avc: denied { accept } for pid=8125 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 231.049101][ T5827] usb 2-1: USB disconnect, device number 37 [ 231.059213][ T31] audit: type=1400 audit(1788318261.283:664): avc: denied { write } for pid=8125 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 231.096448][ T31] audit: type=1400 audit(1788318261.313:665): avc: denied { read } for pid=8125 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 231.182836][ T7967] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 231.209247][ T7967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.218795][ T7967] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 231.288573][ T7967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.303162][ T7967] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 231.333011][ T7967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.342377][ T7967] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 231.372930][ T7967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.426972][ T8138] syz.8.560 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 231.475700][ T31] audit: type=1400 audit(1788318261.693:666): avc: denied { write } for pid=8120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.630956][ T31] audit: type=1400 audit(1788318261.843:667): avc: denied { write } for pid=8141 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.748244][ T8144] FAULT_INJECTION: forcing a failure. [ 231.748244][ T8144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.748286][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.1.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.748311][ T8144] Tainted: [L]=SOFTLOCKUP [ 231.748317][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 231.748334][ T8144] Call Trace: [ 231.748340][ T8144] [ 231.748347][ T8144] dump_stack_lvl+0x100/0x190 [ 231.748377][ T8144] should_fail_ex.cold+0x5/0xa [ 231.748402][ T8144] _copy_to_user+0x32/0xd0 [ 231.748430][ T8144] simple_read_from_buffer+0xcb/0x170 [ 231.748453][ T8144] proc_fail_nth_read+0x1af/0x230 [ 231.748474][ T8144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.748498][ T8144] ? rw_verify_area+0xce/0x6d0 [ 231.748522][ T8144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.748542][ T8144] vfs_read+0x1e4/0xb40 [ 231.748569][ T8144] ? lock_acquire+0x1d1/0x380 [ 231.748587][ T8144] ? __fget_files+0x34/0x3d0 [ 231.748607][ T8144] ? __pfx_vfs_read+0x10/0x10 [ 231.748631][ T8144] ? find_held_lock+0x2b/0x80 [ 231.748655][ T8144] ? __fget_files+0x215/0x3d0 [ 231.748679][ T8144] ? __fget_files+0x21f/0x3d0 [ 231.748705][ T8144] ksys_read+0x12a/0x250 [ 231.748721][ T8144] ? __pfx_ksys_read+0x10/0x10 [ 231.748755][ T8144] do_syscall_64+0x123/0x790 [ 231.748779][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.748797][ T8144] RIP: 0033:0x7fca4295e98e [ 231.748812][ T8144] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 231.748828][ T8144] RSP: 002b:00007fca438a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.748845][ T8144] RAX: ffffffffffffffda RBX: 00007fca438a56c0 RCX: 00007fca4295e98e [ 231.748857][ T8144] RDX: 000000000000000f RSI: 00007fca438a50a0 RDI: 0000000000000007 [ 231.748868][ T8144] RBP: 00007fca438a5090 R08: 0000000000000000 R09: 0000000000000000 [ 231.748878][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.748889][ T8144] R13: 00007fca42c26038 R14: 00007fca42c25fa0 R15: 00007ffc08ab6338 [ 231.748914][ T8144] [ 231.858848][ T7967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.887362][ T5265] 8021q: adding VLAN 0 to HW filter on device eth7 [ 231.929831][ T7967] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.960372][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.960445][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.098736][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.099365][ T1435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.221948][ T8148] FAULT_INJECTION: forcing a failure. [ 232.221948][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 232.221988][ T8148] CPU: 0 UID: 0 PID: 8148 Comm: syz.8.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.222014][ T8148] Tainted: [L]=SOFTLOCKUP [ 232.222021][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 232.222031][ T8148] Call Trace: [ 232.222037][ T8148] [ 232.222045][ T8148] dump_stack_lvl+0x100/0x190 [ 232.222075][ T8148] should_fail_ex.cold+0x5/0xa [ 232.222100][ T8148] should_failslab+0xc2/0x120 [ 232.222123][ T8148] __kmalloc_flags_noprof+0x122/0x8e0 [ 232.222152][ T8148] ? alloc_slab_obj_exts+0x6a/0x170 [ 232.222181][ T8148] alloc_slab_obj_exts+0x6a/0x170 [ 232.222208][ T8148] __memcg_slab_post_alloc_hook+0x40a/0x1270 [ 232.222241][ T8148] ? kasan_save_track+0x14/0x30 [ 232.222263][ T8148] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 232.222282][ T8148] ? copy_utsname+0x1a8/0x690 [ 232.222303][ T8148] copy_utsname+0x1a8/0x690 [ 232.222329][ T8148] create_new_namespaces+0x16a/0xac0 [ 232.222349][ T8148] ? bpf_lsm_capable+0x9/0x10 [ 232.222373][ T8148] ? security_capable+0x80/0x260 [ 232.222400][ T8148] unshare_nsproxy_namespaces+0xf2/0x220 [ 232.222422][ T8148] ksys_unshare+0x4a2/0xa70 [ 232.222443][ T8148] ? __pfx_ksys_unshare+0x10/0x10 [ 232.222464][ T8148] ? ksys_write+0x1ac/0x250 [ 232.222487][ T8148] __x64_sys_unshare+0x31/0x40 [ 232.222507][ T8148] do_syscall_64+0x123/0x790 [ 232.222530][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.222548][ T8148] RIP: 0033:0x7fc1de79e159 [ 232.222563][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.222578][ T8148] RSP: 002b:00007fc1dc9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 232.222596][ T8148] RAX: ffffffffffffffda RBX: 00007fc1dea26090 RCX: 00007fc1de79e159 [ 232.222608][ T8148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006e000000 [ 232.222618][ T8148] RBP: 00007fc1dc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 232.222628][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.222638][ T8148] R13: 00007fc1dea26128 R14: 00007fc1dea26090 R15: 00007ffc82351be8 [ 232.222660][ T8148] [ 232.543213][ T8152] FAULT_INJECTION: forcing a failure. [ 232.543213][ T8152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.543240][ T8152] CPU: 0 UID: 0 PID: 8152 Comm: syz.6.557 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.543261][ T8152] Tainted: [L]=SOFTLOCKUP [ 232.543266][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 232.543275][ T8152] Call Trace: [ 232.543281][ T8152] [ 232.543287][ T8152] dump_stack_lvl+0x100/0x190 [ 232.543313][ T8152] should_fail_ex.cold+0x5/0xa [ 232.543341][ T8152] _copy_from_iter+0x1f4/0x1690 [ 232.543371][ T8152] ? __pfx__copy_from_iter+0x10/0x10 [ 232.543394][ T8152] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 232.543416][ T8152] ? lock_acquire+0x1d1/0x380 [ 232.543437][ T8152] copy_page_from_iter+0x238/0x300 [ 232.543462][ T8152] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 232.543494][ T8152] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 232.543517][ T8152] ? unwind_get_return_address+0x59/0xa0 [ 232.543539][ T8152] ? arch_stack_walk+0xa6/0xf0 [ 232.543570][ T8152] ? _kstrtoull+0x144/0x200 [ 232.543587][ T8152] ? __pfx__kstrtoull+0x10/0x10 [ 232.543606][ T8152] tun_get_user+0x1674/0x3cc0 [ 232.543637][ T8152] ? __lock_acquire+0x4c5/0x1ec0 [ 232.543652][ T8152] ? __pfx_tun_get_user+0x10/0x10 [ 232.543677][ T8152] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 232.543702][ T8152] ? find_held_lock+0x2b/0x80 [ 232.543722][ T8152] ? tun_get+0x191/0x370 [ 232.543743][ T8152] ? tun_get+0x191/0x370 [ 232.543770][ T8152] tun_chr_write_iter+0xdc/0x200 [ 232.543795][ T8152] vfs_write+0x6af/0x1050 [ 232.543819][ T8152] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 232.543845][ T8152] ? __pfx_vfs_write+0x10/0x10 [ 232.543866][ T8152] ? find_held_lock+0x2b/0x80 [ 232.543903][ T8152] ksys_write+0x12a/0x250 [ 232.543917][ T8152] ? __pfx_ksys_write+0x10/0x10 [ 232.543937][ T8152] do_syscall_64+0x123/0x790 [ 232.543957][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.543973][ T8152] RIP: 0033:0x7f8520d5e98e [ 232.543986][ T8152] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.544001][ T8152] RSP: 002b:00007f8521cd2fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.544018][ T8152] RAX: ffffffffffffffda RBX: 00007f8521cd36c0 RCX: 00007f8520d5e98e [ 232.544028][ T8152] RDX: 0000000000000036 RSI: 0000200000000680 RDI: 00000000000000c8 [ 232.544038][ T8152] RBP: 00007f8521cd3090 R08: 0000000000000000 R09: 0000000000000000 [ 232.544047][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.544057][ T8152] R13: 00007f8521026038 R14: 00007f8521025fa0 R15: 00007ffcdb2c4fa8 [ 232.544078][ T8152] [ 233.038239][ T8160] fuse-io-uring is disabled by module parameter [ 233.039766][ T31] audit: type=1400 audit(1788318263.253:668): avc: denied { cmd } for pid=8158 comm="syz.6.564" path="/dev/cuse" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=io_uring permissive=1 [ 233.777476][ T31] audit: type=1400 audit(1788318263.993:669): avc: denied { write } for pid=8156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.070772][ T8198] syz_tun: Device is already in use. [ 234.159718][ T31] audit: type=1400 audit(1788318264.363:670): avc: denied { write } for pid=8194 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.198055][ T52] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 234.244859][ T8199] FAULT_INJECTION: forcing a failure. [ 234.244859][ T8199] name fail_futex, interval 1, probability 0, space 0, times 0 [ 234.244915][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.6.571 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.244938][ T8199] Tainted: [L]=SOFTLOCKUP [ 234.244944][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 234.244954][ T8199] Call Trace: [ 234.244959][ T8199] [ 234.244966][ T8199] dump_stack_lvl+0x100/0x190 [ 234.244993][ T8199] should_fail_ex.cold+0x5/0xa [ 234.245016][ T8199] get_futex_key+0x1d0/0x14f0 [ 234.245039][ T8199] ? __pfx_get_futex_key+0x10/0x10 [ 234.245057][ T8199] ? find_held_lock+0x2b/0x80 [ 234.245079][ T8199] ? futex_wake+0x4ea/0x5e0 [ 234.245109][ T8199] futex_wake+0xf4/0x5e0 [ 234.245130][ T8199] ? futex_wait+0x11e/0x370 [ 234.245156][ T8199] ? __pfx_futex_wake+0x10/0x10 [ 234.245182][ T8199] ? rcu_read_lock_any_held+0x6a/0x90 [ 234.245204][ T8199] ? find_held_lock+0x2b/0x80 [ 234.245229][ T8199] do_futex+0x2b2/0x440 [ 234.245250][ T8199] ? __pfx_do_futex+0x10/0x10 [ 234.245269][ T8199] ? __fget_files+0x215/0x3d0 [ 234.245294][ T8199] __x64_sys_futex+0x34f/0x4d0 [ 234.245318][ T8199] ? __pfx___x64_sys_futex+0x10/0x10 [ 234.245338][ T8199] ? __sys_setsockopt+0x1b5/0x220 [ 234.245369][ T8199] do_syscall_64+0x123/0x790 [ 234.245390][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.245406][ T8199] RIP: 0033:0x7f8520d9e159 [ 234.245420][ T8199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.245435][ T8199] RSP: 002b:00007f8521cd30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 234.245451][ T8199] RAX: ffffffffffffffda RBX: 00007f8521025fa8 RCX: 00007f8520d9e159 [ 234.245461][ T8199] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8521025fac [ 234.245471][ T8199] RBP: 00007f8521025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 234.245481][ T8199] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 234.245497][ T8199] R13: 00007f8521026038 R14: 00007ffcdb2c4ec0 R15: 00007ffcdb2c4fa8 [ 234.245520][ T8199] [ 234.385434][ T8199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.615987][ T5265] 8021q: adding VLAN 0 to HW filter on device eth8 [ 234.678052][ T8204] af_packet: tpacket_rcv: packet too big, clamped from 205 to 4294967272. macoff=96 [ 234.986252][ T8214] 9p: Bad value for 'rfdno' [ 235.028927][ T8214] overlay: ./file0 is not a directory [ 235.040802][ T7967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.598149][ T8227] sctp: [Deprecated]: syz.6.576 (pid 8227) Use of int in max_burst socket option deprecated. [ 236.598149][ T8227] Use struct sctp_assoc_value instead [ 236.651737][ T5706] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 236.734476][ T7967] veth0_vlan: entered promiscuous mode [ 236.768059][ T7967] veth1_vlan: entered promiscuous mode [ 236.802732][ T5706] usb 2-1: device descriptor read/64, error -71 [ 236.864042][ T7967] veth0_macvtap: entered promiscuous mode [ 236.881206][ T7967] veth1_macvtap: entered promiscuous mode [ 236.969832][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.094477][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.113434][ T5706] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 238.155798][ T210] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.167728][ T5706] usb 2-1: device descriptor read/64, error -71 [ 238.292322][ T5706] usb usb2-port1: attempt power cycle [ 239.402053][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.573495][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.573526][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.594297][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 239.594317][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 239.641752][ T60] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.652140][ T60] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.796044][ T8252] tipc: Started in network mode [ 239.796085][ T8252] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 239.856801][ T8252] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 239.863549][ T8252] tipc: Enabled bearer , priority 10 [ 239.873756][ T210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.873785][ T210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.082386][ T8261] syzkaller0: entered promiscuous mode [ 240.082422][ T8261] syzkaller0: entered allmulticast mode [ 241.330342][ T8278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.584'. [ 241.444784][ T8284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.584'. [ 242.677639][ T8268] bond1: left promiscuous mode [ 242.677664][ T8268] veth0_to_bond: left promiscuous mode [ 242.692027][ T10] tipc: Node number set to 1 [ 242.813988][ T8292] FAULT_INJECTION: forcing a failure. [ 242.813988][ T8292] name failslab, interval 1, probability 0, space 0, times 0 [ 242.838034][ T8292] CPU: 1 UID: 0 PID: 8292 Comm: syz.6.589 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.838063][ T8292] Tainted: [L]=SOFTLOCKUP [ 242.838069][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 242.838080][ T8292] Call Trace: [ 242.838086][ T8292] [ 242.838093][ T8292] dump_stack_lvl+0x100/0x190 [ 242.838124][ T8292] should_fail_ex.cold+0x5/0xa [ 242.838149][ T8292] should_failslab+0xc2/0x120 [ 242.838172][ T8292] __kmalloc_cache_noprof+0x91/0x6d0 [ 242.838197][ T8292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.838218][ T8292] ? cgroup_file_open+0x90/0x470 [ 242.838243][ T8292] cgroup_file_open+0x90/0x470 [ 242.838261][ T8292] ? __pfx_cgroup_file_open+0x10/0x10 [ 242.838282][ T8292] kernfs_fop_open+0x8bb/0xd50 [ 242.838308][ T8292] do_dentry_open+0x6ab/0x14d0 [ 242.838325][ T8292] ? __pfx_kernfs_fop_open+0x10/0x10 [ 242.838348][ T8292] vfs_open+0x82/0x3f0 [ 242.838372][ T8292] path_openat+0x19fa/0x2440 [ 242.838398][ T8292] ? __pfx_path_openat+0x10/0x10 [ 242.838425][ T8292] do_file_open+0x20e/0x430 [ 242.838449][ T8292] ? __pfx_do_file_open+0x10/0x10 [ 242.838487][ T8292] ? _raw_spin_unlock+0x28/0x50 [ 242.838513][ T8292] ? alloc_fd+0x471/0x7a0 [ 242.838541][ T8292] do_sys_openat2+0x10f/0x1e0 [ 242.838564][ T8292] ? __pfx_do_sys_openat2+0x10/0x10 [ 242.838584][ T8292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.838605][ T8292] ? __fget_files+0x21f/0x3d0 [ 242.838631][ T8292] __x64_sys_creat+0xcc/0x120 [ 242.838654][ T8292] ? __pfx___x64_sys_creat+0x10/0x10 [ 242.838680][ T8292] ? __pfx_ksys_write+0x10/0x10 [ 242.838701][ T8292] ? do_syscall_64+0xae/0x790 [ 242.838728][ T8292] do_syscall_64+0x123/0x790 [ 242.838750][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.838769][ T8292] RIP: 0033:0x7f8520d9e159 [ 242.838784][ T8292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.838801][ T8292] RSP: 002b:00007f8521cd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 242.838821][ T8292] RAX: ffffffffffffffda RBX: 00007f8521025fa0 RCX: 00007f8520d9e159 [ 242.838834][ T8292] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000200000000180 [ 242.838845][ T8292] RBP: 00007f8521cd3090 R08: 0000000000000000 R09: 0000000000000000 [ 242.838856][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.838867][ T8292] R13: 00007f8521026038 R14: 00007f8521025fa0 R15: 00007ffcdb2c4fa8 [ 242.838893][ T8292] [ 243.139706][ T31] audit: type=1400 audit(1788318273.353:671): avc: denied { ioctl } for pid=8299 comm="syz.8.593" path="socket:[23576]" dev="sockfs" ino=23576 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.304538][ T8291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8291 comm=syz.9.528 [ 243.481881][ T5827] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 244.282673][ T5827] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 244.313250][ T5827] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 244.313284][ T5827] usb 7-1: config 1 has no interface number 0 [ 244.313326][ T5827] usb 7-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 244.313350][ T5827] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 244.313376][ T5827] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 255, changing to 11 [ 244.381309][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.381343][ T5827] usb 7-1: Product: syz [ 244.381368][ T5827] usb 7-1: Manufacturer: syz [ 244.381384][ T5827] usb 7-1: SerialNumber: syz [ 244.438128][ T8305] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 244.438265][ T8305] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 244.458611][ T5827] usb 7-1: Expected 3 endpoints, found: 2 [ 244.640384][ T8319] netlink: 64 bytes leftover after parsing attributes in process `syz.9.598'. [ 244.672472][ T31] audit: type=1400 audit(1788318274.893:672): avc: denied { create } for pid=8323 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 244.680039][ T10] usb 7-1: USB disconnect, device number 22 [ 245.015805][ T8333] 9pnet_fd: Insufficient options for proto=fd [ 245.842629][ T5827] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 245.881117][ T31] audit: type=1400 audit(1788318276.093:673): avc: denied { write } for pid=8344 comm="syz.6.605" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 245.887019][ T8345] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 245.947729][ T8345] bond1 (unregistering): Released all slaves [ 245.992344][ T5827] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.003084][ T5827] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 246.003115][ T5827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.003134][ T5827] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 246.003154][ T5827] usb 2-1: config 1 has no interface number 1 [ 246.003191][ T5827] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 246.073032][ T5827] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.087743][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.087774][ T5827] usb 2-1: Product: syz [ 246.087790][ T5827] usb 2-1: Manufacturer: syz [ 246.087807][ T5827] usb 2-1: SerialNumber: syz [ 246.799998][ T8348] FAULT_INJECTION: forcing a failure. [ 246.799998][ T8348] name failslab, interval 1, probability 0, space 0, times 0 [ 246.800042][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.800066][ T8348] Tainted: [L]=SOFTLOCKUP [ 246.800072][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 246.800081][ T8348] Call Trace: [ 246.800087][ T8348] [ 246.800094][ T8348] dump_stack_lvl+0x100/0x190 [ 246.800116][ T8348] should_fail_ex.cold+0x5/0xa [ 246.800138][ T8348] should_failslab+0xc2/0x120 [ 246.800159][ T8348] __kmalloc_cache_noprof+0x91/0x6d0 [ 246.800182][ T8348] ? find_held_lock+0x2b/0x80 [ 246.800205][ T8348] ? __pollwait+0x2c3/0x490 [ 246.800219][ T8348] __pollwait+0x2c3/0x490 [ 246.800230][ T8348] ? __pfx___pollwait+0x10/0x10 [ 246.800241][ T8348] pipe_poll+0x360/0x6c0 [ 246.800253][ T8348] ? __pfx_pipe_poll+0x10/0x10 [ 246.800264][ T8348] do_sys_poll+0x6e5/0xe90 [ 246.800288][ T8348] ? __pfx_do_sys_poll+0x10/0x10 [ 246.800329][ T8348] ? __lock_acquire+0x4c5/0x1ec0 [ 246.800348][ T8348] ? __pfx___pollwait+0x10/0x10 [ 246.800362][ T8348] ? __pfx_pollwake+0x10/0x10 [ 246.800374][ T8348] ? __pfx_pollwake+0x10/0x10 [ 246.800386][ T8348] ? __pfx_pollwake+0x10/0x10 [ 246.800398][ T8348] ? __pfx_pollwake+0x10/0x10 [ 246.800410][ T8348] ? __pfx_pollwake+0x10/0x10 [ 246.800427][ T8348] ? __pfx_pollwake+0x10/0x10 [ 246.800447][ T8348] ? __pfx_pollwake+0x10/0x10 [ 246.800466][ T8348] ? __pfx_pollwake+0x10/0x10 [ 246.800484][ T8348] ? __pfx_pollwake+0x10/0x10 [ 246.800501][ T8348] ? ktime_get_ts64+0x306/0x420 [ 246.800514][ T8348] ? ktime_get_ts64+0x318/0x420 [ 246.800525][ T8348] ? ktime_get_ts64+0x257/0x420 [ 246.800540][ T8348] __x64_sys_poll+0x1b3/0x420 [ 246.800552][ T8348] ? __pfx___x64_sys_poll+0x10/0x10 [ 246.800574][ T8348] do_syscall_64+0x123/0x790 [ 246.800597][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.800615][ T8348] RIP: 0033:0x7f473619e159 [ 246.800629][ T8348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.800645][ T8348] RSP: 002b:00007f4737135028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 246.800666][ T8348] RAX: ffffffffffffffda RBX: 00007f4736425fa0 RCX: 00007f473619e159 [ 246.800674][ T8348] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 246.800680][ T8348] RBP: 00007f4737135090 R08: 0000000000000000 R09: 0000000000000000 [ 246.800686][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.800693][ T8348] R13: 00007f4736426038 R14: 00007f4736425fa0 R15: 00007fff4b4beeb8 [ 246.800709][ T8348] [ 246.889130][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.889457][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.896278][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.896567][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.048597][ T31] audit: type=1400 audit(1788318277.263:674): avc: denied { read } for pid=8354 comm="syz.6.607" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 247.085962][ T5827] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 247.086004][ T5827] usb 2-1: MIDIStreaming interface descriptor not found [ 247.089856][ T8353] input: syz1 as /devices/virtual/input/input41 [ 247.206218][ T8353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.206540][ T8353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.247628][ T5827] usb 2-1: USB disconnect, device number 41 [ 247.321743][ T5615] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 247.473698][ T5615] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 247.474877][ T5615] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.474910][ T5615] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.479030][ T5615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.479051][ T5615] usb 7-1: Product: syz [ 247.479064][ T5615] usb 7-1: Manufacturer: syz [ 247.479076][ T5615] usb 7-1: SerialNumber: syz [ 247.493382][ T5615] sisusb 7-1:1.0: Invalid USB2VGA device [ 247.493401][ T5615] sisusb 7-1:1.0: probe with driver sisusb failed with error -22 [ 247.663565][ T31] audit: type=1400 audit(1788318277.883:675): avc: denied { write } for pid=8350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.768232][ T5615] usb 7-1: USB disconnect, device number 23 [ 247.773762][ T31] audit: type=1400 audit(1788318277.993:676): avc: denied { shutdown } for pid=8367 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.805618][ T31] audit: type=1400 audit(1788318278.023:677): avc: denied { create } for pid=8367 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 247.822348][ T31] audit: type=1400 audit(1788318278.043:678): avc: denied { bind } for pid=8367 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 247.975460][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 247.989393][ T31] audit: type=1400 audit(1788318278.203:679): avc: denied { write } for pid=8369 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.034828][ T52] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 248.063462][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.613'. [ 248.083867][ T8378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.613'. [ 248.368866][ T31] audit: type=1400 audit(1788318278.583:680): avc: denied { bind } for pid=8386 comm="syz.8.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.388569][ T31] audit: type=1400 audit(1788318278.603:681): avc: denied { write } for pid=8386 comm="syz.8.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.408148][ T31] audit: type=1400 audit(1788318278.603:682): avc: denied { ioctl } for pid=8386 comm="syz.8.616" path="socket:[23765]" dev="sockfs" ino=23765 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.551342][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 248.570249][ T31] audit: type=1400 audit(1788318278.783:683): avc: denied { create } for pid=8389 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 248.651475][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 249.394877][ T8412] syzkaller0: entered promiscuous mode [ 249.400427][ T8412] syzkaller0: entered allmulticast mode [ 249.532089][ T5827] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 249.685602][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.685992][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.695236][ T5827] usb 10-1: Using ep0 maxpacket: 32 [ 249.702919][ T31] audit: type=1400 audit(1788318279.923:684): avc: denied { write } for pid=8388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.708918][ T5827] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 249.743490][ T5827] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.755189][ T5827] usb 10-1: config 0 descriptor?? [ 249.768745][ T5827] gspca_main: sq930x-2.14.0 probing 041e:403c [ 249.947678][ T31] audit: type=1400 audit(1788318280.153:685): avc: denied { write } for pid=8431 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.993772][ T31] audit: type=1400 audit(1788318280.213:686): avc: denied { map } for pid=8402 comm="syz.9.620" path="socket:[23791]" dev="sockfs" ino=23791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.993818][ T31] audit: type=1400 audit(1788318280.213:687): avc: denied { read } for pid=8402 comm="syz.9.620" path="socket:[23791]" dev="sockfs" ino=23791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 250.073951][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.073998][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.497327][ T5706] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 250.520760][ T5827] gspca_sq930x: reg_r 001f failed -71 [ 250.520833][ T5827] sq930x 10-1:0.0: probe with driver sq930x failed with error -71 [ 250.536102][ T5827] usb 10-1: USB disconnect, device number 2 [ 250.714496][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 250.722030][ T5706] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 250.739278][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.739309][ T5706] usb 2-1: Product: syz [ 250.739338][ T5706] usb 2-1: Manufacturer: syz [ 250.739355][ T5706] usb 2-1: SerialNumber: syz [ 250.773808][ T5706] usb 2-1: config 0 descriptor?? [ 250.787670][ T5706] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 250.816813][ T8446] FAULT_INJECTION: forcing a failure. [ 250.816813][ T8446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.816857][ T8446] CPU: 0 UID: 0 PID: 8446 Comm: syz.9.629 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.816880][ T8446] Tainted: [L]=SOFTLOCKUP [ 250.816885][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 250.816894][ T8446] Call Trace: [ 250.816899][ T8446] [ 250.816906][ T8446] dump_stack_lvl+0x100/0x190 [ 250.816932][ T8446] should_fail_ex.cold+0x5/0xa [ 250.816955][ T8446] _copy_from_user+0x2e/0xd0 [ 250.816979][ T8446] copy_msghdr_from_user+0x9f/0x4c0 [ 250.817001][ T8446] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 250.817026][ T8446] ? lock_acquire+0x1d1/0x380 [ 250.817042][ T8446] ? get_pid_task+0x2a/0x250 [ 250.817065][ T8446] ___sys_sendmsg+0x106/0x1e0 [ 250.817086][ T8446] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.817106][ T8446] ? get_pid_task+0x106/0x250 [ 250.817140][ T8446] ? find_held_lock+0x2b/0x80 [ 250.817176][ T8446] __sys_sendmsg+0x160/0x210 [ 250.817193][ T8446] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.817220][ T8446] do_syscall_64+0x123/0x790 [ 250.817240][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.817256][ T8446] RIP: 0033:0x7f20a7d9e159 [ 250.817270][ T8446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.817285][ T8446] RSP: 002b:00007f20a8c98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.817301][ T8446] RAX: ffffffffffffffda RBX: 00007f20a8025fa0 RCX: 00007f20a7d9e159 [ 250.817311][ T8446] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 250.817321][ T8446] RBP: 00007f20a8c98090 R08: 0000000000000000 R09: 0000000000000000 [ 250.817330][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.817339][ T8446] R13: 00007f20a8026038 R14: 00007f20a8025fa0 R15: 00007fff6ff1f918 [ 250.817361][ T8446] [ 251.039958][ T8442] FAULT_INJECTION: forcing a failure. [ 251.039958][ T8442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.040005][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.2.628 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.040028][ T8442] Tainted: [L]=SOFTLOCKUP [ 251.040034][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 251.040043][ T8442] Call Trace: [ 251.040049][ T8442] [ 251.040055][ T8442] dump_stack_lvl+0x100/0x190 [ 251.040081][ T8442] should_fail_ex.cold+0x5/0xa [ 251.040104][ T8442] _copy_from_user+0x2e/0xd0 [ 251.040134][ T8442] memdup_user+0x6b/0xe0 [ 251.040157][ T8442] strndup_user+0x78/0xe0 [ 251.040180][ T8442] __x64_sys_fsopen+0x9e/0x220 [ 251.040205][ T8442] do_syscall_64+0x123/0x790 [ 251.040224][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.040242][ T8442] RIP: 0033:0x7f473619e159 [ 251.040256][ T8442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.040271][ T8442] RSP: 002b:00007f4737114028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 251.040287][ T8442] RAX: ffffffffffffffda RBX: 00007f4736426090 RCX: 00007f473619e159 [ 251.040297][ T8442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 251.040307][ T8442] RBP: 00007f4737114090 R08: 0000000000000000 R09: 0000000000000000 [ 251.040317][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.040326][ T8442] R13: 00007f4736426128 R14: 00007f4736426090 R15: 00007fff4b4beeb8 [ 251.040347][ T8442] [ 251.046627][ T31] audit: type=1400 audit(1788318281.263:688): avc: denied { write } for pid=8449 comm="syz.8.631" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 251.049750][ T31] audit: type=1400 audit(1788318281.263:689): avc: denied { map } for pid=8449 comm="syz.8.631" path="/dev/video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 251.258954][ T5706] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB1 [ 251.653987][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.663910][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.777034][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.777348][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.141790][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 252.533244][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 252.534181][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.534215][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.539249][ T10] usb 3-1: config 0 descriptor?? [ 252.591751][ T5827] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 252.745341][ T5827] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 252.756285][ T5827] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.756318][ T5827] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.756354][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.775794][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 252.775866][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 252.785564][ T10] usb 3-1: USB disconnect, device number 32 [ 252.816569][ T5827] usb 7-1: config 0 descriptor?? [ 252.829496][ T5827] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 252.859959][ T5615] usb 2-1: USB disconnect, device number 42 [ 252.870882][ T5615] clie_3.5 ttyUSB1: Sony Clie 3.5 converter now disconnected from ttyUSB1 [ 252.871303][ T5615] visor 2-1:0.0: device disconnected [ 253.309560][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 253.452071][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 253.453039][ T31] audit: type=1400 audit(1788318283.613:703): avc: denied { read } for pid=8493 comm="syz.6.638" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 253.453240][ T31] audit: type=1400 audit(1788318283.613:704): avc: denied { open } for pid=8493 comm="syz.6.638" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 253.488395][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 253.573659][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.586569][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.662331][ T10] usb 3-1: config 0 descriptor?? [ 254.238885][ T31] audit: type=1400 audit(1788318284.453:705): avc: denied { read write } for pid=8524 comm="syz.1.645" dev="sockfs" ino=25194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.267894][ T8525] 9p: Bad value for 'rfdno' [ 254.838064][ T10] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 254.846760][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input43 [ 255.864106][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.914025][ T10] usb 7-1: USB disconnect, device number 24 [ 256.166214][ T25] usb 3-1: USB disconnect, device number 33 [ 256.166291][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 257.405209][ T31] audit: type=1400 audit(1788318287.623:706): avc: denied { read write } for pid=8551 comm="syz.2.653" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 257.431889][ T31] audit: type=1400 audit(1788318287.653:707): avc: denied { open } for pid=8551 comm="syz.2.653" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 257.560950][ T8557] FAULT_INJECTION: forcing a failure. [ 257.560950][ T8557] name failslab, interval 1, probability 0, space 0, times 0 [ 257.575602][ T8557] CPU: 1 UID: 0 PID: 8557 Comm: syz.8.655 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.575630][ T8557] Tainted: [L]=SOFTLOCKUP [ 257.575637][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 257.575647][ T8557] Call Trace: [ 257.575654][ T8557] [ 257.575660][ T8557] dump_stack_lvl+0x100/0x190 [ 257.575691][ T8557] should_fail_ex.cold+0x5/0xa [ 257.575717][ T8557] should_failslab+0xc2/0x120 [ 257.575738][ T8557] __kmalloc_cache_noprof+0x91/0x6d0 [ 257.575764][ T8557] ? fat_init_fs_context+0x56/0x5e0 [ 257.575790][ T8557] fat_init_fs_context+0x56/0x5e0 [ 257.575811][ T8557] ? lockdep_init_map_type+0x5c/0x250 [ 257.575834][ T8557] vfat_init_fs_context+0x1b/0x70 [ 257.575857][ T8557] alloc_fs_context+0x60c/0xf40 [ 257.575887][ T8557] __x64_sys_fsopen+0xed/0x220 [ 257.575915][ T8557] do_syscall_64+0x123/0x790 [ 257.575938][ T8557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.575957][ T8557] RIP: 0033:0x7fc1de79e159 [ 257.575972][ T8557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.575989][ T8557] RSP: 002b:00007fc1df597028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 257.576007][ T8557] RAX: ffffffffffffffda RBX: 00007fc1dea25fa0 RCX: 00007fc1de79e159 [ 257.576019][ T8557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 257.576030][ T8557] RBP: 00007fc1df597090 R08: 0000000000000000 R09: 0000000000000000 [ 257.576040][ T8557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.576050][ T8557] R13: 00007fc1dea26038 R14: 00007fc1dea25fa0 R15: 00007ffc82351be8 [ 257.576075][ T8557] [ 257.734249][ T5713] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 257.884370][ T8560] netlink: 'syz.2.656': attribute type 9 has an invalid length. [ 257.895898][ T5713] usb 10-1: not running at top speed; connect to a high speed hub [ 257.895937][ T5713] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 257.896749][ T5713] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.896783][ T5713] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 257.896812][ T5713] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.931439][ T5713] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 257.936214][ T5713] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 257.952214][ T5713] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 257.958116][ T5713] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 257.958192][ T5713] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 257.964694][ T5713] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 258.131731][ T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 258.173224][ T5736] usb 10-1: USB disconnect, device number 3 [ 258.193388][ T5736] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 258.206964][ T5736] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 258.207586][ T5736] keyspan 10-1:1.0: device disconnected [ 258.292166][ T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.303890][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.303939][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.330563][ T25] usb 2-1: config 0 descriptor?? [ 258.372024][ T310] IPVS: starting estimator thread 0... [ 258.387143][ T8574] netlink: 284 bytes leftover after parsing attributes in process `syz.6.659'. [ 258.462508][ T8577] IPVS: using max 44 ests per chain, 105600 per kthread [ 258.536964][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.537327][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.569009][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 258.575617][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 258.586370][ T25] usb 2-1: USB disconnect, device number 43 [ 258.591534][ T31] audit: type=1400 audit(1788318288.803:708): avc: denied { watch watch_reads } for pid=8572 comm="syz.6.659" path="/proc/296/task/299/fd" dev="proc" ino=23933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 258.911788][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.912115][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.083696][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 259.242852][ T25] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 259.253201][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.264175][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.279625][ T25] usb 2-1: config 0 descriptor?? [ 259.421740][ T5831] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 259.426811][ T8573] syz.6.659 (8573): drop_caches: 2 [ 259.592377][ T8593] FAULT_INJECTION: forcing a failure. [ 259.592377][ T8593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.592418][ T8593] CPU: 1 UID: 0 PID: 8593 Comm: syz.6.664 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.592447][ T8593] Tainted: [L]=SOFTLOCKUP [ 259.592454][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 259.592465][ T8593] Call Trace: [ 259.592471][ T8593] [ 259.592478][ T8593] dump_stack_lvl+0x100/0x190 [ 259.592509][ T8593] should_fail_ex.cold+0x5/0xa [ 259.592534][ T8593] _copy_from_user+0x2e/0xd0 [ 259.592561][ T8593] copy_msghdr_from_user+0x9f/0x4c0 [ 259.592586][ T8593] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 259.592613][ T8593] ? rcu_is_watching+0x13/0xc0 [ 259.592633][ T8593] ? ___sys_sendmsg+0x19d/0x1e0 [ 259.592649][ T8593] ? kfree+0x1e5/0x6d0 [ 259.592671][ T8593] ___sys_sendmsg+0x106/0x1e0 [ 259.592691][ T8593] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.592716][ T8593] ? __fget_files+0x34/0x3d0 [ 259.592741][ T8593] ? __pfx___might_resched+0x10/0x10 [ 259.592759][ T8593] __sys_sendmmsg+0x20c/0x440 [ 259.592774][ T8593] ? __pfx___sys_sendmmsg+0x10/0x10 [ 259.592788][ T8593] ? ksys_write+0x190/0x250 [ 259.592815][ T8593] ? fput+0x7c/0x100 [ 259.592831][ T8593] ? ksys_write+0x1ac/0x250 [ 259.592846][ T8593] ? __pfx_ksys_write+0x10/0x10 [ 259.592863][ T8593] __x64_sys_sendmmsg+0x9c/0x100 [ 259.592876][ T8593] ? lockdep_hardirqs_on+0x7d/0x110 [ 259.592892][ T8593] do_syscall_64+0x123/0x790 [ 259.592910][ T8593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.592924][ T8593] RIP: 0033:0x7f8520d9e159 [ 259.592936][ T8593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.592949][ T8593] RSP: 002b:00007f8521c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 259.592963][ T8593] RAX: ffffffffffffffda RBX: 00007f8521026180 RCX: 00007f8520d9e159 [ 259.592973][ T8593] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000007 [ 259.592982][ T8593] RBP: 00007f8521c91090 R08: 0000000000000000 R09: 0000000000000000 [ 259.592990][ T8593] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 259.592999][ T8593] R13: 00007f8521026218 R14: 00007f8521026180 R15: 00007ffcdb2c4fa8 [ 259.593023][ T8593] [ 259.897517][ T5831] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.900296][ T5831] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.900330][ T5831] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 259.901176][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 259.901193][ T5831] usb 10-1: SerialNumber: syz [ 259.912627][ T5831] cdc_ether 10-1:1.0: missing cdc ether descriptor [ 260.528817][ T8587] loop4: detected capacity change from 0 to 1 [ 260.538851][ T25] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 260.540367][ T25] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input44 [ 260.568387][ T8587] Dev loop4: unable to read RDB block 1 [ 260.568433][ T8587] loop4: AHDI p1 p2 p3 [ 260.568453][ T8587] loop4: partition table partially beyond EOD, truncated [ 260.568601][ T8587] loop4: p1 size 825635125 extends beyond EOD, truncated [ 260.646122][ T8587] loop4: p3 start 335544320 is beyond EOD, truncated [ 260.647517][ T8601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.647849][ T8601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.675420][ T5832] usb 10-1: USB disconnect, device number 4 [ 260.769539][ T5610] udevd[5610]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 260.822911][ T8603] netlink: 32 bytes leftover after parsing attributes in process `syz.6.668'. [ 260.870562][ T25] usb 2-1: USB disconnect, device number 44 [ 260.870686][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 261.343747][ T8610] dyndbg: expected <4096 bytes into control [ 261.469831][ T8603] overlayfs: statfs failed on './file0' [ 261.502586][ T31] audit: type=1400 audit(1788318291.723:709): avc: denied { search } for pid=8612 comm="syz.1.671" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 261.524555][ T31] audit: type=1400 audit(1788318291.743:710): avc: denied { read write } for pid=8612 comm="syz.1.671" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 261.550358][ T31] audit: type=1400 audit(1788318291.763:711): avc: denied { open } for pid=8612 comm="syz.1.671" path="/155/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 261.612354][ T8613] gadgetfs: bound to dummy_udc driver [ 261.636807][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 261.864061][ T31] audit: type=1400 audit(1788318292.083:712): avc: denied { read } for pid=8618 comm="syz.6.673" dev="nsfs" ino=4026533274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 261.864114][ T31] audit: type=1400 audit(1788318292.083:713): avc: denied { open } for pid=8618 comm="syz.6.673" path="net:[4026533274]" dev="nsfs" ino=4026533274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 262.902467][ T31] audit: type=1400 audit(1788318293.123:714): avc: denied { listen } for pid=8636 comm="syz.6.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 262.921836][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.679'. [ 262.921865][ T8637] netlink: 'syz.6.679': attribute type 26 has an invalid length. [ 263.201755][ T25] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 263.353936][ T25] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 263.355535][ T25] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.355571][ T25] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.355591][ T25] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.355609][ T25] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 263.356925][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 263.356944][ T25] usb 10-1: Product: syz [ 263.356956][ T25] usb 10-1: Manufacturer: syz [ 263.386787][ T25] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 263.397309][ T25] garmin_gps ttyUSB1: failed to submit interrupt urb: -90 [ 263.397346][ T25] garmin_gps ttyUSB1: probe with driver garmin_gps failed with error -90 [ 263.463393][ T5831] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 263.599139][ T5827] usb 10-1: USB disconnect, device number 5 [ 263.600920][ T5827] garmin_gps 10-1:1.0: device disconnected [ 263.613525][ T5831] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 263.621758][ T5831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.621792][ T5831] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.621814][ T5831] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 263.627550][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 263.627569][ T5831] usb 2-1: Product: syz [ 263.627581][ T5831] usb 2-1: Manufacturer: syz [ 263.638421][ T5831] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 263.648461][ T5831] garmin_gps ttyUSB1: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 263.651635][ T5831] garmin_gps ttyUSB1: probe with driver garmin_gps failed with error -8 [ 264.161802][ T32] INFO: task kworker/0:8:5796 blocked for m ** replaying previous printk message ** [ 264.161802][ T32] INFO: task kworker/0:8:5796 blocked for more than 143 seconds. [ 264.161840][ T32] Tainted: G L syzkaller #0 [ 264.161863][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.161873][ T32] task:kworker/0:8 state:D stack:22184 pid:5796 tgid:5796 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 264.161934][ T32] Workqueue: usb_hub_wq hub_event [ 264.161965][ T32] Call Trace: [ 264.161979][ T32] [ 264.161993][ T32] __schedule+0x1259/0x6920 [ 264.162022][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 264.162056][ T32] ? __pfx___schedule+0x10/0x10 [ 264.162076][ T32] ? find_held_lock+0x2b/0x80 [ 264.162105][ T32] ? schedule+0x225/0x2c0 [ 264.162129][ T32] schedule+0xdd/0x2c0 [ 264.162149][ T32] schedule_preempt_disabled+0x13/0x30 [ 264.162170][ T32] __mutex_lock+0xccb/0x1bd0 [ 264.162194][ T32] ? hub_event+0x1bb/0x4420 [ 264.162224][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 264.162247][ T32] ? lock_acquire+0x1d1/0x380 [ 264.162269][ T32] ? do_raw_spin_lock+0x128/0x260 [ 264.162295][ T32] ? find_held_lock+0x2b/0x80 [ 264.162327][ T32] ? kcov_remote_start+0x3bf/0x6d0 [ 264.162351][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 264.162379][ T32] ? hub_event+0x1bb/0x4420 [ 264.162401][ T32] hub_event+0x1bb/0x4420 [ 264.162430][ T32] ? look_up_lock_class+0x64/0x120 [ 264.162454][ T32] ? register_lock_class+0x3f/0x7b0 [ 264.162478][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 264.162503][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 264.162529][ T32] ? __pfx_hub_event+0x10/0x10 [ 264.162551][ T32] ? mark_lock+0xea0/0x1020 [ 264.162575][ T32] ? lock_acquire+0x1d1/0x380 [ 264.162595][ T32] ? process_one_work+0xa2c/0x1b10 [ 264.162627][ T32] ? process_one_work+0x906/0x1b10 [ 264.162656][ T32] ? process_one_work+0x906/0x1b10 [ 264.162690][ T32] process_one_work+0xac7/0x1b10 [ 264.162731][ T32] ? __pfx_process_one_work+0x10/0x10 [ 264.162763][ T32] ? lock_acquire+0x1d1/0x380 [ 264.162791][ T32] ? __pfx_hub_event+0x10/0x10 [ 264.162817][ T32] worker_thread+0x5ef/0xe50 [ 264.162854][ T32] ? __pfx_worker_thread+0x10/0x10 [ 264.162885][ T32] ? kthread+0x13a/0x450 [ 264.162912][ T32] ? __pfx_worker_thread+0x10/0x10 [ 264.162939][ T32] kthread+0x373/0x450 [ 264.162965][ T32] ? __pfx_kthread+0x10/0x10 [ 264.162999][ T32] ret_from_fork+0x730/0xd60 [ 264.163024][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 264.163049][ T32] ? __switch_to+0x800/0x10f0 [ 264.163096][ T32] ? __pfx_kthread+0x10/0x10 [ 264.163125][ T32] ret_from_fork_asm+0x1a/0x30 [ 264.163161][ T32] [ 264.163177][ T32] INFO: task syz.0.110:6301 blocked for more than 143 seconds. [ 264.163192][ T32] Tainted: G L syzkaller #0 [ 264.163202][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.163208][ T32] task:syz.0.110 state:D stack:22920 pid:6301 tgid:6300 ppid:5611 task_flags:0x480140 flags:0x00080002 [ 264.163252][ T32] Call Trace: [ 264.163258][ T32] [ 264.163267][ T32] __schedule+0x1259/0x6920 [ 264.163282][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 264.163309][ T32] ? lock_acquire+0x1d1/0x380 [ 264.163326][ T32] ? __pfx___schedule+0x10/0x10 [ 264.163340][ T32] ? find_held_lock+0x2b/0x80 [ 264.163362][ T32] ? schedule+0x225/0x2c0 [ 264.163380][ T32] schedule+0xdd/0x2c0 [ 264.163395][ T32] schedule_timeout+0x1b2/0x280 [ 264.163417][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 264.163447][ T32] ? mark_held_locks+0x40/0x70 [ 264.163466][ T32] __wait_for_common+0x2e7/0x4c0 [ 264.163484][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 264.163509][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 264.163525][ T32] ? __pfx_device_del+0x10/0x10 [ 264.163551][ T32] ? kobject_put+0xb9/0x640 [ 264.163577][ T32] i2c_del_adapter+0x1e3/0x2e0 [ 264.163599][ T32] dvb_usb_i2c_exit+0x9f/0xf0 [ 264.163620][ T32] dvb_usb_device_exit+0x313/0x520 [ 264.163639][ T32] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 264.163663][ T32] ? __pfx_rpm_resume+0x10/0x10 [ 264.163677][ T32] ? do_raw_spin_lock+0x128/0x260 [ 264.163700][ T32] pctv452e_usb_disconnect+0x1b8/0x220 [ 264.163723][ T32] ? __pfx_pctv452e_usb_disconnect+0x10/0x10 [ 264.163744][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 264.163759][ T32] ? usb_disable_interface+0x211/0x4c0 [ 264.163777][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.163796][ T32] usb_unbind_interface+0x1dd/0x9e0 [ 264.163821][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 264.163842][ T32] device_remove+0x12a/0x180 [ 264.163866][ T32] device_release_driver_internal+0x44e/0x620 [ 264.163888][ T32] bus_remove_device+0x2bc/0x560 [ 264.163912][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 264.163933][ T32] ? __pfx_device_remove_attrs+0x10/0x10 [ 264.163988][ T32] device_del+0x376/0x9b0 [ 264.164014][ T32] ? __pfx_device_del+0x10/0x10 [ 264.164037][ T32] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 264.164061][ T32] ? lock_acquire+0x1d1/0x380 [ 264.164081][ T32] usb_disable_device+0x367/0x810 [ 264.164098][ T32] ? mark_held_locks+0x40/0x70 [ 264.164120][ T32] usb_disconnect+0x2e2/0x9a0 [ 264.164142][ T32] hub_quiesce+0x16d/0x320 [ 264.164163][ T32] hub_disconnect+0xd5/0x510 [ 264.164183][ T32] usb_unbind_interface+0x1dd/0x9e0 [ 264.164208][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 264.164229][ T32] device_remove+0x12a/0x180 [ 264.164253][ T32] device_release_driver_internal+0x44e/0x620 [ 264.164274][ T32] bus_remove_device+0x2bc/0x560 [ 264.164298][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 264.164318][ T32] ? __pfx_device_remove_attrs+0x10/0x10 [ 264.164346][ T32] device_del+0x376/0x9b0 [ 264.164372][ T32] ? __pfx_device_del+0x10/0x10 [ 264.164393][ T32] ? kobject_put+0xb9/0x640 [ 264.164419][ T32] usb_disable_device+0x367/0x810 [ 264.164444][ T32] usb_set_configuration+0x12a0/0x1c60 [ 264.164463][ T32] ? sscanf+0xc7/0x100 [ 264.164498][ T32] bConfigurationValue_store+0x103/0x180 [ 264.164518][ T32] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 264.164537][ T32] ? find_held_lock+0x2b/0x80 [ 264.164557][ T32] ? sysfs_file_kobj+0xe4/0x290 [ 264.164574][ T32] ? sysfs_file_kobj+0xe4/0x290 [ 264.164593][ T32] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 264.164612][ T32] dev_attr_store+0x58/0x80 [ 264.164629][ T32] ? __pfx_dev_attr_store+0x10/0x10 [ 264.164646][ T32] sysfs_kf_write+0xf2/0x150 [ 264.164666][ T32] kernfs_fop_write_iter+0x3e0/0x5f0 [ 264.164690][ T32] ? __pfx_sysfs_kf_write+0x10/0x10 [ 264.164711][ T32] vfs_write+0x6af/0x1050 [ 264.164736][ T32] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 264.164762][ T32] ? __pfx_vfs_write+0x10/0x10 [ 264.164784][ T32] ? find_held_lock+0x2b/0x80 [ 264.164820][ T32] ksys_write+0x12a/0x250 [ 264.164834][ T32] ? __pfx_ksys_write+0x10/0x10 [ 264.164856][ T32] do_syscall_64+0x123/0x790 [ 264.164876][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.164893][ T32] RIP: 0033:0x7fc51c19e159 [ 264.164906][ T32] RSP: 002b:00007fc51d098028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.164922][ T32] RAX: ffffffffffffffda RBX: 00007fc51c425fa0 RCX: 00007fc51c19e159 [ 264.164933][ T32] RDX: 0000000000000001 RSI: 0000200000000960 RDI: 0000000000000007 [ 264.164943][ T32] RBP: 00007fc51c235024 R08: 0000000000000000 R09: 0000000000000000 [ 264.164952][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.164962][ T32] R13: 00007fc51c426038 R14: 00007fc51c425fa0 R15: 00007ffdb6b01128 [ 264.164989][ T32] [ 264.165022][ T32] [ 264.165022][ T32] Showing all locks held in the system: [ 264.165029][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 264.165041][ T32] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 264.165083][ T32] #1: ffffffff9bc60c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 264.165126][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 264.165137][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 264.165201][ T32] locks held by getty/5360: 2, on CPU#1: [ 264.165212][ T32] #0: ffff8880385f30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 264.165253][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 264.165294][ T32] locks held by udevd/5622: 4, on CPU#0: [ 264.165305][ T32] #0: ffff888073c1b098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 264.165341][ T32] #1: ffff88807925a080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 264.165389][ T32] #2: ffff8880599fa2d8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 264.165436][ T32] #3: ffff8880232de1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 264.165484][ T32] locks held by kworker/0:8/5796: 3, on CPU#0: [ 264.165495][ T32] #0: ffff8880246f1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 264.165539][ T32] #1: ffffc90004907d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 264.165582][ T32] #2: ffff88802aaad1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 264.165621][ T32] locks held by syz.0.110/6301: 7, on CPU#1: [ 264.165632][ T32] #0: ffff8880743df0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 264.165671][ T32] #1: ffff888053b5e460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 264.165709][ T32] #2: ffff88807d2f4080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 264.165753][ T32] #3: ffff88802aaad1d8 (&dev->mutex){....}-{4:4}, at: bConfigurationValue_store+0xe1/0x180 [ 264.165792][ T32] #4: ffff88802ac731a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 264.165830][ T32] #5: ffff8880232de1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 264.165867][ T32] #6: ffff88802d0361a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 264.165910][ T32] locks held by syz.8.666/8606: 2, last CPU#1: [ 264.165921][ T32] #0: ffff88807df7c460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 264.165961][ T32] #1: ffff8880309c5038 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x151/0xad0 [ 264.166011][ T32] locks held by syz.2.669/8609: 2, last CPU#0: [ 264.166021][ T32] #0: ffff888076c34460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 264.166062][ T32] #1: ffff888056303ed8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 264.166103][ T32] locks held by syz.2.669/8611: 2, last CPU#0: [ 264.166114][ T32] #0: ffff888076c34460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 264.166154][ T32] #1: ffff888034f79aa8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 264.166194][ T32] locks held by syz.9.680/8639: 2, last CPU#1: [ 264.166205][ T32] #0: ffff888033cfdcf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 264.166243][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 264.166285][ T32] locks held by syz.8.683/8646: 2, last CPU#1: [ 264.166296][ T32] #0: ffff88807a4df678 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 264.166333][ T32] #1: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 264.166369][ T32] locks held by syz.6.684/8649: 1, last CPU#1: [ 264.166380][ T32] #0: ffff888079ebc378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 264.166418][ T32] [ 264.166422][ T32] ============================================= [ 264.166422][ T32] [ 264.166428][ T32] NMI backtrace for cpu 1 [ 264.166439][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 264.166460][ T32] Tainted: [L]=SOFTLOCKUP [ 264.166465][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 264.166474][ T32] Call Trace: [ 264.166479][ T32] [ 264.166484][ T32] dump_stack_lvl+0x100/0x190 [ 264.166506][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 264.166530][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 264.166548][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 264.166573][ T32] sys_info+0x141/0x190 [ 264.166593][ T32] watchdog+0xcb1/0x1030 [ 264.166614][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 264.166630][ T32] ? __pfx_watchdog+0x10/0x10 [ 264.166647][ T32] ? __kthread_parkme+0x18f/0x230 [ 264.166668][ T32] ? kthread+0x13a/0x450 [ 264.166687][ T32] ? __pfx_watchdog+0x10/0x10 [ 264.166702][ T32] kthread+0x373/0x450 [ 264.166722][ T32] ? __pfx_kthread+0x10/0x10 [ 264.166743][ T32] ret_from_fork+0x730/0xd60 [ 264.166760][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 264.166778][ T32] ? __switch_to+0x800/0x10f0 [ 264.166799][ T32] ? __pfx_kthread+0x10/0x10 [ 264.166821][ T32] ret_from_fork_asm+0x1a/0x30 [ 264.166847][ T32] [ 264.166853][ T32] Sending NMI from CPU 1 to CPUs 0: [ 264.166873][ C0] NMI backtrace for cpu 0 [ 264.166884][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.166903][ C0] Tainted: [L]=SOFTLOCKUP [ 264.166908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 264.166915][ C0] RIP: 0010:delay_tsc+0x32/0xc0 [ 264.166935][ C0] Code: fd bf 01 00 00 00 41 54 55 53 e8 d9 09 09 f6 e8 04 7e 01 00 41 89 c4 0f 01 f9 66 90 48 c1 e2 20 48 09 c2 48 89 d5 eb 16 f3 90 01 00 00 00 e8 b4 09 09 f6 e8 df 7d 01 00 44 39 e0 75 36 0f 01 [ 264.166948][ C0] RSP: 0018:ffffc90000157950 EFLAGS: 00000082 [ 264.166959][ C0] RAX: 8000000000000002 RBX: 000000b2345cac72 RCX: 0000000000000000 [ 264.166968][ C0] RDX: 0000000000000004 RSI: ffffffff8c620d00 RDI: 0000000000000001 [ 264.166977][ C0] RBP: 000000b2345ca982 R08: 0000000000000005 R09: 0000000000000000 [ 264.166985][ C0] R10: 00000000000007b0 R11: 205d323354202020 R12: 0000000000000000 [ 264.166994][ C0] R13: 0000000000000af1 R14: fffffbfff378c1e9 R15: dffffc0000000000 [ 264.167003][ C0] FS: 0000000000000000(0000) GS:ffff888123b64000(0000) knlGS:0000000000000000 [ 264.167017][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.167026][ C0] CR2: 00007f8521cd2ff8 CR3: 000000007683d000 CR4: 00000000003526f0 [ 264.167036][ C0] Call Trace: [ 264.167040][ C0] [ 264.167046][ C0] wait_for_lsr+0xf3/0x210 [ 264.167062][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 264.167078][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 264.167092][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 264.167113][ C0] serial8250_console_write+0xf46/0x1330 [ 264.167131][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 264.167147][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 264.167167][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 264.167191][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 264.167212][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 264.167232][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 264.167250][ C0] ? do_raw_spin_lock+0x90/0x260 [ 264.167269][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 264.167286][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 264.167307][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 264.167325][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 264.167347][ C0] nbcon_kthread_func+0x613/0x7d0 [ 264.167369][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 264.167391][ C0] ? __kthread_parkme+0x18f/0x230 [ 264.167407][ C0] ? kthread+0x13a/0x450 [ 264.167423][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 264.167441][ C0] kthread+0x373/0x450 [ 264.167458][ C0] ? __pfx_kthread+0x10/0x10 [ 264.167480][ C0] ret_from_fork+0x730/0xd60 [ 264.167494][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 264.167509][ C0] ? __switch_to+0x800/0x10f0 [ 264.167527][ C0] ? __pfx_kthread+0x10/0x10 [ 264.167544][ C0] ret_from_fork_asm+0x1a/0x30 [ 264.167563][ C0] [ 264.167870][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 265.683394][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 265.694062][ T32] Tainted: [L]=SOFTLOCKUP [ 265.698381][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 265.708433][ T32] Call Trace: [ 265.711729][ T32] [ 265.714653][ T32] dump_stack_lvl+0x100/0x190 [ 265.719341][ T32] vpanic+0x553/0x970 [ 265.723319][ T32] ? __pfx_vpanic+0x10/0x10 [ 265.727827][ T32] panic+0xd1/0xe0 [ 265.731545][ T32] ? __pfx_panic+0x10/0x10 [ 265.735971][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 265.741004][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 265.747164][ T32] ? watchdog.cold+0x1ec/0x234 [ 265.751926][ T32] watchdog.cold+0x1fd/0x234 [ 265.756508][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 265.762297][ T32] ? __pfx_watchdog+0x10/0x10 [ 265.766962][ T32] ? __kthread_parkme+0x18f/0x230 [ 265.771987][ T32] ? kthread+0x13a/0x450 [ 265.776215][ T32] ? __pfx_watchdog+0x10/0x10 [ 265.780876][ T32] kthread+0x373/0x450 [ 265.784933][ T32] ? __pfx_kthread+0x10/0x10 [ 265.789516][ T32] ret_from_fork+0x730/0xd60 [ 265.794091][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 265.799187][ T32] ? __switch_to+0x800/0x10f0 [ 265.803852][ T32] ? __pfx_kthread+0x10/0x10 [ 265.808437][ T32] ret_from_fork_asm+0x1a/0x30 [ 265.813195][ T32] [ 265.816388][ T32] Kernel Offset: disabled [ 265.820699][ T32] Rebooting in 86400 seconds..