last executing test programs: 10m31.585815347s ago: executing program 32 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0xf5ff, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10m15.555140986s ago: executing program 33 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.state\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) r3 = gettid() ptrace$poke(0x5, r3, &(0x7f0000000080), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='(o', 0x2) 10m3.897677079s ago: executing program 4 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.state\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) r4 = gettid() ptrace$poke(0x5, r4, &(0x7f0000000080), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='(o', 0x2) 10m1.96733325s ago: executing program 4 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)) 10m1.608696048s ago: executing program 4 (id=183): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000880)={0x48, 0x16, 0x0, 0x0, 0x0, 0x0, 0x1}) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='se', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r4, &(0x7f0000000800)='file *evio.c +', 0xe) r5 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a3100000000090001007379"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 10m0.386803429s ago: executing program 6 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.state\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$tipc(0x1e, 0x5, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ptrace$poke(0x5, r3, &(0x7f0000000080), 0x4) write(r0, &(0x7f0000000400)='(o', 0x2) 10m0.026168395s ago: executing program 4 (id=191): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}}, 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) read(r1, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r2, 0x401) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10001, 0x100000001, 0x10000, 0x1, 0xffffffff, 0x0, 0x5fff}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x7, 0xc}) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14794d00", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000820}, 0x0) write$binfmt_register(r4, &(0x7f00000003c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xc, 0x3a, '', 0x3a, '\x9cc~\xa0\xef\xc8_\xddL10r)\x04\x9c\x0e\xd1Y\x84\x9f2\xd8\xf21{\x96\xea\x88\xe3C\xcd\xa4\xf7t\xd3o\xd0\x03\x95]\xef\x0e\xbb\xb7\xdf:\x8c\x95\x8by\xd9\x03{O\xdb9# \xb0\x02T\x7f/\x96$\x9e\xf4\x06op./GU>\x9c\x8b\xc8\x96\xdaO\x13\xf5\xdce1\xd9 \xf6\x86bL\xc2\xbf^T\xf2\x06,j(\x19\nSsh\xa9\x06\x8b\xa9\xf4\x04S\x80\x02\x8a`\x97u\x06\xf5r\x84n8*\xe9d\xb5nC\xf4\xd2\x8fr\xa84\xe0?=tHB\xe5\x05Q\xa7s\xff?z\xc7sd\xbe\xbc-\x9d47\x9e\xe0\xe8Q\x16\x9e\xe5\x92\x12\xa2\xdd\xe0\xdc\xe2\xc1\x0ep', 0x3a, './file1'}, 0xd8) 9m59.534563307s ago: executing program 4 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)) 9m59.368600067s ago: executing program 6 (id=195): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x4004c}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='measure', 0x7) close(r0) 9m59.0732327s ago: executing program 4 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040), 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 9m59.064603074s ago: executing program 6 (id=198): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 9m58.608850944s ago: executing program 34 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040), 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 9m57.397149318s ago: executing program 6 (id=204): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}}, 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) read(r1, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r2, 0x401) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10001, 0x100000001, 0x10000, 0x1, 0xffffffff, 0x0, 0x5fff}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x7, 0xc}) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14794d00", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000820}, 0x0) write$binfmt_register(r4, &(0x7f00000003c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xc, 0x3a, '', 0x3a, '\x9cc~\xa0\xef\xc8_\xddL10r)\x04\x9c\x0e\xd1Y\x84\x9f2\xd8\xf21{\x96\xea\x88\xe3C\xcd\xa4\xf7t\xd3o\xd0\x03\x95]\xef\x0e\xbb\xb7\xdf:\x8c\x95\x8by\xd9\x03{O\xdb9# \xb0\x02T\x7f/\x96$\x9e\xf4\x06op./GU>\x9c\x8b\xc8\x96\xdaO\x13\xf5\xdce1\xd9 \xf6\x86bL\xc2\xbf^T\xf2\x06,j(\x19\nSsh\xa9\x06\x8b\xa9\xf4\x04S\x80\x02\x8a`\x97u\x06\xf5r\x84n8*\xe9d\xb5nC\xf4\xd2\x8fr\xa84\xe0?=tHB\xe5\x05Q\xa7s\xff?z\xc7sd\xbe\xbc-\x9d47\x9e\xe0\xe8Q\x16\x9e\xe5\x92\x12\xa2\xdd\xe0\xdc\xe2\xc1\x0ep', 0x3a, './file1'}, 0xd8) 9m56.701801035s ago: executing program 6 (id=206): symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) 9m56.103398785s ago: executing program 6 (id=208): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x7, 0x1}, 0xe) listen(r0, 0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4007) r1 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c90012000e000500090000008000000200020a004000"], 0x17) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4000041) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x6, 0x4e, 0x3, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0x7fff, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4000010, r5, 0x78426000) sendto$inet6(r5, 0x0, 0xffffffffffffffc5, 0x14, &(0x7f0000000380)={0xa, 0x4e20, 0x8, @loopback, 0x49}, 0x1c) sendmsg$NFT_BATCH(r4, 0x0, 0x200400c0) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x8000) listen(0xffffffffffffffff, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x480c5}, 0x24048041) 9m55.64860802s ago: executing program 35 (id=208): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x7, 0x1}, 0xe) listen(r0, 0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4007) r1 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c90012000e000500090000008000000200020a004000"], 0x17) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4000041) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x6, 0x4e, 0x3, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0x7fff, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4000010, r5, 0x78426000) sendto$inet6(r5, 0x0, 0xffffffffffffffc5, 0x14, &(0x7f0000000380)={0xa, 0x4e20, 0x8, @loopback, 0x49}, 0x1c) sendmsg$NFT_BATCH(r4, 0x0, 0x200400c0) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x8000) listen(0xffffffffffffffff, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x480c5}, 0x24048041) 8m52.853628441s ago: executing program 2 (id=401): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 8m52.691371099s ago: executing program 2 (id=403): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40043d0d, 0x0) 8m52.554559287s ago: executing program 2 (id=404): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/del3\x00', 0x42, 0x1ff) timer_create(0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x4c, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44040}, 0x4040058) close(r4) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/del3\x00', 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0x8000) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) syz_pidfd_open(r9, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) 8m52.079839269s ago: executing program 2 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) setrlimit(0x2, &(0x7f0000000080)={0xdb, 0x4}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/trace\x00', 0x2, 0x32) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x4212, r4, 0x58, &(0x7f0000000080)) r5 = syz_open_dev$mtd(&(0x7f0000000040), 0x1e, 0x100) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) ioctl$MEMISLOCKED(r5, 0x80084d17, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c89770000fdfd", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 8m51.126895293s ago: executing program 2 (id=410): openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/usb1/power/autosuspend_delay_ms\x00', 0x1, 0x0) 8m50.36446755s ago: executing program 2 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xdc001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0xfffffffc, 0x0, 0x0, 0x0, [{0xf, 0x0, 0x7}, {}, {0x0, 0x0, 0xfe}, {0x0, 0x0, 0xff, '\x00', 0x40}, {0x6}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x2, 0xd1, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x10, 0x3, 0x0, '\x00', 0x8}, {0x4, 0x0, 0xee}, {0x0, 0x6}, {}, {0x4}, {0x20}, {0x4}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x3}, {}, {}, {}, {0x0, 0x0, 0xfb}, {0x16, 0x2}, {}, {0x0, 0x9a, 0x40}]}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8af, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 0xfffd}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x5) r5 = getpid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a0000000000000000018510000006", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) 8m49.782140822s ago: executing program 36 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xdc001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0xfffffffc, 0x0, 0x0, 0x0, [{0xf, 0x0, 0x7}, {}, {0x0, 0x0, 0xfe}, {0x0, 0x0, 0xff, '\x00', 0x40}, {0x6}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x2, 0xd1, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x10, 0x3, 0x0, '\x00', 0x8}, {0x4, 0x0, 0xee}, {0x0, 0x6}, {}, {0x4}, {0x20}, {0x4}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x3}, {}, {}, {}, {0x0, 0x0, 0xfb}, {0x16, 0x2}, {}, {0x0, 0x9a, 0x40}]}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8af, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 0xfffd}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x5) r5 = getpid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a0000000000000000018510000006", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) 8m30.113480711s ago: executing program 8 (id=457): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x60, 0xc, 0xe3, {0xe3, 0x31, "d9f956a1f05692b3ee9defceb0fcd3e3cc847baa32218c8cbf02047e8156a10e578f22bb008b123100204c2163c61bb99712b5ecdaffdaa3c32c1ba950208ac96cf65a0647f3bb0a689193a32f2ad3a92c3901f64f026d85a078a661fd8ed7244dcb866b17f42341d5c98353fe5c379b2678c3531e1be19c06b733128c2e4f8b19847f7bbc5bd8522b63b2615f5174cd24c68d030e74fced4ba719e0614952c3cad922cce0d8eefb817df44468662e5f624866e70450aa3a2ab455a2a15ef88c7ebbfa8fbdeb69845638a67cd847905628a900bb285b81d52afa7edf21dd8d5200"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x1c, &(0x7f00000004c0)={0x0, 0x30, 0x32, "d4a2d9af73fed60db19e8df4dd4c4ad58fe4586434918aa8137e60f80ddb8b6167a9da305a50e41e57e82383f538ad45bd18"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xeb}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x7, 0x4, 0x7, 0x5, 0x3, 0x7, 0x47, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200f14", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES8=r1, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000ac0)="22eab05e59691a27dfe58d01e1d229c2df6c57854b7ea81d3504930929c69edb05bf99d6086a8fdb1f8f3eb6ec3bfed56a0a765815e0cb4aa89957466c2956f466192983e0b2c79f7214672ec52eb9c81cec8b06c7ec4125fee11459ea5068525283a9a6195f93a9f529e84dee46141645912914d497c10df2c772dcd513b9d4081d2aa37afedcde8edc7d5d53494f980303835b9003488fabffdf70548e464d2fc55ac03a0b0c923434ec9b629d", 0xae) syz_usb_control_io$uac2(r2, &(0x7f0000000740)={0x14, &(0x7f00000005c0)={0x40, 0x21, 0xb5, {0xb5, 0x12, "1474c12391bada92a7a736e52dc436f039acd1b743167d37963747bed90b3b9135893ed74480a134bd8d7a55c64789ddf525d8361889043b0352e736286e7b734d5578faa3c2f00802d9ab2863f711876412938b59d7afc1e7fb7e27ccfdd9a8e7812e27a0e9b1e23dd38a4928b36f564474bdfbabd119bdd882f272b0097ce6c7714b2df4585e8bbf7461e0b395a4ee0475f0dd8a73ad41c7f9a5eb55a100958289c760b0f1918178fef70be396459ad3435f"}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="00038a0000008a032eeb87e4b642997f3208a61268ce022e621f7fb61e43c7d8b5d44947a541702724bd3244004a79f8f97eb3ec13b81db41507f83646d5aeca34c7b62cab9167a93b9d71e08dbd2c8285fc72e57408cc9d59abf5fc593d9d227809ed6e17c482106d459606314d6176370ac40c5a4b3d5b61dd9f8c186092440bb365beaec677290da50000000000000000000000e001da0e13df580ec7850b0820d281714b5a6d1a68c8e139d28ad39dea3f7b16dd35d8"]}, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x0, 0xe, 0x46, "798f063cb94cd301eab5ab126a6b00000000e431914b9581a8da1c47877424139d0d9d2610a6f26aed814fcaecfb59de3926843d38cb72e1f5cba8b0b336deebd7144213e619"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000880)={0x20, 0x81, 0x1, 'X'}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "90ca80"}, &(0x7f0000000900)={0x20, 0x83, 0x3, "504bfd"}, &(0x7f0000000940)={0x20, 0x84, 0x1, '\x00'}, &(0x7f0000000980)={0x20, 0x85, 0x3, "35bf9b"}}) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 8m26.065921472s ago: executing program 8 (id=468): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x810) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000100)=0x1e) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') socket(0x8, 0x5, 0x5) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket(0x2, 0x805, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c000180080001400000fa03080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 8m24.85691645s ago: executing program 8 (id=474): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x55, 0x0, 0x2, {0x0, 0x1}, {0x76, 0x2}, @rumble={0x800d, 0x8}}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x244581, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sync() ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000440)={0x8e3, 0xfffffffffffffffc, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000100)="5694e2f1cd6698f50da0b15fbff55a319a427f5428593716"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x20004004) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socketpair(0xb, 0x2, 0xc, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000001c0)="a603e64c070b5d452ba8bde6f0c513e53698412cbf2622cef22374de4b1f396a2e554d57c4be247f37dd57fe536b7602910a34e741319bda07379a29e595baa94e12ffe8716092e8fb9b156a2058fc46cbba10b971efe9e52c1281656c25912da6361cda57251e74a3bdd96237282e6df0b8b789f7dc57b279d7b0a01d85407b3ed42368c11d1ad8c3bc5dd8fd0d005f68ba3825dfe2a42b1b8c", 0x9a) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2720, 0x0, &(0x7f0000000400)) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) 8m24.268611691s ago: executing program 8 (id=478): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}}, 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) read(r1, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r2, 0x401) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10001, 0x100000001, 0x10000, 0x1, 0xffffffff, 0x0, 0x5fff}, 0x1c) 8m20.973023336s ago: executing program 8 (id=482): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002"], 0x0) 8m20.418275127s ago: executing program 8 (id=485): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/del3\x00', 0x42, 0x1ff) timer_create(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) 8m18.279979985s ago: executing program 37 (id=485): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/del3\x00', 0x42, 0x1ff) timer_create(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) 2m0.063614023s ago: executing program 9 (id=1478): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) eventfd2(0x5, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x0, r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r2, 0x180000000) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) 1m59.849034727s ago: executing program 9 (id=1479): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x1004, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, 0x0, 0x0) prlimit64(r2, 0x6, &(0x7f0000000080)={0x3, 0x209}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000000e0a01020000000000000000010000000000000000000100000a7fc2e4bb7a3f8d67bf5609d58197f9eba851a450478a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, &(0x7f0000000140)=0xc) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1m58.624091143s ago: executing program 9 (id=1481): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x6354, 0x0, 0x0, &(0x7f0000000040), 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r3, 0x2007ffb) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 1m50.724457247s ago: executing program 9 (id=1496): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64], 0x50) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x191) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xa, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x400000000002) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x312fafd61f8adf7c}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m47.891777758s ago: executing program 9 (id=1499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.state\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ptrace$poke(0x5, r4, &(0x7f0000000080), 0x4) write(r0, &(0x7f0000000400)='(o', 0x2) 1m47.292922075s ago: executing program 9 (id=1501): mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfb9, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x64010101, @broadcast, {[@end]}}, "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"}}, 0xfc7) 1m45.200435299s ago: executing program 38 (id=1501): mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfb9, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x64010101, @broadcast, {[@end]}}, "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"}}, 0xfc7) 14.296724493s ago: executing program 1 (id=1783): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0xc93, '\x00', &(0x7f00000001c0)=0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000080000000102020000000000", @ANYRES32, @ANYBLOB="0000007ced0628db0000000000000000000000a9c23f880000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x50) writev(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) mremap(&(0x7f000057d000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f00002c0000/0x2000)=nil) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) 13.217138526s ago: executing program 7 (id=1785): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x5, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@remote, 0x1234, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x1234, 0x2}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r5, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r5, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r4}, 0x20) sendto(r4, &(0x7f0000000700)="01", 0x11, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kcmp(0x0, 0x0, 0x300, 0xffffffffffffffff, 0xffffffffffffffff) r7 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r7, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sendto$packet(r0, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) 13.044426044s ago: executing program 1 (id=1786): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = gettid() timer_create(0x7, 0x0, 0x0) prlimit64(r4, 0x5, &(0x7f0000000080)={0xff, 0x209}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4040850}, 0x40) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x32, &(0x7f0000000080), 0x2, 0x8}) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, 0x0, &(0x7f0000000340)) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, &(0x7f0000000140)=0xc) connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r9, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 12.978637453s ago: executing program 5 (id=1788): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 11.405975279s ago: executing program 0 (id=1790): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c}, 0x48) unshare(0x68040200) mmap(&(0x7f000063a000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(0x0, 0x8, 0x2) socket$inet(0x2, 0x800, 0x10000) r1 = socket(0x1d, 0x3, 0xff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'nat\x00', 0x0, [0x50, 0x1, 0xfffffffa, 0x64, 0x8]}, &(0x7f0000000000)=0x54) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) writev(r3, &(0x7f0000000a80)=[{&(0x7f0000000740)="ef79d5d0f9acece62abe6779bdaf16f98de67f1337595757ec5c77d68027933ba9e5c9f4fc1ae0d1eafd926822143de820f4d8871f22d1b0e561090431ead47e9a2e35cb2a2dc6a2f11268b73a926a8e7c1a602c28e342d1a8e6eed1c954ea8f05df93646a2a0df9829d5a4345f9d552ff1d6a7e", 0x74}, {&(0x7f0000000880)="76719122eefc49", 0x7}], 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000200025a729bd70"], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 10.49367492s ago: executing program 7 (id=1791): syz_emit_ethernet(0x19, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000140)) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x2c) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a6bc50009f40522000000000009059232"], 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x0, 0x4}, 0x90) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) creat(&(0x7f00000005c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x4b) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x25}, {0x9, [{0xc9, 0x6}, {0xc8, 0x8001}, {0x0, 0xfff8}, {0xc8, 0xe}, {0xc8, 0x1}, {0xc9, 0x400}, {0xc9}, {0xc8, 0x7fff}, {0xc8}]}}}, 0x28) 10.423924039s ago: executing program 5 (id=1793): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000001084c052f04000000000001090224000100000000090400000247e773568cd34849ff012218000905810300000000ea"], 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) socket$netlink(0x10, 0x3, 0xf) r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x111, 0xa}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40043d0d, 0x0) 10.05986097s ago: executing program 1 (id=1794): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbdf00affdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000000006088030000080080003000700000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff48000080200004000a004e220000000120010000000000000000000000000001fa14000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c01008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c1400040002004e22ac1414aa00000000000000000800030004000000200004000a004e2300000005fe88000000000000000000000000010100100000060005000121000098000980940000800600010002000000080002007f0000010500030000000000060001000a00000014000200200100000000000000000000000000000500030002000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e000000205000300030000000600010002000000080002007f0000010500030003000000200004000a004e220000000dff020000000000000000000000000001020000000800030002"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r6 = socket$nl_generic(0x10, 0x3, 0x10) writev(r6, &(0x7f0000000200), 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 9.861862346s ago: executing program 0 (id=1795): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) eventfd2(0x5, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8082, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x0, r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r2, 0x180000000) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) 9.291526588s ago: executing program 3 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x100, 0x6, 0x0, 0x0, 0x100, 0xdb3}}) (fail_nth: 1) 6.924756067s ago: executing program 0 (id=1797): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/del3\x00', 0x42, 0x1ff) timer_create(0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x4c, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44040}, 0x4040058) close(r4) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/del3\x00', 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0x8000) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) syz_pidfd_open(r9, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) 6.522112686s ago: executing program 7 (id=1798): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0xc93, '\x00', &(0x7f00000001c0)=0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000080000000102020000000000", @ANYRES32, @ANYBLOB="0000007ced0628db0000000000000000000000a9c23f880000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x50) writev(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) mremap(&(0x7f000057d000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f00002c0000/0x2000)=nil) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) 6.52128969s ago: executing program 5 (id=1799): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x4000, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x1}, {0x0, 0x4, 0x7}, {0x40000, 0x8, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x104}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x40) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x0, 0xf, 0xe, {0xe, 0x3, "5fd8db5a5e468084d848d423"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0}, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2f, "caff8cae4335bb27217d87bbc9bf7277451dd8e17b8f4a12f020b369e5e2d6a252b2be018a7512cab1702b5915f34f"}, 0x0}) syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa090400"], 0x0) syz_emit_ethernet(0xaa, &(0x7f00000000c0)={@local, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x0, 0x7}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "82f63de64f6ce2ee11028289aefdb3449391a823213e63365167b296949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "0422000004000000546b962803000030"}}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 5.833454004s ago: executing program 3 (id=1800): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) socketpair(0xa, 0x4, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0xfefc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x33}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) mount$afs(&(0x7f0000000200)=@cell={0x25, '', 'syz0', '.readonly'}, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x8, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='updatE def;=ault user:/dev/kv'], 0x1e, 0xfffffffffffffff9) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x1, 0x800, 0x800, 0x4}, 0x0, 0x0, 0x0, 0x0) 5.611998509s ago: executing program 0 (id=1801): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/del3\x00', 0x42, 0x1ff) timer_create(0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x4c, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44040}, 0x4040058) close(r4) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/del3\x00', 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0x8000) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) syz_pidfd_open(r9, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) 5.488863407s ago: executing program 7 (id=1802): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x5, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@remote, 0x1234, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x1234, 0x2}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r5, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r5, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r4}, 0x20) sendto(r4, &(0x7f0000000700)="01", 0x11, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kcmp(0x0, 0x0, 0x300, 0xffffffffffffffff, 0xffffffffffffffff) r7 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r7, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sendto$packet(r0, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) 5.030759338s ago: executing program 1 (id=1803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="dc100000", @ANYRES16=r1, @ANYBLOB="00022abd7000fbdbdf25100000001400018008000b007369700008000b00736970003c000180080006006f7666000c0007000600000008000000080005000000000014000300fe8000000000000000000000000000aa060002003200000054000280080008000700000005000d000000000005000d000100000014000100e000000200000000000000000000000006000b000a00000005000d000000000014000100fc0200000000000000000000000000001400038008000500ac1414aa0800030004000000080006000000000008000400ff030000"], 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x5) msgget$private(0x0, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000380)={0x6, "67b0f6d5c790f65718cf44108daf822415fdf3f991c20af1e85ad1355abe3f05", 0x10, 0x9, 0x0, 0x4, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205000905810300"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r6, r5, 0x4, r5}, 0x10) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000003e40)={0x1, [{0x95cb37c2e0ea85b4, 0xe0, 0x4fc, &(0x7f0000000400)="711f78e7cd5799cd91c652eac0634b7e23732522a82f3b29eb595414"}, {0x3, 0x130, 0x1000, &(0x7f0000000440)="ebd2f54b8c8f2c4f82b021a9aac9f4ddef2558fc0ee97890b858bbe23140ad645864ef4b31dc"}, {0x2, 0x4a0, 0x8, &(0x7f0000000500)="43d3e22ca39f411f17b3fbde2ca19f32d4b544174ab00ab22c505fe8c6068793fea75bf613f7239790468798a4c6abdf8b9dc8a451647f1800a691ff00898565c09968c90a255b8705f1ae2b792da0d50e413fd49b215777eca0ba2b96b25cbb2fe5e950aec8c48b1c0ec82d3fa5c0cef591467f23f47baccd5d5cd6b41c216655e580dc906b63a78f5e4a5ac9b6a1da60341dbc"}, {0x1, 0x8000, 0x20, &(0x7f00000011c0)="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"}, {0x3, 0xe8, 0xffff, &(0x7f00000021c0)="2b1cd76abad20000000000000047602000c7c5da1c0104ce0db2fa0900"}, {0x1a2f56f5a0388ad6, 0x488, 0xe, &(0x7f0000002200)="43fd5f3104261f918ea88484e65fa5a8afff605fbe8518308ea27e4f2041261488104b916b9332699985944844ae5fd548d1b327d1849609f663493962a6a225162bd35ca9a6a6eea8ab72be3d313b35486bfdeab649ee3dbb133c72dc8f3a8c8a7a95d09e9ebd41ed962e18d71606949b26979015a4db31d0868007e7415663dcddb57bdb53cb329c62bdd1f38d200f65"}, {0x0, 0x7c0, 0xfffffffe, &(0x7f00000022c0)="d7521b7b2284131f15eb01568b308d1b53dc16c81061d511e5bfb68af047736e24a59daac8706f0c91b827b09fc287f999831f5d2cf5fbad3a8aa244579d64264745425c1d6bcb74a14def6536d1e850d6e8b82562dce2c0b92483bc1bb72e26e8879191c5f53d79383439d0662608f4f23b1261702100ede23acc921a9d1affaabebc45319f87a359640396e2452724de2035f498ba10c99489f73869515b1f764080f2a6e94af401d9ab6923ef56cebf82bc74b5efbc9f04cf355bad5ef178290c75b627e46e3cc3788d5e469ec6c2e8aa2f48d166ce8f8a1c82165eb84cf16e557acd6c2d6a4e1e1ead239a76a99db498d64c8b918dbb"}, {0x0, 0x8000, 0x1, &(0x7f0000002880)="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"}, {0x0, 0x7f0, 0x80000000, &(0x7f0000003880)="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"}, {0x0, 0x418, 0x400, &(0x7f0000003980)="f95781b490288b2270b4275de2fb47b50a310098637df6da1b37d33c796967625d5aa4ffc8650fdb93039e7ab9f11e94a63d070d6b791d2143c572acf7ab170493bc32f544f89352042fc3204a7a31267c5e85be5eca9f6dde19b8741313a9c327b95307000000dc7a261a3bcfe417607849adc1462f32d9795ad784733feb8a0d7110"}, {0x3, 0x3c0, 0x8, &(0x7f0000003a40)="e1ff3d64d00193b60ef328059605a17d7c92b7307a58040d74f548d59f6f9641f01cb2db2bb60ccf852cfa484b94d1a1a42d6a22fb7e1ec7798d7b9a6ef46e94b9ab96e24ef853c1328115f5b8e941c9a957ff9684d2e5b46f89cfbff8037e33f069fd34014ac88ca28298c85b4e0c0a2f3bed4b8a45a0c7"}, {0x3, 0x98, 0x3, &(0x7f0000003ac0)="88836e0ea0788a3f59fd8a841f2c9225614437"}, {0x0, 0x2e0, 0x7fff, &(0x7f00000006c0)="bae7a63cbbf65b6209fa399edbac9d404f9a3ca6d7e95108d1c4ab4d1507b7838f38eef15d720945ff70b140bb87dc63bd4ca12de55ba139726c6b6b47c8c7e510b98e91d81c835a5e15c4687ea080d22405b433516d879bde76b3c7"}, {0x3, 0x730, 0x1, &(0x7f0000003b80)="efeeb7f96d7e872f03bad846c34bbe7b3f3b201f2b3f3fee2a0bee58a3c80e08600162734ae8a95d10148e52726e5a28039c8569f5105f4c854a415f29df1965ef49ace8882c700db7f4a02f747e0c49b3992f506883abdebb9135ee8b3b598b0636424bd62b6b5d87c9b0f26573969dfe01c6ccff7cbab33babdc4bef161942d5078b009457e352f8890b6633ad7b4cbcce5f6f46f044d151927fc8d866384eea44b674e77af6af3841ab4625bb61925fae52ce94690c6480de4359004ad59468b212a8ec3a6c7cce37ff1a527cd19c655aa1f86e4afc9925bea07760d6c18adfa9cca8009b"}, {0x1, 0x500, 0x3, &(0x7f0000003c80)="bcf19a565f2c724d532fdb6cbbeb00054d8f54b774c31245dc9d9bbef66f68830ffccc9911e3a8cf97a363669b8588c6205dd79f68a374986d270e237b8247046808d8b75bb3d3e3b841a234c2535caf476261f59302019ddbf9fac08241638d76e95e140a198309b5763b3f289f5ed2923c95e80b5ef94c0ed1fc3b6a063d814ba4a97115b697a753515e4153c11a5ce774563e0da1159afd852fad253748b6"}, {0x1, 0x680, 0x7, &(0x7f0000003d40)="a9da8e25850f97054d4d368d3ba5ce51d26bb5ff0f4a22d63501f5efd1edb6bb8201ccbf5b372adbe241e91a2531f7d31abd68c69ba0280a0996f4753b1dc7051f4de84437760ace7e36d138fdccbcaec5387198fdcf848e07b305f6d828985558a3015958a9f46843d8265748cd157465700254eb6160f7fad4bad8e72390cff19fc617f93d1e3f41dd4e4cd9fbc2e55af0b3d645b867bc66ebeabea7de4fbeeb9d4aa28bdc25bf2964c60d34f50bae2071d33d21bc07383aaead4c52e51a000000001ae57dff5ee59c38b3ec2405ab"}]}) syz_usb_control_io(r4, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e21, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0x42e}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f", 0x24}], 0x2, &(0x7f0000001940)}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r3], 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x400, @private=0xa010102}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r8], 0xfe06) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000000)={&(0x7f00000004c0)=[{0x3, 0xe001, 0x0, 0x0}], 0x1}) r9 = syz_open_dev$dvb_demux(&(0x7f0000000300), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000340)={0x2, 0x1, 0x1, 0x13}) 4.810018466s ago: executing program 0 (id=1804): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c0000904000002070101000905010200"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usbip_server_init(0x4) flock(r1, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r3 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2e5, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x1000, "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"}, &(0x7f0000001540)=0x1008) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r6], 0x14) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x81) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r7, 0x80045400, &(0x7f00000001c0)) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x2000004) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000020c0), 0x101800, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000140)={0x5, 0x5, 0x5}) socket(0x15, 0x800, 0x800) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x86040, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000002d00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002d40)=@deltclass={0x5c8, 0x29, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0xc}, {0xffff, 0xfff3}, {0xb, 0x8}}, [@c_cbq={{0x8}, {0x4}}, @c_atm={{0x8}, {0x80, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xa}}, @TCA_ATM_FD={0x8, 0x1, r9}, @TCA_ATM_HDR={0xa, 0x3, "f50184468f3e"}, @TCA_ATM_HDR={0x31, 0x3, "d027b37204f8f112344dc5d148690fd4b2b3b098badf5bb5d649761af874e5ba4d18901503b1992de493d4c663"}, @TCA_ATM_HDR={0x22, 0x3, "66f51d8e6431fa5a3d73cfc5e39cfd4c3dfea26dc1f3ded4c5101bd8e7cb"}, @TCA_ATM_FD={0x8, 0x1, r8}]}}, @c_cbq={{0x8}, {0x430, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x2a4, 0xa6, 0x7, 0xfffffffe, 0xb4, 0x622, 0x3, 0x3, 0x9484, 0x2, 0x1889, 0xa, 0x2, 0x5, 0x5, 0x5, 0x4, 0x7f, 0x3, 0x5, 0x4, 0x80000000, 0x80000001, 0x1000, 0x6, 0x3, 0x335309a0, 0x2, 0x42, 0xed9, 0x6, 0x0, 0x69ccea5, 0x8, 0x2, 0xa, 0x7, 0x1, 0x5, 0x4e, 0x8000, 0xfffffe01, 0x8, 0x80, 0xbc, 0x9, 0x4, 0x4, 0x0, 0x7, 0x4, 0x8, 0x550, 0x1, 0xffff8001, 0x7, 0x317969f3, 0x6, 0x7, 0x1, 0xfffffffc, 0x5006a90b, 0x5, 0x10001, 0x2, 0x8, 0x0, 0x1, 0xffffffff, 0x7, 0x10001, 0x4, 0x9, 0xff, 0x10000, 0x7, 0x9, 0x1, 0x800, 0x2, 0x1000, 0xa, 0x1000, 0x7, 0x103, 0xb885, 0x80000000, 0x6, 0x400, 0xe, 0x4, 0x1ff, 0xdd8b, 0x2c0, 0x4, 0xc, 0x4, 0xfff, 0x5, 0x7, 0x2, 0x7, 0x8, 0x8, 0x0, 0x9, 0x2, 0x9, 0x7, 0x2, 0x7f, 0x0, 0x100, 0x7f, 0x80000001, 0x6125, 0x8, 0x5, 0x401, 0x0, 0xd4a8, 0xfc7a, 0x7fffffff, 0x1347, 0x8, 0xb3d, 0xfc, 0x7, 0x800, 0x0, 0x269e, 0x39ad, 0x8000, 0x80000001, 0x78, 0xf5, 0xc31, 0x3, 0x101, 0xc2, 0x5, 0x2, 0xffffff7f, 0x2, 0x3, 0xf, 0x401, 0x663, 0xffffffff, 0x7f, 0x5, 0xfffffffe, 0xf3, 0x80000000, 0x8, 0x2c1, 0x8, 0x4, 0x4, 0xa, 0x6, 0x6, 0x1f, 0x9, 0x610c, 0x3, 0x9, 0xfffffffb, 0x5, 0x2, 0xfff, 0x3, 0x200, 0xc34, 0x6, 0x3, 0x98100000, 0x0, 0x2, 0x7a, 0x7, 0x5, 0x40, 0x4, 0x728, 0x10001, 0x9, 0x2, 0x81, 0xc33e, 0x0, 0x1, 0x2, 0x0, 0xd, 0x2, 0x6, 0x5, 0x81, 0x10001, 0x1, 0x0, 0x2, 0x7, 0x7, 0x3, 0x7, 0x2000000, 0x7, 0x1, 0x8001, 0xb6f, 0x3, 0x82bc, 0x5, 0x40, 0x3, 0x7ff, 0xe42, 0x0, 0x893, 0x8, 0x6, 0x2, 0xf, 0x0, 0x800, 0x8000000, 0x10, 0x240, 0x8, 0x4, 0x1, 0x5, 0x1, 0xb3, 0x8e32, 0xfff, 0x0, 0x8, 0x7, 0x9, 0x65d, 0x1, 0x7ff, 0x3, 0x10001, 0x3, 0x0, 0x7, 0x9681, 0x0, 0x4, 0x80000001, 0x7, 0x1]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3a, 0x2, 0x1c, 0x2, 0x2, 0x5, 0xfffff09a, 0x8}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x6, 0x88, 0xc, 0x5, 0x2}}]}}, @c_atm={{0x8}, {0xa0, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x5}}, @TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_HDR={0x1b, 0x3, "142277590fbb104e3c71344984295ee1af448c92c70d80"}, @TCA_ATM_HDR={0x14, 0x3, "87cafc1e1a33a4963878507154d3ab79"}, @TCA_ATM_FD={0x8, 0x1, r9}, @TCA_ATM_HDR={0x2a, 0x3, "b5f4d3eec251fb1016adccb369c794cd1e983255993fea4116638f341c70e79170462871150b"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0xb}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x8}}, @TCA_ATM_HDR={0x17, 0x3, "64b0d0e1d5baa8335a1297b0e5dee1b9696a0f"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}]}, 0x5c8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000003) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) pwritev2(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 4.625233143s ago: executing program 3 (id=1805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20) 4.437899256s ago: executing program 7 (id=1806): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x4000, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x1}, {0x0, 0x4, 0x7}, {0x40000, 0x8, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x104}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x40) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x0, 0xf, 0xe, {0xe, 0x3, "5fd8db5a5e468084d848d423"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0}, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2f, "caff8cae4335bb27217d87bbc9bf7277451dd8e17b8f4a12f020b369e5e2d6a252b2be018a7512cab1702b5915f34f"}, 0x0}) syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa090400"], 0x0) syz_emit_ethernet(0xaa, &(0x7f00000000c0)={@local, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x0, 0x7}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "82f63de64f6ce2ee11028289aefdb3449391a823213e63365167b296949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "0422000004000000546b962803000030"}}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 4.305933167s ago: executing program 3 (id=1807): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x0, 0x32, 0x410, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x4a}}, {0x0, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0x0, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0x0, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ife\x00'}}, {0x0, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}]}]}, 0x28}}, 0x4000804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 2.949143836s ago: executing program 5 (id=1808): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0xc93, '\x00', &(0x7f00000001c0)=0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0xd) mremap(&(0x7f000057d000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f00002c0000/0x2000)=nil) 2.902314529s ago: executing program 0 (id=1809): getuid() r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf6917000) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x4084) 2.553584875s ago: executing program 5 (id=1810): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r0 = openat$sequencer2(0xffffff9c, 0x0, 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0) r1 = gettid() migrate_pages(r1, 0x3, 0x0, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x2) connect$unix(r6, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r6, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000", @ANYRES32=r7], 0x18, 0x40001}}], 0x1, 0x0) 2.552479203s ago: executing program 3 (id=1811): openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x1d}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2f}}}, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000013c0)={'ip6gretap0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f00000003c0)={0x2c, 0x10, r6}, 0x10) recvfrom(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000080)={0x8001, 0x9, 0x1, 0x0, 0x1}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) 1.541860166s ago: executing program 5 (id=1812): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0xc93, '\x00', &(0x7f00000001c0)=0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000080000000102020000000000", @ANYRES32, @ANYBLOB="0000007ced0628db0000000000000000000000a9c23f880000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x50) writev(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) mremap(&(0x7f000057d000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f00002c0000/0x2000)=nil) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) 1.444855208s ago: executing program 1 (id=1813): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.state\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) r4 = gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)) ptrace$poke(0x5, r4, 0x0, 0x4) write(r0, &(0x7f0000000400)='(o', 0x2) 833.263551ms ago: executing program 7 (id=1814): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = gettid() timer_create(0x7, 0x0, 0x0) prlimit64(r4, 0x5, &(0x7f0000000080)={0xff, 0x209}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4040850}, 0x40) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x32, &(0x7f0000000080), 0x2, 0x8}) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, 0x0, &(0x7f0000000340)) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, &(0x7f0000000140)=0xc) connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r9, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19.311015ms ago: executing program 3 (id=1815): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b30904e4b1010202019405"], 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) writev(r3, 0x0, 0x0) write(r0, &(0x7f0000000000)="0600000000000000010000000000000000000000000000006c733100"/104, 0x68) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0x8, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {0xfff2, 0xc}, {0xa, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xed, '\x00', 0xfd, 0x8, 0x401, 0x7}}}}]}, 0x58}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40, 0x90ffffff}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) 0s ago: executing program 1 (id=1816): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdda, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 708] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 649.124896][ T30] audit: type=1800 audit(1787096832.318:4764): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=214942 res=0 errno=0 [ 649.149165][ T5708] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 649.166391][ T5708] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 649.178652][ T30] audit: type=1800 audit(1787096832.348:4765): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=214920 res=0 errno=0 [ 649.201820][ T5708] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 649.219000][ T5708] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 649.231643][ T30] audit: type=1800 audit(1787096832.348:4766): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=214921 res=0 errno=0 [ 649.274854][ T5708] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 649.306454][ T5708] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.328495][ T30] audit: type=1800 audit(1787096832.348:4767): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=214922 res=0 errno=0 [ 649.377983][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.627493][ T30] audit: type=1800 audit(1787096832.498:4768): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 649.629261][ T5794] usb 2-1: string descriptor 0 read error: -71 [ 649.649106][ T30] audit: type=1800 audit(1787096832.518:4769): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 649.649149][ T30] audit: type=1800 audit(1787096832.908:4770): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=214976 res=0 errno=0 [ 649.704775][T12987] loop7: detected capacity change from 0 to 7 [ 649.732263][ C1] blk_print_req_error: 25 callbacks suppressed [ 649.732282][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.748132][ C1] buffer_io_error: 25 callbacks suppressed [ 649.748148][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.780932][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.790614][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.803647][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.813310][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.822655][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.832358][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.844459][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.854111][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.866041][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.875728][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.883968][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.892025][ T5794] usb 2-1: USB disconnect, device number 53 [ 649.893632][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.919192][T12987] ldm_validate_partition_table(): Disk read failed. [ 649.919517][ T5708] usb 6-1: GET_CAPABILITIES returned 0 [ 649.947694][ T5708] usbtmc 6-1:16.0: can't read capabilities [ 649.973447][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.983124][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 650.000136][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 650.009840][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 650.018169][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 650.027888][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 650.039637][T12987] Dev loop7: unable to read RDB block 0 [ 650.140251][T12987] loop7: unable to read partition table [ 650.148432][T12987] loop7: partition table beyond EOD, truncated [ 650.154799][T12987] loop_reread_partitions: partition scan of loop7 (zye!jLc_T 8=?c}X %u+`IfVy{m)VH54FLQ} 5) failed (rc=-5) [ 650.254672][T12987] ldm_validate_partition_table(): Disk read failed. [ 650.268967][T12987] Dev loop7: unable to read RDB block 0 [ 650.280802][T12987] loop7: unable to read partition table [ 650.287991][T12987] loop7: partition table beyond EOD, truncated [ 650.493267][T12997] FAULT_INJECTION: forcing a failure. [ 650.493267][T12997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.603148][T12997] CPU: 0 UID: 0 PID: 12997 Comm: syz.3.1563 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.603184][T12997] Tainted: [L]=SOFTLOCKUP [ 650.603192][T12997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 650.603204][T12997] Call Trace: [ 650.603210][T12997] [ 650.603219][T12997] dump_stack_lvl+0x100/0x190 [ 650.603250][T12997] should_fail_ex.cold+0x5/0xa [ 650.603277][T12997] _copy_from_user+0x2e/0xd0 [ 650.603309][T12997] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 650.603338][T12997] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 650.603373][T12997] do_sock_getsockopt+0x530/0x6e0 [ 650.603396][T12997] ? __lock_acquire+0x49f/0x1a40 [ 650.603426][T12997] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 650.603449][T12997] ? rcu_read_lock_any_held+0x6a/0xa0 [ 650.603478][T12997] ? find_held_lock+0x2b/0x80 [ 650.603505][T12997] ? __fget_files+0x21f/0x3d0 [ 650.603536][T12997] __sys_getsockopt+0x148/0x260 [ 650.603568][T12997] ? xfd_validate_state+0x129/0x190 [ 650.603601][T12997] ? __x64_sys_getsockopt+0xbd/0x160 [ 650.603630][T12997] __x64_sys_getsockopt+0xbd/0x160 [ 650.603659][T12997] ? do_syscall_64+0x90/0x870 [ 650.603688][T12997] ? lockdep_hardirqs_on+0x78/0x100 [ 650.603713][T12997] do_syscall_64+0x115/0x870 [ 650.603739][T12997] ? clear_bhb_loop+0x70/0xc0 [ 650.603764][T12997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.603786][T12997] RIP: 0033:0x7f2b4399e0d9 [ 650.603802][T12997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.603835][T12997] RSP: 002b:00007f2b44835028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 650.603854][T12997] RAX: ffffffffffffffda RBX: 00007f2b43c25fa0 RCX: 00007f2b4399e0d9 [ 650.603869][T12997] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 650.603881][T12997] RBP: 00007f2b44835090 R08: 0000200000000200 R09: 0000000000000000 [ 650.603894][T12997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.603907][T12997] R13: 00007f2b43c26038 R14: 00007f2b43c25fa0 R15: 00007ffe2f95d288 [ 650.603934][T12997] [ 650.949333][T12986] Process accounting resumed [ 651.232346][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.248567][T13008] jffs2: notice: (13008) jffs2_build_xattr_subsystem: complete building xattr subsystem, 20 of xdatum (0 unchecked, 20 orphan) and 20 of xref (0 dead, 20 orphan) found. [ 651.276910][ T5708] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 651.312234][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.347073][ T769] Bluetooth: hci5: Frame reassembly failed (-84) [ 651.484945][ T5708] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 651.529210][ T5708] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 651.613032][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.752420][ T5708] usb 4-1: config 0 has no interface number 0 [ 651.829135][ T5708] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 651.960021][ T5708] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 652.070033][ T5708] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.335956][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.444816][ T5708] usb 4-1: Product: syz [ 652.496275][ T5708] usb 4-1: Manufacturer: syz [ 652.551774][ T5708] usb 4-1: SerialNumber: syz [ 652.676996][ T5708] usb 4-1: config 0 descriptor?? [ 653.168740][T13036] jffs2: notice: (13036) jffs2_build_xattr_subsystem: complete building xattr subsystem, 20 of xdatum (0 unchecked, 20 orphan) and 20 of xref (0 dead, 20 orphan) found. [ 653.382809][T12641] Bluetooth: hci5: command 0x1003 tx timeout [ 653.391354][ T4913] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 653.924970][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 653.924986][ T30] audit: type=1400 audit(1787096837.208:4801): avc: denied { write } for pid=13045 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.029399][ T5795] usb 6-1: USB disconnect, device number 52 [ 654.155244][ T30] audit: type=1800 audit(1787096837.438:4802): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 654.329108][ T30] audit: type=1800 audit(1787096837.598:4803): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 654.410375][ T30] audit: type=1800 audit(1787096837.658:4804): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 654.660022][ T5606] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 654.970959][ T5606] usb 8-1: Using ep0 maxpacket: 8 [ 655.042943][ T30] audit: type=1800 audit(1787096838.228:4805): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 655.073940][ T5606] usb 8-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 655.216106][ T5606] usb 8-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 655.370621][ T5606] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 655.463690][ T4913] block nbd1: Receive control failed (result -32) [ 655.509684][ T5606] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.522486][ T5890] block nbd1: shutting down sockets [ 655.535973][ T5795] usb 4-1: USB disconnect, device number 65 [ 655.556371][ T5606] usb 8-1: config 0 descriptor?? [ 655.577273][ T30] audit: type=1800 audit(1787096838.858:4806): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=215309 res=0 errno=0 [ 655.691011][ T30] audit: type=1800 audit(1787096838.858:4807): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=215338 res=0 errno=0 [ 655.774898][ T30] audit: type=1800 audit(1787096838.858:4808): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=215316 res=0 errno=0 [ 655.902888][ T30] audit: type=1800 audit(1787096838.858:4809): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=215317 res=0 errno=0 [ 655.949565][ T30] audit: type=1800 audit(1787096838.858:4810): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=215318 res=0 errno=0 [ 656.170454][ T5606] usb 8-1: string descriptor 0 read error: -71 [ 656.235988][ T5606] usb 8-1: USB disconnect, device number 41 [ 656.357886][T13083] jffs2: notice: (13083) jffs2_build_xattr_subsystem: complete building xattr subsystem, 21 of xdatum (0 unchecked, 21 orphan) and 21 of xref (0 dead, 21 orphan) found. [ 657.942676][T13111] netlink: 'syz.5.1582': attribute type 4 has an invalid length. [ 657.951008][T13111] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1582'. [ 657.992853][ T5606] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 658.823900][T13102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 658.920503][T13117] syzkaller1: entered allmulticast mode [ 658.967845][ T5606] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 658.987822][ T5606] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.006388][ T5606] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.032520][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 659.032536][ T30] audit: type=1800 audit(1787096842.308:4820): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=215403 res=0 errno=0 [ 659.063035][ T5606] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.118771][ T5606] usb 8-1: config 0 descriptor?? [ 659.137179][ T30] audit: type=1800 audit(1787096842.408:4821): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=215499 res=0 errno=0 [ 659.267665][ T30] audit: type=1800 audit(1787096842.408:4822): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=215528 res=0 errno=0 [ 659.350617][ T30] audit: type=1800 audit(1787096842.408:4823): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=215506 res=0 errno=0 [ 659.420726][ T30] audit: type=1800 audit(1787096842.408:4824): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=215507 res=0 errno=0 [ 659.507436][ T30] audit: type=1800 audit(1787096842.408:4825): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=215508 res=0 errno=0 [ 659.655913][ T5606] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 660.373413][T13134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.398914][ T5606] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 660.408719][ T30] audit: type=1800 audit(1787096842.478:4826): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=215548 res=0 errno=0 [ 660.423327][T13134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.452971][ T5606] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 660.495455][ T5606] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 660.524017][ T5606] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 660.537978][ T30] audit: type=1800 audit(1787096842.548:4827): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 660.577299][ T5606] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 660.598439][ T5606] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 660.702859][ T5795] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 660.823441][ T30] audit: type=1400 audit(1787096842.588:4828): avc: denied { write } for pid=13101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.849775][ T30] audit: type=1800 audit(1787096842.828:4829): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=215566 res=0 errno=0 [ 660.873612][ T5606] arvo 0003:1E7D:30D4.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.7-1/input0 [ 661.053299][ T5795] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 661.521830][ T5795] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 661.853913][ T10] usb 8-1: USB disconnect, device number 42 [ 661.951410][ T5795] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 661.962640][ T5795] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.975727][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.576673][T13143] block nbd5: shutting down sockets [ 662.584387][ T5795] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 662.706193][T13079] syz.1.1577 (13079) used greatest stack depth: 18568 bytes left [ 662.759320][T13141] fido_id[13141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 662.847027][ T5795] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 662.948116][T13154] syzkaller0: entered promiscuous mode [ 662.992320][T13154] syzkaller0: entered allmulticast mode [ 663.383017][ T5601] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 663.497693][ T5795] usb 4-1: USB disconnect, device number 66 [ 663.572827][ T5601] usb 6-1: Using ep0 maxpacket: 8 [ 663.608845][ T5601] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 663.646982][ T5601] usb 6-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 663.684556][ T5601] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 663.739479][ T5601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.793167][T13180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.793744][ T5601] usb 6-1: config 0 descriptor?? [ 663.911688][T13180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.160212][T13180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.273580][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 664.273597][ T30] audit: type=1400 audit(1787096847.548:4862): avc: denied { write } for pid=13187 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.341107][ T5601] usb 6-1: string descriptor 0 read error: -71 [ 664.370681][T13180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.386537][ T30] audit: type=1800 audit(1787096847.588:4863): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 664.410890][ T5601] usb 6-1: USB disconnect, device number 53 [ 664.436758][ T30] audit: type=1800 audit(1787096847.668:4864): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216035 res=0 errno=0 [ 664.491352][ T4913] Bluetooth: hci2: hcon ffff888053c10000 sent 1 < count 6 [ 664.501704][ T4913] Bluetooth: hci2: hcon ffff8880406b0000 sent 1 < count 32769 [ 664.523114][ T4913] Bluetooth: hci2: hcon ffff8880406b0000 sent 0 < count 14 [ 664.530356][ T4913] Bluetooth: hci2: hcon ffff8880406b0000 sent 0 < count 1 [ 664.537530][ T4913] Bluetooth: hci2: hcon ffff888053c10000 sent 0 < count 1024 [ 664.545319][ T4913] Bluetooth: hci2: hcon ffff8880406b0000 sent 0 < count 32767 [ 664.714555][ T30] audit: type=1800 audit(1787096847.998:4865): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 664.967035][ T30] audit: type=1800 audit(1787096848.248:4866): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 665.042339][ T30] audit: type=1800 audit(1787096848.288:4867): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 665.075324][T13212] FAULT_INJECTION: forcing a failure. [ 665.075324][T13212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.103122][T13212] CPU: 1 UID: 0 PID: 13212 Comm: syz.5.1601 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.103158][T13212] Tainted: [L]=SOFTLOCKUP [ 665.103166][T13212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 665.103179][T13212] Call Trace: [ 665.103186][T13212] [ 665.103195][T13212] dump_stack_lvl+0x100/0x190 [ 665.103225][T13212] should_fail_ex.cold+0x5/0xa [ 665.103253][T13212] _copy_from_user+0x2e/0xd0 [ 665.103284][T13212] copy_msghdr_from_user+0x9f/0x4c0 [ 665.103313][T13212] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 665.103346][T13212] ? __pfx__kstrtoull+0x10/0x10 [ 665.103374][T13212] ___sys_sendmsg+0x106/0x1e0 [ 665.103403][T13212] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.103439][T13212] ? find_held_lock+0x2b/0x80 [ 665.103476][T13212] __sys_sendmmsg+0x20c/0x440 [ 665.103501][T13212] ? __pfx___sys_sendmmsg+0x10/0x10 [ 665.103520][T13212] ? ksys_write+0x190/0x250 [ 665.103562][T13212] ? fput+0x79/0x100 [ 665.103586][T13212] ? ksys_write+0x1ac/0x250 [ 665.103605][T13212] ? __pfx_ksys_write+0x10/0x10 [ 665.103632][T13212] __x64_sys_sendmmsg+0x9c/0x100 [ 665.103652][T13212] ? lockdep_hardirqs_on+0x78/0x100 [ 665.103681][T13212] do_syscall_64+0x115/0x870 [ 665.103709][T13212] ? clear_bhb_loop+0x70/0xc0 [ 665.103735][T13212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.103756][T13212] RIP: 0033:0x7fcd8619e0d9 [ 665.103775][T13212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.103796][T13212] RSP: 002b:00007fcd8705f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 665.103816][T13212] RAX: ffffffffffffffda RBX: 00007fcd86425fa0 RCX: 00007fcd8619e0d9 [ 665.103831][T13212] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 665.103844][T13212] RBP: 00007fcd8705f090 R08: 0000000000000000 R09: 0000000000000000 [ 665.103857][T13212] R10: 000000000000f0ff R11: 0000000000000246 R12: 0000000000000001 [ 665.103869][T13212] R13: 00007fcd86426038 R14: 00007fcd86425fa0 R15: 00007ffcec4675d8 [ 665.103898][T13212] [ 665.123176][ T30] audit: type=1400 audit(1787096848.358:4868): avc: denied { compute_member } for pid=13208 comm="syz.7.1602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 665.572120][ T30] audit: type=1800 audit(1787096848.488:4869): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 665.661798][ T30] audit: type=1800 audit(1787096848.568:4870): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 665.758890][ T30] audit: type=1800 audit(1787096848.688:4871): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 665.815908][T13235] FAULT_INJECTION: forcing a failure. [ 665.815908][T13235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.877044][T13235] CPU: 1 UID: 0 PID: 13235 Comm: syz.3.1608 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.877077][T13235] Tainted: [L]=SOFTLOCKUP [ 665.877085][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 665.877097][T13235] Call Trace: [ 665.877103][T13235] [ 665.877111][T13235] dump_stack_lvl+0x100/0x190 [ 665.877141][T13235] should_fail_ex.cold+0x5/0xa [ 665.877167][T13235] _copy_from_user+0x2e/0xd0 [ 665.877197][T13235] copy_msghdr_from_user+0x9f/0x4c0 [ 665.877233][T13235] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 665.877272][T13235] ___sys_sendmsg+0x106/0x1e0 [ 665.877302][T13235] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.877327][T13235] ? __lock_acquire+0x49f/0x1a40 [ 665.877353][T13235] ? get_pid_task+0x106/0x250 [ 665.877407][T13235] __sys_sendmsg+0x160/0x210 [ 665.877430][T13235] ? __pfx___sys_sendmsg+0x10/0x10 [ 665.877467][T13235] do_syscall_64+0x115/0x870 [ 665.877496][T13235] ? clear_bhb_loop+0x70/0xc0 [ 665.877523][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.877545][T13235] RIP: 0033:0x7f2b4399e0d9 [ 665.877563][T13235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.877583][T13235] RSP: 002b:00007f2b44835028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.877604][T13235] RAX: ffffffffffffffda RBX: 00007f2b43c25fa0 RCX: 00007f2b4399e0d9 [ 665.877618][T13235] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 665.877631][T13235] RBP: 00007f2b44835090 R08: 0000000000000000 R09: 0000000000000000 [ 665.877643][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.877656][T13235] R13: 00007f2b43c26038 R14: 00007f2b43c25fa0 R15: 00007ffe2f95d288 [ 665.877685][T13235] [ 666.398383][T13243] loop5: detected capacity change from 0 to 7 [ 666.423717][T13243] Dev loop5: unable to read RDB block 7 [ 666.433283][T13243] loop5: unable to read partition table [ 666.457018][T13243] loop5: partition table beyond EOD, truncated [ 666.484862][T13243] loop_reread_partitions: partition scan of loop5 (~h"+x|Q` ) failed (rc=-5) [ 666.619026][T13247] veth0_virt_wifi: entered promiscuous mode [ 666.649898][T13247] macsec1: entered promiscuous mode [ 666.655434][ T4964] Dev loop5: unable to read RDB block 7 [ 666.674588][ T4964] loop5: unable to read partition table [ 666.686572][ T4964] loop5: partition table beyond EOD, truncated [ 666.697451][T13247] veth0_virt_wifi: left promiscuous mode [ 666.733008][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 666.908610][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 666.927988][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 666.955599][ T10] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.982799][ T5601] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 666.985268][ T10] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.044342][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 667.065791][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.100839][ T10] usb 4-1: config 0 descriptor?? [ 667.183867][ T5601] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 667.220873][ T5601] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.260726][ T5601] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 667.298715][ T5601] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.349106][ T5601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.634284][ T5699] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 667.654285][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 667.664037][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 667.710453][ T10] usb 4-1: USB disconnect, device number 67 [ 667.826128][ T5699] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 667.839749][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.864847][ T5699] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 667.895138][ T5699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 667.921158][ T5699] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.946248][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.402554][ T5699] gud 2-1:1.0: No supported pixel formats found [ 668.423166][ T5699] gud 2-1:1.0: probe with driver gud failed with error -22 [ 668.677779][T13269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.712926][T13269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.726338][ T5699] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 668.895726][ T5699] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 668.934995][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.971844][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.017810][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.069637][ T5699] usb 4-1: config 0 descriptor?? [ 669.401355][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 669.401416][ T30] audit: type=1400 audit(1787096852.678:4910): avc: denied { write } for pid=13300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.507227][ T5699] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0 [ 669.528598][ T30] audit: type=1800 audit(1787096852.808:4911): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 669.555460][ T5699] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0 [ 669.567299][ T5699] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0 [ 669.575062][ T5699] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0 [ 669.582425][ T30] audit: type=1800 audit(1787096852.838:4912): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216624 res=0 errno=0 [ 669.607053][ T5699] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0 [ 669.622535][ T5699] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0 [ 669.629780][ T5699] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0 [ 669.636918][ T30] audit: type=1400 audit(1787096852.868:4913): avc: denied { write } for pid=13315 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.662568][ T5699] arvo 0003:1E7D:30D4.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 669.700014][ T30] audit: type=1800 audit(1787096852.958:4914): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216641 res=0 errno=0 [ 669.764037][ T30] audit: type=1800 audit(1787096852.968:4915): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 669.790918][ T30] audit: type=1800 audit(1787096853.028:4916): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216656 res=0 errno=0 [ 669.878806][ T30] audit: type=1800 audit(1787096853.158:4917): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=216626 res=0 errno=0 [ 669.951928][ T30] audit: type=1800 audit(1787096853.188:4918): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 670.034968][T13294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.046583][T13294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.063909][ T5699] usb 4-1: USB disconnect, device number 68 [ 670.367431][ T30] audit: type=1400 audit(1787096853.648:4919): avc: denied { write } for pid=13323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.576686][ T5601] usb 2-1: USB disconnect, device number 54 [ 671.319912][ T5726] usb 6-1: USB disconnect, device number 54 [ 672.596442][T13400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1634'. [ 672.743222][ T5708] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 672.863116][ T5699] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 672.903674][ T5708] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 672.923992][ T5708] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.956591][ T5708] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 672.984648][ T5708] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 673.009383][ T5708] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.010853][T13414] netlink: 'syz.0.1635': attribute type 4 has an invalid length. [ 673.029959][T13414] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1635'. [ 673.074404][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 673.104045][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.128963][ T5699] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 673.167807][ T4913] Bluetooth: hci2: connection err: -111 [ 673.255642][ T5699] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.480908][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.719243][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 673.891209][ T5699] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 673.989559][ T5699] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.043130][ T5699] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 674.069230][ T5699] usb 4-1: Manufacturer: syz [ 674.110283][ T5699] usb 4-1: config 0 descriptor?? [ 674.136338][ T5708] gud 6-1:1.0: No supported pixel formats found [ 674.160062][ T5708] gud 6-1:1.0: probe with driver gud failed with error -22 [ 674.394061][T13397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.441586][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 674.441603][ T30] audit: type=1400 audit(1787096857.718:4946): avc: denied { write } for pid=13408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.453056][T13397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.641840][ T30] audit: type=1800 audit(1787096857.898:4947): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 674.662853][ T5699] rc_core: IR keymap rc-hauppauge not found [ 674.662871][ T5699] Registered IR keymap rc-empty [ 674.663419][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.725859][T13449] netlink: 'syz.0.1637': attribute type 4 has an invalid length. [ 674.733652][T13449] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1637'. [ 674.789832][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 674.859905][ T4913] Bluetooth: hci2: connection err: -111 [ 674.903782][T13402] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 675.063017][ T5699] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 675.509973][ T30] audit: type=1800 audit(1787096858.638:4948): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 675.539509][ T5699] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 675.932863][ T30] audit: type=1800 audit(1787096858.878:4949): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217089 res=0 errno=0 [ 675.948477][T13455] xt_hashlimit: size too large, truncated to 1048576 [ 675.972881][ T30] audit: type=1800 audit(1787096859.208:4950): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217101 res=0 errno=0 [ 676.021094][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.046404][ T30] audit: type=1400 audit(1787096859.328:4951): avc: denied { write } for pid=13454 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.085059][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.096533][ T30] audit: type=1800 audit(1787096859.358:4952): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=217117 res=0 errno=0 [ 676.136353][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.169479][ T30] audit: type=1800 audit(1787096859.378:4953): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=217120 res=0 errno=0 [ 676.174512][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.234780][ T30] audit: type=1800 audit(1787096859.378:4954): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=217119 res=0 errno=0 [ 676.273148][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.298895][ T30] audit: type=1800 audit(1787096859.378:4955): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=217118 res=0 errno=0 [ 676.308816][T13464] jffs2: notice: (13464) jffs2_build_xattr_subsystem: complete building xattr subsystem, 21 of xdatum (0 unchecked, 21 orphan) and 21 of xref (0 dead, 21 orphan) found. [ 676.347037][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.403767][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.424679][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.454138][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.493953][ T5699] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 676.537485][ T5699] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 676.565089][ T5699] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 676.620706][ T5699] usb 4-1: USB disconnect, device number 69 [ 676.715017][T13473] loop5: detected capacity change from 0 to 7 [ 676.732167][T13473] Dev loop5: unable to read RDB block 7 [ 676.739045][T13473] loop5: unable to read partition table [ 676.746977][T13473] loop5: partition table beyond EOD, truncated [ 676.754342][T13473] loop_reread_partitions: partition scan of loop5 (~h"+x|Q` ) failed (rc=-5) [ 676.779801][ T5795] usb 6-1: USB disconnect, device number 55 [ 677.022857][ T5708] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 677.184361][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 677.196801][ T5708] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 677.219458][ T5708] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.237358][ T5708] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.247449][ T5708] usb 2-1: config 0 interface 0 has no altsetting 0 [ 677.275926][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.298906][ T5708] usb 2-1: config 0 descriptor?? [ 677.327703][T13483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.499716][T13486] loop0: detected capacity change from 0 to 6 [ 677.720130][ T4964] Dev loop5: unable to read RDB block 7 [ 677.732370][ T4964] loop5: unable to read partition table [ 677.754100][ T4964] loop5: partition table beyond EOD, truncated [ 677.779298][ T5708] usbhid 2-1:0.0: can't add hid device: -71 [ 677.805436][ T5708] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 677.842201][ T5708] usb 2-1: USB disconnect, device number 55 [ 678.064712][T13496] netlink: 'syz.3.1646': attribute type 9 has an invalid length. [ 678.656223][T13504] FAULT_INJECTION: forcing a failure. [ 678.656223][T13504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.742874][T13504] CPU: 0 UID: 0 PID: 13504 Comm: syz.0.1648 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.742910][T13504] Tainted: [L]=SOFTLOCKUP [ 678.742918][T13504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 678.742930][T13504] Call Trace: [ 678.742938][T13504] [ 678.742946][T13504] dump_stack_lvl+0x100/0x190 [ 678.742978][T13504] should_fail_ex.cold+0x5/0xa [ 678.743005][T13504] _copy_from_user+0x2e/0xd0 [ 678.743036][T13504] copy_msghdr_from_user+0x9f/0x4c0 [ 678.743064][T13504] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 678.743106][T13504] ___sys_sendmsg+0x106/0x1e0 [ 678.743135][T13504] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.743159][T13504] ? __lock_acquire+0x49f/0x1a40 [ 678.743186][T13504] ? get_pid_task+0x106/0x250 [ 678.743238][T13504] __sys_sendmsg+0x160/0x210 [ 678.743260][T13504] ? __pfx___sys_sendmsg+0x10/0x10 [ 678.743298][T13504] do_syscall_64+0x115/0x870 [ 678.743326][T13504] ? clear_bhb_loop+0x70/0xc0 [ 678.743353][T13504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.743374][T13504] RIP: 0033:0x7f025e19e0d9 [ 678.743391][T13504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.743411][T13504] RSP: 002b:00007f025f07b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.743430][T13504] RAX: ffffffffffffffda RBX: 00007f025e425fa0 RCX: 00007f025e19e0d9 [ 678.743443][T13504] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 678.743454][T13504] RBP: 00007f025f07b090 R08: 0000000000000000 R09: 0000000000000000 [ 678.743465][T13504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.743477][T13504] R13: 00007f025e426038 R14: 00007f025e425fa0 R15: 00007fff4adec9f8 [ 678.743503][T13504] [ 678.992809][ T5606] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 679.165428][ T5606] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 679.185409][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.216347][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.232822][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 679.252626][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.279132][ T5606] usb 2-1: config 0 descriptor?? [ 679.474734][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 679.486622][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.507592][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 679.528277][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 679.537226][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 679.553834][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.585440][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.682820][ T5601] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 679.714591][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 679.714606][ T30] audit: type=1800 audit(1787096862.998:4989): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 679.722321][ T5606] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 679.752592][ T5606] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 679.762145][ T5606] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 679.798736][ T5606] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 679.821434][ T30] audit: type=1800 audit(1787096863.038:4990): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217811 res=0 errno=0 [ 679.826694][ T5606] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 679.862824][ T5601] usb 4-1: Using ep0 maxpacket: 8 [ 679.871078][T13526] FAULT_INJECTION: forcing a failure. [ 679.871078][T13526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.901026][ T5601] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 679.953053][T13526] CPU: 1 UID: 0 PID: 13526 Comm: syz.7.1655 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.953086][T13526] Tainted: [L]=SOFTLOCKUP [ 679.953094][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 679.953107][T13526] Call Trace: [ 679.953114][T13526] [ 679.953123][T13526] dump_stack_lvl+0x100/0x190 [ 679.953155][T13526] should_fail_ex.cold+0x5/0xa [ 679.953182][T13526] _copy_to_user+0x32/0xd0 [ 679.953215][T13526] simple_read_from_buffer+0xcb/0x170 [ 679.953242][T13526] proc_fail_nth_read+0x1af/0x230 [ 679.953269][T13526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.953296][T13526] ? rw_verify_area+0xce/0x6d0 [ 679.953325][T13526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.953350][T13526] vfs_read+0x1e4/0xb40 [ 679.953374][T13526] ? __pfx_vfs_read+0x10/0x10 [ 679.953393][T13526] ? __fget_files+0x215/0x3d0 [ 679.953424][T13526] ? __fget_files+0x21f/0x3d0 [ 679.953456][T13526] ksys_read+0x12a/0x250 [ 679.953476][T13526] ? __pfx_ksys_read+0x10/0x10 [ 679.953504][T13526] do_syscall_64+0x115/0x870 [ 679.953533][T13526] ? clear_bhb_loop+0x70/0xc0 [ 679.953560][T13526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.953581][T13526] RIP: 0033:0x7f78f635e90e [ 679.953600][T13526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 679.953620][T13526] RSP: 002b:00007f78f7251fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 679.953641][T13526] RAX: ffffffffffffffda RBX: 00007f78f72526c0 RCX: 00007f78f635e90e [ 679.953655][T13526] RDX: 000000000000000f RSI: 00007f78f72520a0 RDI: 0000000000000004 [ 679.953668][T13526] RBP: 00007f78f7252090 R08: 0000000000000000 R09: 0000000000000000 [ 679.953681][T13526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.953694][T13526] R13: 00007f78f6626128 R14: 00007f78f6626090 R15: 00007fffa702f698 [ 679.953723][T13526] [ 679.956497][ T5601] usb 4-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 680.130497][ T9] gud 6-1:1.0: No supported pixel formats found [ 680.137740][ T5606] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 680.173084][ T30] audit: type=1800 audit(1787096863.038:4991): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=217840 res=0 errno=0 [ 680.195547][ T5606] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 680.214178][ T9] gud 6-1:1.0: probe with driver gud failed with error -22 [ 680.282474][ T30] audit: type=1800 audit(1787096863.038:4992): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=217818 res=0 errno=0 [ 680.314904][ T5606] arvo 0003:1E7D:30D4.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 680.315232][T13529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.391915][T13509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.414010][T13529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.426173][T13509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.472179][ T30] audit: type=1800 audit(1787096863.068:4993): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=217819 res=0 errno=0 [ 680.546313][ T30] audit: type=1800 audit(1787096863.068:4994): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=217820 res=0 errno=0 [ 680.563883][ T5606] usb 2-1: USB disconnect, device number 56 [ 680.580222][T13533] fido_id[13533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 680.603089][ T30] audit: type=1800 audit(1787096863.078:4995): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 680.652245][ T30] audit: type=1800 audit(1787096863.178:4996): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217860 res=0 errno=0 [ 680.683461][ T30] audit: type=1800 audit(1787096863.188:4997): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 680.705664][ T5601] usb 4-1: config 0 interface 0 has no altsetting 0 [ 680.705691][ T30] audit: type=1800 audit(1787096863.188:4998): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217876 res=0 errno=0 [ 680.792847][ T5601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.837251][ T5601] usb 4-1: config 0 descriptor?? [ 680.967385][ T5601] usbhid 4-1:0.0: can't add hid device: -71 [ 680.975778][ T5601] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 681.023812][ T5601] usb 4-1: USB disconnect, device number 70 [ 681.485133][T13540] dlm: closing connection to node 1 [ 681.502970][ T5601] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 681.541730][T13540] dlm: io handling for node: 1 stopped [ 681.562073][T13540] dlm: closing connection to node 1 done [ 681.753446][ T5601] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 681.961109][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.986042][ T5601] usb 2-1: Product: syz [ 682.007514][ T5601] usb 2-1: Manufacturer: syz [ 682.026147][ T5601] usb 2-1: SerialNumber: syz [ 682.059127][ T5601] usb 2-1: config 0 descriptor?? [ 682.388643][ T10] usb 6-1: USB disconnect, device number 56 [ 682.598332][T13568] jffs2: notice: (13568) jffs2_build_xattr_subsystem: complete building xattr subsystem, 21 of xdatum (0 unchecked, 21 orphan) and 21 of xref (0 dead, 21 orphan) found. [ 682.695509][T13568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1664'. [ 682.718214][T13573] netlink: 'syz.5.1663': attribute type 4 has an invalid length. [ 682.726409][T13573] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1663'. [ 683.651308][T13584] FAULT_INJECTION: forcing a failure. [ 683.651308][T13584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.674523][T13584] CPU: 1 UID: 0 PID: 13584 Comm: syz.0.1666 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.674555][T13584] Tainted: [L]=SOFTLOCKUP [ 683.674564][T13584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 683.674576][T13584] Call Trace: [ 683.674584][T13584] [ 683.674591][T13584] dump_stack_lvl+0x100/0x190 [ 683.674621][T13584] should_fail_ex.cold+0x5/0xa [ 683.674648][T13584] _copy_to_user+0x32/0xd0 [ 683.674680][T13584] simple_read_from_buffer+0xcb/0x170 [ 683.674706][T13584] proc_fail_nth_read+0x1af/0x230 [ 683.674732][T13584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 683.674757][T13584] ? rw_verify_area+0xce/0x6d0 [ 683.674786][T13584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 683.674810][T13584] vfs_read+0x1e4/0xb40 [ 683.674834][T13584] ? __pfx_vfs_read+0x10/0x10 [ 683.674853][T13584] ? __fget_files+0x215/0x3d0 [ 683.674883][T13584] ? __fget_files+0x21f/0x3d0 [ 683.674916][T13584] ksys_read+0x12a/0x250 [ 683.674935][T13584] ? __pfx_ksys_read+0x10/0x10 [ 683.674963][T13584] do_syscall_64+0x115/0x870 [ 683.674991][T13584] ? clear_bhb_loop+0x70/0xc0 [ 683.675018][T13584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.675038][T13584] RIP: 0033:0x7f025e15e90e [ 683.675056][T13584] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 683.675076][T13584] RSP: 002b:00007f025f07afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 683.675096][T13584] RAX: ffffffffffffffda RBX: 00007f025f07b6c0 RCX: 00007f025e15e90e [ 683.675116][T13584] RDX: 000000000000000f RSI: 00007f025f07b0a0 RDI: 0000000000000003 [ 683.675129][T13584] RBP: 00007f025f07b090 R08: 0000000000000000 R09: 0000000000000000 [ 683.675142][T13584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.675155][T13584] R13: 00007f025e426038 R14: 00007f025e425fa0 R15: 00007fff4adec9f8 [ 683.675185][T13584] [ 684.715520][ T5601] usb 2-1: USB disconnect, device number 57 [ 684.811746][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 684.811763][ T30] audit: type=1800 audit(1787096868.088:5038): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 685.010710][ T30] audit: type=1800 audit(1787096868.138:5039): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 685.072973][ T30] audit: type=1800 audit(1787096868.288:5040): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 685.132850][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 685.227468][ T30] audit: type=1400 audit(1787096868.498:5041): avc: denied { write } for pid=13589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.295691][ T10] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 685.346972][T13624] kvm: pic: non byte read [ 685.354450][T13624] kvm: pic: non byte read [ 685.393632][T13407] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 685.455348][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.470719][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.479510][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 685.490527][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 685.500688][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 685.514075][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.537865][ T30] audit: type=1800 audit(1787096868.808:5042): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218230 res=0 errno=0 [ 685.608521][ T30] audit: type=1800 audit(1787096868.818:5043): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=218259 res=0 errno=0 [ 685.644119][T13407] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 685.659245][T13407] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 685.691563][T13407] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 685.702006][ T30] audit: type=1800 audit(1787096868.848:5044): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=218237 res=0 errno=0 [ 685.702053][ T30] audit: type=1800 audit(1787096868.858:5045): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=218238 res=0 errno=0 [ 685.702095][ T30] audit: type=1800 audit(1787096868.858:5046): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=218239 res=0 errno=0 [ 685.702134][ T30] audit: type=1800 audit(1787096868.868:5047): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218279 res=0 errno=0 [ 686.001713][T13407] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.044388][T13407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 686.055144][ T10] gud 6-1:1.0: No supported pixel formats found [ 686.061782][ T10] gud 6-1:1.0: probe with driver gud failed with error -22 [ 686.083344][T13407] usb 4-1: Product: syz [ 686.095567][T13407] usb 4-1: Manufacturer: syz [ 686.119474][T13407] usb 4-1: SerialNumber: syz [ 686.202976][ T5601] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 686.681670][T13407] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 686.693111][T13643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.713588][T13643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.721459][T13618] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 686.727993][T13618] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 686.767007][ T5601] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 686.801296][ T5601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 686.838200][ T5601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 686.844723][T13618] vhci_hcd vhci_hcd.0: Device attached [ 686.892897][ T5601] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.936389][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 686.946407][ T5601] usb 2-1: Product: syz [ 686.961160][ T5601] usb 2-1: Manufacturer: syz [ 686.982111][ T5601] usb 2-1: SerialNumber: syz [ 687.023780][T13407] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 687.115089][T13407] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 687.149311][T13656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.170040][T13655] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.179374][T13656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.251797][ T5601] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 687.273708][T13631] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 687.280240][T13631] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 687.319789][T13631] vhci_hcd vhci_hcd.0: Device attached [ 687.345341][T13665] netlink: 'syz.7.1681': attribute type 4 has an invalid length. [ 687.353141][T13665] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1681'. [ 687.513233][ T5601] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 687.644467][ T5601] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 688.322620][T13644] vhci_hcd: connection reset by peer [ 688.326562][ T5794] usb 4-1: USB disconnect, device number 71 [ 688.336553][ T3310] vhci_hcd vhci_hcd.3: stop threads [ 688.368388][ T3310] vhci_hcd vhci_hcd.3: release socket [ 688.404257][ T5794] usblp0: removed [ 688.412292][ T3310] vhci_hcd vhci_hcd.3: disconnect device [ 688.625966][ T5794] usb 6-1: USB disconnect, device number 57 [ 688.992325][T13659] vhci_hcd: connection reset by peer [ 688.998529][ T10] usb 2-1: USB disconnect, device number 58 [ 689.007079][ T12] vhci_hcd vhci_hcd.1: stop threads [ 689.014868][ T12] vhci_hcd vhci_hcd.1: release socket [ 689.022206][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 689.029118][ T10] usblp1: removed [ 689.823499][T13691] loop5: detected capacity change from 0 to 7 [ 689.903050][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 689.903067][ T30] audit: type=1800 audit(1787096873.118:5085): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 689.943840][T13691] Dev loop5: unable to read RDB block 7 [ 689.974357][T13691] loop5: unable to read partition table [ 690.003446][T13691] loop5: partition table beyond EOD, truncated [ 690.012827][T13691] loop_reread_partitions: partition scan of loop5 (~h"+x|Q` ) failed (rc=-5) [ 690.053225][ T30] audit: type=1800 audit(1787096873.308:5086): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 690.132819][ T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 690.142807][ T30] audit: type=1800 audit(1787096873.388:5087): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218677 res=0 errno=0 [ 690.230063][T13710] jffs2: notice: (13710) jffs2_build_xattr_subsystem: complete building xattr subsystem, 22 of xdatum (0 unchecked, 22 orphan) and 22 of xref (0 dead, 22 orphan) found. [ 690.249823][ T30] audit: type=1400 audit(1787096873.528:5088): avc: denied { write } for pid=13709 comm="syz.3.1691" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 690.275036][T13710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1691'. [ 690.284172][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 690.291880][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 690.301934][ T30] audit: type=1400 audit(1787096873.588:5089): avc: denied { write } for pid=13709 comm="syz.3.1691" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 690.315211][ T10] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.347613][ T10] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.360262][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.367000][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.377678][ T10] usb 6-1: config 0 descriptor?? [ 690.378536][ T30] audit: type=1800 audit(1787096873.668:5090): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218696 res=0 errno=0 [ 690.419358][ T30] audit: type=1800 audit(1787096873.688:5091): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=218725 res=0 errno=0 [ 690.444797][ T30] audit: type=1800 audit(1787096873.688:5092): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=218703 res=0 errno=0 [ 690.468835][ T30] audit: type=1800 audit(1787096873.688:5093): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=218704 res=0 errno=0 [ 690.490611][ T30] audit: type=1800 audit(1787096873.688:5094): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=218705 res=0 errno=0 [ 690.835845][T13719] FAULT_INJECTION: forcing a failure. [ 690.835845][T13719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.868330][T13719] CPU: 0 UID: 0 PID: 13719 Comm: syz.1.1693 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.868367][T13719] Tainted: [L]=SOFTLOCKUP [ 690.868374][T13719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 690.868386][T13719] Call Trace: [ 690.868394][T13719] [ 690.868402][T13719] dump_stack_lvl+0x100/0x190 [ 690.868433][T13719] should_fail_ex.cold+0x5/0xa [ 690.868461][T13719] _copy_from_user+0x2e/0xd0 [ 690.868492][T13719] copy_msghdr_from_user+0x9f/0x4c0 [ 690.868521][T13719] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 690.868562][T13719] ___sys_sendmsg+0x106/0x1e0 [ 690.868591][T13719] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.868616][T13719] ? __lock_acquire+0x49f/0x1a40 [ 690.868642][T13719] ? get_pid_task+0x106/0x250 [ 690.868695][T13719] __sys_sendmsg+0x160/0x210 [ 690.868717][T13719] ? __pfx___sys_sendmsg+0x10/0x10 [ 690.868755][T13719] do_syscall_64+0x115/0x870 [ 690.868784][T13719] ? clear_bhb_loop+0x70/0xc0 [ 690.868810][T13719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.868831][T13719] RIP: 0033:0x7fb23539e0d9 [ 690.868850][T13719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.868870][T13719] RSP: 002b:00007fb23626f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.868890][T13719] RAX: ffffffffffffffda RBX: 00007fb235625fa0 RCX: 00007fb23539e0d9 [ 690.868904][T13719] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 690.868918][T13719] RBP: 00007fb23626f090 R08: 0000000000000000 R09: 0000000000000000 [ 690.868931][T13719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.868944][T13719] R13: 00007fb235626038 R14: 00007fb235625fa0 R15: 00007ffec487a958 [ 690.868973][T13719] [ 691.238064][ T4913] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 691.249640][ T4913] Bluetooth: hci2: Injecting HCI hardware error event [ 691.258848][T12641] Bluetooth: hci2: hardware error 0x00 [ 691.313087][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 691.319192][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 691.339142][ T10] usb 6-1: USB disconnect, device number 58 [ 691.815462][T13734] FAULT_INJECTION: forcing a failure. [ 691.815462][T13734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.857009][T13734] CPU: 0 UID: 0 PID: 13734 Comm: syz.0.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.857043][T13734] Tainted: [L]=SOFTLOCKUP [ 691.857051][T13734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 691.857064][T13734] Call Trace: [ 691.857071][T13734] [ 691.857082][T13734] dump_stack_lvl+0x100/0x190 [ 691.857112][T13734] should_fail_ex.cold+0x5/0xa [ 691.857138][T13734] _copy_from_iter+0x1f4/0x1690 [ 691.857175][T13734] ? __pfx__copy_from_iter+0x10/0x10 [ 691.857204][T13734] ? _parse_integer_limit+0x1ac/0x220 [ 691.857233][T13734] ? _kstrtoull+0x13c/0x1f0 [ 691.857253][T13734] ? __pfx__kstrtoull+0x10/0x10 [ 691.857276][T13734] tun_get_user+0x265/0x3c20 [ 691.857305][T13734] ? __lock_acquire+0x49f/0x1a40 [ 691.857332][T13734] ? __pfx_tun_get_user+0x10/0x10 [ 691.857362][T13734] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 691.857390][T13734] ? find_held_lock+0x2b/0x80 [ 691.857407][T13734] ? tun_get+0x191/0x370 [ 691.857427][T13734] ? tun_get+0x191/0x370 [ 691.857454][T13734] tun_chr_write_iter+0xdc/0x200 [ 691.857481][T13734] vfs_write+0x6ac/0x1050 [ 691.857502][T13734] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 691.857528][T13734] ? __pfx_vfs_write+0x10/0x10 [ 691.857544][T13734] ? find_held_lock+0x2b/0x80 [ 691.857575][T13734] ksys_write+0x12a/0x250 [ 691.857592][T13734] ? __pfx_ksys_write+0x10/0x10 [ 691.857616][T13734] do_syscall_64+0x115/0x870 [ 691.857641][T13734] ? clear_bhb_loop+0x70/0xc0 [ 691.857664][T13734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.857683][T13734] RIP: 0033:0x7f025e19e0d9 [ 691.857698][T13734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.857715][T13734] RSP: 002b:00007f025f07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 691.857733][T13734] RAX: ffffffffffffffda RBX: 00007f025e425fa0 RCX: 00007f025e19e0d9 [ 691.857746][T13734] RDX: 000000000000fdef RSI: 0000200000000500 RDI: 0000000000000004 [ 691.857757][T13734] RBP: 00007f025f07b090 R08: 0000000000000000 R09: 0000000000000000 [ 691.857768][T13734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.857780][T13734] R13: 00007f025e426038 R14: 00007f025e425fa0 R15: 00007fff4adec9f8 [ 691.857804][T13734] [ 692.383392][T13407] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 692.904665][ T5601] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 692.975403][T13753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.995465][T13753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.139564][T13758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.148442][T13758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.332804][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 693.414368][ T5596] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 693.463472][T12641] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 693.472811][ T5794] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 693.493486][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 693.505203][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.532816][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.544361][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.566857][ T9] usb 6-1: config 0 descriptor?? [ 693.593728][ T5596] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 693.604844][ T5596] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 693.622811][ T5596] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 693.636043][ T5596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.645506][ T5596] usb 2-1: Product: syz [ 693.649840][ T5794] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 693.659446][ T5596] usb 2-1: Manufacturer: syz [ 693.664414][ T5596] usb 2-1: SerialNumber: syz [ 693.669937][ T5794] usb 4-1: config 2 has an invalid interface number: 228 but max is 0 [ 693.687170][ T5794] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 693.701459][ T5794] usb 4-1: config 2 has no interface number 0 [ 693.708019][ T5794] usb 4-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 693.722231][ T5794] usb 4-1: config 2 interface 228 has no altsetting 0 [ 693.732100][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.740932][ T5794] usb 4-1: Product: syz [ 693.745492][ T5794] usb 4-1: Manufacturer: syz [ 693.750177][ T5794] usb 4-1: SerialNumber: syz [ 693.911416][ T5596] usb 2-1: Limiting number of CPorts to U8_MAX [ 694.010487][ T9] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 694.030761][ T9] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 694.048956][ T9] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 694.064188][ T9] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 694.074374][T13768] dlm: Unknown command passed to DLM device : 0 [ 694.074374][T13768] [ 694.088659][ T9] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 694.106708][ T9] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 694.129343][ T9] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 694.192075][ T9] arvo 0003:1E7D:30D4.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 694.490838][T13755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.512394][T13755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.556366][ T9] usb 6-1: USB disconnect, device number 59 [ 694.832437][ T5596] usb 2-1: failed to execute ARPC: -110 [ 694.839524][ T5596] usb 2-1: failed to set connected state for cport 0: -110 [ 694.856137][ T5596] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 695.119826][ T5596] usb 2-1: failed to send ARPC request 3: -71 [ 695.144566][ T5596] usb 2-1: failed to execute ARPC: -71 [ 695.155825][ T5596] usb 2-1: failed to clear cport 0: -71 [ 695.161773][ T5596] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 695.197497][ C1] usb 2-1: failed to resubmit arpc in-urb: -1 [ 695.225142][ T5596] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 695.256540][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 695.256555][ T30] audit: type=1800 audit(1787096878.538:5137): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=219160 res=0 errno=0 [ 695.294196][ T5596] usb 2-1: USB disconnect, device number 59 [ 695.318099][ T30] audit: type=1800 audit(1787096878.568:5138): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=219161 res=0 errno=0 [ 695.376827][ T30] audit: type=1800 audit(1787096878.568:5139): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=219140 res=0 errno=0 [ 695.461385][ T30] audit: type=1800 audit(1787096878.578:5140): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=219162 res=0 errno=0 [ 695.520879][ T30] audit: type=1800 audit(1787096878.658:5141): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 695.589030][T13775] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1712'. [ 695.716108][ T30] audit: type=1800 audit(1787096878.998:5142): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 695.803128][T13777] FAULT_INJECTION: forcing a failure. [ 695.803128][T13777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.874380][ T30] audit: type=1800 audit(1787096879.138:5143): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 695.899998][T13777] CPU: 0 UID: 0 PID: 13777 Comm: syz.5.1713 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.900032][T13777] Tainted: [L]=SOFTLOCKUP [ 695.900040][T13777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 695.900054][T13777] Call Trace: [ 695.900064][T13777] [ 695.900072][T13777] dump_stack_lvl+0x100/0x190 [ 695.900105][T13777] should_fail_ex.cold+0x5/0xa [ 695.900132][T13777] _copy_from_user+0x2e/0xd0 [ 695.900164][T13777] copy_msghdr_from_user+0x9f/0x4c0 [ 695.900192][T13777] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 695.900230][T13777] ___sys_sendmsg+0x106/0x1e0 [ 695.900258][T13777] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.900283][T13777] ? __lock_acquire+0x49f/0x1a40 [ 695.900310][T13777] ? get_pid_task+0x106/0x250 [ 695.900365][T13777] __sys_sendmsg+0x160/0x210 [ 695.900385][T13777] ? __pfx___sys_sendmsg+0x10/0x10 [ 695.900415][T13777] do_syscall_64+0x115/0x870 [ 695.900443][T13777] ? clear_bhb_loop+0x70/0xc0 [ 695.900469][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.900490][T13777] RIP: 0033:0x7fcd8619e0d9 [ 695.900507][T13777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.900526][T13777] RSP: 002b:00007fcd8705f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.900546][T13777] RAX: ffffffffffffffda RBX: 00007fcd86425fa0 RCX: 00007fcd8619e0d9 [ 695.900560][T13777] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 695.900572][T13777] RBP: 00007fcd8705f090 R08: 0000000000000000 R09: 0000000000000000 [ 695.900584][T13777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.900597][T13777] R13: 00007fcd86426038 R14: 00007fcd86425fa0 R15: 00007ffcec4675d8 [ 695.900626][T13777] [ 696.132853][ T30] audit: type=1800 audit(1787096879.408:5144): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 696.249633][ T30] audit: type=1400 audit(1787096879.528:5145): avc: denied { setopt } for pid=13778 comm="syz.1.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 696.270291][T13779] 8021q: VLANs not supported on wg1 [ 696.276244][T13760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 696.364314][ T30] audit: type=1400 audit(1787096879.548:5146): avc: denied { ioctl } for pid=13778 comm="syz.1.1714" path="socket:[44075]" dev="sockfs" ino=44075 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 696.642926][ T5794] ims_pcu 4-1:2.228: Missing CDC union descriptor [ 696.711177][ T5794] ims_pcu 4-1:2.228: probe with driver ims_pcu failed with error -22 [ 696.848118][ T5794] usb 4-1: USB disconnect, device number 72 [ 697.784576][ T5794] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 697.964793][ T5794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 698.014114][ T5794] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 698.052822][ T5794] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 698.072876][ T5794] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.157892][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 698.182776][ T5794] usb 4-1: Product: syz [ 698.188954][ T5794] usb 4-1: Manufacturer: syz [ 698.205598][ T5794] usb 4-1: SerialNumber: syz [ 698.251308][T13810] FAULT_INJECTION: forcing a failure. [ 698.251308][T13810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.312887][T13810] CPU: 1 UID: 0 PID: 13810 Comm: syz.0.1723 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.312921][T13810] Tainted: [L]=SOFTLOCKUP [ 698.312929][T13810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 698.312942][T13810] Call Trace: [ 698.312949][T13810] [ 698.312957][T13810] dump_stack_lvl+0x100/0x190 [ 698.312989][T13810] should_fail_ex.cold+0x5/0xa [ 698.313017][T13810] _copy_from_user+0x2e/0xd0 [ 698.313049][T13810] __sys_bpf+0x2f5/0x4e80 [ 698.313079][T13810] ? __pfx___sys_bpf+0x10/0x10 [ 698.313100][T13810] ? find_held_lock+0x2b/0x80 [ 698.313120][T13810] ? get_pid_task+0xfc/0x250 [ 698.313140][T13810] ? get_pid_task+0xfc/0x250 [ 698.313169][T13810] ? find_held_lock+0x2b/0x80 [ 698.313195][T13810] ? rcu_read_lock_any_held+0x6a/0xa0 [ 698.313217][T13810] ? find_held_lock+0x2b/0x80 [ 698.313235][T13810] ? ksys_write+0x190/0x250 [ 698.313255][T13810] ? ksys_write+0x190/0x250 [ 698.313296][T13810] ? fput+0x79/0x100 [ 698.313326][T13810] ? __x64_sys_bpf+0xce/0x140 [ 698.313347][T13810] __x64_sys_bpf+0xce/0x140 [ 698.313369][T13810] ? do_syscall_64+0x90/0x870 [ 698.313400][T13810] do_syscall_64+0x115/0x870 [ 698.313428][T13810] ? clear_bhb_loop+0x70/0xc0 [ 698.313453][T13810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.313475][T13810] RIP: 0033:0x7f025e19e0d9 [ 698.313492][T13810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.313512][T13810] RSP: 002b:00007f025f07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 698.313532][T13810] RAX: ffffffffffffffda RBX: 00007f025e425fa0 RCX: 00007f025e19e0d9 [ 698.313546][T13810] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 698.313560][T13810] RBP: 00007f025f07b090 R08: 0000000000000000 R09: 0000000000000000 [ 698.313572][T13810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.313585][T13810] R13: 00007f025e426038 R14: 00007f025e425fa0 R15: 00007fff4adec9f8 [ 698.313614][T13810] [ 698.548607][ T5794] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 698.569427][T13796] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 698.577670][T13796] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 698.579117][T13796] vhci_hcd vhci_hcd.0: Device attached [ 698.872934][ T5794] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 699.017518][T13812] vhci_hcd: connection closed [ 699.018875][T13407] usb 4-1: USB disconnect, device number 73 [ 699.053126][ T3310] vhci_hcd vhci_hcd.3: stop threads [ 699.077237][ T3310] vhci_hcd vhci_hcd.3: release socket [ 699.084819][T13407] usblp0: removed [ 699.093029][ T5794] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 699.313576][ T3310] vhci_hcd vhci_hcd.3: disconnect device [ 699.557569][ T5794] usb 39-1: enqueue for inactive port 0 [ 699.612777][ T5596] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 699.636664][ T5794] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 699.708036][T13802] debugfs: out of free dentries, can not create file 'pages_4k' [ 699.790861][T13802] debugfs: out of free dentries, can not create file 'pf_fast' [ 699.804609][ T5596] usb 6-1: Using ep0 maxpacket: 8 [ 699.819971][ T5596] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 699.840234][T13802] debugfs: out of free dentries, can not create file 'pf_mmio_spte_created' [ 699.863657][ T5596] usb 6-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 699.891599][ T5596] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 699.906373][T13802] debugfs: out of free dentries, can not create file 'pf_guest' [ 699.930256][ T5596] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.958071][T13802] debugfs: out of free dentries, can not create file 'tlb_flush' [ 699.977524][ T5596] usb 6-1: config 0 descriptor?? [ 700.027295][T13802] debugfs: out of free dentries, can not create file 'invlpg' [ 700.071618][T13802] debugfs: out of free dentries, can not create file 'exits' [ 700.108309][T13841] FAULT_INJECTION: forcing a failure. [ 700.108309][T13841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.113951][T13802] debugfs: out of free dentries, can not create file 'io_exits' [ 700.146122][T13841] CPU: 0 UID: 0 PID: 13841 Comm: syz.3.1732 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.146152][T13841] Tainted: [L]=SOFTLOCKUP [ 700.146160][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 700.146172][T13841] Call Trace: [ 700.146183][T13841] [ 700.146191][T13841] dump_stack_lvl+0x100/0x190 [ 700.146220][T13841] should_fail_ex.cold+0x5/0xa [ 700.146247][T13841] _copy_from_user+0x2e/0xd0 [ 700.146280][T13841] copy_msghdr_from_user+0x9f/0x4c0 [ 700.146308][T13841] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 700.146349][T13841] ___sys_sendmsg+0x106/0x1e0 [ 700.146378][T13841] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.146403][T13841] ? __lock_acquire+0x49f/0x1a40 [ 700.146463][T13841] __sys_sendmsg+0x160/0x210 [ 700.146485][T13841] ? __pfx___sys_sendmsg+0x10/0x10 [ 700.146522][T13841] do_syscall_64+0x115/0x870 [ 700.146550][T13841] ? clear_bhb_loop+0x70/0xc0 [ 700.146576][T13841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.146598][T13841] RIP: 0033:0x7f2b4399e0d9 [ 700.146616][T13841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.146636][T13841] RSP: 002b:00007f2b44835028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.146657][T13841] RAX: ffffffffffffffda RBX: 00007f2b43c25fa0 RCX: 00007f2b4399e0d9 [ 700.146671][T13841] RDX: 0000000000048084 RSI: 0000200000000040 RDI: 0000000000000003 [ 700.146684][T13841] RBP: 00007f2b44835090 R08: 0000000000000000 R09: 0000000000000000 [ 700.146696][T13841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.146708][T13841] R13: 00007f2b43c26038 R14: 00007f2b43c25fa0 R15: 00007ffe2f95d288 [ 700.146737][T13841] [ 701.430384][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 701.430400][ T30] audit: type=1800 audit(1787096884.708:5183): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 702.287447][ T5596] usb 6-1: string descriptor 0 read error: -71 [ 702.301330][ T5596] usb 6-1: USB disconnect, device number 60 [ 702.319848][ T30] audit: type=1800 audit(1787096885.598:5184): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219900 res=0 errno=0 [ 702.554514][ T30] audit: type=1800 audit(1787096885.828:5185): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 702.660985][ T30] audit: type=1800 audit(1787096885.938:5186): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 702.746774][ T30] audit: type=1800 audit(1787096886.028:5187): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 702.826108][ T30] audit: type=1800 audit(1787096886.108:5188): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 702.853008][T13407] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 702.875364][T13867] FAULT_INJECTION: forcing a failure. [ 702.875364][T13867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.888641][T13867] CPU: 1 UID: 0 PID: 13867 Comm: syz.1.1740 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.888669][T13867] Tainted: [L]=SOFTLOCKUP [ 702.888677][T13867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 702.888688][T13867] Call Trace: [ 702.888695][T13867] [ 702.888703][T13867] dump_stack_lvl+0x100/0x190 [ 702.888735][T13867] should_fail_ex.cold+0x5/0xa [ 702.888761][T13867] _copy_from_user+0x2e/0xd0 [ 702.888792][T13867] move_addr_to_kernel+0x65/0x170 [ 702.888820][T13867] __sys_bind+0x11d/0x260 [ 702.888848][T13867] ? __pfx___sys_bind+0x10/0x10 [ 702.888881][T13867] ? __fget_files+0x21f/0x3d0 [ 702.888916][T13867] ? __pfx_ksys_write+0x10/0x10 [ 702.888941][T13867] __x64_sys_bind+0x72/0xb0 [ 702.888966][T13867] ? lockdep_hardirqs_on+0x78/0x100 [ 702.888994][T13867] do_syscall_64+0x115/0x870 [ 702.889021][T13867] ? clear_bhb_loop+0x70/0xc0 [ 702.889047][T13867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.889069][T13867] RIP: 0033:0x7fb23539e0d9 [ 702.889085][T13867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.889105][T13867] RSP: 002b:00007fb23626f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 702.889125][T13867] RAX: ffffffffffffffda RBX: 00007fb235625fa0 RCX: 00007fb23539e0d9 [ 702.889140][T13867] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 702.889153][T13867] RBP: 00007fb23626f090 R08: 0000000000000000 R09: 0000000000000000 [ 702.889165][T13867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.889178][T13867] R13: 00007fb235626038 R14: 00007fb235625fa0 R15: 00007ffec487a958 [ 702.889207][T13867] [ 703.076396][T13851] debugfs: out of free dentries, can not create file 'invlpg' [ 703.143911][T13407] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 703.165604][T13407] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 703.212611][T13407] usb 8-1: config 0 has no interface number 0 [ 703.217290][ T30] audit: type=1800 audit(1787096886.408:5189): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 703.240124][ T30] audit: type=1800 audit(1787096886.518:5190): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 703.415883][T13407] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.424894][T13407] usb 8-1: Product: syz [ 703.434470][T13407] usb 8-1: Manufacturer: syz [ 703.444421][T13407] usb 8-1: SerialNumber: syz [ 704.046768][T13407] usb 8-1: config 0 descriptor?? [ 704.053716][ T30] audit: type=1800 audit(1787096887.328:5191): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219942 res=0 errno=0 [ 704.117649][ T30] audit: type=1800 audit(1787096887.358:5192): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=219974 res=0 errno=0 [ 704.249478][T13880] jffs2: notice: (13880) jffs2_build_xattr_subsystem: complete building xattr subsystem, 23 of xdatum (0 unchecked, 23 orphan) and 23 of xref (0 dead, 23 orphan) found. [ 704.297620][T13407] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 704.531921][T13407] usb 8-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 704.542418][T13407] usb 8-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 705.336763][T13901] jffs2: notice: (13901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 24 of xdatum (0 unchecked, 24 orphan) and 24 of xref (0 dead, 24 orphan) found. [ 706.414571][T13913] netlink: 'syz.3.1752': attribute type 4 has an invalid length. [ 706.422386][T13913] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1752'. [ 707.056747][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 707.056842][ T30] audit: type=1400 audit(1787096890.268:5213): avc: denied { write } for pid=13914 comm="syz.7.1754" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 707.358973][ T30] audit: type=1800 audit(1787096890.588:5214): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 707.461855][ T30] audit: type=1800 audit(1787096890.638:5215): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 707.572839][ T30] audit: type=1800 audit(1787096890.848:5216): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 708.202065][ T30] audit: type=1800 audit(1787096891.478:5217): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 708.383713][ T5726] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 708.479143][ T30] audit: type=1800 audit(1787096891.758:5218): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 708.925127][ T5726] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 708.971012][ T5726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 709.002362][ T5726] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 709.043385][ T5726] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 709.511540][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 709.512584][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 709.537583][ T30] audit: type=1800 audit(1787096892.808:5219): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 709.572550][T13912] debugfs: out of free dentries, can not create file 'invlpg' [ 709.580987][ T5726] usb 2-1: Product: syz [ 709.585334][ T5726] usb 2-1: Manufacturer: syz [ 709.590388][ T5726] usb 2-1: SerialNumber: syz [ 709.619342][ T30] audit: type=1800 audit(1787096892.898:5220): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220042 res=0 errno=0 [ 709.642101][ T30] audit: type=1800 audit(1787096892.898:5221): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=220074 res=0 errno=0 [ 709.674363][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 709.682802][ T30] audit: type=1800 audit(1787096892.898:5222): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=220049 res=0 errno=0 [ 709.713693][T13945] jffs2: notice: (13945) jffs2_build_xattr_subsystem: complete building xattr subsystem, 25 of xdatum (0 unchecked, 25 orphan) and 25 of xref (0 dead, 25 orphan) found. [ 709.735251][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.746396][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 709.790250][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 709.815359][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 709.851766][ T5726] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 709.861947][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.879224][T13930] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 709.885756][T13930] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 709.920918][T13930] vhci_hcd vhci_hcd.0: Device attached [ 709.941084][T13950] netlink: 'syz.7.1762': attribute type 3 has an invalid length. [ 710.094942][ T5726] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 710.173214][ T5726] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 711.199003][T13975] FAULT_INJECTION: forcing a failure. [ 711.199003][T13975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.213194][T13975] CPU: 0 UID: 0 PID: 13975 Comm: syz.0.1766 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.213230][T13975] Tainted: [L]=SOFTLOCKUP [ 711.213238][T13975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 711.213251][T13975] Call Trace: [ 711.213258][T13975] [ 711.213267][T13975] dump_stack_lvl+0x100/0x190 [ 711.213297][T13975] should_fail_ex.cold+0x5/0xa [ 711.213324][T13975] _copy_from_user+0x2e/0xd0 [ 711.213356][T13975] __sys_bpf+0x2f5/0x4e80 [ 711.213387][T13975] ? __pfx___sys_bpf+0x10/0x10 [ 711.213408][T13975] ? find_held_lock+0x2b/0x80 [ 711.213427][T13975] ? get_pid_task+0xfc/0x250 [ 711.213447][T13975] ? get_pid_task+0xfc/0x250 [ 711.213476][T13975] ? find_held_lock+0x2b/0x80 [ 711.213503][T13975] ? rcu_read_lock_any_held+0x6a/0xa0 [ 711.213525][T13975] ? find_held_lock+0x2b/0x80 [ 711.213544][T13975] ? ksys_write+0x190/0x250 [ 711.213564][T13975] ? ksys_write+0x190/0x250 [ 711.213612][T13975] ? fput+0x79/0x100 [ 711.213641][T13975] ? __x64_sys_bpf+0xce/0x140 [ 711.213662][T13975] __x64_sys_bpf+0xce/0x140 [ 711.213684][T13975] ? do_syscall_64+0x90/0x870 [ 711.213715][T13975] do_syscall_64+0x115/0x870 [ 711.213742][T13975] ? clear_bhb_loop+0x70/0xc0 [ 711.213768][T13975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.213790][T13975] RIP: 0033:0x7f025e19e0d9 [ 711.213808][T13975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.213828][T13975] RSP: 002b:00007f025f07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 711.213849][T13975] RAX: ffffffffffffffda RBX: 00007f025e425fa0 RCX: 00007f025e19e0d9 [ 711.213863][T13975] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 711.213876][T13975] RBP: 00007f025f07b090 R08: 0000000000000000 R09: 0000000000000000 [ 711.213890][T13975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.213902][T13975] R13: 00007f025e426038 R14: 00007f025e425fa0 R15: 00007fff4adec9f8 [ 711.213931][T13975] [ 711.385841][ T5596] usb 2-1: USB disconnect, device number 60 [ 711.447650][ T5699] usb 6-1: USB disconnect, device number 61 [ 711.453954][T13954] vhci_hcd: connection reset by peer [ 711.500279][ T769] vhci_hcd vhci_hcd.1: stop threads [ 711.547707][ T769] vhci_hcd vhci_hcd.1: release socket [ 711.559013][ T769] vhci_hcd vhci_hcd.1: disconnect device [ 711.588081][ T5596] usblp0: removed [ 711.632365][T13982] FAULT_INJECTION: forcing a failure. [ 711.632365][T13982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.651488][T13982] CPU: 1 UID: 0 PID: 13982 Comm: syz.3.1767 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.651519][T13982] Tainted: [L]=SOFTLOCKUP [ 711.651527][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 711.651539][T13982] Call Trace: [ 711.651546][T13982] [ 711.651555][T13982] dump_stack_lvl+0x100/0x190 [ 711.651586][T13982] should_fail_ex.cold+0x5/0xa [ 711.651613][T13982] _copy_from_user+0x2e/0xd0 [ 711.651645][T13982] copy_msghdr_from_user+0x9f/0x4c0 [ 711.651664][T13982] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 711.651686][T13982] ___sys_sendmsg+0x106/0x1e0 [ 711.651704][T13982] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.651728][T13982] ? __lock_acquire+0x49f/0x1a40 [ 711.651755][T13982] ? get_pid_task+0x106/0x250 [ 711.651807][T13982] __sys_sendmsg+0x160/0x210 [ 711.651820][T13982] ? __pfx___sys_sendmsg+0x10/0x10 [ 711.651859][T13982] do_syscall_64+0x115/0x870 [ 711.651888][T13982] ? clear_bhb_loop+0x70/0xc0 [ 711.651915][T13982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.651936][T13982] RIP: 0033:0x7f2b4399e0d9 [ 711.651954][T13982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.651973][T13982] RSP: 002b:00007f2b44835028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.651994][T13982] RAX: ffffffffffffffda RBX: 00007f2b43c25fa0 RCX: 00007f2b4399e0d9 [ 711.652002][T13982] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 711.652009][T13982] RBP: 00007f2b44835090 R08: 0000000000000000 R09: 0000000000000000 [ 711.652018][T13982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.652031][T13982] R13: 00007f2b43c26038 R14: 00007f2b43c25fa0 R15: 00007ffe2f95d288 [ 711.652061][T13982] [ 711.865138][T13984] netlink: 'syz.0.1770': attribute type 4 has an invalid length. [ 711.872960][T13984] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1770'. [ 711.885220][ T5699] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 712.677176][ T5699] usb 6-1: Using ep0 maxpacket: 8 [ 712.821009][ T5699] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 712.833033][ T5699] usb 6-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 712.844383][ T5699] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 712.858322][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.869898][ T5699] usb 6-1: config 0 descriptor?? [ 712.881200][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 712.881213][ T30] audit: type=1800 audit(1787096896.168:5243): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220345 res=0 errno=0 [ 712.913019][ T30] audit: type=1800 audit(1787096896.168:5244): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=220374 res=0 errno=0 [ 712.937668][ T30] audit: type=1800 audit(1787096896.168:5245): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=220352 res=0 errno=0 [ 712.959492][ T30] audit: type=1800 audit(1787096896.168:5246): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=220353 res=0 errno=0 [ 712.987301][ T30] audit: type=1800 audit(1787096896.168:5247): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=220354 res=0 errno=0 [ 713.049523][ T30] audit: type=1800 audit(1787096896.318:5248): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 713.128231][ T30] audit: type=1800 audit(1787096896.368:5249): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 713.151779][ T5699] usb 6-1: string descriptor 0 read error: -71 [ 713.182626][ T5699] usb 6-1: USB disconnect, device number 62 [ 713.198375][ T30] audit: type=1800 audit(1787096896.398:5250): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 713.362817][ T5606] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 714.034635][ T5606] usb 2-1: unable to get BOS descriptor or descriptor too short [ 714.221250][ T5606] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 714.232085][ T5606] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.245385][ T5606] usb 2-1: string descriptor 0 read error: -22 [ 714.251775][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.364779][ T30] audit: type=1800 audit(1787096897.568:5251): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 714.415017][ T30] audit: type=1800 audit(1787096897.598:5252): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 715.733529][ T5726] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 717.130480][T14023] FAULT_INJECTION: forcing a failure. [ 717.130480][T14023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.263487][T14023] CPU: 0 UID: 0 PID: 14023 Comm: syz.7.1780 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.263523][T14023] Tainted: [L]=SOFTLOCKUP [ 717.263531][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 717.263543][T14023] Call Trace: [ 717.263550][T14023] [ 717.263559][T14023] dump_stack_lvl+0x100/0x190 [ 717.263599][T14023] should_fail_ex.cold+0x5/0xa [ 717.263626][T14023] _copy_from_user+0x2e/0xd0 [ 717.263660][T14023] move_addr_to_kernel+0x65/0x170 [ 717.263690][T14023] __sys_sendto+0x1b8/0x4e0 [ 717.263721][T14023] ? __pfx___sys_sendto+0x10/0x10 [ 717.263759][T14023] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 717.263801][T14023] ? ksys_write+0x1ac/0x250 [ 717.263822][T14023] ? __pfx_ksys_write+0x10/0x10 [ 717.263846][T14023] __x64_sys_sendto+0xe0/0x1c0 [ 717.263876][T14023] ? do_syscall_64+0x90/0x870 [ 717.263904][T14023] ? lockdep_hardirqs_on+0x78/0x100 [ 717.263932][T14023] do_syscall_64+0x115/0x870 [ 717.263961][T14023] ? clear_bhb_loop+0x70/0xc0 [ 717.263987][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.264009][T14023] RIP: 0033:0x7f78f639e0d9 [ 717.264027][T14023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.264047][T14023] RSP: 002b:00007f78f7273028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 717.264068][T14023] RAX: ffffffffffffffda RBX: 00007f78f6625fa0 RCX: 00007f78f639e0d9 [ 717.264083][T14023] RDX: 000000000001fffc RSI: 0000200000000180 RDI: 0000000000000003 [ 717.264096][T14023] RBP: 00007f78f7273090 R08: 0000200000000140 R09: 0000000000000014 [ 717.264109][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.264122][T14023] R13: 00007f78f6626038 R14: 00007f78f6625fa0 R15: 00007fffa702f698 [ 717.264151][T14023] [ 717.822931][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 717.985940][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 718.119710][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.158106][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 718.186410][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 718.186426][ T30] audit: type=1800 audit(1787096901.468:5262): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 718.245221][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 718.290068][ T5606] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 718.308815][ T30] audit: type=1800 audit(1787096901.558:5263): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 718.338817][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.374571][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.400439][ T5699] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 718.418916][ T30] audit: type=1800 audit(1787096901.618:5264): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 718.445969][ T30] audit: type=1800 audit(1787096901.618:5265): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220654 res=0 errno=0 [ 718.470214][ T30] audit: type=1800 audit(1787096901.618:5266): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220670 res=0 errno=0 [ 718.509301][T14029] netlink: 'syz.1.1783': attribute type 4 has an invalid length. [ 718.517167][T14029] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1783'. [ 718.563022][ T5699] usb 6-1: device descriptor read/64, error -71 [ 718.933555][ T5699] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 718.944206][ T30] audit: type=1800 audit(1787096901.638:5267): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220689 res=0 errno=0 [ 719.228054][ T5699] usb 6-1: device descriptor read/64, error -71 [ 719.296372][ T5606] usb 2-1: USB disconnect, device number 61 [ 719.324092][ T30] audit: type=1800 audit(1787096901.648:5268): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220716 res=0 errno=0 [ 719.379588][T14036] jffs2: notice: (14036) jffs2_build_xattr_subsystem: complete building xattr subsystem, 25 of xdatum (0 unchecked, 25 orphan) and 25 of xref (0 dead, 25 orphan) found. [ 719.425260][ T5699] usb usb6-port1: attempt power cycle [ 719.507382][ T30] audit: type=1800 audit(1787096901.658:5269): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220702 res=0 errno=0 [ 719.597551][ T30] audit: type=1800 audit(1787096901.658:5270): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220729 res=0 errno=0 [ 719.710021][ T30] audit: type=1800 audit(1787096901.698:5271): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220742 res=0 errno=0 [ 720.005877][ T5708] usb 4-1: USB disconnect, device number 74 [ 722.376744][T14070] futex_wake_op: syz.3.1792 tries to shift op by 144; fix this program [ 722.683038][ T5606] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 722.708913][T14073] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1792'. [ 722.922912][ T5606] usb 6-1: Using ep0 maxpacket: 8 [ 722.977041][ T5606] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 723.173635][ T5606] usb 6-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 723.197182][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 723.197199][ T30] audit: type=1800 audit(1787096906.478:5293): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 723.226854][ T5606] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 723.244721][ T5606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.269995][ T5606] usb 6-1: config 0 descriptor?? [ 723.281430][ T30] audit: type=1800 audit(1787096906.558:5294): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221717 res=0 errno=0 [ 723.312849][ T30] audit: type=1800 audit(1787096906.568:5295): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=221746 res=0 errno=0 [ 723.386993][ T30] audit: type=1800 audit(1787096906.588:5296): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=221724 res=0 errno=0 [ 723.457544][ T30] audit: type=1800 audit(1787096906.588:5297): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=221725 res=0 errno=0 [ 725.475105][ T30] audit: type=1800 audit(1787096906.628:5298): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=221726 res=0 errno=0 [ 726.110606][ T30] audit: type=1800 audit(1787096909.388:5299): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 726.131994][ T5606] usb 6-1: string descriptor 0 read error: -71 [ 726.201436][T14086] jffs2: notice: (14086) jffs2_build_xattr_subsystem: complete building xattr subsystem, 25 of xdatum (0 unchecked, 25 orphan) and 25 of xref (0 dead, 25 orphan) found. [ 726.202011][ T5606] usb 6-1: USB disconnect, device number 66 [ 726.242597][ T30] audit: type=1800 audit(1787096909.468:5300): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 726.329468][T14091] netlink: 'syz.7.1798': attribute type 4 has an invalid length. [ 726.337363][T14091] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1798'. [ 726.349812][T14092] FAULT_INJECTION: forcing a failure. [ 726.349812][T14092] name failslab, interval 1, probability 0, space 0, times 0 [ 726.376269][ T30] audit: type=1400 audit(1787096909.508:5301): avc: denied { write } for pid=14085 comm="syz.0.1797" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 726.498575][T14092] CPU: 1 UID: 0 PID: 14092 Comm: syz.3.1796 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.498611][T14092] Tainted: [L]=SOFTLOCKUP [ 726.498619][T14092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 726.498632][T14092] Call Trace: [ 726.498639][T14092] [ 726.498648][T14092] dump_stack_lvl+0x100/0x190 [ 726.498679][T14092] should_fail_ex.cold+0x5/0xa [ 726.498707][T14092] should_failslab+0xc2/0x120 [ 726.498736][T14092] __kmalloc_noprof+0xfc/0x820 [ 726.498759][T14092] ? rcu_is_watching+0x12/0xc0 [ 726.498790][T14092] ? tomoyo_realpath_from_path+0xb6/0x690 [ 726.498828][T14092] tomoyo_realpath_from_path+0xb6/0x690 [ 726.498866][T14092] tomoyo_path_number_perm+0x23c/0x580 [ 726.498893][T14092] ? tomoyo_path_number_perm+0x22e/0x580 [ 726.498923][T14092] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 726.498980][T14092] ? find_held_lock+0x2b/0x80 [ 726.499000][T14092] ? __fget_files+0x215/0x3d0 [ 726.499023][T14092] ? hook_file_ioctl_common+0x140/0x440 [ 726.499044][T14092] ? __fget_files+0x215/0x3d0 [ 726.499073][T14092] ? __fget_files+0x21f/0x3d0 [ 726.499104][T14092] security_file_ioctl+0xd3/0x230 [ 726.499135][T14092] __x64_sys_ioctl+0xb7/0x210 [ 726.499170][T14092] do_syscall_64+0x115/0x870 [ 726.499199][T14092] ? clear_bhb_loop+0x70/0xc0 [ 726.499225][T14092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.499246][T14092] RIP: 0033:0x7f2b4399e0d9 [ 726.499264][T14092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.499284][T14092] RSP: 002b:00007f2b44835028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.499310][T14092] RAX: ffffffffffffffda RBX: 00007f2b43c25fa0 RCX: 00007f2b4399e0d9 [ 726.499325][T14092] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 726.499338][T14092] RBP: 00007f2b44835090 R08: 0000000000000000 R09: 0000000000000000 [ 726.499352][T14092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.499364][T14092] R13: 00007f2b43c26038 R14: 00007f2b43c25fa0 R15: 00007ffe2f95d288 [ 726.499395][T14092] [ 726.718025][T14092] ERROR: Out of memory at tomoyo_realpath_from_path. [ 726.776312][ T30] audit: type=1400 audit(1787096909.508:5302): avc: denied { write } for pid=14085 comm="syz.0.1797" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 727.110795][T14102] input: syz0 as /devices/virtual/input/input39 [ 727.192820][ T5606] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 727.218975][T14106] kAFS: No cell specified [ 727.312371][T14105] jffs2: notice: (14105) jffs2_build_xattr_subsystem: complete building xattr subsystem, 26 of xdatum (0 unchecked, 26 orphan) and 26 of xref (0 dead, 26 orphan) found. [ 727.385903][ T5606] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 727.401542][ T5606] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.420159][ T5606] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.443988][ T5606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.458391][ T5606] usb 6-1: config 0 descriptor?? [ 727.753099][T14117] loop5: detected capacity change from 0 to 7 [ 727.765282][T14117] Dev loop5: unable to read RDB block 7 [ 727.773958][T14117] loop5: unable to read partition table [ 727.780586][T14117] loop5: partition table beyond EOD, truncated [ 727.789188][T14117] loop_reread_partitions: partition scan of loop5 (~h"+x|Q` ) failed (rc=-5) [ 727.911648][ T5606] arvo 0003:1E7D:30D4.0021: unknown main item tag 0x0 [ 727.912439][T14119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.922797][ T5606] arvo 0003:1E7D:30D4.0021: unknown main item tag 0x0 [ 727.940620][ T5606] arvo 0003:1E7D:30D4.0021: unknown main item tag 0x0 [ 727.949148][ T5606] arvo 0003:1E7D:30D4.0021: unknown main item tag 0x0 [ 727.975885][ T5606] arvo 0003:1E7D:30D4.0021: unknown main item tag 0x0 [ 727.977551][T14119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.988731][ T5606] arvo 0003:1E7D:30D4.0021: unknown main item tag 0x0 [ 728.013370][ T5606] arvo 0003:1E7D:30D4.0021: unknown main item tag 0x0 [ 728.038836][ T5606] arvo 0003:1E7D:30D4.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 728.062839][ T5601] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 728.076561][T14119] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 728.083093][T14119] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 728.113247][T14119] vhci_hcd vhci_hcd.0: Device attached [ 728.215211][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 728.215227][ T30] audit: type=1800 audit(1787096911.498:5332): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16082 res=0 errno=0 [ 728.243249][ T5601] usb 2-1: Using ep0 maxpacket: 16 [ 728.260639][ T5601] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 728.323488][ T5601] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.334666][ T5794] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 728.353590][ T5601] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.367781][ T30] audit: type=1800 audit(1787096911.498:5333): pid=14122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=221936 res=0 errno=0 [ 728.401813][ T5601] usb 2-1: config 0 interface 0 has no altsetting 0 [ 728.413994][ T5794] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 728.424807][ T5601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.457147][ T5601] usb 2-1: config 0 descriptor?? [ 728.462162][ T30] audit: type=1800 audit(1787096911.738:5334): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222032 res=0 errno=0 [ 728.484682][T14087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.516070][T14087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.526384][ T30] audit: type=1800 audit(1787096911.778:5335): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=222061 res=0 errno=0 [ 728.548377][ T30] audit: type=1800 audit(1787096911.778:5336): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=222039 res=0 errno=0 [ 728.569755][ T30] audit: type=1800 audit(1787096911.778:5337): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=222040 res=0 errno=0 [ 728.614469][ T5708] usb 6-1: USB disconnect, device number 67 [ 728.622950][ T30] audit: type=1800 audit(1787096911.778:5338): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=222041 res=0 errno=0 [ 728.695806][ T30] audit: type=1800 audit(1787096911.788:5339): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222087 res=0 errno=0 [ 729.714422][ T4964] Dev loop5: unable to read RDB block 7 [ 729.728598][ T4964] loop5: unable to read partition table [ 729.741297][T14123] vhci_hcd: connection reset by peer [ 729.748780][ T4964] loop5: partition table beyond EOD, truncated [ 729.763451][ T12] vhci_hcd vhci_hcd.0: stop threads [ 729.781501][ T12] vhci_hcd vhci_hcd.0: release socket [ 729.801874][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 729.816222][ T30] audit: type=1800 audit(1787096913.078:5340): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15836 res=0 errno=0 [ 729.937531][ T5601] usbhid 2-1:0.0: can't add hid device: -71 [ 729.956772][ T5601] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 729.974434][ T30] audit: type=1800 audit(1787096913.138:5341): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15221 res=0 errno=0 [ 730.048269][ T5601] usb 2-1: USB disconnect, device number 62 [ 733.537691][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 733.537773][ T30] audit: type=1800 audit(1787096916.718:5346): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15344 res=0 errno=0 [ 733.552855][ T5794] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 733.782833][ C0] ================================================================== [ 733.790915][ C0] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 733.800270][ C0] Read of size 1 at addr ffff88802b618010 by task syz.5.1812/14154 [ 733.808137][ C0] [ 733.810473][ C0] CPU: 0 UID: 0 PID: 14154 Comm: syz.5.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.810492][ C0] Tainted: [L]=SOFTLOCKUP [ 733.810497][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 733.810506][ C0] Call Trace: [ 733.810512][ C0] [ 733.810518][ C0] dump_stack_lvl+0x100/0x190 [ 733.810538][ C0] print_report+0x13d/0x4b0 [ 733.810556][ C0] ? __virt_addr_valid+0x239/0x430 [ 733.810585][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 733.810603][ C0] kasan_report+0xdf/0x1c0 [ 733.810621][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 733.810639][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 733.810656][ C0] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 733.810673][ C0] llc_conn_state_process+0x3ec/0x1480 [ 733.810692][ C0] llc_conn_tmr_common_cb+0x2d4/0x880 [ 733.810706][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 733.810723][ C0] call_timer_fn+0x19a/0x610 [ 733.810738][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 733.810753][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 733.810770][ C0] ? mark_held_locks+0x40/0x70 [ 733.810786][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 733.810803][ C0] __run_timers+0x757/0xb00 [ 733.810820][ C0] ? __pfx___run_timers+0x10/0x10 [ 733.810837][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 733.810855][ C0] run_timer_base+0x114/0x190 [ 733.810869][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 733.810885][ C0] run_timer_softirq+0x1a/0x50 [ 733.810899][ C0] handle_softirqs+0x1ea/0x9b0 [ 733.810917][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 733.810934][ C0] ? _raw_spin_unlock+0x28/0x50 [ 733.810948][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 733.810962][ C0] __irq_exit_rcu+0x162/0x210 [ 733.810978][ C0] irq_exit_rcu+0x9/0x30 [ 733.810994][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 733.811012][ C0] [ 733.811016][ C0] [ 733.811021][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 733.811035][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 733.811052][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 3a e2 24 f6 48 89 df e8 c2 31 25 f6 e8 5d 9b 51 f6 fb bf 01 00 00 00 72 3f 14 f6 65 8b 05 db 76 c3 08 85 c0 74 06 5b e9 81 4b 00 00 [ 733.811065][ C0] RSP: 0018:ffffc90003816a60 EFLAGS: 00000202 [ 733.811076][ C0] RAX: 000000000001407f RBX: ffff88802bb31b88 RCX: 0000000000000040 [ 733.811086][ C0] RDX: 0000000000000000 RSI: ffffffff8e3a7c7f RDI: 0000000000000001 [ 733.811094][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 733.811102][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000cc5 [ 733.811109][ C0] R13: ffffc90003816ad8 R14: 0000000000000000 R15: 0000000000000000 [ 733.811121][ C0] shmem_add_to_page_cache+0x874/0xcd0 [ 733.811136][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 733.811152][ C0] shmem_alloc_and_add_folio+0x558/0xd40 [ 733.811167][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 733.811180][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 733.811195][ C0] shmem_get_folio_gfp+0x6ad/0x1910 [ 733.811210][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 733.811225][ C0] shmem_write_begin+0x1a4/0x420 [ 733.811238][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 733.811252][ C0] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 733.811269][ C0] generic_perform_write+0x292/0xa40 [ 733.811287][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 733.811304][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 733.811323][ C0] ? file_update_time_flags+0x38c/0x520 [ 733.811342][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 733.811357][ C0] shmem_file_write_iter+0x10e/0x140 [ 733.811372][ C0] __kernel_write_iter+0x2ac/0x930 [ 733.811385][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 733.811396][ C0] ? __up_read+0x333/0x980 [ 733.811414][ C0] ? dump_user_range+0x65e/0xad0 [ 733.811428][ C0] ? copy_mc_enhanced_fast_string+0x6/0xf [ 733.811454][ C0] dump_user_range+0x3f9/0xad0 [ 733.811480][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 733.811506][ C0] ? __pfx_writenote+0x10/0x10 [ 733.811519][ C0] ? elf_core_dump+0x1f25/0x3d20 [ 733.811533][ C0] elf_core_dump+0x2d68/0x3d20 [ 733.811550][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 733.811562][ C0] ? kasan_save_stack+0x30/0x50 [ 733.811581][ C0] ? kasan_save_track+0x14/0x30 [ 733.811595][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 733.811608][ C0] ? vfs_coredump+0x21f6/0x54a0 [ 733.811619][ C0] ? get_signal+0x1f2a/0x21e0 [ 733.811635][ C0] ? arch_do_signal_or_restart+0x91/0x7e0 [ 733.811651][ C0] ? 0xffffffffff600000 [ 733.811673][ C0] ? vfs_coredump+0x281a/0x54a0 [ 733.811683][ C0] vfs_coredump+0x281a/0x54a0 [ 733.811697][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 733.811709][ C0] ? __lock_acquire+0x49f/0x1a40 [ 733.811725][ C0] ? __lock_acquire+0x49f/0x1a40 [ 733.811743][ C0] ? lock_acquire+0x1b9/0x370 [ 733.811759][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 733.811778][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 733.811795][ C0] ? arch_stack_walk+0xa6/0xf0 [ 733.811808][ C0] ? __sigqueue_free+0xbe/0x2a0 [ 733.811821][ C0] ? stack_trace_save+0x8e/0xc0 [ 733.811844][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 733.811867][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 733.811896][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 733.811924][ C0] ? proc_coredump_connector+0x2d3/0x4f0 [ 733.811942][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 733.811960][ C0] ? rcu_is_watching+0x12/0xc0 [ 733.811980][ C0] get_signal+0x1f2a/0x21e0 [ 733.811999][ C0] ? __pfx_get_signal+0x10/0x10 [ 733.812017][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 733.812031][ C0] ? find_held_lock+0x2b/0x80 [ 733.812042][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 733.812058][ C0] ? force_sig_info_to_task+0x4d2/0x660 [ 733.812077][ C0] exit_to_user_mode_loop+0x139/0x700 [ 733.812096][ C0] ? rcu_is_watching+0x12/0xc0 [ 733.812115][ C0] do_syscall_64+0x666/0x870 [ 733.812132][ C0] ? clear_bhb_loop+0x70/0xc0 [ 733.812146][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.812159][ C0] RIP: 0033:0x7fcd8619e0d9 [ 733.812169][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.812182][ C0] RSP: 002b:00007fcd8705f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 733.812193][ C0] RAX: 00000000000000ca RBX: 00007fcd86425fa8 RCX: 00007fcd8619e0d9 [ 733.812202][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcd86425fac [ 733.812210][ C0] RBP: 00007fcd86425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 733.812217][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.812225][ C0] R13: 00007fcd86426038 R14: 00007ffcec4674f0 R15: 00007ffcec4675d8 [ 733.812242][ C0] [ 733.812247][ C0] [ 734.474514][ C0] Allocated by task 14162: [ 734.478909][ C0] kasan_save_stack+0x30/0x50 [ 734.483567][ C0] kasan_save_track+0x14/0x30 [ 734.488246][ C0] __kasan_kmalloc+0xaa/0xb0 [ 734.492813][ C0] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 734.498157][ C0] llc_sap_open+0x120/0x3b0 [ 734.502633][ C0] llc_ui_autobind.isra.0+0x2ae/0x580 [ 734.507977][ C0] llc_ui_connect+0x582/0xdb0 [ 734.512626][ C0] __sys_connect_file+0x141/0x1a0 [ 734.517628][ C0] __sys_connect+0x141/0x170 [ 734.522193][ C0] __x64_sys_connect+0x72/0xb0 [ 734.526932][ C0] do_syscall_64+0x115/0x870 [ 734.531502][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.537374][ C0] [ 734.539670][ C0] Freed by task 14074: [ 734.543705][ C0] kasan_save_stack+0x30/0x50 [ 734.548356][ C0] kasan_save_track+0x14/0x30 [ 734.553005][ C0] kasan_save_free_info+0x3b/0x70 [ 734.557999][ C0] __kasan_slab_free+0x5f/0x80 [ 734.562744][ C0] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 734.568177][ C0] rcu_free_sheaf+0x1a/0xe0 [ 734.572649][ C0] rcu_core+0x5a2/0x10d0 [ 734.576867][ C0] handle_softirqs+0x1ea/0x9b0 [ 734.581611][ C0] __irq_exit_rcu+0x162/0x210 [ 734.586265][ C0] irq_exit_rcu+0x9/0x30 [ 734.590481][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 734.596093][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 734.602045][ C0] [ 734.604341][ C0] The buggy address belongs to the object at ffff88802b618000 [ 734.604341][ C0] which belongs to the cache kmalloc-2k of size 2048 [ 734.618364][ C0] The buggy address is located 16 bytes inside of [ 734.618364][ C0] freed 2048-byte region [ffff88802b618000, ffff88802b618800) [ 734.632129][ C0] [ 734.634425][ C0] The buggy address belongs to the physical page: [ 734.640817][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b618 [ 734.649547][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 734.658014][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 734.665526][ C0] page_type: f5(slab) [ 734.669478][ C0] raw: 00fff00000000040 ffff88801c028000 dead000000000100 dead000000000122 [ 734.678049][ C0] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 734.686606][ C0] head: 00fff00000000040 ffff88801c028000 dead000000000100 dead000000000122 [ 734.695247][ C0] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 734.703887][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 734.712530][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 734.721164][ C0] page dumped because: kasan: bad access detected [ 734.727559][ C0] page_owner tracks the page as allocated [ 734.733240][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 7357308291, free_ts 0 [ 734.753296][ C0] post_alloc_hook+0xfd/0x120 [ 734.757950][ C0] get_page_from_freelist+0xf48/0x3530 [ 734.763386][ C0] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 734.769256][ C0] new_slab+0xa2/0x640 [ 734.773294][ C0] refill_objects+0xe3/0x410 [ 734.777854][ C0] __pcs_replace_empty_main+0x376/0x680 [ 734.783377][ C0] __kmalloc_noprof+0x66d/0x820 [ 734.788218][ C0] scsi_alloc_target+0x12f/0xc70 [ 734.793135][ C0] __scsi_scan_target+0x124/0x570 [ 734.798139][ C0] scsi_scan_channel+0x13d/0x1e0 [ 734.803045][ C0] scsi_scan_host_selected+0x2fe/0x3e0 [ 734.808479][ C0] do_scsi_scan_host+0x1f4/0x270 [ 734.813386][ C0] do_scan_async+0x42/0x480 [ 734.817860][ C0] async_run_entry_fn+0x9f/0x580 [ 734.822776][ C0] process_one_work+0xa23/0x1940 [ 734.827684][ C0] worker_thread+0x5ef/0xe50 [ 734.832246][ C0] page_owner free stack trace missing [ 734.837581][ C0] [ 734.839877][ C0] Memory state around the buggy address: [ 734.845500][ C0] ffff88802b617f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 734.853544][ C0] ffff88802b617f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 734.861584][ C0] >ffff88802b618000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 734.869619][ C0] ^ [ 734.874184][ C0] ffff88802b618080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 734.882219][ C0] ffff88802b618100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 734.890252][ C0] ================================================================== [ 734.898380][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 734.905552][ C0] CPU: 0 UID: 0 PID: 14154 Comm: syz.5.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.916469][ C0] Tainted: [L]=SOFTLOCKUP [ 734.920762][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 734.930791][ C0] Call Trace: [ 734.934049][ C0] [ 734.936874][ C0] dump_stack_lvl+0x100/0x190 [ 734.941531][ C0] vpanic+0x552/0x970 [ 734.945487][ C0] ? __pfx_vpanic+0x10/0x10 [ 734.949965][ C0] ? mark_held_locks+0x40/0x70 [ 734.954726][ C0] ? irqentry_exit+0x24d/0xa10 [ 734.959475][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 734.966043][ C0] panic+0xd1/0xe0 [ 734.969739][ C0] ? __pfx_panic+0x10/0x10 [ 734.974131][ C0] ? check_panic_on_warn+0x1f/0x90 [ 734.979216][ C0] check_panic_on_warn.cold+0x19/0x34 [ 734.984566][ C0] end_report.part.0+0x3a/0x90 [ 734.989324][ C0] kasan_report.cold+0xe/0x18 [ 734.993999][ C0] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 735.000569][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 735.006966][ C0] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 735.013881][ C0] llc_conn_state_process+0x3ec/0x1480 [ 735.019323][ C0] llc_conn_tmr_common_cb+0x2d4/0x880 [ 735.024666][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 735.030273][ C0] call_timer_fn+0x19a/0x610 [ 735.034837][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 735.039924][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 735.045550][ C0] ? mark_held_locks+0x40/0x70 [ 735.050299][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 735.055931][ C0] __run_timers+0x757/0xb00 [ 735.060417][ C0] ? __pfx___run_timers+0x10/0x10 [ 735.065419][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 735.070437][ C0] run_timer_base+0x114/0x190 [ 735.075090][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 735.080263][ C0] run_timer_softirq+0x1a/0x50 [ 735.085006][ C0] handle_softirqs+0x1ea/0x9b0 [ 735.089748][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 735.095008][ C0] ? _raw_spin_unlock+0x28/0x50 [ 735.099834][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 735.105441][ C0] __irq_exit_rcu+0x162/0x210 [ 735.110093][ C0] irq_exit_rcu+0x9/0x30 [ 735.114312][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 735.119924][ C0] [ 735.122831][ C0] [ 735.125737][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 735.131689][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 735.137482][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 3a e2 24 f6 48 89 df e8 c2 31 25 f6 e8 5d 9b 51 f6 fb bf 01 00 00 00 72 3f 14 f6 65 8b 05 db 76 c3 08 85 c0 74 06 5b e9 81 4b 00 00 [ 735.157064][ C0] RSP: 0018:ffffc90003816a60 EFLAGS: 00000202 [ 735.163106][ C0] RAX: 000000000001407f RBX: ffff88802bb31b88 RCX: 0000000000000040 [ 735.171048][ C0] RDX: 0000000000000000 RSI: ffffffff8e3a7c7f RDI: 0000000000000001 [ 735.178992][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 735.186936][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000cc5 [ 735.194893][ C0] R13: ffffc90003816ad8 R14: 0000000000000000 R15: 0000000000000000 [ 735.202845][ C0] shmem_add_to_page_cache+0x874/0xcd0 [ 735.208281][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 735.214234][ C0] shmem_alloc_and_add_folio+0x558/0xd40 [ 735.219839][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 735.225964][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 735.231917][ C0] shmem_get_folio_gfp+0x6ad/0x1910 [ 735.237086][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 735.242695][ C0] shmem_write_begin+0x1a4/0x420 [ 735.247621][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 735.253052][ C0] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 735.259878][ C0] generic_perform_write+0x292/0xa40 [ 735.265146][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 735.270931][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 735.276713][ C0] ? file_update_time_flags+0x38c/0x520 [ 735.282254][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 735.288035][ C0] shmem_file_write_iter+0x10e/0x140 [ 735.293298][ C0] __kernel_write_iter+0x2ac/0x930 [ 735.298392][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 735.303996][ C0] ? __up_read+0x333/0x980 [ 735.308397][ C0] ? dump_user_range+0x65e/0xad0 [ 735.313306][ C0] ? copy_mc_enhanced_fast_string+0x6/0xf [ 735.318998][ C0] dump_user_range+0x3f9/0xad0 [ 735.323735][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 735.328992][ C0] ? __pfx_writenote+0x10/0x10 [ 735.333727][ C0] ? elf_core_dump+0x1f25/0x3d20 [ 735.338639][ C0] elf_core_dump+0x2d68/0x3d20 [ 735.343377][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 735.348463][ C0] ? kasan_save_stack+0x30/0x50 [ 735.353289][ C0] ? kasan_save_track+0x14/0x30 [ 735.358114][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 735.362856][ C0] ? vfs_coredump+0x21f6/0x54a0 [ 735.367676][ C0] ? get_signal+0x1f2a/0x21e0 [ 735.372327][ C0] ? arch_do_signal_or_restart+0x91/0x7e0 [ 735.378020][ C0] ? 0xffffffffff600000 [ 735.382157][ C0] ? vfs_coredump+0x281a/0x54a0 [ 735.386977][ C0] vfs_coredump+0x281a/0x54a0 [ 735.391628][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 735.396622][ C0] ? __lock_acquire+0x49f/0x1a40 [ 735.401536][ C0] ? __lock_acquire+0x49f/0x1a40 [ 735.406450][ C0] ? lock_acquire+0x1b9/0x370 [ 735.411103][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 735.415847][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 735.421974][ C0] ? arch_stack_walk+0xa6/0xf0 [ 735.426711][ C0] ? __sigqueue_free+0xbe/0x2a0 [ 735.431533][ C0] ? stack_trace_save+0x8e/0xc0 [ 735.436356][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 735.441697][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 735.446436][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 735.451882][ C0] ? proc_coredump_connector+0x2d3/0x4f0 [ 735.457492][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 735.463458][ C0] ? rcu_is_watching+0x12/0xc0 [ 735.468206][ C0] get_signal+0x1f2a/0x21e0 [ 735.472693][ C0] ? __pfx_get_signal+0x10/0x10 [ 735.477539][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 735.483064][ C0] ? find_held_lock+0x2b/0x80 [ 735.487711][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 735.493839][ C0] ? force_sig_info_to_task+0x4d2/0x660 [ 735.499362][ C0] exit_to_user_mode_loop+0x139/0x700 [ 735.504711][ C0] ? rcu_is_watching+0x12/0xc0 [ 735.509453][ C0] do_syscall_64+0x666/0x870 [ 735.514023][ C0] ? clear_bhb_loop+0x70/0xc0 [ 735.518673][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.524536][ C0] RIP: 0033:0x7fcd8619e0d9 [ 735.528922][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.548505][ C0] RSP: 002b:00007fcd8705f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 735.556891][ C0] RAX: 00000000000000ca RBX: 00007fcd86425fa8 RCX: 00007fcd8619e0d9 [ 735.564834][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcd86425fac [ 735.572797][ C0] RBP: 00007fcd86425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 735.580740][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.588680][ C0] R13: 00007fcd86426038 R14: 00007ffcec4674f0 R15: 00007ffcec4675d8 [ 735.596630][ C0] [ 735.599970][ C0] Kernel Offset: disabled [ 735.604273][ C0] Rebooting in 86400 seconds..