last executing test programs: 2m8.417765184s ago: executing program 1 (id=5148): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='trusted.syz\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000020000000282012800b0001006d616373656300001800028005000900000000ff0c000100000100000000000008000500", @ANYRES32=r7, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) getsockopt$bt_BT_SECURITY(r0, 0x11, 0x4, 0x0, 0x1000000000000) 2m6.217694865s ago: executing program 1 (id=5157): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setresgid(0xee00, 0xee01, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) 2m5.096587366s ago: executing program 1 (id=5158): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x4010}], 0x1, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd22, 0x25dfdbfd, {0x28, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x4, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x250}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee2343ef4674c45e2a085060f11", 0xc6}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_open_dev$MSR(&(0x7f0000000280), 0x6, 0x0) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/34, 0x56}, {&(0x7f0000000540)=""/83, 0xffffff26}], 0x2}, 0x40000000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 2m2.835698872s ago: executing program 1 (id=5166): prlimit64(0x0, 0x5, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x128, 0x37f, 0x148, 0x128, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x23}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x6, 0xffffff19, 'pptp\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 1m59.940897148s ago: executing program 1 (id=5171): flock(0xffffffffffffffff, 0x4) r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) r2 = fsmount(r0, 0x0, 0x0) pivot_root(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x6, 0x3, 0x0, 0x0) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x48) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x190) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') 1m59.644280509s ago: executing program 1 (id=5173): r0 = epoll_create(0x1bf) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400044, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1b) (async, rerun: 64) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000080)=""/220) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x23}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40881}, 0x44085) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) r5 = syz_open_dev$video(&(0x7f0000000340), 0x8, 0x240002) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000380)={0x1, 0x0, 0x102, 0x1, {0x9, 0x8, 0x3, 0x9}}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4810) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x101040, 0x9, 0x8}, 0x18) (async, rerun: 32) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000002380)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002340)={&(0x7f00000005c0)={0x1d58, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x698, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x44, 0xf, [@mesh_chsw={0x76, 0x6, {0xe, 0x7f, 0x2f, 0xb}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x7}, @gcr_ga={0xbd, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0xab, 0x98}}, @gcr_ga={0xbd, 0x6}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @dsss={0x3, 0x1, 0xb}]}, @NL80211_ATTR_PROBE_RESP={0x633, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x6dd]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x3, 0x0, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x8, 0x4]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x168c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x17, 0x7f, [@mesh_chsw={0x76, 0x6, {0x7, 0xc8, 0x21, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x1, 0x6c, 0x7}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_FTM_RESPONDER={0x11b8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x45, 0x3, "8a25f7f695f58306a7134eab9a1e08e083122e48af3314ac101eecdd48e1ec75bfbf71d82e63eb0c66b1f6bedf8ac7bc98f46b454750c539db2574ab19df29294a"}, @NL80211_FTM_RESP_ATTR_LCI={0xcc, 0x2, "01c61684e588c035e5ac61b02a0a1dfe2c22f7d15ac00982bb0e7a897d2ff33ce2655705006857989063904f0fab635d4130c910059ecd1b2f6a49d5baa739e2f250f580b976dda75034221cb0a5a1777a7d8b026767a556469300ba0dd85d04dc51e3d1f3128eeb625ad36b129a6ed3d49f0f29688a1074a4049409f0686d87f84f158eae2440abdabb0bdfb9631f2211f612750897e25afe1c44ee13f40ec098f17e57915008e2a131339838dfcf0d91cda3f13ef3060cff40628bf55b9290555a3755dc10ec30"}, @NL80211_FTM_RESP_ATTR_LCI={0x58, 0x2, "57a0b9907f5da92fb4713ba9b4d80bd2ed2ad7b720291bba780db25761a7649cfffa46117a867436514e80eaa61d8085eb53a0a57f55ab89c651507644a37cff0c78c09984ffa91322093fa2990d064e8711437e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x35, 0x2, "c38f9103004b8bdc0b8eedf63a02b8652a15d41cf2e13d3f580719b88eb6868848c853ae3ff47d78da7499b8d55d673487"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1e, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x1, 0x5}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1e8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x59, 0x2, "8affa3d83fc7fb2f0747b523ddcb2f2bff089c5bcb159e0f11a8ae78ad6d5e13f803d2c36dc9f0f4982c57469af205e3a26a5b840b6219d6687e170f63f117845fe073d66bacb925202201bae466b65e9be38e4330"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf3, 0x3, "02ac57deced5381433c410eb6c7595918c7069a5f7fa2f9899303ce6cd72c3b2f6ccfde709729341f1157121ce1caf781b48127d5a712d202c10d748e79ca636d0744f57a12c6f6227b39ab252fb6fa83de4e4b8a9046843cc11dbd6aa64124e9456e164c70371ade8ea03e2f8a747c5a6f3f1d765e6766a6cb0064a75a0b04b288af980f3234d52f9a62fdf7efb94fa58f2ab886dce65e6003e12cab1a5921a764c87a9e10b506854b8dfef27aa693bd2eb5487ecb65741fcb07ac5acfb0b017c03ff8a9bf85e364e5491821d468a5a91772dadbc50174b20914eb20e88384816b0764b6bce913dac3e0e191d1213"}, @NL80211_FTM_RESP_ATTR_LCI={0x74, 0x2, "8151cee57ec9120abb391c8446bcd1e1a1a0e80708d7e611d49ffecf5f7048e19a3e9dc211bca68508861f8b4e0ad3b7b01343160faf77bf71f61f5f018ef3a1aa54ff0b1304bdc2e1213e745449a795aaebab08bf9c115af47f5cdac43f31842b7e6567d8d5cbed180ec8306d94ac5f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9, 0x3, "b2a16f125a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc, 0x2, "de4acd09b9774623"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c, 0x80, [@mic={0x8c, 0x10, {0xfdf, "fbeb13ce5302", @short="2aafbf8d1de67256"}}, @chsw_timing={0x68, 0x4, {0x7, 0x6}}]}, @NL80211_ATTR_IE={0xc1, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @random_vendor={0xdd, 0xb8, "f903c5546e5d5441bac661a0ec87d791dffbe4d93cac228a595670a1310c19ab6a53c9f6262da6e7a2164c55e7ce5bc37ecb1b65842dc5496f252a0dac79f91a51715cfa4f76e7d0ea3efbb31da6e6f8b98218ab3dbd8441e46c010a8c01b03fb160ccba7d53ed75210b974f782985e03d88058350181253811d2a6bb7cc29dee4e3db22db0ba74378392edcb84cab4d08e3820832a30d07bc3fb12a77c4424183a99a399a138ca78eab4c45d3b3d22565210826cce10743"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1d0, 0x7f, [@erp={0x2a, 0x1, {0x1}}, @random_vendor={0xdd, 0xf3, "03a82a0b2cd2db71ffd7313f6fc22602e0a4bdd3bc46e15d308ad513d1dbb23c54bb1f92bcc3a0de80b9267a03836b1c7a74b96baf8d5b17c529f68fd9452c504def51788e0cbf07d0cb06d225da53d684c519f1ef3f57afb3fbbebf3e85c9167dcf0eb1370a6a0434d7f5062dba9d07ba0b197ba0b121da887226f42652ed60f9da12df2f218c50449fc42d82131490d9ea79d458308d92583e0f3978f9767d30c9bfbc075fb8d65d914698f304d639f3108994a55003a935cad6e417016722deadec49e3604037b39e5d7fec06b3e1797a85a7455902c2e61e494ac7a234e9436dcb3cbad2c15bf54b72431b858109b4c083"}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @ht={0x2d, 0x1a, {0x4000, 0x2, 0x6, 0x0, {0x80000001, 0xd, 0x0, 0x40, 0x0, 0x0, 0x1}, 0x400, 0x1, 0x2}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x1, 0x0, {0x3, 0xd8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffff, 0x80}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0x84, 0x9}}, @perr={0x84, 0x75, {0x6, 0x7, [{{0x0, 0x1}, @broadcast, 0x5, @value, 0x1}, {{0x0, 0x1}, @device_a, 0x241, @value=@device_b, 0x19}, {{}, @device_b, 0xb12c, @void, 0x9}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x1a}, {{}, @device_b, 0x3ff, @void, 0x1}, {{0x0, 0x1}, @device_a, 0xd9, @value=@device_b, 0x20}, {{}, @device_a, 0x6, @void, 0x1e}]}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x25}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x1d58}, 0x1, 0x0, 0x0, 0x8040}, 0x20000004) (async, rerun: 32) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000023c0)={r1, 0x6, 0x4, "077366243cf34b0fc5aada65979244dfee567e7b3d721656ec6413827885bb5e3229ff56596d6cb989e96b3c58e97799be837f001625668034faaadaaae62249230b7a43d4f592aba5acf8143059fca1c7"}) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002480), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x5c, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x5c}}, 0x8000) write(r7, &(0x7f00000025c0)="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", 0xfa) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r9, 0x11, 0x64, &(0x7f00000026c0)=0x2, 0x4) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002700)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "564b09492950c4"}) (rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000003700)={{r10, 0x8, 0x7be, 0x8d, 0x9, 0x6, 0xfffffffffffffffc, 0x3, 0x9, 0x24, 0x8, 0x6f95, 0x7, 0x8}, 0x18, [0x0, 0x0, 0x0]}) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000037c0)="032bd4a21365476c4a44ecb7af88877fcc78ca189c28d43ee034505865c6bfce50655d6cc4d1b73082b05b7e72b89606c7ea7105995d06f23e49960720e5fb49b4bd56fcaf263b5ffca112ad2a3f81d150aafd75fb", 0x55) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003940)={&(0x7f0000003840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x64, 0x0, 0x6d}, @float={0xa, 0x0, 0x0, 0x10, 0x4}, @const={0xe, 0x0, 0x0, 0xa, 0x5}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f00000038c0)=""/108, 0x53, 0x6c, 0x0, 0x5c}, 0x28) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000039c0)={0x5, &(0x7f0000003980)=[{0x4, 0xa, 0x7d, 0x8}, {0xd40, 0x25, 0x80, 0xff}, {0x1, 0xe}, {0x4, 0x5, 0x6, 0x9}, {0x7, 0xd, 0x6, 0x43cb4b8f}]}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003a00), 0x20040, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r11, 0xc040583c, &(0x7f0000003a40)={0x4, 0x6a, 0xffffffff, 0x7f, 0x41ab}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000003a80)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x8000, 0xb86d, 0x100, 0xff, 0x4000004}) 1m44.598262106s ago: executing program 32 (id=5173): r0 = epoll_create(0x1bf) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400044, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1b) (async, rerun: 64) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000080)=""/220) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x23}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40881}, 0x44085) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) r5 = syz_open_dev$video(&(0x7f0000000340), 0x8, 0x240002) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000380)={0x1, 0x0, 0x102, 0x1, {0x9, 0x8, 0x3, 0x9}}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4810) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x101040, 0x9, 0x8}, 0x18) (async, rerun: 32) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000002380)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002340)={&(0x7f00000005c0)={0x1d58, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x698, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x44, 0xf, [@mesh_chsw={0x76, 0x6, {0xe, 0x7f, 0x2f, 0xb}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x7}, @gcr_ga={0xbd, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0xab, 0x98}}, @gcr_ga={0xbd, 0x6}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @dsss={0x3, 0x1, 0xb}]}, @NL80211_ATTR_PROBE_RESP={0x633, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x6dd]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x3, 0x0, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x8, 0x4]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x168c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x17, 0x7f, [@mesh_chsw={0x76, 0x6, {0x7, 0xc8, 0x21, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x1, 0x6c, 0x7}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_FTM_RESPONDER={0x11b8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x45, 0x3, "8a25f7f695f58306a7134eab9a1e08e083122e48af3314ac101eecdd48e1ec75bfbf71d82e63eb0c66b1f6bedf8ac7bc98f46b454750c539db2574ab19df29294a"}, @NL80211_FTM_RESP_ATTR_LCI={0xcc, 0x2, "01c61684e588c035e5ac61b02a0a1dfe2c22f7d15ac00982bb0e7a897d2ff33ce2655705006857989063904f0fab635d4130c910059ecd1b2f6a49d5baa739e2f250f580b976dda75034221cb0a5a1777a7d8b026767a556469300ba0dd85d04dc51e3d1f3128eeb625ad36b129a6ed3d49f0f29688a1074a4049409f0686d87f84f158eae2440abdabb0bdfb9631f2211f612750897e25afe1c44ee13f40ec098f17e57915008e2a131339838dfcf0d91cda3f13ef3060cff40628bf55b9290555a3755dc10ec30"}, @NL80211_FTM_RESP_ATTR_LCI={0x58, 0x2, "57a0b9907f5da92fb4713ba9b4d80bd2ed2ad7b720291bba780db25761a7649cfffa46117a867436514e80eaa61d8085eb53a0a57f55ab89c651507644a37cff0c78c09984ffa91322093fa2990d064e8711437e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x35, 0x2, "c38f9103004b8bdc0b8eedf63a02b8652a15d41cf2e13d3f580719b88eb6868848c853ae3ff47d78da7499b8d55d673487"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1e, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x1, 0x5}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1e8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x59, 0x2, "8affa3d83fc7fb2f0747b523ddcb2f2bff089c5bcb159e0f11a8ae78ad6d5e13f803d2c36dc9f0f4982c57469af205e3a26a5b840b6219d6687e170f63f117845fe073d66bacb925202201bae466b65e9be38e4330"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf3, 0x3, "02ac57deced5381433c410eb6c7595918c7069a5f7fa2f9899303ce6cd72c3b2f6ccfde709729341f1157121ce1caf781b48127d5a712d202c10d748e79ca636d0744f57a12c6f6227b39ab252fb6fa83de4e4b8a9046843cc11dbd6aa64124e9456e164c70371ade8ea03e2f8a747c5a6f3f1d765e6766a6cb0064a75a0b04b288af980f3234d52f9a62fdf7efb94fa58f2ab886dce65e6003e12cab1a5921a764c87a9e10b506854b8dfef27aa693bd2eb5487ecb65741fcb07ac5acfb0b017c03ff8a9bf85e364e5491821d468a5a91772dadbc50174b20914eb20e88384816b0764b6bce913dac3e0e191d1213"}, @NL80211_FTM_RESP_ATTR_LCI={0x74, 0x2, "8151cee57ec9120abb391c8446bcd1e1a1a0e80708d7e611d49ffecf5f7048e19a3e9dc211bca68508861f8b4e0ad3b7b01343160faf77bf71f61f5f018ef3a1aa54ff0b1304bdc2e1213e745449a795aaebab08bf9c115af47f5cdac43f31842b7e6567d8d5cbed180ec8306d94ac5f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9, 0x3, "b2a16f125a"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc, 0x2, "de4acd09b9774623"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c, 0x80, [@mic={0x8c, 0x10, {0xfdf, "fbeb13ce5302", @short="2aafbf8d1de67256"}}, @chsw_timing={0x68, 0x4, {0x7, 0x6}}]}, @NL80211_ATTR_IE={0xc1, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @random_vendor={0xdd, 0xb8, "f903c5546e5d5441bac661a0ec87d791dffbe4d93cac228a595670a1310c19ab6a53c9f6262da6e7a2164c55e7ce5bc37ecb1b65842dc5496f252a0dac79f91a51715cfa4f76e7d0ea3efbb31da6e6f8b98218ab3dbd8441e46c010a8c01b03fb160ccba7d53ed75210b974f782985e03d88058350181253811d2a6bb7cc29dee4e3db22db0ba74378392edcb84cab4d08e3820832a30d07bc3fb12a77c4424183a99a399a138ca78eab4c45d3b3d22565210826cce10743"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1d0, 0x7f, [@erp={0x2a, 0x1, {0x1}}, @random_vendor={0xdd, 0xf3, "03a82a0b2cd2db71ffd7313f6fc22602e0a4bdd3bc46e15d308ad513d1dbb23c54bb1f92bcc3a0de80b9267a03836b1c7a74b96baf8d5b17c529f68fd9452c504def51788e0cbf07d0cb06d225da53d684c519f1ef3f57afb3fbbebf3e85c9167dcf0eb1370a6a0434d7f5062dba9d07ba0b197ba0b121da887226f42652ed60f9da12df2f218c50449fc42d82131490d9ea79d458308d92583e0f3978f9767d30c9bfbc075fb8d65d914698f304d639f3108994a55003a935cad6e417016722deadec49e3604037b39e5d7fec06b3e1797a85a7455902c2e61e494ac7a234e9436dcb3cbad2c15bf54b72431b858109b4c083"}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @ht={0x2d, 0x1a, {0x4000, 0x2, 0x6, 0x0, {0x80000001, 0xd, 0x0, 0x40, 0x0, 0x0, 0x1}, 0x400, 0x1, 0x2}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x1, 0x0, {0x3, 0xd8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffff, 0x80}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0x84, 0x9}}, @perr={0x84, 0x75, {0x6, 0x7, [{{0x0, 0x1}, @broadcast, 0x5, @value, 0x1}, {{0x0, 0x1}, @device_a, 0x241, @value=@device_b, 0x19}, {{}, @device_b, 0xb12c, @void, 0x9}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x1a}, {{}, @device_b, 0x3ff, @void, 0x1}, {{0x0, 0x1}, @device_a, 0xd9, @value=@device_b, 0x20}, {{}, @device_a, 0x6, @void, 0x1e}]}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x25}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x1d58}, 0x1, 0x0, 0x0, 0x8040}, 0x20000004) (async, rerun: 32) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000023c0)={r1, 0x6, 0x4, "077366243cf34b0fc5aada65979244dfee567e7b3d721656ec6413827885bb5e3229ff56596d6cb989e96b3c58e97799be837f001625668034faaadaaae62249230b7a43d4f592aba5acf8143059fca1c7"}) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002480), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x5c, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x5c}}, 0x8000) write(r7, &(0x7f00000025c0)="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", 0xfa) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r9, 0x11, 0x64, &(0x7f00000026c0)=0x2, 0x4) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002700)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "564b09492950c4"}) (rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000003700)={{r10, 0x8, 0x7be, 0x8d, 0x9, 0x6, 0xfffffffffffffffc, 0x3, 0x9, 0x24, 0x8, 0x6f95, 0x7, 0x8}, 0x18, [0x0, 0x0, 0x0]}) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000037c0)="032bd4a21365476c4a44ecb7af88877fcc78ca189c28d43ee034505865c6bfce50655d6cc4d1b73082b05b7e72b89606c7ea7105995d06f23e49960720e5fb49b4bd56fcaf263b5ffca112ad2a3f81d150aafd75fb", 0x55) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003940)={&(0x7f0000003840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x64, 0x0, 0x6d}, @float={0xa, 0x0, 0x0, 0x10, 0x4}, @const={0xe, 0x0, 0x0, 0xa, 0x5}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f00000038c0)=""/108, 0x53, 0x6c, 0x0, 0x5c}, 0x28) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000039c0)={0x5, &(0x7f0000003980)=[{0x4, 0xa, 0x7d, 0x8}, {0xd40, 0x25, 0x80, 0xff}, {0x1, 0xe}, {0x4, 0x5, 0x6, 0x9}, {0x7, 0xd, 0x6, 0x43cb4b8f}]}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003a00), 0x20040, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r11, 0xc040583c, &(0x7f0000003a40)={0x4, 0x6a, 0xffffffff, 0x7f, 0x41ab}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000003a80)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x8000, 0xb86d, 0x100, 0xff, 0x4000004}) 11.096598863s ago: executing program 5 (id=5447): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) fsopen(&(0x7f0000000080)='msdos\x00', 0x0) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000140)={"ed475e3264aed5b7b76328ed869298258552cfec7d8c4b1791a7c120b23f6b11", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0}) 10.471654237s ago: executing program 2 (id=5448): setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, 0x0) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 10.252774511s ago: executing program 2 (id=5450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f00090582"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30"], 0xcdc}}, 0x0) 9.834653658s ago: executing program 5 (id=5451): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000500)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) copy_file_range(r3, &(0x7f00000001c0)=0x8, r2, &(0x7f00000003c0)=0x1, 0x8, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x70, 0x8310000, 0x3ff, 0xff, 0x3, 0xa54, 0x0, 0x0, 0x10, 0x20000000}}, 0x50) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xd042, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x10001fc, 0x6, 0xffff1894, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000040) r8 = socket(0x80000000000000a, 0x2, 0x0) close(r8) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x94, &(0x7f0000000640)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x6, @remote}, @in6={0xa, 0x4e23, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e20, 0x403, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r10, @ANYBLOB='\x003VJ'], 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000540)={r10, @in6={{0xa, 0x4e20, 0xa481, @private0, 0x5}}, 0xdb, 0x9}, 0x90) 9.368714721s ago: executing program 5 (id=5453): r0 = socket$kcm(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r3 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82c, 0x0, 0x0, 0x1}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r3, 0x47bc, 0x3000000, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x84, @local, 0x4e20, 0x3, 'lc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x28, 0x6c}, {@loopback, 0x4e22, 0x0, 0x9, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xb00}, 0x0) 9.199741388s ago: executing program 4 (id=5454): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0xfc}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}]}}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000500)={0x2, 0x108000}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f000065b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0x1000, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000024d45fbe838540f8000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800050002000000"], 0x3c}}, 0x0) 8.432497041s ago: executing program 5 (id=5456): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x82, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x6ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 7.63479103s ago: executing program 3 (id=5457): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 7.619341292s ago: executing program 4 (id=5458): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x22, 0x2, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4b, &(0x7f0000000080)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) read$ptp(r6, &(0x7f00000004c0)=""/4096, 0x1000) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf254b00000008000300010000000e0001fe6e657464657673696d0000000f0002006e657464657673696d3000ff"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x100000000}) io_uring_setup(0x1b7b, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x3f}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 7.483603445s ago: executing program 3 (id=5459): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x22, 0x2, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4b, &(0x7f0000000080)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) read$ptp(r6, &(0x7f00000004c0)=""/4096, 0x1000) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf254b00000008000300010000000e0001fe6e657464657673696d0000000f0002006e657464657673696d3000ff"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x100000000}) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x3f}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 6.750073275s ago: executing program 0 (id=5461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) read$qrtrtun(r2, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a31000000000800054000000001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 6.650643402s ago: executing program 4 (id=5462): r0 = syz_usb_connect$cdc_ecm(0x6, 0x55, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, '\tO'}, {0x5, 0x24, 0x0, 0x5}, {0xd}, [@ncm={0x6, 0x24, 0x1a, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x10, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 6.3807568s ago: executing program 2 (id=5463): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/15, @ANYRES32=r0, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x4c, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f", 0x45}], 0x6}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf72}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.379191242s ago: executing program 3 (id=5464): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r0, r0, 0x0, 0x7f03) (fail_nth: 2) 6.048220563s ago: executing program 3 (id=5465): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x22, 0x2, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4b, &(0x7f0000000080)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) read$ptp(r6, &(0x7f00000004c0)=""/4096, 0x1000) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf254b00000008000300010000000e0001fe6e657464657673696d0000000f0002006e657464657673696d3000ff"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x100000000}) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x3f}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 5.766119024s ago: executing program 0 (id=5466): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000080000000000000008"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r4 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 5.499244574s ago: executing program 2 (id=5467): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000a7a579600000000000000080000000008000340000010e7"], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x149181, 0x0) write$proc_mixer(r6, 0x0, 0x5) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00", @ANYRES16=r5, @ANYBLOB="01000000000001000000080006000000000000000000"], 0x1c}}, 0x810) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18, 0xe90be1542114b3bb}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x2, 0x1, 0x200000, 0x0, 0x1, 0x0, {0x4003, 0x200000000, 0x0, 0x6, 0x3, 0x0, 0x0, 0xfffffbff, 0x10, 0x6000, 0x2, 0x0, 0x0, 0x1ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x21042, 0x136) 4.49125514s ago: executing program 5 (id=5468): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/15, @ANYRES32=r0, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x4c, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.451954053s ago: executing program 3 (id=5469): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0xfc}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}]}}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000500)={0x2, 0x108000}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f000065b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0x1000, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000024d45fbe838540f8000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800050002000000"], 0x3c}}, 0x0) 4.002853576s ago: executing program 0 (id=5470): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b52, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@llc={0x1a, 0x20, 0x4, 0x4a, 0x40, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000003e913a00100100dc394957a2e3218af939bedbd1daa019dda39e6d13476e0dad71b79b316917e94c8edacf8b43e4deb36916b76f2b14ff0f7d040577a4640a684f92c18a0017d7f1ac06e2e0f669fe34068007ce4daf469ec1420bfe6ddadf4c30957d285d731654", @ANYBLOB="4f50cf7624abd19256d3c80683efd8ad5478ccc088c4cc0a28e77c24fa1eac2050b6192dc0fcfcb393f794b66bd5904b32e8f513015ff7b38584fd4d678c7bab3dfc844302b01a4d7867d158b24200b61edd969e96b98f703190bb64227b252cfd6149a6f91c9af48f208ff2a8be1b644420353d149f825064a21fd925f554bbfa4ba31195a53dee8f186f5ad85af582ec1aa7ca1124985ee0c166821afd1b347375a27bd414511adfe6cc0bd38599ac0ade2cf8f04b78af4321e59d358e611f55"], 0x18}, 0x0) sendmsg$kcm(r4, 0x0, 0x240048c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) 3.584915902s ago: executing program 4 (id=5471): setresgid(0xee00, 0xee01, 0x0) r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, 0x0, 0x0) r1 = syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 3.133732732s ago: executing program 2 (id=5472): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000040)) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 3.121674609s ago: executing program 3 (id=5473): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpgid(0xffffffffffffffff) getpid() msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/153) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100", 0x7) fsopen(&(0x7f0000000080)='msdos\x00', 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) writev(r3, &(0x7f0000000040), 0x0) sendto$inet6(r3, &(0x7f0000000300)="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", 0x137, 0x8040, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000140)={"ed475e3264aed5b7b76328ed869298258552cfec7d8c4b1791a7c120b23f6b11", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0}) 2.50953s ago: executing program 5 (id=5474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000019380)={0x0, 0x0, &(0x7f00000193c0)={0x0}, 0x1, 0x0, 0x0, 0x4044890}, 0x40484c1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'virt_wifi0\x00', 0x2000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x1a, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x10, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102392, 0x18ff8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) dup3(r7, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x7, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0x9}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x804400, &(0x7f0000019300)=ANY=[@ANYRESHEX]) 2.426873507s ago: executing program 4 (id=5475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8f, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x80, 0x5308, 0xfffffffffffffffb, 0x40004, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x80405600, &(0x7f00000004c0)={0x2, 0x7e, 0x2}) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18a018}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000000900000000000000000000000000080005400000001118000340000000060800034000000001e2c56d8e2a338378d8b72692802a88ec4daa281b5f33935558710b257f8fce04f0dbe800"/91], 0x38}, 0x1, 0x0, 0x0, 0x2008044}, 0x20000000) r3 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) write$tun(r5, &(0x7f0000000640)={@void, @void, @ipv6=@icmpv6={0x3, 0x6, "31fddf", 0x420, 0x3a, 0x0, @mcast2, @remote, {[@srh={0x32, 0x0, 0x4, 0x0, 0x1, 0x8, 0x3}, @hopopts={0x0, 0x1d, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @pad1, @generic={0xa, 0xab, "1924619e74ad3bff2a7092cf5fb0dfbaaf4aed1527b01e8626dcaab4bfb3407937e0383e76d30edd480ce4cb4bcb8778f0c9b46c5efe0624486d871aeb28a8b7dcb5666f5c7d61dcc5a09f4b1726668727b8b36b0dae67b0e81f90f71162af20d5006863abfe2415f05e3261783b9de50d85daf5b199a97511295752d047b23b17d0735522e3b9381028da0e237f877c84c60824b72f1155300b14eb2794dc20a66761e4242a3c92232eeb"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x4e69, [0x9, 0x0, 0xfffffffffffffffb]}}, @padn, @hao={0xc9, 0x10, @mcast2}]}, @srh={0x84, 0x8, 0x4, 0x4, 0x9, 0x20, 0x6, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local]}, @dstopts={0x3c, 0x9, '\x00', [@generic={0x8d, 0x47, "cf51446c151f016c6828d7c3917969e455916a8e4c6346e2abf2c164015db69dd23457b075f2ef86af64ab46b50bbf1855493d81d244b5f6522a82699090d82cef4fb2dad87741"}]}], @ndisc_na={0x88, 0x0, 0x0, 0x1, '\x00', @private2={0xfc, 0x2, '\x00', 0x1}, [{0x2, 0x9, "6b42f6d09495b7b0cad87fa7672114dcb0485de91102719e7861ec64ee0f5c6c02ee8e9e4d7b1214679cc2af8f1bd9856a6ff80ff9886ee86c6615d8515f14444f8b6d6987921217ee14"}, {0x1f, 0x14, "bf5ea30b00891141873fed67d4e20ea5efb1deb62dc7af4a38ebf65ce947cab0485cc7a324046d7c535ee9b804ae1e7bff1e6b48b5f0829273251caeeb3a16ba00b4558baff16dfe2cf181be08ed8797ee8bb0387326d69867b612c84e6a37560f762647897d5ce639e6af5805202291eb08c63c65612ef3c44da5f9fd60cd0615ac715ca3d7d9ac30ced34dc37191c66f50f263790508e779f5baa23d81c0"}, {0x3, 0x13, "1d990de4ac37bd2f3367bfd19041eac8f02a9335b619cfafe4c691d40cb798342fad0ac48c003d2a853f9d7a370aaf73c096c783d3a2e1647296e219ea7b64f13a72a78bc2961fce255aed8f5d7bc579c93b050b2a28912687b83d1fddb1d69db21384563d538b51d33ea2f451c9315763d0f3ed790152693298ac7823088f2c1fb736f99d963d12f406e306919a487669b964ce7ee1"}, {0x3, 0xd, "4ed046212c32f07cea720ca0402eece51beb2a30927aa6c74b59dcb2c2b390bec803117860e160b2fffeba47e78b2d958be27649f722531f08cbcd7f6fbd91dc5ebd4e5b4cd52efa82daacae3f25e47693d788d5f06a21b8dead68838b186a3a91f2a4e4ef8a05c2311b4a"}, {0x1, 0xd, "670ca644f4998a9265678e4034988b3aa60b858e9d05536eb22091305b9c27d5e6c0727eb41d968fe78d4052c3df09ccac307833841181879d956ace39911c9083966e5bc54593203f7faa4696b88e317d3c103a9771f2fb34f072468e4d7ceb03fea4759f2d8486ffdd"}, {0x19, 0x1, "aed534863a167184"}]}}}}, 0x448) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000ff0000060007ee0800030000000000005d6caece0045a37f8e6b492517497b6b287bd34856a6a95b5b60d5e8e9057cad29080d3b38cc3dbc54cd5fc926ebe8c2566bb5661ca094f9714b159e1bcd5decae1831ede794174828a08e1ad013262e49e1086675291d0c948d0c53b21e44f19d7bd92309d1a5858022b6199c8de4aa3484e67056e102cd6349ec29d208fdd7f5989c11fce3da8682755478700d624380c7ede680b9742c69e57ceb0da3da5dc601", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000f70100002100000008000300", @ANYRES32=r8, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_b, @random="b74c19924514", {0xd, 0x4}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0xc, @val={0x8c, 0x10, {0xff3, "9d7eaa9c83d0", @short="c00ebba6d582efaf"}}}, 0x30) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}], 0x1}) 2.29026935s ago: executing program 0 (id=5476): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) capset(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x203, r0, 0x2}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="a000a8832206e809cc5a293169659c50c7059240fd8a7994044fbab9e7a9e370086d339eb8b3f7c0e9b76ee90400f912abe5f1b7d88a10bc47521a3212d37fedcb2f61a09bc553300e883cf1d433be8031f9a9a7bf", @ANYRES64], 0xa0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x53) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) setrlimit(0xa, &(0x7f00000001c0)={0x78}) ioctl$TIOCMIWAIT(r4, 0x5453, 0x300fff2) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003140100000000000000000109000200f9007278650014003300fb766c616e3100000000000000000074a1e7e94fcdd096af12e2c629c8e5101df2902b9e3f472965e4e12f3f71aa047fc50668ab"], 0x38}, 0x1, 0x0, 0x0, 0x2000c889}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = gettid() r7 = fsopen(&(0x7f0000000400)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000100)={0x2, 0x0, [{0x1, 0x6, 0x1, 0xd, 0x2007, 0x7}, {0xa, 0x2, 0x7, 0x4, 0x7fff, 0x6, 0x70}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_robust_list(&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f00000003c0)}, 0x1, &(0x7f00000004c0)={&(0x7f0000000480)}}, 0x18) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000", @ANYRES16=r8], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) 1.779275936s ago: executing program 0 (id=5477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) ioctl$int_in(r3, 0x5421, &(0x7f0000000280)=0x1d) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = socket$inet(0x2, 0x801, 0x0) listen(r5, 0x540) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000cd61b8a3f900000400000000", @ANYRES32=r4, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000010000000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 616.319039ms ago: executing program 0 (id=5479): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3, 0x3}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 238.14901ms ago: executing program 2 (id=5480): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000084) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = eventfd(0x0) io_submit(0x0, 0x35, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x100, r5, &(0x7f0000000140)="20004075f40d00004b", 0x9, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x1000d, 0x0, 0x3, r5}]) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000f9ffffff1100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x24000850}, 0x4040040) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0xfffd, 0x4, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) 0s ago: executing program 4 (id=5481): openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x200000, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3503, 0x3, 0x0, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x1, 0x0, 0x1, 0x0, 0xabf, 0x1000004}, {{@in6=@loopback, 0x4d0, 0x2b}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x9, 0x0, 0x4}]}]}, 0x17c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000240002801400018008000100e000000208000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200000000000c0002800500010000000000300001802c000180140001"], 0x8c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r8], 0x50}, 0x1, 0xba01}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) sendto$inet6(r10, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 58.620512][ T5952] corsair 0003:1B1C:1B3E.0036: unknown main item tag 0x0 [ 1658.647452][ T5858] gspca_cpia1: usb_control_msg 01, error -32 [ 1658.660885][ T5858] gspca_cpia1: usb_control_msg 01, error -32 [ 1658.674219][ T5952] corsair 0003:1B1C:1B3E.0036: hidraw0: USB HID v6f.fd Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 1658.687659][ T5858] gspca_cpia1: usb_control_msg 01, error -32 [ 1658.713025][ T5858] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1658.896623][ T5952] usb 5-1: USB disconnect, device number 52 [ 1659.160658][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.221150][T25986] fido_id[25986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1659.374560][ T29] audit: type=1400 audit(2000000069.190:1909): avc: denied { mount } for pid=25988 comm="syz.1.5171" name="/" dev="hugetlbfs" ino=129292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1659.473833][ T29] audit: type=1400 audit(2000000069.190:1910): avc: denied { mount } for pid=25988 comm="syz.1.5171" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1659.517710][T25992] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1659.534126][T25992] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1659.563234][T25992] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1659.583031][ T29] audit: type=1400 audit(2000000069.190:1911): avc: denied { mounton } for pid=25988 comm="syz.1.5171" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1659.650256][ T29] audit: type=1400 audit(2000000069.280:1912): avc: denied { unmount } for pid=18248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1660.007438][T26002] FAULT_INJECTION: forcing a failure. [ 1660.007438][T26002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1660.020588][T26002] CPU: 0 UID: 0 PID: 26002 Comm: syz.0.5175 Tainted: G L syzkaller #0 PREEMPT(full) [ 1660.020615][T26002] Tainted: [L]=SOFTLOCKUP [ 1660.020621][T26002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1660.020631][T26002] Call Trace: [ 1660.020638][T26002] [ 1660.020646][T26002] dump_stack_lvl+0x100/0x190 [ 1660.020678][T26002] should_fail_ex.cold+0x5/0xa [ 1660.020706][T26002] _copy_from_user+0x2e/0xd0 [ 1660.020735][T26002] do_ip6t_set_ctl+0x877/0xba0 [ 1660.020762][T26002] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1660.020795][T26002] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1660.020824][T26002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1660.020860][T26002] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1660.020889][T26002] nf_setsockopt+0x8d/0xf0 [ 1660.020917][T26002] ipv6_setsockopt+0x135/0x170 [ 1660.020946][T26002] udpv6_setsockopt+0x7d/0xd0 [ 1660.020964][T26002] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1660.020992][T26002] do_sock_setsockopt+0xf3/0x1d0 [ 1660.021020][T26002] __sys_setsockopt+0x195/0x220 [ 1660.021045][T26002] __x64_sys_setsockopt+0xbd/0x160 [ 1660.021065][T26002] ? do_syscall_64+0x95/0xf80 [ 1660.021092][T26002] ? lockdep_hardirqs_on+0x78/0x100 [ 1660.021113][T26002] do_syscall_64+0x106/0xf80 [ 1660.021134][T26002] ? clear_bhb_loop+0x40/0x90 [ 1660.021156][T26002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.021173][T26002] RIP: 0033:0x7f405f19c799 [ 1660.021189][T26002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1660.021213][T26002] RSP: 002b:00007f40600cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1660.021231][T26002] RAX: ffffffffffffffda RBX: 00007f405f416180 RCX: 00007f405f19c799 [ 1660.021242][T26002] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 1660.021252][T26002] RBP: 00007f40600cf090 R08: 00000000000004a0 R09: 0000000000000000 [ 1660.021263][T26002] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1660.021273][T26002] R13: 00007f405f416218 R14: 00007f405f416180 R15: 00007ffea8a8be38 [ 1660.021297][T26002] [ 1660.280969][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.417249][T26004] netlink: 'syz.4.5178': attribute type 10 has an invalid length. [ 1660.425291][T26004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.432439][T26004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.470817][T26004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.478051][T26004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1660.485427][T26004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.492465][T26004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1660.506070][T26004] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1660.756774][ T29] audit: type=1400 audit(2000000070.590:1913): avc: denied { connect } for pid=26003 comm="syz.4.5178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1660.826252][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.854477][T26012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.862738][T26012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.903563][T26012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.219704][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1661.226116][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1661.348225][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.348856][T26012] ceph: No mds server is up or the cluster is laggy [ 1661.495461][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1661.503477][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1661.514839][T26022] ptrace attach of "./syz-executor exec"[17581] was attempted by "./syz-executor exec"[26022] [ 1661.634369][T26009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.650313][ T29] audit: type=1400 audit(2000000071.480:1914): avc: denied { setattr } for pid=26009 comm="syz.0.5179" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1661.683486][T26009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.864439][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.080550][ T5865] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1662.753307][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 1662.786300][ T5865] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1662.805004][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1662.813098][ T5865] usb 3-1: Product: syz [ 1662.831757][ T5865] usb 3-1: Manufacturer: syz [ 1662.850192][ T5865] usb 3-1: SerialNumber: syz [ 1662.874162][ T5865] usb 3-1: config 0 descriptor?? [ 1662.905875][ T5865] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1663.146641][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1663.393582][ T5865] gspca_sn9c2028: read1 error -32 [ 1663.903592][ T5865] gspca_sn9c2028: read1 error -110 [ 1663.914573][ T5865] gspca_sn9c2028: read1 error -32 [ 1663.943426][ T5865] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1664.056945][ T5865] usb 4-1: USB disconnect, device number 53 [ 1664.674455][ T5865] net_ratelimit: 3 callbacks suppressed [ 1664.674471][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.833137][T11688] usb 3-1: USB disconnect, device number 85 [ 1665.396775][T26051] FAULT_INJECTION: forcing a failure. [ 1665.396775][T26051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.409984][T26051] CPU: 0 UID: 0 PID: 26051 Comm: syz.3.5189 Tainted: G L syzkaller #0 PREEMPT(full) [ 1665.410006][T26051] Tainted: [L]=SOFTLOCKUP [ 1665.410011][T26051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1665.410018][T26051] Call Trace: [ 1665.410023][T26051] [ 1665.410029][T26051] dump_stack_lvl+0x100/0x190 [ 1665.410051][T26051] should_fail_ex.cold+0x5/0xa [ 1665.410066][T26051] strncpy_from_user+0x3b/0x2d0 [ 1665.410086][T26051] path_setxattrat+0x127/0x3b0 [ 1665.410100][T26051] ? __pfx_path_setxattrat+0x10/0x10 [ 1665.410115][T26051] ? __schedule+0x2fd3/0x6120 [ 1665.410141][T26051] ? __pfx___schedule+0x10/0x10 [ 1665.410156][T26051] __x64_sys_fsetxattr+0xc5/0x140 [ 1665.410174][T26051] ? do_syscall_64+0x95/0xf80 [ 1665.410192][T26051] ? lockdep_hardirqs_on+0x78/0x100 [ 1665.410206][T26051] do_syscall_64+0x106/0xf80 [ 1665.410219][T26051] ? clear_bhb_loop+0x40/0x90 [ 1665.410233][T26051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.410245][T26051] RIP: 0033:0x7f9a43f9c799 [ 1665.410255][T26051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1665.410265][T26051] RSP: 002b:00007f9a44e11028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1665.410276][T26051] RAX: ffffffffffffffda RBX: 00007f9a44216090 RCX: 00007f9a43f9c799 [ 1665.410284][T26051] RDX: 0000200000000700 RSI: 0000200000000140 RDI: 0000000000000003 [ 1665.410290][T26051] RBP: 00007f9a44e11090 R08: 0000000000000001 R09: 0000000000000000 [ 1665.410297][T26051] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 1665.410304][T26051] R13: 00007f9a44216128 R14: 00007f9a44216090 R15: 00007ffc9c24c068 [ 1665.410318][T26051] [ 1665.703861][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.734124][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.714671][ T29] audit: type=1400 audit(2000000076.530:1915): avc: denied { mount } for pid=26067 comm="syz.4.5194" name="/" dev="overlay" ino=2464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1666.751969][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.913326][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.962102][ T29] audit: type=1400 audit(2000000076.780:1916): avc: denied { read write } for pid=26067 comm="syz.4.5194" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1666.990525][T26074] netlink: 'syz.4.5194': attribute type 39 has an invalid length. [ 1667.033322][ T29] audit: type=1400 audit(2000000076.790:1917): avc: denied { open } for pid=26067 comm="syz.4.5194" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1667.351830][T26077] lo speed is unknown, defaulting to 1000 [ 1667.675866][ T5865] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1667.685022][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.786921][T26085] comedi comedi4: bad chanlist[1]=0x00000040 chan=64 range length=2 [ 1667.795304][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.883317][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1667.920684][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1668.004902][ T5865] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1668.019549][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.090658][T26088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5198'. [ 1668.310229][ T5865] usb 3-1: Product: syz [ 1668.314594][ T5865] usb 3-1: Manufacturer: syz [ 1668.319182][ T5865] usb 3-1: SerialNumber: syz [ 1668.330976][ T5865] usb 3-1: config 0 descriptor?? [ 1668.361154][T26081] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1668.370750][ T5865] port100 3-1:0.0: NFC: Could not get supported command types [ 1668.586046][ T5865] usb 3-1: USB disconnect, device number 86 [ 1668.831848][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.642619][ T29] audit: type=1400 audit(2000000079.480:1918): avc: denied { unmount } for pid=17581 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1669.873436][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.106953][ T24] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1670.240843][ T29] audit: type=1400 audit(2000000080.080:1919): avc: denied { create } for pid=26098 comm="syz.2.5202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1670.310375][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.322245][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.335275][T26100] FAULT_INJECTION: forcing a failure. [ 1670.335275][T26100] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.365757][T26100] CPU: 0 UID: 0 PID: 26100 Comm: syz.2.5202 Tainted: G L syzkaller #0 PREEMPT(full) [ 1670.365784][T26100] Tainted: [L]=SOFTLOCKUP [ 1670.365791][T26100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1670.365802][T26100] Call Trace: [ 1670.365808][T26100] [ 1670.365815][T26100] dump_stack_lvl+0x100/0x190 [ 1670.365847][T26100] should_fail_ex.cold+0x5/0xa [ 1670.365869][T26100] should_failslab+0xc2/0x120 [ 1670.365886][T26100] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1670.365911][T26100] ? __alloc_skb+0x140/0x710 [ 1670.365943][T26100] __alloc_skb+0x140/0x710 [ 1670.365962][T26100] ? __alloc_skb+0x5b7/0x710 [ 1670.365980][T26100] ? __pfx___alloc_skb+0x10/0x10 [ 1670.366007][T26100] netlink_alloc_large_skb+0x69/0x150 [ 1670.366033][T26100] netlink_sendmsg+0x680/0xda0 [ 1670.366061][T26100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.366084][T26100] ? __might_fault+0x20/0x140 [ 1670.366116][T26100] ____sys_sendmsg+0x9e1/0xb70 [ 1670.366140][T26100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.366166][T26100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1670.366196][T26100] ? __pfx__kstrtoull+0x10/0x10 [ 1670.366223][T26100] ___sys_sendmsg+0x190/0x1e0 [ 1670.366252][T26100] ? __pfx____sys_sendmsg+0x10/0x10 [ 1670.366288][T26100] ? find_held_lock+0x2b/0x80 [ 1670.366326][T26100] __sys_sendmmsg+0x205/0x430 [ 1670.366352][T26100] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1670.366381][T26100] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1670.366415][T26100] ? fput+0x79/0x100 [ 1670.366435][T26100] ? ksys_write+0x1ac/0x250 [ 1670.366460][T26100] ? __pfx_ksys_write+0x10/0x10 [ 1670.366490][T26100] __x64_sys_sendmmsg+0x9c/0x100 [ 1670.366512][T26100] ? lockdep_hardirqs_on+0x78/0x100 [ 1670.366533][T26100] do_syscall_64+0x106/0xf80 [ 1670.366555][T26100] ? clear_bhb_loop+0x40/0x90 [ 1670.366576][T26100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.366593][T26100] RIP: 0033:0x7f4bba19c799 [ 1670.366608][T26100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.366624][T26100] RSP: 002b:00007f4bbb13e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1670.366641][T26100] RAX: ffffffffffffffda RBX: 00007f4bba415fa0 RCX: 00007f4bba19c799 [ 1670.366653][T26100] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 1670.366663][T26100] RBP: 00007f4bbb13e090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.366673][T26100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.366682][T26100] R13: 00007f4bba416038 R14: 00007f4bba415fa0 R15: 00007ffcf4e41e78 [ 1670.366705][T26100] [ 1670.374535][ T24] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1670.493325][ T29] audit: type=1400 audit(2000000080.120:1920): avc: denied { write } for pid=26098 comm="syz.2.5202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1670.913463][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.003255][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.087477][ T24] usb 4-1: config 0 descriptor?? [ 1671.098188][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1671.179742][T26107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5205'. [ 1671.276242][ T29] audit: type=1400 audit(2000000080.690:1921): avc: denied { write } for pid=26101 comm="syz.2.5203" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1671.626626][T26094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.646466][T26094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.662830][T26094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5200'. [ 1671.820868][ T24] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1672.039218][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.088769][T26094] vlan2: entered allmulticast mode [ 1672.219686][T26115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.238191][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.664162][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1672.678807][T26115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.686624][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.713228][ T24] usb 3-1: config 0 descriptor?? [ 1672.727415][ T24] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 1672.738622][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 1672.748357][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 1672.763516][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 1672.771243][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 1672.780013][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 1672.790322][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 1672.798172][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 1672.807234][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 1672.816724][ T24] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1672.827614][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 1672.836250][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 1672.879568][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 1672.916279][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 1672.997285][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 1673.014211][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 1673.030068][T11688] usb 4-1: USB disconnect, device number 54 [ 1673.064760][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.066758][ T24] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1673.099371][ T24] usb 3-1: USB disconnect, device number 87 [ 1673.109569][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1673.130985][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1673.157516][ T24] keyspan 3-1:0.0: device disconnected [ 1673.475529][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.259619][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.323963][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.625629][T26131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5211'. [ 1674.706473][T26133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5209'. [ 1675.325513][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.380997][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.476189][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.974075][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.983311][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.483407][ T5934] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1677.651970][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.093375][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.120073][ T5934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.151983][ T5934] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1678.203932][ T29] audit: type=1400 audit(2000000088.050:1922): avc: denied { read } for pid=26154 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1678.280808][ T29] audit: type=1400 audit(2000000088.120:1923): avc: denied { open } for pid=26154 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1678.313466][ T5934] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1678.340237][T25135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1678.354083][T25135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1678.366909][T25135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1678.377286][T25135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1678.383741][T26157] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5218'. [ 1678.394467][T25135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1678.399511][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.420564][ T29] audit: type=1400 audit(2000000088.260:1924): avc: denied { mounton } for pid=26154 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1678.465198][ T5934] usb 5-1: Product: syz [ 1678.476895][T26156] erspan1: entered promiscuous mode [ 1678.482200][ T5934] usb 5-1: Manufacturer: syz [ 1678.578348][T26156] erspan1: entered allmulticast mode [ 1678.584707][ T5934] usb 5-1: SerialNumber: syz [ 1678.646279][T26154] lo speed is unknown, defaulting to 1000 [ 1678.682327][T26163] 9p: Bad value for 'rfdno' [ 1679.216513][T26166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.262155][T26166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.266769][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.281588][ T5934] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1679.384563][T26166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.403591][ T5934] usb 5-1: USB disconnect, device number 53 [ 1679.414826][T26166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.470978][T26173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.479256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.725177][T26179] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1680.118857][ T5952] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1680.204284][T26181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5224'. [ 1680.385494][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1680.393283][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.407750][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1680.497733][ T5952] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1680.509176][T17585] Bluetooth: hci2: command tx timeout [ 1680.514767][T26184] comedi comedi4: bad chanlist[1]=0x00000040 chan=64 range length=2 [ 1680.544695][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.552708][ T5952] usb 3-1: Product: syz [ 1680.564803][ T5952] usb 3-1: Manufacturer: syz [ 1680.569426][ T5952] usb 3-1: SerialNumber: syz [ 1680.590718][ T5952] usb 3-1: config 0 descriptor?? [ 1680.604910][T26171] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1680.622514][ T5952] port100 3-1:0.0: NFC: Could not get supported command types [ 1680.656281][T26190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5226'. [ 1680.665646][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.890127][T11688] usb 3-1: USB disconnect, device number 88 [ 1681.462270][T26199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5228'. [ 1681.637119][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.647402][ T6636] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.866007][ T6636] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.974009][ T6636] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.040814][ T29] audit: type=1326 audit(2000000091.850:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1682.138441][ T29] audit: type=1326 audit(2000000091.860:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1682.168045][ T29] audit: type=1326 audit(2000000091.860:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1682.195103][ T29] audit: type=1326 audit(2000000091.860:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1682.234193][T26222] FAULT_INJECTION: forcing a failure. [ 1682.234193][T26222] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.247020][T26222] CPU: 0 UID: 0 PID: 26222 Comm: syz.0.5234 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.247040][T26222] Tainted: [L]=SOFTLOCKUP [ 1682.247044][T26222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1682.247051][T26222] Call Trace: [ 1682.247055][T26222] [ 1682.247060][T26222] dump_stack_lvl+0x100/0x190 [ 1682.247082][T26222] should_fail_ex.cold+0x5/0xa [ 1682.247097][T26222] should_failslab+0xc2/0x120 [ 1682.247108][T26222] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1682.247124][T26222] ? sock_alloc_inode+0x25/0x1c0 [ 1682.247142][T26222] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1682.247158][T26222] sock_alloc_inode+0x25/0x1c0 [ 1682.247173][T26222] alloc_inode+0x68/0x250 [ 1682.247190][T26222] sock_alloc+0x44/0x280 [ 1682.247205][T26222] do_accept+0xf9/0x530 [ 1682.247216][T26222] ? do_raw_spin_lock+0x128/0x260 [ 1682.247229][T26222] ? __pfx_do_accept+0x10/0x10 [ 1682.247253][T26222] __sys_accept4+0x108/0x200 [ 1682.247265][T26222] ? __pfx___sys_accept4+0x10/0x10 [ 1682.247277][T26222] ? __pfx_ksys_write+0x10/0x10 [ 1682.247296][T26222] __x64_sys_accept4+0x96/0x100 [ 1682.247308][T26222] ? lockdep_hardirqs_on+0x78/0x100 [ 1682.247322][T26222] do_syscall_64+0x106/0xf80 [ 1682.247335][T26222] ? clear_bhb_loop+0x40/0x90 [ 1682.247349][T26222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.247360][T26222] RIP: 0033:0x7f405f19c799 [ 1682.247370][T26222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.247381][T26222] RSP: 002b:00007f4060111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1682.247392][T26222] RAX: ffffffffffffffda RBX: 00007f405f415fa0 RCX: 00007f405f19c799 [ 1682.247399][T26222] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 1682.247406][T26222] RBP: 00007f4060111090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.247412][T26222] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1682.247419][T26222] R13: 00007f405f416038 R14: 00007f405f415fa0 R15: 00007ffea8a8be38 [ 1682.247433][T26222] [ 1682.248100][T17585] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1682.463037][T17585] CPU: 1 UID: 0 PID: 17585 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.463068][T17585] Tainted: [L]=SOFTLOCKUP [ 1682.463075][T17585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1682.463088][T17585] Workqueue: hci4 hci_rx_work [ 1682.463112][T17585] Call Trace: [ 1682.463119][T17585] [ 1682.463129][T17585] dump_stack_lvl+0x100/0x190 [ 1682.463160][T17585] sysfs_warn_dup.cold+0x1c/0x28 [ 1682.463189][T17585] sysfs_create_dir_ns+0x24b/0x2b0 [ 1682.463216][T17585] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1682.463241][T17585] ? find_held_lock+0x2b/0x80 [ 1682.463262][T17585] ? kobject_add_internal+0x25f/0x930 [ 1682.463288][T17585] ? kobject_add_internal+0x25f/0x930 [ 1682.463313][T17585] ? do_raw_spin_unlock+0x145/0x1e0 [ 1682.463334][T17585] kobject_add_internal+0x2c8/0x930 [ 1682.463363][T17585] kobject_add+0x16a/0x1e0 [ 1682.463389][T17585] ? __pfx_kobject_add+0x10/0x10 [ 1682.463414][T17585] ? class_to_subsys+0x10f/0x150 [ 1682.463438][T17585] ? kobject_put+0xb9/0x640 [ 1682.463462][T17585] ? _raw_spin_unlock+0x28/0x50 [ 1682.463490][T17585] device_add+0x294/0x1950 [ 1682.463510][T17585] ? __pfx_dev_set_name+0x10/0x10 [ 1682.463532][T17585] ? __pfx_device_add+0x10/0x10 [ 1682.463550][T17585] ? mgmt_send_event_skb+0x2fb/0x460 [ 1682.463577][T17585] hci_conn_add_sysfs+0x1a3/0x260 [ 1682.463602][T17585] le_conn_complete_evt+0x11cb/0x1f40 [ 1682.463629][T17585] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1682.463657][T17585] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1682.463679][T17585] ? skb_pull_data+0x15f/0x1e0 [ 1682.463711][T17585] hci_le_meta_evt+0x34a/0x5f0 [ 1682.463734][T17585] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1682.463766][T17585] hci_event_packet+0x682/0x11c0 [ 1682.463787][T17585] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1682.463811][T17585] ? __pfx_hci_event_packet+0x10/0x10 [ 1682.463835][T17585] ? kcov_remote_start+0x374/0x660 [ 1682.463862][T17585] ? lockdep_hardirqs_on+0x78/0x100 [ 1682.463891][T17585] hci_rx_work+0x451/0xfc0 [ 1682.463917][T17585] process_one_work+0xa23/0x19a0 [ 1682.463949][T17585] ? __pfx_process_one_work+0x10/0x10 [ 1682.463977][T17585] ? __pfx_hci_rx_work+0x10/0x10 [ 1682.464000][T17585] worker_thread+0x5ef/0xe50 [ 1682.464026][T17585] ? __pfx_worker_thread+0x10/0x10 [ 1682.464047][T17585] ? kthread+0x13a/0x450 [ 1682.464062][T17585] ? __pfx_worker_thread+0x10/0x10 [ 1682.464078][T17585] kthread+0x370/0x450 [ 1682.464095][T17585] ? __pfx_kthread+0x10/0x10 [ 1682.464114][T17585] ret_from_fork+0x754/0xd80 [ 1682.464134][T17585] ? __pfx_ret_from_fork+0x10/0x10 [ 1682.464156][T17585] ? __switch_to+0x7b4/0x1120 [ 1682.464179][T17585] ? __pfx_kthread+0x10/0x10 [ 1682.464199][T17585] ret_from_fork_asm+0x1a/0x30 [ 1682.464236][T17585] [ 1682.736907][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.763292][ T29] audit: type=1326 audit(2000000091.860:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1682.786876][T17585] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1682.939728][T25135] Bluetooth: hci2: command tx timeout [ 1683.013260][T17585] Bluetooth: hci4: failed to register connection device [ 1683.036711][ T29] audit: type=1326 audit(2000000091.860:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1683.092635][ T29] audit: type=1326 audit(2000000091.870:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1683.129762][T26154] chnl_net:caif_netlink_parms(): no params data found [ 1683.230274][T26230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.239447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.248291][T26230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.271746][T26230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.280099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.303559][ T6843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.580771][ T29] audit: type=1326 audit(2000000091.870:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1683.615514][ T29] audit: type=1326 audit(2000000091.870:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1683.707877][ T29] audit: type=1326 audit(2000000091.870:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f166b59c502 code=0x7ffc0000 [ 1683.737256][T26154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.761154][T26154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.774608][T26154] bridge_slave_0: entered allmulticast mode [ 1683.785954][ T29] audit: type=1326 audit(2000000091.870:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f166b59c502 code=0x7ffc0000 [ 1683.852844][T26154] bridge_slave_0: entered promiscuous mode [ 1683.865401][T26154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.939016][T26154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.939180][ T29] audit: type=1326 audit(2000000091.870:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1683.975449][ T29] audit: type=1326 audit(2000000091.870:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1683.984722][T26154] bridge_slave_1: entered allmulticast mode [ 1684.103345][T26154] bridge_slave_1: entered promiscuous mode [ 1684.183308][ T29] audit: type=1326 audit(2000000091.880:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1684.206961][ T29] audit: type=1400 audit(2000000091.920:1939): avc: denied { write } for pid=26201 comm="syz.2.5229" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1684.317409][ T29] audit: type=1326 audit(2000000091.930:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1684.325086][T26243] syzkaller0: entered promiscuous mode [ 1684.344959][ T29] audit: type=1326 audit(2000000091.930:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26208 comm="syz.4.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166b59c799 code=0x7ffc0000 [ 1684.397338][T26243] syzkaller0: entered allmulticast mode [ 1684.983344][T17585] Bluetooth: hci2: command tx timeout [ 1685.869178][ T5858] net_ratelimit: 3 callbacks suppressed [ 1685.869191][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.981351][T26154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.993841][T26154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.082242][T26154] team0: Port device team_slave_0 added [ 1686.090816][T26154] team0: Port device team_slave_1 added [ 1686.184591][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.024025][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.071704][T17585] Bluetooth: hci2: command tx timeout [ 1687.072253][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.777609][T26272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.785968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.126334][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.116675][ T6636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1689.146264][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.303382][T26293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5249'. [ 1689.319772][T26293] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1689.649338][ T6636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1689.670180][ T6636] bond0 (unregistering): Released all slaves [ 1690.103733][T16289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.319734][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.434049][T26154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1690.528154][T26154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.625192][T26154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1690.655689][T26154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1690.662645][T26154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.798955][T26154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1690.916290][T26290] lo speed is unknown, defaulting to 1000 [ 1691.272908][T26154] hsr_slave_0: entered promiscuous mode [ 1691.311313][T26154] hsr_slave_1: entered promiscuous mode [ 1691.317146][T20413] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1691.347540][T26154] debugfs: 'hsr0' already exists in 'hsr' [ 1691.356844][T26154] Cannot create hsr debugfs directory [ 1691.387400][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.495034][T20413] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.535557][T20413] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1691.593295][T20413] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1691.611142][T20413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.658412][T20413] usb 4-1: config 0 descriptor?? [ 1691.676994][T20413] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1691.695508][T20413] dvb-usb: bulk message failed: -22 (3/0) [ 1691.743597][T20413] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1691.797695][T20413] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1691.835324][T20413] usb 4-1: media controller created [ 1691.852590][T26319] comedi comedi4: bad chanlist[1]=0x00000040 chan=64 range length=2 [ 1691.863437][T20413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1691.896100][T20413] dvb-usb: bulk message failed: -22 (6/0) [ 1691.901847][T20413] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1691.924813][T20413] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input217 [ 1691.962522][T20413] dvb-usb: schedule remote query interval to 150 msecs. [ 1691.987986][T20413] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1692.040642][T26313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1692.143261][T20413] dvb-usb: bulk message failed: -22 (1/0) [ 1692.173491][T20413] dvb-usb: error while querying for an remote control event. [ 1692.216861][ T24] usb 4-1: USB disconnect, device number 55 [ 1692.247928][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1692.435236][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.562900][T26154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1692.581702][T26154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1692.607088][T26154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1693.144002][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.180682][T26347] "syz.3.5258" (26347) uses obsolete ecb(arc4) skcipher [ 1693.203106][ T6636] hsr_slave_0: left promiscuous mode [ 1693.234576][ T6636] hsr_slave_1: left promiscuous mode [ 1693.250690][ T6636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1693.270328][ T6636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1693.310041][ T6636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1693.327747][ T6636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.463554][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.033131][ T6636] veth1_macvtap: left promiscuous mode [ 1694.079686][ T6636] veth0_macvtap: left promiscuous mode [ 1694.115887][ T6636] veth1_vlan: left promiscuous mode [ 1694.147426][ T6636] veth0_vlan: left promiscuous mode [ 1694.238498][T26366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5261'. [ 1694.507205][T26373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5262'. [ 1694.618643][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.777670][ T6636] batadv3 (unregistering): left allmulticast mode [ 1694.786611][ T6636] team0 (unregistering): Port device batadv3 removed [ 1694.798151][ T6636] batadv2 (unregistering): left allmulticast mode [ 1694.805839][ T6636] team0 (unregistering): Port device batadv2 removed [ 1694.894644][ T6636] team_slave_1 (unregistering): left allmulticast mode [ 1694.902031][ T6636] team0 (unregistering): Port device team_slave_1 removed [ 1694.914657][ T6636] team_slave_0 (unregistering): left allmulticast mode [ 1694.921943][ T6636] team0 (unregistering): Port device team_slave_0 removed [ 1695.010410][T26154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1695.023040][T26366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5261'. [ 1695.023393][ T5952] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1695.199484][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.243894][ T5952] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1695.255926][T26154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.293079][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.335263][ T5952] usb 5-1: config 0 descriptor?? [ 1695.345744][T26154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1695.361097][ T5952] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1695.405757][T19376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.413044][T19376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1695.475845][T19376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.482947][T19376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1695.790874][T26407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5268'. [ 1695.848438][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.856613][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.865708][T26407] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1695.867203][T26384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.899337][T26384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.915305][T26384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5265'. [ 1696.059594][T26410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.071185][T26410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.183440][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.351859][ T5952] usb 5-1: USB disconnect, device number 54 [ 1696.522933][ T6636] IPVS: stop unused estimator thread 0... [ 1696.974752][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.055600][T26425] "syz.0.5269" (26425) uses obsolete ecb(arc4) skcipher [ 1697.136875][T26154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.543129][T26444] 9p: Unknown uid 00000000004294967295 [ 1697.888267][ T5952] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1698.024910][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.086873][ T5952] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.572952][ T5952] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1698.582213][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.592902][ T5952] usb 4-1: config 0 descriptor?? [ 1698.601636][ T5952] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1698.824520][T26443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.861261][T26443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.085516][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.175557][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5273'. [ 1699.224760][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.271394][T26471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5277'. [ 1699.589021][T26472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1699.590550][T26443] vlan2: entered allmulticast mode [ 1699.705706][T26472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.962048][ T24] usb 4-1: USB disconnect, device number 56 [ 1700.103634][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.251240][T26154] veth0_vlan: entered promiscuous mode [ 1700.298119][T26154] veth1_vlan: entered promiscuous mode [ 1700.373012][T26154] veth0_macvtap: entered promiscuous mode [ 1700.421757][T26154] veth1_macvtap: entered promiscuous mode [ 1700.488685][T26154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1700.522498][T26154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1700.551095][T26485] "syz.4.5280" (26485) uses obsolete ecb(arc4) skcipher [ 1701.011865][T26493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.020211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.410935][ T634] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.523541][ T634] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.532266][ T634] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.663637][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.684321][ T634] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.487283][T16289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.536738][T26363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.754839][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.882104][ T6636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.907333][ T6636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.936444][T26508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5284'. [ 1703.334599][ T634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.397579][T26518] 9p: Unknown uid 00000000004294967295 [ 1703.479237][ T634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1703.814609][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1703.814645][ T29] audit: type=1400 audit(2000000113.650:1956): avc: denied { mounton } for pid=26154 comm="syz-executor" path="/root/syzkaller.B2N3GT/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1703.939475][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.332384][ T29] audit: type=1400 audit(2000000113.890:1957): avc: denied { mounton } for pid=26154 comm="syz-executor" path="/root/syzkaller.B2N3GT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1704.576526][T26529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5289'. [ 1704.592516][T26529] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1704.622441][ T29] audit: type=1400 audit(2000000113.930:1958): avc: denied { mounton } for pid=26154 comm="syz-executor" path="/root/syzkaller.B2N3GT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=131950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1704.668456][ T29] audit: type=1400 audit(2000000114.120:1959): avc: denied { mounton } for pid=26154 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1704.798642][T20413] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1704.913141][T26535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5290'. [ 1704.928296][T26535] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1705.068972][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.147113][T20413] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1705.156454][T20413] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1705.183513][T20413] usb 4-1: Product: syz [ 1705.208044][ T29] audit: type=1400 audit(2000000114.120:1960): avc: denied { mount } for pid=26154 comm="syz-executor" name="/" dev="gadgetfs" ino=6916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1705.234738][T20413] usb 4-1: Manufacturer: syz [ 1705.241891][T26540] input: syz0 as /devices/virtual/input/input218 [ 1705.258031][T20413] usb 4-1: SerialNumber: syz [ 1705.277396][T20413] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1705.306811][ T29] audit: type=1400 audit(2000000114.150:1961): avc: denied { mount } for pid=26154 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1705.439275][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.460678][T26542] lo speed is unknown, defaulting to 1000 [ 1705.564058][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.688664][ T5952] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1706.193630][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.212032][T20413] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1706.273477][ T29] audit: type=1400 audit(2000000114.150:1962): avc: denied { mounton } for pid=26154 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1706.303637][T20413] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1706.364677][ T5952] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1706.396077][ T29] audit: type=1400 audit(2000000114.200:1963): avc: denied { read } for pid=26521 comm="syz.4.5287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1706.398243][ T5952] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1706.446295][T20413] usb 4-1: USB disconnect, device number 57 [ 1706.515167][ T29] audit: type=1400 audit(2000000114.240:1964): avc: denied { create } for pid=26523 comm="syz.3.5288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1706.517330][ T5952] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1706.593301][ T29] audit: type=1400 audit(2000000114.240:1965): avc: denied { setopt } for pid=26523 comm="syz.3.5288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1706.606060][ T5952] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1706.663540][ T5952] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1706.706366][ T5952] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1706.754123][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1706.762138][ T5952] usb 6-1: Product: syz [ 1706.793471][ T5952] usb 6-1: Manufacturer: syz [ 1706.828455][ T5952] cdc_wdm 6-1:1.0: skipping garbage [ 1706.841261][ T5952] cdc_wdm 6-1:1.0: skipping garbage [ 1706.903974][ T5952] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1706.909908][ T5952] cdc_wdm 6-1:1.0: Unknown control protocol [ 1707.445794][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.713302][ T5952] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1708.172240][T19128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.327798][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.338179][ T5952] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1708.349291][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.447610][T26567] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5293'. [ 1708.517743][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.531549][ T5952] usb 5-1: config 0 descriptor?? [ 1708.557925][ T5952] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1708.596792][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.686256][ T5952] usb 6-1: USB disconnect, device number 2 [ 1708.878928][T26572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5298'. [ 1709.007261][T26550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.039142][T26550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.095461][T26550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5295'. [ 1709.111781][T26550] vlan0: entered allmulticast mode [ 1709.158380][T26576] "syz.3.5299" (26576) uses obsolete ecb(arc4) skcipher [ 1709.228437][T26577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.240249][T26577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.563080][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.681643][T26583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5300'. [ 1709.698497][T26583] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1709.997250][T26589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1710.160551][T26594] lo speed is unknown, defaulting to 1000 [ 1710.177100][ T5952] usb 5-1: USB disconnect, device number 55 [ 1710.242919][ T29] audit: type=1400 audit(2000000120.080:1966): avc: denied { name_bind } for pid=26595 comm="syz.3.5304" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1710.587468][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.692147][T26598] 9p: Bad value for 'rfdno' [ 1710.983288][T20413] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1711.082898][T26604] FAULT_INJECTION: forcing a failure. [ 1711.082898][T26604] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.113330][T26604] CPU: 0 UID: 0 PID: 26604 Comm: syz.5.5305 Tainted: G L syzkaller #0 PREEMPT(full) [ 1711.113367][T26604] Tainted: [L]=SOFTLOCKUP [ 1711.113373][T26604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1711.113383][T26604] Call Trace: [ 1711.113389][T26604] [ 1711.113396][T26604] dump_stack_lvl+0x100/0x190 [ 1711.113428][T26604] should_fail_ex.cold+0x5/0xa [ 1711.113451][T26604] should_failslab+0xc2/0x120 [ 1711.113468][T26604] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1711.113494][T26604] ? __alloc_skb+0x140/0x710 [ 1711.113518][T26604] __alloc_skb+0x140/0x710 [ 1711.113536][T26604] ? __alloc_skb+0x5b7/0x710 [ 1711.113555][T26604] ? __pfx___alloc_skb+0x10/0x10 [ 1711.113582][T26604] netlink_alloc_large_skb+0x69/0x150 [ 1711.113609][T26604] netlink_sendmsg+0x680/0xda0 [ 1711.113637][T26604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1711.113659][T26604] ? __might_fault+0x20/0x140 [ 1711.113690][T26604] ____sys_sendmsg+0x9e1/0xb70 [ 1711.113715][T26604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1711.113741][T26604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1711.113777][T26604] ___sys_sendmsg+0x190/0x1e0 [ 1711.113807][T26604] ? __pfx____sys_sendmsg+0x10/0x10 [ 1711.113863][T26604] __sys_sendmsg+0x170/0x220 [ 1711.113885][T26604] ? __pfx___sys_sendmsg+0x10/0x10 [ 1711.113922][T26604] do_syscall_64+0x106/0xf80 [ 1711.113943][T26604] ? clear_bhb_loop+0x40/0x90 [ 1711.113964][T26604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.113982][T26604] RIP: 0033:0x7f2e67f9c799 [ 1711.113997][T26604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1711.114014][T26604] RSP: 002b:00007f2e68ea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1711.114032][T26604] RAX: ffffffffffffffda RBX: 00007f2e68215fa0 RCX: 00007f2e67f9c799 [ 1711.114043][T26604] RDX: 0000000004008014 RSI: 0000200000000100 RDI: 0000000000000003 [ 1711.114054][T26604] RBP: 00007f2e68ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.114064][T26604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.114074][T26604] R13: 00007f2e68216038 R14: 00007f2e68215fa0 R15: 00007ffdfe767c78 [ 1711.114097][T26604] [ 1711.383632][ T29] audit: type=1400 audit(2000000121.230:1967): avc: denied { listen } for pid=26605 comm="syz.4.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1711.384151][T26606] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1711.486764][T20413] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1711.496069][T20413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.504228][T20413] usb 4-1: Product: syz [ 1711.508896][T20413] usb 4-1: Manufacturer: syz [ 1711.513597][T20413] usb 4-1: SerialNumber: syz [ 1711.730194][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.768869][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.870430][T20413] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1712.890964][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.964859][T20413] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1713.486927][ T29] audit: type=1400 audit(2000000123.330:1968): avc: denied { bind } for pid=26630 comm="syz.0.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1713.606950][ T29] audit: type=1400 audit(2000000123.450:1969): avc: denied { listen } for pid=26630 comm="syz.0.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1713.744978][ T634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.954719][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.981908][T20413] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1714.042179][T20413] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1714.392895][ T29] audit: type=1400 audit(2000000124.230:1970): avc: denied { connect } for pid=26630 comm="syz.0.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1714.425121][ T29] audit: type=1400 audit(2000000124.260:1971): avc: denied { write } for pid=26630 comm="syz.0.5312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1714.534928][T20413] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1714.597897][T26636] lo speed is unknown, defaulting to 1000 [ 1714.634597][T20413] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1714.743393][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.772005][T11688] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 1714.810541][T20413] usb 4-1: USB disconnect, device number 58 [ 1714.989391][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.997528][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.006383][T11688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1715.025470][T11688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1715.048044][T11688] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1715.075155][T11688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.113372][T11688] usb 3-1: Product: syz [ 1715.131163][T11688] usb 3-1: Manufacturer: syz [ 1715.159802][T11688] usb 3-1: SerialNumber: syz [ 1715.254002][T11688] usb 3-1: config 0 descriptor?? [ 1715.284082][T26650] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1715.313302][T11688] port100 3-1:0.0: NFC: Could not get supported command types [ 1715.548986][T11688] usb 3-1: USB disconnect, device number 89 [ 1716.111565][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.319057][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.615210][T26685] FAULT_INJECTION: forcing a failure. [ 1717.615210][T26685] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.628135][T26685] CPU: 1 UID: 0 PID: 26685 Comm: syz.0.5321 Tainted: G L syzkaller #0 PREEMPT(full) [ 1717.628163][T26685] Tainted: [L]=SOFTLOCKUP [ 1717.628170][T26685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1717.628180][T26685] Call Trace: [ 1717.628187][T26685] [ 1717.628195][T26685] dump_stack_lvl+0x100/0x190 [ 1717.628228][T26685] should_fail_ex.cold+0x5/0xa [ 1717.628259][T26685] should_failslab+0xc2/0x120 [ 1717.628278][T26685] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1717.628300][T26685] ? sctp_association_new+0xbb/0x2990 [ 1717.628332][T26685] sctp_association_new+0xbb/0x2990 [ 1717.628364][T26685] sctp_connect_new_asoc+0x1a8/0x770 [ 1717.628394][T26685] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1717.628421][T26685] ? selinux_sctp_bind_connect+0x112/0x2a0 [ 1717.628453][T26685] sctp_sendmsg+0x171a/0x22b0 [ 1717.628487][T26685] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1717.628518][T26685] ? __pfx_sock_has_perm+0x10/0x10 [ 1717.628552][T26685] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1717.628580][T26685] inet_sendmsg+0x11c/0x140 [ 1717.628599][T26685] __sys_sendto+0x446/0x4b0 [ 1717.628619][T26685] ? __pfx_inet_sendmsg+0x10/0x10 [ 1717.628638][T26685] ? __pfx___sys_sendto+0x10/0x10 [ 1717.628680][T26685] ? ksys_write+0x1ac/0x250 [ 1717.628708][T26685] ? __pfx_ksys_write+0x10/0x10 [ 1717.628738][T26685] __x64_sys_sendto+0xe0/0x1c0 [ 1717.628757][T26685] ? do_syscall_64+0x95/0xf80 [ 1717.628780][T26685] ? lockdep_hardirqs_on+0x78/0x100 [ 1717.628803][T26685] do_syscall_64+0x106/0xf80 [ 1717.628824][T26685] ? clear_bhb_loop+0x40/0x90 [ 1717.628847][T26685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.628865][T26685] RIP: 0033:0x7f405f19c799 [ 1717.628881][T26685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1717.628899][T26685] RSP: 002b:00007f40600cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1717.628917][T26685] RAX: ffffffffffffffda RBX: 00007f405f416180 RCX: 00007f405f19c799 [ 1717.628929][T26685] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000006 [ 1717.628940][T26685] RBP: 00007f40600cf090 R08: 0000200000000140 R09: 000000000000001c [ 1717.628951][T26685] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 1717.628962][T26685] R13: 00007f405f416218 R14: 00007f405f416180 R15: 00007ffea8a8be38 [ 1717.628987][T26685] [ 1718.279041][ T634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.300146][T26680] lo speed is unknown, defaulting to 1000 [ 1718.395999][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.157504][T26680] 9p: Bad value for 'rfdno' [ 1719.464800][ T5934] net_ratelimit: 2 callbacks suppressed [ 1719.464820][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.320651][T26708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.331014][T26708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.339930][T26708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.386074][T26708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.394435][T26708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.402878][T26708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.613857][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.643314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.652122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.110681][T26715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5325'. [ 1721.617895][T26719] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5328'. [ 1722.323305][T20349] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1722.703313][T20349] usb 6-1: Using ep0 maxpacket: 32 [ 1722.905989][ T29] audit: type=1400 audit(2000000132.750:1972): avc: denied { setopt } for pid=26731 comm="syz.0.5331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1723.045314][T20349] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1723.096759][T20349] usb 6-1: config 0 has no interface number 0 [ 1723.144100][T20349] usb 6-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1723.198218][T26743] FAULT_INJECTION: forcing a failure. [ 1723.198218][T26743] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.215685][T26743] CPU: 1 UID: 0 PID: 26743 Comm: syz.3.5326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1723.215714][T26743] Tainted: [L]=SOFTLOCKUP [ 1723.215720][T26743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1723.215730][T26743] Call Trace: [ 1723.215736][T26743] [ 1723.215743][T26743] dump_stack_lvl+0x100/0x190 [ 1723.215774][T26743] should_fail_ex.cold+0x5/0xa [ 1723.215796][T26743] ? tomoyo_encode2+0xfb/0x3c0 [ 1723.215817][T26743] should_failslab+0xc2/0x120 [ 1723.215833][T26743] __kmalloc_noprof+0xe0/0x850 [ 1723.215860][T26743] tomoyo_encode2+0xfb/0x3c0 [ 1723.215885][T26743] tomoyo_encode+0x29/0x50 [ 1723.215906][T26743] tomoyo_realpath_from_path+0x18c/0x690 [ 1723.215934][T26743] tomoyo_path_number_perm+0x23c/0x580 [ 1723.215953][T26743] ? tomoyo_path_number_perm+0x22e/0x580 [ 1723.215975][T26743] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1723.216018][T26743] ? find_held_lock+0x2b/0x80 [ 1723.216039][T26743] ? __fget_files+0x215/0x3d0 [ 1723.216055][T26743] ? hook_file_ioctl_common+0x146/0x410 [ 1723.216087][T26743] ? __fget_files+0x21f/0x3d0 [ 1723.216108][T26743] security_file_ioctl+0xd3/0x230 [ 1723.216131][T26743] __x64_sys_ioctl+0xb7/0x210 [ 1723.216157][T26743] do_syscall_64+0x106/0xf80 [ 1723.216177][T26743] ? clear_bhb_loop+0x40/0x90 [ 1723.216199][T26743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.216216][T26743] RIP: 0033:0x7f9a43f9c799 [ 1723.216229][T26743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.216245][T26743] RSP: 002b:00007f9a44e3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1723.216263][T26743] RAX: ffffffffffffffda RBX: 00007f9a44215fa0 RCX: 00007f9a43f9c799 [ 1723.216274][T26743] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000004 [ 1723.216285][T26743] RBP: 00007f9a44e3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.216296][T26743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.216305][T26743] R13: 00007f9a44216038 R14: 00007f9a44215fa0 R15: 00007ffc9c24c068 [ 1723.216328][T26743] [ 1723.216446][T26743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1723.605113][T20349] usb 6-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1723.653548][T20349] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1723.683949][T20349] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1723.701829][T20349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.703584][ T29] audit: type=1400 audit(2000000133.540:1973): avc: denied { unmount } for pid=17947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1724.540299][T11688] net_ratelimit: 309 callbacks suppressed [ 1724.540317][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.558074][T20349] usb 6-1: Product: syz [ 1724.562246][T20349] usb 6-1: Manufacturer: syz [ 1724.567891][T20349] usb 6-1: SerialNumber: syz [ 1724.581616][T20349] usb 6-1: config 0 descriptor?? [ 1724.590860][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.598940][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.611667][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1724.613092][T20349] f81534 6-1:0.12: unsupported endpoint max packet size [ 1724.630387][T19128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.639189][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.757347][T26758] lo speed is unknown, defaulting to 1000 [ 1725.041519][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.623839][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.809987][T26779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5340'. [ 1726.136430][T26784] comedi comedi4: bad chanlist[1]=0x00000040 chan=64 range length=2 [ 1726.197617][T26786] sp0: Synchronizing with TNC [ 1726.569491][T26789] 9p: Bad value for 'rfdno' [ 1726.626989][ T5952] usb 6-1: USB disconnect, device number 3 [ 1726.666542][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.750729][T26759] lo speed is unknown, defaulting to 1000 [ 1727.706526][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.113235][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.156711][T26823] netlink: 'syz.2.5347': attribute type 4 has an invalid length. [ 1729.195225][T26807] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 1729.230868][T26807] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 1729.243165][T26823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5347'. [ 1729.380693][T26827] FAULT_INJECTION: forcing a failure. [ 1729.380693][T26827] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.493284][T26827] CPU: 0 UID: 0 PID: 26827 Comm: syz.5.5349 Tainted: G L syzkaller #0 PREEMPT(full) [ 1729.493313][T26827] Tainted: [L]=SOFTLOCKUP [ 1729.493319][T26827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1729.493329][T26827] Call Trace: [ 1729.493335][T26827] [ 1729.493342][T26827] dump_stack_lvl+0x100/0x190 [ 1729.493374][T26827] should_fail_ex.cold+0x5/0xa [ 1729.493397][T26827] ? io_alloc_file_tables+0x60/0xb0 [ 1729.493420][T26827] should_failslab+0xc2/0x120 [ 1729.493434][T26827] __kmalloc_noprof+0xe0/0x850 [ 1729.493453][T26827] io_alloc_file_tables+0x60/0xb0 [ 1729.493469][T26827] ? __pfx___mutex_lock+0x10/0x10 [ 1729.493486][T26827] io_sqe_files_register+0x186/0x970 [ 1729.493501][T26827] ? __fget_files+0x215/0x3d0 [ 1729.493514][T26827] ? __pfx_io_sqe_files_register+0x10/0x10 [ 1729.493535][T26827] __do_sys_io_uring_register+0xed2/0x1ac0 [ 1729.493553][T26827] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 1729.493568][T26827] ? __fget_files+0x21f/0x3d0 [ 1729.493582][T26827] ? fput+0x79/0x100 [ 1729.493595][T26827] ? ksys_write+0x1ac/0x250 [ 1729.493611][T26827] ? __pfx_ksys_write+0x10/0x10 [ 1729.493633][T26827] do_syscall_64+0x106/0xf80 [ 1729.493647][T26827] ? clear_bhb_loop+0x40/0x90 [ 1729.493661][T26827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.493672][T26827] RIP: 0033:0x7f2e67f9c799 [ 1729.493688][T26827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.493698][T26827] RSP: 002b:00007f2e68ea4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1729.493710][T26827] RAX: ffffffffffffffda RBX: 00007f2e68215fa0 RCX: 00007f2e67f9c799 [ 1729.493717][T26827] RDX: 00002000000002c0 RSI: 0000000000000002 RDI: 0000000000000003 [ 1729.493723][T26827] RBP: 00007f2e68ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.493730][T26827] R10: 0000000000000057 R11: 0000000000000246 R12: 0000000000000001 [ 1729.493736][T26827] R13: 00007f2e68216038 R14: 00007f2e68215fa0 R15: 00007ffdfe767c78 [ 1729.493751][T26827] [ 1729.917130][ T5865] net_ratelimit: 2 callbacks suppressed [ 1729.917150][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.343992][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.352741][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.362406][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.370707][T11688] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1730.591470][ T29] audit: type=1400 audit(2000000140.250:1974): avc: denied { ioctl } for pid=26836 comm="syz.0.5353" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1731.002018][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.475191][T11688] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.497920][T11688] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1731.513274][T11688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.536996][T11688] usb 6-1: config 0 descriptor?? [ 1731.604105][T11688] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1731.774627][T26833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.837558][T26833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.855611][T26833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5351'. [ 1731.973609][T26833] vlan2: entered allmulticast mode [ 1731.994100][T26833] team0: entered allmulticast mode [ 1732.023612][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.032017][T26833] team_slave_0: entered allmulticast mode [ 1732.038075][T26833] team_slave_1: entered allmulticast mode [ 1732.205022][T26855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.216370][T26855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.387896][ T29] audit: type=1400 audit(2000000142.230:1975): avc: denied { map } for pid=26853 comm="syz.2.5355" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1732.417904][T11688] usb 6-1: USB disconnect, device number 4 [ 1732.469018][T26857] FAULT_INJECTION: forcing a failure. [ 1732.469018][T26857] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.481915][T26857] CPU: 1 UID: 0 PID: 26857 Comm: syz.2.5355 Tainted: G L syzkaller #0 PREEMPT(full) [ 1732.481936][T26857] Tainted: [L]=SOFTLOCKUP [ 1732.481941][T26857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1732.481948][T26857] Call Trace: [ 1732.481952][T26857] [ 1732.481956][T26857] dump_stack_lvl+0x100/0x190 [ 1732.481979][T26857] should_fail_ex.cold+0x5/0xa [ 1732.481993][T26857] ? tomoyo_encode2+0xfb/0x3c0 [ 1732.482009][T26857] should_failslab+0xc2/0x120 [ 1732.482020][T26857] __kmalloc_noprof+0xe0/0x850 [ 1732.482039][T26857] tomoyo_encode2+0xfb/0x3c0 [ 1732.482057][T26857] tomoyo_encode+0x29/0x50 [ 1732.482072][T26857] tomoyo_realpath_from_path+0x18c/0x690 [ 1732.482097][T26857] tomoyo_path_number_perm+0x23c/0x580 [ 1732.482111][T26857] ? tomoyo_path_number_perm+0x22e/0x580 [ 1732.482125][T26857] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1732.482153][T26857] ? find_held_lock+0x2b/0x80 [ 1732.482168][T26857] ? __fget_files+0x215/0x3d0 [ 1732.482178][T26857] ? hook_file_ioctl_common+0x146/0x410 [ 1732.482199][T26857] ? __fget_files+0x21f/0x3d0 [ 1732.482213][T26857] security_file_ioctl+0xd3/0x230 [ 1732.482229][T26857] __x64_sys_ioctl+0xb7/0x210 [ 1732.482247][T26857] do_syscall_64+0x106/0xf80 [ 1732.482261][T26857] ? clear_bhb_loop+0x40/0x90 [ 1732.482275][T26857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.482287][T26857] RIP: 0033:0x7f4bba19c799 [ 1732.482297][T26857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1732.482308][T26857] RSP: 002b:00007f4bbb11d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.482319][T26857] RAX: ffffffffffffffda RBX: 00007f4bba416090 RCX: 00007f4bba19c799 [ 1732.482326][T26857] RDX: 00002000000000c0 RSI: 00000000c040aed5 RDI: 0000000000000008 [ 1732.482333][T26857] RBP: 00007f4bbb11d090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.482340][T26857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1732.482346][T26857] R13: 00007f4bba416128 R14: 00007f4bba416090 R15: 00007ffcf4e41e78 [ 1732.482361][T26857] [ 1732.483026][T26857] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1733.063498][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.383726][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.897162][T26861] "syz.4.5358" (26861) uses obsolete ecb(arc4) skcipher [ 1734.104544][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.146532][T26862] lo speed is unknown, defaulting to 1000 [ 1734.245050][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.982919][ T29] audit: type=1400 audit(2000000144.820:1976): avc: denied { name_connect } for pid=26868 comm="syz.3.5356" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1735.091908][ T29] audit: type=1400 audit(2000000144.830:1977): avc: denied { accept } for pid=26868 comm="syz.3.5356" lport=47272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1735.168322][ T29] audit: type=1400 audit(2000000144.880:1978): avc: denied { ioctl } for pid=26868 comm="syz.3.5356" path="socket:[132709]" dev="sockfs" ino=132709 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1735.168367][ T29] audit: type=1400 audit(2000000144.880:1979): avc: denied { bind } for pid=26868 comm="syz.3.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1735.168403][ T29] audit: type=1400 audit(2000000144.880:1980): avc: denied { read } for pid=26868 comm="syz.3.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1735.171866][ T5865] net_ratelimit: 1 callbacks suppressed [ 1735.171880][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.490961][ T29] audit: type=1400 audit(2000000145.320:1981): avc: denied { getopt } for pid=26872 comm="syz.2.5360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1736.110415][T26878] syzkaller0: entered promiscuous mode [ 1736.116020][T26878] syzkaller0: entered allmulticast mode [ 1736.182712][ T634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.201227][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.997996][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.046376][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.227094][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.263383][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.513410][ T5934] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1738.842039][ T5934] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1738.870235][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.916223][T26900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5366'. [ 1738.995344][ T5934] usb 5-1: config 0 descriptor?? [ 1739.017918][ T5934] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1739.266806][ T5934] gp8psk: usb in 128 operation failed. [ 1739.318033][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.587632][ T5934] gp8psk: usb in 146 operation failed. [ 1739.713059][ T29] audit: type=1400 audit(2000000149.260:1982): avc: denied { map } for pid=26909 comm="syz.0.5371" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1739.736855][ T5934] gp8psk: failed to get FW version [ 1739.745596][ T5934] gp8psk: usb in 149 operation failed. [ 1739.762419][ T5934] gp8psk: failed to get FPGA version [ 1739.778395][ T29] audit: type=1400 audit(2000000149.260:1983): avc: denied { execute } for pid=26909 comm="syz.0.5371" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1740.038457][T19128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.103380][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.119238][T26918] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5368'. [ 1740.429465][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.696611][T26926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5373'. [ 1741.772874][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.067372][ T5934] gp8psk: usb out operation failed. [ 1742.497469][ T5934] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1742.526109][ T5934] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1742.690853][ T29] audit: type=1400 audit(2000000152.530:1984): avc: denied { accept } for pid=26930 comm="syz.0.5374" laddr=fe80::10 lport=60963 faddr=fe80::bb fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1742.823433][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.147107][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.783525][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.866595][T11976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.897619][T26917] lo speed is unknown, defaulting to 1000 [ 1743.904908][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.919484][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.003764][ T24] usb 5-1: USB disconnect, device number 56 [ 1744.195223][T26942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5376'. [ 1744.482033][T26945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5378'. [ 1745.042969][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.404018][T26955] lo speed is unknown, defaulting to 1000 [ 1745.561728][ T24] IPVS: starting estimator thread 0... [ 1745.684035][T26961] IPVS: using max 75 ests per chain, 180000 per kthread [ 1745.806030][T26960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5381'. [ 1746.018066][T20349] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1746.103732][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.184212][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.204884][T20349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1746.218322][T20349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1746.230767][T20349] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1746.242252][T20349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.250507][T20349] usb 3-1: Product: syz [ 1746.254868][T20349] usb 3-1: Manufacturer: syz [ 1746.267200][T20349] usb 3-1: SerialNumber: syz [ 1746.310411][T20349] usb 3-1: config 0 descriptor?? [ 1746.329288][T26965] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1746.339123][T20349] port100 3-1:0.0: NFC: Could not get supported command types [ 1746.557059][T20349] usb 3-1: USB disconnect, device number 90 [ 1747.143402][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.303405][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.447010][T26984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5386'. [ 1748.733262][T26991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5389'. [ 1748.749145][T26991] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1749.223573][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.240376][T26999] "syz.5.5390" (26999) uses obsolete ecb(arc4) skcipher [ 1749.247427][ T29] audit: type=1400 audit(2000000159.080:1985): avc: denied { mounton } for pid=26997 comm="syz.2.5391" path="/file0" dev="ramfs" ino=132968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1749.305005][T20349] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1749.395110][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.460413][T26994] syzkaller0: entered promiscuous mode [ 1749.483803][T26994] syzkaller0: entered allmulticast mode [ 1750.253328][T20349] usb 4-1: Using ep0 maxpacket: 8 [ 1750.295206][T20349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1750.313806][T20349] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1750.345530][T20349] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1750.423748][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.440765][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5392'. [ 1750.526729][T20349] usb 4-1: Product: syz [ 1750.554738][T20349] usb 4-1: Manufacturer: syz [ 1750.570255][T20349] usb 4-1: SerialNumber: syz [ 1751.004001][T20349] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 1751.028866][T20349] visor 4-1:1.0: probe with driver visor failed with error -110 [ 1751.156690][T20349] usb 4-1: USB disconnect, device number 59 [ 1751.510031][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.581732][T27009] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5393'. [ 1751.800727][T27012] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1752.045925][ T29] audit: type=1400 audit(2000000161.890:1986): avc: denied { write } for pid=27015 comm="syz.3.5396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1752.305832][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.423662][T20413] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1752.600641][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.624707][T20413] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.642625][T20413] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1752.667237][T20413] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1752.677888][T20413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.159724][T20413] usb 3-1: Product: syz [ 1753.176972][T20413] usb 3-1: Manufacturer: syz [ 1753.191027][T20413] usb 3-1: SerialNumber: syz [ 1753.201954][T20413] usb 3-1: config 0 descriptor?? [ 1753.448683][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.464295][T20413] usb 3-1: USB disconnect, device number 91 [ 1753.570222][T27033] netlink: 'syz.0.5400': attribute type 1 has an invalid length. [ 1753.578865][T27033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5400'. [ 1753.870739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.914774][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.936729][ T29] audit: type=1400 audit(2000000163.680:1987): avc: denied { create } for pid=27028 comm="syz.0.5400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1753.985319][T20349] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1754.018169][ T29] audit: type=1400 audit(2000000163.690:1988): avc: denied { connect } for pid=27028 comm="syz.0.5400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1754.059005][T27037] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5401'. [ 1754.069860][ T29] audit: type=1400 audit(2000000163.700:1989): avc: denied { write } for pid=27028 comm="syz.0.5400" laddr=fe80::13 lport=28253 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1754.070793][T27037] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1754.444444][T20349] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.456692][T20349] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1754.466331][T20349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.490460][T20349] usb 4-1: config 0 descriptor?? [ 1754.512370][T20349] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1754.689838][T27044] FAULT_INJECTION: forcing a failure. [ 1754.689838][T27044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1754.703013][T27044] CPU: 0 UID: 0 PID: 27044 Comm: syz.5.5404 Tainted: G L syzkaller #0 PREEMPT(full) [ 1754.703041][T27044] Tainted: [L]=SOFTLOCKUP [ 1754.703047][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1754.703058][T27044] Call Trace: [ 1754.703064][T27044] [ 1754.703071][T27044] dump_stack_lvl+0x100/0x190 [ 1754.703106][T27044] should_fail_ex.cold+0x5/0xa [ 1754.703130][T27044] _copy_from_user+0x2e/0xd0 [ 1754.703160][T27044] core_sys_select+0x472/0xbb0 [ 1754.703186][T27044] ? __pfx_core_sys_select+0x10/0x10 [ 1754.703202][T27044] ? find_held_lock+0x2b/0x80 [ 1754.703223][T27044] ? get_pid_task+0xfc/0x250 [ 1754.703273][T27044] ? __pfx_set_user_sigmask+0x10/0x10 [ 1754.703292][T27044] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1754.703317][T27044] ? __fget_files+0x215/0x3d0 [ 1754.703340][T27044] do_pselect.constprop.0+0x238/0x270 [ 1754.703362][T27044] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1754.703385][T27044] ? ksys_write+0x1ac/0x250 [ 1754.703416][T27044] __x64_sys_pselect6+0x149/0x1c0 [ 1754.703438][T27044] do_syscall_64+0x106/0xf80 [ 1754.703460][T27044] ? clear_bhb_loop+0x40/0x90 [ 1754.703482][T27044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.703502][T27044] RIP: 0033:0x7f2e67f9c799 [ 1754.703518][T27044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1754.703536][T27044] RSP: 002b:00007f2e68e83028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1754.703554][T27044] RAX: ffffffffffffffda RBX: 00007f2e68216090 RCX: 00007f2e67f9c799 [ 1754.703566][T27044] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 1754.703577][T27044] RBP: 00007f2e68e83090 R08: 0000000000000000 R09: 0000000000000000 [ 1754.703588][T27044] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1754.703598][T27044] R13: 00007f2e68216128 R14: 00007f2e68216090 R15: 00007ffdfe767c78 [ 1754.703623][T27044] [ 1755.002371][T27027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.023576][T27027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.060728][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.157624][T27045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.168235][T27045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.468045][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.494501][T20349] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1755.649366][ T5858] usb 4-1: USB disconnect, device number 60 [ 1755.697125][T20349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.712504][T20349] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1755.722394][T20349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.751404][T20349] usb 3-1: config 0 descriptor?? [ 1755.772730][T20349] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1755.978355][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5406'. [ 1755.998803][T27039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.020039][T27039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.041131][T27039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5403'. [ 1756.113829][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.297340][T27055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.309226][T27055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.674199][T20349] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1756.784028][T27062] /dev/nullb0: Can't open blockdev [ 1756.855195][ T29] audit: type=1400 audit(2000000166.630:1990): avc: denied { ioctl } for pid=27060 comm="syz.5.5409" path="socket:[134131]" dev="sockfs" ino=134131 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1757.049495][ T29] audit: type=1326 audit(2000000166.640:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27060 comm="syz.5.5409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e67f9c799 code=0x0 [ 1757.076377][T20349] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.086737][T20349] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1757.095718][ T29] audit: type=1400 audit(2000000166.690:1992): avc: denied { ioctl } for pid=27060 comm="syz.5.5409" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1757.120797][T20349] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1757.129896][T20349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.145605][T20349] usb 4-1: config 0 descriptor?? [ 1757.153611][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.167504][T20349] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1757.184370][T20349] dvb-usb: bulk message failed: -22 (3/0) [ 1757.200008][T20349] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1757.221421][T20349] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1757.235302][T20349] usb 4-1: media controller created [ 1757.241253][T20349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1757.277546][T20349] dvb-usb: bulk message failed: -22 (6/0) [ 1757.285812][T20349] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1757.300329][T20349] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input219 [ 1757.317311][T20349] dvb-usb: schedule remote query interval to 150 msecs. [ 1757.325763][T20349] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1757.496956][T20349] dvb-usb: bulk message failed: -22 (1/0) [ 1757.502875][T20349] dvb-usb: error while querying for an remote control event. [ 1757.568886][T27066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1757.665527][T20349] dvb-usb: bulk message failed: -22 (1/0) [ 1757.671279][T20349] dvb-usb: error while querying for an remote control event. [ 1757.770917][ T29] audit: type=1400 audit(2000000167.610:1993): avc: denied { read } for pid=27067 comm="syz.5.5410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1757.853558][T20349] dvb-usb: bulk message failed: -22 (1/0) [ 1757.860036][T20349] dvb-usb: error while querying for an remote control event. [ 1758.033743][T20349] dvb-usb: bulk message failed: -22 (1/0) [ 1758.039523][T20349] dvb-usb: error while querying for an remote control event. [ 1758.054875][T27034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.112035][T27039] vlan2: entered allmulticast mode [ 1758.169163][T27073] comedi comedi4: bad chanlist[1]=0x00000040 chan=64 range length=2 [ 1758.183826][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.204997][T20349] dvb-usb: bulk message failed: -22 (1/0) [ 1758.222650][T20349] dvb-usb: error while querying for an remote control event. [ 1758.231697][T20413] usb 4-1: USB disconnect, device number 61 [ 1758.250441][ T5910] usb 3-1: USB disconnect, device number 92 [ 1758.322130][T20413] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1758.524745][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.572476][T27079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5412'. [ 1758.593030][T27079] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1758.631783][T27080] "syz.0.5414" (27080) uses obsolete ecb(arc4) skcipher [ 1758.866540][ T5910] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1759.028671][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.043682][ T5910] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1759.067265][T27097] input: syz0 as /devices/virtual/input/input220 [ 1759.094190][ T5910] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1759.123312][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.131321][ T5910] usb 3-1: Product: syz [ 1759.153279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.161560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.164317][ T5910] usb 3-1: Manufacturer: syz [ 1759.253118][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.403212][ T5910] usb 3-1: SerialNumber: syz [ 1759.414645][ T5910] usb 3-1: config 0 descriptor?? [ 1759.445019][T11688] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1759.605372][T11688] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1759.614096][T11688] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1759.625453][T11688] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1759.634487][T11688] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1759.645519][T11688] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1759.652188][T20413] usb 3-1: USB disconnect, device number 93 [ 1759.667044][T11688] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1759.678445][T11688] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1759.687201][ T5910] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1759.695210][T11688] usb 5-1: Product: syz [ 1759.699420][T11688] usb 5-1: Manufacturer: syz [ 1759.716968][T11688] cdc_wdm 5-1:1.0: skipping garbage [ 1759.722172][T11688] cdc_wdm 5-1:1.0: skipping garbage [ 1759.728654][T11688] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1759.734609][T11688] cdc_wdm 5-1:1.0: Unknown control protocol [ 1759.864952][ T5910] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1759.883225][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.900592][ T5910] usb 4-1: config 0 descriptor?? [ 1759.921068][ T5910] cp210x 4-1:0.0: cp210x converter detected [ 1760.263377][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.323277][ T5910] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1760.332476][ T5910] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1760.339068][T11688] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1760.350061][ T5910] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1760.360674][ T5910] usb 4-1: USB disconnect, device number 62 [ 1760.371418][ T5910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1760.380452][ T5910] cp210x 4-1:0.0: device disconnected [ 1760.494861][T11688] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1760.504674][T11688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.515761][T11688] usb 6-1: config 0 descriptor?? [ 1760.524423][T11688] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1761.430334][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.084261][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.092718][T11688] gspca_cpia1: usb_control_msg 03, error -110 [ 1762.117588][T11688] gspca_cpia1: usb_control_msg 01, error -32 [ 1762.421363][ T5858] usb 5-1: USB disconnect, device number 57 [ 1762.445954][T11688] gspca_cpia1: usb_control_msg 01, error -71 [ 1762.464831][T11688] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1762.501664][T11688] usb 6-1: USB disconnect, device number 5 [ 1762.532234][ T29] audit: type=1400 audit(2000000172.370:1994): avc: denied { getopt } for pid=27128 comm="syz.2.5428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1762.541862][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.614138][ T29] audit: type=1400 audit(2000000172.420:1995): avc: denied { relabelfrom } for pid=27128 comm="syz.2.5428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1762.636028][ T29] audit: type=1400 audit(2000000172.420:1996): avc: denied { relabelto } for pid=27128 comm="syz.2.5428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1762.692482][ T29] audit: type=1400 audit(2000000172.530:1997): avc: denied { ioctl } for pid=27135 comm="syz.3.5430" path="socket:[134309]" dev="sockfs" ino=134309 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1762.751826][ T29] audit: type=1400 audit(2000000172.530:1998): avc: denied { read } for pid=27135 comm="syz.3.5430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1763.019708][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.046287][T27146] netlink: 'syz.4.5432': attribute type 39 has an invalid length. [ 1763.547631][ T29] audit: type=1400 audit(2000000172.980:1999): avc: denied { read } for pid=27137 comm="syz.3.5431" lport=40604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1763.622976][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.725422][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.201928][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.723980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.828209][T27184] lo speed is unknown, defaulting to 1000 [ 1765.924597][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.043655][ T5952] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1766.824259][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 1766.834306][ T5952] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.853280][ T5952] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1766.874492][ T5952] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1766.893301][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.983716][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.022854][T27194] comedi comedi4: bad chanlist[1]=0x00000040 chan=64 range length=2 [ 1767.220349][ T29] audit: type=1400 audit(2000000177.060:2000): avc: denied { connect } for pid=27195 comm="syz.5.5446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1767.450620][ T5952] mcp2221 0003:04D8:00DD.0037: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1767.647684][T27176] FAULT_INJECTION: forcing a failure. [ 1767.647684][T27176] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.660474][T27176] CPU: 0 UID: 0 PID: 27176 Comm: syz.3.5439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1767.660492][T27176] Tainted: [L]=SOFTLOCKUP [ 1767.660496][T27176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1767.660503][T27176] Call Trace: [ 1767.660507][T27176] [ 1767.660512][T27176] dump_stack_lvl+0x100/0x190 [ 1767.660534][T27176] should_fail_ex.cold+0x5/0xa [ 1767.660549][T27176] ? tomoyo_encode2+0xfb/0x3c0 [ 1767.660564][T27176] should_failslab+0xc2/0x120 [ 1767.660576][T27176] __kmalloc_noprof+0xe0/0x850 [ 1767.660591][T27176] ? d_absolute_path+0x136/0x1b0 [ 1767.660610][T27176] tomoyo_encode2+0xfb/0x3c0 [ 1767.660627][T27176] tomoyo_encode+0x29/0x50 [ 1767.660642][T27176] tomoyo_realpath_from_path+0x18c/0x690 [ 1767.660662][T27176] tomoyo_path_number_perm+0x23c/0x580 [ 1767.660675][T27176] ? tomoyo_path_number_perm+0x22e/0x580 [ 1767.660689][T27176] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1767.660722][T27176] ? find_held_lock+0x2b/0x80 [ 1767.660737][T27176] ? __fget_files+0x215/0x3d0 [ 1767.660748][T27176] ? hook_file_ioctl_common+0x146/0x410 [ 1767.660768][T27176] ? __fget_files+0x21f/0x3d0 [ 1767.660782][T27176] security_file_ioctl+0xd3/0x230 [ 1767.660798][T27176] __x64_sys_ioctl+0xb7/0x210 [ 1767.660815][T27176] do_syscall_64+0x106/0xf80 [ 1767.660829][T27176] ? clear_bhb_loop+0x40/0x90 [ 1767.660843][T27176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.660855][T27176] RIP: 0033:0x7f9a43f9c799 [ 1767.660864][T27176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1767.660875][T27176] RSP: 002b:00007f9a44e3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.660886][T27176] RAX: ffffffffffffffda RBX: 00007f9a44215fa0 RCX: 00007f9a43f9c799 [ 1767.660893][T27176] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 000000000000000a [ 1767.660900][T27176] RBP: 00007f9a44e3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1767.660906][T27176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.660913][T27176] R13: 00007f9a44216038 R14: 00007f9a44215fa0 R15: 00007ffc9c24c068 [ 1767.660927][T27176] [ 1767.660937][T27176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1767.895084][T20349] usb 4-1: USB disconnect, device number 63 [ 1768.023368][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.640880][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.871714][T27215] FAULT_INJECTION: forcing a failure. [ 1768.871714][T27215] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.884589][T27215] CPU: 0 UID: 0 PID: 27215 Comm: syz.3.5449 Tainted: G L syzkaller #0 PREEMPT(full) [ 1768.884617][T27215] Tainted: [L]=SOFTLOCKUP [ 1768.884624][T27215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1768.884636][T27215] Call Trace: [ 1768.884642][T27215] [ 1768.884649][T27215] dump_stack_lvl+0x100/0x190 [ 1768.884683][T27215] should_fail_ex.cold+0x5/0xa [ 1768.884707][T27215] ? io_cache_alloc_new+0x45/0xe0 [ 1768.884731][T27215] should_failslab+0xc2/0x120 [ 1768.884749][T27215] __kmalloc_noprof+0xe0/0x850 [ 1768.884781][T27215] io_cache_alloc_new+0x45/0xe0 [ 1768.884806][T27215] io_uring_cmd_prep+0x3ed/0x610 [ 1768.884832][T27215] io_submit_sqes+0x9e4/0x2370 [ 1768.884866][T27215] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 1768.884892][T27215] ? __fget_files+0x21f/0x3d0 [ 1768.884912][T27215] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1768.884937][T27215] ? fput+0x79/0x100 [ 1768.884958][T27215] ? ksys_write+0x1ac/0x250 [ 1768.884984][T27215] ? __pfx_ksys_write+0x10/0x10 [ 1768.885018][T27215] do_syscall_64+0x106/0xf80 [ 1768.885041][T27215] ? clear_bhb_loop+0x40/0x90 [ 1768.885063][T27215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.885081][T27215] RIP: 0033:0x7f9a43f9c799 [ 1768.885097][T27215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1768.885114][T27215] RSP: 002b:00007f9a44e1a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1768.885133][T27215] RAX: ffffffffffffffda RBX: 00007f9a44216090 RCX: 00007f9a43f9c799 [ 1768.885145][T27215] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000007 [ 1768.885156][T27215] RBP: 00007f9a44e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.885166][T27215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.885176][T27215] R13: 00007f9a44216128 R14: 00007f9a44216090 R15: 00007ffc9c24c068 [ 1768.885202][T27215] [ 1769.169274][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.888859][T27227] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1769.898782][T27227] IPVS: set_ctl: invalid protocol: 0 46.127.0.0:0 [ 1769.963105][ T5910] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1770.177688][ T5910] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1770.183584][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.241785][ T5910] usb 3-1: config 0 has no interface number 0 [ 1770.288127][ T5910] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1770.361086][ T5910] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1770.416272][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.582411][T27232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5454'. [ 1770.600110][T27232] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5454'. [ 1771.423851][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.430941][ T5910] usb 3-1: Product: syz [ 1771.438556][ T5910] usb 3-1: Manufacturer: syz [ 1771.443247][ T5910] usb 3-1: SerialNumber: syz [ 1771.454288][ T5910] usb 3-1: config 0 descriptor?? [ 1771.655071][T27246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1771.732990][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1771.741869][T27220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5450'. [ 1771.754530][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.771759][ T5910] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1771.785522][ T5910] keyspan 3-1:0.133: unsupported endpoint type 0 [ 1771.823059][ T5910] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1771.854374][ T5910] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1771.855595][T27251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5459'. [ 1771.863621][ T5910] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1772.112707][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 1772.141837][ T5910] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1772.150611][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1772.213089][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1772.234682][ T5910] usb 3-1: USB disconnect, device number 94 [ 1772.338456][ T5910] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1772.353496][ T24] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1772.395075][ T5910] keyspan 3-1:0.133: device disconnected [ 1772.401098][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.433686][ T24] usb 6-1: config 0 descriptor?? [ 1772.667542][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.675663][T11688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.796745][T27261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5461'. [ 1772.924971][ T24] hid_parser_main: 222 callbacks suppressed [ 1772.924985][ T24] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x0 [ 1772.939063][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5461'. [ 1772.948450][ T24] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x0 [ 1772.955667][ T24] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x0 [ 1772.962750][ T24] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x0 [ 1772.970128][ T24] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x0 [ 1772.975101][ T29] audit: type=1800 audit(2000000182.810:2001): pid=27268 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.5464" name="bus" dev="overlay" ino=3194 res=0 errno=0 [ 1772.977261][ T24] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x0 [ 1773.000163][T27268] FAULT_INJECTION: forcing a failure. [ 1773.000163][T27268] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.007771][ T24] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x0 [ 1773.025842][T27268] CPU: 0 UID: 0 PID: 27268 Comm: syz.3.5464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1773.025866][T27268] Tainted: [L]=SOFTLOCKUP [ 1773.025872][T27268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1773.025881][T27268] Call Trace: [ 1773.025887][T27268] [ 1773.025893][T27268] dump_stack_lvl+0x100/0x190 [ 1773.025923][T27268] should_fail_ex.cold+0x5/0xa [ 1773.025943][T27268] ? alloc_pipe_info+0x1ec/0x590 [ 1773.025962][T27268] should_failslab+0xc2/0x120 [ 1773.025978][T27268] __kmalloc_noprof+0xe0/0x850 [ 1773.026005][T27268] alloc_pipe_info+0x1ec/0x590 [ 1773.026023][T27268] splice_direct_to_actor+0x78f/0xa30 [ 1773.026042][T27268] ? __lock_acquire+0x4a5/0x2630 [ 1773.026065][T27268] ? __pfx_direct_splice_actor+0x10/0x10 [ 1773.026085][T27268] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1773.026109][T27268] do_splice_direct+0x174/0x240 [ 1773.026126][T27268] ? __pfx_do_splice_direct+0x10/0x10 [ 1773.026141][T27268] ? avc_policy_seqno+0x9/0x20 [ 1773.026157][T27268] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1773.026177][T27268] ? rw_verify_area+0xce/0x6d0 [ 1773.026200][T27268] do_sendfile+0xadc/0xe20 [ 1773.026226][T27268] ? __pfx_do_sendfile+0x10/0x10 [ 1773.026248][T27268] ? __fget_files+0x21f/0x3d0 [ 1773.026271][T27268] __x64_sys_sendfile64+0x1d8/0x220 [ 1773.026288][T27268] ? ksys_write+0x1ac/0x250 [ 1773.026310][T27268] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1773.026334][T27268] do_syscall_64+0x106/0xf80 [ 1773.026353][T27268] ? clear_bhb_loop+0x40/0x90 [ 1773.026373][T27268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.026389][T27268] RIP: 0033:0x7f9a43f9c799 [ 1773.026402][T27268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1773.026417][T27268] RSP: 002b:00007f9a44e3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1773.026434][T27268] RAX: ffffffffffffffda RBX: 00007f9a44215fa0 RCX: 00007f9a43f9c799 [ 1773.026445][T27268] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1773.026455][T27268] RBP: 00007f9a44e3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.026464][T27268] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 1773.026473][T27268] R13: 00007f9a44216038 R14: 00007f9a44215fa0 R15: 00007ffc9c24c068 [ 1773.026503][T27268] [ 1773.154278][T27241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.155998][ T24] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x0 [ 1773.162471][T27241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.166158][ T24] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x0 [ 1773.321047][ T24] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x0 [ 1773.334058][ T24] corsair 0003:1B1C:1B3E.0038: hidraw0: USB HID v6f.fd Device [HID 1b1c:1b3e] on usb-dummy_hcd.5-1/input0 [ 1773.453243][T27275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5465'. [ 1773.720767][T20413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.864027][T27280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.873353][T27280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.883421][T27280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.960301][T27280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.970321][T27280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.994246][T27280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.019190][T27280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.082349][T27280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.090748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.621583][T20413] usb 6-1: USB disconnect, device number 6 [ 1775.139591][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5469'. [ 1775.149399][T27293] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5469'. [ 1776.675691][ T29] audit: type=1400 audit(2000000186.520:2002): avc: denied { unmount } for pid=17581 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1776.864021][T11688] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1777.023385][T11688] usb 3-1: Using ep0 maxpacket: 32 [ 1777.025188][T20349] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1777.092270][T11688] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1777.102696][T27314] syzkaller0: entered promiscuous mode [ 1777.107476][T11688] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1777.129089][T27314] syzkaller0: entered allmulticast mode [ 1777.159204][T27318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5476'. [ 1777.171492][T27318] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1777.198970][T11688] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1777.229614][T11688] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1777.273309][T11688] usb 3-1: Product: syz [ 1777.286569][T20349] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.299486][T20349] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1777.313359][T11688] usb 3-1: Manufacturer: syz [ 1777.313415][T20349] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1777.343003][T11688] hub 3-1:4.0: USB hub found [ 1778.057097][T20349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.069077][T11688] hub 3-1:4.0: 2 ports detected [ 1778.133977][T20349] usb 5-1: config 0 descriptor?? [ 1778.151496][T20349] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1778.163745][T20349] dvb-usb: bulk message failed: -22 (3/0) [ 1778.234196][T20349] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1778.283624][T11688] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1778.292375][T11688] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1778.296173][ T29] audit: type=1400 audit(2000000188.120:2003): avc: denied { ioctl } for pid=27307 comm="syz.2.5472" path="socket:[134737]" dev="sockfs" ino=134737 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1778.333825][T20349] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1778.370798][T20349] usb 5-1: media controller created [ 1778.384224][T11688] usb 3-1: USB disconnect, device number 95 [ 1778.421513][T27312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1778.441501][T20349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1778.506125][T20349] dvb-usb: bulk message failed: -22 (6/0) [ 1778.511932][T20349] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1778.520341][T25135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1778.532056][T25135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1778.536804][T20349] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input221 [ 1778.565855][T25135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1778.593972][T25135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1778.601461][T25135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1778.681503][T20349] dvb-usb: schedule remote query interval to 150 msecs. [ 1778.709464][T20349] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1778.745252][T20349] usb 5-1: USB disconnect, device number 58 [ 1778.779720][T20349] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1778.926358][T27329] fuse: Bad value for 'user_id' [ 1778.935822][T27329] fuse: Bad value for 'user_id' [ 1779.103310][T20349] net_ratelimit: 217 callbacks suppressed [ 1779.103323][T20349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.259542][T16477] ================================================================== [ 1779.267631][T16477] BUG: KASAN: use-after-free in __mutex_lock+0x1861/0x1b90 [ 1779.274837][T16477] Read of size 8 at addr ffff88804d4700a8 by task khidpd_04f55508/16477 [ 1779.283160][T16477] [ 1779.285485][T16477] CPU: 0 UID: 0 PID: 16477 Comm: khidpd_04f55508 Tainted: G L syzkaller #0 PREEMPT(full) [ 1779.285512][T16477] Tainted: [L]=SOFTLOCKUP [ 1779.285519][T16477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1779.285530][T16477] Call Trace: [ 1779.285536][T16477] [ 1779.285543][T16477] dump_stack_lvl+0x100/0x190 [ 1779.285576][T16477] print_report+0x156/0x4c9 [ 1779.285602][T16477] ? __virt_addr_valid+0x81/0x620 [ 1779.285627][T16477] ? __phys_addr+0xe8/0x180 [ 1779.285652][T16477] ? __mutex_lock+0x1861/0x1b90 [ 1779.285675][T16477] kasan_report+0xdf/0x1e0 [ 1779.285692][T16477] ? __mutex_lock+0x1861/0x1b90 [ 1779.285716][T16477] __mutex_lock+0x1861/0x1b90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1779.285738][T16477] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1779.285763][T16477] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1779.285783][T16477] ? l2cap_unregister_user+0x71/0x240 [ 1779.285808][T16477] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1779.285827][T16477] ? __pfx___mutex_lock+0x10/0x10 [ 1779.285849][T16477] ? __try_to_del_timer_sync+0x107/0x160 [ 1779.285873][T16477] ? rcu_is_watching+0x12/0xc0 [ 1779.285893][T16477] ? lockdep_hardirqs_on+0x78/0x100 [ 1779.285916][T16477] ? __try_to_del_timer_sync+0x107/0x160 [ 1779.285938][T16477] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 1779.285964][T16477] ? l2cap_unregister_user+0x71/0x240 [ 1779.285987][T16477] l2cap_unregister_user+0x71/0x240 [ 1779.286013][T16477] hidp_session_thread+0x459/0x680 [ 1779.286032][T16477] ? __pfx_hidp_session_thread+0x10/0x10 [ 1779.286051][T16477] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1779.286070][T16477] ? rcu_is_watching+0x12/0xc0 [ 1779.286090][T16477] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1779.286108][T16477] ? __kthread_parkme+0x18c/0x230 [ 1779.286133][T16477] ? kthread+0x13a/0x450 [ 1779.286148][T16477] ? __pfx_hidp_session_thread+0x10/0x10 [ 1779.286166][T16477] kthread+0x370/0x450 [ 1779.286182][T16477] ? __pfx_kthread+0x10/0x10 [ 1779.286198][T16477] ret_from_fork+0x754/0xd80 [ 1779.286216][T16477] ? __pfx_ret_from_fork+0x10/0x10 [ 1779.286234][T16477] ? __switch_to+0x7b4/0x1120 [ 1779.286254][T16477] ? __pfx_kthread+0x10/0x10 [ 1779.286270][T16477] ret_from_fork_asm+0x1a/0x30 [ 1779.286296][T16477] [ 1779.286303][T16477] [ 1779.353417][ T29] audit: type=1400 audit(2000000189.170:2004): avc: denied { write } for pid=5791 comm="syz-executor" path="pipe:[5388]" dev="pipefs" ino=5388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1779.355397][T16477] The buggy address belongs to the physical page: [ 1779.355407][T16477] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804d472a40 pfn:0x4d470 [ 1779.355429][T16477] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1779.355451][T16477] raw: 00fff00000000000 ffffea00017e4608 ffff8880b8541000 0000000000000000 [ 1779.355466][T16477] raw: ffff88804d472a40 0000000000000000 00000000ffffffff 0000000000000000 [ 1779.563660][T16477] page dumped because: kasan: bad access detected [ 1779.570049][T16477] page_owner tracks the page as freed [ 1779.575409][T16477] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 16010, tgid 16010 (syz-executor), ts 837396756391, free_ts 1779240606676 [ 1779.593713][T16477] post_alloc_hook+0x153/0x170 [ 1779.598473][T16477] get_page_from_freelist+0x111d/0x3140 [ 1779.604008][T16477] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1779.609897][T16477] alloc_pages_mpol+0x1fb/0x550 [ 1779.614730][T16477] ___kmalloc_large_node+0x104/0x150 [ 1779.619996][T16477] __kmalloc_large_node_noprof+0x1c/0x70 [ 1779.625608][T16477] __kmalloc_noprof+0x5be/0x850 [ 1779.630442][T16477] hci_alloc_dev_priv+0x1d/0x28a0 [ 1779.635445][T16477] __vhci_create_device+0xf0/0x880 [ 1779.640535][T16477] vhci_write+0x2c4/0x490 [ 1779.644841][T16477] vfs_write+0x6ac/0x1070 [ 1779.649155][T16477] ksys_write+0x12a/0x250 [ 1779.653467][T16477] do_syscall_64+0x106/0xf80 [ 1779.658040][T16477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.663925][T16477] page last free pid 23145 tgid 23145 stack trace: [ 1779.670398][T16477] __free_frozen_pages+0x7e1/0x10d0 [ 1779.675577][T16477] hci_release_dev+0x4ef/0x630 [ 1779.680328][T16477] bt_host_release+0x6a/0xb0 [ 1779.684897][T16477] device_release+0xa4/0x240 [ 1779.689467][T16477] kobject_put+0x1f7/0x640 [ 1779.693865][T16477] put_device+0x1f/0x30 [ 1779.698003][T16477] vhci_release+0x185/0x230 [ 1779.702492][T16477] __fput+0x3ff/0xb40 [ 1779.706453][T16477] task_work_run+0x150/0x240 [ 1779.711023][T16477] do_exit+0x8b8/0x2b60 [ 1779.715165][T16477] do_group_exit+0xd5/0x2a0 [ 1779.719653][T16477] get_signal+0x1ec7/0x21e0 [ 1779.724135][T16477] arch_do_signal_or_restart+0x91/0x7a0 [ 1779.729662][T16477] exit_to_user_mode_loop+0x86/0x4a0 [ 1779.734933][T16477] do_syscall_64+0x67c/0xf80 [ 1779.739503][T16477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.745372][T16477] [ 1779.747676][T16477] Memory state around the buggy address: [ 1779.753295][T16477] ffff88804d46ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1779.761333][T16477] ffff88804d470000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1779.769369][T16477] >ffff88804d470080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1779.777405][T16477] ^ [ 1779.782763][T16477] ffff88804d470100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1779.790799][T16477] ffff88804d470180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1779.798835][T16477] ================================================================== [ 1779.808155][T16477] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1779.815355][T16477] CPU: 0 UID: 0 PID: 16477 Comm: khidpd_04f55508 Tainted: G L syzkaller #0 PREEMPT(full) [ 1779.826705][T16477] Tainted: [L]=SOFTLOCKUP [ 1779.831005][T16477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1779.841037][T16477] Call Trace: [ 1779.844299][T16477] [ 1779.847211][T16477] dump_stack_lvl+0x100/0x190 [ 1779.851879][T16477] vpanic+0x552/0x970 [ 1779.855840][T16477] ? __pfx_vpanic+0x10/0x10 [ 1779.860322][T16477] ? mark_held_locks+0x40/0x70 [ 1779.865072][T16477] ? __mutex_lock+0x1861/0x1b90 [ 1779.869906][T16477] panic+0xd1/0xe0 [ 1779.873605][T16477] ? __pfx_panic+0x10/0x10 [ 1779.878020][T16477] ? check_panic_on_warn+0x1f/0x90 [ 1779.883122][T16477] check_panic_on_warn.cold+0x19/0x34 [ 1779.888475][T16477] end_report.part.0+0x3a/0x90 [ 1779.893224][T16477] kasan_report.cold+0xe/0x18 [ 1779.897887][T16477] ? __mutex_lock+0x1861/0x1b90 [ 1779.902737][T16477] __mutex_lock+0x1861/0x1b90 [ 1779.907396][T16477] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1779.913362][T16477] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1779.918716][T16477] ? l2cap_unregister_user+0x71/0x240 [ 1779.924073][T16477] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1779.929426][T16477] ? __pfx___mutex_lock+0x10/0x10 [ 1779.934434][T16477] ? __try_to_del_timer_sync+0x107/0x160 [ 1779.940050][T16477] ? rcu_is_watching+0x12/0xc0 [ 1779.944802][T16477] ? lockdep_hardirqs_on+0x78/0x100 [ 1779.949982][T16477] ? __try_to_del_timer_sync+0x107/0x160 [ 1779.955605][T16477] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 1779.961572][T16477] ? l2cap_unregister_user+0x71/0x240 [ 1779.966930][T16477] l2cap_unregister_user+0x71/0x240 [ 1779.972113][T16477] hidp_session_thread+0x459/0x680 [ 1779.977205][T16477] ? __pfx_hidp_session_thread+0x10/0x10 [ 1779.982817][T16477] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1779.989040][T16477] ? rcu_is_watching+0x12/0xc0 [ 1779.993792][T16477] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1780.000012][T16477] ? __kthread_parkme+0x18c/0x230 [ 1780.005024][T16477] ? kthread+0x13a/0x450 [ 1780.009248][T16477] ? __pfx_hidp_session_thread+0x10/0x10 [ 1780.014860][T16477] kthread+0x370/0x450 [ 1780.018908][T16477] ? __pfx_kthread+0x10/0x10 [ 1780.023475][T16477] ret_from_fork+0x754/0xd80 [ 1780.028047][T16477] ? __pfx_ret_from_fork+0x10/0x10 [ 1780.033140][T16477] ? __switch_to+0x7b4/0x1120 [ 1780.037803][T16477] ? __pfx_kthread+0x10/0x10 [ 1780.042370][T16477] ret_from_fork_asm+0x1a/0x30 [ 1780.047121][T16477] [ 1780.050330][T16477] Kernel Offset: disabled [ 1780.054638][T16477] Rebooting in 86400 seconds..