last executing test programs: 12.47222013s ago: executing program 3 (id=623): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a", 0x14, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x127b40, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40042, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x5e, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8], 0x30}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)='c', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r9, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r6, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4044080) 11.567248823s ago: executing program 3 (id=631): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f000012b000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000480)=[0x1], &(0x7f0000001680), 0x0) write$UHID_CREATE(r1, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) writev(r1, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a"], 0x7c}}, 0x0) rt_sigqueueinfo(0x0, 0x1000002f, &(0x7f0000000340)={0x31, 0x718, 0x80000000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8885}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d2", 0x17}], 0x1) ptrace$cont(0x18, r5, 0x7ffffffe, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0xe, 0x6, 0x3, 0x68004, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000d, 0x3b071, 0xffffffffffffffff, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 8.005125939s ago: executing program 2 (id=648): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$usbip_server(r0, &(0x7f0000000e80)=@ret_submit={{0x3, 0x6, 0x0, 0x1, 0x4}, 0x2, 0x0, 0x3, 0x0, 0x2}, 0x30) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mknod(&(0x7f0000000340)='./bus\x00', 0xc000, 0x2000008) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') 7.876283867s ago: executing program 2 (id=649): r0 = io_uring_setup(0x5136, &(0x7f00000005c0)={0x0, 0x799a, 0x8000, 0x0, 0x3a3}) r1 = syz_io_uring_setup(0x33ad, &(0x7f0000000100)={0x0, 0x26bb, 0x4000, 0x0, 0x84, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000280), 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000580)={0x40, 0x0, &(0x7f00000003c0)=[r2]}, 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000240)={0x200000, 0x200003, 0x9, 0x0, 0x7, 0x3}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_mr_cache\x00') r5 = io_uring_setup(0x3aa5, &(0x7f00000002c0)={0x0, 0x32b6, 0x880, 0x0, 0x35d}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r4, r4, 0x0) statx(r4, 0x0, 0x1000, 0x200, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x5b, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x400d0}, 0x10) 7.80852667s ago: executing program 2 (id=650): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @private1, 0x9}]}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000010c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x18, 0x1, 0x0) socket(0x18, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x1a, 0x713, 0x0, 0x259fdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e23, 0x8001, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x3, 0x543}, {0xa, 0x7fffffffffffffff}, {0x0, 0x0, 0x1c3}, 0x70bd28, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$inet(r8, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=ANY=[@ANYRES16=0x0, @ANYRES32=r2, @ANYRES8=r5, @ANYRESDEC=r9, @ANYRES64=r0, @ANYRESDEC=r2, @ANYRESDEC=r6, @ANYRES8=r2, @ANYBLOB="a01eeb7ee07c891bac20d405ed1bcc3dfff1d1a7d9cdae8a45cf639980bd6375b7bd2460a4dc3fd3779bd811824126102f74aa81b99e1150bc6ada77c6877b4eaafe9413d24dc6eda8a539bb89fa7d5e809dcff87278a1145d0cd5445c5cffcf9282e0df6c9c8111af3e663977a55d33f0d9de8461989f8e2de17fec1071bcd933e5f10b02622ea3d635833d5bb085649213025373eab2", @ANYRES32=r4], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 7.521354831s ago: executing program 3 (id=653): socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc0, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.139941705s ago: executing program 1 (id=657): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000600)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) r4 = socket$netlink(0x10, 0x3, 0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) close_range(r4, 0xffffffffffffffff, 0x0) 6.109215511s ago: executing program 3 (id=658): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\xeful\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x2, 0xffffffff, 0x3, {0xa, 0x4e24, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}}}, 0x3a) r6 = semget$private(0x0, 0x5, 0xac) semctl$SETALL(r6, 0x0, 0x9, 0x0) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0xc0, 0x0, 0x0, 0x4}) r8 = getuid() semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r8, 0x0, 0x88, 0x2}, 0x0, 0x75d4, 0x0, 0x0, 0x1, 0x0, 0x9}) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002740)={{0x1, 0x1, 0x18, r0, {r8, r9}}, './file0\x00'}) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005ff0000", @ANYBLOB="4520000200200000140013800900010069706970000000000400028008002e00030000006b5e6118cf9a8ea5ca274f21eb6d5911dd85a4db84e11daff53ae51e26f8fd487ad775b3d850b99a2afd1eca1b1c71b70f8b44cd74f8c33077305206e172a87af991c00b0f2d7e25125fbb742bf4a1d6c978199c0f0d5d056e1e7f496c8e6d7764e559c34afdd06b192280f67a6646d6338664b1909fb5685e2593f31a760a030e303ba6787c70b17886a79c0fbbae1d7ecdc45457761bf02d079dd6"], 0x3c}}, 0x0) 5.891940481s ago: executing program 0 (id=660): r0 = io_uring_setup(0x5136, &(0x7f00000005c0)={0x0, 0x799a, 0x8000, 0x0, 0x3a3}) r1 = syz_io_uring_setup(0x33ad, &(0x7f0000000100)={0x0, 0x26bb, 0x4000, 0x0, 0x84, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000280), 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000580)={0x40, 0x0, &(0x7f00000003c0)=[r2]}, 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000240)={0x200000, 0x200003, 0x9, 0x0, 0x7, 0x3}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_mr_cache\x00') r5 = io_uring_setup(0x3aa5, &(0x7f00000002c0)={0x0, 0x32b6, 0x880, 0x0, 0x35d}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r4, r4, 0x0) statx(r4, 0x0, 0x1000, 0x200, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x5b, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x400d0}, 0x10) 5.869923495s ago: executing program 2 (id=661): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x0) 3.683992522s ago: executing program 1 (id=662): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0xc65b, 0x4) 3.271190152s ago: executing program 0 (id=663): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x32, 0x300, 0x70bd2b, 0x25dfdbfc, {0x4}, [@nested={0x20, 0xb9, 0x0, 0x1, [@typed={0x4, 0xac}, @nested={0x4, 0x42}, @typed={0x8, 0x129, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x60, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x88}]}, @nested={0x8, 0x3e, 0x0, 0x1, [@typed={0x4, 0x147}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc8d0}, 0x11) r2 = open(&(0x7f0000000040)='./file1\x00', 0x8000, 0x1c4) ftruncate(r2, 0x2007ffc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "e1810f6f463dc4db", "682377ef2eab5b15f5d35b611b615013b355555b747672927450b671435401b1", "bac687ea", "8b4763d340f65f4f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x802, 0x2) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200103afffe8000000000000000409e60b409000000000000bbff0200000000000000950000000000018600907800000000000000"], 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000380)={0x11, 0x1, 0x0, "eee98fa706178749cb4d7d93e33c9b6b7bd152f36ce2d1f5dca852d6ac1891e2", 0x47425247}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {0xffbb51d743368073}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x4000000) 3.269756714s ago: executing program 2 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000240)=""/75, 0x4b}], 0x2, 0x6, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) syz_usb_control_io(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.215187213s ago: executing program 3 (id=665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001480)=@newtaction={0xd24, 0x30, 0xb, 0x0, 0x0, {}, [{0xd10, 0x1, [@m_police={0xd0c, 0x6, 0x0, 0x0, {{0xb}, {0xc50, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffb, 0xa26, 0x0, 0x10000, 0x5d, 0x2bf, 0xffffffff, 0x6, 0x4, 0x8, 0x3, 0x5, 0x1, 0x2, 0xb, 0x5, 0x7, 0x3, 0xfffffffa, 0x3, 0x200c, 0x400, 0x0, 0x1, 0x0, 0xa13, 0x6, 0xc000000, 0x6, 0xfffffff6, 0x200, 0xfc11, 0x8, 0x8841, 0x20, 0x108, 0x4917f0e8, 0x6, 0xf63, 0x3, 0x0, 0x1, 0xb, 0x5, 0x6, 0xef70, 0x1, 0x9, 0x0, 0xcdb0, 0x0, 0x4, 0x9, 0x1, 0x5, 0x80000000, 0x2, 0x5e, 0x3, 0x0, 0x4, 0x7, 0x7fff, 0x2, 0x5, 0xf, 0xc2e7, 0x5, 0x5, 0x5191, 0x1a96, 0x400, 0x4, 0x1, 0x4b6d8679, 0x8001, 0x9, 0xffffff01, 0x5, 0x5, 0x0, 0x9, 0x401, 0x8, 0xd0f, 0xbd20, 0x8, 0x1, 0x0, 0x80000001, 0xe, 0xba, 0x8001, 0x7, 0xa, 0x8, 0x100, 0x10001, 0x6, 0x81, 0xb0000000, 0x2, 0x8, 0x1, 0xf, 0x2, 0x1, 0x1, 0x7, 0x7, 0x0, 0x7ff, 0x5, 0x1, 0xfff, 0xb0, 0x5, 0x7, 0x4, 0xfffffff8, 0x0, 0x5, 0x1, 0xe, 0x7, 0x7, 0x80, 0x6, 0x4dd0, 0x1, 0xbc7, 0xfffffffc, 0x2, 0xffffffff, 0x8000, 0xa68, 0xfffffff8, 0x57f7, 0xffff, 0x4, 0x1c77, 0x3ff, 0x9, 0x4, 0x15c, 0x1, 0x0, 0x4, 0xc, 0x0, 0x1, 0x4, 0x3, 0x6e8, 0x7, 0x3, 0x8, 0x3ff, 0x3, 0x1, 0x7b8, 0x6, 0x9, 0x8001, 0x4, 0x100, 0x9, 0x9, 0x8, 0xfffffffc, 0x6, 0x0, 0x6a95, 0xa7a, 0xc, 0x0, 0xe0000000, 0xf, 0x2, 0xffffff28, 0x3ff, 0x1c71, 0x7, 0x7b3288d1, 0x100, 0x8, 0x2, 0x6d2f, 0x5, 0x6, 0x2, 0x2, 0x4, 0x2, 0x0, 0x2ac26e17, 0x1, 0x4, 0x20, 0x80000000, 0x8, 0x2, 0xaa, 0x7, 0x8, 0x0, 0xd9ba, 0x6, 0x4, 0x3, 0x2, 0x1, 0x7, 0x5, 0x8, 0xf, 0x6, 0x9b67, 0x2da, 0x5, 0x7fff, 0x4, 0x4, 0x3, 0x6, 0x57, 0x401, 0x6, 0x78, 0x7, 0x5, 0x4, 0x3, 0x1, 0x6, 0x9b2, 0xd, 0x10001, 0xff, 0x0, 0x401, 0x8, 0xffff, 0xfffffff0, 0x4, 0x1000, 0x5, 0x6, 0x589, 0x10000, 0x40, 0x8, 0x559f, 0xfffff953, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa2, 0x80000001, 0x8, 0xfffeffff, 0x0, 0x1000, 0x3, 0x8000, 0x1, 0x7fffffff, 0x1, 0x6, 0x5, 0xfffffffb, 0xb, 0x3, 0x9, 0x2, 0x80000000, 0x3b, 0x2, 0x6, 0x8, 0x4, 0x8, 0x2376, 0x7, 0x5, 0x0, 0xffff, 0x9, 0x3, 0x7, 0x0, 0x1, 0x200, 0x5, 0x0, 0x600, 0x6, 0x9, 0xfffffc01, 0xfffffffb, 0x7, 0x564, 0x4, 0x1, 0x8, 0x10000, 0x3, 0x9, 0x3, 0x3, 0x2, 0x6aa, 0x373, 0x200, 0x3, 0xfffffff8, 0x9, 0x8, 0xb, 0x8, 0x8, 0x6, 0xe43a, 0x3, 0x800, 0x40, 0x10, 0x7fff, 0x7fff, 0x9, 0x5, 0x200, 0x0, 0x0, 0xfffffffe, 0x4c4e5d3a, 0xc6, 0x4, 0xed, 0x8, 0x9, 0x2, 0x9, 0x3, 0x2, 0x14, 0x1, 0x6, 0xdc, 0x4, 0xe7, 0x27, 0x1, 0x6, 0x2000000, 0x7, 0x0, 0x1000, 0x7f2, 0xfffffff8, 0x8, 0x7fffffff, 0x5, 0x1, 0xfffffff1, 0xe6, 0x4, 0x800, 0x8, 0xffff0001, 0x6, 0x10001, 0x8001, 0x9, 0x0, 0x7, 0x200, 0xad, 0xb04, 0xffffffff, 0x7, 0xfff, 0x7fff, 0x7fffffff, 0x6, 0x1, 0x0, 0xf0000000, 0x1, 0x7, 0xdbf1, 0x6, 0xff, 0x0, 0x89, 0x4, 0x6, 0x0, 0x3206bd7c, 0x2, 0x3, 0x6, 0xc5, 0x3, 0x89, 0x0, 0x1, 0x7, 0x40, 0xc0d7, 0x3, 0x6, 0xd9, 0x9, 0x10, 0x2, 0x1, 0xfffffffc, 0x1ff, 0x5, 0x2, 0x2, 0x64, 0xef9, 0x8, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0x9, 0x2, 0x0, 0x7, 0x48e, 0x50, 0x5, 0x10001, 0x2, 0x0, 0x9a88, 0x200, 0x0, 0x22a2, 0x8f22, 0x1, 0xa05, 0x7, 0x0, 0x5, 0x44, 0xf339, 0x51, 0x3, 0x0, 0x9, 0xee9, 0x7fff, 0xc, 0x2, 0x4, 0x2, 0x8000, 0x0, 0x101, 0xfa, 0x2, 0x3, 0x6, 0x3, 0x0, 0x2, 0x0, 0x800, 0x5, 0x10000, 0x3, 0x2, 0x28c, 0x5, 0x4, 0x8000, 0x7c73, 0x9, 0x60f, 0x7, 0xcced, 0x2, 0x0, 0x328, 0x4, 0x9, 0xa8e, 0x7, 0xf2, 0x4, 0x4, 0x1, 0x1, 0x2cf5, 0x0, 0x5, 0x164dfb97, 0x3, 0x8, 0x3d59a5ec, 0x2, 0x8, 0xfffff09a, 0x8, 0x2, 0x52cf, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x46d9, 0x80000, 0x4, 0x0, 0x3, 0x9e1, 0x1, 0x40, 0x8, 0x9, 0x1ff, 0x4b2, 0x7, 0x9, 0x6, 0xf, 0x5647, 0x4, 0xf, 0x7ff, 0x0, 0x6, 0x3, 0x3, 0x8, 0x401, 0x400, 0x6a, 0x5, 0x1, 0x6, 0x0, 0x1, 0x5, 0x2, 0xe, 0xfffffffb, 0x1da4, 0x3, 0xfffffffb, 0x2, 0x1000, 0x8000, 0x2, 0x1, 0x6, 0x475, 0x3, 0x800, 0x8, 0xdf, 0x0, 0x2, 0x2, 0x3, 0x4, 0x7fffffff, 0x6, 0xffff, 0x0, 0x300, 0x7, 0x6, 0x6, 0x4000, 0x8, 0x8, 0xb, 0x10000, 0x2, 0xf, 0x0, 0x2, 0xfffffffa, 0xa, 0x7fffffff, 0x4, 0x4, 0xb3, 0x7, 0x6e29, 0xffff5dbc, 0x7, 0x51b, 0x4, 0x8001, 0x1e2d, 0x7, 0x7, 0x7bc72312, 0x4, 0x4, 0x6bc, 0x2, 0x7, 0x10000, 0x7, 0x5, 0x0, 0x3, 0xdb, 0x2, 0x6, 0x8, 0x8, 0x8, 0x9, 0x5, 0x39b, 0x8, 0x2, 0x1, 0x2, 0x2, 0x2, 0x2, 0x7f, 0x3, 0xfffffbff, 0xc1, 0xd34b, 0xffffffb5, 0x8, 0xffff, 0x80000000, 0x0, 0xab, 0x4, 0x6, 0x6, 0x1, 0x5, 0x0, 0x10, 0x3, 0x9, 0x8, 0x1, 0xfffffff8, 0x3, 0x8, 0x80000001, 0x4b9, 0xde, 0x6, 0x14f6, 0x2fd, 0xa, 0x2, 0x4, 0x7, 0x4, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7fff, 0x3, 0x10000, 0x7, 0xb34d, 0x15, 0x6, 0x400, 0x9, 0x6, 0x401, 0xd, 0x4, 0xe9b, 0x7, 0x4, 0x0, 0x2, 0x3ea, 0xe, 0x3, 0x7, 0x2966, 0x1, 0x6f, 0x0, 0x3219, 0x81, 0x4, 0x4, 0x800, 0x6, 0x7, 0x4c1, 0x3, 0x5, 0x1, 0x200, 0x9, 0x1, 0xc, 0xfa79, 0x8, 0x3, 0x2, 0x1, 0x540725e0, 0xfffffffb, 0x101, 0xb, 0x10000, 0x1, 0x0, 0x4, 0x4a8, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2d07, 0x4, 0x401, 0x0, 0x6, 0x48233179, 0x7, 0xff, 0x80, 0x9, 0xd, 0x100, 0x0, 0x1000, 0x1000, 0x8, 0x101, 0x18, 0x9, 0xfffffe00, 0x5000000, 0x5, 0x7, 0xfffffffb, 0x9, 0x0, 0x4, 0x7, 0x6, 0x7, 0x2, 0x8001, 0x6, 0x2, 0x7, 0xc50, 0x711341df, 0x7fffffff]}]]}, {0x94, 0x6, "32edbb31720f64a386866de86a52ab650e3974ea9b86e01f7f5e0cf99de95558e9bdaa2ab084b42cffbfd21382aae1204a0a72ce56843a4df6254d65641da63793944d0e1f2dc18ef3503c986e5001ab22c2cdba01c0b34e7e630ef0c361639d70c6487954d0f885ea69a52fa974888de407ca3ac27decd8a8e1f0b81171c4d709b5082ee98d7a733622539f44d9702c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xd24}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x2, 0x4, 0x0, 0x56b}]}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002c0007012bbd7000ffdbdf2505"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0xc810) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ba00"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r7 = socket(0xa, 0x5, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r10 = socket(0x2a, 0x2, 0x0) ptrace(0x4218, r2) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r12, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x8, 0x0, 0x0}}, 0x10) r14 = openat$comedi(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$COMEDI_INSNLIST(r14, 0x8010640b, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x20001, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x1, 0x5, 0x6, 0x9, 0x9, 0x0, 0x0, 0x7, 0x0, 0x7, 0x8, 0xd, 0x0, 0x9, 0x0, 0xf], 0x1, [0x6, 0x8, 0x4a0, 0x28, 0x1f37, 0x9, 0x4009, 0x6, 0x9, 0x4, 0x265, 0x3, 0x7, 0x81, 0x1, 0x6], [0xb, 0x5, 0x3, 0x51, 0x5, 0xc, 0x55, 0x4, 0x2004, 0x5, 0xc6c6, 0x101, 0x3, 0x4, 0x7, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24044014}, 0x4000010) setreuid(0xee01, 0xee01) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r9], 0x14) 2.972863892s ago: executing program 1 (id=667): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x4, 0x1, 0x5, 0x2a, 0x0, 0xffffffffffffffff, 0x5, 0x1}, &(0x7f0000000180)={0x2, 0x1, 0xb, 0x8000000000000001, 0x7f, 0x5, 0x8, 0x6}, &(0x7f0000000200)={0x7f8c06e5, 0x5, 0xb, 0xc75, 0x0, 0x3, 0xffff, 0x8000000000001}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x8]}, 0x8}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000540)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x20, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r5, 0x100000000000000}, 0x38) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xce, 0x7, &(0x7f0000006680)) r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) bind$tipc(r2, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) 2.80853101s ago: executing program 0 (id=668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0xffff0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000000)={0x0, 0x240, 0x380, 0x0}) (fail_nth: 2) 2.781874526s ago: executing program 3 (id=669): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) close(0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x201a40, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x8001, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.710441902s ago: executing program 1 (id=670): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x114, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, "", [@nested={0x102, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) (fail_nth: 5) 2.583868216s ago: executing program 1 (id=671): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @private1, 0x9}]}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000010c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x18, 0x1, 0x0) socket(0x18, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x20400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x1a, 0x713, 0x0, 0x259fdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e23, 0x8001, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x3, 0x543}, {0xa, 0x7fffffffffffffff}, {0x0, 0x0, 0x1c3}, 0x70bd28, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$inet(r8, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=ANY=[@ANYRES16=0x0, @ANYRES32=r2, @ANYRES8=r5, @ANYRESDEC=r9, @ANYRES64=r0, @ANYRESDEC=r2, @ANYRESDEC=r6, @ANYRES8=r2, @ANYBLOB="a01eeb7ee07c891bac20d405ed1bcc3dfff1d1a7d9cdae8a45cf639980bd6375b7bd2460a4dc3fd3779bd811824126102f74aa81b99e1150bc6ada77c6877b4eaafe9413d24dc6eda8a539bb89fa7d5e809dcff87278a1145d0cd5445c5cffcf9282e0df6c9c8111af3e663977a55d33f0d9de8461989f8e2de17fec1071bcd933e5f10b02622ea3d635833d5bb085649213025373eab2", @ANYRES32=r4], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1.71488656s ago: executing program 0 (id=674): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = fsopen(0x0, 0x1) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r2, &(0x7f0000000100)=""/107, 0x6b) write$nci(r2, &(0x7f0000000100)=ANY=[], 0x4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x3) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x6000) setresuid(0xee01, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r3, &(0x7f0000000000)=""/30, 0x1e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000003c0)={0x1, 0x0, @ioapic={0x50000, 0x5, 0xffffffff, 0xfffffffd, 0x0, [{0xe, 0x2, 0x0, '\x00', 0x3f}, {0x9, 0x0, 0x5}, {0xe, 0x19, 0x8, '\x00', 0x7}, {0x4, 0x7, 0x5, '\x00', 0x5}, {0x6, 0x3, 0x6}, {0x8, 0x0, 0x0, '\x00', 0x8}, {0x20, 0x8, 0xb, '\x00', 0xf}, {0xe, 0x40, 0x6, '\x00', 0x80}, {0xc, 0x4, 0xe, '\x00', 0x10}, {0x9, 0x3, 0x3, '\x00', 0x2}, {0x6, 0x4, 0x5, '\x00', 0x80}, {0x2, 0x4, 0x6, '\x00', 0x37}, {0x5, 0x5, 0xc, '\x00', 0x4}, {0x40, 0x1, 0xf, '\x00', 0x8}, {0x7, 0x9, 0x5, '\x00', 0x4}, {0x3, 0x80, 0xb, '\x00', 0x7}, {0x4, 0x1, 0x1, '\x00', 0x4}, {0x4, 0x3, 0x6, '\x00', 0x81}, {0x13, 0x1, 0x5d, '\x00', 0x7}, {0xbc, 0x5, 0x2, '\x00', 0xe}, {0x9, 0x4, 0x5, '\x00', 0x5}, {0x5, 0x90, 0x1, '\x00', 0x41}, {0x5, 0x6, 0x6, '\x00', 0x2}, {0x8, 0x9, 0x8, '\x00', 0x7}]}}) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7b, 0x1, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0xc7c, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004086, 0x0, 0xfffffff8]}) write(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a00000609"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x40, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0xffffffff, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x5, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x3, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x6, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) 1.654473874s ago: executing program 4 (id=676): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000880)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000000)="d4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="03", 0x1}], 0x1}}], 0x2, 0x20000050) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xf0, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc0, 0x2, {{0x10, 0x3, 0x1, 0x7, 0x800, 0xc}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x9c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x10, 0x3, 0xdee4, 0x800}}, @NETEM_LOSS_GE={0x14, 0x2, {0x184, 0xc, 0x3, 0x1400}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xff, 0xffffffad, 0x7, 0xffff0000}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc26, 0x1b15, 0x4, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x80000001, 0x5, 0x5, 0xfffffffb}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7000, 0x3ff, 0x9, 0x1e, 0xb}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xe, 0x5, 0x7}}]}]}}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4046191}, 0x8840) ioperm(0x1, 0x3, 0x163f) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x800, 0x7ffffeff, 0x3}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050026bd7000000000004400000008000300", @ANYRES32=r12, @ANYBLOB="14002380050004"], 0x30}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000480)={0x50000014}) r13 = getpid() getsockopt$inet_int(r6, 0x0, 0x22, &(0x7f00000004c0), &(0x7f0000000540)=0x4) kcmp$KCMP_EPOLL_TFD(r13, r13, 0x7, r8, &(0x7f0000000100)={r8, 0xffffffffffffffff, 0x1}) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0xc}, 0x0) syz_io_uring_setup(0x10e9, &(0x7f0000000640)={0x0, 0x2452, 0x800, 0x0, 0x8022d}, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="6eba84a58bacca01e9f0ebfeec1621e382b8a0c53089fbf0608327161d63e7788ce35b75bbd9ed3ab10bb52ee821c0e3b828efae855456279c747ef3500fe533ab7197f0b372897d883627b60edeb52bcc7a1a90795cf34a36d38264f637aa9ab8af3853139cab798683731d6bdcb819d8f76e", @ANYRES64=0x0], 0x11) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x59, @broadcast, 0x4e22, 0x4, 'ovf\x00', 0x0, 0x1000, 0x27}, 0x2c) 1.535307261s ago: executing program 4 (id=677): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84c00) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000bc0)=0xffffffff, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x6, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) pread64(r0, &(0x7f0000000080)=""/255, 0xff, 0x5) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.412160523s ago: executing program 1 (id=678): msgsnd(0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) pwrite64(r0, &(0x7f0000000000)='q', 0x1, 0x111ffe) accept$alg(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f00000031c0)}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfd}}], 0x60}}, {{&(0x7f0000000d80)=@generic={0x21, "5e835a1718f8569c479ffa46110a2abbc04eb0de7c1a5cfa90fa58a8eba0d3a946d2a26218739293bd59609316a5efaf0a8fccba92f726bc2d8d9982fc581a73e9d9dd45b3a8b3ac2bb659bd207a86da9d13522159e622a9173a5ea36ceda033b12c85ab9c18518bcb403ec751eee1ed77a2d5bbe0668f9271b7f74f41f7"}, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x5e120d88}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) mmap(&(0x7f0000337000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r7, &(0x7f0000001180)={0x2020}, 0x2020) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001480)={r7, &(0x7f0000000440)="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", &(0x7f0000001440)=@tcp6=r8, 0x1}, 0x20) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d810009050303000000050009058a03"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.314693194s ago: executing program 2 (id=679): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x6f5e, 0x8001) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@gettaction={0xe4, 0x32, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdc}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f34000}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf62}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x714}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000400}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000040)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="000000000000009885c50061000000000000009500000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0x36, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000540)=0x4) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001380)={0x53, 0xffffffffffffffff, 0x6, 0xf, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="be782793de00", 0x0, 0x87, 0x2, 0x1, 0x0}) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="08010000002409000031000109022404000921200000010f47378975d4b063000000c580000000000040e65077be7d1ba1480132c4164f5fcf5fa89cebbc77f84cd28b0f7f433ca3e98e8232bad69e670c935f06340959b5f87bb1848d5b273d0c93028697d4bdc42b5ead2f1ee178a9982b7b"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9, 0x21, 0xb02d, 0xfe}}}, &(0x7f0000000080)={0x8c91b7153c6ffb64, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 1.285314757s ago: executing program 4 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x50, r2, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.16622865s ago: executing program 0 (id=681): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01864c1, &(0x7f0000000200)={r3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x8080b, 0x3) r6 = socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x2c3c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x2c04, 0x2, [@TCA_CGROUP_ACT={0x2c00, 0x1, [@m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x1cb8, 0x5, 0x0, 0x0, {{0xa}, {0x1c8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0xa, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x8, 0x9, 0x5, 0x8, 0x9}, 0x75, 0x6, [{0x1, 0x9, 0x0, 0x0, 0x1, 0x2}, {0x3, 0xe, 0x1, 0x1, 0x7, 0x51b}]}, [{0x0, 0x7, 0x8, 0x20000, 0x440, 0x60}, {0xb, 0x779, 0x6, 0x8, 0x7fff, 0xff}, {0x9, 0x1, 0x81, 0x7fff, 0x7}, {0x10001, 0xfd27, 0x10, 0x81, 0x80, 0x200}, {0x1ff, 0x8, 0x2c3, 0x4, 0x174, 0x2}, {0xfffffff9, 0x6, 0x563, 0x8, 0xc, 0x6}, {0x2, 0x0, 0x8, 0xb3, 0x5, 0x200}, {0x5, 0xffff, 0x2f, 0xc, 0x1, 0x6cb}, {0x61, 0x222, 0x7651, 0x80000001, 0x1, 0x80}, {0x5, 0x93, 0x1, 0x3165, 0x2, 0x4}, {0x9, 0x7, 0x5, 0x9, 0x2, 0x4}, {0x4, 0x6, 0x9, 0x3, 0xfffffff7, 0x2}, {0x2, 0x6, 0x0, 0x3, 0x4221, 0x7}, {0x455, 0x35, 0x2, 0x2, 0x2, 0xc265}, {0x8, 0x3, 0x1, 0x2, 0x6, 0xa}, {0x2, 0x9, 0xfffffe58, 0x7fffffff, 0x1, 0x56}, {0x6, 0x5, 0x8, 0x6, 0x9, 0x7}, {0x8, 0xf69e, 0xf79, 0x3, 0x6, 0x8}, {0x100, 0x0, 0x9, 0x74b3, 0x2, 0x10000}, {0x400, 0x0, 0x1ff, 0x2, 0xffffffe6, 0x6}, {0x1, 0x59ad8e51, 0x8, 0x7f, 0x4, 0x9}, {0x6, 0xef7, 0xe, 0x400, 0x4, 0xfffffffc}, {0x7a, 0x6, 0x3, 0x7, 0xfffffffc, 0x51f4}, {0xfffe0000, 0x2, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffff9, 0x8, 0x8, 0x6, 0x6, 0x5}, {0xa23, 0x6, 0x0, 0x7, 0x5, 0x40}, {0x5e6, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x7fff, 0xb, 0x4, 0xb6, 0xe, 0xdb}, {0xfffffffa, 0xb11, 0x100, 0x9, 0x7ff, 0x1}, {0x4, 0x8, 0x200, 0x9, 0xfffffffb, 0x2}, {0x80000000, 0x1, 0x0, 0x5, 0x81}, {0x9, 0x8, 0x3, 0x2, 0x4, 0xe}, {0x80000001, 0x81, 0x8, 0x5, 0x6, 0xf609}, {0x8000, 0x1, 0x1ff, 0x5, 0xfff, 0x101}, {0x7, 0x3e2, 0x5a1, 0x7, 0x9, 0x5}, {0x5, 0x2, 0x80000000, 0x63674b04, 0x7, 0x923}, {0x8ade, 0x1, 0x4, 0x8, 0x2, 0xd9f5}, {0x5, 0x5, 0x1, 0x9, 0x14, 0x5}, {0x3ff, 0xb, 0x40, 0x2, 0x2, 0x401}, {0x9, 0x9, 0x9, 0x3, 0x0, 0x40}, {0x6, 0x8001, 0x6, 0x5, 0x8000000, 0x1000}, {0x7f, 0xffffac09, 0x3, 0x0, 0x8, 0x101}, {0x7b, 0x6, 0x371, 0x0, 0x6, 0x100}, {0x9f, 0x5, 0x3, 0xc, 0x7, 0x4}, {0x3, 0x1, 0x1d2, 0x2, 0x6db}, {0x1000, 0x51f, 0xe2c, 0x8, 0x206, 0x6}, {0x7, 0x69680000, 0x401, 0x45b, 0x10001, 0x80000000}, {0x0, 0x6, 0x1000, 0x7, 0x4, 0xa}, {0x4, 0x7, 0x1, 0xee, 0x0, 0x1}, {0x101, 0x0, 0x9, 0xb539, 0xd7, 0xe3e}, {0xe00c, 0x9, 0xd34, 0x4cc, 0x1ff, 0x6}, {0xa2, 0xbf9, 0x3, 0xa77, 0x2, 0xfffffff9}, {0x87, 0x5, 0x5, 0x5c1, 0x2000000, 0x9}, {0x1ff, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0xbc6a}, {0x40, 0xffffffff, 0x80000001, 0xc, 0xf91, 0x7fffffff}, {0xffffffff, 0x52, 0x6, 0x80000000, 0x8, 0xbf}, {0x1, 0x8001, 0x5, 0x3, 0xda0, 0x2}, {0x9, 0x5, 0x5, 0x0, 0x9, 0x5}, {0x7ff, 0x4cbf, 0xbdde, 0x7, 0x80, 0x8001}, {0x5, 0x4, 0xb, 0x7fff, 0x7}, {0x161, 0x8, 0xfffffffc, 0x5, 0x40, 0x2}, {0xb, 0x6, 0x3, 0x8, 0x6, 0x5}, {0x10, 0x9, 0x6, 0x3, 0x8, 0x3f8}, {0x9, 0xe, 0x7, 0x3, 0x4, 0x2}, {0xffff, 0x2, 0x919c, 0x1000, 0x4, 0x7}, {0x35, 0xfffffff9, 0x117, 0x2, 0x6, 0x8}, {0x42d, 0x57, 0x80000000, 0x30000000, 0x3, 0x400e}, {0x3, 0x7bf, 0xff, 0x6, 0xd, 0x2}, {0x3, 0x3, 0x8000, 0x5, 0x2972a4da, 0x2}, {0x101, 0x40, 0x4, 0x6, 0x0, 0x3f47}, {0x4, 0x4, 0x60dc, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x5, 0x401, 0x10001}, {0x8, 0x1, 0xd, 0xfffffff7, 0xc08}, {0x8, 0x0, 0x8000, 0x589, 0xfffffffd, 0x4}, {0xcb83, 0x3, 0x491, 0x4, 0x4, 0xb6e2}, {0x3, 0x2, 0xfff, 0xd48, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x3, 0x3}, {0xb, 0x8, 0x5, 0x69, 0x0, 0x9}, {0x7ff, 0x2, 0x4, 0x5, 0x9, 0x6}, {0x5, 0xfffffffb, 0x6, 0xff, 0x3, 0xb1c}, {0x7, 0x9, 0xfffffffa, 0x4, 0x7, 0x2}, {0x28, 0x3, 0x46, 0x7, 0xffffffff, 0x8}, {0xf, 0xffffffe6, 0x1, 0x100, 0x100, 0x1}, {0x4, 0xfe, 0x46, 0x6, 0x9, 0x5}, {0x4, 0x10, 0x9, 0xfee1, 0x2cc, 0x9}, {0x279b, 0x8f, 0x4, 0x0, 0x3, 0x10001}, {0x7, 0x2, 0x5d, 0x80, 0x10, 0x8d}, {0x2, 0xa6, 0xe4f, 0x400, 0x3de, 0x4}, {0xf, 0x10000, 0x800, 0x0, 0x7, 0xf59}, {0x10, 0x10, 0x7fffffff, 0x2, 0x4e34, 0xd6}, {0x9, 0xfffffffa, 0x9, 0x926, 0x5a2b, 0x7}, {0x3, 0xe7c8, 0x5, 0x9, 0x4, 0x1000}, {0x5, 0x1, 0x5, 0x4, 0x8, 0x6}, {0xfe3, 0x0, 0x9, 0x4, 0x2f8, 0x80000000}, {0x0, 0x9, 0x8, 0x5, 0x7de9, 0x1}, {0x2, 0x0, 0x16000000, 0x8, 0xd5, 0x4c3c}, {0x847c, 0x6, 0xaa5, 0x594ac942, 0xfb7, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x8a, 0xfff}, {0x3, 0xa, 0x9, 0x1, 0x9, 0x80}, {0x5, 0xffff, 0xfffff801, 0xc, 0x6, 0x5}, {0x6e0, 0x5, 0x1, 0x7, 0x9, 0x7}, {0x8, 0x0, 0xffffe1ce, 0x9, 0x800}, {0x6, 0xf, 0x8, 0x2f, 0xfffffff7, 0xc9}, {0xa843, 0x0, 0x5, 0x8eb8, 0x3, 0xfffffffd}, {0x8000, 0x6, 0x7, 0x7, 0x7, 0x1}, {0x4, 0x900, 0x4, 0x3, 0x6, 0xf216}, {0x4, 0xffff, 0x0, 0x9, 0xeb, 0x2}, {0x22c77d2a, 0x200, 0x0, 0x4, 0x8, 0x2e03666f}, {0xf529, 0x800, 0x3, 0x5, 0xe9, 0x1}, {0x5, 0x1, 0x4, 0xc, 0x3, 0xf}, {0xc23ff6c, 0xfffffffc, 0x1, 0x0, 0x0, 0x7}, {0xff, 0x5, 0x800, 0x3, 0x2, 0x7fffffff}, {0x7, 0x6, 0x2, 0x60, 0xd, 0x70}, {0x0, 0xe, 0x200, 0x7, 0x1, 0x7}, {0x7, 0xde27, 0x8, 0x7f, 0xb09, 0x4}, {0xff, 0xac, 0xffffffff, 0x9c07, 0x84f4, 0x7ae3f5e2}, {0x80000001, 0x0, 0x1c00000, 0x1, 0x9, 0x1}, {0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x62f}, {0x8001, 0x3, 0x0, 0xb, 0x1, 0x9e3b}, {0x40, 0xfffffffc, 0xc, 0x4, 0x9cad, 0x101}, {0xfffffffc, 0xa388a14b, 0x1, 0x6, 0x5, 0x3ff}, {0xffffffff, 0x1, 0x6, 0xc913, 0x401, 0x2}, {0x7ff, 0x3, 0xabf, 0x3cb, 0x9d, 0x3}, {0x7, 0x0, 0x10001, 0x80000000, 0x800, 0x400}, {0xaf1, 0x7f, 0x2, 0x9, 0x80000000, 0x3}, {0x8, 0x0, 0x2, 0x200, 0x80000001, 0xe32}, {0x2, 0x8, 0xce0, 0x71, 0x9, 0x9}, {0x0, 0x2, 0x101, 0x6, 0xfffffbff, 0x1}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {}, {0xf64cd08961e131e7}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x14750f306444a36}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x39ee92b2e05c055b}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x460300743d89969c, 0x1}, {0x3}, {0x4}, {0x3}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2d7ee143859a3e1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xc196dd3e82dc6dcc}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xed8, 0xb, 0x0, 0x0, {{0xa}, {0xeac, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x88, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x456, 0x4, 0x6, 0x1}, 0xb9, 0xf3}, [{0x8bc, 0x1, 0x6, 0x4, 0x100, 0xfffffffd}, {0x0, 0x68, 0xfffffff8, 0x6, 0x5, 0x4}, {0xbb05, 0x97af, 0x3, 0x2, 0x4, 0x6}, {0x6, 0x1, 0x3, 0x2c27f2d1, 0x0, 0x559a}, {0x0, 0x8, 0x2, 0x1, 0x2, 0x5}, {0x10000, 0x1000, 0x7f, 0x8, 0x3, 0x6}, {0x4, 0x2c4, 0x7ab, 0x4, 0x7}, {0xa92, 0x3, 0xb, 0x0, 0x1, 0x5}, {0x7fff, 0xe, 0xa524, 0x40, 0x5, 0x101}, {0xb, 0x8, 0xfffffff8, 0x1000, 0xd72, 0x4}, {0x9, 0x8000000, 0x0, 0x2, 0x2, 0x3ff}, {0x7, 0x3, 0x6, 0xcea, 0xff, 0x80000001}, {0x1800000, 0x9, 0x3, 0x7ff, 0x1, 0x4}, {0xfffffffd, 0xfffffffd, 0x9, 0x0, 0xd1, 0x61b}, {0xfffffff1, 0x80, 0x7, 0x1, 0x4, 0x1000}, {0xdab4, 0x3b6, 0x8000, 0x9, 0x1}, {0x2, 0x400, 0x0, 0x9, 0x7, 0x2}, {0xffffffff, 0x245, 0x63, 0x80000001, 0xc00000, 0xa}, {0xfffffffc, 0x10000, 0x80000001, 0x8, 0x8, 0x5}, {0x80000001, 0x1, 0x5e67, 0x0, 0xff, 0x9}, {0x6, 0x5, 0x1a, 0x618, 0x2, 0x1}, {0x9, 0x9, 0x5, 0x6, 0x4, 0x8}, {0x1, 0x7, 0xf, 0x1, 0x2, 0x1}, {0x9, 0xa, 0x3, 0x2, 0x6, 0x9}, {0x495f, 0xfe, 0x9bb3, 0x2, 0xfffffffa, 0x7}, {0x9, 0x10001, 0xc, 0x76, 0x6, 0x4}, {0x8c, 0x4, 0x8f29, 0x0, 0xffff8001, 0x7}, {0xfff, 0xffff, 0xc, 0xe4, 0x6, 0x7}, {0x7, 0x8, 0xffff8001, 0x100, 0x7}, {0x4, 0xbe8b, 0x4, 0x6, 0x1, 0x3}, {0x5, 0xad4, 0x2, 0x9, 0xb1a8, 0x5}, {0x9, 0x3, 0xb6e, 0xfff, 0x200, 0x9}, {0x4, 0x8000, 0x8, 0x5, 0x6}, {0x4, 0x2, 0x6, 0x3, 0x3, 0x1}, {0x7, 0x3e, 0x6, 0x8, 0x7, 0x7}, {0x6, 0x401, 0x4, 0x9, 0x3}, {0xa, 0x40, 0x9, 0xf, 0x5, 0xf}, {0x12b8c98e, 0xfff, 0x7fffffff, 0x3, 0xe, 0x7fff}, {0x6, 0x8, 0x118, 0xe6c6, 0x6, 0x9738}, {0x3, 0x9, 0x7ff, 0x3, 0xffffffff, 0x9}, {0x8, 0x6, 0x7, 0x7, 0x2, 0x8}, {0x80000000, 0x5ce23415, 0x24, 0xfff, 0xff, 0x2}, {0x100, 0x1000, 0xca6, 0x0, 0xfffffff7, 0xa1}, {0x1, 0x8, 0x7, 0x5, 0xfffffff7, 0x3a}, {0x84c, 0x81, 0x7, 0x1, 0x1, 0x7f}, {0x9, 0x200, 0x700000, 0x1, 0x3, 0x5}, {0x6, 0x2, 0x7, 0x6, 0xfffffffb, 0x7}, {0x0, 0x6, 0xf, 0x9, 0x5, 0xd5a}, {0xfffffff7, 0x7, 0xffffff7f, 0x5, 0x8, 0x2}, {0x5, 0x8, 0x3, 0x26, 0x3, 0x400}, {0x0, 0x6, 0x6, 0x7, 0x101, 0x222}, {0x1f, 0x800, 0x3, 0xe6b, 0x0, 0xfffffff7}, {0x8, 0x4, 0x6, 0x0, 0x2, 0x5}, {0x0, 0x2, 0x2, 0x7, 0x400, 0x7}, {0x200, 0x3, 0x8000, 0x65, 0x1000, 0x40}, {0x10, 0xa, 0x4, 0x10, 0x1, 0x5}, {0x9, 0x9, 0xe95, 0x4, 0xd}, {0xe0, 0x2, 0x80000001, 0x4, 0x1a49, 0x6}, {0x2, 0x4, 0x4, 0x10, 0xfffff0ac, 0x3}, {0xbb, 0x4, 0x4, 0x1, 0x7fffffff, 0x6}, {0xffffffff, 0xffff, 0x6, 0xe4, 0x0, 0x6}, {0xfffffff9, 0x2, 0x1, 0xc, 0x8, 0x800}, {0x6, 0x4, 0x5, 0x1, 0x1, 0x4}, {0xe, 0x6, 0x1, 0x8, 0x9, 0x9}, {0x7, 0xc6, 0x3ff, 0xe7e3, 0x5, 0x9}, {0xea48, 0xfffffffd, 0x10000, 0x6, 0x3, 0x5}, {0x4, 0xffff, 0x1ff, 0x8, 0x4, 0xfffffff0}, {0xb, 0x3b3, 0x1, 0x101, 0xe11, 0x5}, {0x3, 0x4, 0x6, 0xff, 0xff, 0x7}, {0x0, 0x2, 0x8, 0x4, 0x7, 0x4}, {0x7, 0xb, 0x44df, 0x9, 0x6, 0x5d5ab339}, {0x6, 0x6, 0x40, 0x2, 0x9, 0x1ff}, {0x7, 0xffffffff, 0x4, 0x10001, 0xffffffff, 0x7}, {0x81, 0xa, 0x3, 0x8, 0xd33, 0x6}, {0x2, 0x4, 0x9ab, 0xb4, 0x5, 0xb577}, {0x0, 0xffff, 0x6, 0x7fff, 0x0, 0x5}, {0xd, 0x6, 0xaa10, 0xfffff477, 0x0, 0xff}, {0x2, 0xfffffffa, 0x4, 0x90, 0x9, 0x3e}, {0x2, 0x80000000, 0x4, 0x4, 0x90, 0x2}, {0x4, 0x1, 0x6, 0x4, 0x4, 0x7}, {0x5, 0x6, 0x4, 0xb80c, 0x5, 0x4cf1}, {0x8001, 0x4, 0x8, 0x9, 0x0, 0x6}, {0x40, 0x9, 0x18c, 0x100, 0x2, 0x9}, {0x3, 0x4, 0x9, 0x7f, 0x7, 0x179}, {0x0, 0x7, 0x2, 0x80, 0x401, 0x8}, {0x7, 0x0, 0x10001, 0xf6, 0x64f57d4f, 0x10f00000}, {0x7, 0x200, 0x200, 0x9, 0x5, 0x4512}, {0xd3, 0x0, 0x8, 0x2, 0x8, 0x101}, {0x6b0c, 0x9, 0x7, 0x3ff, 0x4}, {0x5f, 0x4, 0xffffffff, 0x0, 0x0, 0x7}, {0x4, 0x4, 0x1200000, 0x7, 0x800, 0x6}, {0x1, 0x6, 0x80, 0xef8, 0x0, 0x5}, {0x40000, 0x6, 0x1, 0x1, 0x2, 0xd09}, {0x8000, 0x9, 0xfffffffd, 0x100, 0x6, 0xfffffff7}, {0x9, 0x2, 0x9, 0x1, 0x3, 0xbe2}, {0x4, 0xa, 0x0, 0x0, 0x6, 0x6}, {0x3ff, 0x5, 0x1, 0x7000, 0x4e, 0x8}, {0xd6, 0x9, 0x10000, 0x8, 0xff, 0x2}, {0xb, 0x1, 0x1f36, 0x8ff4, 0xfff, 0x6}, {0x0, 0x516607, 0x2, 0x3, 0x3, 0xffffffff}, {0xffff4b03, 0x5, 0x10, 0x1, 0x3, 0x6}, {0x7, 0x0, 0x6, 0x8000, 0x10, 0xa}, {0x2, 0x6c, 0xffffffff, 0x2, 0x94, 0x9}, {0x3, 0x40, 0xfffffffa, 0x6, 0x0, 0xef0}, {0x8, 0x8, 0x64, 0x10, 0x49, 0x80}, {0x9, 0xc, 0x8000, 0x7, 0x3, 0x140}, {0x7, 0x7, 0xf16, 0x7ff, 0x3, 0x7}, {0x1ff, 0x9, 0x1, 0x9, 0x4e, 0xffffffff}, {0x4, 0x2, 0xffffffff, 0xe559, 0xc16, 0x4}, {0xfffff802, 0x1, 0x4, 0x1, 0x6}, {0x2, 0xf, 0x10, 0x3, 0xafae, 0x3}, {0x10000, 0x4, 0x6, 0x2, 0x6, 0xa4}, {0x0, 0x4, 0x0, 0x4, 0x1000, 0x6f17}, {0x2, 0x4, 0xd9, 0x7fffffff, 0x3, 0x805}, {0xf17, 0x4, 0x40, 0x5, 0x1, 0xff}, {0x0, 0x80000001, 0xb44f, 0xfffffffa, 0x0, 0x8a5}, {0x8000, 0x7ff, 0x5, 0x3, 0x4, 0x600}, {0x4b, 0xad, 0x8, 0x669, 0x1ff, 0x3}, {0x2, 0xa45, 0x1000, 0x0, 0xa, 0x1}, {0x4, 0x1, 0x8, 0x2, 0xe0, 0x4}, {0x4, 0xffd, 0x5, 0x3, 0x7fffffff, 0xfffffffb}, {0x8, 0x4, 0x4, 0x6, 0x1, 0x5}, {0x6, 0x0, 0xffffdbdc, 0x2, 0x9, 0x140000}, {0x2, 0x1, 0xdc, 0x8, 0x80000000, 0x569}, {0x0, 0x8, 0xffffffff, 0xa, 0x80000001, 0xa}, {0xfffffbff, 0x10, 0x8, 0x101, 0xfffffffa, 0x8000}, {0xa9c, 0x6, 0x1ff, 0x8, 0x1d, 0x3}, {0x2, 0xfffff16c, 0x5, 0x3, 0x5, 0x7ff}], [{0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2d451479be6868cc, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0xa02f5fe57b5d7768}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x6, 0x1}, {0x4}, {0x7}, {0x1}, {0x3}, {0x2}, {}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x2220886d9e210a2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x2c3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) fchown(r6, 0x0, 0x0) listen(r6, 0xa) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) 1.117095371s ago: executing program 4 (id=682): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffd6f, &(0x7f0000000400)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setrlimit(0x0, &(0x7f00000001c0)={0x2, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 139.799289ms ago: executing program 4 (id=683): syz_open_dev$sndpcmc(0x0, 0x0, 0x20101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300010000000000000000", @ANYRES32, @ANYBLOB="000700000000040014001a80100005800c000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r2, 0x0, 0x0, 0x1, 0x3000) msgsnd(r2, &(0x7f0000000040)={0x1}, 0x8, 0x0) msgsnd(r2, &(0x7f0000000200)={0x2, "cef1340db39ed78cf1c88c479ea72750d41be576533f32d438da00e77802f12cd32bcf9d15fb6d7db39815f57e6d8277952f7b0f03efe0810bcda836a8fa55fc317419f617d7685b86a98ed998a6d63a710d5dda881942417eb75808a40e3b35fbfe64a6582ec59a9718f10761138e392588aede7921b66bbff8"}, 0x82, 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000002a40)={{0x12, 0x1, 0x110, 0xe4, 0x45, 0x57, 0x8, 0xcf3, 0xe006, 0x33b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0xe0, 0xf0, "", [{{0x9, 0x4, 0xb0, 0x3, 0x0, 0xcf, 0x85, 0x99, 0xb}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x100000040, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket(0x200000000000011, 0xa, 0x0) write(r5, &(0x7f0000000040)="27fe000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 28.683928ms ago: executing program 4 (id=684): r0 = syz_io_uring_setup(0xd02, &(0x7f0000002900)={0x0, 0x10f24e, 0x0, 0x1, 0x290}, &(0x7f0000000440)=0x0, &(0x7f0000001080)=0x0, &(0x7f0000001040)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10021) io_uring_enter(r0, 0x1, 0x20, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) (fail_nth: 3) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) socket(0x1a020257981a00ca, 0x0, 0x401) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e040128000000000001090224000100000000090401000103000000092100"], 0x0) 0s ago: executing program 0 (id=685): r0 = io_uring_setup(0x5136, &(0x7f00000005c0)={0x0, 0x799a, 0x8000, 0x0, 0x3a3}) r1 = syz_io_uring_setup(0x33ad, &(0x7f0000000100)={0x0, 0x26bb, 0x4000, 0x0, 0x84, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000280), 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000580)={0x40, 0x0, &(0x7f00000003c0)=[r2]}, 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000240)={0x200000, 0x200003, 0x9, 0x0, 0x7, 0x3}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_mr_cache\x00') r5 = io_uring_setup(0x3aa5, &(0x7f00000002c0)={0x0, 0x32b6, 0x880, 0x0, 0x35d}) r6 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r4, r4, 0x0) statx(r4, 0x0, 0x1000, 0x200, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x5b, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x400d0}, 0x10) kernel console output (not intermixed with test programs): id maxpacket 0 [ 171.783115][ T5882] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 171.783207][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.783230][ T5882] usb 4-1: Product: syz [ 171.783245][ T5882] usb 4-1: Manufacturer: syz [ 171.783258][ T5882] usb 4-1: SerialNumber: syz [ 171.816673][ T1000] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 171.816885][ T1000] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 171.881852][ T5882] usb 4-1: config 0 descriptor?? [ 172.119787][ T5813] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 172.154683][ T5882] usb 4-1: USB disconnect, device number 7 [ 172.304391][ T5813] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.304422][ T5813] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 172.304445][ T5813] usb 3-1: config 1 has no interface number 0 [ 172.304492][ T5813] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.347899][ T5813] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.347931][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.347950][ T5813] usb 3-1: Product: syz [ 172.347964][ T5813] usb 3-1: Manufacturer: syz [ 172.347977][ T5813] usb 3-1: SerialNumber: syz [ 172.413209][ T5813] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 172.413267][ T5813] cdc_ncm 3-1:1.1: bind() failure [ 172.609360][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.613249][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.660433][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.661228][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.671201][ T5813] usb 3-1: USB disconnect, device number 7 [ 173.126311][ T6645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.383708][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.227'. [ 173.551354][ T5813] usb 1-1: USB disconnect, device number 6 [ 173.897845][ T5882] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.906770][ T37] audit: type=1326 audit(1776587051.275:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6657 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89d7b4c819 code=0x7ffc0000 [ 173.906828][ T37] audit: type=1326 audit(1776587051.275:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6657 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b4c819 code=0x7ffc0000 [ 173.906894][ T37] audit: type=1326 audit(1776587051.275:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6657 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b4c819 code=0x7ffc0000 [ 173.906949][ T37] audit: type=1326 audit(1776587051.275:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6657 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b4c819 code=0x7ffc0000 [ 173.907000][ T37] audit: type=1326 audit(1776587051.275:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6657 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b4c819 code=0x7ffc0000 [ 173.907046][ T37] audit: type=1326 audit(1776587051.275:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6657 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b4c819 code=0x7ffc0000 [ 173.907940][ T37] audit: type=1326 audit(1776587051.275:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6657 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b4c819 code=0x7ffc0000 [ 173.907981][ T37] audit: type=1326 audit(1776587051.275:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6657 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f89d7b4c819 code=0x7ffc0000 [ 173.909506][ T37] audit: type=1326 audit(1776587051.285:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6657 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b4c819 code=0x7ffc0000 [ 173.909548][ T37] audit: type=1326 audit(1776587051.285:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6657 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b4c819 code=0x7ffc0000 [ 173.979014][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.233'. [ 174.179534][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 174.185511][ T5882] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 174.185543][ T5882] usb 5-1: config 0 has no interface number 0 [ 174.212253][ T5882] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 174.212289][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.212312][ T5882] usb 5-1: Product: syz [ 174.212328][ T5882] usb 5-1: Manufacturer: syz [ 174.212344][ T5882] usb 5-1: SerialNumber: syz [ 174.285748][ T6665] 9pnet_virtio: no channels available for device 127.0.0.1 [ 174.371457][ T5882] usb 5-1: config 0 descriptor?? [ 174.404711][ T5882] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 174.495951][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 174.498336][ T36] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.583551][ T6670] FAULT_INJECTION: forcing a failure. [ 174.583551][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 174.583593][ T6670] CPU: 1 UID: 0 PID: 6670 Comm: syz.1.236 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 174.583624][ T6670] Tainted: [L]=SOFTLOCKUP [ 174.583632][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.583644][ T6670] Call Trace: [ 174.583652][ T6670] [ 174.583661][ T6670] dump_stack_lvl+0xe8/0x150 [ 174.583713][ T6670] should_fail_ex+0x46b/0x600 [ 174.583743][ T6670] should_failslab+0xa8/0x100 [ 174.583767][ T6670] kmem_cache_alloc_noprof+0x87/0x680 [ 174.583797][ T6670] ? alloc_empty_file+0x5b/0x1d0 [ 174.583827][ T6670] alloc_empty_file+0x5b/0x1d0 [ 174.583855][ T6670] path_openat+0x11b/0x38a0 [ 174.583896][ T6670] ? try_to_take_rt_mutex+0x840/0xb00 [ 174.583920][ T6670] ? arch_stack_walk+0xfb/0x150 [ 174.583954][ T6670] ? __lock_acquire+0x6b5/0x2cf0 [ 174.583984][ T6670] ? __pfx_path_openat+0x10/0x10 [ 174.584020][ T6670] ? kasan_save_track+0x4f/0x80 [ 174.584048][ T6670] ? kasan_save_track+0x3e/0x80 [ 174.584073][ T6670] ? __kasan_slab_alloc+0x6c/0x80 [ 174.584101][ T6670] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 174.584138][ T6670] ? do_raw_spin_lock+0x12b/0x2f0 [ 174.584170][ T6670] do_file_open+0x23e/0x4a0 [ 174.584200][ T6670] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 174.584230][ T6670] ? __pfx_do_file_open+0x10/0x10 [ 174.584257][ T6670] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 174.584300][ T6670] ? alloc_fd+0x64e/0x6c0 [ 174.584337][ T6670] do_sys_openat2+0x113/0x200 [ 174.584369][ T6670] ? __pfx_do_sys_openat2+0x10/0x10 [ 174.584396][ T6670] ? ksys_write+0x248/0x270 [ 174.584431][ T6670] ? __pfx_ksys_write+0x10/0x10 [ 174.584465][ T6670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.584488][ T6670] __x64_sys_open+0x11e/0x150 [ 174.584519][ T6670] do_syscall_64+0x15f/0xf80 [ 174.584547][ T6670] ? trace_irq_disable+0x3b/0x140 [ 174.584569][ T6670] ? clear_bhb_loop+0x40/0x90 [ 174.584595][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.584617][ T6670] RIP: 0033:0x7fe0e88bc819 [ 174.584638][ T6670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.584655][ T6670] RSP: 002b:00007fe0e6b16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 174.584680][ T6670] RAX: ffffffffffffffda RBX: 00007fe0e8b35fa0 RCX: 00007fe0e88bc819 [ 174.584710][ T6670] RDX: 0000000000000145 RSI: 0000000000105040 RDI: 0000200000000380 [ 174.584724][ T6670] RBP: 00007fe0e6b16090 R08: 0000000000000000 R09: 0000000000000000 [ 174.584735][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.584748][ T6670] R13: 00007fe0e8b36038 R14: 00007fe0e8b35fa0 R15: 00007ffc2c7e4bc8 [ 174.584781][ T6670] [ 174.651936][ T36] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.651968][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.761070][ T36] usb 1-1: config 0 descriptor?? [ 174.772205][ T36] cp210x 1-1:0.0: cp210x converter detected [ 174.985550][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.998782][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.031188][ T36] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 175.031219][ T36] cp210x 1-1:0.0: querying part number failed [ 175.070964][ T5882] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 175.179082][ T36] usb 1-1: cp210x converter now attached to ttyUSB2 [ 175.185656][ T5882] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 175.427885][ T1000] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 175.469628][ T6031] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 175.616178][ T1000] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.616207][ T1000] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.616298][ T1000] usb 3-1: config 1 has no interface number 0 [ 175.616353][ T1000] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.646967][ T6031] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 175.647003][ T6031] usb 2-1: config 0 has no interface number 0 [ 175.647048][ T6031] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 175.647077][ T6031] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 175.676269][ T6031] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 175.676301][ T6031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.676323][ T6031] usb 2-1: Product: syz [ 175.676442][ T6031] usb 2-1: Manufacturer: syz [ 175.676460][ T6031] usb 2-1: SerialNumber: syz [ 175.719371][ T6031] usb 2-1: config 0 descriptor?? [ 175.720465][ T6678] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 175.737075][ T1000] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.742421][ T1000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.742449][ T1000] usb 3-1: Product: syz [ 175.742466][ T1000] usb 3-1: Manufacturer: syz [ 175.742482][ T1000] usb 3-1: SerialNumber: syz [ 175.743524][ T6678] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 175.867210][ T1000] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 175.867318][ T1000] cdc_ncm 3-1:1.1: bind() failure [ 175.963270][ T6678] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 175.964429][ T6678] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 176.117117][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.123539][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.146864][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.174069][ T6031] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 176.174102][ T6031] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 176.204289][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.204759][ T6031] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 176.205100][ T6031] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 176.299591][ T31] usb 3-1: USB disconnect, device number 8 [ 176.303365][ T6031] usb 2-1: USB disconnect, device number 5 [ 176.330362][ T6686] netlink: 256 bytes leftover after parsing attributes in process `syz.3.241'. [ 176.330392][ T6686] FAULT_INJECTION: forcing a failure. [ 176.330392][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 176.330427][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.3.241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 176.330459][ T6686] Tainted: [L]=SOFTLOCKUP [ 176.330467][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 176.330479][ T6686] Call Trace: [ 176.330488][ T6686] [ 176.330497][ T6686] dump_stack_lvl+0xe8/0x150 [ 176.330538][ T6686] should_fail_ex+0x46b/0x600 [ 176.330570][ T6686] should_failslab+0xa8/0x100 [ 176.330594][ T6686] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 176.330628][ T6686] ? __alloc_skb+0x1d0/0x7d0 [ 176.330660][ T6686] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.330694][ T6686] __alloc_skb+0x1d0/0x7d0 [ 176.330731][ T6686] thermal_genl_cmd_doit+0x11e/0x4f0 [ 176.330772][ T6686] ? trace_kmalloc+0x2a/0xf0 [ 176.330803][ T6686] ? __pfx_thermal_genl_cmd_doit+0x10/0x10 [ 176.330840][ T6686] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 176.330865][ T6686] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 176.330901][ T6686] genl_family_rcv_msg_doit+0x22a/0x330 [ 176.330936][ T6686] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 176.330974][ T6686] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.331000][ T6686] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 176.331033][ T6686] genl_rcv_msg+0x61c/0x7a0 [ 176.331067][ T6686] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.331092][ T6686] ? __pfx_thermal_genl_cmd_doit+0x10/0x10 [ 176.331135][ T6686] netlink_rcv_skb+0x232/0x4b0 [ 176.331170][ T6686] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.331199][ T6686] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.331245][ T6686] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.331278][ T6686] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.331313][ T6686] genl_rcv+0x28/0x40 [ 176.331336][ T6686] netlink_unicast+0x780/0x920 [ 176.331375][ T6686] netlink_sendmsg+0x813/0xb40 [ 176.331407][ T6686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.331431][ T6686] ? unwind_get_return_address+0x4d/0x90 [ 176.331466][ T6686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.331499][ T6686] ____sys_sendmsg+0x94c/0x9c0 [ 176.331530][ T6686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.331564][ T6686] ? import_iovec+0x73/0xa0 [ 176.331596][ T6686] ___sys_sendmsg+0x2a5/0x360 [ 176.331619][ T6686] ? __lock_acquire+0x6b5/0x2cf0 [ 176.331649][ T6686] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.331712][ T6686] ? __fget_files+0x2a/0x420 [ 176.331740][ T6686] ? __fget_files+0x3a6/0x420 [ 176.331789][ T6686] __x64_sys_sendmsg+0x1c3/0x2a0 [ 176.331817][ T6686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.331852][ T6686] ? __pfx_ksys_write+0x10/0x10 [ 176.331892][ T6686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.331918][ T6686] do_syscall_64+0x15f/0xf80 [ 176.331944][ T6686] ? trace_irq_disable+0x3b/0x140 [ 176.331964][ T6686] ? clear_bhb_loop+0x40/0x90 [ 176.331992][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.332022][ T6686] RIP: 0033:0x7f89d7b4c819 [ 176.332042][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.332059][ T6686] RSP: 002b:00007f89d5da6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.332085][ T6686] RAX: ffffffffffffffda RBX: 00007f89d7dc5fa0 RCX: 00007f89d7b4c819 [ 176.332101][ T6686] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 176.332115][ T6686] RBP: 00007f89d5da6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.332129][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.332142][ T6686] R13: 00007f89d7dc6038 R14: 00007f89d7dc5fa0 R15: 00007ffe5215d578 [ 176.332176][ T6686] [ 176.624179][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 176.625256][ T31] usb 5-1: USB disconnect, device number 8 [ 176.729315][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 176.816690][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 176.821750][ T31] quatech2 5-1:0.51: device disconnected [ 176.839416][ T6691] mmap: syz.4.244 (6691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 177.027919][ T1000] usb 1-1: USB disconnect, device number 7 [ 177.087373][ T1000] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 177.098340][ T1000] cp210x 1-1:0.0: device disconnected [ 177.133535][ T6031] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 177.189267][ T6703] netlink: 256 bytes leftover after parsing attributes in process `syz.0.248'. [ 177.460964][ T6699] 9pnet_virtio: no channels available for device 127.0.0.1 [ 177.513484][ T6710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.558470][ T6031] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.558528][ T6031] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 177.558554][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.599175][ T6031] usb 4-1: config 0 descriptor?? [ 177.611469][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 177.639924][ T6031] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 177.680288][ T6705] siw: device registration error -23 [ 178.053420][ T6721] program syz.1.255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.368305][ T6031] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 178.479083][ T6735] gre0: entered promiscuous mode [ 178.479114][ T6735] gre0: entered allmulticast mode [ 178.542440][ T6031] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 178.542473][ T6031] usb 3-1: config 0 has no interface number 0 [ 178.542521][ T6031] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 178.542550][ T6031] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 178.565643][ T6031] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 178.565677][ T6031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.565697][ T6031] usb 3-1: Product: syz [ 178.565711][ T6031] usb 3-1: Manufacturer: syz [ 178.565724][ T6031] usb 3-1: SerialNumber: syz [ 178.770792][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.787956][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.790744][ T6031] usb 3-1: config 0 descriptor?? [ 178.791810][ T6724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.792078][ T6724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.877097][ T1000] usb 4-1: USB disconnect, device number 8 [ 179.001620][ T6724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.002003][ T6724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.116776][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 179.116797][ T37] audit: type=1326 audit(1776587056.485:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6745 comm="syz.1.262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0e88bc819 code=0x0 [ 179.182972][ T6747] netlink: 'syz.3.263': attribute type 2 has an invalid length. [ 179.210459][ T6031] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 179.210482][ T6031] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 179.212330][ T6031] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 179.212595][ T6031] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 179.300675][ T6031] usb 3-1: USB disconnect, device number 9 [ 179.546632][ T6747] hmac(sha2!: entered promiscuous mode [ 180.404333][ T37] audit: type=1326 audit(1776587057.775:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6763 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 180.404393][ T37] audit: type=1326 audit(1776587057.775:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6763 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 180.404439][ T37] audit: type=1326 audit(1776587057.775:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6763 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 180.439214][ T37] audit: type=1326 audit(1776587057.785:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6763 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 180.439264][ T37] audit: type=1326 audit(1776587057.785:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6763 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 180.439303][ T37] audit: type=1326 audit(1776587057.785:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6763 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 180.439342][ T37] audit: type=1326 audit(1776587057.785:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6763 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 180.516615][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 180.529318][ T6772] siw: device registration error -23 [ 180.903367][ T6762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.269'. [ 182.180545][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 183.154902][ T37] audit: type=1326 audit(1776587060.525:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6817 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 183.154958][ T37] audit: type=1326 audit(1776587060.525:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6817 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 183.438415][ T6825] FAULT_INJECTION: forcing a failure. [ 183.438415][ T6825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.438456][ T6825] CPU: 0 UID: 0 PID: 6825 Comm: syz.2.284 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 183.438486][ T6825] Tainted: [L]=SOFTLOCKUP [ 183.438493][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 183.438504][ T6825] Call Trace: [ 183.438512][ T6825] [ 183.438522][ T6825] dump_stack_lvl+0xe8/0x150 [ 183.438564][ T6825] should_fail_ex+0x46b/0x600 [ 183.438591][ T6825] _copy_from_user+0x2d/0xb0 [ 183.438618][ T6825] do_sock_getsockopt+0x200/0x7e0 [ 183.438650][ T6825] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 183.438688][ T6825] ? __fget_files+0x3a6/0x420 [ 183.438715][ T6825] ? __fget_files+0x2a/0x420 [ 183.438749][ T6825] __x64_sys_getsockopt+0x1aa/0x250 [ 183.438784][ T6825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.438808][ T6825] do_syscall_64+0x15f/0xf80 [ 183.438835][ T6825] ? trace_irq_disable+0x3b/0x140 [ 183.438867][ T6825] ? clear_bhb_loop+0x40/0x90 [ 183.438894][ T6825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.438916][ T6825] RIP: 0033:0x7fd14cb3c819 [ 183.438937][ T6825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.438956][ T6825] RSP: 002b:00007fd14ad96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 183.438981][ T6825] RAX: ffffffffffffffda RBX: 00007fd14cdb5fa0 RCX: 00007fd14cb3c819 [ 183.438997][ T6825] RDX: 000000000000007d RSI: 0000000000000084 RDI: 0000000000000003 [ 183.439010][ T6825] RBP: 00007fd14ad96090 R08: 00002000000000c0 R09: 0000000000000000 [ 183.439025][ T6825] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 183.439038][ T6825] R13: 00007fd14cdb6038 R14: 00007fd14cdb5fa0 R15: 00007ffe3a7c41d8 [ 183.439071][ T6825] [ 185.673884][ T6886] FAULT_INJECTION: forcing a failure. [ 185.673884][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 185.673928][ T6886] CPU: 0 UID: 0 PID: 6886 Comm: syz.4.295 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.673958][ T6886] Tainted: [L]=SOFTLOCKUP [ 185.673965][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.673976][ T6886] Call Trace: [ 185.673984][ T6886] [ 185.673993][ T6886] dump_stack_lvl+0xe8/0x150 [ 185.674036][ T6886] should_fail_ex+0x46b/0x600 [ 185.674067][ T6886] should_failslab+0xa8/0x100 [ 185.674092][ T6886] __kmalloc_cache_noprof+0x84/0x690 [ 185.674128][ T6886] ? smk_import_allocated_label+0xbd/0x220 [ 185.674163][ T6886] smk_import_allocated_label+0xbd/0x220 [ 185.674194][ T6886] smk_fill_rule+0x52/0x630 [ 185.674228][ T6886] smk_parse_long_rule+0xbd2/0xf00 [ 185.674265][ T6886] ? __pfx_smk_parse_long_rule+0x10/0x10 [ 185.674310][ T6886] smk_write_rules_list+0x239/0x370 [ 185.674345][ T6886] ? __pfx_smk_write_load2+0x10/0x10 [ 185.674381][ T6886] vfs_write+0x2a3/0xba0 [ 185.674423][ T6886] ? __pfx_vfs_write+0x10/0x10 [ 185.674460][ T6886] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 185.674489][ T6886] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.674517][ T6886] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 185.674545][ T6886] ? mutex_lock_nested+0x152/0x1d0 [ 185.674579][ T6886] ? fdget_pos+0x252/0x320 [ 185.674615][ T6886] ksys_write+0x156/0x270 [ 185.674648][ T6886] ? __pfx_ksys_write+0x10/0x10 [ 185.674687][ T6886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.674710][ T6886] do_syscall_64+0x15f/0xf80 [ 185.674734][ T6886] ? trace_irq_disable+0x3b/0x140 [ 185.674755][ T6886] ? clear_bhb_loop+0x40/0x90 [ 185.674783][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.674804][ T6886] RIP: 0033:0x7f3d686ac819 [ 185.674827][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.674845][ T6886] RSP: 002b:00007f3d66906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.674887][ T6886] RAX: ffffffffffffffda RBX: 00007f3d68925fa0 RCX: 00007f3d686ac819 [ 185.674903][ T6886] RDX: 0000000000000017 RSI: 0000200000000140 RDI: 0000000000000003 [ 185.674917][ T6886] RBP: 00007f3d66906090 R08: 0000000000000000 R09: 0000000000000000 [ 185.674930][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.674943][ T6886] R13: 00007f3d68926038 R14: 00007f3d68925fa0 R15: 00007fff66afc238 [ 185.674979][ T6886] [ 185.687879][ T5813] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 185.730531][ T5882] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.923157][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.923192][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.923214][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.923255][ T5882] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.923277][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.952992][ T5882] usb 3-1: config 0 descriptor?? [ 185.957913][ T5862] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 186.098316][ T5862] usb 2-1: device descriptor read/64, error -71 [ 186.127887][ T5813] usb 1-1: Using ep0 maxpacket: 16 [ 186.129994][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.133692][ T5813] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 186.133723][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.133742][ T5813] usb 1-1: Product: syz [ 186.133758][ T5813] usb 1-1: Manufacturer: syz [ 186.133772][ T5813] usb 1-1: SerialNumber: syz [ 186.206026][ T5813] usb 1-1: config 0 descriptor?? [ 186.220910][ T5813] hub 1-1:0.0: bad descriptor, ignoring hub [ 186.220950][ T5813] hub 1-1:0.0: probe with driver hub failed with error -5 [ 186.226519][ T5813] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 186.527820][ T5862] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 186.539870][ T5882] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 186.773622][ T5862] usb 2-1: device descriptor read/64, error -71 [ 186.894642][ T5862] usb usb2-port1: attempt power cycle [ 187.344553][ T5882] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 187.355262][ T5882] usb 3-1: USB disconnect, device number 10 [ 187.392946][ T5862] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 187.408597][ T5862] usb 2-1: device descriptor read/8, error -71 [ 187.628787][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 187.670432][ T5862] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 187.694781][ T5862] usb 2-1: device descriptor read/8, error -71 [ 187.792627][ T6922] fido_id[6922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 187.807117][ T5862] usb usb2-port1: unable to enumerate USB device [ 187.828650][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 187.838745][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.838775][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.841376][ T9] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 187.841409][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.841448][ T9] usb 4-1: Product: syz [ 187.841463][ T9] usb 4-1: Manufacturer: syz [ 187.841478][ T9] usb 4-1: SerialNumber: syz [ 187.922923][ T9] usb 4-1: config 0 descriptor?? [ 188.156908][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 188.156929][ T37] audit: type=1326 audit(1776587065.525:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.3.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89d7b4c819 code=0x0 [ 188.671270][ T6936] warning: `syz.2.309' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 190.326163][ T1000] usb 4-1: USB disconnect, device number 9 [ 190.897884][ T1000] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 191.005696][ T6977] syz.1.320(6977): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 191.041254][ T5157] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 191.067896][ T1000] usb 5-1: Using ep0 maxpacket: 16 [ 191.090930][ T1000] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 191.090969][ T1000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 191.097599][ T1000] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 191.097634][ T1000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.097656][ T1000] usb 5-1: Product: syz [ 191.137797][ T1000] usb 5-1: Manufacturer: syz [ 191.137820][ T1000] usb 5-1: SerialNumber: syz [ 191.251142][ T1000] usb 5-1: config 0 descriptor?? [ 191.310777][ T1000] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 191.310821][ T1000] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 191.331997][ T6970] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.318'. [ 191.347832][ T5862] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 191.577294][ T5157] usb 1-1: device firmware changed [ 191.594595][ T5862] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 191.594856][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.594879][ T5862] usb 3-1: Product: syz [ 191.594893][ T5862] usb 3-1: Manufacturer: syz [ 191.594907][ T5862] usb 3-1: SerialNumber: syz [ 191.614656][ T9] usb 1-1: USB disconnect, device number 8 [ 191.684600][ T5862] usb 3-1: config 0 descriptor?? [ 191.739673][ T6988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.892666][ T1000] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 191.895799][ T1000] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 191.920997][ T5862] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 192.060997][ T6995] FAULT_INJECTION: forcing a failure. [ 192.060997][ T6995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.061026][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.3.324 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 192.061054][ T6995] Tainted: [L]=SOFTLOCKUP [ 192.061062][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 192.061074][ T6995] Call Trace: [ 192.061083][ T6995] [ 192.061093][ T6995] dump_stack_lvl+0xe8/0x150 [ 192.061133][ T6995] should_fail_ex+0x46b/0x600 [ 192.061161][ T6995] _copy_from_user+0x2d/0xb0 [ 192.061184][ T6995] do_sock_getsockopt+0x200/0x7e0 [ 192.061202][ T6995] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 192.061235][ T6995] ? __fget_files+0x3a6/0x420 [ 192.061265][ T6995] ? __fget_files+0x2a/0x420 [ 192.061305][ T6995] __x64_sys_getsockopt+0x1aa/0x250 [ 192.061333][ T6995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.061359][ T6995] do_syscall_64+0x15f/0xf80 [ 192.061386][ T6995] ? trace_irq_disable+0x3b/0x140 [ 192.061429][ T6995] ? clear_bhb_loop+0x40/0x90 [ 192.061455][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.061477][ T6995] RIP: 0033:0x7f89d7b4c819 [ 192.061500][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.061518][ T6995] RSP: 002b:00007f89d5da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 192.061542][ T6995] RAX: ffffffffffffffda RBX: 00007f89d7dc5fa0 RCX: 00007f89d7b4c819 [ 192.061567][ T6995] RDX: 000000000000007d RSI: 0000000000000084 RDI: 0000000000000003 [ 192.061581][ T6995] RBP: 00007f89d5da6090 R08: 00002000000000c0 R09: 0000000000000000 [ 192.061596][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.061610][ T6995] R13: 00007f89d7dc6038 R14: 00007f89d7dc5fa0 R15: 00007ffe5215d578 [ 192.061644][ T6995] [ 192.185592][ T1000] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 192.185619][ T1000] em28xx 5-1:0.0: No AC97 audio processor [ 192.282745][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 192.317845][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.354982][ T1000] usb 5-1: USB disconnect, device number 9 [ 192.387892][ T1000] em28xx 5-1:0.0: Disconnecting em28xx [ 192.498245][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 192.525151][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.591673][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 192.591715][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.642045][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.642395][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.642421][ T9] usb 1-1: Product: syz [ 192.642648][ T9] usb 1-1: Manufacturer: syz [ 192.642664][ T9] usb 1-1: SerialNumber: syz [ 192.742546][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.792842][ T1000] em28xx 5-1:0.0: Freeing device [ 192.823546][ T9] usb 1-1: config 0 descriptor?? [ 192.908187][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 192.908229][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 192.955562][ T5862] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 193.460103][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 193.461837][ T9] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 193.688871][ T5862] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 193.725752][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 193.725780][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 193.754516][ T9] usb 1-1: USB disconnect, device number 9 [ 193.772795][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 193.792477][ T7032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.795393][ T9] em28xx 1-1:0.0: Freeing device [ 193.805401][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 193.838683][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 193.846365][ T5862] usb 2-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 193.868181][ T5862] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 193.868215][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.868237][ T5862] usb 2-1: Product: syz [ 193.868253][ T5862] usb 2-1: Manufacturer: syz [ 193.868270][ T5862] usb 2-1: SerialNumber: syz [ 193.953507][ T7029] bridge1: entered promiscuous mode [ 194.070701][ T7036] FAULT_INJECTION: forcing a failure. [ 194.070701][ T7036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.070739][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.3.334 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 194.070766][ T7036] Tainted: [L]=SOFTLOCKUP [ 194.070778][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.070789][ T7036] Call Trace: [ 194.070797][ T7036] [ 194.070805][ T7036] dump_stack_lvl+0xe8/0x150 [ 194.070849][ T7036] should_fail_ex+0x46b/0x600 [ 194.070875][ T7036] _copy_from_iter+0x1d3/0x1670 [ 194.070907][ T7036] ? trace_kmem_cache_alloc+0x29/0xe0 [ 194.070937][ T7036] ? __alloc_skb+0x27d/0x7d0 [ 194.070969][ T7036] ? __pfx__copy_from_iter+0x10/0x10 [ 194.070990][ T7036] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 194.071021][ T7036] ? __alloc_skb+0x27d/0x7d0 [ 194.071058][ T7036] ? netlink_sendmsg+0x650/0xb40 [ 194.071076][ T7036] ? skb_put+0x11b/0x210 [ 194.071099][ T7036] netlink_sendmsg+0x6c0/0xb40 [ 194.071127][ T7036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.071149][ T7036] ? unwind_get_return_address+0x4d/0x90 [ 194.071179][ T7036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.071216][ T7036] ____sys_sendmsg+0x94c/0x9c0 [ 194.071246][ T7036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.071281][ T7036] ? import_iovec+0x73/0xa0 [ 194.071312][ T7036] ___sys_sendmsg+0x2a5/0x360 [ 194.071335][ T7036] ? __lock_acquire+0x6b5/0x2cf0 [ 194.071366][ T7036] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.071428][ T7036] ? __fget_files+0x2a/0x420 [ 194.071456][ T7036] ? __fget_files+0x3a6/0x420 [ 194.071495][ T7036] __x64_sys_sendmsg+0x1c3/0x2a0 [ 194.071522][ T7036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.071557][ T7036] ? __pfx_ksys_write+0x10/0x10 [ 194.071595][ T7036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.071620][ T7036] do_syscall_64+0x15f/0xf80 [ 194.071646][ T7036] ? trace_irq_disable+0x3b/0x140 [ 194.071668][ T7036] ? clear_bhb_loop+0x40/0x90 [ 194.071693][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.071715][ T7036] RIP: 0033:0x7f89d7b4c819 [ 194.071735][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.071755][ T7036] RSP: 002b:00007f89d5da6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.071779][ T7036] RAX: ffffffffffffffda RBX: 00007f89d7dc5fa0 RCX: 00007f89d7b4c819 [ 194.071796][ T7036] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 194.071811][ T7036] RBP: 00007f89d5da6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.071825][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.071846][ T7036] R13: 00007f89d7dc6038 R14: 00007f89d7dc5fa0 R15: 00007ffe5215d578 [ 194.071878][ T7036] [ 194.098646][ T31] usb 3-1: USB disconnect, device number 11 [ 194.208785][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 194.208813][ T7024] netlink: 48 bytes leftover after parsing attributes in process `syz.1.331'. [ 194.395495][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.406388][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.712037][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.725804][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.036072][ T5862] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 195.036107][ T5862] usb 2-1: 1:1 : unsupported sample bitwidth 5 in 15 bytes [ 195.328140][ T5862] usb 2-1: USB disconnect, device number 10 [ 195.564581][ T6061] udevd[6061]: setting mode of /dev/bus/usb/002/010 to 020664 failed: No such file or directory [ 195.564941][ T6061] udevd[6061]: setting owner of /dev/bus/usb/002/010 to uid=0, gid=0 failed: No such file or directory [ 195.657000][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.807943][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 195.923205][ T7056] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 195.923205][ T7056] program syz.1.341 not setting count and/or reply_len properly [ 195.981200][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.997587][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 195.997629][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.997653][ T9] usb 1-1: Product: syz [ 196.015798][ T9] usb 1-1: Manufacturer: syz [ 196.015823][ T9] usb 1-1: SerialNumber: syz [ 196.390069][ T7056] can: request_module (can-proto-5) failed. [ 196.517929][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 196.521056][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.525897][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.564725][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 196.612162][ T9] usb 1-1: USB disconnect, device number 10 [ 196.687823][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 196.694014][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 196.694045][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.736993][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 196.737022][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.737035][ T31] usb 3-1: Product: syz [ 196.737044][ T31] usb 3-1: Manufacturer: syz [ 196.737053][ T31] usb 3-1: SerialNumber: syz [ 196.777309][ T7064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.811506][ T31] usb 3-1: config 0 descriptor?? [ 196.845429][ T31] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 196.845455][ T31] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 197.017968][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 197.017995][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 197.018020][ T7067] netlink: 'syz.3.345': attribute type 12 has an invalid length. [ 197.450435][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 197.450463][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 197.450488][ T7067] netlink: 'syz.3.345': attribute type 12 has an invalid length. [ 197.454278][ T1825] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.457090][ T1825] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.457140][ T1825] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.457173][ T1825] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.468717][ T31] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 197.519540][ T31] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 197.814420][ T31] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 197.814447][ T31] em28xx 3-1:0.0: No AC97 audio processor [ 197.923649][ T31] usb 3-1: USB disconnect, device number 12 [ 197.940863][ T31] em28xx 3-1:0.0: Disconnecting em28xx [ 197.960623][ T7085] netlink: 64 bytes leftover after parsing attributes in process `syz.1.352'. [ 198.047085][ T37] audit: type=1326 audit(1776587075.415:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 198.047241][ T37] audit: type=1326 audit(1776587075.415:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 198.050440][ T31] em28xx 3-1:0.0: Freeing device [ 198.096394][ T37] audit: type=1326 audit(1776587075.465:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 198.096447][ T37] audit: type=1326 audit(1776587075.465:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 198.103391][ T37] audit: type=1326 audit(1776587075.465:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 198.111273][ T37] audit: type=1326 audit(1776587075.475:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 198.111327][ T37] audit: type=1326 audit(1776587075.485:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 198.111367][ T37] audit: type=1326 audit(1776587075.485:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 198.114580][ T37] audit: type=1326 audit(1776587075.485:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 198.162618][ T37] audit: type=1326 audit(1776587075.505:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d686ac819 code=0x7ffc0000 [ 198.314578][ T6031] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 198.469328][ T6031] usb 2-1: Using ep0 maxpacket: 32 [ 198.475485][ T6031] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 198.475520][ T6031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.475543][ T6031] usb 2-1: Product: syz [ 198.475560][ T6031] usb 2-1: Manufacturer: syz [ 198.475585][ T6031] usb 2-1: SerialNumber: syz [ 198.728453][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 198.778672][ T7102] siw: device registration error -23 [ 198.784045][ T6031] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.786318][ T6031] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 198.826867][ T6031] usb 2-1: USB disconnect, device number 11 [ 199.337854][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 199.490182][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 199.518626][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 199.518660][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.518683][ T9] usb 4-1: Product: syz [ 199.518700][ T9] usb 4-1: Manufacturer: syz [ 199.518716][ T9] usb 4-1: SerialNumber: syz [ 199.770785][ T9] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 199.771108][ T9] kalmia 4-1:1.0: probe with driver kalmia failed with error -71 [ 199.852963][ T9] usb 4-1: USB disconnect, device number 10 [ 200.207837][ T36] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 200.357935][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 200.362925][ T36] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 200.362953][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.362966][ T36] usb 3-1: Product: syz [ 200.362975][ T36] usb 3-1: Manufacturer: syz [ 200.362984][ T36] usb 3-1: SerialNumber: syz [ 200.745553][ T36] usb 3-1: config 0 descriptor?? [ 201.931262][ T36] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 202.051776][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 202.139763][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.162196][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.188140][ T7118] loop5: detected capacity change from 0 to 7 [ 202.275466][ T7118] Dev loop5: unable to read RDB block 7 [ 202.275525][ T7118] loop5: unable to read partition table [ 202.275776][ T7118] loop5: partition table beyond EOD, truncated [ 202.296573][ T7118] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.599115][ T1000] usb 3-1: USB disconnect, device number 13 [ 203.006284][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.010756][ T7152] Mount JFS Failure: -22 [ 203.010774][ T7152] jfs_mount failed w/return code = -22 [ 203.013897][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.167860][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 203.194405][ T37] kauditd_printk_skb: 43 callbacks suppressed [ 203.194424][ T37] audit: type=1326 audit(1776587080.565:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7155 comm="syz.2.376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd14cb3c819 code=0x0 [ 203.247925][ T1000] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 203.291885][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.377'. [ 203.645447][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 203.645565][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.135474][ T31] usb 2-1: config 0 descriptor?? [ 204.167812][ T1000] usb 1-1: Invalid ep0 maxpacket: 16 [ 204.318142][ T1000] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 204.371471][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.389451][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.479813][ T1000] usb 1-1: Invalid ep0 maxpacket: 16 [ 204.492866][ T1000] usb usb1-port1: attempt power cycle [ 204.848043][ T1000] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 204.871322][ T1000] usb 1-1: Invalid ep0 maxpacket: 16 [ 204.958476][ T6003] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 205.007836][ T1000] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 205.061624][ T1000] usb 1-1: Invalid ep0 maxpacket: 16 [ 205.076737][ T1000] usb usb1-port1: unable to enumerate USB device [ 205.316795][ T6003] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.316829][ T6003] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.316851][ T6003] usb 3-1: config 1 has no interface number 0 [ 205.316965][ T6003] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.338467][ T6003] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.338504][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.338527][ T6003] usb 3-1: Product: syz [ 205.338607][ T6003] usb 3-1: Manufacturer: syz [ 205.338624][ T6003] usb 3-1: SerialNumber: syz [ 205.430628][ T6003] usb 3-1: selecting invalid altsetting 1 [ 205.435716][ T7187] openvswitch: netlink: EtherType 50a is less than min 600 [ 205.635502][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.640601][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.647428][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.651920][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.656803][ T6003] cdc_ncm 3-1:1.1: bind() failure [ 205.780635][ T6003] usb 3-1: USB disconnect, device number 14 [ 205.834935][ T5825] udevd[5825]: setting mode of /dev/bus/usb/003/014 to 020664 failed: No such file or directory [ 205.835150][ T5825] udevd[5825]: setting owner of /dev/bus/usb/003/014 to uid=0, gid=0 failed: No such file or directory [ 206.056981][ T31] usb 2-1: string descriptor 0 read error: -71 [ 206.066057][ T31] ldusb 2-1:0.0: Interrupt in endpoint not found [ 206.169415][ T31] usb 2-1: USB disconnect, device number 12 [ 206.699067][ T1000] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 207.061457][ T1000] usb 1-1: device descriptor read/64, error -71 [ 207.079358][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'. [ 208.005621][ T1000] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 208.149445][ T1000] usb 1-1: device descriptor read/64, error -71 [ 208.268849][ T1000] usb usb1-port1: attempt power cycle [ 208.382222][ T5875] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 209.007864][ T1000] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 209.028659][ T1000] usb 1-1: device descriptor read/8, error -71 [ 209.030747][ T5875] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.030776][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 209.030800][ T5875] usb 4-1: config 1 has no interface number 0 [ 209.030850][ T5875] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.034014][ T5875] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.034044][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.034068][ T5875] usb 4-1: Product: syz [ 209.034084][ T5875] usb 4-1: Manufacturer: syz [ 209.034101][ T5875] usb 4-1: SerialNumber: syz [ 209.075883][ T5875] usb 4-1: selecting invalid altsetting 1 [ 209.290193][ T7232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.291760][ T7232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.298599][ T1000] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 209.319898][ T1000] usb 1-1: device descriptor read/8, error -71 [ 209.472768][ T1000] usb usb1-port1: unable to enumerate USB device [ 209.521065][ T7232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.569376][ T7232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.605935][ T5875] cdc_ncm 4-1:1.1: bind() failure [ 209.657620][ T5875] usb 4-1: USB disconnect, device number 11 [ 210.099393][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 210.167869][ T5882] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 210.247948][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 210.250686][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 210.250742][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.254094][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 210.254128][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.254151][ T31] usb 2-1: Product: syz [ 210.254167][ T31] usb 2-1: Manufacturer: syz [ 210.254182][ T31] usb 2-1: SerialNumber: syz [ 210.327942][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 210.328767][ T31] usb 2-1: config 0 descriptor?? [ 210.336727][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 210.336775][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.349778][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 210.349810][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.349830][ T5882] usb 1-1: Product: syz [ 210.349843][ T5882] usb 1-1: Manufacturer: syz [ 210.349857][ T5882] usb 1-1: SerialNumber: syz [ 210.386637][ T5882] usb 1-1: config 0 descriptor?? [ 210.430992][ T31] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 210.431150][ T31] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 210.473498][ T5882] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 210.473538][ T5882] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 210.654633][ T7269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.418'. [ 210.655217][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 210.973684][ T31] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 210.976452][ T31] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 211.059088][ T5882] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 211.060143][ T5882] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 211.266143][ T31] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 211.266168][ T31] em28xx 2-1:0.0: No AC97 audio processor [ 211.298168][ T31] usb 2-1: USB disconnect, device number 13 [ 211.333115][ T31] em28xx 2-1:0.0: Disconnecting em28xx [ 211.368886][ T31] em28xx 2-1:0.0: Freeing device [ 211.379168][ T5882] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 211.379191][ T5882] em28xx 1-1:0.0: No AC97 audio processor [ 211.476127][ T5882] usb 1-1: USB disconnect, device number 19 [ 211.489212][ T5882] em28xx 1-1:0.0: Disconnecting em28xx [ 211.597160][ T5882] em28xx 1-1:0.0: Freeing device [ 211.672810][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 211.817804][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 211.835078][ T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 211.835113][ T9] usb 4-1: config 16 has an invalid interface number: 48 but max is 0 [ 211.835136][ T9] usb 4-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 211.835159][ T9] usb 4-1: config 16 has no interface number 0 [ 211.835193][ T9] usb 4-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 211.835245][ T9] usb 4-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 211.835276][ T9] usb 4-1: config 16 interface 48 has no altsetting 0 [ 211.835315][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.835339][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.292633][ T9] usb 4-1: string descriptor 0 read error: -71 [ 212.321566][ T9] usb 4-1: USB disconnect, device number 12 [ 213.085191][ T7316] FAULT_INJECTION: forcing a failure. [ 213.085191][ T7316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.085234][ T7316] CPU: 1 UID: 0 PID: 7316 Comm: syz.3.437 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 213.085266][ T7316] Tainted: [L]=SOFTLOCKUP [ 213.085273][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 213.085287][ T7316] Call Trace: [ 213.085296][ T7316] [ 213.085305][ T7316] dump_stack_lvl+0xe8/0x150 [ 213.085346][ T7316] should_fail_ex+0x46b/0x600 [ 213.085378][ T7316] _copy_to_user+0x31/0xb0 [ 213.085406][ T7316] generic_map_update_batch+0x836/0x990 [ 213.085446][ T7316] ? __pfx_generic_map_update_batch+0x10/0x10 [ 213.085476][ T7316] ? __fget_files+0x2a/0x420 [ 213.085511][ T7316] ? __pfx_generic_map_update_batch+0x10/0x10 [ 213.085541][ T7316] bpf_map_do_batch+0x3a7/0x630 [ 213.085571][ T7316] __sys_bpf+0x7c1/0x950 [ 213.085596][ T7316] ? __pfx___sys_bpf+0x10/0x10 [ 213.085617][ T7316] ? rt_mutex_slowunlock+0x1cb/0x300 [ 213.085669][ T7316] ? ksys_write+0x248/0x270 [ 213.085704][ T7316] ? __pfx_ksys_write+0x10/0x10 [ 213.085742][ T7316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.085766][ T7316] __x64_sys_bpf+0x7c/0x90 [ 213.085797][ T7316] do_syscall_64+0x15f/0xf80 [ 213.085822][ T7316] ? trace_irq_disable+0x3b/0x140 [ 213.085847][ T7316] ? clear_bhb_loop+0x40/0x90 [ 213.085874][ T7316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.085895][ T7316] RIP: 0033:0x7f89d7b4c819 [ 213.085915][ T7316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.085933][ T7316] RSP: 002b:00007f89d5da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.085958][ T7316] RAX: ffffffffffffffda RBX: 00007f89d7dc5fa0 RCX: 00007f89d7b4c819 [ 213.085974][ T7316] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a [ 213.085990][ T7316] RBP: 00007f89d5da6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.086004][ T7316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.086018][ T7316] R13: 00007f89d7dc6038 R14: 00007f89d7dc5fa0 R15: 00007ffe5215d578 [ 213.086053][ T7316] [ 213.732851][ T5862] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 213.897931][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 213.905838][ T5862] usb 2-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 213.920146][ T5862] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 213.920179][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.920198][ T5862] usb 2-1: Product: syz [ 213.920212][ T5862] usb 2-1: Manufacturer: syz [ 213.920226][ T5862] usb 2-1: SerialNumber: syz [ 214.100142][ T5882] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 214.117847][ T5813] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 214.162616][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 214.162643][ T7327] netlink: 48 bytes leftover after parsing attributes in process `syz.1.441'. [ 214.213801][ T5862] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 214.213822][ T5862] usb 2-1: 1:1 : unsupported sample bitwidth 5 in 15 bytes [ 214.267895][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 214.275393][ T5813] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 214.275485][ T5813] usb 3-1: config 16 has an invalid interface number: 48 but max is 0 [ 214.275507][ T5813] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 214.275527][ T5813] usb 3-1: config 16 has no interface number 0 [ 214.275571][ T5813] usb 3-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 214.275611][ T5813] usb 3-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 214.275642][ T5813] usb 3-1: config 16 interface 48 has no altsetting 0 [ 214.275680][ T5813] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.275702][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.277917][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 214.282106][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 214.282140][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.300774][ T5882] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 214.300807][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.300828][ T5882] usb 4-1: Product: syz [ 214.300842][ T5882] usb 4-1: Manufacturer: syz [ 214.300857][ T5882] usb 4-1: SerialNumber: syz [ 214.460612][ T5882] usb 4-1: config 0 descriptor?? [ 214.514451][ T5882] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 214.514492][ T5882] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 214.998478][ T5813] usb 3-1: string descriptor 0 read error: -71 [ 215.051678][ T5813] usb 3-1: USB disconnect, device number 15 [ 215.116863][ T5882] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 215.130468][ T5882] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 215.427968][ T5882] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 215.427995][ T5882] em28xx 4-1:0.0: No AC97 audio processor [ 215.458886][ T5882] usb 4-1: USB disconnect, device number 13 [ 215.466918][ T5882] em28xx 4-1:0.0: Disconnecting em28xx [ 215.532651][ T5882] em28xx 4-1:0.0: Freeing device [ 215.695397][ T5862] usb 2-1: USB disconnect, device number 14 [ 216.055410][ T37] audit: type=1326 audit(1776587093.425:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 216.055551][ T37] audit: type=1326 audit(1776587093.425:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 216.089650][ T37] audit: type=1326 audit(1776587093.455:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 216.089703][ T37] audit: type=1326 audit(1776587093.455:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 216.089746][ T37] audit: type=1326 audit(1776587093.455:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 216.089787][ T37] audit: type=1326 audit(1776587093.455:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 216.089828][ T37] audit: type=1326 audit(1776587093.455:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 216.089870][ T37] audit: type=1326 audit(1776587093.455:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 216.089913][ T37] audit: type=1326 audit(1776587093.455:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 216.694779][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.000433][ T5813] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 217.147833][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 217.150286][ T5813] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 217.150316][ T5813] usb 2-1: config 16 has an invalid interface number: 48 but max is 0 [ 217.150338][ T5813] usb 2-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 217.150360][ T5813] usb 2-1: config 16 has no interface number 0 [ 217.150393][ T5813] usb 2-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 217.150435][ T5813] usb 2-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 217.150464][ T5813] usb 2-1: config 16 interface 48 has no altsetting 0 [ 217.150503][ T5813] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.150528][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.299971][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 217.379861][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 217.384781][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 217.475099][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 218.517553][ T5813] usb 2-1: string descriptor 0 read error: -71 [ 218.885005][ T5813] usb 2-1: USB disconnect, device number 15 [ 219.903502][ T5813] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 220.047805][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 220.050337][ T5813] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 220.050368][ T5813] usb 2-1: config 0 has no interface number 0 [ 220.050416][ T5813] usb 2-1: config 0 interface 184 has no altsetting 0 [ 220.054197][ T5813] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 220.054228][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.054251][ T5813] usb 2-1: Product: syz [ 220.054268][ T5813] usb 2-1: Manufacturer: syz [ 220.054284][ T5813] usb 2-1: SerialNumber: syz [ 220.058328][ T7463] FAULT_INJECTION: forcing a failure. [ 220.058328][ T7463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.058368][ T7463] CPU: 0 UID: 0 PID: 7463 Comm: syz.4.496 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 220.058411][ T7463] Tainted: [L]=SOFTLOCKUP [ 220.058419][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 220.058432][ T7463] Call Trace: [ 220.058440][ T7463] [ 220.058450][ T7463] dump_stack_lvl+0xe8/0x150 [ 220.058492][ T7463] should_fail_ex+0x46b/0x600 [ 220.058524][ T7463] _copy_from_user+0x2d/0xb0 [ 220.058554][ T7463] ___sys_sendmsg+0x1c6/0x360 [ 220.058579][ T7463] ? __lock_acquire+0x6b5/0x2cf0 [ 220.058610][ T7463] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.058675][ T7463] ? __fget_files+0x2a/0x420 [ 220.058705][ T7463] ? __fget_files+0x3a6/0x420 [ 220.058743][ T7463] __x64_sys_sendmsg+0x1c3/0x2a0 [ 220.058769][ T7463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.058803][ T7463] ? __pfx_ksys_write+0x10/0x10 [ 220.058844][ T7463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.058868][ T7463] do_syscall_64+0x15f/0xf80 [ 220.058896][ T7463] ? trace_irq_disable+0x3b/0x140 [ 220.058919][ T7463] ? clear_bhb_loop+0x40/0x90 [ 220.058946][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.058969][ T7463] RIP: 0033:0x7f3d686ac819 [ 220.058990][ T7463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.059010][ T7463] RSP: 002b:00007f3d66906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.059035][ T7463] RAX: ffffffffffffffda RBX: 00007f3d68925fa0 RCX: 00007f3d686ac819 [ 220.059051][ T7463] RDX: 0000000000000802 RSI: 0000200000000100 RDI: 0000000000000003 [ 220.059065][ T7463] RBP: 00007f3d66906090 R08: 0000000000000000 R09: 0000000000000000 [ 220.059078][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.059092][ T7463] R13: 00007f3d68926038 R14: 00007f3d68925fa0 R15: 00007fff66afc238 [ 220.059126][ T7463] [ 220.341959][ T5813] usb 2-1: config 0 descriptor?? [ 220.702960][ T1000] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 220.868067][ T1000] usb 4-1: Using ep0 maxpacket: 8 [ 220.875792][ T1000] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 220.875828][ T1000] usb 4-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 220.875884][ T1000] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.875931][ T1000] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.875958][ T1000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.980313][ T1000] usbtmc 4-1:16.0: bulk endpoints not found [ 221.185647][ T5813] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 221.185683][ T5813] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 221.387146][ T5813] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 221.387191][ T5813] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 221.387212][ T5813] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 221.387232][ T5813] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 221.387570][ T5813] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 221.567801][ T5862] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 221.747790][ T5862] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 221.747826][ T5862] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 221.747848][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 221.747902][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 221.747932][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 221.750421][ T5862] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.750454][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.750476][ T5862] usb 5-1: Product: syz [ 221.750492][ T5862] usb 5-1: Manufacturer: syz [ 221.861189][ T5862] cdc_wdm 5-1:1.0: skipping garbage [ 221.861231][ T5862] cdc_wdm 5-1:1.0: skipping garbage [ 221.922032][ T5862] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 221.922058][ T5862] cdc_wdm 5-1:1.0: Unknown control protocol [ 222.140158][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.140868][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.251551][ T7486] FAULT_INJECTION: forcing a failure. [ 222.251551][ T7486] name failslab, interval 1, probability 0, space 0, times 0 [ 222.251579][ T7486] CPU: 1 UID: 0 PID: 7486 Comm: syz.4.505 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 222.251603][ T7486] Tainted: [L]=SOFTLOCKUP [ 222.251607][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 222.251624][ T7486] Call Trace: [ 222.251629][ T7486] [ 222.251634][ T7486] dump_stack_lvl+0xe8/0x150 [ 222.251661][ T7486] should_fail_ex+0x46b/0x600 [ 222.251678][ T7486] should_failslab+0xa8/0x100 [ 222.251692][ T7486] __kmalloc_noprof+0xdf/0x7b0 [ 222.251711][ T7486] ? tomoyo_encode+0x28b/0x550 [ 222.251728][ T7486] tomoyo_encode+0x28b/0x550 [ 222.251744][ T7486] tomoyo_realpath_from_path+0x58d/0x5d0 [ 222.251766][ T7486] tomoyo_check_open_permission+0x229/0x470 [ 222.251785][ T7486] ? tomoyo_check_open_permission+0x1d3/0x470 [ 222.251803][ T7486] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 222.251822][ T7486] ? __asan_memset+0x22/0x50 [ 222.251853][ T7486] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 222.251870][ T7486] ? tomoyo_file_open+0x167/0x220 [ 222.251886][ T7486] security_file_open+0xa9/0x240 [ 222.251907][ T7486] do_dentry_open+0x4c0/0x13e0 [ 222.251924][ T7486] ? vfs_open+0x31/0x350 [ 222.251941][ T7486] vfs_open+0x3b/0x350 [ 222.251954][ T7486] ? path_openat+0x2e2b/0x38a0 [ 222.251974][ T7486] path_openat+0x2e43/0x38a0 [ 222.252011][ T7486] ? __pfx_path_openat+0x10/0x10 [ 222.252031][ T7486] ? kasan_save_track+0x4f/0x80 [ 222.252048][ T7486] ? kasan_save_track+0x3e/0x80 [ 222.252064][ T7486] ? __kasan_slab_alloc+0x6c/0x80 [ 222.252086][ T7486] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 222.252109][ T7486] ? do_raw_spin_lock+0x12b/0x2f0 [ 222.252127][ T7486] do_file_open+0x23e/0x4a0 [ 222.252145][ T7486] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 222.252164][ T7486] ? __pfx_do_file_open+0x10/0x10 [ 222.252181][ T7486] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 222.252207][ T7486] ? alloc_fd+0x64e/0x6c0 [ 222.252229][ T7486] do_sys_openat2+0x113/0x200 [ 222.252246][ T7486] ? __pfx_do_sys_openat2+0x10/0x10 [ 222.252262][ T7486] ? ksys_write+0x248/0x270 [ 222.252282][ T7486] ? __pfx_ksys_write+0x10/0x10 [ 222.252303][ T7486] __x64_sys_openat+0x138/0x170 [ 222.252320][ T7486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.252334][ T7486] do_syscall_64+0x15f/0xf80 [ 222.252350][ T7486] ? trace_irq_disable+0x3b/0x140 [ 222.252363][ T7486] ? clear_bhb_loop+0x40/0x90 [ 222.252381][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.252394][ T7486] RIP: 0033:0x7f3d6866d04e [ 222.252407][ T7486] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.252419][ T7486] RSP: 002b:00007f3d66905b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 222.252442][ T7486] RAX: ffffffffffffffda RBX: 00007f3d669066c0 RCX: 00007f3d6866d04e [ 222.252459][ T7486] RDX: 0000000000000002 RSI: 00007f3d66905c00 RDI: ffffffffffffff9c [ 222.252474][ T7486] RBP: 00007f3d66906090 R08: 0000000000000000 R09: 0000000000000000 [ 222.252487][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.252500][ T7486] R13: 00007f3d68926038 R14: 00007f3d68925fa0 R15: 00007fff66afc238 [ 222.252535][ T7486] [ 222.253732][ T7486] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.312068][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 222.316004][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 222.316097][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 222.316336][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 222.316353][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 222.316575][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 222.316593][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 222.317916][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 222.317936][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 222.318160][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 222.318177][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 222.318386][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 222.318403][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 222.318634][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 222.318652][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 222.318871][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 222.318887][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 222.319103][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 222.319120][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 222.319337][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 222.319353][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 222.389741][ T31] usb 5-1: USB disconnect, device number 10 [ 222.389847][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 223.107946][ T31] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 223.173031][ T6003] usb 2-1: USB disconnect, device number 16 [ 223.284005][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 223.284039][ T31] usb 3-1: config 0 has no interface number 0 [ 223.284091][ T31] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 223.284122][ T31] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 223.328021][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 223.328057][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.328079][ T31] usb 3-1: Product: syz [ 223.328095][ T31] usb 3-1: Manufacturer: syz [ 223.328109][ T31] usb 3-1: SerialNumber: syz [ 223.356347][ T31] usb 3-1: config 0 descriptor?? [ 223.366575][ T7513] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 223.366723][ T7513] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 223.595121][ T7513] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 223.595264][ T7513] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 223.659311][ T5811] usb 4-1: USB disconnect, device number 14 [ 223.843301][ T6003] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 223.843713][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 223.843743][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 224.009768][ T6003] usb 2-1: Using ep0 maxpacket: 8 [ 224.014216][ T6003] usb 2-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 224.031883][ T6003] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 224.031985][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.032006][ T6003] usb 2-1: Product: syz [ 224.032021][ T6003] usb 2-1: Manufacturer: syz [ 224.032035][ T6003] usb 2-1: SerialNumber: syz [ 224.070821][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 224.071125][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 224.193629][ T31] usb 3-1: USB disconnect, device number 16 [ 224.396670][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 224.396698][ T7518] netlink: 48 bytes leftover after parsing attributes in process `syz.1.515'. [ 224.411225][ T6003] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 224.411254][ T6003] usb 2-1: 1:1 : unsupported sample bitwidth 5 in 15 bytes [ 224.645834][ T6003] usb 2-1: USB disconnect, device number 17 [ 224.861446][ T7548] FAULT_INJECTION: forcing a failure. [ 224.861446][ T7548] name failslab, interval 1, probability 0, space 0, times 0 [ 224.861485][ T7548] CPU: 0 UID: 0 PID: 7548 Comm: syz.4.527 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 224.861512][ T7548] Tainted: [L]=SOFTLOCKUP [ 224.861519][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 224.861531][ T7548] Call Trace: [ 224.861538][ T7548] [ 224.861546][ T7548] dump_stack_lvl+0xe8/0x150 [ 224.861581][ T7548] should_fail_ex+0x46b/0x600 [ 224.861608][ T7548] should_failslab+0xa8/0x100 [ 224.861628][ T7548] __kmalloc_noprof+0xdf/0x7b0 [ 224.861654][ T7548] ? tomoyo_encode+0x28b/0x550 [ 224.861690][ T7548] tomoyo_encode+0x28b/0x550 [ 224.861714][ T7548] tomoyo_realpath_from_path+0x58d/0x5d0 [ 224.861743][ T7548] ? tomoyo_path_number_perm+0x219/0x630 [ 224.861768][ T7548] tomoyo_path_number_perm+0x246/0x630 [ 224.861795][ T7548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.861819][ T7548] ? __lock_acquire+0x6b5/0x2cf0 [ 224.861842][ T7548] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.861890][ T7548] ? __fget_files+0x2a/0x420 [ 224.861915][ T7548] ? __fget_files+0x2a/0x420 [ 224.861936][ T7548] ? __fget_files+0x3a6/0x420 [ 224.861957][ T7548] ? __fget_files+0x2a/0x420 [ 224.861985][ T7548] security_file_ioctl+0xc3/0x2a0 [ 224.862013][ T7548] __se_sys_ioctl+0x47/0x170 [ 224.862040][ T7548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.862067][ T7548] do_syscall_64+0x15f/0xf80 [ 224.862089][ T7548] ? trace_irq_disable+0x3b/0x140 [ 224.862106][ T7548] ? clear_bhb_loop+0x40/0x90 [ 224.862129][ T7548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.862150][ T7548] RIP: 0033:0x7f3d686ac819 [ 224.862168][ T7548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.862184][ T7548] RSP: 002b:00007f3d66906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.862203][ T7548] RAX: ffffffffffffffda RBX: 00007f3d68925fa0 RCX: 00007f3d686ac819 [ 224.862217][ T7548] RDX: 0000200000000140 RSI: 00000000c058560f RDI: 0000000000000003 [ 224.862228][ T7548] RBP: 00007f3d66906090 R08: 0000000000000000 R09: 0000000000000000 [ 224.862239][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.862250][ T7548] R13: 00007f3d68926038 R14: 00007f3d68925fa0 R15: 00007fff66afc238 [ 224.862279][ T7548] [ 224.865521][ T7548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 225.088989][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.607802][ T5882] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 225.757850][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 225.765508][ T5882] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 225.765541][ T5882] usb 3-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 225.765619][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.765667][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.765694][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.864968][ T5882] usbtmc 3-1:16.0: bulk endpoints not found [ 226.006171][ T7571] FAULT_INJECTION: forcing a failure. [ 226.006171][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 226.006214][ T7571] CPU: 0 UID: 0 PID: 7571 Comm: syz.3.535 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 226.006246][ T7571] Tainted: [L]=SOFTLOCKUP [ 226.006254][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 226.006267][ T7571] Call Trace: [ 226.006276][ T7571] [ 226.006285][ T7571] dump_stack_lvl+0xe8/0x150 [ 226.006327][ T7571] should_fail_ex+0x46b/0x600 [ 226.006357][ T7571] should_failslab+0xa8/0x100 [ 226.006380][ T7571] __kmalloc_noprof+0xdf/0x7b0 [ 226.006411][ T7571] ? tomoyo_encode+0x28b/0x550 [ 226.006441][ T7571] tomoyo_encode+0x28b/0x550 [ 226.006471][ T7571] tomoyo_realpath_from_path+0x58d/0x5d0 [ 226.006508][ T7571] ? tomoyo_path_number_perm+0x219/0x630 [ 226.006540][ T7571] tomoyo_path_number_perm+0x246/0x630 [ 226.006574][ T7571] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 226.006605][ T7571] ? __lock_acquire+0x6b5/0x2cf0 [ 226.006647][ T7571] ? do_raw_spin_lock+0x12b/0x2f0 [ 226.006705][ T7571] ? __fget_files+0x2a/0x420 [ 226.006737][ T7571] ? __fget_files+0x2a/0x420 [ 226.006764][ T7571] ? __fget_files+0x3a6/0x420 [ 226.006796][ T7571] ? __fget_files+0x2a/0x420 [ 226.006827][ T7571] security_file_ioctl+0xc3/0x2a0 [ 226.006859][ T7571] __se_sys_ioctl+0x47/0x170 [ 226.006893][ T7571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.006918][ T7571] do_syscall_64+0x15f/0xf80 [ 226.006943][ T7571] ? trace_irq_disable+0x3b/0x140 [ 226.006964][ T7571] ? clear_bhb_loop+0x40/0x90 [ 226.006990][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.007012][ T7571] RIP: 0033:0x7f89d7b4c819 [ 226.007032][ T7571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.007051][ T7571] RSP: 002b:00007f89d5da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.007076][ T7571] RAX: ffffffffffffffda RBX: 00007f89d7dc5fa0 RCX: 00007f89d7b4c819 [ 226.007091][ T7571] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000013 [ 226.007105][ T7571] RBP: 00007f89d5da6090 R08: 0000000000000000 R09: 0000000000000000 [ 226.007120][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.007133][ T7571] R13: 00007f89d7dc6038 R14: 00007f89d7dc5fa0 R15: 00007ffe5215d578 [ 226.007169][ T7571] [ 226.007346][ T7571] ERROR: Out of memory at tomoyo_realpath_from_path. [ 226.798011][ T5882] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 226.938750][ T5862] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 226.963079][ T5882] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 226.963113][ T5882] usb 1-1: config 0 has no interface number 0 [ 226.963167][ T5882] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 226.963185][ T5882] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 227.008833][ T5882] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.008868][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.008890][ T5882] usb 1-1: Product: syz [ 227.008906][ T5882] usb 1-1: Manufacturer: syz [ 227.008923][ T5882] usb 1-1: SerialNumber: syz [ 227.063898][ T5882] usb 1-1: config 0 descriptor?? [ 227.067292][ T7581] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 227.067430][ T7581] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 227.110702][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 227.115357][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.140812][ T5862] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.140849][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.140872][ T5862] usb 4-1: Product: syz [ 227.140886][ T5862] usb 4-1: Manufacturer: syz [ 227.140902][ T5862] usb 4-1: SerialNumber: syz [ 227.197586][ T5862] usb 4-1: config 0 descriptor?? [ 227.232717][ T5862] smsc95xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 227.232995][ T5862] smsc95xx 4-1:0.0: probe with driver smsc95xx failed with error -22 [ 227.284270][ T7581] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 227.284389][ T7581] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 227.493191][ T5882] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 227.493227][ T5882] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 227.699282][ T5882] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 227.699641][ T5882] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 227.707884][ T6003] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 227.745673][ T5882] usb 1-1: USB disconnect, device number 20 [ 227.831325][ T6031] usb 4-1: USB disconnect, device number 15 [ 227.907871][ T6003] usb 2-1: Using ep0 maxpacket: 16 [ 227.911967][ T6003] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 227.912043][ T6003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 227.912075][ T6003] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 227.912122][ T6003] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 227.912147][ T6003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.924651][ T6003] usb 2-1: config 0 descriptor?? [ 228.918376][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.922544][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.235108][ T31] usb 3-1: USB disconnect, device number 17 [ 229.407797][ T6003] usbhid 2-1:0.0: can't add hid device: -71 [ 229.407936][ T6003] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 229.481868][ T6003] usb 2-1: USB disconnect, device number 18 [ 229.488786][ T7604] FAULT_INJECTION: forcing a failure. [ 229.488786][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 229.488825][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.0.544 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 229.488853][ T7604] Tainted: [L]=SOFTLOCKUP [ 229.488860][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 229.488872][ T7604] Call Trace: [ 229.488880][ T7604] [ 229.488888][ T7604] dump_stack_lvl+0xe8/0x150 [ 229.488926][ T7604] should_fail_ex+0x46b/0x600 [ 229.488955][ T7604] should_failslab+0xa8/0x100 [ 229.488977][ T7604] __kmalloc_noprof+0xdf/0x7b0 [ 229.489005][ T7604] ? kfree+0x4d/0x6c0 [ 229.489029][ T7604] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 229.489057][ T7604] tomoyo_realpath_from_path+0xe3/0x5d0 [ 229.489080][ T7604] ? tomoyo_domain+0xd8/0x130 [ 229.489107][ T7604] ? tomoyo_path_number_perm+0x219/0x630 [ 229.489135][ T7604] tomoyo_path_number_perm+0x246/0x630 [ 229.489165][ T7604] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 229.489192][ T7604] ? __lock_acquire+0x6b5/0x2cf0 [ 229.489219][ T7604] ? do_raw_spin_lock+0x12b/0x2f0 [ 229.489270][ T7604] ? __fget_files+0x2a/0x420 [ 229.489297][ T7604] ? __fget_files+0x2a/0x420 [ 229.489320][ T7604] ? __fget_files+0x3a6/0x420 [ 229.489353][ T7604] ? __fget_files+0x2a/0x420 [ 229.489385][ T7604] security_file_ioctl+0xc3/0x2a0 [ 229.489417][ T7604] __se_sys_ioctl+0x47/0x170 [ 229.489451][ T7604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.489473][ T7604] do_syscall_64+0x15f/0xf80 [ 229.489497][ T7604] ? trace_irq_disable+0x3b/0x140 [ 229.489517][ T7604] ? clear_bhb_loop+0x40/0x90 [ 229.489541][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.489561][ T7604] RIP: 0033:0x7f2c099dc819 [ 229.489580][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.489598][ T7604] RSP: 002b:00007f2c07c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.489622][ T7604] RAX: ffffffffffffffda RBX: 00007f2c09c55fa0 RCX: 00007f2c099dc819 [ 229.489637][ T7604] RDX: 0000200000000000 RSI: 000000004068aea3 RDI: 0000000000000004 [ 229.489650][ T7604] RBP: 00007f2c07c36090 R08: 0000000000000000 R09: 0000000000000000 [ 229.489663][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.489675][ T7604] R13: 00007f2c09c56038 R14: 00007f2c09c55fa0 R15: 00007ffeadba7dd8 [ 229.489706][ T7604] [ 229.495394][ T7604] ERROR: Out of memory at tomoyo_realpath_from_path. [ 230.883906][ T7618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.549'. [ 230.883939][ T7618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.549'. [ 230.883956][ T7618] netlink: 'syz.1.549': attribute type 6 has an invalid length. [ 231.160254][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 231.274183][ T7628] can0: slcan on ttyS3. [ 231.276483][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 231.276509][ T7628] openvswitch: netlink: Flow actions attr not present in new flow. [ 231.713838][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 231.713907][ T7634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.554'. [ 231.861042][ T7628] can0 (unregistered): slcan off ttyS3. [ 231.889626][ T37] audit: type=1326 audit(1776587109.255:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 231.889685][ T37] audit: type=1326 audit(1776587109.255:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 231.889733][ T37] audit: type=1326 audit(1776587109.255:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 231.889777][ T37] audit: type=1326 audit(1776587109.255:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 231.889839][ T37] audit: type=1326 audit(1776587109.255:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 231.889886][ T37] audit: type=1326 audit(1776587109.255:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 231.889933][ T37] audit: type=1326 audit(1776587109.255:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 231.889980][ T37] audit: type=1326 audit(1776587109.255:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 231.890025][ T37] audit: type=1326 audit(1776587109.255:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 231.890072][ T37] audit: type=1326 audit(1776587109.255:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14cb3c819 code=0x7ffc0000 [ 232.407860][ T5875] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 234.693561][ T5875] usb 1-1: not running at top speed; connect to a high speed hub [ 234.696345][ T5875] usb 1-1: config 173 has an invalid interface number: 140 but max is 0 [ 234.696376][ T5875] usb 1-1: config 173 has no interface number 0 [ 234.696412][ T5875] usb 1-1: config 173 interface 140 has no altsetting 0 [ 235.390351][ T5875] usb 1-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=ae.e4 [ 235.390388][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.446319][ T5875] usb 1-1: can't set config #173, error -71 [ 235.484311][ T5875] usb 1-1: USB disconnect, device number 21 [ 235.887843][ T5862] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 236.052093][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 236.063606][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 236.063643][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 236.092436][ T5862] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 236.092472][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.092494][ T5862] usb 3-1: Product: syz [ 236.092510][ T5862] usb 3-1: Manufacturer: syz [ 236.092526][ T5862] usb 3-1: SerialNumber: syz [ 236.175084][ T5862] usb 3-1: config 0 descriptor?? [ 236.193300][ T5862] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 236.193341][ T5862] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 236.809854][ T5862] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 236.810665][ T5862] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 237.037275][ T5862] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 237.037302][ T5862] em28xx 3-1:0.0: No AC97 audio processor [ 237.129619][ T5862] usb 3-1: USB disconnect, device number 18 [ 237.144967][ T5862] em28xx 3-1:0.0: Disconnecting em28xx [ 237.156088][ T5862] em28xx 3-1:0.0: Freeing device [ 237.544440][ T7748] FAULT_INJECTION: forcing a failure. [ 237.544440][ T7748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.544482][ T7748] CPU: 1 UID: 0 PID: 7748 Comm: syz.4.598 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 237.544515][ T7748] Tainted: [L]=SOFTLOCKUP [ 237.544523][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 237.544536][ T7748] Call Trace: [ 237.544545][ T7748] [ 237.544555][ T7748] dump_stack_lvl+0xe8/0x150 [ 237.544598][ T7748] should_fail_ex+0x46b/0x600 [ 237.544628][ T7748] _copy_from_user+0x2d/0xb0 [ 237.544659][ T7748] __sys_connect+0x156/0x450 [ 237.544695][ T7748] ? __pfx___sys_connect+0x10/0x10 [ 237.544738][ T7748] ? __pfx_ksys_write+0x10/0x10 [ 237.544769][ T7748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.544789][ T7748] __x64_sys_connect+0x7a/0x90 [ 237.544816][ T7748] do_syscall_64+0x15f/0xf80 [ 237.544838][ T7748] ? trace_irq_disable+0x3b/0x140 [ 237.544855][ T7748] ? clear_bhb_loop+0x40/0x90 [ 237.544878][ T7748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.544895][ T7748] RIP: 0033:0x7f3d686ac819 [ 237.544912][ T7748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.544928][ T7748] RSP: 002b:00007f3d66906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 237.544948][ T7748] RAX: ffffffffffffffda RBX: 00007f3d68925fa0 RCX: 00007f3d686ac819 [ 237.544962][ T7748] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 237.544974][ T7748] RBP: 00007f3d66906090 R08: 0000000000000000 R09: 0000000000000000 [ 237.544985][ T7748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.544996][ T7748] R13: 00007f3d68926038 R14: 00007f3d68925fa0 R15: 00007fff66afc238 [ 237.545025][ T7748] [ 237.797865][ T816] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 237.987885][ T816] usb 4-1: Using ep0 maxpacket: 16 [ 237.992192][ T816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.998079][ T816] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 237.998116][ T816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.998138][ T816] usb 4-1: Product: syz [ 237.998155][ T816] usb 4-1: Manufacturer: syz [ 237.998172][ T816] usb 4-1: SerialNumber: syz [ 238.062136][ T816] usb 4-1: config 0 descriptor?? [ 238.077327][ T816] hub 4-1:0.0: bad descriptor, ignoring hub [ 238.077367][ T816] hub 4-1:0.0: probe with driver hub failed with error -5 [ 238.129318][ T816] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 242.035563][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 242.820599][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 242.830148][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.836378][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 242.836407][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.836427][ T9] usb 5-1: Product: syz [ 242.836441][ T9] usb 5-1: Manufacturer: syz [ 242.836455][ T9] usb 5-1: SerialNumber: syz [ 242.850711][ T9] usb 5-1: config 0 descriptor?? [ 242.872749][ T9] smsc95xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 242.873017][ T9] smsc95xx 5-1:0.0: probe with driver smsc95xx failed with error -22 [ 243.059158][ T7806] FAULT_INJECTION: forcing a failure. [ 243.059158][ T7806] name failslab, interval 1, probability 0, space 0, times 0 [ 243.059203][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.4.619 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 243.059234][ T7806] Tainted: [L]=SOFTLOCKUP [ 243.059242][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 243.059256][ T7806] Call Trace: [ 243.059265][ T7806] [ 243.059275][ T7806] dump_stack_lvl+0xe8/0x150 [ 243.059315][ T7806] should_fail_ex+0x46b/0x600 [ 243.059347][ T7806] should_failslab+0xa8/0x100 [ 243.059372][ T7806] __kmalloc_noprof+0xdf/0x7b0 [ 243.059406][ T7806] ? tomoyo_encode+0x28b/0x550 [ 243.059437][ T7806] tomoyo_encode+0x28b/0x550 [ 243.059467][ T7806] tomoyo_realpath_from_path+0x58d/0x5d0 [ 243.059505][ T7806] ? tomoyo_path_number_perm+0x219/0x630 [ 243.059538][ T7806] tomoyo_path_number_perm+0x246/0x630 [ 243.059584][ T7806] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 243.059615][ T7806] ? __lock_acquire+0x6b5/0x2cf0 [ 243.059645][ T7806] ? do_raw_spin_lock+0x12b/0x2f0 [ 243.059704][ T7806] ? __fget_files+0x2a/0x420 [ 243.059737][ T7806] ? __fget_files+0x2a/0x420 [ 243.059765][ T7806] ? __fget_files+0x3a6/0x420 [ 243.059797][ T7806] ? __fget_files+0x2a/0x420 [ 243.059831][ T7806] security_file_ioctl+0xc3/0x2a0 [ 243.059868][ T7806] __se_sys_ioctl+0x47/0x170 [ 243.059903][ T7806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.059929][ T7806] do_syscall_64+0x15f/0xf80 [ 243.059957][ T7806] ? trace_irq_disable+0x3b/0x140 [ 243.059980][ T7806] ? clear_bhb_loop+0x40/0x90 [ 243.060009][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.060031][ T7806] RIP: 0033:0x7f3d686ac819 [ 243.060053][ T7806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.060073][ T7806] RSP: 002b:00007f3d66906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.060100][ T7806] RAX: ffffffffffffffda RBX: 00007f3d68925fa0 RCX: 00007f3d686ac819 [ 243.060117][ T7806] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000004 [ 243.060131][ T7806] RBP: 00007f3d66906090 R08: 0000000000000000 R09: 0000000000000000 [ 243.060146][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.060159][ T7806] R13: 00007f3d68926038 R14: 00007f3d68925fa0 R15: 00007fff66afc238 [ 243.060195][ T7806] [ 243.257972][ T7806] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.259897][ T31] usb 5-1: USB disconnect, device number 11 [ 244.723268][ T5875] usb 4-1: USB disconnect, device number 16 [ 245.089338][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 245.250331][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.250362][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 245.250384][ T9] usb 1-1: config 1 has no interface number 0 [ 245.250433][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.284499][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.284533][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.284552][ T9] usb 1-1: Product: syz [ 245.284567][ T9] usb 1-1: Manufacturer: syz [ 245.284581][ T9] usb 1-1: SerialNumber: syz [ 245.386602][ T7845] UHID_CREATE from different security context by process 374 (syz.3.631), this is not allowed. [ 245.437924][ T9] usb 1-1: selecting invalid altsetting 1 [ 245.641393][ T9] cdc_ncm 1-1:1.1: bind() failure [ 245.647860][ T6031] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 245.730791][ T9] usb 1-1: USB disconnect, device number 22 [ 245.815995][ T6031] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 245.816030][ T6031] usb 3-1: config 0 has no interface number 0 [ 245.816082][ T6031] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 245.816114][ T6031] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 245.826039][ T6031] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 245.826071][ T6031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.826091][ T6031] usb 3-1: Product: syz [ 245.826104][ T6031] usb 3-1: Manufacturer: syz [ 245.826119][ T6031] usb 3-1: SerialNumber: syz [ 245.982501][ T6031] usb 3-1: config 0 descriptor?? [ 245.983699][ T7848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 245.983928][ T7848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 246.321989][ T7848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 246.322112][ T7848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 246.521447][ T816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 246.521499][ T816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 246.522091][ T816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 246.522125][ T816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 246.522152][ T816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 246.522180][ T816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 246.522962][ T816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 246.522991][ T816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 246.523018][ T816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 246.523687][ T816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 246.736859][ T6031] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 246.736898][ T6031] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 247.917858][ T6031] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 247.918212][ T6031] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 247.981099][ T6031] usb 3-1: USB disconnect, device number 19 [ 248.119992][ T816] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.03 Device [syz1] on syz1 [ 248.331275][ T7873] fido_id[7873]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 248.341764][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 248.518003][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.518045][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.518072][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 248.518115][ T9] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 248.518139][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.590743][ T9] usb 1-1: config 0 descriptor?? [ 249.076535][ T9] steelseries 0003:1038:1410.0004: not enough fields in HID_OUTPUT_REPORT 0 [ 249.223836][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 249.408332][ T36] usb 1-1: USB disconnect, device number 23 [ 250.403137][ T7901] fido_id[7901]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 251.146727][ T7915] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 251.699688][ T7916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.925494][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 253.614157][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.665'. [ 253.614687][ T7932] netlink: 'syz.3.665': attribute type 2 has an invalid length. [ 253.614707][ T7932] netlink: 224 bytes leftover after parsing attributes in process `syz.3.665'. [ 253.727303][ T7934] nfs4: Unknown parameter 'ÃÙ°]"P±—;¥@Ñžù+cäÊ0/ðŒ<Ù·Ò¹ìbT†oö6„' [ 253.729491][ T7934] netlink: 'syz.4.666': attribute type 10 has an invalid length. [ 253.739240][ T7934] bond0: (slave wlan1): Opening slave failed [ 253.772972][ T7934] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 253.811510][ T7937] nfs4: Unknown parameter 'ÃÙ°]"P±—;¥@Ñžù+cäÊ0/ðŒ<Ù·Ò¹ìbT†oö6„' [ 253.867914][ T816] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 253.968992][ T7941] FAULT_INJECTION: forcing a failure. [ 253.968992][ T7941] name failslab, interval 1, probability 0, space 0, times 0 [ 253.969020][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.0.668 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 253.969039][ T7941] Tainted: [L]=SOFTLOCKUP [ 253.969043][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 253.969052][ T7941] Call Trace: [ 253.969057][ T7941] [ 253.969063][ T7941] dump_stack_lvl+0xe8/0x150 [ 253.969088][ T7941] should_fail_ex+0x46b/0x600 [ 253.969106][ T7941] should_failslab+0xa8/0x100 [ 253.969120][ T7941] __kmalloc_noprof+0xdf/0x7b0 [ 253.969140][ T7941] ? tomoyo_encode+0x28b/0x550 [ 253.969157][ T7941] tomoyo_encode+0x28b/0x550 [ 253.969174][ T7941] tomoyo_realpath_from_path+0x58d/0x5d0 [ 253.969193][ T7941] ? tomoyo_domain+0xd8/0x130 [ 253.969210][ T7941] ? tomoyo_path_number_perm+0x219/0x630 [ 253.969228][ T7941] tomoyo_path_number_perm+0x246/0x630 [ 253.969247][ T7941] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 253.969265][ T7941] ? __lock_acquire+0x6b5/0x2cf0 [ 253.969288][ T7941] ? do_raw_spin_lock+0x12b/0x2f0 [ 253.969319][ T7941] ? __fget_files+0x2a/0x420 [ 253.969338][ T7941] ? __fget_files+0x2a/0x420 [ 253.969353][ T7941] ? __fget_files+0x3a6/0x420 [ 253.969367][ T7941] ? __fget_files+0x2a/0x420 [ 253.969385][ T7941] security_file_ioctl+0xc3/0x2a0 [ 253.969405][ T7941] __se_sys_ioctl+0x47/0x170 [ 253.969432][ T7941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.969446][ T7941] do_syscall_64+0x15f/0xf80 [ 253.969462][ T7941] ? trace_irq_disable+0x3b/0x140 [ 253.969475][ T7941] ? clear_bhb_loop+0x40/0x90 [ 253.969491][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.969504][ T7941] RIP: 0033:0x7f2c099dc819 [ 253.969517][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.969529][ T7941] RSP: 002b:00007f2c07c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.969544][ T7941] RAX: ffffffffffffffda RBX: 00007f2c09c55fa0 RCX: 00007f2c099dc819 [ 253.969553][ T7941] RDX: 0000200000000000 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 253.969561][ T7941] RBP: 00007f2c07c36090 R08: 0000000000000000 R09: 0000000000000000 [ 253.969569][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.969577][ T7941] R13: 00007f2c09c56038 R14: 00007f2c09c55fa0 R15: 00007ffeadba7dd8 [ 253.969597][ T7941] [ 253.971475][ T7945] FAULT_INJECTION: forcing a failure. [ 253.971475][ T7945] name failslab, interval 1, probability 0, space 0, times 0 [ 253.971499][ T7945] CPU: 1 UID: 0 PID: 7945 Comm: syz.1.670 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 253.971517][ T7945] Tainted: [L]=SOFTLOCKUP [ 253.971521][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 253.971529][ T7945] Call Trace: [ 253.971534][ T7945] [ 253.971540][ T7945] dump_stack_lvl+0xe8/0x150 [ 253.971564][ T7945] should_fail_ex+0x46b/0x600 [ 253.971581][ T7945] should_failslab+0xa8/0x100 [ 253.971595][ T7945] __kmalloc_noprof+0xdf/0x7b0 [ 253.971615][ T7945] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 253.971636][ T7945] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 253.971656][ T7945] genl_family_rcv_msg_doit+0xd9/0x330 [ 253.971676][ T7945] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 253.971694][ T7945] ? __pfx_genl_get_cmd+0x10/0x10 [ 253.971708][ T7945] ? __pfx_thermal_genl_cmd_doit+0x10/0x10 [ 253.971727][ T7945] ? lockdep_hardirqs_on+0x7a/0x110 [ 253.971743][ T7945] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 253.971764][ T7945] genl_rcv_msg+0x61c/0x7a0 [ 253.971799][ T7945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.971814][ T7945] ? __pfx_thermal_genl_cmd_doit+0x10/0x10 [ 253.971839][ T7945] netlink_rcv_skb+0x232/0x4b0 [ 253.971867][ T7945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.971883][ T7945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.971910][ T7945] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.971928][ T7945] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.971950][ T7945] genl_rcv+0x28/0x40 [ 253.971963][ T7945] netlink_unicast+0x780/0x920 [ 253.971987][ T7945] netlink_sendmsg+0x813/0xb40 [ 253.972005][ T7945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.972018][ T7945] ? unwind_get_return_address+0x4d/0x90 [ 253.972036][ T7945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.972057][ T7945] ____sys_sendmsg+0x94c/0x9c0 [ 253.972082][ T7945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.972102][ T7945] ? import_iovec+0x73/0xa0 [ 253.972120][ T7945] ___sys_sendmsg+0x2a5/0x360 [ 253.972140][ T7945] ? __lock_acquire+0x6b5/0x2cf0 [ 253.972158][ T7945] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.972202][ T7945] ? __fget_files+0x2a/0x420 [ 253.972218][ T7945] ? __fget_files+0x3a6/0x420 [ 253.972240][ T7945] __x64_sys_sendmsg+0x1c3/0x2a0 [ 253.972256][ T7945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.972276][ T7945] ? __pfx_ksys_write+0x10/0x10 [ 253.972300][ T7945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.972314][ T7945] do_syscall_64+0x15f/0xf80 [ 253.972330][ T7945] ? trace_irq_disable+0x3b/0x140 [ 253.972342][ T7945] ? clear_bhb_loop+0x40/0x90 [ 253.972358][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.972371][ T7945] RIP: 0033:0x7fe0e88bc819 [ 253.972384][ T7945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.972395][ T7945] RSP: 002b:00007fe0e6b16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.972409][ T7945] RAX: ffffffffffffffda RBX: 00007fe0e8b35fa0 RCX: 00007fe0e88bc819 [ 253.972419][ T7945] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 253.972434][ T7945] RBP: 00007fe0e6b16090 R08: 0000000000000000 R09: 0000000000000000 [ 253.972442][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.972450][ T7945] R13: 00007fe0e8b36038 R14: 00007fe0e8b35fa0 R15: 00007ffc2c7e4bc8 [ 253.972469][ T7945] [ 253.972529][ T7941] ERROR: Out of memory at tomoyo_realpath_from_path. [ 254.018335][ T816] usb 3-1: Using ep0 maxpacket: 8 [ 254.020938][ T816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 254.020972][ T816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.020995][ T816] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 254.021046][ T816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 254.021072][ T816] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 254.021111][ T816] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 254.021133][ T816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.042272][ T816] usb 3-1: config 0 descriptor?? [ 254.107923][ T7930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 254.695914][ T816] usb 3-1: USB disconnect, device number 20 [ 254.722000][ T5122] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 254.847820][ T5882] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 255.007988][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 255.013305][ T5882] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 255.013377][ T5882] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 255.013407][ T5882] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 255.013434][ T5882] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.013482][ T5882] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.013508][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.095458][ T5882] usbtmc 4-1:16.0: bulk endpoints not found [ 255.329255][ T7955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.674'. [ 255.778406][ T816] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 256.124892][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.124963][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.208211][ T816] usb 3-1: device descriptor read/64, error -71 [ 256.362635][ T5882] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 256.587880][ T816] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 256.641657][ T5882] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 256.641693][ T5882] usb 2-1: config 0 has no interface number 0 [ 256.641848][ T5882] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 256.641882][ T5882] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.641909][ T5882] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 109, setting to 64 [ 256.646913][ T5882] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 256.646956][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 256.646978][ T5882] usb 2-1: Product: syz [ 256.646995][ T5882] usb 2-1: Manufacturer: syz [ 256.647011][ T5882] usb 2-1: SerialNumber: syz [ 256.692833][ T5882] usb 2-1: config 0 descriptor?? [ 256.718893][ T7964] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 256.807130][ T816] usb 3-1: device descriptor read/64, error -71 [ 256.874502][ T5882] xpad 2-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 256.895390][ T5882] xpad 2-1:0.237: probe with driver xpad failed with error -90 [ 256.910406][ T816] usb usb3-port1: attempt power cycle [ 256.950747][ T5882] usb 2-1: USB disconnect, device number 19 [ 256.977113][ T7987] FAULT_INJECTION: forcing a failure. [ 256.977113][ T7987] name failslab, interval 1, pr[ 256.977113][ T7987] FAULT_INJECTION: forcing a failure. [ 256.977113][ T7987] name failslab, interval 1, probability 0, space 0, times 0 [ 256.977156][ T7987] CPU: 0 UID: 0 PID: 7987 Comm: syz.4.684 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 256.977188][ T7987] Tainted: [L]=SOFTLOCKUP [ 256.977196][ T7987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.977208][ T7987] Call Trace: [ 256.977216][ T7987] [ 256.977226][ T7987] dump_stack_lvl+0xe8/0x150 [ 256.977267][ T7987] should_fail_ex+0x46b/0x600 [ 256.977298][ T7987] should_failslab+0xa8/0x100 [ 256.977323][ T7987] __kmalloc_cache_noprof+0x84/0x690 [ 256.977352][ T7987] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 256.977379][ T7987] __io_uring_add_tctx_node+0x199/0x5f0 [ 256.977406][ T7987] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 256.977427][ T7987] ? __fget_files+0x2a/0x420 [ 256.977459][ T7987] ? __fget_files+0x2a/0x420 [ 256.977484][ T7987] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 256.977509][ T7987] __se_sys_io_uring_enter+0x191e/0x1bf0 [ 256.977534][ T7987] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 256.977567][ T7987] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 256.977592][ T7987] ? fput+0xa0/0xd0 [ 256.977612][ T7987] ? ksys_write+0x248/0x270 [ 256.977644][ T7987] ? __pfx_ksys_write+0x10/0x10 [ 256.977679][ T7987] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 256.977708][ T7987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.977731][ T7987] do_syscall_64+0x15f/0xf80 [ 256.977752][ T7987] ? trace_irq_disable+0x3b/0x140 [ 256.977769][ T7987] ? clear_bhb_loop+0x40/0x90 [ 256.977790][ T7987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.977807][ T7987] RIP: 0033:0x7f3d686ac819 [ 256.977824][ T7987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.977839][ T7987] RSP: 002b:00007f3d66880028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 256.977858][ T7987] RAX: ffffffffffffffda RBX: 00007f3d68926090 RCX: 00007f3d686ac819 [ 256.977871][ T7987] RDX: 0000000000006d93 RSI: 0000000000006516 RDI: 0000000000000003 [ 256.977882][ T7987] RBP: 00007f3d66880090 R08: 0000000000000000 R09: 0000000000000000 [ 256.977892][ T7987] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 256.977903][ T7987] R13: 00007f3d68926128 R14: 00007f3d68926090 R15: 00007fff66afc238 [ 256.977929][ T7987] [ 256.987001][ T7987] ------------[ cut here ]------------ [ 256.987016][ T7987] !test_bit(IO_WQ_BIT_EXIT, &wq->state) [ 256.987024][ T7987] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0xa36/0xa70, CPU#0: syz.4.684/7987 [ 256.987075][ T7987] Modules linked in: [ 256.987104][ T7987] CPU: 0 UID: 0 PID: 7987 Comm: syz.4.684 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 256.987139][ T7987] Tainted: [L]=SOFTLOCKUP [ 256.987147][ T7987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.987159][ T7987] RIP: 0010:io_wq_put_and_exit+0xa36/0xa70 [ 256.987186][ T7987] Code: fd 65 48 8b 05 bb ca d6 0d 48 3b 44 24 50 75 4d 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 9b ee 29 fd 90 <0f> 0b 90 e9 36 f6 ff ff e8 8d ee 29 fd 4c 89 f7 be 03 00 00 00 e8 [ 256.987204][ T7987] RSP: 0018:ffffc9000c82fb90 EFLAGS: 00010293 [ 256.987221][ T7987] RAX: ffffffff849aa585 RBX: 0000000000000000 RCX: ffff888028190000 [ 256.987235][ T7987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.987247][ T7987] RBP: ffffc9000c82fce8 R08: 0000000000000000 R09: 0000000000000000 [ 256.987260][ T7987] R10: dffffc0000000000 R11: ffffed1007b4b801 R12: 00000000fffffff4 [ 256.987274][ T7987] R13: ffff88803da5c000 R14: ffff888028190990 R15: 1ffff11005032132 [ 256.987289][ T7987] FS: 00007f3d668806c0(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 256.987306][ T7987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.987319][ T7987] CR2: 0000001b2f60bff8 CR3: 000000003414c000 CR4: 00000000003526f0 [ 256.987338][ T7987] Call Trace: [ 256.987347][ T7987] [ 256.987355][ T7987] ? __kasan_kmalloc+0x22/0xb0 [ 256.987386][ T7987] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 256.987417][ T7987] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 256.987448][ T7987] __io_uring_add_tctx_node+0x402/0x5f0 [ 256.987479][ T7987] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 256.987503][ T7987] ? __fget_files+0x2a/0x420 [ 256.987530][ T7987] ? __fget_files+0x2a/0x420 [ 256.987557][ T7987] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 256.987585][ T7987] __se_sys_io_uring_enter+0x191e/0x1bf0 [ 256.987616][ T7987] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 256.987711][ T7987] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 256.987743][ T7987] ? fput+0xa0/0xd0 [ 256.987770][ T7987] ? ksys_write+0x248/0x270 [ 256.987803][ T7987] ? __pfx_ksys_write+0x10/0x10 [ 256.987839][ T7987] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 256.987869][ T7987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.987893][ T7987] do_syscall_64+0x15f/0xf80 [ 256.987918][ T7987] ? trace_irq_disable+0x3b/0x140 [ 256.987939][ T7987] ? clear_bhb_loop+0x40/0x90 [ 256.987962][ T7987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.987983][ T7987] RIP: 0033:0x7f3d686ac819 [ 256.988005][ T7987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.988022][ T7987] RSP: 002b:00007f3d66880028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 256.988053][ T7987] RAX: ffffffffffffffda RBX: 00007f3d68926090 RCX: 00007f3d686ac819 [ 256.988068][ T7987] RDX: 0000000000006d93 RSI: 0000000000006516 RDI: 0000000000000003 [ 256.988081][ T7987] RBP: 00007f3d66880090 R08: 0000000000000000 R09: 0000000000000000 [ 256.988093][ T7987] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 256.988105][ T7987] R13: 00007f3d68926128 R14: 00007f3d68926090 R15: 00007fff66afc238 [ 256.988144][ T7987] [ 256.988155][ T7987] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 256.988172][ T7987] CPU: 0 UID: 0 PID: 7987 Comm: syz.4.684 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 256.988200][ T7987] Tainted: [L]=SOFTLOCKUP [ 256.988207][ T7987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.988219][ T7987] Call Trace: [ 256.988227][ T7987] [ 256.988235][ T7987] vpanic+0x56c/0xa60 [ 256.988258][ T7987] ? __pfx__printk+0x10/0x10 [ 256.988284][ T7987] ? __pfx_vpanic+0x10/0x10 [ 256.988303][ T7987] ? is_bpf_text_address+0x292/0x2b0 [ 256.988327][ T7987] ? is_bpf_text_address+0x26/0x2b0 [ 256.988360][ T7987] panic+0xc5/0xd0 [ 256.988380][ T7987] ? __pfx_panic+0x10/0x10 [ 256.988415][ T7987] __warn+0x315/0x4c0 [ 256.988433][ T7987] ? io_wq_put_and_exit+0xa36/0xa70 [ 256.988461][ T7987] ? io_wq_put_and_exit+0xa36/0xa70 [ 256.988487][ T7987] __report_bug+0x29a/0x540 [ 256.988510][ T7987] ? __pfx___schedule+0x10/0x10 [ 256.988536][ T7987] ? io_wq_put_and_exit+0xa36/0xa70 [ 256.988562][ T7987] ? __pfx___report_bug+0x10/0x10 [ 256.988590][ T7987] ? irqentry_exit+0x218/0x730 [ 256.988614][ T7987] ? lockdep_hardirqs_on+0x7a/0x110 [ 256.988638][ T7987] ? irqentry_exit+0x218/0x730 [ 256.988665][ T7987] ? io_wq_put_and_exit+0xa36/0xa70 [ 256.988690][ T7987] report_bug+0x16a/0x220 [ 256.988713][ T7987] ? io_wq_put_and_exit+0xa36/0xa70 [ 256.988737][ T7987] ? io_wq_put_and_exit+0xa38/0xa70 [ 256.988761][ T7987] handle_bug+0x9c/0x200 [ 256.988788][ T7987] exc_invalid_op+0x1a/0x50 [ 256.988814][ T7987] asm_exc_invalid_op+0x1a/0x20 [ 256.988834][ T7987] RIP: 0010:io_wq_put_and_exit+0xa36/0xa70 [ 256.988860][ T7987] Code: fd 65 48 8b 05 bb ca d6 0d 48 3b 44 24 50 75 4d 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 9b ee 29 fd 90 <0f> 0b 90 e9 36 f6 ff ff e8 8d ee 29 fd 4c 89 f7 be 03 00 00 00 e8 [ 256.988877][ T7987] RSP: 0018:ffffc9000c82fb90 EFLAGS: 00010293 [ 256.988894][ T7987] RAX: ffffffff849aa585 RBX: 0000000000000000 RCX: ffff888028190000 [ 256.988907][ T7987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.988919][ T7987] RBP: ffffc9000c82fce8 R08: 0000000000000000 R09: 0000000000000000 [ 256.988932][ T7987] R10: dffffc0000000000 R11: ffffed1007b4b801 R12: 00000000fffffff4 [ 256.988947][ T7987] R13: ffff88803da5c000 R14: ffff888028190990 R15: 1ffff11005032132 [ 256.988969][ T7987] ? io_wq_put_and_exit+0xa35/0xa70 [ 256.989000][ T7987] ? __kasan_kmalloc+0x22/0xb0 [ 256.989033][ T7987] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 256.989067][ T7987] ? __io_uring_add_tctx_node+0x199/0x5f0 [ 256.989099][ T7987] __io_uring_add_tctx_node+0x402/0x5f0 [ 256.989139][ T7987] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 256.989164][ T7987] ? __fget_files+0x2a/0x420 [ 256.989190][ T7987] ? __fget_files+0x2a/0x420 [ 256.989217][ T7987] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 256.989246][ T7987] __se_sys_io_uring_enter+0x191e/0x1bf0 [ 256.989275][ T7987] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 256.989311][ T7987] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 256.989338][ T7987] ? fput+0xa0/0xd0 [ 256.989360][ T7987] ? ksys_write+0x248/0x270 [ 256.989391][ T7987] ? __pfx_ksys_write+0x10/0x10 [ 256.989423][ T7987] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 256.989450][ T7987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.989472][ T7987] do_syscall_64+0x15f/0xf80 [ 256.989495][ T7987] ? trace_irq_disable+0x3b/0x140 [ 256.989515][ T7987] ? clear_bhb_loop+0x40/0x90 [ 256.989539][ T7987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.989559][ T7987] RIP: 0033:0x7f3d686ac819 [ 256.989576][ T7987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.989592][ T7987] RSP: 002b:00007f3d66880028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 256.989612][ T7987] RAX: ffffffffffffffda RBX: 00007f3d68926090 RCX: 00007f3d686ac819 [ 256.989627][ T7987] RDX: 0000000000006d93 RSI: 0000000000006516 RDI: 0000000000000003 [ 256.989640][ T7987] RBP: 00007f3d66880090 R08: 0000000000000000 R09: 0000000000000000 [ 256.989654][ T7987] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 256.989666][ T7987] R13: 00007f3d68926128 R14: 00007f3d68926090 R15: 00007fff66afc238 [ 256.989696][ T7987] [ 256.989856][ T7987] Kernel Offset: disabled