last executing test programs:

40m28.499839701s ago: executing program 32 (id=102):
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ptrace(0x10, r0)
waitid(0x1, r0, 0x0, 0x61000006, 0x0)
ptrace$getregset(0x4205, r0, 0x202, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0xc, 0x1000000, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x9})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0)

39m49.086208517s ago: executing program 33 (id=138):
r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7})
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3)
socket$inet6_udp(0xa, 0x2, 0x0)
fsopen(0x0, 0x0)
openat(r1, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC")
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)

38m46.986225379s ago: executing program 34 (id=203):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x66a, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a", 0x20)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
listen(r4, 0xa)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001000000010000000000000010000000000000001001"], 0x28}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x4008000, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x8}, 0xc)

38m45.005036258s ago: executing program 35 (id=211):
listen(0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x4, 0x19, 0x0, r1}, 0x0, &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x15)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close(r4)

37m2.90022461s ago: executing program 6 (id=357):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x719, &(0x7f0000000f00)="$eJzs3c1vHGcdB/DvrNeOHarEaRNaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprDgvSlyUVghcQOJUiUP/gILkGweExD0oXLiEW68+cKiExIGIQ9TLopmd3fXau36J31L184nG88w8L/Ob37x511ltgC+tq+fSfJQiV8+9+bBcXl2ZWVxdmTlSVy8mKcuNpNmepbiTFI+T2bK+SLuiqNsXw7bz8cKVtz99uvpZe6lZT1X7kc36DTCg7XI9Zaoeb2pgz9HtbmK5Di8vJblWz/uNbXesvoZl0s7Wczh0rX6NtJZ30n0n1y3wguk8nYr2c3ODyeRokvH694DUd4fGwUW4p77ZKezoLgcAAABfUE/uHnYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MVTff//RHex0V6VTKXofP//WGddXX4BzW675aN9jQMAAAAAAAAADsY3nuVZHuZYWR5N0iqqv/mfqSpP5vNW8pW8lweZz/2cz8PMZSlLuZ+LSSbXDDT2cG5p6f7Fbs/S4J6XBvYs11abBgAAAAAAAACew68z0f77PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvCiKZKQ9q6aT9TyTaTTTq8ty8s8kY4cd7w4Ug1Y+Ovg4AAAAYFfGn6PP8Wd5loc51lluFdVr/q9Wr5fH817uZCkLWcpi5nO9fg1dvupvrK7MLK6uzNwup3K5f9wf/mdHYYzVI4xUS4O2/FrVYiI3slCtOZ9rVTDX02hv+2z3zYh2THVca3xYxlT8oLbNyJp1WsuN/X7Yuwh7ov+tiMYmLSd6wSXdjEzXsZU9T7QzUFRv1JQZ6R9g/dHZsLFm39Jk1WS0u6WLaXSTfbKT6z3M+dHq50f/7SzvX843M1LP1+aim4lGqkxc6px95TWzeSaSb/31T+/cXLxz6+aNB+d6uzS63/uxOyND1q8/J2bWZOLV58vEC6K5w/bTVSZOdZev5if5Wc5lKm/lfhby88xlKfNp1fVz9flc/pzcPFOzfUtvbRXJWH1c2sdsOzFN5cdVaS5nqr7HspAid3M983mj+ncpF/PdXM7lXFlzhE8Njbvat+qqb6y/6jtH+m8Dgz/77bpQ3t1+17vLzW62x8POzr3SvveXeT2xJq/ts/5pt9WJNdfB9JosvdzJzuBrfOO9cet7QfNrdaHcxm+2eE4crMk6E+UF1HlKdKJ7pZ2JZvfp3N/1D61q1xfvtFo35+4NGX953fLr9bw8rVa+3ll7b0jrjoEpLjbvs1Pl+fJyxus7Sf/ZUda90r3LrKlr9c7ldl3/E7fsd6qqK4rOlfrT3K1OgI1X6lj9O9zGkS5Vda+uqztd38PLutfW1PX9vpW7Wcz1PcoRAHvtH+90i5M5Ojbx74knE59M/Hbi5sSb4z868r0jp8cy+vfR7zenR15vnC7+kk/yy97rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pk9eP+DW3OLRZKqsDh//0GncLxu0lszvDCxoXuGN/7Xk2R9VVF/G8+gXrfqbynYOozNCs0ku+i+w8J4kr411fccHdTWO4WRvqM8sE3rV3VaxnZwuHdb2HxbH5WF5rYO92zfmj9vHPDDreMZybrzcIuM7XOhkX0ZuXV83QnZKYwMuS4O8i4EHIYLS7fvXXjw/gffWbg99+78u/N3Ri9fvjJ95fIbMxduLCzOT7d/HnaUwH7oPfQPOxIAAAAAAAAAAABguwZ9VODMS0M+KjC80Mi6j/SUK/zPQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvXD2X5qMUuTh9frpcXl2ZWSynTrnXspmk0UiKXyTF42Q27SmTvTZHivzxcVoDtvPxwpW3P326+llvrHJKUQ5az4fbvDbJcj1lKslIPd+FvvGu7Xq84n+dfSgT9nmr1ZrdXXywN/4fAAD//4Ne3eI=")
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x846048, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
syz_open_procfs$namespace(0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)

36m58.139739107s ago: executing program 6 (id=354):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x719, &(0x7f0000000f00)="$eJzs3c1vHGcdB/DvrNeOHarEaRNaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprDgvSlyUVghcQOJUiUP/gILkGweExD0oXLiEW68+cKiExIGIQ9TLopmd3fXau36J31L184nG88w8L/Ob37x511ltgC+tq+fSfJQiV8+9+bBcXl2ZWVxdmTlSVy8mKcuNpNmepbiTFI+T2bK+SLuiqNsXw7bz8cKVtz99uvpZe6lZT1X7kc36DTCg7XI9Zaoeb2pgz9HtbmK5Di8vJblWz/uNbXesvoZl0s7Wczh0rX6NtJZ30n0n1y3wguk8nYr2c3ODyeRokvH694DUd4fGwUW4p77ZKezoLgcAAABfUE/uHnYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MVTff//RHex0V6VTKXofP//WGddXX4BzW675aN9jQMAAAAAAAAADsY3nuVZHuZYWR5N0iqqv/mfqSpP5vNW8pW8lweZz/2cz8PMZSlLuZ+LSSbXDDT2cG5p6f7Fbs/S4J6XBvYs11abBgAAAAAAAACew68z0f77PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvCiKZKQ9q6aT9TyTaTTTq8ty8s8kY4cd7w4Ug1Y+Ovg4AAAAYFfGn6PP8Wd5loc51lluFdVr/q9Wr5fH817uZCkLWcpi5nO9fg1dvupvrK7MLK6uzNwup3K5f9wf/mdHYYzVI4xUS4O2/FrVYiI3slCtOZ9rVTDX02hv+2z3zYh2THVca3xYxlT8oLbNyJp1WsuN/X7Yuwh7ov+tiMYmLSd6wSXdjEzXsZU9T7QzUFRv1JQZ6R9g/dHZsLFm39Jk1WS0u6WLaXSTfbKT6z3M+dHq50f/7SzvX843M1LP1+aim4lGqkxc6px95TWzeSaSb/31T+/cXLxz6+aNB+d6uzS63/uxOyND1q8/J2bWZOLV58vEC6K5w/bTVSZOdZev5if5Wc5lKm/lfhby88xlKfNp1fVz9flc/pzcPFOzfUtvbRXJWH1c2sdsOzFN5cdVaS5nqr7HspAid3M983mj+ncpF/PdXM7lXFlzhE8Njbvat+qqb6y/6jtH+m8Dgz/77bpQ3t1+17vLzW62x8POzr3SvveXeT2xJq/ts/5pt9WJNdfB9JosvdzJzuBrfOO9cet7QfNrdaHcxm+2eE4crMk6E+UF1HlKdKJ7pZ2JZvfp3N/1D61q1xfvtFo35+4NGX953fLr9bw8rVa+3ll7b0jrjoEpLjbvs1Pl+fJyxus7Sf/ZUda90r3LrKlr9c7ldl3/E7fsd6qqK4rOlfrT3K1OgI1X6lj9O9zGkS5Vda+uqztd38PLutfW1PX9vpW7Wcz1PcoRAHvtH+90i5M5Ojbx74knE59M/Hbi5sSb4z868r0jp8cy+vfR7zenR15vnC7+kk/yy97rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pk9eP+DW3OLRZKqsDh//0GncLxu0lszvDCxoXuGN/7Xk2R9VVF/G8+gXrfqbynYOozNCs0ku+i+w8J4kr411fccHdTWO4WRvqM8sE3rV3VaxnZwuHdb2HxbH5WF5rYO92zfmj9vHPDDreMZybrzcIuM7XOhkX0ZuXV83QnZKYwMuS4O8i4EHIYLS7fvXXjw/gffWbg99+78u/N3Ri9fvjJ95fIbMxduLCzOT7d/HnaUwH7oPfQPOxIAAAAAAAAAAABguwZ9VODMS0M+KjC80Mi6j/SUK/zPQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvXD2X5qMUuTh9frpcXl2ZWSynTrnXspmk0UiKXyTF42Q27SmTvTZHivzxcVoDtvPxwpW3P326+llvrHJKUQ5az4fbvDbJcj1lKslIPd+FvvGu7Xq84n+dfSgT9nmr1ZrdXXywN/4fAAD//4Ne3eI=")
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x846048, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

36m54.518294816s ago: executing program 6 (id=368):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x39000, 0x0)
r3 = memfd_create(&(0x7f0000000180)='<Z2>J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1)
splice(r1, 0x0, r3, 0x0, 0x2, 0x5)

36m52.468573446s ago: executing program 6 (id=358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r1, 0x100)
shutdown(r1, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019140), 0x8400, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TCSETA(r3, 0x80047456, &(0x7f0000000140)={0x10, 0x0, 0x9, 0x1ff, 0x10, "b4ba1c25a953278a"})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000019080)=0x400)
write(r4, &(0x7f0000000100)='e:__group/myevent sched.sched_swit', 0x22)

36m47.612293515s ago: executing program 6 (id=362):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x719, &(0x7f0000000f00)="$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")
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x846048, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
syz_open_procfs$namespace(0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)

36m44.770053625s ago: executing program 6 (id=366):
openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil)
socket$inet6(0xa, 0x2, 0xfffffffd)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
syz_open_procfs(r0, &(0x7f0000000280)='net/rt_acct\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)

36m29.019011441s ago: executing program 36 (id=366):
openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil)
socket$inet6(0xa, 0x2, 0xfffffffd)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil)
syz_open_procfs(r0, &(0x7f0000000280)='net/rt_acct\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)

32m58.604983418s ago: executing program 9 (id=757):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x719, &(0x7f0000000f00)="$eJzs3c1vHGcdB/DvrNeOHarEaRNaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprDgvSlyUVghcQOJUiUP/gILkGweExD0oXLiEW68+cKiExIGIQ9TLopmd3fXau36J31L184nG88w8L/Ob37x511ltgC+tq+fSfJQiV8+9+bBcXl2ZWVxdmTlSVy8mKcuNpNmepbiTFI+T2bK+SLuiqNsXw7bz8cKVtz99uvpZe6lZT1X7kc36DTCg7XI9Zaoeb2pgz9HtbmK5Di8vJblWz/uNbXesvoZl0s7Wczh0rX6NtJZ30n0n1y3wguk8nYr2c3ODyeRokvH694DUd4fGwUW4p77ZKezoLgcAAABfUE/uHnYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MVTff//RHex0V6VTKXofP//WGddXX4BzW675aN9jQMAAAAAAAAADsY3nuVZHuZYWR5N0iqqv/mfqSpP5vNW8pW8lweZz/2cz8PMZSlLuZ+LSSbXDDT2cG5p6f7Fbs/S4J6XBvYs11abBgAAAAAAAACew68z0f77PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvCiKZKQ9q6aT9TyTaTTTq8ty8s8kY4cd7w4Ug1Y+Ovg4AAAAYFfGn6PP8Wd5loc51lluFdVr/q9Wr5fH817uZCkLWcpi5nO9fg1dvupvrK7MLK6uzNwup3K5f9wf/mdHYYzVI4xUS4O2/FrVYiI3slCtOZ9rVTDX02hv+2z3zYh2THVca3xYxlT8oLbNyJp1WsuN/X7Yuwh7ov+tiMYmLSd6wSXdjEzXsZU9T7QzUFRv1JQZ6R9g/dHZsLFm39Jk1WS0u6WLaXSTfbKT6z3M+dHq50f/7SzvX843M1LP1+aim4lGqkxc6px95TWzeSaSb/31T+/cXLxz6+aNB+d6uzS63/uxOyND1q8/J2bWZOLV58vEC6K5w/bTVSZOdZev5if5Wc5lKm/lfhby88xlKfNp1fVz9flc/pzcPFOzfUtvbRXJWH1c2sdsOzFN5cdVaS5nqr7HspAid3M983mj+ncpF/PdXM7lXFlzhE8Njbvat+qqb6y/6jtH+m8Dgz/77bpQ3t1+17vLzW62x8POzr3SvveXeT2xJq/ts/5pt9WJNdfB9JosvdzJzuBrfOO9cet7QfNrdaHcxm+2eE4crMk6E+UF1HlKdKJ7pZ2JZvfp3N/1D61q1xfvtFo35+4NGX953fLr9bw8rVa+3ll7b0jrjoEpLjbvs1Pl+fJyxus7Sf/ZUda90r3LrKlr9c7ldl3/E7fsd6qqK4rOlfrT3K1OgI1X6lj9O9zGkS5Vda+uqztd38PLutfW1PX9vpW7Wcz1PcoRAHvtH+90i5M5Ojbx74knE59M/Hbi5sSb4z868r0jp8cy+vfR7zenR15vnC7+kk/yy97rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pk9eP+DW3OLRZKqsDh//0GncLxu0lszvDCxoXuGN/7Xk2R9VVF/G8+gXrfqbynYOozNCs0ku+i+w8J4kr411fccHdTWO4WRvqM8sE3rV3VaxnZwuHdb2HxbH5WF5rYO92zfmj9vHPDDreMZybrzcIuM7XOhkX0ZuXV83QnZKYwMuS4O8i4EHIYLS7fvXXjw/gffWbg99+78u/N3Ri9fvjJ95fIbMxduLCzOT7d/HnaUwH7oPfQPOxIAAAAAAAAAAABguwZ9VODMS0M+KjC80Mi6j/SUK/zPQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvXD2X5qMUuTh9frpcXl2ZWSynTrnXspmk0UiKXyTF42Q27SmTvTZHivzxcVoDtvPxwpW3P326+llvrHJKUQ5az4fbvDbJcj1lKslIPd+FvvGu7Xq84n+dfSgT9nmr1ZrdXXywN/4fAAD//4Ne3eI=")
mount(0x0, 0x0, &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x846048, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
syz_open_procfs$namespace(0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

32m56.852277781s ago: executing program 9 (id=759):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$vcsa(0x0, 0x7, 0x80280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x4000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004)

32m55.033745305s ago: executing program 9 (id=762):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x719, &(0x7f0000000f00)="$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")
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x846048, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

32m51.536384841s ago: executing program 9 (id=765):
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
sched_setaffinity(r0, 0x47, &(0x7f0000000200)=0x7)

32m50.019438468s ago: executing program 9 (id=769):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000440)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0)
splice(r5, 0x0, r8, 0x0, 0x25a7, 0x4)
vmsplice(r6, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd)

32m46.741753979s ago: executing program 9 (id=773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$vcsa(0x0, 0x7, 0x80280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

32m31.16763524s ago: executing program 37 (id=773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$vcsa(0x0, 0x7, 0x80280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

31m31.714934538s ago: executing program 8 (id=882):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000000101010100000000000000000a001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)

31m30.135398126s ago: executing program 8 (id=885):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x2, 0x80805, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

31m28.910270046s ago: executing program 8 (id=889):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

31m25.330047654s ago: executing program 8 (id=892):
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc)
socket$tipc(0x1e, 0x5, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x3e0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x0, 0x4, 0x3c8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x4000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd824, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0)

31m23.222749226s ago: executing program 8 (id=896):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd)
futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000)

31m20.877970284s ago: executing program 8 (id=897):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x719, &(0x7f0000000f00)="$eJzs3c1vHGcdB/DvrNeOHarEaRNaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprDgvSlyUVghcQOJUiUP/gILkGweExD0oXLiEW68+cKiExIGIQ9TLopmd3fXau36J31L184nG88w8L/Ob37x511ltgC+tq+fSfJQiV8+9+bBcXl2ZWVxdmTlSVy8mKcuNpNmepbiTFI+T2bK+SLuiqNsXw7bz8cKVtz99uvpZe6lZT1X7kc36DTCg7XI9Zaoeb2pgz9HtbmK5Di8vJblWz/uNbXesvoZl0s7Wczh0rX6NtJZ30n0n1y3wguk8nYr2c3ODyeRokvH694DUd4fGwUW4p77ZKezoLgcAAABfUE/uHnYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MVTff//RHex0V6VTKXofP//WGddXX4BzW675aN9jQMAAAAAAAAADsY3nuVZHuZYWR5N0iqqv/mfqSpP5vNW8pW8lweZz/2cz8PMZSlLuZ+LSSbXDDT2cG5p6f7Fbs/S4J6XBvYs11abBgAAAAAAAACew68z0f77PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvCiKZKQ9q6aT9TyTaTTTq8ty8s8kY4cd7w4Ug1Y+Ovg4AAAAYFfGn6PP8Wd5loc51lluFdVr/q9Wr5fH817uZCkLWcpi5nO9fg1dvupvrK7MLK6uzNwup3K5f9wf/mdHYYzVI4xUS4O2/FrVYiI3slCtOZ9rVTDX02hv+2z3zYh2THVca3xYxlT8oLbNyJp1WsuN/X7Yuwh7ov+tiMYmLSd6wSXdjEzXsZU9T7QzUFRv1JQZ6R9g/dHZsLFm39Jk1WS0u6WLaXSTfbKT6z3M+dHq50f/7SzvX843M1LP1+aim4lGqkxc6px95TWzeSaSb/31T+/cXLxz6+aNB+d6uzS63/uxOyND1q8/J2bWZOLV58vEC6K5w/bTVSZOdZev5if5Wc5lKm/lfhby88xlKfNp1fVz9flc/pzcPFOzfUtvbRXJWH1c2sdsOzFN5cdVaS5nqr7HspAid3M983mj+ncpF/PdXM7lXFlzhE8Njbvat+qqb6y/6jtH+m8Dgz/77bpQ3t1+17vLzW62x8POzr3SvveXeT2xJq/ts/5pt9WJNdfB9JosvdzJzuBrfOO9cet7QfNrdaHcxm+2eE4crMk6E+UF1HlKdKJ7pZ2JZvfp3N/1D61q1xfvtFo35+4NGX953fLr9bw8rVa+3ll7b0jrjoEpLjbvs1Pl+fJyxus7Sf/ZUda90r3LrKlr9c7ldl3/E7fsd6qqK4rOlfrT3K1OgI1X6lj9O9zGkS5Vda+uqztd38PLutfW1PX9vpW7Wcz1PcoRAHvtH+90i5M5Ojbx74knE59M/Hbi5sSb4z868r0jp8cy+vfR7zenR15vnC7+kk/yy97rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pk9eP+DW3OLRZKqsDh//0GncLxu0lszvDCxoXuGN/7Xk2R9VVF/G8+gXrfqbynYOozNCs0ku+i+w8J4kr411fccHdTWO4WRvqM8sE3rV3VaxnZwuHdb2HxbH5WF5rYO92zfmj9vHPDDreMZybrzcIuM7XOhkX0ZuXV83QnZKYwMuS4O8i4EHIYLS7fvXXjw/gffWbg99+78u/N3Ri9fvjJ95fIbMxduLCzOT7d/HnaUwH7oPfQPOxIAAAAAAAAAAABguwZ9VODMS0M+KjC80Mi6j/SUK/zPQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvXD2X5qMUuTh9frpcXl2ZWSynTrnXspmk0UiKXyTF42Q27SmTvTZHivzxcVoDtvPxwpW3P326+llvrHJKUQ5az4fbvDbJcj1lKslIPd+FvvGu7Xq84n+dfSgT9nmr1ZrdXXywN/4fAAD//4Ne3eI=")
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x846048, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
syz_open_procfs$namespace(0x0, 0x0)

31m5.647607886s ago: executing program 38 (id=897):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x719, &(0x7f0000000f00)="$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")
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x846048, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
syz_open_procfs$namespace(0x0, 0x0)

30m41.076053049s ago: executing program 2 (id=960):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$vcsa(0x0, 0x7, 0x80280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x4000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004)

30m39.858714569s ago: executing program 2 (id=961):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$vcsa(0x0, 0x7, 0x80280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x4000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004)

30m30.669484124s ago: executing program 2 (id=974):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$vcsa(0x0, 0x7, 0x80280)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x4000)
r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
r6 = fsmount(r5, 0x1, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
pread64(r7, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004)

30m29.091716933s ago: executing program 2 (id=975):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000000101010100000000000000000a001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
accept4$packet(r4, 0x0, &(0x7f0000000040), 0xc0800)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
ptrace$pokeuser(0x6, r3, 0x9, 0x41d9fda4)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0)

30m28.005132569s ago: executing program 2 (id=976):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x81, 0x719, &(0x7f0000000f00)="$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")
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x846048, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
syz_open_procfs$namespace(0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

30m24.414043437s ago: executing program 2 (id=979):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
personality(0x4100001)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0)

30m8.998579975s ago: executing program 39 (id=979):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
personality(0x4100001)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0)

6m28.275774799s ago: executing program 4 (id=3831):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888)
sched_getattr(r0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
timer_create(0x3, 0x0, &(0x7f0000044000))
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x1a6c6000)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=")
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)

6m21.534048073s ago: executing program 4 (id=3842):
syz_open_dev$sndpcmp(&(0x7f0000000300), 0x4fd, 0x203)
r0 = socket$inet6(0xa, 0x80002, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000019380)=ANY=[], 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00')
r2 = msgget$private(0x0, 0x193)
msgsnd(r2, &(0x7f0000000180)=ANY=[], 0x8, 0x800)
msgsnd(r2, &(0x7f00000001c0)=ANY=[], 0x8, 0x0)
msgctl$IPC_RMID(r2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206010200000000006000000300000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e200001060004404e2100000500010007000000050004"], 0x5c}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xc024, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

6m19.20243236s ago: executing program 4 (id=3847):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0)

6m15.380749503s ago: executing program 4 (id=3851):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = syz_open_procfs(0x0, 0x0)
preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
io_uring_setup(0x7, 0x0)
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
sendmsg$nl_route(r6, 0x0, 0x40084)
connect$pppoe(r7, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000050000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1)

6m10.932650932s ago: executing program 4 (id=3856):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380))
futex(0x0, 0x2, 0x0, 0x0, 0x0, 0xb0090198)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0)
sched_getattr(r0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
timer_create(0x3, 0x0, &(0x7f0000044000))
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x1a6c6000)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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")
mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700)

6m9.809327949s ago: executing program 4 (id=3859):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = getpid()
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
syz_pidfd_open(r3, 0x0)

5m54.669313869s ago: executing program 40 (id=3859):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = getpid()
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
syz_pidfd_open(r3, 0x0)

8.682895158s ago: executing program 5 (id=5652):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"})

8.16952678s ago: executing program 7 (id=5654):
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="00034e0000000203"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)

6.599265869s ago: executing program 1 (id=5661):
setns(0xc9, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='10', 0x2)
ioctl(r0, 0x8b1a, &(0x7f0000000040))

6.119989911s ago: executing program 1 (id=5662):
socket$kcm(0x10, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)

5.968200704s ago: executing program 1 (id=5663):
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00')
pipe2$watch_queue(0x0, 0x80)
statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000400))
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB='|'], 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

5.404226968s ago: executing program 5 (id=5667):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000000280)='L', 0x1)
read$char_usb(r0, 0x0, 0x0)

4.999498548s ago: executing program 7 (id=5671):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

3.859723426s ago: executing program 7 (id=5675):
socket$kcm(0x10, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)

3.528402044s ago: executing program 7 (id=5678):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x1, 0x100, 0x0, {0x4, 0x300, 0x300, 0x800002fc}})

3.478016805s ago: executing program 0 (id=5679):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff)

3.406476987s ago: executing program 5 (id=5680):
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x3)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af83, &(0x7f00000008c0)=0x8000)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), 0x0, 0x2}, 0x1c)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
io_setup(0x3, &(0x7f00000003c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)

3.220289981s ago: executing program 7 (id=5681):
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="00034e0000000203"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)

3.205797072s ago: executing program 0 (id=5682):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0)
msgget$private(0x0, 0x3ac)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
setns(0xc9, 0x0)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='1', 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x8}}, 0x20)

2.949368608s ago: executing program 0 (id=5683):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$kcm(0x11, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r6, 0x21}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885)

2.562417918s ago: executing program 5 (id=5685):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_open_dev$dvb_frontend(0x0, 0x64a, 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00'})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
r2 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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")

2.356430753s ago: executing program 0 (id=5686):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='10', 0x2)
ioctl(r0, 0x8b1a, &(0x7f0000000040))

2.306094394s ago: executing program 3 (id=5687):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

2.238197085s ago: executing program 1 (id=5688):
socket$kcm(0x10, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)

2.143807048s ago: executing program 0 (id=5689):
close(0x3)

1.980392432s ago: executing program 1 (id=5690):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1.980223922s ago: executing program 0 (id=5691):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000000280)='L', 0x1)
read$char_usb(r0, 0x0, 0x0)

1.216082241s ago: executing program 3 (id=5692):
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000340)={0xa30000, 0x3, 0x10, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x990b70, 0x0, '\x00', @value=0x10001}})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)

1.002773106s ago: executing program 3 (id=5693):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0)
msgget$private(0x0, 0x3ac)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
setns(0xc9, 0x0)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='1', 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x8}}, 0x20)

812.32849ms ago: executing program 3 (id=5694):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x129241, 0x100)
socket$key(0xf, 0x3, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r0 = epoll_create1(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20)

725.161113ms ago: executing program 5 (id=5695):
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x3)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af83, &(0x7f00000008c0)=0x8000)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), 0x0, 0x2}, 0x1c)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
io_setup(0x3, &(0x7f00000003c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)

528.363027ms ago: executing program 3 (id=5696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$kcm(0x11, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r6, 0x21}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885)

199.628555ms ago: executing program 3 (id=5697):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='md0', 0x3)
write(0xffffffffffffffff, &(0x7f0000000300)='raid1', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='1:0', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0)
write(r3, &(0x7f0000000480)='0', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0)
write(r4, &(0x7f0000000500)='active', 0x6)
write(0xffffffffffffffff, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f00000037c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1)

174.059176ms ago: executing program 1 (id=5698):
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x3}, 0xa)

141.745487ms ago: executing program 5 (id=5699):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='10', 0x2)
ioctl(r0, 0x8b1a, &(0x7f0000000040))

0s ago: executing program 7 (id=5700):
socket$kcm(0x10, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)

kernel console output (not intermixed with test programs):

120
[ 2508.035405][ T3616]  ioctl_standard_iw_point+0x823/0xd50
[ 2508.040884][ T3616]  ? rcu_is_watching+0x11/0xa0
[ 2508.045687][ T3616]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2508.051168][ T3616]  ? iw_handler_get_iwstats+0x240/0x240
[ 2508.051202][ T3616]  ? mutex_lock_nested+0x10/0x10
[ 2508.051236][ T3616]  ? full_name_hash+0x8e/0xe0
[ 2508.051262][ T3616]  ioctl_standard_call+0xaa/0x250
[ 2508.062091][ T3616]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2508.077633][ T3616]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2508.083138][ T3616]  wext_ioctl_dispatch+0x3da/0x470
[ 2508.088293][ T3616]  ? wext_ioctl_dispatch+0x470/0x470
[ 2508.093627][ T3616]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2508.099234][ T3616]  wext_handle_ioctl+0x114/0x1d0
[ 2508.104201][ T3616]  ? call_commit_handler+0xf0/0xf0
[ 2508.109361][ T3616]  sock_ioctl+0x143/0x700
[ 2508.113719][ T3616]  ? sock_poll+0x420/0x420
[ 2508.118172][ T3616]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2508.118210][ T3616]  ? security_file_ioctl+0x7c/0xa0
[ 2508.128275][ T3616]  ? sock_poll+0x420/0x420
[ 2508.128307][ T3616]  __se_sys_ioctl+0xfa/0x170
[ 2508.137711][ T3616]  do_syscall_64+0x4c/0xa0
[ 2508.142181][ T3616]  ? clear_bhb_loop+0x60/0xb0
[ 2508.146910][ T3616]  ? clear_bhb_loop+0x60/0xb0
[ 2508.151648][ T3616]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2508.157598][ T3616] RIP: 0033:0x7f204979e199
[ 2508.162057][ T3616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2508.181713][ T3616] RSP: 002b:00007f204a656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2508.190270][ T3616] RAX: ffffffffffffffda RBX: 00007f2049a25fa0 RCX: 00007f204979e199
[ 2508.198288][ T3616] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004
[ 2508.206305][ T3616] RBP: 00007f20498358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2508.214328][ T3616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2508.222359][ T3616] R13: 00007f2049a26038 R14: 00007f2049a25fa0 R15: 00007ffeea215a58
[ 2508.230397][ T3616]  </TASK>
[ 2508.264194][ T3622] binder: BINDER_SET_CONTEXT_MGR already set
[ 2508.270309][ T3622] binder: 3619:3622 ioctl 4018620d 200000004a80 returned -16
[ 2508.280861][ T3611] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2508.381592][T31656] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 2508.424588][T31656] usb 1-1: device descriptor read/8, error -71
[ 2508.720491][T31656] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 2508.771343][T31656] usb 1-1: device descriptor read/8, error -71
[ 2508.891028][T31656] usb usb1-port1: unable to enumerate USB device
[ 2509.024519][ T3643] device-mapper: ioctl: The device has no table.
[ 2509.071746][ T4329] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 2509.232454][ T4329] usb 2-1: device descriptor read/64, error -71
[ 2509.300500][    C1] net_ratelimit: 18 callbacks suppressed
[ 2509.382356][ T3653] FAULT_INJECTION: forcing a failure.
[ 2509.382356][ T3653] name failslab, interval 1, probability 0, space 0, times 0
[ 2509.444337][ T3653] CPU: 1 PID: 3653 Comm: syz.5.5223 Not tainted syzkaller #0
[ 2509.451796][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2509.461896][ T3653] Call Trace:
[ 2509.465216][ T3653]  <TASK>
[ 2509.468188][ T3653]  dump_stack_lvl+0x188/0x24e
[ 2509.472928][ T3653]  ? show_regs_print_info+0x12/0x12
[ 2509.478184][ T3653]  ? load_image+0x410/0x410
[ 2509.482729][ T3653]  ? __might_sleep+0xd0/0xd0
[ 2509.482755][ T3653]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2509.482793][ T3653]  should_fail_ex+0x390/0x4c0
[ 2509.482833][ T3653]  should_failslab+0x5/0x20
[ 2509.482854][ T3653]  slab_pre_alloc_hook+0x59/0x300
[ 2509.500636][ T4329] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 2509.501685][ T3653]  ? tomoyo_encode+0x28a/0x550
[ 2509.514258][ T3653]  __kmem_cache_alloc_node+0x4f/0x270
[ 2509.524430][ T3653]  ? tomoyo_encode+0x28a/0x550
[ 2509.524465][ T3653]  __kmalloc+0xa3/0x240
[ 2509.533398][ T3653]  tomoyo_encode+0x28a/0x550
[ 2509.538081][ T3653]  tomoyo_realpath_from_path+0x578/0x5c0
[ 2509.543751][ T3653]  ? tomoyo_domain+0xd2/0x120
[ 2509.548468][ T3653]  ? tomoyo_mkdev_perm+0x1f5/0x5a0
[ 2509.553604][ T3653]  tomoyo_mkdev_perm+0x21e/0x5a0
[ 2509.558599][ T3653]  ? tomoyo_path_perm+0x610/0x610
[ 2509.563707][ T3653]  ? _raw_spin_unlock+0x24/0x40
[ 2509.568607][ T3653]  ? __d_add+0x4e2/0x7e0
[ 2509.572900][ T3653]  ? d_set_d_op+0x25b/0x370
[ 2509.577457][ T3653]  ? hook_path_mknod+0x157/0x520
[ 2509.582457][ T3653]  ? simple_lookup+0xc1/0xf0
[ 2509.587109][ T3653]  tomoyo_path_mknod+0xf8/0x190
[ 2509.592027][ T3653]  ? hook_path_mkdir+0x460/0x460
[ 2509.597030][ T3653]  ? tomoyo_path_symlink+0xf0/0xf0
[ 2509.602188][ T3653]  ? kern_path_create+0x50/0x50
[ 2509.602224][ T3653]  security_path_mknod+0xec/0x140
[ 2509.612175][ T3653]  do_mknodat+0x245/0x4d0
[ 2509.616575][ T3653]  ? do_o_path+0x200/0x200
[ 2509.621063][ T3653]  ? getname_flags+0x206/0x500
[ 2509.625857][ T3653]  __x64_sys_mknodat+0xa5/0xc0
[ 2509.625887][ T3653]  do_syscall_64+0x4c/0xa0
[ 2509.625914][ T3653]  ? clear_bhb_loop+0x60/0xb0
[ 2509.625940][ T3653]  ? clear_bhb_loop+0x60/0xb0
[ 2509.635136][ T3653]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2509.644846][ T3653] RIP: 0033:0x7f28ff59e199
[ 2509.655179][ T3653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2509.674815][ T3653] RSP: 002b:00007f29003bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2509.683256][ T3653] RAX: ffffffffffffffda RBX: 00007f28ff825fa0 RCX: 00007f28ff59e199
[ 2509.683279][ T3653] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2509.699237][ T3653] RBP: 00007f28ff6358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2509.699256][ T3653] R10: 000000000000070a R11: 0000000000000246 R12: 0000000000000000
[ 2509.715221][ T3653] R13: 00007f28ff826038 R14: 00007f28ff825fa0 R15: 00007fff26c663f8
[ 2509.715293][ T3653]  </TASK>
[ 2509.792460][ T3653] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2509.820541][ T4329] usb 2-1: device descriptor read/64, error -71
[ 2509.940992][ T4329] usb usb2-port1: attempt power cycle
[ 2509.992837][ T3654] md: could not open device unknown-block(1,0).
[ 2510.155102][ T3666] FAULT_INJECTION: forcing a failure.
[ 2510.155102][ T3666] name failslab, interval 1, probability 0, space 0, times 0
[ 2510.194925][ T3666] CPU: 0 PID: 3666 Comm: syz.5.5226 Not tainted syzkaller #0
[ 2510.202370][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2510.212438][ T3666] Call Trace:
[ 2510.215727][ T3666]  <TASK>
[ 2510.218664][ T3666]  dump_stack_lvl+0x188/0x24e
[ 2510.223357][ T3666]  ? show_regs_print_info+0x12/0x12
[ 2510.228570][ T3666]  ? load_image+0x410/0x410
[ 2510.233096][ T3666]  ? __might_sleep+0xd0/0xd0
[ 2510.237693][ T3666]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2510.242733][ T3666]  should_fail_ex+0x390/0x4c0
[ 2510.247430][ T3666]  should_failslab+0x5/0x20
[ 2510.251961][ T3666]  slab_pre_alloc_hook+0x59/0x300
[ 2510.257036][ T3666]  ? cfg80211_connect+0x109d/0x20a0
[ 2510.262257][ T3666]  __kmem_cache_alloc_node+0x4f/0x270
[ 2510.267645][ T3666]  ? cfg80211_connect+0x109d/0x20a0
[ 2510.272859][ T3666]  __kmalloc+0xa3/0x240
[ 2510.277028][ T3666]  cfg80211_connect+0x109d/0x20a0
[ 2510.282083][ T3666]  cfg80211_mgd_wext_connect+0x41c/0x570
[ 2510.287730][ T3666]  cfg80211_mgd_wext_siwessid+0x364/0x490
[ 2510.293484][ T3666]  __cfg80211_wext_siwessid+0xbb/0x120
[ 2510.298976][ T3666]  ioctl_standard_iw_point+0x823/0xd50
[ 2510.304451][ T3666]  ? rcu_is_watching+0x11/0xa0
[ 2510.309260][ T3666]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2510.314737][ T3666]  ? iw_handler_get_iwstats+0x240/0x240
[ 2510.320292][ T3666]  ? mutex_lock_nested+0x10/0x10
[ 2510.325246][ T3666]  ? full_name_hash+0x8e/0xe0
[ 2510.329937][ T3666]  ioctl_standard_call+0xaa/0x250
[ 2510.334969][ T3666]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2510.340448][ T3666]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2510.345926][ T3666]  wext_ioctl_dispatch+0x3da/0x470
[ 2510.351037][ T3666]  ? wext_ioctl_dispatch+0x470/0x470
[ 2510.356364][ T3666]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2510.361978][ T3666]  wext_handle_ioctl+0x114/0x1d0
[ 2510.366978][ T3666]  ? call_commit_handler+0xf0/0xf0
[ 2510.372160][ T3666]  sock_ioctl+0x143/0x700
[ 2510.376551][ T3666]  ? sock_poll+0x420/0x420
[ 2510.381034][ T3666]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2510.386026][ T3666]  ? security_file_ioctl+0x7c/0xa0
[ 2510.391155][ T3666]  ? sock_poll+0x420/0x420
[ 2510.395585][ T3666]  __se_sys_ioctl+0xfa/0x170
[ 2510.400194][ T3666]  do_syscall_64+0x4c/0xa0
[ 2510.404623][ T3666]  ? clear_bhb_loop+0x60/0xb0
[ 2510.409315][ T3666]  ? clear_bhb_loop+0x60/0xb0
[ 2510.414011][ T3666]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2510.419916][ T3666] RIP: 0033:0x7f28ff59e199
[ 2510.424340][ T3666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2510.443979][ T3666] RSP: 002b:00007f29003bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2510.452459][ T3666] RAX: ffffffffffffffda RBX: 00007f28ff825fa0 RCX: 00007f28ff59e199
[ 2510.460477][ T3666] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004
[ 2510.468476][ T3666] RBP: 00007f28ff6358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2510.476467][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2510.484458][ T3666] R13: 00007f28ff826038 R14: 00007f28ff825fa0 R15: 00007fff26c663f8
[ 2510.492464][ T3666]  </TASK>
[ 2510.590514][ T4329] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 2511.102691][ T4329] usb 2-1: device descriptor read/8, error -71
[ 2511.371787][ T3682] device-mapper: ioctl: The device has no table.
[ 2511.380871][ T4329] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 2511.431960][ T4329] usb 2-1: device descriptor read/8, error -71
[ 2511.551697][ T4329] usb usb2-port1: unable to enumerate USB device
[ 2511.609774][ T3697] FAULT_INJECTION: forcing a failure.
[ 2511.609774][ T3697] name failslab, interval 1, probability 0, space 0, times 0
[ 2511.626152][ T3697] CPU: 0 PID: 3697 Comm: syz.0.5236 Not tainted syzkaller #0
[ 2511.633620][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2511.643728][ T3697] Call Trace:
[ 2511.647058][ T3697]  <TASK>
[ 2511.650031][ T3697]  dump_stack_lvl+0x188/0x24e
[ 2511.654772][ T3697]  ? show_regs_print_info+0x12/0x12
[ 2511.660038][ T3697]  ? load_image+0x410/0x410
[ 2511.664609][ T3697]  ? __might_sleep+0xd0/0xd0
[ 2511.669248][ T3697]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2511.674327][ T3697]  ? tomoyo_path_perm+0x610/0x610
[ 2511.679410][ T3697]  should_fail_ex+0x390/0x4c0
[ 2511.684268][ T3697]  should_failslab+0x5/0x20
[ 2511.688826][ T3697]  slab_pre_alloc_hook+0x59/0x300
[ 2511.693913][ T3697]  kmem_cache_alloc_lru+0x49/0x2e0
[ 2511.699077][ T3697]  ? shmem_alloc_inode+0x24/0x40
[ 2511.704166][ T3697]  shmem_alloc_inode+0x24/0x40
[ 2511.709022][ T3697]  ? shmem_match+0x160/0x160
[ 2511.713673][ T3697]  new_inode_pseudo+0x5f/0x1c0
[ 2511.718499][ T3697]  new_inode+0x25/0x1d0
[ 2511.722715][ T3697]  shmem_get_inode+0x327/0xbc0
[ 2511.727540][ T3697]  shmem_mknod+0x54/0x1c0
[ 2511.731929][ T3697]  vfs_mknod+0x430/0x4c0
[ 2511.736238][ T3697]  do_mknodat+0x356/0x4d0
[ 2511.740633][ T3697]  ? do_o_path+0x200/0x200
[ 2511.745108][ T3697]  ? getname_flags+0x206/0x500
[ 2511.749927][ T3697]  __x64_sys_mknodat+0xa5/0xc0
[ 2511.754745][ T3697]  do_syscall_64+0x4c/0xa0
[ 2511.759209][ T3697]  ? clear_bhb_loop+0x60/0xb0
[ 2511.763942][ T3697]  ? clear_bhb_loop+0x60/0xb0
[ 2511.768667][ T3697]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2511.774606][ T3697] RIP: 0033:0x7fe6c8d9e199
[ 2511.779063][ T3697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2511.798721][ T3697] RSP: 002b:00007fe6c9c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2511.807187][ T3697] RAX: ffffffffffffffda RBX: 00007fe6c9025fa0 RCX: 00007fe6c8d9e199
[ 2511.815238][ T3697] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2511.823258][ T3697] RBP: 00007fe6c8e358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2511.831361][ T3697] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[ 2511.839373][ T3697] R13: 00007fe6c9026038 R14: 00007fe6c9025fa0 R15: 00007ffe9f93bb98
[ 2511.847411][ T3697]  </TASK>
[ 2511.931174][ T8554] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 2512.090625][ T8554] usb 6-1: device descriptor read/64, error -71
[ 2512.211899][ T3696] md: could not open device unknown-block(1,0).
[ 2512.303786][ T3708] netlink: 308 bytes leftover after parsing attributes in process `syz.1.5239'.
[ 2512.336059][ T3711] binder: BINDER_SET_CONTEXT_MGR already set
[ 2512.360514][ T8554] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 2512.376963][ T3711] binder: 3710:3711 ioctl 4018620d 2000000002c0 returned -16
[ 2512.455566][   T27] kauditd_printk_skb: 94 callbacks suppressed
[ 2512.455584][   T27] audit: type=1107 audit(1791268022.953:112): pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÌçG'3š•lÕ¨‹K>uwIh$ô0R ˜1L¾ÙñM6‘¢Ã"?À#êò0y'
[ 2512.550518][ T8554] usb 6-1: device descriptor read/64, error -71
[ 2512.671366][ T8554] usb usb6-port1: attempt power cycle
[ 2513.090537][ T8554] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 2513.164546][ T8554] usb 6-1: device descriptor read/8, error -71
[ 2513.540755][ T8554] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 2513.602675][ T8554] usb 6-1: device descriptor read/8, error -71
[ 2513.791163][ T8554] usb usb6-port1: unable to enumerate USB device
[ 2513.808082][ T3729] device-mapper: ioctl: The device has no table.
[ 2513.956156][ T3733] FAULT_INJECTION: forcing a failure.
[ 2513.956156][ T3733] name failslab, interval 1, probability 0, space 0, times 0
[ 2514.021726][ T3733] CPU: 1 PID: 3733 Comm: syz.1.5248 Not tainted syzkaller #0
[ 2514.029174][ T3733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2514.039277][ T3733] Call Trace:
[ 2514.042601][ T3733]  <TASK>
[ 2514.045572][ T3733]  dump_stack_lvl+0x188/0x24e
[ 2514.050306][ T3733]  ? show_regs_print_info+0x12/0x12
[ 2514.055554][ T3733]  ? load_image+0x410/0x410
[ 2514.060118][ T3733]  ? __might_sleep+0xd0/0xd0
[ 2514.064784][ T3733]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2514.069862][ T3733]  ? tomoyo_path_perm+0x610/0x610
[ 2514.074948][ T3733]  should_fail_ex+0x390/0x4c0
[ 2514.080002][ T3733]  should_failslab+0x5/0x20
[ 2514.084531][ T3733]  slab_pre_alloc_hook+0x59/0x300
[ 2514.089591][ T3733]  kmem_cache_alloc_lru+0x49/0x2e0
[ 2514.094744][ T3733]  ? shmem_alloc_inode+0x24/0x40
[ 2514.099712][ T3733]  shmem_alloc_inode+0x24/0x40
[ 2514.104506][ T3733]  ? shmem_match+0x160/0x160
[ 2514.109130][ T3733]  new_inode_pseudo+0x5f/0x1c0
[ 2514.113923][ T3733]  new_inode+0x25/0x1d0
[ 2514.118112][ T3733]  shmem_get_inode+0x327/0xbc0
[ 2514.122912][ T3733]  shmem_mknod+0x54/0x1c0
[ 2514.127283][ T3733]  vfs_mknod+0x430/0x4c0
[ 2514.131563][ T3733]  do_mknodat+0x356/0x4d0
[ 2514.135923][ T3733]  ? do_o_path+0x200/0x200
[ 2514.140373][ T3733]  ? getname_flags+0x206/0x500
[ 2514.145170][ T3733]  __x64_sys_mknodat+0xa5/0xc0
[ 2514.149958][ T3733]  do_syscall_64+0x4c/0xa0
[ 2514.154401][ T3733]  ? clear_bhb_loop+0x60/0xb0
[ 2514.159105][ T3733]  ? clear_bhb_loop+0x60/0xb0
[ 2514.163815][ T3733]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2514.169734][ T3733] RIP: 0033:0x7f038ed9e199
[ 2514.174178][ T3733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2514.193810][ T3733] RSP: 002b:00007f038fc19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2514.202253][ T3733] RAX: ffffffffffffffda RBX: 00007f038f025fa0 RCX: 00007f038ed9e199
[ 2514.210260][ T3733] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2514.218267][ T3733] RBP: 00007f038ee358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2514.226267][ T3733] R10: 0000000000000702 R11: 0000000000000246 R12: 0000000000000000
[ 2514.234264][ T3733] R13: 00007f038f026038 R14: 00007f038f025fa0 R15: 00007fff4ce210b8
[ 2514.242279][ T3733]  </TASK>
[ 2514.534110][ T8554] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 2514.650471][    C1] net_ratelimit: 20 callbacks suppressed
[ 2514.692300][ T8554] usb 4-1: device descriptor read/64, error -71
[ 2514.911950][ T3751] md: could not open device unknown-block(1,0).
[ 2514.960504][ T8554] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 2515.120863][ T8554] usb 4-1: device descriptor read/64, error -71
[ 2515.128768][ T4329] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 2515.175981][ T3767] binder: BINDER_SET_CONTEXT_MGR already set
[ 2515.182934][ T3767] binder: 3766:3767 ioctl 4018620d 2000000002c0 returned -16
[ 2515.251244][ T8554] usb usb4-port1: attempt power cycle
[ 2515.326366][ T4329] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[ 2515.339659][ T4329] usb 6-1: config 0 has no interface number 0
[ 2515.346449][ T3762] md: could not open device unknown-block(1,0).
[ 2515.373532][ T4329] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2515.415029][ T4329] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 2515.434370][ T3771] binder: BINDER_SET_CONTEXT_MGR already set
[ 2515.448678][ T3771] binder: 3770:3771 ioctl 4018620d 200000004a80 returned -16
[ 2515.459643][ T4329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2515.481839][ T4329] usb 6-1: Product: syz
[ 2515.486780][ T4329] usb 6-1: Manufacturer: syz
[ 2515.487769][ T3771] binder: 3770:3771 ioctl c0306201 200000000640 returned -14
[ 2515.511953][ T4329] usb 6-1: SerialNumber: syz
[ 2515.541338][ T4329] usb 6-1: config 0 descriptor??
[ 2515.589439][ T4329] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[ 2515.670575][ T8554] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 2515.711173][ T8554] usb 4-1: device descriptor read/8, error -71
[ 2515.980908][ T8554] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 2516.031581][ T8554] usb 4-1: device descriptor read/8, error -71
[ 2516.092715][T29674] usb 6-1: USB disconnect, device number 13
[ 2516.147216][ T3781] EXT4-fs (sda1): shut down requested (0)
[ 2516.153585][ T8554] usb usb4-port1: unable to enumerate USB device
[ 2516.182796][ T3783] FAULT_INJECTION: forcing a failure.
[ 2516.182796][ T3783] name failslab, interval 1, probability 0, space 0, times 0
[ 2516.212409][ T3783] CPU: 0 PID: 3783 Comm: syz.7.5262 Not tainted syzkaller #0
[ 2516.219950][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2516.230053][ T3783] Call Trace:
[ 2516.230065][ T3783]  <TASK>
[ 2516.230076][ T3783]  dump_stack_lvl+0x188/0x24e
[ 2516.236313][ T3783]  ? show_regs_print_info+0x12/0x12
[ 2516.246184][ T3783]  ? load_image+0x410/0x410
[ 2516.246226][ T3783]  ? __might_sleep+0xd0/0xd0
[ 2516.255319][ T3783]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2516.255362][ T3783]  should_fail_ex+0x390/0x4c0
[ 2516.265076][ T3783]  should_failslab+0x5/0x20
[ 2516.269603][ T3783]  slab_pre_alloc_hook+0x59/0x300
[ 2516.274658][ T3783]  ? tomoyo_encode+0x28a/0x550
[ 2516.279454][ T3783]  __kmem_cache_alloc_node+0x4f/0x270
[ 2516.284859][ T3783]  ? tomoyo_encode+0x28a/0x550
[ 2516.289693][ T3783]  __kmalloc+0xa3/0x240
[ 2516.293909][ T3783]  tomoyo_encode+0x28a/0x550
[ 2516.298572][ T3783]  tomoyo_realpath_from_path+0x578/0x5c0
[ 2516.304269][ T3783]  ? tomoyo_domain+0xd2/0x120
[ 2516.309027][ T3783]  ? tomoyo_mkdev_perm+0x1f5/0x5a0
[ 2516.314198][ T3783]  tomoyo_mkdev_perm+0x21e/0x5a0
[ 2516.319194][ T3783]  ? tomoyo_path_perm+0x610/0x610
[ 2516.324312][ T3783]  ? _raw_spin_unlock+0x24/0x40
[ 2516.329208][ T3783]  ? __d_add+0x4e2/0x7e0
[ 2516.333501][ T3783]  ? d_set_d_op+0x25b/0x370
[ 2516.338031][ T3783]  ? hook_path_mknod+0x157/0x520
[ 2516.343029][ T3783]  ? simple_lookup+0xc1/0xf0
[ 2516.347660][ T3783]  tomoyo_path_mknod+0xf8/0x190
[ 2516.352541][ T3783]  ? hook_path_mkdir+0x460/0x460
[ 2516.357522][ T3783]  ? tomoyo_path_symlink+0xf0/0xf0
[ 2516.362669][ T3783]  ? kern_path_create+0x50/0x50
[ 2516.367553][ T3783]  security_path_mknod+0xec/0x140
[ 2516.372609][ T3783]  do_mknodat+0x245/0x4d0
[ 2516.376985][ T3783]  ? do_o_path+0x200/0x200
[ 2516.381434][ T3783]  ? getname_flags+0x206/0x500
[ 2516.386233][ T3783]  __x64_sys_mknodat+0xa5/0xc0
[ 2516.391021][ T3783]  do_syscall_64+0x4c/0xa0
[ 2516.395465][ T3783]  ? clear_bhb_loop+0x60/0xb0
[ 2516.400167][ T3783]  ? clear_bhb_loop+0x60/0xb0
[ 2516.404871][ T3783]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2516.410798][ T3783] RIP: 0033:0x7f888d19e199
[ 2516.415238][ T3783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2516.434866][ T3783] RSP: 002b:00007f888e057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2516.443313][ T3783] RAX: ffffffffffffffda RBX: 00007f888d425fa0 RCX: 00007f888d19e199
[ 2516.451313][ T3783] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2516.459305][ T3783] RBP: 00007f888d2358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2516.467301][ T3783] R10: 000000000000070e R11: 0000000000000246 R12: 0000000000000000
[ 2516.475295][ T3783] R13: 00007f888d426038 R14: 00007f888d425fa0 R15: 00007ffedc7b4df8
[ 2516.483304][ T3783]  </TASK>
[ 2516.497658][ T3783] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2517.141824][ T4329] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 2517.235458][ T3799] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5269'.
[ 2517.258488][ T3797] md: could not open device unknown-block(1,0).
[ 2517.350681][ T4329] usb 2-1: Using ep0 maxpacket: 16
[ 2517.369217][ T4329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2517.383091][ T3805] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5268'.
[ 2517.539723][ T4329] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2517.737477][ T4329] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2517.823545][T29674] yurex 6-1:0.50: USB YUREX #0 now disconnected
[ 2518.078260][ T4329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2518.268909][ T3807] binder: 3806:3807 ioctl c0306201 200000000640 returned -14
[ 2518.325488][ T4329] usb 2-1: config 0 descriptor??
[ 2518.402833][ T3809] md: could not open device unknown-block(1,0).
[ 2518.455756][ T3816] binder: BINDER_SET_CONTEXT_MGR already set
[ 2518.470906][ T3816] binder: 3813:3816 ioctl 4018620d 2000000002c0 returned -16
[ 2518.729904][ T3824] FAULT_INJECTION: forcing a failure.
[ 2518.729904][ T3824] name failslab, interval 1, probability 0, space 0, times 0
[ 2518.789228][ T3824] CPU: 0 PID: 3824 Comm: syz.0.5276 Not tainted syzkaller #0
[ 2518.796701][ T3824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2518.806806][ T3824] Call Trace:
[ 2518.810123][ T3824]  <TASK>
[ 2518.813097][ T3824]  dump_stack_lvl+0x188/0x24e
[ 2518.817836][ T3824]  ? show_regs_print_info+0x12/0x12
[ 2518.823092][ T3824]  ? load_image+0x410/0x410
[ 2518.827670][ T3824]  ? __might_sleep+0xd0/0xd0
[ 2518.832312][ T3824]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2518.837400][ T3824]  should_fail_ex+0x390/0x4c0
[ 2518.842152][ T3824]  should_failslab+0x5/0x20
[ 2518.846704][ T3824]  slab_pre_alloc_hook+0x59/0x300
[ 2518.851786][ T3824]  ? tomoyo_encode+0x28a/0x550
[ 2518.856609][ T3824]  __kmem_cache_alloc_node+0x4f/0x270
[ 2518.862043][ T3824]  ? tomoyo_encode+0x28a/0x550
[ 2518.866867][ T3824]  __kmalloc+0xa3/0x240
[ 2518.871073][ T3824]  tomoyo_encode+0x28a/0x550
[ 2518.875730][ T3824]  tomoyo_realpath_from_path+0x578/0x5c0
[ 2518.881423][ T3824]  ? tomoyo_domain+0xd2/0x120
[ 2518.886159][ T3824]  ? tomoyo_mkdev_perm+0x1f5/0x5a0
[ 2518.891337][ T3824]  tomoyo_mkdev_perm+0x21e/0x5a0
[ 2518.896334][ T3824]  ? tomoyo_path_perm+0x610/0x610
[ 2518.901476][ T3824]  ? _raw_spin_unlock+0x24/0x40
[ 2518.906378][ T3824]  ? __d_add+0x4e2/0x7e0
[ 2518.910676][ T3824]  ? d_set_d_op+0x25b/0x370
[ 2518.915227][ T3824]  ? hook_path_mknod+0x157/0x520
[ 2518.920251][ T3824]  ? simple_lookup+0xc1/0xf0
[ 2518.924906][ T3824]  tomoyo_path_mknod+0xf8/0x190
[ 2518.929814][ T3824]  ? hook_path_mkdir+0x460/0x460
[ 2518.934818][ T3824]  ? tomoyo_path_symlink+0xf0/0xf0
[ 2518.939990][ T3824]  ? kern_path_create+0x50/0x50
[ 2518.944902][ T3824]  security_path_mknod+0xec/0x140
[ 2518.949988][ T3824]  do_mknodat+0x245/0x4d0
[ 2518.954378][ T3824]  ? do_o_path+0x200/0x200
[ 2518.958847][ T3824]  ? getname_flags+0x206/0x500
[ 2518.963664][ T3824]  __x64_sys_mknodat+0xa5/0xc0
[ 2518.968480][ T3824]  do_syscall_64+0x4c/0xa0
[ 2518.972948][ T3824]  ? clear_bhb_loop+0x60/0xb0
[ 2518.977671][ T3824]  ? clear_bhb_loop+0x60/0xb0
[ 2518.982402][ T3824]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2518.988347][ T3824] RIP: 0033:0x7fe6c8d9e199
[ 2518.992814][ T3824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2519.012472][ T3824] RSP: 002b:00007fe6c9c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2519.020937][ T3824] RAX: ffffffffffffffda RBX: 00007fe6c9025fa0 RCX: 00007fe6c8d9e199
[ 2519.028949][ T3824] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2519.036970][ T3824] RBP: 00007fe6c8e358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2519.044989][ T3824] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[ 2519.053006][ T3824] R13: 00007fe6c9026038 R14: 00007fe6c9025fa0 R15: 00007ffe9f93bb98
[ 2519.061041][ T3824]  </TASK>
[ 2519.107308][ T3824] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2519.523073][ T3844] device syzkaller1 entered promiscuous mode
[ 2519.699741][ T3847] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5280'.
[ 2519.769767][ T3851] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5282'.
[ 2520.010453][    C0] net_ratelimit: 28 callbacks suppressed
[ 2520.654974][T29674] usb 2-1: USB disconnect, device number 13
[ 2520.744354][ T3853] md: could not open device unknown-block(1,0).
[ 2520.832807][ T3858] binder: 3857:3858 ioctl c0306201 200000000640 returned -14
[ 2520.996208][ T3865] md: could not open device unknown-block(1,0).
[ 2521.071608][ T3870] FAULT_INJECTION: forcing a failure.
[ 2521.071608][ T3870] name failslab, interval 1, probability 0, space 0, times 0
[ 2521.135500][ T3870] CPU: 0 PID: 3870 Comm: syz.0.5289 Not tainted syzkaller #0
[ 2521.142953][ T3870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2521.153054][ T3870] Call Trace:
[ 2521.156369][ T3870]  <TASK>
[ 2521.159330][ T3870]  dump_stack_lvl+0x188/0x24e
[ 2521.164046][ T3870]  ? show_regs_print_info+0x12/0x12
[ 2521.169278][ T3870]  ? load_image+0x410/0x410
[ 2521.173813][ T3870]  ? __might_sleep+0xd0/0xd0
[ 2521.173838][ T3870]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2521.173875][ T3870]  should_fail_ex+0x390/0x4c0
[ 2521.183526][ T3870]  should_failslab+0x5/0x20
[ 2521.183550][ T3870]  slab_pre_alloc_hook+0x59/0x300
[ 2521.192750][ T3870]  ? tomoyo_encode+0x28a/0x550
[ 2521.202581][ T3870]  __kmem_cache_alloc_node+0x4f/0x270
[ 2521.202627][ T3870]  ? tomoyo_encode+0x28a/0x550
[ 2521.212759][ T3870]  __kmalloc+0xa3/0x240
[ 2521.212787][ T3870]  tomoyo_encode+0x28a/0x550
[ 2521.221579][ T3870]  tomoyo_realpath_from_path+0x578/0x5c0
[ 2521.227355][ T3870]  ? tomoyo_domain+0xd2/0x120
[ 2521.232103][ T3870]  ? tomoyo_mkdev_perm+0x1f5/0x5a0
[ 2521.237265][ T3870]  tomoyo_mkdev_perm+0x21e/0x5a0
[ 2521.242254][ T3870]  ? tomoyo_path_perm+0x610/0x610
[ 2521.247360][ T3870]  ? _raw_spin_unlock+0x24/0x40
[ 2521.252263][ T3870]  ? __d_add+0x4e2/0x7e0
[ 2521.256552][ T3870]  ? d_set_d_op+0x25b/0x370
[ 2521.261102][ T3870]  ? hook_path_mknod+0x157/0x520
[ 2521.266094][ T3870]  ? simple_lookup+0xc1/0xf0
[ 2521.270742][ T3870]  tomoyo_path_mknod+0xf8/0x190
[ 2521.275643][ T3870]  ? hook_path_mkdir+0x460/0x460
[ 2521.280636][ T3870]  ? tomoyo_path_symlink+0xf0/0xf0
[ 2521.285803][ T3870]  ? kern_path_create+0x50/0x50
[ 2521.290707][ T3870]  security_path_mknod+0xec/0x140
[ 2521.295765][ T3870]  do_mknodat+0x245/0x4d0
[ 2521.300133][ T3870]  ? do_o_path+0x200/0x200
[ 2521.304578][ T3870]  ? getname_flags+0x206/0x500
[ 2521.304613][ T3870]  __x64_sys_mknodat+0xa5/0xc0
[ 2521.304642][ T3870]  do_syscall_64+0x4c/0xa0
[ 2521.314200][ T3870]  ? clear_bhb_loop+0x60/0xb0
[ 2521.323299][ T3870]  ? clear_bhb_loop+0x60/0xb0
[ 2521.323330][ T3870]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2521.323357][ T3870] RIP: 0033:0x7fe6c8d9e199
[ 2521.338439][ T3870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2521.358108][ T3870] RSP: 002b:00007fe6c9c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2521.366579][ T3870] RAX: ffffffffffffffda RBX: 00007fe6c9025fa0 RCX: 00007fe6c8d9e199
[ 2521.374636][ T3870] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2521.382658][ T3870] RBP: 00007fe6c8e358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2521.390680][ T3870] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[ 2521.398679][ T3870] R13: 00007fe6c9026038 R14: 00007fe6c9025fa0 R15: 00007ffe9f93bb98
[ 2521.406731][ T3870]  </TASK>
[ 2521.490688][ T3870] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2522.510483][T29674] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 2522.940821][T29674] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2523.519349][T29674] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2523.540559][T29674] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 2523.558074][T29674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2523.576783][T29674] usb 4-1: Product: syz
[ 2523.586927][T29674] usb 4-1: Manufacturer: syz
[ 2523.597087][T29674] usb 4-1: SerialNumber: syz
[ 2523.632179][T29674] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected
[ 2523.690816][T29674] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[ 2523.715318][T29674] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[ 2523.895277][ T8554] usb 4-1: USB disconnect, device number 16
[ 2524.115368][ T8554] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[ 2524.146123][ T3887] netlink: 'syz.1.5295': attribute type 13 has an invalid length.
[ 2524.247321][ T8554] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[ 2524.328402][ T8554] ti_usb_3410_5052 4-1:2.0: device disconnected
[ 2524.384368][ T3908] tipc: Started in network mode
[ 2524.419272][ T3908] tipc: Node identity ac1414aa, cluster identity 4711
[ 2524.431936][ T3908] tipc: New replicast peer: 172.20.20.187
[ 2524.438204][ T3908] tipc: Enabled bearer <udp:syz0>, priority 10
[ 2524.532711][ T3914] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5300'.
[ 2524.837230][ T3921] FAULT_INJECTION: forcing a failure.
[ 2524.837230][ T3921] name failslab, interval 1, probability 0, space 0, times 0
[ 2524.902430][ T3921] CPU: 0 PID: 3921 Comm: syz.1.5304 Not tainted syzkaller #0
[ 2524.909891][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2524.919987][ T3921] Call Trace:
[ 2524.923308][ T3921]  <TASK>
[ 2524.926283][ T3921]  dump_stack_lvl+0x188/0x24e
[ 2524.931018][ T3921]  ? show_regs_print_info+0x12/0x12
[ 2524.936274][ T3921]  ? load_image+0x410/0x410
[ 2524.940837][ T3921]  ? __might_sleep+0xd0/0xd0
[ 2524.945479][ T3921]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2524.950571][ T3921]  should_fail_ex+0x390/0x4c0
[ 2524.955312][ T3921]  should_failslab+0x5/0x20
[ 2524.959863][ T3921]  slab_pre_alloc_hook+0x59/0x300
[ 2524.964944][ T3921]  ? tomoyo_encode+0x28a/0x550
[ 2524.969756][ T3921]  __kmem_cache_alloc_node+0x4f/0x270
[ 2524.975183][ T3921]  ? tomoyo_encode+0x28a/0x550
[ 2524.979997][ T3921]  __kmalloc+0xa3/0x240
[ 2524.984202][ T3921]  tomoyo_encode+0x28a/0x550
[ 2524.988869][ T3921]  tomoyo_realpath_from_path+0x578/0x5c0
[ 2524.994569][ T3921]  ? tomoyo_domain+0xd2/0x120
[ 2524.999308][ T3921]  ? tomoyo_mkdev_perm+0x1f5/0x5a0
[ 2525.004445][ T3921]  tomoyo_mkdev_perm+0x21e/0x5a0
[ 2525.009413][ T3921]  ? tomoyo_path_perm+0x610/0x610
[ 2525.014493][ T3921]  ? _raw_spin_unlock+0x24/0x40
[ 2525.019364][ T3921]  ? __d_add+0x4e2/0x7e0
[ 2525.023649][ T3921]  ? d_set_d_op+0x25b/0x370
[ 2525.028198][ T3921]  ? hook_path_mknod+0x157/0x520
[ 2525.033175][ T3921]  ? simple_lookup+0xc1/0xf0
[ 2525.037808][ T3921]  tomoyo_path_mknod+0xf8/0x190
[ 2525.042687][ T3921]  ? hook_path_mkdir+0x460/0x460
[ 2525.047675][ T3921]  ? tomoyo_path_symlink+0xf0/0xf0
[ 2525.052882][ T3921]  ? kern_path_create+0x50/0x50
[ 2525.057773][ T3921]  security_path_mknod+0xec/0x140
[ 2525.062832][ T3921]  do_mknodat+0x245/0x4d0
[ 2525.067199][ T3921]  ? do_o_path+0x200/0x200
[ 2525.071676][ T3921]  ? getname_flags+0x206/0x500
[ 2525.076491][ T3921]  __x64_sys_mknodat+0xa5/0xc0
[ 2525.081304][ T3921]  do_syscall_64+0x4c/0xa0
[ 2525.085775][ T3921]  ? clear_bhb_loop+0x60/0xb0
[ 2525.090500][ T3921]  ? clear_bhb_loop+0x60/0xb0
[ 2525.095231][ T3921]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2525.101180][ T3921] RIP: 0033:0x7f038ed9e199
[ 2525.105650][ T3921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2525.125309][ T3921] RSP: 002b:00007f038fc19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2525.133781][ T3921] RAX: ffffffffffffffda RBX: 00007f038f025fa0 RCX: 00007f038ed9e199
[ 2525.141794][ T3921] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2525.149805][ T3921] RBP: 00007f038ee358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2525.151517][T31656] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 2525.157800][ T3921] R10: 0000000000000702 R11: 0000000000000246 R12: 0000000000000000
[ 2525.173375][ T3921] R13: 00007f038f026038 R14: 00007f038f025fa0 R15: 00007fff4ce210b8
[ 2525.181390][ T3921]  </TASK>
[ 2525.270937][ T3921] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2525.315311][ T3928] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(14)
[ 2525.370476][    C0] net_ratelimit: 13 callbacks suppressed
[ 2525.395130][T31656] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[ 2525.420452][T31656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2525.461170][ T4329] tipc: Node number set to 2886997162
[ 2525.697008][T31656] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[ 2525.937124][ T3940] md: could not open device unknown-block(1,0).
[ 2526.986060][ T3956] device syzkaller1 entered promiscuous mode
[ 2527.527814][ T3967] FAULT_INJECTION: forcing a failure.
[ 2527.527814][ T3967] name failslab, interval 1, probability 0, space 0, times 0
[ 2527.570607][ T3967] CPU: 1 PID: 3967 Comm: syz.1.5317 Not tainted syzkaller #0
[ 2527.575665][ T4329] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 2527.578036][ T3967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2527.578053][ T3967] Call Trace:
[ 2527.578063][ T3967]  <TASK>
[ 2527.578072][ T3967]  dump_stack_lvl+0x188/0x24e
[ 2527.606646][ T3967]  ? show_regs_print_info+0x12/0x12
[ 2527.606684][ T3967]  ? load_image+0x410/0x410
[ 2527.616480][ T3967]  ? __might_sleep+0xd0/0xd0
[ 2527.616508][ T3967]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2527.626133][ T3967]  should_fail_ex+0x390/0x4c0
[ 2527.630873][ T3967]  should_failslab+0x5/0x20
[ 2527.635425][ T3967]  slab_pre_alloc_hook+0x59/0x300
[ 2527.640505][ T3967]  ? tomoyo_encode+0x28a/0x550
[ 2527.645300][ T3967]  __kmem_cache_alloc_node+0x4f/0x270
[ 2527.650705][ T3967]  ? tomoyo_encode+0x28a/0x550
[ 2527.655499][ T3967]  __kmalloc+0xa3/0x240
[ 2527.659704][ T3967]  tomoyo_encode+0x28a/0x550
[ 2527.664356][ T3967]  tomoyo_realpath_from_path+0x578/0x5c0
[ 2527.670049][ T3967]  ? tomoyo_domain+0xd2/0x120
[ 2527.674779][ T3967]  ? tomoyo_mkdev_perm+0x1f5/0x5a0
[ 2527.679911][ T3967]  tomoyo_mkdev_perm+0x21e/0x5a0
[ 2527.684884][ T3967]  ? tomoyo_path_perm+0x610/0x610
[ 2527.689968][ T3967]  ? _raw_spin_unlock+0x24/0x40
[ 2527.694871][ T3967]  ? __d_add+0x4e2/0x7e0
[ 2527.699163][ T3967]  ? d_set_d_op+0x25b/0x370
[ 2527.703713][ T3967]  ? hook_path_mknod+0x157/0x520
[ 2527.708690][ T3967]  ? simple_lookup+0xc1/0xf0
[ 2527.713318][ T3967]  tomoyo_path_mknod+0xf8/0x190
[ 2527.718200][ T3967]  ? hook_path_mkdir+0x460/0x460
[ 2527.723167][ T3967]  ? tomoyo_path_symlink+0xf0/0xf0
[ 2527.728317][ T3967]  ? kern_path_create+0x50/0x50
[ 2527.733198][ T3967]  security_path_mknod+0xec/0x140
[ 2527.738249][ T3967]  do_mknodat+0x245/0x4d0
[ 2527.742636][ T3967]  ? do_o_path+0x200/0x200
[ 2527.747084][ T3967]  ? getname_flags+0x206/0x500
[ 2527.751874][ T3967]  __x64_sys_mknodat+0xa5/0xc0
[ 2527.756665][ T3967]  do_syscall_64+0x4c/0xa0
[ 2527.761114][ T3967]  ? clear_bhb_loop+0x60/0xb0
[ 2527.765814][ T3967]  ? clear_bhb_loop+0x60/0xb0
[ 2527.770522][ T3967]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2527.776447][ T3967] RIP: 0033:0x7f038ed9e199
[ 2527.780895][ T3967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2527.800529][ T3967] RSP: 002b:00007f038fc19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2527.808994][ T3967] RAX: ffffffffffffffda RBX: 00007f038f025fa0 RCX: 00007f038ed9e199
[ 2527.816990][ T3967] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2527.825078][ T3967] RBP: 00007f038ee358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2527.833070][ T3967] R10: 0000000000000702 R11: 0000000000000246 R12: 0000000000000000
[ 2527.841068][ T3967] R13: 00007f038f026038 R14: 00007f038f025fa0 R15: 00007fff4ce210b8
[ 2527.849074][ T3967]  </TASK>
[ 2527.857859][ T3967] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2527.960768][ T4329] usb 1-1: Using ep0 maxpacket: 32
[ 2527.970067][ T4329] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2528.031152][ T4329] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[ 2528.039380][ T4329] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[ 2528.086674][ T4329] usb 1-1: config 14 has no interface number 0
[ 2528.110450][ T4329] usb 1-1: config 14 has no interface number 1
[ 2528.124988][ T3974] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(14)
[ 2528.138768][ T4329] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2528.153502][ T4329] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping
[ 2528.164895][ T4329] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2528.177119][ T4329] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2528.193654][ T4329] usb 1-1: config 14 interface 57 has no altsetting 0
[ 2528.202190][ T4329] usb 1-1: config 14 interface 228 has no altsetting 0
[ 2528.223577][ T4329] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2528.246518][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2528.267610][ T4329] usb 1-1: Product: syz
[ 2528.280168][ T4329] usb 1-1: Manufacturer: syz
[ 2528.289118][ T4329] usb 1-1: SerialNumber: syz
[ 2528.426687][ T3977] md: could not open device unknown-block(1,0).
[ 2528.742065][ T4329] legousbtower 1-1:14.57: interrupt endpoints not found
[ 2528.943748][ T4329] legousbtower 1-1:14.228: interrupt endpoints not found
[ 2529.267125][ T3946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2529.704069][ T3997] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5324'.
[ 2530.355530][ T4005] FAULT_INJECTION: forcing a failure.
[ 2530.355530][ T4005] name failslab, interval 1, probability 0, space 0, times 0
[ 2530.433424][ T4005] CPU: 0 PID: 4005 Comm: syz.1.5329 Not tainted syzkaller #0
[ 2530.440886][ T4005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2530.450990][ T4005] Call Trace:
[ 2530.454313][ T4005]  <TASK>
[ 2530.457318][ T4005]  dump_stack_lvl+0x188/0x24e
[ 2530.462061][ T4005]  ? show_regs_print_info+0x12/0x12
[ 2530.467322][ T4005]  ? load_image+0x410/0x410
[ 2530.471887][ T4005]  ? __might_sleep+0xd0/0xd0
[ 2530.476521][ T4005]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2530.481610][ T4005]  should_fail_ex+0x390/0x4c0
[ 2530.486355][ T4005]  should_failslab+0x5/0x20
[ 2530.490904][ T4005]  slab_pre_alloc_hook+0x59/0x300
[ 2530.495977][ T4005]  ? tomoyo_encode+0x28a/0x550
[ 2530.500796][ T4005]  __kmem_cache_alloc_node+0x4f/0x270
[ 2530.506231][ T4005]  ? tomoyo_encode+0x28a/0x550
[ 2530.511062][ T4005]  __kmalloc+0xa3/0x240
[ 2530.511097][ T4005]  tomoyo_encode+0x28a/0x550
[ 2530.511135][ T4005]  tomoyo_realpath_from_path+0x578/0x5c0
[ 2530.511170][ T4005]  ? tomoyo_domain+0xd2/0x120
[ 2530.511205][ T4005]  ? tomoyo_mkdev_perm+0x1f5/0x5a0
[ 2530.511230][ T4005]  tomoyo_mkdev_perm+0x21e/0x5a0
[ 2530.511257][ T4005]  ? tomoyo_path_perm+0x610/0x610
[ 2530.545872][ T4005]  ? _raw_spin_unlock+0x24/0x40
[ 2530.550750][ T4005]  ? __d_add+0x4e2/0x7e0
[ 2530.555023][ T4005]  ? d_set_d_op+0x25b/0x370
[ 2530.559549][ T4005]  ? hook_path_mknod+0x157/0x520
[ 2530.564519][ T4005]  ? simple_lookup+0xc1/0xf0
[ 2530.569156][ T4005]  tomoyo_path_mknod+0xf8/0x190
[ 2530.574042][ T4005]  ? hook_path_mkdir+0x460/0x460
[ 2530.579014][ T4005]  ? tomoyo_path_symlink+0xf0/0xf0
[ 2530.579055][ T4005]  ? kern_path_create+0x50/0x50
[ 2530.589025][ T4005]  security_path_mknod+0xec/0x140
[ 2530.594080][ T4005]  do_mknodat+0x245/0x4d0
[ 2530.598448][ T4005]  ? do_o_path+0x200/0x200
[ 2530.602904][ T4005]  ? getname_flags+0x206/0x500
[ 2530.607700][ T4005]  __x64_sys_mknodat+0xa5/0xc0
[ 2530.612489][ T4005]  do_syscall_64+0x4c/0xa0
[ 2530.616928][ T4005]  ? clear_bhb_loop+0x60/0xb0
[ 2530.621635][ T4005]  ? clear_bhb_loop+0x60/0xb0
[ 2530.626346][ T4005]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2530.632278][ T4005] RIP: 0033:0x7f038ed9e199
[ 2530.632302][ T4005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2530.656352][ T4005] RSP: 002b:00007f038fc19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2530.664806][ T4005] RAX: ffffffffffffffda RBX: 00007f038f025fa0 RCX: 00007f038ed9e199
[ 2530.664828][ T4005] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2530.681276][ T4005] RBP: 00007f038ee358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2530.681300][ T4005] R10: 0000000000000702 R11: 0000000000000246 R12: 0000000000000000
[ 2530.697286][ T4005] R13: 00007f038f026038 R14: 00007f038f025fa0 R15: 00007fff4ce210b8
[ 2530.697338][ T4005]  </TASK>
[ 2530.970517][    C1] net_ratelimit: 24 callbacks suppressed
[ 2531.042227][ T4329] usb 1-1: USB disconnect, device number 13
[ 2531.159974][ T4325] usb 4-1: USB disconnect, device number 17
[ 2531.243192][ T4005] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2531.262630][ T4019] md: could not open device unknown-block(1,0).
[ 2531.404069][ T4028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5332'.
[ 2531.758259][ T4034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5333'.
[ 2531.892619][ T4325] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 2532.006957][ T4039] md: could not open device unknown-block(1,0).
[ 2532.091843][ T4325] usb 2-1: Using ep0 maxpacket: 8
[ 2532.111507][ T4325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2532.149037][ T4325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2532.183489][ T4325] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 2532.206208][ T4325] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 2532.230310][ T4325] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 2532.240054][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2532.297180][ T4325] hub 2-1:1.0: bad descriptor, ignoring hub
[ 2532.319687][ T4325] hub: probe of 2-1:1.0 failed with error -5
[ 2532.353737][ T4325] cdc_wdm 2-1:1.0: skipping garbage
[ 2532.359040][ T4325] cdc_wdm 2-1:1.0: skipping garbage
[ 2532.407600][ T4325] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 2532.429534][ T4325] cdc_wdm 2-1:1.0: Unknown control protocol
[ 2532.918516][ T4062] FAULT_INJECTION: forcing a failure.
[ 2532.918516][ T4062] name failslab, interval 1, probability 0, space 0, times 0
[ 2532.951445][ T4325] usb 2-1: USB disconnect, device number 14
[ 2532.957748][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[ 2532.964682][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[ 2532.970789][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 2533.009664][ T4062] CPU: 0 PID: 4062 Comm: syz.3.5344 Not tainted syzkaller #0
[ 2533.017127][ T4062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2533.017145][ T4062] Call Trace:
[ 2533.017154][ T4062]  <TASK>
[ 2533.017171][ T4062]  dump_stack_lvl+0x188/0x24e
[ 2533.017208][ T4062]  ? show_regs_print_info+0x12/0x12
[ 2533.043407][ T4062]  ? load_image+0x410/0x410
[ 2533.047986][ T4062]  ? __might_sleep+0xd0/0xd0
[ 2533.052632][ T4062]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2533.057732][ T4062]  should_fail_ex+0x390/0x4c0
[ 2533.062455][ T4062]  should_failslab+0x5/0x20
[ 2533.062482][ T4062]  slab_pre_alloc_hook+0x59/0x300
[ 2533.062509][ T4062]  ? tomoyo_encode+0x28a/0x550
[ 2533.062541][ T4062]  __kmem_cache_alloc_node+0x4f/0x270
[ 2533.062572][ T4062]  ? tomoyo_encode+0x28a/0x550
[ 2533.062598][ T4062]  __kmalloc+0xa3/0x240
[ 2533.062622][ T4062]  tomoyo_encode+0x28a/0x550
[ 2533.062656][ T4062]  tomoyo_realpath_from_path+0x578/0x5c0
[ 2533.062691][ T4062]  ? tomoyo_domain+0xd2/0x120
[ 2533.062726][ T4062]  ? tomoyo_mkdev_perm+0x1f5/0x5a0
[ 2533.062752][ T4062]  tomoyo_mkdev_perm+0x21e/0x5a0
[ 2533.062779][ T4062]  ? tomoyo_path_perm+0x610/0x610
[ 2533.121825][ T4062]  ? _raw_spin_unlock+0x24/0x40
[ 2533.126717][ T4062]  ? __d_add+0x4e2/0x7e0
[ 2533.130998][ T4062]  ? d_set_d_op+0x25b/0x370
[ 2533.135554][ T4062]  ? hook_path_mknod+0x157/0x520
[ 2533.140533][ T4062]  ? simple_lookup+0xc1/0xf0
[ 2533.145173][ T4062]  tomoyo_path_mknod+0xf8/0x190
[ 2533.150054][ T4062]  ? hook_path_mkdir+0x460/0x460
[ 2533.155023][ T4062]  ? tomoyo_path_symlink+0xf0/0xf0
[ 2533.160172][ T4062]  ? kern_path_create+0x50/0x50
[ 2533.165062][ T4062]  security_path_mknod+0xec/0x140
[ 2533.170119][ T4062]  do_mknodat+0x245/0x4d0
[ 2533.174492][ T4062]  ? do_o_path+0x200/0x200
[ 2533.178940][ T4062]  ? getname_flags+0x206/0x500
[ 2533.183750][ T4062]  __x64_sys_mknodat+0xa5/0xc0
[ 2533.188545][ T4062]  do_syscall_64+0x4c/0xa0
[ 2533.192993][ T4062]  ? clear_bhb_loop+0x60/0xb0
[ 2533.197706][ T4062]  ? clear_bhb_loop+0x60/0xb0
[ 2533.202412][ T4062]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2533.208355][ T4062] RIP: 0033:0x7f204979e199
[ 2533.212796][ T4062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2533.232435][ T4062] RSP: 002b:00007f204a656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2533.240879][ T4062] RAX: ffffffffffffffda RBX: 00007f2049a25fa0 RCX: 00007f204979e199
[ 2533.248872][ T4062] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2533.256864][ T4062] RBP: 00007f20498358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2533.264859][ T4062] R10: 0000000000000706 R11: 0000000000000246 R12: 0000000000000000
[ 2533.272864][ T4062] R13: 00007f2049a26038 R14: 00007f2049a25fa0 R15: 00007ffeea215a58
[ 2533.280873][ T4062]  </TASK>
[ 2533.343567][ T4062] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2533.507581][ T4066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5345'.
[ 2533.577165][ T4070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5346'.
[ 2533.783861][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 2533.815896][ T4081] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5347'.
[ 2533.958884][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5349'.
[ 2533.996325][ T4082] device bridge_slave_1 left promiscuous mode
[ 2534.015237][ T4082] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2534.045427][ T4082] device bridge_slave_0 left promiscuous mode
[ 2534.075100][ T4082] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2535.133130][ T4098] FAULT_INJECTION: forcing a failure.
[ 2535.133130][ T4098] name failslab, interval 1, probability 0, space 0, times 0
[ 2535.165939][ T4098] CPU: 1 PID: 4098 Comm: syz.3.5355 Not tainted syzkaller #0
[ 2535.173409][ T4098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2535.183516][ T4098] Call Trace:
[ 2535.186836][ T4098]  <TASK>
[ 2535.189806][ T4098]  dump_stack_lvl+0x188/0x24e
[ 2535.194527][ T4098]  ? show_regs_print_info+0x12/0x12
[ 2535.199753][ T4098]  ? load_image+0x410/0x410
[ 2535.199792][ T4098]  ? __might_sleep+0xd0/0xd0
[ 2535.199816][ T4098]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2535.208949][ T4098]  should_fail_ex+0x390/0x4c0
[ 2535.218651][ T4098]  should_failslab+0x5/0x20
[ 2535.223177][ T4098]  slab_pre_alloc_hook+0x59/0x300
[ 2535.223209][ T4098]  ? tomoyo_encode+0x28a/0x550
[ 2535.223242][ T4098]  __kmem_cache_alloc_node+0x4f/0x270
[ 2535.233028][ T4098]  ? tomoyo_encode+0x28a/0x550
[ 2535.233058][ T4098]  __kmalloc+0xa3/0x240
[ 2535.243212][ T4098]  tomoyo_encode+0x28a/0x550
[ 2535.243254][ T4098]  tomoyo_realpath_from_path+0x578/0x5c0
[ 2535.252005][ T4098]  ? tomoyo_domain+0xd2/0x120
[ 2535.252041][ T4098]  ? tomoyo_mkdev_perm+0x1f5/0x5a0
[ 2535.262384][ T4098]  tomoyo_mkdev_perm+0x21e/0x5a0
[ 2535.262420][ T4098]  ? tomoyo_path_perm+0x610/0x610
[ 2535.272505][ T4098]  ? _raw_spin_unlock+0x24/0x40
[ 2535.272529][ T4098]  ? __d_add+0x4e2/0x7e0
[ 2535.282432][ T4098]  ? d_set_d_op+0x25b/0x370
[ 2535.282457][ T4098]  ? hook_path_mknod+0x157/0x520
[ 2535.282490][ T4098]  ? simple_lookup+0xc1/0xf0
[ 2535.291247][ T4098]  tomoyo_path_mknod+0xf8/0x190
[ 2535.300863][ T4098]  ? hook_path_mkdir+0x460/0x460
[ 2535.310686][ T4098]  ? tomoyo_path_symlink+0xf0/0xf0
[ 2535.310726][ T4098]  ? kern_path_create+0x50/0x50
[ 2535.320715][ T4098]  security_path_mknod+0xec/0x140
[ 2535.320751][ T4098]  do_mknodat+0x245/0x4d0
[ 2535.330145][ T4098]  ? do_o_path+0x200/0x200
[ 2535.330181][ T4098]  ? getname_flags+0x206/0x500
[ 2535.330210][ T4098]  __x64_sys_mknodat+0xa5/0xc0
[ 2535.344406][ T4098]  do_syscall_64+0x4c/0xa0
[ 2535.348879][ T4098]  ? clear_bhb_loop+0x60/0xb0
[ 2535.353614][ T4098]  ? clear_bhb_loop+0x60/0xb0
[ 2535.358343][ T4098]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2535.364270][ T4098] RIP: 0033:0x7f204979e199
[ 2535.368716][ T4098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2535.388354][ T4098] RSP: 002b:00007f204a656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2535.396821][ T4098] RAX: ffffffffffffffda RBX: 00007f2049a25fa0 RCX: 00007f204979e199
[ 2535.404822][ T4098] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2535.412821][ T4098] RBP: 00007f20498358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2535.420814][ T4098] R10: 0000000000000706 R11: 0000000000000246 R12: 0000000000000000
[ 2535.428807][ T4098] R13: 00007f2049a26038 R14: 00007f2049a25fa0 R15: 00007ffeea215a58
[ 2535.436819][ T4098]  </TASK>
[ 2535.450625][ T4098] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2535.763828][ T4329] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 2535.933164][ T4329] usb 1-1: device descriptor read/64, error -71
[ 2536.042851][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5358'.
[ 2536.062005][ T4109] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5359'.
[ 2536.220972][ T4329] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 2536.330435][    C0] net_ratelimit: 20 callbacks suppressed
[ 2536.387601][ T4116] 9pnet_virtio: no channels available for device syz
[ 2536.410551][ T4329] usb 1-1: device descriptor read/64, error -71
[ 2536.531078][ T4329] usb usb1-port1: attempt power cycle
[ 2536.562846][ T4118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5363'.
[ 2536.600571][ T4118] device macvlan2 left promiscuous mode
[ 2536.606373][ T4118] bridge0: port 3(macvlan2) entered disabled state
[ 2536.627578][ T4118] device bridge_slave_1 left promiscuous mode
[ 2536.648010][ T4118] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2536.668776][ T4118] device bridge_slave_0 left promiscuous mode
[ 2536.679891][ T4118] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2536.943749][ T4329] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 2537.004579][ T4329] usb 1-1: device descriptor read/8, error -71
[ 2537.195175][ T4134] FAULT_INJECTION: forcing a failure.
[ 2537.195175][ T4134] name failslab, interval 1, probability 0, space 0, times 0
[ 2537.246926][ T4134] CPU: 1 PID: 4134 Comm: syz.3.5367 Not tainted syzkaller #0
[ 2537.254425][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2537.264509][ T4134] Call Trace:
[ 2537.264522][ T4134]  <TASK>
[ 2537.264533][ T4134]  dump_stack_lvl+0x188/0x24e
[ 2537.275508][ T4134]  ? show_regs_print_info+0x12/0x12
[ 2537.280758][ T4134]  ? load_image+0x410/0x410
[ 2537.285305][ T4134]  ? __might_sleep+0xd0/0xd0
[ 2537.289921][ T4134]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2537.294986][ T4134]  should_fail_ex+0x390/0x4c0
[ 2537.299729][ T4134]  should_failslab+0x5/0x20
[ 2537.304258][ T4134]  slab_pre_alloc_hook+0x59/0x300
[ 2537.305899][ T4329] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 2537.309317][ T4134]  ? tomoyo_encode+0x28a/0x550
[ 2537.321637][ T4134]  __kmem_cache_alloc_node+0x4f/0x270
[ 2537.321679][ T4134]  ? tomoyo_encode+0x28a/0x550
[ 2537.332152][ T4134]  __kmalloc+0xa3/0x240
[ 2537.332188][ T4134]  tomoyo_encode+0x28a/0x550
[ 2537.336638][ T4134]  tomoyo_realpath_from_path+0x578/0x5c0
[ 2537.346893][ T4134]  ? tomoyo_domain+0xd2/0x120
[ 2537.346938][ T4134]  ? tomoyo_mkdev_perm+0x1f5/0x5a0
[ 2537.356756][ T4134]  tomoyo_mkdev_perm+0x21e/0x5a0
[ 2537.356798][ T4134]  ? tomoyo_path_perm+0x610/0x610
[ 2537.366783][ T4134]  ? _raw_spin_unlock+0x24/0x40
[ 2537.371699][ T4134]  ? __d_add+0x4e2/0x7e0
[ 2537.375998][ T4134]  ? d_set_d_op+0x25b/0x370
[ 2537.380553][ T4134]  ? hook_path_mknod+0x157/0x520
[ 2537.385536][ T4134]  ? simple_lookup+0xc1/0xf0
[ 2537.390163][ T4134]  tomoyo_path_mknod+0xf8/0x190
[ 2537.390199][ T4134]  ? hook_path_mkdir+0x460/0x460
[ 2537.390231][ T4134]  ? tomoyo_path_symlink+0xf0/0xf0
[ 2537.390267][ T4134]  ? kern_path_create+0x50/0x50
[ 2537.395481][ T4134]  security_path_mknod+0xec/0x140
[ 2537.405545][ T4134]  do_mknodat+0x245/0x4d0
[ 2537.415430][ T4134]  ? do_o_path+0x200/0x200
[ 2537.424210][ T4134]  ? getname_flags+0x206/0x500
[ 2537.424247][ T4134]  __x64_sys_mknodat+0xa5/0xc0
[ 2537.424278][ T4134]  do_syscall_64+0x4c/0xa0
[ 2537.424302][ T4134]  ? clear_bhb_loop+0x60/0xb0
[ 2537.429397][ T4134]  ? clear_bhb_loop+0x60/0xb0
[ 2537.438594][ T4134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2537.447966][ T4134] RIP: 0033:0x7f204979e199
[ 2537.458408][ T4134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2537.478041][ T4134] RSP: 002b:00007f204a656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2537.486490][ T4134] RAX: ffffffffffffffda RBX: 00007f2049a25fa0 RCX: 00007f204979e199
[ 2537.494495][ T4134] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2537.495547][ T4329] usb 1-1: device descriptor read/8, error -71
[ 2537.502492][ T4134] RBP: 00007f20498358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2537.502513][ T4134] R10: 0000000000000706 R11: 0000000000000246 R12: 0000000000000000
[ 2537.502528][ T4134] R13: 00007f2049a26038 R14: 00007f2049a25fa0 R15: 00007ffeea215a58
[ 2537.502562][ T4134]  </TASK>
[ 2537.540813][ T4134] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2537.561540][ T4329] usb usb1-port1: unable to enumerate USB device
[ 2537.563284][ T4137] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5369'.
[ 2537.610518][ T8782] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 2537.812757][ T8782] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[ 2537.830559][ T8782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2538.065525][ T8782] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[ 2538.233850][ T4147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5372'.
[ 2539.204525][ T4163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5378'.
[ 2539.214209][ T4163] device bridge_slave_1 left promiscuous mode
[ 2539.221165][ T4163] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2539.258388][ T4163] device bridge_slave_0 left promiscuous mode
[ 2539.278925][ T4163] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2539.384586][ T4169] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5380'.
[ 2539.521966][ T4171] FAULT_INJECTION: forcing a failure.
[ 2539.521966][ T4171] name failslab, interval 1, probability 0, space 0, times 0
[ 2539.550011][ T4171] CPU: 0 PID: 4171 Comm: syz.3.5381 Not tainted syzkaller #0
[ 2539.557466][ T4171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2539.567590][ T4171] Call Trace:
[ 2539.570898][ T4171]  <TASK>
[ 2539.573858][ T4171]  dump_stack_lvl+0x188/0x24e
[ 2539.578588][ T4171]  ? show_regs_print_info+0x12/0x12
[ 2539.583824][ T4171]  ? load_image+0x410/0x410
[ 2539.588368][ T4171]  ? __might_sleep+0xd0/0xd0
[ 2539.592982][ T4171]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2539.598040][ T4171]  ? tomoyo_path_perm+0x610/0x610
[ 2539.603095][ T4171]  should_fail_ex+0x390/0x4c0
[ 2539.607813][ T4171]  should_failslab+0x5/0x20
[ 2539.612338][ T4171]  slab_pre_alloc_hook+0x59/0x300
[ 2539.617399][ T4171]  kmem_cache_alloc_lru+0x49/0x2e0
[ 2539.622542][ T4171]  ? shmem_alloc_inode+0x24/0x40
[ 2539.627522][ T4171]  shmem_alloc_inode+0x24/0x40
[ 2539.632321][ T4171]  ? shmem_match+0x160/0x160
[ 2539.636939][ T4171]  new_inode_pseudo+0x5f/0x1c0
[ 2539.641821][ T4171]  new_inode+0x25/0x1d0
[ 2539.646010][ T4171]  shmem_get_inode+0x327/0xbc0
[ 2539.650815][ T4171]  shmem_mknod+0x54/0x1c0
[ 2539.655212][ T4171]  vfs_mknod+0x430/0x4c0
[ 2539.659491][ T4171]  do_mknodat+0x356/0x4d0
[ 2539.663876][ T4171]  ? do_o_path+0x200/0x200
[ 2539.668357][ T4171]  ? getname_flags+0x206/0x500
[ 2539.673185][ T4171]  __x64_sys_mknodat+0xa5/0xc0
[ 2539.678006][ T4171]  do_syscall_64+0x4c/0xa0
[ 2539.682459][ T4171]  ? clear_bhb_loop+0x60/0xb0
[ 2539.687166][ T4171]  ? clear_bhb_loop+0x60/0xb0
[ 2539.691874][ T4171]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2539.697803][ T4171] RIP: 0033:0x7f204979e199
[ 2539.702248][ T4171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2539.721890][ T4171] RSP: 002b:00007f204a656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 2539.730384][ T4171] RAX: ffffffffffffffda RBX: 00007f2049a25fa0 RCX: 00007f204979e199
[ 2539.738397][ T4171] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 2539.746399][ T4171] RBP: 00007f20498358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2539.754397][ T4171] R10: 0000000000000706 R11: 0000000000000246 R12: 0000000000000000
[ 2539.762401][ T4171] R13: 00007f2049a26038 R14: 00007f2049a25fa0 R15: 00007ffeea215a58
[ 2539.770415][ T4171]  </TASK>
[ 2540.035295][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5383'.
[ 2540.256547][ T4182] device-mapper: ioctl: Invalid target message parameters.
[ 2540.880885][ T4195] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5391'.
[ 2541.304038][ T8782] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 2541.366416][ T4207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5397'.
[ 2541.523096][ T8782] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[ 2541.550446][ T8782] usb 1-1: config 0 has no interface number 0
[ 2541.556678][ T8782] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2541.597821][ T8782] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 2541.613892][ T8782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2541.622458][ T8782] usb 1-1: Product: syz
[ 2541.626784][ T8782] usb 1-1: Manufacturer: syz
[ 2541.631862][ T8782] usb 1-1: SerialNumber: syz
[ 2541.641524][ T8782] usb 1-1: config 0 descriptor??
[ 2541.693504][ T8782] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[ 2541.704639][ T4210] device-mapper: ioctl: Invalid target message parameters.
[ 2541.780466][    C0] net_ratelimit: 18 callbacks suppressed
[ 2543.445432][ T4329] usb 6-1: USB disconnect, device number 14
[ 2543.701390][ T4232] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5403'.
[ 2543.932807][    C0] usb 1-1: yurex_control_callback - control failed: -2
[ 2543.945249][ T4329] usb 1-1: USB disconnect, device number 18
[ 2544.003687][ T4329] yurex 1-1:0.50: USB YUREX #0 now disconnected
[ 2544.719449][ T4252] device-mapper: ioctl: Invalid target message parameters.
[ 2544.870574][ T4325] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 2545.062713][ T4325] usb 2-1: Using ep0 maxpacket: 32
[ 2545.073615][ T4325] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2545.112504][ T4325] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[ 2545.130849][ T4325] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[ 2545.139174][ T4325] usb 2-1: config 14 has no interface number 0
[ 2545.169939][ T4325] usb 2-1: config 14 has no interface number 1
[ 2545.196608][ T4325] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2545.217798][ T4325] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping
[ 2545.239573][ T4325] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2545.267424][ T4325] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2545.305006][ T4325] usb 2-1: config 14 interface 57 has no altsetting 0
[ 2545.313515][ T4325] usb 2-1: config 14 interface 228 has no altsetting 0
[ 2545.368283][ T4325] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2545.378415][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2545.386756][ T4325] usb 2-1: Product: syz
[ 2545.393531][ T4325] usb 2-1: Manufacturer: syz
[ 2545.398242][ T4325] usb 2-1: SerialNumber: syz
[ 2545.840908][ T4281] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5420'.
[ 2546.110604][T29674] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 2546.229173][ T4325] legousbtower 2-1:14.57: interrupt endpoints not found
[ 2546.281191][ T4325] legousbtower 2-1:14.228: interrupt endpoints not found
[ 2546.326628][T29674] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[ 2546.347737][T29674] usb 1-1: config 0 has no interface number 0
[ 2546.372070][T29674] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2546.397089][T29674] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 2546.407960][T29674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2546.416420][T29674] usb 1-1: Product: syz
[ 2546.421100][T29674] usb 1-1: Manufacturer: syz
[ 2546.430093][T29674] usb 1-1: SerialNumber: syz
[ 2546.445951][T29674] usb 1-1: config 0 descriptor??
[ 2546.477334][T29674] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[ 2547.530507][    C1] net_ratelimit: 22 callbacks suppressed
[ 2548.091103][T29674] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 2548.291038][T29674] usb 6-1: Using ep0 maxpacket: 8
[ 2548.299832][T29674] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2548.346571][T29674] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2548.374176][T29674] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 2548.403582][T29674] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 2548.449106][T29674] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 2548.494243][T29674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2548.526171][T29674] hub 6-1:1.0: bad descriptor, ignoring hub
[ 2548.594495][T29674] hub: probe of 6-1:1.0 failed with error -5
[ 2548.622212][T29674] cdc_wdm 6-1:1.0: skipping garbage
[ 2548.627757][T29674] cdc_wdm 6-1:1.0: skipping garbage
[ 2548.721225][ T4307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5429'.
[ 2548.745235][    C0] usb 1-1: yurex_control_callback - control failed: -2
[ 2548.767784][T29674] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device
[ 2548.780486][ T4329] usb 1-1: USB disconnect, device number 19
[ 2548.798086][T29674] cdc_wdm 6-1:1.0: Unknown control protocol
[ 2548.816059][ T4329] yurex 1-1:0.50: USB YUREX #0 now disconnected
[ 2548.903957][   T26] usb 2-1: USB disconnect, device number 15
[ 2549.092062][T29674] usb 6-1: USB disconnect, device number 15
[ 2549.418742][ T4323] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5434'.
[ 2549.504900][ T4328] binder: 4324:4328 ioctl 4018620d 0 returned -22
[ 2549.840507][T29674] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 2549.948789][ T4334] device syzkaller0 entered promiscuous mode
[ 2550.046375][T29674] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[ 2550.067797][T29674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2550.258541][ T4342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5441'.
[ 2550.326379][T29674] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[ 2550.590763][   T26] usb 1-1: USB disconnect, device number 20
[ 2551.030236][ T4371] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5451'.
[ 2552.493325][ T4382] binder: 4381:4382 ioctl 4018620d 0 returned -22
[ 2552.604939][ T4385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5455'.
[ 2552.730558][    C0] net_ratelimit: 15 callbacks suppressed
[ 2552.885141][ T4394] md: could not open device unknown-block(1,0).
[ 2553.179552][ T4403] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5461'.
[ 2553.191410][ T4408] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5462'.
[ 2553.720530][ T4325] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 2553.766172][ T4426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5468'.
[ 2553.922544][ T4325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[ 2554.003875][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2554.267958][ T4325] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[ 2554.286225][ T4439] md: could not open device unknown-block(1,0).
[ 2554.534144][ T8782] usb 2-1: USB disconnect, device number 16
[ 2554.994118][ T4461] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5477'.
[ 2555.249565][ T4468] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5480'.
[ 2555.294753][ T4467] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5481'.
[ 2555.384031][ T4470] md: could not open device unknown-block(1,0).
[ 2555.850862][   T26] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 2556.042465][   T26] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[ 2556.061836][   T26] usb 6-1: config 0 has no interface number 0
[ 2556.068059][   T26] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2556.134126][   T26] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 2556.155867][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2556.175611][   T26] usb 6-1: Product: syz
[ 2556.179842][   T26] usb 6-1: Manufacturer: syz
[ 2556.217045][   T26] usb 6-1: SerialNumber: syz
[ 2556.255440][   T26] usb 6-1: config 0 descriptor??
[ 2556.317445][ T4501] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5493'.
[ 2556.343979][   T26] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[ 2556.353846][ T4503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5495'.
[ 2556.867993][   T26] usb 6-1: USB disconnect, device number 16
[ 2557.366513][ T4518] md: could not open device unknown-block(1,0).
[ 2558.490446][    C1] net_ratelimit: 21 callbacks suppressed
[ 2558.550314][   T26] yurex 6-1:0.50: USB YUREX #0 now disconnected
[ 2559.546110][ T4545] binder: BINDER_SET_CONTEXT_MGR already set
[ 2559.567892][ T4545] binder: 4544:4545 ioctl 4018620d 2000000002c0 returned -16
[ 2559.704667][ T4547] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5507'.
[ 2559.910112][ T4558] md: could not open device unknown-block(1,0).
[ 2560.120449][ T4325] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 2560.240629][T29674] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 2560.340605][ T4325] usb 4-1: Using ep0 maxpacket: 16
[ 2560.373072][ T4325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2560.506147][ T4325] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 2560.680103][ T4325] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2560.807701][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2560.939137][ T4325] usb 4-1: config 0 descriptor??
[ 2560.986159][ T4325] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2561.123139][T29674] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[ 2561.137372][T29674] usb 1-1: config 0 has no interface number 0
[ 2561.144679][T29674] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2561.181307][T29674] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 2561.200551][T29674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2561.217435][T29674] usb 1-1: Product: syz
[ 2561.222421][T29674] usb 1-1: Manufacturer: syz
[ 2561.227076][T29674] usb 1-1: SerialNumber: syz
[ 2561.252732][T29674] usb 1-1: config 0 descriptor??
[ 2561.289694][T29674] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[ 2561.370592][  T955] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 2561.593102][  T955] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[ 2561.616988][  T955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2561.748472][T29674] usb 1-1: USB disconnect, device number 21
[ 2561.877097][  T955] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[ 2562.137645][ T8554] usb 6-1: USB disconnect, device number 17
[ 2562.307404][ T4595] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5522'.
[ 2562.464516][ T4597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5523'.
[ 2562.737752][ T4600] md: could not open device unknown-block(1,0).
[ 2562.894399][ T8554] usb 4-1: USB disconnect, device number 18
[ 2562.938661][ T4604] FAULT_INJECTION: forcing a failure.
[ 2562.938661][ T4604] name failslab, interval 1, probability 0, space 0, times 0
[ 2562.952563][T29674] yurex 1-1:0.50: USB YUREX #0 now disconnected
[ 2563.040238][ T4604] CPU: 1 PID: 4604 Comm: syz.5.5525 Not tainted syzkaller #0
[ 2563.047666][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2563.057777][ T4604] Call Trace:
[ 2563.057789][ T4604]  <TASK>
[ 2563.057800][ T4604]  dump_stack_lvl+0x188/0x24e
[ 2563.064022][ T4604]  ? show_regs_print_info+0x12/0x12
[ 2563.073912][ T4604]  ? load_image+0x410/0x410
[ 2563.078481][ T4604]  ? __might_sleep+0xd0/0xd0
[ 2563.083124][ T4604]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2563.088204][ T4604]  should_fail_ex+0x390/0x4c0
[ 2563.092947][ T4604]  should_failslab+0x5/0x20
[ 2563.097499][ T4604]  slab_pre_alloc_hook+0x59/0x300
[ 2563.102576][ T4604]  ? mutex_lock_nested+0x10/0x10
[ 2563.107577][ T4604]  ? fanout_add+0x1c8/0x10c0
[ 2563.112205][ T4604]  __kmem_cache_alloc_node+0x4f/0x270
[ 2563.117605][ T4604]  ? fanout_add+0x1c8/0x10c0
[ 2563.122222][ T4604]  kmalloc_trace+0x26/0xe0
[ 2563.122248][ T4604]  fanout_add+0x1c8/0x10c0
[ 2563.122286][ T4604]  ? _copy_from_user+0x10b/0x170
[ 2563.131162][ T4604]  packet_setsockopt+0xa83/0x1230
[ 2563.131200][ T4604]  ? packet_ioctl+0x240/0x240
[ 2563.141202][ T4604]  ? __fget_files+0x28/0x460
[ 2563.141248][ T4604]  ? aa_sk_perm+0x81f/0x950
[ 2563.150568][ T4604]  ? aa_af_perm+0x340/0x340
[ 2563.150595][ T4604]  ? __fget_files+0x3fc/0x460
[ 2563.150632][ T4604]  ? aa_sock_opt_perm+0x74/0x100
[ 2563.159677][ T4604]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 2563.169293][ T4604]  ? security_socket_setsockopt+0x7a/0xa0
[ 2563.180570][ T4604]  ? packet_ioctl+0x240/0x240
[ 2563.180608][ T4604]  __sys_setsockopt+0x2bf/0x3d0
[ 2563.190145][ T4604]  __x64_sys_setsockopt+0xb1/0xc0
[ 2563.190177][ T4604]  do_syscall_64+0x4c/0xa0
[ 2563.199628][ T4604]  ? clear_bhb_loop+0x60/0xb0
[ 2563.199662][ T4604]  ? clear_bhb_loop+0x60/0xb0
[ 2563.209355][ T4604]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2563.209388][ T4604] RIP: 0033:0x7f28ff59e199
[ 2563.219705][ T4604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2563.219729][ T4604] RSP: 002b:00007f29003bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 2563.247813][ T4604] RAX: ffffffffffffffda RBX: 00007f28ff825fa0 RCX: 00007f28ff59e199
[ 2563.247834][ T4604] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003
[ 2563.263783][ T4604] RBP: 00007f28ff6358e0 R08: 0000000000000004 R09: 0000000000000000
[ 2563.263800][ T4604] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2563.263816][ T4604] R13: 00007f28ff826038 R14: 00007f28ff825fa0 R15: 00007fff26c663f8
[ 2563.263889][ T4604]  </TASK>
[ 2563.323318][ T4606] FAULT_INJECTION: forcing a failure.
[ 2563.323318][ T4606] name failslab, interval 1, probability 0, space 0, times 0
[ 2563.363755][ T4606] CPU: 1 PID: 4606 Comm: syz.1.5526 Not tainted syzkaller #0
[ 2563.371182][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2563.371199][ T4606] Call Trace:
[ 2563.371208][ T4606]  <TASK>
[ 2563.371217][ T4606]  dump_stack_lvl+0x188/0x24e
[ 2563.371252][ T4606]  ? show_regs_print_info+0x12/0x12
[ 2563.371280][ T4606]  ? load_image+0x410/0x410
[ 2563.384639][ T4606]  ? __might_sleep+0xd0/0xd0
[ 2563.392257][ T4606]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2563.392295][ T4606]  should_fail_ex+0x390/0x4c0
[ 2563.402022][ T4606]  should_failslab+0x5/0x20
[ 2563.402050][ T4606]  slab_pre_alloc_hook+0x59/0x300
[ 2563.411696][ T4606]  ? call_usermodehelper_setup+0x8a/0x260
[ 2563.411800][ T4606]  __kmem_cache_alloc_node+0x4f/0x270
[ 2563.421007][ T4606]  ? call_usermodehelper_setup+0x8a/0x260
[ 2563.421043][ T4606]  kmalloc_trace+0x26/0xe0
[ 2563.421067][ T4606]  call_usermodehelper_setup+0x8a/0x260
[ 2563.431861][ T4606]  ? __request_module+0xa00/0xa00
[ 2563.431908][ T4606]  __request_module+0x406/0xa00
[ 2563.443031][ T4606]  ? do_vfs_ioctl+0x1be3/0x1d40
[ 2563.443070][ T4606]  ? copy_regset_to_user+0x1f0/0x1f0
[ 2563.453077][ T4606]  ? apparmor_capable+0x12c/0x190
[ 2563.453111][ T4606]  ? bpf_lsm_capable+0x5/0x10
[ 2563.453139][ T4606]  ? security_capable+0x85/0xb0
[ 2563.453166][ T4606]  ? capable+0x84/0xe0
[ 2563.463034][ T4606]  ? dev_load+0x1d/0x1e0
[ 2563.463066][ T4606]  ? wext_ioctl_dispatch+0x470/0x470
[ 2563.463091][ T4606]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2563.473235][ T4606]  wext_ioctl_dispatch+0xaa/0x470
[ 2563.473264][ T4606]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2563.473292][ T4606]  wext_handle_ioctl+0x114/0x1d0
[ 2563.483017][ T4606]  ? call_commit_handler+0xf0/0xf0
[ 2563.483058][ T4606]  sock_ioctl+0x143/0x700
[ 2563.483089][ T4606]  ? sock_poll+0x420/0x420
[ 2563.492015][ T4606]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2563.501531][ T4606]  ? security_file_ioctl+0x7c/0xa0
[ 2563.512116][ T4606]  ? sock_poll+0x420/0x420
[ 2563.512147][ T4606]  __se_sys_ioctl+0xfa/0x170
[ 2563.522732][ T4606]  do_syscall_64+0x4c/0xa0
[ 2563.532196][ T4606]  ? clear_bhb_loop+0x60/0xb0
[ 2563.532223][ T4606]  ? clear_bhb_loop+0x60/0xb0
[ 2563.532251][ T4606]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2563.541633][ T4606] RIP: 0033:0x7f038ed9e199
[ 2563.541656][ T4606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2563.541676][ T4606] RSP: 002b:00007f038fc19028 EFLAGS: 00000246
[ 2563.541692][ T4606]  ORIG_RAX: 0000000000000010
[ 2563.541703][ T4606] RAX: ffffffffffffffda RBX: 00007f038f025fa0 RCX: 00007f038ed9e199
[ 2563.546833][ T4606] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004
[ 2563.555845][ T4606] RBP: 00007f038ee358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2563.564975][ T4606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2563.575553][ T4606] R13: 00007f038f026038 R14: 00007f038f025fa0 R15: 00007fff4ce210b8
[ 2563.575586][ T4606]  </TASK>
[ 2563.666379][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5527'.
[ 2563.850425][    C0] net_ratelimit: 17 callbacks suppressed
[ 2564.314832][ T4632] binder: BINDER_SET_CONTEXT_MGR already set
[ 2564.331687][ T4632] binder: 4629:4632 ioctl 4018620d 2000000002c0 returned -16
[ 2564.354697][ T4625] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5534'.
[ 2564.500733][T29674] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 2564.560016][ T4637] FAULT_INJECTION: forcing a failure.
[ 2564.560016][ T4637] name failslab, interval 1, probability 0, space 0, times 0
[ 2564.599301][ T4637] CPU: 1 PID: 4637 Comm: syz.3.5540 Not tainted syzkaller #0
[ 2564.606782][ T4637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2564.616883][ T4637] Call Trace:
[ 2564.620214][ T4637]  <TASK>
[ 2564.623202][ T4637]  dump_stack_lvl+0x188/0x24e
[ 2564.627966][ T4637]  ? show_regs_print_info+0x12/0x12
[ 2564.633229][ T4637]  ? load_image+0x410/0x410
[ 2564.637802][ T4637]  ? __might_sleep+0xd0/0xd0
[ 2564.642434][ T4637]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2564.642477][ T4637]  should_fail_ex+0x390/0x4c0
[ 2564.652219][ T4637]  should_failslab+0x5/0x20
[ 2564.652243][ T4637]  slab_pre_alloc_hook+0x59/0x300
[ 2564.652272][ T4637]  ? __request_module+0x338/0xa00
[ 2564.661831][ T4637]  __kmem_cache_alloc_node+0x4f/0x270
[ 2564.661863][ T4637]  ? __request_module+0x338/0xa00
[ 2564.661895][ T4637]  __kmalloc_node_track_caller+0xa0/0x240
[ 2564.672307][ T4637]  kstrdup+0x37/0x70
[ 2564.672344][ T4637]  __request_module+0x338/0xa00
[ 2564.683129][ T4637]  ? do_vfs_ioctl+0x1be3/0x1d40
[ 2564.691912][ T4637]  ? copy_regset_to_user+0x1f0/0x1f0
[ 2564.702084][ T4637]  ? apparmor_capable+0x12c/0x190
[ 2564.702131][ T4637]  ? bpf_lsm_capable+0x5/0x10
[ 2564.711860][ T4637]  ? security_capable+0x85/0xb0
[ 2564.716740][ T4637]  ? capable+0x84/0xe0
[ 2564.716770][ T4637]  ? dev_load+0x1d/0x1e0
[ 2564.725084][ T4637]  ? wext_ioctl_dispatch+0x470/0x470
[ 2564.725118][ T4637]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2564.735962][ T4637]  wext_ioctl_dispatch+0xaa/0x470
[ 2564.741019][ T4637]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2564.741049][ T4637]  wext_handle_ioctl+0x114/0x1d0
[ 2564.741075][ T4637]  ? call_commit_handler+0xf0/0xf0
[ 2564.751595][ T4637]  sock_ioctl+0x143/0x700
[ 2564.761028][ T4637]  ? sock_poll+0x420/0x420
[ 2564.761071][ T4637]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2564.770446][ T4637]  ? security_file_ioctl+0x7c/0xa0
[ 2564.770479][ T4637]  ? sock_poll+0x420/0x420
[ 2564.780021][ T4637]  __se_sys_ioctl+0xfa/0x170
[ 2564.780063][ T4637]  do_syscall_64+0x4c/0xa0
[ 2564.789174][ T4637]  ? clear_bhb_loop+0x60/0xb0
[ 2564.793892][ T4637]  ? clear_bhb_loop+0x60/0xb0
[ 2564.798597][ T4637]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2564.804519][ T4637] RIP: 0033:0x7f204979e199
[ 2564.808961][ T4637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2564.828612][ T4637] RSP: 002b:00007f204a656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2564.837092][ T4637] RAX: ffffffffffffffda RBX: 00007f2049a25fa0 RCX: 00007f204979e199
[ 2564.845093][ T4637] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004
[ 2564.853090][ T4637] RBP: 00007f20498358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2564.861083][ T4637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2564.869078][ T4637] R13: 00007f2049a26038 R14: 00007f2049a25fa0 R15: 00007ffeea215a58
[ 2564.877114][ T4637]  </TASK>
[ 2564.887829][T29674] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[ 2564.902034][T29674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2565.096110][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5542'.
[ 2565.137365][T29674] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[ 2565.180076][T29674] usb 1-1: USB disconnect, device number 22
[ 2565.508062][ T4657] device syzkaller1 entered promiscuous mode
[ 2566.034779][ T4669] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5551'.
[ 2566.180545][ T8782] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 2566.380487][ T8782] usb 4-1: Using ep0 maxpacket: 8
[ 2566.414605][ T8782] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2566.446968][ T8782] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2566.447182][ T4682] binder: 4681:4682 ioctl c0306201 0 returned -14
[ 2566.470023][ T8782] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 2566.506846][ T4683] binder: BINDER_SET_CONTEXT_MGR already set
[ 2566.516778][ T8782] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 2566.546350][ T8782] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 2566.560271][ T4683] binder: 4681:4683 ioctl 4018620d 2000000002c0 returned -16
[ 2566.573607][ T8782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2566.619772][ T8782] hub 4-1:1.0: bad descriptor, ignoring hub
[ 2566.636179][ T8782] hub: probe of 4-1:1.0 failed with error -5
[ 2566.679303][ T8782] cdc_wdm 4-1:1.0: skipping garbage
[ 2566.691300][ T8782] cdc_wdm 4-1:1.0: skipping garbage
[ 2566.718704][ T8782] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 2566.719915][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5556'.
[ 2566.726723][ T8782] cdc_wdm 4-1:1.0: Unknown control protocol
[ 2566.983176][ T8782] usb 4-1: USB disconnect, device number 19
[ 2567.134712][ T4691] device syzkaller1 entered promiscuous mode
[ 2567.208460][ T4695] rdma_rxe: rxe_register_device failed with error -23
[ 2567.259034][ T4695] rdma_rxe: failed to add ipvlan1
[ 2567.642008][ T4704] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5565'.
[ 2567.697953][ T4711] binder: 4710:4711 ioctl c0306201 0 returned -14
[ 2567.789989][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5568'.
[ 2568.404603][ T4729] device syzkaller1 entered promiscuous mode
[ 2568.480658][T29674] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 2568.500881][ T8782] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 2568.671199][T29674] usb 1-1: Using ep0 maxpacket: 16
[ 2568.688062][T29674] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 2568.701441][ T8782] usb 2-1: Using ep0 maxpacket: 32
[ 2568.719125][ T8782] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2568.749418][ T8782] usb 2-1: config 14 has an invalid interface number: 57 but max is 0
[ 2568.773454][T29674] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2568.782725][ T8782] usb 2-1: config 14 has no interface number 0
[ 2568.782761][ T8782] usb 2-1: config 14 interface 57 has no altsetting 0
[ 2568.806716][T29674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2568.825978][ T8782] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2568.849100][T29674] usb 1-1: config 0 descriptor??
[ 2568.860636][ T8782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2568.875783][T29674] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2568.895355][ T8782] usb 2-1: Product: syz
[ 2568.899573][ T8782] usb 2-1: Manufacturer: syz
[ 2568.924801][ T8782] usb 2-1: SerialNumber: syz
[ 2569.176850][ T8782] legousbtower 2-1:14.57: interrupt endpoints not found
[ 2569.225668][ T8782] usb 2-1: USB disconnect, device number 17
[ 2569.352789][ T4747] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5581'.
[ 2569.530434][    C1] net_ratelimit: 22 callbacks suppressed
[ 2570.034372][ T4758] FAULT_INJECTION: forcing a failure.
[ 2570.034372][ T4758] name fail_futex, interval 1, probability 0, space 0, times 1
[ 2570.068473][ T4758] CPU: 0 PID: 4758 Comm: syz.5.5585 Not tainted syzkaller #0
[ 2570.075938][ T4758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2570.086049][ T4758] Call Trace:
[ 2570.089379][ T4758]  <TASK>
[ 2570.092351][ T4758]  dump_stack_lvl+0x188/0x24e
[ 2570.097105][ T4758]  ? show_regs_print_info+0x12/0x12
[ 2570.102369][ T4758]  ? load_image+0x410/0x410
[ 2570.106943][ T4758]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 2570.112644][ T4758]  ? mutex_unlock+0x10/0x10
[ 2570.117211][ T4758]  should_fail_ex+0x390/0x4c0
[ 2570.121955][ T4758]  get_futex_key+0x1b1/0x1000
[ 2570.126747][ T4758]  ? __rtnl_unlock+0xc2/0xe0
[ 2570.131402][ T4758]  ? iw_handler_get_iwstats+0x240/0x240
[ 2570.137010][ T4758]  ? futex_setup_timer+0xc0/0xc0
[ 2570.142001][ T4758]  ? netdev_refcnt_read+0x50/0x50
[ 2570.147083][ T4758]  futex_wake+0x123/0x4f0
[ 2570.151471][ T4758]  ? ioctl_standard_call+0x18d/0x250
[ 2570.156810][ T4758]  ? futex_wake_mark+0x150/0x150
[ 2570.161806][ T4758]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2570.167417][ T4758]  ? wext_handle_ioctl+0x141/0x1d0
[ 2570.172575][ T4758]  do_futex+0x2e2/0x320
[ 2570.176767][ T4758]  ? __ia32_sys_get_robust_list+0x100/0x100
[ 2570.182714][ T4758]  __se_sys_futex+0x381/0x410
[ 2570.187423][ T4758]  ? __x64_sys_futex+0xf0/0xf0
[ 2570.192225][ T4758]  ? __x64_sys_futex+0x1d/0xf0
[ 2570.197018][ T4758]  do_syscall_64+0x4c/0xa0
[ 2570.201465][ T4758]  ? clear_bhb_loop+0x60/0xb0
[ 2570.206173][ T4758]  ? clear_bhb_loop+0x60/0xb0
[ 2570.210884][ T4758]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2570.216802][ T4758] RIP: 0033:0x7f28ff59e199
[ 2570.221247][ T4758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2570.240883][ T4758] RSP: 002b:00007f29003bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 2570.249324][ T4758] RAX: ffffffffffffffda RBX: 00007f28ff825fa8 RCX: 00007f28ff59e199
[ 2570.257323][ T4758] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f28ff825fac
[ 2570.265325][ T4758] RBP: 00007f28ff825fa0 R08: 0000bb0e309b08cb R09: 0000000000000000
[ 2570.273316][ T4758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2570.273335][ T4758] R13: 00007f28ff826038 R14: 00007fff26c66310 R15: 00007fff26c663f8
[ 2570.289320][ T4758]  </TASK>
[ 2570.294952][ T8782] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 2570.460547][T31656] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 2570.493256][ T8782] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 2570.506192][ T8782] usb 2-1: config 0 has no interface number 0
[ 2570.524899][ T8782] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2570.563342][ T8782] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 2570.588016][ T8782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2570.605306][ T8782] usb 2-1: Product: syz
[ 2570.614216][ T8782] usb 2-1: Manufacturer: syz
[ 2570.624558][ T8782] usb 2-1: SerialNumber: syz
[ 2570.646880][ T8782] usb 2-1: config 0 descriptor??
[ 2570.699177][T31656] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2570.712655][ T8782] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[ 2570.720427][T31656] usb 4-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 2570.776814][T31656] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2570.820824][T31656] usb 4-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 2570.876766][T31656] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 2570.900703][T31656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2570.940412][T31656] usb 4-1: Product: syz
[ 2570.944660][T31656] usb 4-1: Manufacturer: syz
[ 2570.949417][T31656] usb 4-1: SerialNumber: syz
[ 2570.989585][T31656] ti_usb_3410_5052 4-1:2.0: required endpoints missing
[ 2571.208431][ T8554] usb 4-1: USB disconnect, device number 20
[ 2571.304233][T31656] usb 1-1: USB disconnect, device number 23
[ 2571.344765][ T4765] binder: 4764:4765 ioctl c0306201 0 returned -14
[ 2571.871375][ T4772] md: could not open device unknown-block(1,0).
[ 2572.003933][ T4774] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5592'.
[ 2572.473623][ T4782] fuse: Bad value for 'fd'
[ 2572.793882][ T4783] tc action pedit 'at' offset 5 out of bounds
[ 2572.800867][ T4783] tc action pedit 'at' offset 5 out of bounds
[ 2572.807058][ T4783] tc action pedit 'at' offset 5 out of bounds
[ 2572.813335][ T4783] tc action pedit 'at' offset 5 out of bounds
[ 2572.819442][ T4783] tc action pedit 'at' offset 5 out of bounds
[ 2572.825581][ T4783] tc action pedit 'at' offset 5 out of bounds
[ 2572.831733][ T4783] tc action pedit 'at' offset 5 out of bounds
[ 2572.837842][ T4783] tc action pedit 'at' offset 5 out of bounds
[ 2572.844022][ T4783] tc action pedit 'at' offset 5 out of bounds
[ 2572.850140][ T4783] tc action pedit 'at' offset 5 out of bounds
[ 2572.895423][ T4792] FAULT_INJECTION: forcing a failure.
[ 2572.895423][ T4792] name fail_futex, interval 1, probability 0, space 0, times 0
[ 2572.947390][ T4792] CPU: 0 PID: 4792 Comm: syz.7.5599 Not tainted syzkaller #0
[ 2572.954861][ T4792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2572.964996][ T4792] Call Trace:
[ 2572.968320][ T4792]  <TASK>
[ 2572.971311][ T4792]  dump_stack_lvl+0x188/0x24e
[ 2572.976032][ T4792]  ? show_regs_print_info+0x12/0x12
[ 2572.976066][ T4792]  ? load_image+0x410/0x410
[ 2572.986168][ T4792]  ? psi_task_change+0xdc/0x240
[ 2572.991087][ T4792]  should_fail_ex+0x390/0x4c0
[ 2572.995828][ T4792]  get_futex_key+0x1b1/0x1000
[ 2573.000563][ T4792]  ? futex_setup_timer+0xc0/0xc0
[ 2573.005545][ T4792]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 2573.011567][ T4792]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2573.011604][ T4792]  ? lock_chain_count+0x20/0x20
[ 2573.011641][ T4792]  futex_wait_setup+0xb8/0x270
[ 2573.026341][ T4792]  ? futex_wait_multiple+0x920/0x920
[ 2573.031680][ T4792]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2573.037620][ T4792]  ? _raw_spin_unlock+0x40/0x40
[ 2573.042509][ T4792]  futex_wait+0x1b8/0x5c0
[ 2573.042549][ T4792]  ? futex_wait_setup+0x270/0x270
[ 2573.052023][ T4792]  ? packet_ioctl+0x240/0x240
[ 2573.056763][ T4792]  ? __fget_files+0x28/0x460
[ 2573.061398][ T4792]  do_futex+0x310/0x320
[ 2573.061430][ T4792]  ? __ia32_sys_get_robust_list+0x100/0x100
[ 2573.061469][ T4792]  __se_sys_futex+0x381/0x410
[ 2573.061514][ T4792]  ? __x64_sys_futex+0xf0/0xf0
[ 2573.071549][ T4792]  ? __x64_sys_futex+0x1d/0xf0
[ 2573.071581][ T4792]  do_syscall_64+0x4c/0xa0
[ 2573.071609][ T4792]  ? clear_bhb_loop+0x60/0xb0
[ 2573.071636][ T4792]  ? clear_bhb_loop+0x60/0xb0
[ 2573.071664][ T4792]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2573.071686][ T4792] RIP: 0033:0x7f888d19e199
[ 2573.095510][ T4792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2573.095535][ T4792] RSP: 002b:00007f888e0570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 2573.095561][ T4792] RAX: ffffffffffffffda RBX: 00007f888d425fa8 RCX: 00007f888d19e199
[ 2573.106136][ T4792] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f888d425fa8
[ 2573.130362][ T4792] RBP: 00007f888d425fa0 R08: 0000000000000000 R09: 0000000000000000
[ 2573.130385][ T4792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2573.130407][ T4792] R13: 00007f888d426038 R14: 00007ffedc7b4d10 R15: 00007ffedc7b4df8
[ 2573.130440][ T4792]  </TASK>
[ 2573.229855][ T8782] usb 2-1: USB disconnect, device number 18
[ 2573.257573][ T8782] yurex 2-1:0.50: USB YUREX #0 now disconnected
[ 2574.128862][ T4801] binder: 4799:4801 unknown command 1074553619
[ 2574.168196][ T4801] binder: 4799:4801 ioctl c0306201 2000000001c0 returned -22
[ 2574.196529][ T4803] binder: 4799:4803 unknown command 1074291477
[ 2574.254056][ T4803] binder: 4799:4803 ioctl c0306201 200000000340 returned -22
[ 2574.328113][ T4806] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5604'.
[ 2574.492789][T31656] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 2574.712973][T31656] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2574.730937][T31656] usb 1-1: config 2 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 2574.734120][    C0] net_ratelimit: 21 callbacks suppressed
[ 2574.776041][T31656] usb 1-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[ 2574.820092][T31656] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2574.849647][T31656] usb 1-1: config 2 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 2574.879930][T31656] usb 1-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[ 2574.944083][T31656] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 2574.966578][T31656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2575.003863][T31656] usb 1-1: Product: syz
[ 2575.014241][T31656] usb 1-1: Manufacturer: syz
[ 2575.021389][T31656] usb 1-1: SerialNumber: syz
[ 2575.061568][T31656] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected
[ 2575.092328][T31656] ti_usb_3410_5052 1-1:2.0: missing endpoints
[ 2575.268075][T31656] usb 1-1: USB disconnect, device number 24
[ 2575.680452][  T955] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 2575.882628][  T955] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[ 2575.914119][  T955] usb 4-1: config 0 has no interface number 0
[ 2575.920289][  T955] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2575.939760][  T955] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 2575.987130][  T955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2576.010548][  T955] usb 4-1: Product: syz
[ 2576.014817][  T955] usb 4-1: Manufacturer: syz
[ 2576.037582][  T955] usb 4-1: SerialNumber: syz
[ 2576.069172][  T955] usb 4-1: config 0 descriptor??
[ 2576.147214][  T955] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[ 2576.175097][ T4835] device syzkaller1 entered promiscuous mode
[ 2576.265243][ T4837] md: could not open device unknown-block(1,0).
[ 2576.699345][ T4844] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5618'.
[ 2577.923436][ T4866] FAULT_INJECTION: forcing a failure.
[ 2577.923436][ T4866] name failslab, interval 1, probability 0, space 0, times 0
[ 2577.968977][ T4866] CPU: 0 PID: 4866 Comm: syz.0.5624 Not tainted syzkaller #0
[ 2577.976448][ T4866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2577.986552][ T4866] Call Trace:
[ 2577.989874][ T4866]  <TASK>
[ 2577.992845][ T4866]  dump_stack_lvl+0x188/0x24e
[ 2577.997588][ T4866]  ? show_regs_print_info+0x12/0x12
[ 2578.002843][ T4866]  ? load_image+0x410/0x410
[ 2578.007410][ T4866]  ? __might_sleep+0xd0/0xd0
[ 2578.012054][ T4866]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2578.017134][ T4866]  should_fail_ex+0x390/0x4c0
[ 2578.021876][ T4866]  should_failslab+0x5/0x20
[ 2578.026423][ T4866]  slab_pre_alloc_hook+0x59/0x300
[ 2578.031505][ T4866]  ? cfg80211_connect+0x109d/0x20a0
[ 2578.036767][ T4866]  __kmem_cache_alloc_node+0x4f/0x270
[ 2578.042197][ T4866]  ? cfg80211_connect+0x109d/0x20a0
[ 2578.047448][ T4866]  __kmalloc+0xa3/0x240
[ 2578.051662][ T4866]  cfg80211_connect+0x109d/0x20a0
[ 2578.056769][ T4866]  cfg80211_mgd_wext_connect+0x41c/0x570
[ 2578.062460][ T4866]  cfg80211_mgd_wext_siwessid+0x364/0x490
[ 2578.068265][ T4866]  __cfg80211_wext_siwessid+0xbb/0x120
[ 2578.073776][ T4866]  ioctl_standard_iw_point+0x823/0xd50
[ 2578.079313][ T4866]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2578.084823][ T4866]  ? iw_handler_get_iwstats+0x240/0x240
[ 2578.090423][ T4866]  ? mutex_lock_nested+0x10/0x10
[ 2578.095415][ T4866]  ? full_name_hash+0x8e/0xe0
[ 2578.100143][ T4866]  ioctl_standard_call+0xaa/0x250
[ 2578.105222][ T4866]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2578.110729][ T4866]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2578.116230][ T4866]  wext_ioctl_dispatch+0x3da/0x470
[ 2578.121388][ T4866]  ? wext_ioctl_dispatch+0x470/0x470
[ 2578.126721][ T4866]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2578.132318][ T4866]  wext_handle_ioctl+0x114/0x1d0
[ 2578.137304][ T4866]  ? call_commit_handler+0xf0/0xf0
[ 2578.142477][ T4866]  sock_ioctl+0x143/0x700
[ 2578.146865][ T4866]  ? sock_poll+0x420/0x420
[ 2578.151344][ T4866]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2578.156337][ T4866]  ? security_file_ioctl+0x7c/0xa0
[ 2578.161505][ T4866]  ? sock_poll+0x420/0x420
[ 2578.165969][ T4866]  __se_sys_ioctl+0xfa/0x170
[ 2578.170615][ T4866]  do_syscall_64+0x4c/0xa0
[ 2578.175105][ T4866]  ? clear_bhb_loop+0x60/0xb0
[ 2578.179812][ T4866]  ? clear_bhb_loop+0x60/0xb0
[ 2578.184521][ T4866]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2578.184548][ T4866] RIP: 0033:0x7fe6c8d9e199
[ 2578.184569][ T4866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2578.184589][ T4866] RSP: 002b:00007fe6c9c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2578.194917][ T4866] RAX: ffffffffffffffda RBX: 00007fe6c9025fa0 RCX: 00007fe6c8d9e199
[ 2578.222954][ T4866] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004
[ 2578.222974][ T4866] RBP: 00007fe6c8e358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2578.222990][ T4866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2578.223004][ T4866] R13: 00007fe6c9026038 R14: 00007fe6c9025fa0 R15: 00007ffe9f93bb98
[ 2578.238981][ T4866]  </TASK>
[ 2578.337763][T29674] usb 4-1: USB disconnect, device number 21
[ 2578.379753][T29674] yurex 4-1:0.50: USB YUREX #0 now disconnected
[ 2578.721806][ T8782] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 2578.922715][ T8782] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2578.944689][ T8782] usb 2-1: config 2 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2578.972472][ T4877] device syzkaller1 entered promiscuous mode
[ 2579.011608][ T8782] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2579.032433][  T955] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 2579.046653][ T8782] usb 2-1: config 2 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2579.096121][ T8782] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 2579.116150][ T8782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2579.146327][ T8782] usb 2-1: Product: syz
[ 2579.156543][ T8782] usb 2-1: Manufacturer: syz
[ 2579.171884][ T8782] usb 2-1: SerialNumber: syz
[ 2579.234668][ T8782] ti_usb_3410_5052 2-1:2.0: required endpoints missing
[ 2579.250604][  T955] usb 6-1: Using ep0 maxpacket: 32
[ 2579.268508][  T955] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 2579.317778][  T955] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[ 2579.367796][  T955] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[ 2579.400250][  T955] usb 6-1: config 14 has no interface number 0
[ 2579.419697][  T955] usb 6-1: config 14 has no interface number 1
[ 2579.442387][  T955] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2579.458781][ T8782] usb 2-1: USB disconnect, device number 19
[ 2579.472437][  T955] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping
[ 2579.516737][  T955] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2579.556801][  T955] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2579.589604][  T955] usb 6-1: config 14 interface 57 has no altsetting 0
[ 2579.629382][  T955] usb 6-1: config 14 interface 228 has no altsetting 0
[ 2579.686634][  T955] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2579.710855][  T955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2579.729223][  T955] usb 6-1: Product: syz
[ 2579.738488][  T955] usb 6-1: Manufacturer: syz
[ 2579.756836][  T955] usb 6-1: SerialNumber: syz
[ 2579.881294][ T8554] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 2580.025671][ T4904] FAULT_INJECTION: forcing a failure.
[ 2580.025671][ T4904] name failslab, interval 1, probability 0, space 0, times 0
[ 2580.057662][ T4904] CPU: 1 PID: 4904 Comm: syz.7.5636 Not tainted syzkaller #0
[ 2580.065125][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2580.075237][ T4904] Call Trace:
[ 2580.078536][ T4904]  <TASK>
[ 2580.078548][ T4904]  dump_stack_lvl+0x188/0x24e
[ 2580.086187][ T4904]  ? show_regs_print_info+0x12/0x12
[ 2580.091417][ T4904]  ? load_image+0x410/0x410
[ 2580.095964][ T4904]  ? __might_sleep+0xd0/0xd0
[ 2580.100574][ T4904]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2580.101290][    C0] net_ratelimit: 28 callbacks suppressed
[ 2580.105649][ T4904]  should_fail_ex+0x390/0x4c0
[ 2580.115987][ T4904]  should_failslab+0x5/0x20
[ 2580.120512][ T4904]  slab_pre_alloc_hook+0x59/0x300
[ 2580.120541][ T4904]  ? __local_bh_enable_ip+0x136/0x1c0
[ 2580.120568][ T4904]  ? cfg80211_conn_scan+0x1c3/0xfe0
[ 2580.120601][ T4904]  __kmem_cache_alloc_node+0x4f/0x270
[ 2580.131016][ T4904]  ? cfg80211_conn_scan+0x1c3/0xfe0
[ 2580.131048][ T4904]  __kmalloc+0xa3/0x240
[ 2580.131072][ T4904]  cfg80211_conn_scan+0x1c3/0xfe0
[ 2580.141647][ T4904]  ? cfg80211_get_bss+0x50a/0x870
[ 2580.141698][ T4904]  cfg80211_connect+0x176e/0x20a0
[ 2580.141801][ T4904]  cfg80211_mgd_wext_connect+0x41c/0x570
[ 2580.151087][ T4904]  cfg80211_mgd_wext_siwessid+0x364/0x490
[ 2580.151120][ T4904]  __cfg80211_wext_siwessid+0xbb/0x120
[ 2580.151149][ T4904]  ioctl_standard_iw_point+0x823/0xd50
[ 2580.161211][ T4904]  ? rcu_is_watching+0x11/0xa0
[ 2580.161262][ T4904]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2580.161286][ T4904]  ? iw_handler_get_iwstats+0x240/0x240
[ 2580.171944][ T4904]  ? mutex_lock_nested+0x10/0x10
[ 2580.171979][ T4904]  ? full_name_hash+0x8e/0xe0
[ 2580.172009][ T4904]  ioctl_standard_call+0xaa/0x250
[ 2580.172036][ T4904]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2580.183231][ T4904]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2580.183258][ T4904]  wext_ioctl_dispatch+0x3da/0x470
[ 2580.183283][ T4904]  ? wext_ioctl_dispatch+0x470/0x470
[ 2580.183306][ T4904]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2580.193574][ T4904]  wext_handle_ioctl+0x114/0x1d0
[ 2580.193604][ T4904]  ? call_commit_handler+0xf0/0xf0
[ 2580.193645][ T4904]  sock_ioctl+0x143/0x700
[ 2580.204665][ T4904]  ? sock_poll+0x420/0x420
[ 2580.204705][ T4904]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2580.204737][ T4904]  ? security_file_ioctl+0x7c/0xa0
[ 2580.214370][ T4904]  ? sock_poll+0x420/0x420
[ 2580.224874][ T4904]  __se_sys_ioctl+0xfa/0x170
[ 2580.224917][ T4904]  do_syscall_64+0x4c/0xa0
[ 2580.224944][ T4904]  ? clear_bhb_loop+0x60/0xb0
[ 2580.293835][ T4904]  ? clear_bhb_loop+0x60/0xb0
[ 2580.298567][ T4904]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2580.304514][ T4904] RIP: 0033:0x7f888d19e199
[ 2580.308972][ T4904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2580.328631][ T4904] RSP: 002b:00007f888e057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2580.337076][ T4904] RAX: ffffffffffffffda RBX: 00007f888d425fa0 RCX: 00007f888d19e199
[ 2580.337100][ T4904] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003
[ 2580.353404][ T4904] RBP: 00007f888d2358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2580.353430][ T4904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2580.353445][ T4904] R13: 00007f888d426038 R14: 00007f888d425fa0 R15: 00007ffedc7b4df8
[ 2580.353480][ T4904]  </TASK>
[ 2580.399792][  T955] legousbtower 6-1:14.57: interrupt endpoints not found
[ 2580.551934][ T8554] usb 1-1: Using ep0 maxpacket: 8
[ 2580.569544][ T8554] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2580.594987][  T955] legousbtower 6-1:14.228: interrupt endpoints not found
[ 2580.610469][ T8554] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2580.670480][ T8554] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 2580.711968][ T8554] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 2580.741072][ T8554] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 2580.770428][ T8554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2580.822478][ T8554] hub 1-1:1.0: bad descriptor, ignoring hub
[ 2580.853566][ T8554] hub: probe of 1-1:1.0 failed with error -5
[ 2580.877024][ T8554] cdc_wdm 1-1:1.0: skipping garbage
[ 2580.894979][ T8554] cdc_wdm 1-1:1.0: skipping garbage
[ 2580.917425][ T8554] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 2580.935469][ T8554] cdc_wdm 1-1:1.0: Unknown control protocol
[ 2581.140870][ T8554] usb 1-1: USB disconnect, device number 25
[ 2581.220403][  T955] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 2581.423191][  T955] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[ 2581.436183][  T955] usb 4-1: config 0 has no interface number 0
[ 2581.450517][  T955] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2581.477927][  T955] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 2581.497930][  T955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2581.525436][  T955] usb 4-1: Product: syz
[ 2581.538437][  T955] usb 4-1: Manufacturer: syz
[ 2581.548899][  T955] usb 4-1: SerialNumber: syz
[ 2581.578361][  T955] usb 4-1: config 0 descriptor??
[ 2581.619457][  T955] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[ 2581.887780][  T955] usb 6-1: USB disconnect, device number 18
[ 2582.709025][ T4946] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5648'.
[ 2582.745191][ T4948] FAULT_INJECTION: forcing a failure.
[ 2582.745191][ T4948] name failslab, interval 1, probability 0, space 0, times 0
[ 2582.770559][ T8782] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 2582.775285][ T4948] CPU: 1 PID: 4948 Comm: syz.1.5649 Not tainted syzkaller #0
[ 2582.785580][ T4948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2582.795653][ T4948] Call Trace:
[ 2582.795666][ T4948]  <TASK>
[ 2582.795676][ T4948]  dump_stack_lvl+0x188/0x24e
[ 2582.801915][ T4948]  ? show_regs_print_info+0x12/0x12
[ 2582.811822][ T4948]  ? load_image+0x410/0x410
[ 2582.811865][ T4948]  ? __might_sleep+0xd0/0xd0
[ 2582.821001][ T4948]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2582.826094][ T4948]  should_fail_ex+0x390/0x4c0
[ 2582.830847][ T4948]  should_failslab+0x5/0x20
[ 2582.835397][ T4948]  slab_pre_alloc_hook+0x59/0x300
[ 2582.840477][ T4948]  ? cfg80211_connect+0x109d/0x20a0
[ 2582.845712][ T4948]  __kmem_cache_alloc_node+0x4f/0x270
[ 2582.851119][ T4948]  ? cfg80211_connect+0x109d/0x20a0
[ 2582.851153][ T4948]  __kmalloc+0xa3/0x240
[ 2582.851179][ T4948]  cfg80211_connect+0x109d/0x20a0
[ 2582.851260][ T4948]  cfg80211_mgd_wext_connect+0x41c/0x570
[ 2582.860580][ T4948]  cfg80211_mgd_wext_siwessid+0x364/0x490
[ 2582.860615][ T4948]  __cfg80211_wext_siwessid+0xbb/0x120
[ 2582.860643][ T4948]  ioctl_standard_iw_point+0x823/0xd50
[ 2582.871310][ T4948]  ? rcu_is_watching+0x11/0xa0
[ 2582.871366][ T4948]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2582.871390][ T4948]  ? iw_handler_get_iwstats+0x240/0x240
[ 2582.882578][ T4948]  ? mutex_lock_nested+0x10/0x10
[ 2582.882614][ T4948]  ? full_name_hash+0x8e/0xe0
[ 2582.882644][ T4948]  ioctl_standard_call+0xaa/0x250
[ 2582.882669][ T4948]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2582.892902][ T4948]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2582.892928][ T4948]  wext_ioctl_dispatch+0x3da/0x470
[ 2582.892952][ T4948]  ? wext_ioctl_dispatch+0x470/0x470
[ 2582.903956][ T4948]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2582.913595][ T4948]  wext_handle_ioctl+0x114/0x1d0
[ 2582.924094][ T4948]  ? call_commit_handler+0xf0/0xf0
[ 2582.955726][ T4948]  sock_ioctl+0x143/0x700
[ 2582.960094][ T4948]  ? sock_poll+0x420/0x420
[ 2582.964551][ T4948]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2582.969547][ T4948]  ? security_file_ioctl+0x7c/0xa0
[ 2582.974691][ T4948]  ? sock_poll+0x420/0x420
[ 2582.979133][ T4948]  __se_sys_ioctl+0xfa/0x170
[ 2582.983761][ T4948]  do_syscall_64+0x4c/0xa0
[ 2582.988203][ T4948]  ? clear_bhb_loop+0x60/0xb0
[ 2582.992905][ T4948]  ? clear_bhb_loop+0x60/0xb0
[ 2582.997606][ T4948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2583.003524][ T4948] RIP: 0033:0x7f038ed9e199
[ 2583.007990][ T4948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2583.027725][ T4948] RSP: 002b:00007f038fc19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2583.036176][ T4948] RAX: ffffffffffffffda RBX: 00007f038f025fa0 RCX: 00007f038ed9e199
[ 2583.044184][ T4948] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003
[ 2583.052205][ T4948] RBP: 00007f038ee358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2583.060221][ T4948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2583.068221][ T4948] R13: 00007f038f026038 R14: 00007f038f025fa0 R15: 00007fff4ce210b8
[ 2583.076236][ T4948]  </TASK>
[ 2583.255926][ T8782] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2583.276671][ T8782] usb 1-1: config 2 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2583.317173][ T8782] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2583.334606][ T4954] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 2583.367428][ T8782] usb 1-1: config 2 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2583.415061][ T8782] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 2583.443688][ T8782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2583.463677][ T8782] usb 1-1: Product: syz
[ 2583.469177][ T8782] usb 1-1: Manufacturer: syz
[ 2583.478464][ T8782] usb 1-1: SerialNumber: syz
[ 2583.515251][ T8782] ti_usb_3410_5052 1-1:2.0: required endpoints missing
[ 2583.715727][ T8782] usb 1-1: USB disconnect, device number 26
[ 2583.723006][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2583.766023][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2583.831258][ T4329] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 2583.874473][ T8554] usb 4-1: USB disconnect, device number 22
[ 2583.923546][ T8554] yurex 4-1:0.50: USB YUREX #0 now disconnected
[ 2584.032769][ T4329] usb 6-1: Using ep0 maxpacket: 16
[ 2584.041861][ T4329] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 2584.058492][ T4329] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2584.068316][ T4329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2584.093633][ T4329] usb 6-1: config 0 descriptor??
[ 2584.124611][ T4329] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2584.770434][ T8554] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 2584.965095][ T8554] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2584.991376][ T8554] usb 4-1: config 2 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2585.028406][ T8554] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2585.054310][ T8554] usb 4-1: config 2 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2585.092222][ T8554] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 2585.119117][ T8554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2585.145594][ T8554] usb 4-1: Product: syz
[ 2585.154573][ T8554] usb 4-1: Manufacturer: syz
[ 2585.167669][ T8554] usb 4-1: SerialNumber: syz
[ 2585.206309][ T8554] ti_usb_3410_5052 4-1:2.0: required endpoints missing
[ 2585.407174][ T8554] usb 4-1: USB disconnect, device number 23
[ 2585.575204][ T4990] FAULT_INJECTION: forcing a failure.
[ 2585.575204][ T4990] name failslab, interval 1, probability 0, space 0, times 0
[ 2585.600434][ T4990] CPU: 1 PID: 4990 Comm: syz.1.5661 Not tainted syzkaller #0
[ 2585.607862][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2585.607878][ T4990] Call Trace:
[ 2585.607888][ T4990]  <TASK>
[ 2585.621257][ T4990]  dump_stack_lvl+0x188/0x24e
[ 2585.621296][ T4990]  ? show_regs_print_info+0x12/0x12
[ 2585.628918][ T4990]  ? load_image+0x410/0x410
[ 2585.628958][ T4990]  ? __might_sleep+0xd0/0xd0
[ 2585.638674][ T4990]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2585.648309][ T4990]  should_fail_ex+0x390/0x4c0
[ 2585.648354][ T4990]  should_failslab+0x5/0x20
[ 2585.657527][ T4990]  slab_pre_alloc_hook+0x59/0x300
[ 2585.657560][ T4990]  ? cfg80211_connect+0x109d/0x20a0
[ 2585.667783][ T4990]  __kmem_cache_alloc_node+0x4f/0x270
[ 2585.667821][ T4990]  ? cfg80211_connect+0x109d/0x20a0
[ 2585.678414][ T4990]  __kmalloc+0xa3/0x240
[ 2585.678467][ T4990]  cfg80211_connect+0x109d/0x20a0
[ 2585.678521][ T4990]  cfg80211_mgd_wext_connect+0x41c/0x570
[ 2585.678553][ T4990]  cfg80211_mgd_wext_siwessid+0x364/0x490
[ 2585.678596][ T4990]  __cfg80211_wext_siwessid+0xbb/0x120
[ 2585.687810][ T4990]  ioctl_standard_iw_point+0x823/0xd50
[ 2585.699209][ T4990]  ? rcu_is_watching+0x11/0xa0
[ 2585.710142][ T4990]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2585.720394][ T4990]  ? iw_handler_get_iwstats+0x240/0x240
[ 2585.720430][ T4990]  ? mutex_lock_nested+0x10/0x10
[ 2585.730924][ T4990]  ? full_name_hash+0x8e/0xe0
[ 2585.730958][ T4990]  ioctl_standard_call+0xaa/0x250
[ 2585.740674][ T4990]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2585.740703][ T4990]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2585.740727][ T4990]  wext_ioctl_dispatch+0x3da/0x470
[ 2585.740752][ T4990]  ? wext_ioctl_dispatch+0x470/0x470
[ 2585.751663][ T4990]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2585.751694][ T4990]  wext_handle_ioctl+0x114/0x1d0
[ 2585.751723][ T4990]  ? call_commit_handler+0xf0/0xf0
[ 2585.762154][ T4990]  sock_ioctl+0x143/0x700
[ 2585.772614][ T4990]  ? sock_poll+0x420/0x420
[ 2585.782103][ T4990]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2585.791629][ T4990]  ? security_file_ioctl+0x7c/0xa0
[ 2585.796775][ T4990]  ? sock_poll+0x420/0x420
[ 2585.801218][ T4990]  __se_sys_ioctl+0xfa/0x170
[ 2585.805846][ T4990]  do_syscall_64+0x4c/0xa0
[ 2585.810305][ T4990]  ? clear_bhb_loop+0x60/0xb0
[ 2585.815018][ T4990]  ? clear_bhb_loop+0x60/0xb0
[ 2585.819719][ T4990]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2585.825638][ T4990] RIP: 0033:0x7f038ed9e199
[ 2585.830078][ T4990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2585.849714][ T4990] RSP: 002b:00007f038fc19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2585.858152][ T4990] RAX: ffffffffffffffda RBX: 00007f038f025fa0 RCX: 00007f038ed9e199
[ 2585.866153][ T4990] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003
[ 2585.874169][ T4990] RBP: 00007f038ee358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2585.882163][ T4990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2585.890173][ T4990] R13: 00007f038f026038 R14: 00007f038f025fa0 R15: 00007fff4ce210b8
[ 2585.898187][ T4990]  </TASK>
[ 2585.901476][    C1] net_ratelimit: 22 callbacks suppressed
[ 2586.415277][ T4996] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5664'.
[ 2586.430614][ T8554] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[ 2586.578024][ T4329] usb 6-1: USB disconnect, device number 19
[ 2586.622606][ T8554] usb 2-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping
[ 2586.656024][ T8554] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2586.696430][ T8554] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2586.733188][ T8554] usb 2-1: Manufacturer: syz
[ 2586.753679][ T8554] usb 2-1: SerialNumber: syz
[ 2587.140510][ T4329] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 2587.332939][ T4329] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[ 2587.357411][ T4329] usb 6-1: config 0 has no interface number 0
[ 2587.390689][ T4329] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2587.427706][ T4329] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 2587.460694][ T4329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2587.499993][ T4329] usb 6-1: Product: syz
[ 2587.522170][ T4329] usb 6-1: Manufacturer: syz
[ 2587.541388][ T4329] usb 6-1: SerialNumber: syz
[ 2587.568284][ T4329] usb 6-1: config 0 descriptor??
[ 2587.604545][ T5019] FAULT_INJECTION: forcing a failure.
[ 2587.604545][ T5019] name failslab, interval 1, probability 0, space 0, times 0
[ 2587.652988][ T4329] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[ 2587.679432][ T5019] CPU: 0 PID: 5019 Comm: syz.3.5673 Not tainted syzkaller #0
[ 2587.686876][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2587.697001][ T5019] Call Trace:
[ 2587.700317][ T5019]  <TASK>
[ 2587.703288][ T5019]  dump_stack_lvl+0x188/0x24e
[ 2587.708023][ T5019]  ? lock_chain_count+0x20/0x20
[ 2587.712938][ T5019]  ? show_regs_print_info+0x12/0x12
[ 2587.718217][ T5019]  ? load_image+0x410/0x410
[ 2587.722778][ T5019]  ? queue_work_on+0x10c/0x1f0
[ 2587.727604][ T5019]  should_fail_ex+0x390/0x4c0
[ 2587.732344][ T5019]  should_failslab+0x5/0x20
[ 2587.736891][ T5019]  slab_pre_alloc_hook+0x59/0x300
[ 2587.741961][ T5019]  kmem_cache_alloc_node+0x5a/0x310
[ 2587.747187][ T5019]  ? __alloc_skb+0xf9/0x7d0
[ 2587.751718][ T5019]  __alloc_skb+0xf9/0x7d0
[ 2587.756070][ T5019]  wireless_send_event+0x2b7/0xc40
[ 2587.761210][ T5019]  ? mutex_unlock+0x10/0x10
[ 2587.765755][ T5019]  ? cfg80211_ibss_wext_join+0xa0f/0xc30
[ 2587.771420][ T5019]  ? wireless_nlevent_flush+0x100/0x100
[ 2587.776991][ T5019]  ? cfg80211_ibss_wext_siwessid+0x2ab/0x390
[ 2587.783002][ T5019]  ? __cfg80211_wext_siwessid+0xea/0x120
[ 2587.788664][ T5019]  ioctl_standard_iw_point+0x9f8/0xd50
[ 2587.794155][ T5019]  ? rcu_is_watching+0x11/0xa0
[ 2587.798957][ T5019]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2587.804446][ T5019]  ? iw_handler_get_iwstats+0x240/0x240
[ 2587.810023][ T5019]  ? mutex_lock_nested+0x10/0x10
[ 2587.814995][ T5019]  ? full_name_hash+0x8e/0xe0
[ 2587.819707][ T5019]  ioctl_standard_call+0xaa/0x250
[ 2587.824783][ T5019]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2587.830263][ T5019]  ? __cfg80211_wext_giwscan+0x30/0x30
[ 2587.835764][ T5019]  wext_ioctl_dispatch+0x3da/0x470
[ 2587.840911][ T5019]  ? wext_ioctl_dispatch+0x470/0x470
[ 2587.846231][ T5019]  ? iw_handler_get_private+0x1e0/0x1e0
[ 2587.851798][ T5019]  wext_handle_ioctl+0x114/0x1d0
[ 2587.856762][ T5019]  ? call_commit_handler+0xf0/0xf0
[ 2587.861912][ T5019]  sock_ioctl+0x143/0x700
[ 2587.866271][ T5019]  ? sock_poll+0x420/0x420
[ 2587.870722][ T5019]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2587.875691][ T5019]  ? security_file_ioctl+0x7c/0xa0
[ 2587.880854][ T5019]  ? sock_poll+0x420/0x420
[ 2587.885306][ T5019]  __se_sys_ioctl+0xfa/0x170
[ 2587.889922][ T5019]  do_syscall_64+0x4c/0xa0
[ 2587.894375][ T5019]  ? clear_bhb_loop+0x60/0xb0
[ 2587.899074][ T5019]  ? clear_bhb_loop+0x60/0xb0
[ 2587.903777][ T5019]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2587.909690][ T5019] RIP: 0033:0x7f204979e199
[ 2587.914131][ T5019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2587.933793][ T5019] RSP: 002b:00007f204a656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2587.942259][ T5019] RAX: ffffffffffffffda RBX: 00007f2049a25fa0 RCX: 00007f204979e199
[ 2587.950255][ T5019] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000004
[ 2587.958249][ T5019] RBP: 00007f20498358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2587.966240][ T5019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2587.974235][ T5019] R13: 00007f2049a26038 R14: 00007f2049a25fa0 R15: 00007ffeea215a58
[ 2587.982258][ T5019]  </TASK>
[ 2588.024131][   T27] audit: type=1107 audit(1791268098.523:113): pid=5020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÌçG'3š•lÕ¨‹K>uwIh$ô0R ˜1L¾ÙñM6‘¢Ã"?À#êò0y'
[ 2588.124594][ T5021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5674'.
[ 2588.174338][ T4329] usb 6-1: USB disconnect, device number 20
[ 2588.294429][ T4329] yurex 6-1:0.50: USB YUREX #0 now disconnected
[ 2588.611176][ T5034] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5676'.
[ 2589.580138][ T5052] md: could not open device unknown-block(1,0).
[ 2589.814743][ T8554] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[ 2589.861724][ T8554] usb 2-1: USB disconnect, device number 20
[ 2589.914030][T31656] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 2590.103729][T31656] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[ 2590.127078][T31656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2590.384513][T31656] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[ 2590.410501][ T8554] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 2590.440578][  T955] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 2590.603479][T31656] usb 6-1: USB disconnect, device number 21
[ 2590.622775][ T8554] usb 2-1: Using ep0 maxpacket: 16
[ 2590.634174][  T955] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[ 2590.643574][ T8554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2590.656050][  T955] usb 1-1: config 0 has no interface number 0
[ 2590.675639][  T955] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2590.707582][ T8554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2590.740484][ T8554] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2590.757606][  T955] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 2590.767631][ T8554] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2590.820897][  T955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2590.828482][ T8554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2590.848067][  T955] usb 1-1: Product: syz
[ 2590.857927][  T955] usb 1-1: Manufacturer: syz
[ 2590.869940][  T955] usb 1-1: SerialNumber: syz
[ 2590.879199][ T8554] usb 2-1: config 0 descriptor??
[ 2590.901878][  T955] usb 1-1: config 0 descriptor??
[ 2590.959462][  T955] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[ 2591.300544][    C0] net_ratelimit: 16 callbacks suppressed
[ 2591.316150][ T8554] usbhid 2-1:0.0: can't add hid device: -71
[ 2591.331765][ T8554] usbhid: probe of 2-1:0.0 failed with error -71
[ 2591.365711][ T5096] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5694'.
[ 2591.398179][ T8554] usb 2-1: USB disconnect, device number 21
[ 2591.530702][ T4659] wlan1: Trigger new scan to find an IBSS to join
[ 2592.059262][ T5104] md: could not open device unknown-block(1,0).
[ 2592.094063][ T5105] 
[ 2592.096475][ T5105] ======================================================
[ 2592.103528][ T5105] WARNING: possible circular locking dependency detected
[ 2592.110590][ T5105] syzkaller #0 Not tainted
[ 2592.115033][ T5105] ------------------------------------------------------
[ 2592.122088][ T5105] syz.1.5698/5105 is trying to acquire lock:
[ 2592.128097][ T5105] ffff88804777c428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20
[ 2592.137283][ T5105] 
[ 2592.137283][ T5105] but task is already holding lock:
[ 2592.144679][ T5105] ffffffff8ded8528 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0
[ 2592.153783][ T5105] 
[ 2592.153783][ T5105] which lock already depends on the new lock.
[ 2592.153783][ T5105] 
[ 2592.164252][ T5105] 
[ 2592.164252][ T5105] the existing dependency chain (in reverse order) is:
[ 2592.170666][    C1] nf_conntrack: new packet for ffff88801a6dc780
[ 2592.173286][ T5105] 
[ 2592.173286][ T5105] -> #2 (
[ 2592.179547][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2592.184673][ T5105] rfcomm_mutex){+.+.}-{3:3}:
[ 2592.184697][ T5105]        __mutex_lock+0x12d/0xae0
[ 2592.184727][ T5105]        rfcomm_security_cfm+0x95/0x780
[ 2592.193781][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2592.198183][ T5105]        hci_auth_complete_evt+0x365/0xba0
[ 2592.205124][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2592.208754][ T5105]        hci_event_packet+0x806/0x1290
[ 2592.217783][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2592.223403][ T5105]        hci_rx_work+0x3eb/0xd40
[ 2592.251671][ T5105]        process_one_work+0x8ab/0x1160
[ 2592.257180][ T5105]        worker_thread+0xaf5/0x12a0
[ 2592.262509][ T5105]        kthread+0x29d/0x330
[ 2592.267137][ T5105]        ret_from_fork+0x1f/0x30
[ 2592.272159][ T5105] 
[ 2592.272159][ T5105] -> #1 (hci_cb_list_lock){+.+.}-{3:3}:
[ 2592.279942][ T5105]        __mutex_lock+0x12d/0xae0
[ 2592.285011][ T5105]        hci_remote_features_evt+0x464/0xa10
[ 2592.291049][ T5105]        hci_event_packet+0x806/0x1290
[ 2592.296554][ T5105]        hci_rx_work+0x3eb/0xd40
[ 2592.301545][ T5105]        process_one_work+0x8ab/0x1160
[ 2592.307058][ T5105]        worker_thread+0xaf5/0x12a0
[ 2592.312310][ T5105]        kthread+0x29d/0x330
[ 2592.316947][ T5105]        ret_from_fork+0x1f/0x30
[ 2592.321339][ T5109] kcov: kcov_start: t = ffff88805d33da00, size = 524288, area = ffffc90019802000
[ 2592.321922][ T5105] 
[ 2592.321922][ T5105] -> #0 (&hdev->lock){+.+.}-{3:3}:
[ 2592.338391][ T5105]        __lock_acquire+0x3a03/0x7ea0
[ 2592.343821][ T5105]        lock_acquire+0x1bc/0x4a0
[ 2592.348891][ T5105]        __mutex_lock+0x12d/0xae0
[ 2592.353960][ T5105]        l2cap_chan_connect+0xfb/0xe20
[ 2592.359473][ T5105]        l2cap_sock_connect+0x576/0x750
[ 2592.365145][ T5105]        kernel_connect+0x13e/0x1c0
[ 2592.370383][ T5105]        rfcomm_dlc_open+0x600/0x10c0
[ 2592.375799][ T5105]        rfcomm_sock_connect+0x2e9/0x600
[ 2592.381476][ T5105]        __sys_connect+0x3cb/0x450
[ 2592.386628][ T5105]        __x64_sys_connect+0x76/0x80
[ 2592.391951][ T5105]        do_syscall_64+0x4c/0xa0
[ 2592.396939][ T5105]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2592.403395][ T5105] 
[ 2592.403395][ T5105] other info that might help us debug this:
[ 2592.403395][ T5105] 
[ 2592.413664][ T5105] Chain exists of:
[ 2592.413664][ T5105]   &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex
[ 2592.413664][ T5105] 
[ 2592.426238][ T5105]  Possible unsafe locking scenario:
[ 2592.426238][ T5105] 
[ 2592.433718][ T5105]        CPU0                    CPU1
[ 2592.439115][ T5105]        ----                    ----
[ 2592.444510][ T5105]   lock(rfcomm_mutex);
[ 2592.448704][ T5105]                                lock(hci_cb_list_lock);
[ 2592.455771][ T5105]                                lock(rfcomm_mutex);
[ 2592.462494][ T5105]   lock(&hdev->lock);
[ 2592.466599][ T5105] 
[ 2592.466599][ T5105]  *** DEADLOCK ***
[ 2592.466599][ T5105] 
[ 2592.474768][ T5105] 1 lock held by syz.1.5698/5105:
[ 2592.479815][ T5105]  #0: ffffffff8ded8528 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0
[ 2592.489278][ T5105] 
[ 2592.489278][ T5105] stack backtrace:
[ 2592.490753][    C1] wireguard: wg0: Sending keepalive packet to peer 223 ([::1]:20002/0%0)
[ 2592.495191][ T5105] CPU: 0 PID: 5105 Comm: syz.1.5698 Not tainted syzkaller #0
[ 2592.503842][    C1] wireguard: wg0: Sending keepalive packet to peer 217 ([::1]:20002/0%0)
[ 2592.510972][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2592.510987][ T5105] Call Trace:
[ 2592.510995][ T5105]  <TASK>
[ 2592.511003][ T5105]  dump_stack_lvl+0x188/0x24e
[ 2592.540506][ T5105]  ? load_image+0x410/0x410
[ 2592.545065][ T5105]  ? show_regs_print_info+0x12/0x12
[ 2592.550346][ T5105]  ? print_circular_bug+0x12b/0x1a0
[ 2592.555643][ T5105]  check_noncircular+0x2f8/0x400
[ 2592.560651][ T5105]  ? print_deadlock_bug+0x5d0/0x5d0
[ 2592.565915][ T5105]  ? lockdep_lock+0xf1/0x1f0
[ 2592.570556][ T5105]  ? _find_first_zero_bit+0xd2/0x100
[ 2592.575878][ T5105]  __lock_acquire+0x3a03/0x7ea0
[ 2592.580795][ T5105]  ? verify_lock_unused+0x140/0x140
[ 2592.586044][ T5105]  ? _printk+0xda/0x130
[ 2592.590257][ T5105]  ? load_image+0x410/0x410
[ 2592.594816][ T5105]  lock_acquire+0x1bc/0x4a0
[ 2592.599376][ T5105]  ? l2cap_chan_connect+0xfb/0xe20
[ 2592.604538][ T5105]  ? __might_sleep+0xd0/0xd0
[ 2592.609165][ T5105]  ? read_lock_is_recursive+0x10/0x10
[ 2592.614593][ T5105]  ? __lock_acquire+0x7ea0/0x7ea0
[ 2592.619675][ T5105]  __mutex_lock+0x12d/0xae0
[ 2592.624236][ T5105]  ? l2cap_chan_connect+0xfb/0xe20
[ 2592.629488][ T5105]  ? do_raw_read_unlock+0x39/0x70
[ 2592.634558][ T5105]  ? _raw_read_unlock+0x24/0x40
[ 2592.639454][ T5105]  ? hci_get_route+0x3a1/0x4d0
[ 2592.644269][ T5105]  ? l2cap_chan_connect+0xfb/0xe20
[ 2592.649430][ T5105]  ? mutex_lock_nested+0x10/0x10
[ 2592.654419][ T5105]  ? mark_lock+0x94/0x320
[ 2592.658807][ T5105]  l2cap_chan_connect+0xfb/0xe20
[ 2592.663804][ T5105]  ? lock_chain_count+0x20/0x20
[ 2592.668710][ T5105]  ? l2cap_chan_le_send_credits+0x590/0x590
[ 2592.674683][ T5105]  ? __local_bh_enable_ip+0x136/0x1c0
[ 2592.680108][ T5105]  ? _local_bh_enable+0xa0/0xa0
[ 2592.685012][ T5105]  l2cap_sock_connect+0x576/0x750
[ 2592.690089][ T5105]  ? l2cap_sock_bind+0x870/0x870
[ 2592.695085][ T5105]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2592.701292][ T5105]  ? kernel_connect+0xee/0x1c0
[ 2592.706107][ T5105]  kernel_connect+0x13e/0x1c0
[ 2592.710831][ T5105]  ? kernel_accept+0x420/0x420
[ 2592.715664][ T5105]  ? rfcomm_dlc_open+0x5c4/0x10c0
[ 2592.720747][ T5105]  rfcomm_dlc_open+0x600/0x10c0
[ 2592.725644][ T5105]  ? lock_chain_count+0x20/0x20
[ 2592.730549][ T5105]  ? rfcomm_sock_connect+0x2c2/0x600
[ 2592.735885][ T5105]  ? rfcomm_dlc_free+0x40/0x40
[ 2592.740690][ T5105]  ? __local_bh_enable_ip+0x136/0x1c0
[ 2592.746100][ T5105]  ? lockdep_hardirqs_on+0x94/0x140
[ 2592.751353][ T5105]  ? __local_bh_enable_ip+0x136/0x1c0
[ 2592.756764][ T5105]  ? _local_bh_enable+0xa0/0xa0
[ 2592.761662][ T5105]  ? do_raw_spin_unlock+0x11d/0x230
[ 2592.766903][ T5105]  rfcomm_sock_connect+0x2e9/0x600
[ 2592.772070][ T5105]  ? rfcomm_sock_bind+0x550/0x550
[ 2592.777147][ T5105]  __sys_connect+0x3cb/0x450
[ 2592.781790][ T5105]  ? __sys_connect_file+0x170/0x170
[ 2592.787044][ T5105]  __x64_sys_connect+0x76/0x80
[ 2592.791853][ T5105]  do_syscall_64+0x4c/0xa0
[ 2592.796314][ T5105]  ? clear_bhb_loop+0x60/0xb0
[ 2592.801037][ T5105]  ? clear_bhb_loop+0x60/0xb0
[ 2592.805756][ T5105]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2592.811698][ T5105] RIP: 0033:0x7f038ed9e199
[ 2592.816154][ T5105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2592.835901][ T5105] RSP: 002b:00007f038fc19028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 2592.844365][ T5105] RAX: ffffffffffffffda RBX: 00007f038f025fa0 RCX: 00007f038ed9e199
[ 2592.852381][ T5105] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000004
[ 2592.860393][ T5105] RBP: 00007f038ee358e0 R08: 0000000000000000 R09: 0000000000000000
[ 2592.868416][ T5105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2592.876440][ T5105] R13: 00007f038f026038 R14: 00007f038f025fa0 R15: 00007fff4ce210b8
[ 2592.884480][ T5105]  </TASK>
[ 2592.887670][    C0] virtqueue callback for ffff888141acc000 (ffffffff858ab660)
[ 2592.895166][    C0] virtqueue callback for ffff888146255400 (ffffffff847670d0)
[ 2592.899280][ T5107] kcov: kcov_start: t = ffff8880299b5a00, size = 524288, area = ffffc90017291000
[ 2592.902647][    C0] virtqueue interrupt with no work for ffff888146255200
[ 2592.918645][    C0] virtqueue interrupt with no work for ffff888146255000
[ 2592.925972][    C0] nf_conntrack: new packet for ffff888074166c00
[ 2592.932318][    C0] nf_nat: Already setup manip DST for ct ffff888074166c00 (status bits 0x188)
[ 2592.941282][    C0] nf_nat: Already setup manip SRC for ct ffff888074166c00 (status bits 0x188)
[ 2592.950488][    C0] nf_conntrack: new packet for ffff888074166900
[ 2592.956871][    C0] nf_nat: Already setup manip DST for ct ffff888074166900 (status bits 0x188)
[ 2592.965839][    C0] nf_nat: Already setup manip SRC for ct ffff888074166900 (status bits 0x188)
[ 2592.975150][    C0] wireguard: wg0: Sending keepalive packet to peer 218 ([::1]:20003/0%0)
[ 2592.984025][ T5108] kcov: kcov_start: t = ffff88805d339e00, size = 524288, area = ffffc90017a39000
[ 2592.993330][ T8554] Added buffer head 0 to ffff888146255400
[ 2592.999306][ T8554] nf_conntrack: normal packet for ffff88802e48b680
[ 2593.004728][ T5112] kcov: kcov_start: t = ffff8880404c0000, size = 524288, area = ffffc90014e87000
[ 2593.006294][    C0] No more buffers in queue
[ 2593.019406][    C0] virtqueue callback for ffff888141acc000 (ffffffff858ab660)
[ 2593.026926][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 2593.032833][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 2593.038711][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 2593.044668][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 2593.050573][    C0] No more buffers in queue
[ 2593.055031][    C0] Added buffer head 3332 to ffff888141acc000
[ 2593.059842][ T5105] hci1: dst 0e:aa:aa:aa:aa:aa
[ 2593.061108][    C0] Added buffer head 3331 to ffff888141acc000
[ 2593.061127][    C0] Added buffer head 3330 to ffff888141acc000
[ 2593.061142][    C0] Added buffer head 3329 to ffff888141acc000
[ 2593.061157][    C0] Added buffer head 3400 to ffff888141acc000
[ 2593.061172][    C0] Added buffer head 3399 to ffff888141acc000
[ 2593.061187][    C0] Added buffer head 3398 to ffff888141acc000
[ 2593.061202][    C0] Added buffer head 3397 to ffff888141acc000
[ 2593.061217][    C0] Added buffer head 3396 to ffff888141acc000
[ 2593.072227][T13038] ieee80211 phy38: mac80211_hwsim_config (freq=2447(2447 - 0)/noht idle=0 ps=0 smps=static)
[ 2593.077921][    C0] Added buffer head 3395 to ffff888141acc000
[ 2593.077944][    C0] Added buffer head 3394 to ffff888141acc000
[ 2593.077960][    C0] Added buffer head 3388 to ffff888141acc000
[ 2593.136421][ T5109] kcov: kcov_task_exit: t = ffff88805d33da00, kcov->t = ffff88805d33da00
[ 2593.142444][    C0] Added buffer head 3387 to ffff888141acc000
[ 2593.156894][    C0] Added buffer head 3319 to ffff888141acc000
[ 2593.162983][    C0] Added buffer head 3190 to ffff888141acc000
[ 2593.169004][    C0] Added buffer head 3189 to ffff888141acc000
[ 2593.175091][    C0] Added buffer head 3188 to ffff888141acc000
[ 2593.181156][    C0] Added buffer head 3386 to ffff888141acc000
[ 2593.187182][    C0] Added buffer head 3385 to ffff888141acc000
[ 2593.190988][    C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2593.193459][    C0] Added buffer head 3384 to ffff888141acc000
[ 2593.201361][    C1] kcov: kcov_start: t = ffff88801fa43c00, size = 262144, area = ffffc90002101000
[ 2593.201395][    C1] usb 1-1: yurex_control_callback - control failed: -2
[ 2593.207382][    C0] Added buffer head 3181 to ffff888141acc000
[ 2593.216491][    C1] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 38216
[ 2593.218315][    C1] nf_conntrack: new packet for ffff88801a6dc780
[ 2593.223448][    C0] Added buffer head 3180 to ffff888141acc000
[ 2593.229433][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2593.238080][    C0] Added buffer head 3380 to ffff888141acc000
[ 2593.244391][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2593.250373][    C0] Added buffer head 3379 to ffff888141acc000
[ 2593.261797][ T5074] kcov: kcov_task_exit: t = ffff88802ae0bc00, kcov->t = ffff88802ae0bc00
[ 2593.265349][    C0] Added buffer head 3378 to ffff888141acc000
[ 2593.294800][    C0] Added buffer head 3377 to ffff888141acc000
[ 2593.300885][    C0] Added buffer head 3376 to ffff888141acc000
[ 2593.306913][    C0] Added buffer head 3375 to ffff888141acc000
[ 2593.313008][    C0] Added buffer head 3374 to ffff888141acc000
[ 2593.319053][    C0] Added buffer head 3373 to ffff888141acc000
[ 2593.321039][ T5114] kcov: kcov_start: t = ffff888078491e00, size = 524288, area = ffffc90003d59000
[ 2593.325281][    C0] Added buffer head 3372 to ffff888141acc000
[ 2593.336054][ T5094] kcov: kcov_task_exit: t = ffff88802c401e00, kcov->t = ffff88802c401e00
[ 2593.340193][    C0] Added buffer head 3371 to ffff888141acc000
[ 2593.349562][ T5108] kcov: kcov_task_exit: t = ffff88805d339e00, kcov->t = ffff88805d339e00
[ 2593.354868][    C0] Added buffer head 3370 to ffff888141acc000
[ 2593.364022][ T5105] hci1: dst 0e:aa:aa:aa:aa:aa handle 0x0f00
[ 2593.369245][    C0] tcp_conntracks: 
[ 2593.375162][    C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4
[ 2593.376140][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2593.378930][    C0] tcp_conntracks: 
[ 2593.384341][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2593.393227][    C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6
[ 2593.411346][    C0] tcp_conntracks: 
[ 2593.411370][    C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6
[ 2593.420583][    C0] tcp_conntracks: 
[ 2593.420595][    C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6
[ 2593.429877][    C0] nf_conntrack: normal packet for ffff888074166000
[ 2593.436467][    C0] tcp_conntracks: 
[ 2593.436478][    C0] syn=0 ack=1 fin=0 rst=0 old=6 new=7
[ 2593.445701][    C0] No more buffers in queue
[ 2593.450118][    C0] eth0: xmit ffff888058cf13c0 42:01:0a:80:00:01
[ 2593.456403][    C0] Added buffer head 0 to ffff888141acc200
[ 2593.462158][    C0] virtqueue callback for ffff888141acc200 (ffffffff858ab750)
[ 2593.479184][ T5114] kcov: kcov_task_exit: t = ffff888078491e00, kcov->t = ffff888078491e00
[ 2593.487930][ T5111] kcov: kcov_start: t = ffff8880404c3c00, size = 524288, area = ffffc90011e7d000
[ 2593.490496][ T5105] hci1 orig refcnt 13
[ 2593.498951][ T5107] kcov: kcov_task_exit: t = ffff8880299b5a00, kcov->t = ffff8880299b5a00
[ 2593.516507][ T5094] kernfs bind: removing
[ 2593.521262][ T5366] ieee80211 phy38: mac80211_hwsim_config (freq=2452(2452 - 0)/noht idle=0 ps=0 smps=static)
[ 2593.531524][    C1] wireguard: wg0: Sending keepalive packet to peer 217 ([::1]:20002/0%0)
[ 2593.532112][ T5115] kcov: kcov_start: t = ffff88802cc2da00, size = 524288, area = ffffc90015288000
[ 2593.554701][ T4259] nf_conntrack: normal packet for ffff888074166000
[ 2593.570517][ T5105] hci1: conn ffff88802e676000
[ 2593.575527][ T4259] tcp_conntracks: 
[ 2593.575545][ T4259] syn=0 ack=1 fin=0 rst=0 old=7 new=7
[ 2593.595908][ T5094] kernfs unbind: removing
[ 2593.606133][ T5105] hcon ffff88802e676000 orig refcnt 0
[ 2593.616362][ T4259] No more buffers in queue
[ 2593.620909][ T4259] eth0: xmit ffff8880314ef000 42:01:0a:80:00:01
[ 2593.627256][ T4259] Added buffer head 10 to ffff888141acc600
[ 2593.627288][    C1] virtqueue callback for ffff888141acc600 (ffffffff858ab750)
[ 2593.640670][    C1] Sent skb ffff8880314ef000
[ 2593.645234][    C1] No more buffers in queue
[ 2593.656684][ T5366] ieee80211 phy38: mac80211_hwsim_config (freq=2457(2457 - 0)/noht idle=0 ps=0 smps=static)
[ 2593.670563][ T5094] kernfs uevent: removing
[ 2593.673436][    C0] virtqueue callback for ffff888146255400 (ffffffff847670d0)
[ 2593.675206][ T5094] bus: 'gadget': remove driver raw-gadget.3
[ 2593.682371][    C0] virtqueue interrupt with no work for ffff888146255200
[ 2593.682391][    C0] virtqueue interrupt with no work for ffff888146255000
[ 2593.685028][ T5112] kcov: kcov_task_exit: t = ffff8880404c0000, kcov->t = ffff8880404c0000
[ 2593.710775][T29674] Added buffer head 0 to ffff888146255400
[ 2593.730379][ T5111] kcov: kcov_task_exit: t = ffff8880404c3c00, kcov->t = ffff8880404c3c00
[ 2593.739038][ T5104] kcov: kcov_task_exit: t = ffff88805ceeda00, kcov->t = ffff88805ceeda00
[ 2593.740983][ T5105] hcon ffff88802e676000
[ 2593.751895][ T5094] kernfs gadget.0: removing
[ 2593.756585][ T5094] kernfs driver: removing
[ 2593.760471][ T5115] kcov: kcov_task_exit: t = ffff88802cc2da00, kcov->t = ffff88802cc2da00
[ 2593.786608][ T5094] udc dummy_udc.0: unbinding gadget driver [USB Raw Gadget]
[ 2593.794165][ T4259] nf_conntrack: normal packet for ffff888074166000
[ 2593.800916][ T5105] cache ffff88804777d278, 0e:aa:aa:aa:aa:aa
[ 2593.806959][ T5105] hci1 opcode 0x0405 plen 13
[ 2593.811781][ T4305] ieee80211 phy38: mac80211_hwsim_config (freq=2462(2462 - 0)/noht idle=0 ps=0 smps=static)
[ 2593.830459][ T4259] tcp_conntracks: 
[ 2593.830485][ T4259] syn=0 ack=1 fin=0 rst=0 old=7 new=7
[ 2593.839848][ T5094] dummy_hcd dummy_hcd.0: port status 0x00010100 has changes
[ 2593.847311][    C1] dummy_hcd dummy_hcd.0: no ep configured for urb ffff88807be46900
[ 2593.855293][    C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2593.863505][    C1] kcov: kcov_start: t = ffff88802c401e00, size = 262144, area = ffffc90002101000
[ 2593.872700][    C1] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 3
[ 2593.890445][ T4259] No more buffers in queue
[ 2593.894939][ T4259] eth0: xmit ffff8880672ff780 42:01:0a:80:00:01
[ 2593.901297][ T4259] Added buffer head 10 to ffff888141acc600
[ 2593.907127][    C1] virtqueue callback for ffff888141acc600 (ffffffff858ab750)
[ 2593.914649][    C1] Sent skb ffff8880672ff780
[ 2593.919216][    C1] No more buffers in queue
[ 2593.923885][ T5105] hci1: skb len 16
[ 2593.925255][    C0] Sent skb ffff888058cf13c0
[ 2593.927933][ T5105] hci1 hcon ffff88802e676000
[ 2593.932191][    C0] No more buffers in queue
[ 2593.932207][    C0] No more buffers in queue
[ 2593.936979][ T4289] hci1 cmd_cnt 1 cmd queued 1
[ 2593.941244][    C0] No more buffers in queue
[ 2593.950013][ T5094] kobject: 'dummy_udc.0' (ffff8880287b8018): kobject_uevent_env
[ 2593.950435][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2593.950458][ T4289] hci1: skb ffff8880672ff500
[ 2593.950454][    C0] kcov: kcov_start: t = ffff88802c401e00, size = 262144, area = ffffc90002101000
[ 2593.950522][    C0] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 107
[ 2593.950647][    C0] nf_conntrack: new packet for ffff888074166c00
[ 2593.950666][    C0] nf_nat: Already setup manip DST for ct ffff888074166c00 (status bits 0x188)
[ 2593.950700][    C0] nf_nat: Already setup manip SRC for ct ffff888074166c00 (status bits 0x188)
[ 2593.950987][ T4289] hci1 type 1 len 16
[ 2593.955274][ T5094] kobject: 'dummy_udc.0' (ffff8880287b8018): fill_kobj_path: path = '/devices/platform/dummy_udc.0/udc/dummy_udc.0'
[ 2594.033690][T29674] kcov: kcov_remote_start: handle = 100000000000001, context: task
[ 2594.041630][T29674] kcov: kcov_start: t = ffff88805bff9e00, size = 1048576, area = ffffc9001ae9a000
[ 2594.060377][T29674] hub 1-0:1.0: state 7 ports 1 chg 0000 evt 0002
[ 2594.066841][T29674] dummy_hcd dummy_hcd.0: port status 0x00010100 has changes
[ 2594.090476][ T5105] hcon ffff88802e676000 conn ffff88807ab68800 hchan ffff888025b0ea00
[ 2594.098631][ T5105] conn ffff88807ab68800, psm 0x03, dcid 0x0000
[ 2594.101948][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2594.113014][    C0] kcov: kcov_start: t = ffff8880555a3c00, size = 262144, area = ffffc90002101000
[ 2594.122263][    C0] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 101
[ 2594.124467][ T5094] kobject: 'gadget.0' (ffff888144f78cd8): kobject_uevent_env
[ 2594.131245][    C0] nf_conntrack: new packet for ffff888074166900
[ 2594.142622][ T5105] chan ffff88805415d000 orig refcnt 1
[ 2594.144526][    C0] nf_nat: Already setup manip DST for ct ffff888074166900 (status bits 0x188)
[ 2594.149765][ T5105] hcon ffff88802e676000 orig refcnt 1
[ 2594.158673][    C0] nf_nat: Already setup manip SRC for ct ffff888074166900 (status bits 0x188)
[ 2594.159336][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2594.181187][    C0] kcov: kcov_start: t = ffff8880555a3c00, size = 262144, area = ffffc90002101000
[ 2594.189811][ T5094] kobject: 'gadget.0' (ffff888144f78cd8): fill_kobj_path: path = '/devices/platform/dummy_udc.0/gadget.0'
[ 2594.190391][    C0] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 16
[ 2594.192453][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2594.218226][    C0] kcov: kcov_start: t = ffff88802e701e00, size = 262144, area = ffffc90002101000
[ 2594.227426][    C0] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 22
[ 2594.228845][ T4305] ieee80211 phy38: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
[ 2594.236433][T29674] usb usb1-port1: status 0100, change 0001, 12 Mb/s
[ 2594.250616][    C1] nf_conntrack: new packet for ffff88801a6dc780
[ 2594.252723][T29674] usb 1-1: USB disconnect, device number 27
[ 2594.258962][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2594.270453][T29674] usb 1-1: unregistering device
[ 2594.274019][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2594.278657][T29674] usb 1-1: unregistering interface 1-1:0.50
[ 2594.288920][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2594.302531][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2594.307236][ T8554] nf_conntrack: normal packet for ffff88801a6dc600
[ 2594.321835][ T4305] ieee80211 phy38: mac80211_hwsim_configure_filter
[ 2594.321962][T29674] device: 'ep_82': device_unregister
[ 2594.333755][T29674] kernfs runtime_status: removing
[ 2594.338866][ T5105] hcon ffff88802e676000 orig refcnt 2
[ 2594.344573][ T5094] kobject: 'raw-gadget.3' (ffff888060cd9200): kobject_cleanup, parent ffff88801e6e0050
[ 2594.345353][T29674] kernfs control: removing
[ 2594.354623][ T5105] chan ffff88805415d000 BT_BOUND -> BT_CONNECT
[ 2594.365152][ T5094] kobject: 'raw-gadget.3' (ffff888060cd9200): auto cleanup kobject_del
[ 2594.375478][ T4305] hwsim sw_scan_complete
[ 2594.380296][ T5105] chan ffff88805415d000 state BT_CONNECT timeout 4000
[ 2594.386087][T29674] kernfs runtime_suspended_time: removing
[ 2594.387495][ T5094] kobject: 'raw-gadget.3' (ffff888060cd9200): auto cleanup 'remove' event
[ 2594.397609][ T4305] ieee80211 phy38: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=1 ps=0 smps=static)
[ 2594.404100][ T5105] chan ffff88805415d000 orig refcnt 2
[ 2594.417560][ T5094] kobject: 'raw-gadget.3' (ffff888060cd9200): kobject_uevent_env
[ 2594.423462][T29674] kernfs runtime_active_time: removing
[ 2594.428522][ T5105] hci1 orig refcnt 14
[ 2594.435103][ T5105] sk ffff88805415e000
[ 2594.439235][ T5094] kobject: 'raw-gadget.3' (ffff888060cd9200): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.3'
[ 2594.446893][T29674] kernfs autosuspend_delay_ms: removing
[ 2594.456044][T29674] kernfs power: removing
[ 2594.457236][ T5105] ffff888055be1c00
[ 2594.464459][ T5105] dlc ffff888055be1c00 session ffff888054d18c00
[ 2594.471888][ T5105] session ffff888054d18c00 state 3
[ 2594.477126][ T5105] dlc ffff888055be1c00 state 7 timeout 3000
[ 2594.486020][ T5105] sk ffff8880597ae000
[ 2594.488781][T29674] kernfs uevent: removing
[ 2594.493112][ T5105] sock ffff888072068c00, sk ffff8880597ae000
[ 2594.494628][T29674] kernfs bLength: removing
[ 2594.505164][ T5105] sock ffff888072068c00, sk ffff8880597ae000
[ 2594.512186][ T5105] sk ffff8880597ae000 state 5 socket ffff888072068c00
[ 2594.519120][ T5105] dlc ffff888055be1c00 state 7 dlci 6 err 0
[ 2594.525401][ T5105] dlc ffff888055be1c00 state 7 dlci 6 err 0 session ffff888054d18c00
[ 2594.534590][ T5105] dlc ffff888055be1c00 state 7
[ 2594.539481][ T5105] dlc ffff888055be1c00 state 9 err 0
[ 2594.545157][ T5105] dlc ffff888055be1c00 refcnt 2 session ffff888054d18c00
[ 2594.552359][ T5094] kernfs raw-gadget.3: removing
[ 2594.557266][T29674] kernfs bEndpointAddress: removing
[ 2594.557266][ T5094] kobject: 'raw-gadget.3' (ffff888060cd9200): calling ktype release
[ 2594.557284][ T5094] driver: 'raw-gadget.3': driver_release
[ 2594.570818][T29674] kernfs bmAttributes: removing
[ 2594.581848][ T5094] kobject: 'raw-gadget.3': free name
[ 2594.587261][ T5094] dummy_udc dummy_udc.0: disabled ep2in-bulk
[ 2594.594668][T29674] kernfs bInterval: removing
[ 2594.599339][T29674] kernfs wMaxPacketSize: removing
[ 2594.609508][T29674] kernfs interval: removing
[ 2594.614344][T29674] kernfs type: removing
[ 2594.618636][T29674] kernfs direction: removing
[ 2594.623392][T29674] PM: Removing info for No Bus:ep_82
[ 2594.628829][T29674] kobject: 'ep_82' (ffff888079b70010): kobject_uevent_env
[ 2594.636118][T29674] kobject: 'ep_82' (ffff888079b70010): kobject_uevent_env: filter function caused the event to drop!
[ 2594.647619][T29674] kernfs ep_82: removing
[ 2594.652072][T29674] kobject: 'ep_82' (ffff888079b70010): kobject_cleanup, parent 0000000000000000
[ 2594.661264][T29674] kobject: 'ep_82' (ffff888079b70010): calling ktype release
[ 2594.668779][T29674] kobject: 'ep_82': free name
[ 2594.673563][    C0] virtqueue callback for ffff888146255400 (ffffffff847670d0)
[ 2594.673615][    C0] virtqueue interrupt with no work for ffff888146255200
[ 2594.673631][    C0] virtqueue interrupt with no work for ffff888146255000
[ 2594.695464][T29674] kernfs power: removing
[ 2594.700045][T29674] kernfs uevent: removing
[ 2594.704879][T29674] kernfs bInterfaceNumber: removing
[ 2594.710252][T29674] kernfs bAlternateSetting: removing
[ 2594.715930][T29674] kernfs bNumEndpoints: removing
[ 2594.721208][T29674] kernfs bInterfaceClass: removing
[ 2594.726492][T29674] kernfs bInterfaceSubClass: removing
[ 2594.732231][T29674] kernfs bInterfaceProtocol: removing
[ 2594.737806][T29674] kernfs modalias: removing
[ 2594.743303][T29674] kernfs supports_autosuspend: removing
[ 2594.749023][T29674] kernfs authorized: removing
[ 2594.754222][T29674] kernfs subsystem: removing
[ 2594.758997][T29674] kernfs 1-1:0.50: removing
[ 2594.763933][T29674] bus: 'usb': remove device 1-1:0.50
[ 2594.769445][T29674] kernfs 1-1:0.50: removing
[ 2594.774356][T29674] kernfs driver: removing
[ 2594.778848][T29674] yurex 1-1:0.50: removing 0 minor
[ 2594.784325][T29674] device: 'yurex0': device_unregister
[ 2594.789847][T29674] kernfs runtime_status: removing
[ 2594.795259][T29674] kernfs control: removing
[ 2594.799830][T29674] kernfs runtime_suspended_time: removing
[ 2594.805963][T29674] kernfs runtime_active_time: removing
[ 2594.811703][T29674] kernfs autosuspend_delay_ms: removing
[ 2594.817414][T29674] kernfs power: removing
[ 2594.823030][ T8554] nf_conntrack: normal packet for ffff88801a6dc180
[ 2594.831365][ T4329] nf_conntrack: normal packet for ffff88801a6dd380
[ 2594.838068][ T4329] Added buffer head 0 to ffff888146255400
[ 2594.844246][T29674] kernfs 180:0: removing
[ 2594.848673][T29674] kernfs dev: removing
[ 2594.853212][T29674] kernfs device: removing
[ 2594.857689][T29674] kernfs subsystem: removing
[ 2594.862676][T29674] kernfs yurex0: removing
[ 2594.867173][T29674] kernfs uevent: removing
[ 2594.871855][T29674] PM: Removing info for No Bus:yurex0
[ 2594.877360][T29674] kobject: 'yurex0' (ffff888079b72000): kobject_uevent_env
[ 2594.884964][T29674] kobject: 'yurex0' (ffff888079b72000): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.50/usbmisc/yurex0'
[ 2594.900282][T29674] kernfs yurex0: removing
[ 2594.905003][T29674] kernfs usbmisc: removing
[ 2594.909568][T29674] kobject: 'usbmisc' (ffff888061320380): kobject_cleanup, parent 0000000000000000
[ 2594.919153][T29674] kobject: 'usbmisc' (ffff888061320380): calling ktype release
[ 2594.927052][T29674] kobject: 'usbmisc': free name
[ 2594.932414][T29674] kobject: 'yurex0' (ffff888079b72000): kobject_cleanup, parent 0000000000000000
[ 2594.941913][T29674] kobject: 'yurex0' (ffff888079b72000): calling ktype release
[ 2594.949544][T29674] device: 'yurex0': device_create_release
[ 2594.955671][T29674] kobject: 'yurex0': free name
[ 2594.960737][T29674] device class 'usbmisc': unregistering
[ 2594.966414][T29674] kobject: 'usbmisc' (ffff888056c31850): auto cleanup 'remove' event
[ 2594.974647][    C0] nf_conntrack: new packet for ffff888074166c00
[ 2594.974675][    C0] nf_nat: Already setup manip DST for ct ffff888074166c00 (status bits 0x188)
[ 2594.974723][    C0] nf_nat: Already setup manip SRC for ct ffff888074166c00 (status bits 0x188)
[ 2594.999426][T29674] kobject: 'usbmisc' (ffff888056c31850): kobject_uevent_env
[ 2595.007063][T29674] kobject: 'usbmisc' (ffff888056c31850): fill_kobj_path: path = '/class/usbmisc'
[ 2595.017811][T29674] kernfs usbmisc: removing
[ 2595.022573][T29674] kobject: 'usbmisc' (ffff888056c31850): kobject_cleanup, parent 0000000000000000
[ 2595.032076][T29674] kobject: 'usbmisc' (ffff888056c31850): calling ktype release
[ 2595.039758][T29674] class 'usbmisc': release.
[ 2595.044773][T29674] class_create_release called for usbmisc
[ 2595.051116][T29674] kobject: 'usbmisc': free name
[ 2595.056126][T29674] yurex 1-1:0.50: yurex_delete
[ 2595.061288][T29674] yurex 1-1:0.50: USB YUREX #0 now disconnected
[ 2595.067680][T29674] kobject: '1-1:0.50' (ffff888079b71030): kobject_uevent_env
[ 2595.075465][T29674] kobject: '1-1:0.50' (ffff888079b71030): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.50'
[ 2595.089579][T29674] PM: Removing info for usb:1-1:0.50
[ 2595.095228][T29674] kobject: '1-1:0.50' (ffff888079b71030): kobject_uevent_env
[ 2595.102929][T29674] kobject: '1-1:0.50' (ffff888079b71030): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.50'
[ 2595.116474][T29674] kernfs 1-1:0.50: removing
[ 2595.121450][T29674] kobject: '1-1:0.50' (ffff888079b71030): kobject_cleanup, parent 0000000000000000
[ 2595.131037][T29674] kobject: '1-1:0.50' (ffff888079b71030): calling ktype release
[ 2595.138836][T29674] kobject: '1-1:0.50': free name
[ 2595.145280][T29674] usb 1-1: usb_disable_device nuking all URBs
[ 2595.151761][T29674] kernfs port: removing
[ 2595.156060][T29674] kernfs device: removing
[ 2595.160737][T29674] device: 'ep_00': device_unregister
[ 2595.166171][T29674] kernfs runtime_status: removing
[ 2595.171539][T29674] kernfs control: removing
[ 2595.176063][T29674] kernfs runtime_suspended_time: removing
[ 2595.182117][T29674] kernfs runtime_active_time: removing
[ 2595.187706][T29674] kernfs autosuspend_delay_ms: removing
[ 2595.193765][T29674] kernfs power: removing
[ 2595.198119][ T5105] session ffff888054d18c00 state 3 timeout 200
[ 2595.204622][T29674] kernfs uevent: removing
[ 2595.209105][ T5105] sk ffff8880597ae000 state 9 refcnt 2
[ 2595.211148][T31656] IPv6: now = 4295196672, schedule = 4295208697, rounded schedule = 4295208797 => 4295208697
[ 2595.225070][ T1280] No more buffers in queue
[ 2595.225247][    C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001
[ 2595.229590][ T1280] eth0: xmit ffff8880581de3c0 ff:ff:ff:ff:ff:ff
[ 2595.238947][    C0] nf_conntrack: new packet for ffff888074166600
[ 2595.243534][ T1280] Added buffer head 10 to ffff888141acc600
[ 2595.243617][    C1] virtqueue callback for ffff888141acc600 (ffffffff858ab750)
[ 2595.249827][    C0] nf_conntrack: Confirming conntrack ffff888074166600
[ 2595.263820][    C0] nf_conntrack: new packet for ffff888074166900
[ 2595.270251][    C1] Sent skb ffff8880581de3c0
[ 2595.276014][    C0] nf_nat: Already setup manip DST for ct ffff888074166900 (status bits 0x188)
[ 2595.280641][    C1] No more buffers in queue
[ 2595.289400][    C0] nf_nat: Already setup manip SRC for ct ffff888074166900 (status bits 0x188)
[ 2595.294294][    C1] nf_conntrack: new packet for ffff88801a6dc780
[ 2595.305199][    C0] nf_nat: Already setup manip DST for ct ffff888074166600 (status bits 0x188)
[ 2595.308962][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2595.317851][    C0] nf_nat: Already setup manip SRC for ct ffff888074166600 (status bits 0x188)
[ 2595.326847][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2595.345438][T29674] kernfs bLength: removing
[ 2595.347243][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 2595.358580][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2595.359509][T29674] kernfs bEndpointAddress: removing
[ 2595.367564][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2595.373735][ T5105] sk ffff8880597ae000 dlc ffff888055be1c00
[ 2595.397514][ T5105] ffff888055be1c00
[ 2595.404756][T29674] kernfs bmAttributes: removing
[ 2595.410844][ T5105] kcov: kcov_task_exit: t = ffff88802cc29e00, kcov->t = ffff88802cc29e00
[ 2595.415671][T29674] kernfs bInterval: removing
[ 2595.432982][T29674] kernfs wMaxPacketSize: removing
[ 2595.443869][T29674] kernfs interval: removing
[ 2595.454239][T29674] kernfs type: removing
[ 2595.463078][T29674] kernfs direction: removing
[ 2595.469547][T29674] PM: Removing info for No Bus:ep_00
[ 2595.484918][T29674] kobject: 'ep_00' (ffff8880541cb010): kobject_uevent_env
[ 2595.503757][T29674] kobject: 'ep_00' (ffff8880541cb010): kobject_uevent_env: filter function caused the event to drop!
[ 2595.525929][T29674] kernfs ep_00: removing
[ 2595.536444][T29674] kobject: 'ep_00' (ffff8880541cb010): kobject_cleanup, parent 0000000000000000
[ 2595.554553][T29674] kobject: 'ep_00' (ffff8880541cb010): calling ktype release
[ 2595.569995][T29674] kobject: 'ep_00': free name
[ 2595.580478][T29674] kernfs autosuspend: removing
[ 2595.590972][T29674] kernfs level: removing
[ 2595.599816][T29674] kernfs connected_duration: removing
[ 2595.610969][T29674] kernfs active_duration: removing
[ 2595.621815][T29674] kernfs persist: removing
[ 2595.632000][T29674] kernfs descriptors: removing
[ 2595.641381][T29674] kernfs runtime_status: removing
[ 2595.652167][T29674] kernfs control: removing
[ 2595.662411][T29674] kernfs runtime_suspended_time: removing
[ 2595.673208][    C0] virtqueue callback for ffff888146255400 (ffffffff847670d0)
[ 2595.680648][    C0] virtqueue interrupt with no work for ffff888146255200
[ 2595.687612][    C0] virtqueue interrupt with no work for ffff888146255000
[ 2595.694784][T29674] kernfs runtime_active_time: removing
[ 2595.701250][T29674] kernfs autosuspend_delay_ms: removing
[ 2595.706979][T29674] kernfs power: removing
[ 2595.714204][ T4329] Added buffer head 0 to ffff888146255400
[ 2595.720440][T29674] kernfs 189:26: removing
[ 2595.729427][T29674] kernfs dev: removing
[ 2595.738180][T29674] kernfs uevent: removing
[ 2595.747179][T29674] kernfs removable: removing
[ 2595.757622][T29674] kernfs configuration: removing
[ 2595.768384][T29674] kernfs bNumInterfaces: removing
[ 2595.779254][T29674] kernfs bConfigurationValue: removing
[ 2595.790429][T29674] kernfs bmAttributes: removing
[ 2595.800936][T29674] kernfs bMaxPower: removing
[ 2595.810063][T29674] kernfs urbnum: removing
[ 2595.818980][T29674] kernfs idVendor: removing
[ 2595.829228][T29674] kernfs idProduct: removing
[ 2595.833978][T29674] kernfs bcdDevice: removing
[ 2595.838674][T29674] kernfs bDeviceClass: removing
[ 2595.843715][T29674] kernfs bDeviceSubClass: removing
[ 2595.849033][T29674] kernfs bDeviceProtocol: removing
[ 2595.854309][T29674] kernfs bNumConfigurations: removing
[ 2595.859799][T29674] kernfs bMaxPacketSize0: removing
[ 2595.865053][T29674] kernfs speed: removing
[ 2595.869411][T29674] kernfs rx_lanes: removing
[ 2595.874066][T29674] kernfs tx_lanes: removing
[ 2595.878714][T29674] kernfs busnum: removing
[ 2595.883195][T29674] kernfs devnum: removing
[ 2595.887655][T29674] kernfs devpath: removing
[ 2595.892228][T29674] kernfs version: removing
[ 2595.896808][T29674] kernfs maxchild: removing
[ 2595.902166][T29674] kernfs quirks: removing
[ 2595.906636][T29674] kernfs avoid_reset_quirk: removing
[ 2595.912075][T29674] kernfs authorized: removing
[ 2595.916876][T29674] kernfs remove: removing
[ 2595.923043][T29674] kernfs ltm_capable: removing
[ 2595.927934][T29674] kernfs devspec: removing
[ 2595.933153][T29674] kernfs manufacturer: removing
[ 2595.938134][T29674] kernfs product: removing
[ 2595.943412][T29674] kernfs serial: removing
[ 2595.947863][T29674] kernfs subsystem: removing
[ 2595.952586][T29674] kernfs 1-1: removing
[ 2595.956809][T29674] bus: 'usb': remove device 1-1
[ 2595.962560][T29674] kernfs 1-1: removing
[ 2595.967877][T29674] kernfs driver: removing
[ 2595.972366][T29674] kobject: '1-1' (ffff88807d6070a8): kobject_uevent_env
[ 2595.979437][T29674] kobject: '1-1' (ffff88807d6070a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1'
[ 2595.997343][T29674] PM: Removing info for usb:1-1
[ 2596.002513][T29674] kobject: '1-1' (ffff88807d6070a8): kobject_uevent_env
[ 2596.009609][T29674] kobject: '1-1' (ffff88807d6070a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1'
[ 2596.010667][ T4289] Bluetooth: hci1: command 0x0405 tx timeout
[ 2596.020608][    C0] nf_conntrack: new packet for ffff888074166c00
[ 2596.020628][    C0] nf_nat: Already setup manip DST for ct ffff888074166c00 (status bits 0x188)
[ 2596.020694][    C0] nf_nat: Already setup manip SRC for ct ffff888074166c00 (status bits 0x188)
[ 2596.026631][ T4289] hci1: err 0x6e
[ 2596.054382][ T4289] hci1 cmd_cnt 1 cmd queued 0
[ 2596.067453][T29674] kernfs 1-1: removing
[ 2596.071881][T29674] kobject: '1-1' (ffff88807d6070a8): kobject_cleanup, parent 0000000000000000
[ 2596.081758][T29674] kobject: '1-1' (ffff88807d6070a8): calling ktype release
[ 2596.089166][T29674] kobject: '1-1': free name
[ 2596.094099][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2596.102298][    C0] kcov: kcov_start: t = ffff88813fef3c00, size = 262144, area = ffffc90002101000
[ 2596.111507][    C0] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 2
[ 2596.120275][ T4329] nf_conntrack: normal packet for ffff88802e48b680
[ 2596.161242][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2596.169473][    C0] kcov: kcov_start: t = ffff88801fa43c00, size = 262144, area = ffffc90002101000
[ 2596.178171][    C1] virtqueue callback for ffff888141acc400 (ffffffff858ab660)
[ 2596.178800][    C0] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 22
[ 2596.186113][    C1] No more buffers in queue
[ 2596.198822][    C1] Receiving skb proto 0x0806 len 28 type 1
[ 2596.204718][    C1] No more buffers in queue
[ 2596.209263][    C1] No more buffers in queue
[ 2596.213794][    C1] eth0: xmit ffff8880568bdc80 42:01:0a:80:00:01
[ 2596.220083][    C1] Added buffer head 10 to ffff888141acc600
[ 2596.225981][    C1] virtqueue callback for ffff888141acc600 (ffffffff858ab750)
[ 2596.233548][    C1] Sent skb ffff8880568bdc80
[ 2596.238107][    C1] No more buffers in queue
[ 2596.250695][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2596.258948][    C0] kcov: kcov_start: t = ffff88813fef3c00, size = 262144, area = ffffc90002101000
[ 2596.268285][    C0] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 22
[ 2596.320460][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2596.328704][    C0] kcov: kcov_start: t = ffff88813fef3c00, size = 262144, area = ffffc90002101000
[ 2596.330580][    C1] nf_conntrack: new packet for ffff88801a6dc780
[ 2596.338079][    C0] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 22
[ 2596.344189][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2596.361389][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2596.370501][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2596.379412][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2596.381204][    C0] nf_conntrack: new packet for ffff888074166900
[ 2596.394674][    C0] nf_nat: Already setup manip DST for ct ffff888074166900 (status bits 0x188)
[ 2596.403627][    C0] nf_nat: Already setup manip SRC for ct ffff888074166900 (status bits 0x188)
[ 2596.423485][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2596.431718][    C0] kcov: kcov_start: t = ffff888027323c00, size = 262144, area = ffffc90002101000
[ 2596.440945][    C0] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 22
[ 2596.449652][T29674] usb usb1-port1: debounce total 100ms stable 100ms status 0x100
[ 2596.457528][T29674] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc9001ae9a000 1048575
[ 2596.468794][T29674] kcov: kcov_remote_start: handle = 100000000000001, context: task
[ 2596.476759][T29674] kcov: kcov_start: t = ffff88805bff9e00, size = 1048576, area = ffffc9001ae9a000
[ 2596.486263][T29674] hub 1-0:1.0: state 7 ports 1 chg 0000 evt 0002
[ 2596.495085][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2596.503296][    C0] kcov: kcov_start: t = ffff88813fef3c00, size = 262144, area = ffffc90002101000
[ 2596.512520][    C0] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 2
[ 2596.521159][T29674] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc9001ae9a000 6114
[ 2596.529833][T29674] hub 1-0:1.0: hub_suspend
[ 2596.534552][    C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq
[ 2596.542752][    C0] kcov: kcov_start: t = ffff88813fef3c00, size = 262144, area = ffffc90002101000
[ 2596.551977][    C0] kcov: kcov_move_area: ffffc90019001000 1048576 <= ffffc90002101000 3
[ 2596.560796][T29674] usb usb1: bus auto-suspend, wakeup 1
[ 2596.568491][T29674] usb usb1: dummy_bus_suspend
[ 2596.574511][T13056] wlan1: Trigger new scan to find an IBSS to join
[ 2596.582082][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
[ 2596.592399][T13056] hwsim sw_scan request, prepping stuff
[ 2596.598083][T13056] ieee80211 phy38: mac80211_hwsim_configure_filter
[ 2596.607134][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
[ 2596.673166][    C0] virtqueue callback for ffff888146255400 (ffffffff847670d0)
[ 2596.680650][    C0] virtqueue interrupt with no work for ffff888146255200
[ 2596.687634][    C0] virtqueue interrupt with no work for ffff888146255000
[ 2596.694884][T29674] Added buffer head 0 to ffff888146255400
[ 2596.701431][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2417(2417 - 0)/noht idle=0 ps=0 smps=static)
[ 2596.810947][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2422(2422 - 0)/noht idle=0 ps=0 smps=static)
[ 2596.890361][    C1] net_ratelimit: 24 callbacks suppressed
[ 2596.890382][    C1] wireguard: wg0: Sending keepalive packet to peer 217 ([::1]:20002/0%0)
[ 2596.904619][    C1] wireguard: wg0: Sending keepalive packet to peer 223 ([::1]:20002/0%0)
[ 2596.913212][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2427(2427 - 0)/noht idle=0 ps=0 smps=static)
[ 2596.914326][    C1] wireguard: wg1: Receiving keepalive packet from peer 225 ([::1]:20001/0%0)
[ 2596.924193][    C0] wireguard: wg1: Receiving keepalive packet from peer 219 ([::1]:20001/0%0)
[ 2597.030777][ T5366] ieee80211 phy38: mac80211_hwsim_config (freq=2432(2432 - 0)/noht idle=0 ps=0 smps=static)
[ 2597.050432][    C0] nf_conntrack: new packet for ffff888074166c00
[ 2597.056795][    C0] nf_nat: Already setup manip DST for ct ffff888074166c00 (status bits 0x188)
[ 2597.065769][    C0] nf_nat: Already setup manip SRC for ct ffff888074166c00 (status bits 0x188)
[ 2597.130817][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2437(2437 - 0)/noht idle=0 ps=0 smps=static)
[ 2597.210378][    C0] session ffff888054d18c00 state 3
[ 2597.215645][ T3342] ffff888054d18c00 dlci 0
[ 2597.220036][ T3342] ffff888054d18c00 cmd 83
[ 2597.224627][ T3342] session ffff888054d18c00 len 4
[ 2597.229614][ T3342] sock ffff888023f3a400, sk ffff88805415e000
[ 2597.240795][ T4396] ieee80211 phy38: mac80211_hwsim_config (freq=2442(2442 - 0)/noht idle=0 ps=0 smps=static)
[ 2597.342027][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2447(2447 - 0)/noht idle=0 ps=0 smps=static)
[ 2597.370396][    C1] nf_conntrack: new packet for ffff88801a6dc780
[ 2597.376731][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2597.385703][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2597.394721][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2597.403678][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2597.440430][ T4396] ieee80211 phy38: mac80211_hwsim_config (freq=2452(2452 - 0)/noht idle=0 ps=0 smps=static)
[ 2597.450729][    C0] nf_conntrack: new packet for ffff888074166900
[ 2597.450763][    C0] nf_nat: Already setup manip DST for ct ffff888074166900 (status bits 0x188)
[ 2597.450797][    C0] nf_nat: Already setup manip SRC for ct ffff888074166900 (status bits 0x188)
[ 2597.590403][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2457(2457 - 0)/noht idle=0 ps=0 smps=static)
[ 2597.673090][    C0] virtqueue callback for ffff888146255400 (ffffffff847670d0)
[ 2597.680599][    C0] virtqueue interrupt with no work for ffff888146255200
[ 2597.687578][    C0] virtqueue interrupt with no work for ffff888146255000
[ 2597.694741][T29674] Added buffer head 0 to ffff888146255400
[ 2597.701027][ T5366] ieee80211 phy38: mac80211_hwsim_config (freq=2462(2462 - 0)/noht idle=0 ps=0 smps=static)
[ 2597.801308][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
[ 2597.817729][T13056] ieee80211 phy38: mac80211_hwsim_configure_filter
[ 2597.831126][T13056] hwsim sw_scan_complete
[ 2597.840027][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=1 ps=0 smps=static)
[ 2597.860379][    C0] wireguard: wg0: Sending keepalive packet to peer 224 ([::1]:20003/0%0)
[ 2597.869025][T29674] nf_conntrack: normal packet for ffff88801a6dc180
[ 2597.875844][    C1] wireguard: wg2: Receiving keepalive packet from peer 227 ([::1]:20001/0%0)
[ 2597.884792][T13056] wlan1: Creating new IBSS network, BSSID de:9b:16:f4:03:8f
[ 2597.900400][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
[ 2597.920428][T13056] ieee80211 phy38: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
[ 2597.930653][    C1] wireguard: wg0: Sending keepalive packet to peer 217 ([::1]:20002/0%0)
[ 2597.930735][    C1] wireguard: wg0: Sending keepalive packet to peer 223 ([::1]:20002/0%0)
[ 2597.948009][    C1] wireguard: wg1: Receiving keepalive packet from peer 219 ([::1]:20001/0%0)
[ 2597.948625][    C0] wireguard: wg1: Receiving keepalive packet from peer 225 ([::1]:20001/0%0)
[ 2597.957282][T13056] ieee80211 phy38: mac80211_hwsim_vif_info_changed(changed=0x4000 vif->addr=08:02:11:00:00:01)
[ 2597.976250][T13056] ieee80211 phy38: mac80211_hwsim_conf_tx (queue=0 txop=0 cw_min=15 cw_max=1023 aifs=2)
[ 2597.986297][T13056] ieee80211 phy38: mac80211_hwsim_conf_tx (queue=1 txop=0 cw_min=15 cw_max=1023 aifs=2)
[ 2597.996196][T13056] ieee80211 phy38: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=2)
[ 2598.006095][T13056] ieee80211 phy38: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=2)
[ 2598.015998][T13056] ieee80211 phy38: mac80211_hwsim_link_info_changed(changed=0x2000 vif->addr=08:02:11:00:00:01, link id 0)
[ 2598.040402][T13056] ieee80211 phy38: mac80211_hwsim_vif_info_changed(changed=0x8800 vif->addr=08:02:11:00:00:01)
[ 2598.050885][T13056] ieee80211 phy38: mac80211_hwsim_link_info_changed(changed=0x3fe vif->addr=08:02:11:00:00:01, link id 0)
[ 2598.062274][T13056] ieee80211 phy38: mac80211_hwsim_link_info_changed: BSSID changed: de:9b:16:f4:03:8f
[ 2598.071955][T13056] ieee80211 phy38:   BCN EN: 1 (BI=100)
[ 2598.077564][T13056] ieee80211 phy38:   ERP_CTS_PROT: 0
[ 2598.082985][T13056] ieee80211 phy38:   ERP_PREAMBLE: 0
[ 2598.088441][T13056] ieee80211 phy38:   ERP_SLOT: 0
[ 2598.093663][T13056] ieee80211 phy38:   HT: op_mode=0xb
[ 2598.099000][T13056] ieee80211 phy38:   BASIC_RATES: 0xf
[ 2598.100594][    C0] nf_conntrack: new packet for ffff888074166c00
[ 2598.105530][T13056] mac80211_hwsim hwsim37 wlan1: bond_netdev_event received NETDEV_CHANGE
[ 2598.110676][    C0] nf_nat: Already setup manip DST for ct ffff888074166c00 (status bits 0x188)
[ 2598.110717][    C0] nf_nat: Already setup manip SRC for ct ffff888074166c00 (status bits 0x188)
[ 2598.119695][T13056] net wlan1: siw: event 4
[ 2598.410399][    C1] nf_conntrack: new packet for ffff88801a6dc780
[ 2598.416728][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2598.425689][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2598.435772][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2598.444701][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2598.490531][    C0] nf_conntrack: new packet for ffff888074166900
[ 2598.496903][    C0] nf_nat: Already setup manip DST for ct ffff888074166900 (status bits 0x188)
[ 2598.505862][    C0] nf_nat: Already setup manip SRC for ct ffff888074166900 (status bits 0x188)
[ 2598.673031][    C0] virtqueue callback for ffff888146255400 (ffffffff847670d0)
[ 2598.680505][    C0] virtqueue interrupt with no work for ffff888146255200
[ 2598.687479][    C0] virtqueue interrupt with no work for ffff888146255000
[ 2598.694711][ T8554] Added buffer head 0 to ffff888146255400
[ 2599.130381][    C0] nf_conntrack: new packet for ffff888074166c00
[ 2599.136736][    C0] nf_nat: Already setup manip DST for ct ffff888074166c00 (status bits 0x188)
[ 2599.145683][    C0] nf_nat: Already setup manip SRC for ct ffff888074166c00 (status bits 0x188)
[ 2599.155704][ T8554] nf_conntrack: normal packet for ffff88802e48b680
[ 2599.450422][    C1] nf_conntrack: new packet for ffff88801a6dc780
[ 2599.456753][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2599.465717][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2599.474761][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2599.483728][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2599.530470][    C0] nf_conntrack: new packet for ffff888074166900
[ 2599.536851][    C0] nf_nat: Already setup manip DST for ct ffff888074166900 (status bits 0x188)
[ 2599.545821][    C0] nf_nat: Already setup manip SRC for ct ffff888074166900 (status bits 0x188)
[ 2599.672974][    C0] virtqueue callback for ffff888146255400 (ffffffff847670d0)
[ 2599.680454][    C0] virtqueue interrupt with no work for ffff888146255200
[ 2599.687431][    C0] virtqueue interrupt with no work for ffff888146255000
[ 2599.694563][ T8554] Added buffer head 0 to ffff888146255400
[ 2600.170443][    C0] nf_conntrack: new packet for ffff888074166c00
[ 2600.176772][    C0] nf_nat: Already setup manip DST for ct ffff888074166c00 (status bits 0x188)
[ 2600.185755][    C0] nf_nat: Already setup manip SRC for ct ffff888074166c00 (status bits 0x188)
[ 2600.490424][    C1] nf_conntrack: new packet for ffff88801a6dc780
[ 2600.496755][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2600.505738][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2600.514957][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2600.523945][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2600.580465][    C0] nf_conntrack: new packet for ffff888074166900
[ 2600.586852][    C0] nf_nat: Already setup manip DST for ct ffff888074166900 (status bits 0x188)
[ 2600.595818][    C0] nf_nat: Already setup manip SRC for ct ffff888074166900 (status bits 0x188)
[ 2600.672903][    C0] virtqueue callback for ffff888146255400 (ffffffff847670d0)
[ 2600.680363][    C0] virtqueue interrupt with no work for ffff888146255200
[ 2600.687338][    C0] virtqueue interrupt with no work for ffff888146255000
[ 2600.694457][ T8554] Added buffer head 0 to ffff888146255400
[ 2600.893142][ T8554] nf_conntrack: normal packet for ffff88801a6dc180
[ 2601.210391][    C0] nf_conntrack: new packet for ffff888074166c00
[ 2601.216779][    C0] nf_nat: Already setup manip DST for ct ffff888074166c00 (status bits 0x188)
[ 2601.225738][    C0] nf_nat: Already setup manip SRC for ct ffff888074166c00 (status bits 0x188)
[ 2601.530407][    C1] nf_conntrack: new packet for ffff88801a6dc780
[ 2601.536741][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2601.545747][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2601.555014][    C1] nf_nat: Already setup manip DST for ct ffff88801a6dc780 (status bits 0x188)
[ 2601.563974][    C1] nf_nat: Already setup manip SRC for ct ffff88801a6dc780 (status bits 0x188)
[ 2601.610443][    C0] nf_conntrack: new packet for ffff888074166900
[ 2601.616811][    C0] nf_nat: Already setup manip DST for ct ffff888074166900 (status bits 0x188)
[ 2601.625768][    C0] nf_nat: Already setup manip SRC for ct ffff888074166900 (status bits 0x188)
[ 2601.672848][    C0] virtqueue callback for ffff888146255400 (ffffffff847670d0)
[ 2601.680335][    C0] virtqueue interrupt with no work for ffff888146255200
[ 2601.687306][    C0] virtqueue interrupt with no work for ffff888146255000
[ 2601.694497][T29674] Added buffer head 0 to ffff888146255400