last executing test programs: 3m0.094062617s ago: executing program 3 (id=2103): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x80, 0x0, r1}, &(0x7f0000000500)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x609}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) 2m58.98607402s ago: executing program 3 (id=2109): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000001c0)={0x4, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1ca1, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x200080, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES64=r5, @ANYBLOB="5dfbb2b6641d0c4b952c3548bfeea00cc05d487514e7794f2c389832f9500aac8dc4349d99edf3efeccdeba789fe62af348b78c59bf30f6f31ce8d10bc90c4b009cc3a247593beab0b731c43ee5684", @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRESOCT=r4, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x40, 0x8f, 0x7ffcffff}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0xfff, 0x9, 0x2, 0x5a1, r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(r6, 0x0, 0x0, 0xd4, 0x4) openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000001440)={0x122640, 0x10b, 0x7}, 0x18) r7 = socket$inet(0x2, 0x4, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r7, 0x100000000) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(0xffffffffffffffff) 2m57.34675646s ago: executing program 3 (id=2116): ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100"], 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 2m55.352061609s ago: executing program 3 (id=2129): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_getoverrun(r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xb0, 0x0, 0xfffffffffffffff7, [{{0x1, 0x1, 0x400, 0x86, 0x9, 0x2, {0x3, 0x3, 0x7f, 0xa, 0x8, 0x7, 0xfffff1be, 0x2, 0x4, 0xe000, 0x6679aa80, r3, r4, 0x8, 0x8}}, {0x0, 0x1, 0x8, 0x2, 'rootmode'}}]}, 0x0, 0x0, 0x0}) r6 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) migrate_pages(r6, 0x5, 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="2c7f3a6fc245d681b084e71bc56b18ce046e3a78ede7077c0fa7890497e6e51fd41654be1eb9c2d19317839140b4519f3e8565dc8567eb4b60ef31856b8e5102bce08854a96fa59e2f9514cc941a2e3504fc642f22ba91631cb35ba6f5efaa8802c2daedb17217aa436fd3590f633dec00a56bca002732e08f28d42af0e9bb20e30a34ffedf9471ab60e2f7648d568edb191c6732ecf6704e27e979602663071244e9155fb4408944b5e4a60149debcab2f2e13b8200e917010b4f2dc8ea98d45a77ef00daec0f4852d2ea050606cae921869f9c5f6e5eeb4b1e83ab8bb7b28a69abd09e9221a22bab9f4be89261775b6932c5cb364895849722c4b46ed80289a881638b763d84ce5f70509a47f08c4f20e02119d15f1d85ac57c9ed6fb042fcca5cfac8fa563254ba5d093ee77d00ba8a73e328777d8b4e8bfc298e2d51ad63d8c546480093883aece2e0692c240f45b6771adb53c79731488afbf6231364c546daf3f55c48c79412c1b2c7b2170e29c514046d095e5fcaa7bf5d18d06ee00b067a23f8287929f977e9740469f479103d44df9368f5961998829cb66cf61ed458b1a55d3328cb757894d3202e886645122d995d3cd2c30c47ff46897cb880cd1409026cee957dbc154665664cfb725eef87cc39992dcc7b740693050e32398c91f1cd13a9fe7ef5268e8602149275c512a2aafcb4e9b3d484f7814516c569299b9b81a02facf43c0c5753b3000fb68f29c88d1e920c26f9ca0c002a20fe64857a025b249cebef97915dd708f9006cde6a7dab39422cf537ff9ef14802526a70bf477504c3d1059a75d8eb5378528c5edaaa096019bfe89cf9ed8b9aded0d93bc5f0e6dc21294948b630a5c1613ce168338152e1dc63c4d63b9bc64aad9836e24019d32327cb30f3e22a509dcd210d1e906b57a96013c589e8a96edf92baf736f0c69988030d93c5afac4f31d09a2b23d0bde1c818c58ce828d33bc810d8116807ec1a4acf537c077b1a5956edb9a581737fd3039420750ce4ea71564f071b55682487ba33e1478289a37cdcda771feb1d5864fce210036174bd24896844049a13a4f8a540bd7dfe32cf5896e2018f1b1b7dd603a019c3f5485c851b9e98e3110719c9680ba15578cbb5120730ebe8860b199eba93fbd63bb5150963bfac8bd5893a1b3d5ae457a1d74a8684aa7aaed4a28413ab4d59559cbd3a8c592c7bdb34e03e36809d9d8e470d4a88d38a6b1ffa1be60ab73c3eaef6a07f1d1572a438acc52e4a4d370eb87f3445daadc7ae52c15523414aa0b21abbef0bb97eee7b84e5e4d6b4573ce84eb16cc9139a03a100adad0aa2ec509b3fdc50aaa37244346071fdc3b23d10df5a9eaadb9aede01e02d67d0b5924a92f1d24c6d83329c4cec5abfc9678fb7dbd1aedf558eeda4bc917599948b8efafc9fbe0052559e9d2f94b779dc3b59825ae867bf647de5211ce8916c8ac01347804c9c5fe7958d44e63cea3241eeac5981ed5d93cadc2d21610f7d398d4526395d71cc97e5fbb20396a777977d92c47b912f0fcc93c171df535729e783337d0260db9db9959909c4913a3496f23244258419562f410ee8d68e30b05fd6d5cc88dc39659540d74a9d1eff09afc760ba6a32bd6405377881716de82a22970678c792d46b71e268ddcff321e1109cb27051ca54d9093da5e32d17bda5f90ee37cd172585489ff764f16adddcc59e94e7c3159ae4f60cf66c05af269d93f350a58ea0d5b6963a70264886170142f0502e81f0d922004f1776014ad2ed56175340d80f424702966438809542ff082033d1bcfd428fab8d54572a84fd1c1b357e8bce5db197af4f3110ef2b23379103e3f7d188f50c45e057cf468ef3e44123f7227ee60e2bbac3ae0311d9326660f8208e8544dc5aa66cfb3b9598585594d1dbd60f58bc7364baedc58062fad0854370d9788da40cebabf1ef729ed92ebfc74627c55c1b37ddbe7a2c8c254cf4121fc6d6686ae23c620e6615a594b975fcb49a319ea27a668c555dda48c4a1b40bdd45adc170d0cf1e02a5aa3856ad06c1951c77745e72420aca20348aadacb0ba9dc66ed46aa56c939228cbee5c8ad7f7aca94c2302c4908476290bdea9e7d262c23d9ddd9d5855eadb151eedf6d8d95766319bcf330a94110b0895657dcfb7d12dcbab7cc15df4b3cca9ff3b2295f0ad13c21f22573d1fdf5630c79b5fe46f1adfe7bb9cadb850418aea1ff10e2df9b49c5d07a000a619d21e13809414549ee0d89cf39f3c00fc2113b2884edbf18b00a8b1103d4f40bd5fccc6e50d8ee3d0f2588774fbbdde3869ac9940d74feb11983244a4517d57690a6503c63ed56d7d52ddb10bc0e331f4738b804c429d1c208de672296b3f87acbac1c9874e0f0b33edd5e1e2ebb0927730c86d7ad07e36402c3f1515d4cf29ac68789242f44bfaf775e5ba5fcfb6f4d4371ab8ad9d6eb8b2ae27fa8ffc9801fec0a107d19ddd4c25d36eb750ef4ed805e4fbff4122bc2b8afcd329c9170ae410731169f11e2015e9e2228d37b775809a28ec6a3b67e0572f47bf6498c2a147a594ab309b6a18ff5b8f41fa8535bc3b342bd5c23576c2fc78626a84765c71644e8bb2b033a5080f70ea0ccbdef77922a668ea9415ca6602aab534187402e2840393854b331e91dbf9ac337a6d0d80deeb4ab423f0690babfe0571e355d2ac548d889abc896cfb867c147b29162d47899c4961354a5531baafa04aff30f1ce0eecb8218e922575037c19ad74f76e489a2d18b6fc5f1fa765a005c9acf03aa723f7321e8eedddcb4ebc839c188da378dc15575a6804e0cd79b9bfbc0c7fbbeaedd292b14644d3e962cad174fd62f9ded4630d27b6ad66575349d96ea055f26ab5645a41d64706c47036674180ea39e8d9031218bba148cc26d77fff99029629b88a644821f5e8149011cc0e2e3803680eda38bc771ff7f5eff707388d1d87f94cbfaa55e1a0de5e945f3aa0086114b5c64f29a0d09e2a7de267d61ba09b11020e34b17180f9929a1dd3d781df95365fd638cf3d858755b481880c6e529cc44b9fbd417a7cbf4f4e7bc5deed2c7f038afd951872baad9799f53b197182c917d3605cbb5de2c95fa9d09b883c3d9f6cf1cb30ff6aaadd6e17010325cabdb247af05faf9df9b0aee027857f88c3da7ad19e08da3cb5f663cc9dce6eec8416a0bfbe2e77a5b20a6da4e4acc9670c7cc63eddf615d13fd89e2f00aefb1439e69a2818b8f24d7ae04bc718a401fba508b0685e1e52dc7bca6c53c049d757d5755ba6394427ba45bafec43c39cbc3a5f68b88afdefa51df6be63a0c63f39c69e2ad10567cf7b408e15fd441ac365be897d6b60fe30bba997045c0ae891326369206cf9c53a609292eebe3f67c58964535710929c37211cade7dae9c965933b1aa2377d056ae400d8ef9f540f11c907f48858007fcb9303b0f2814cc6dd30636389f167d88847c9a55fb6a70adf41e54f7a433a79c9464f72ad2f615386cfa0b14081f1f55eb54b9dc96f4910ad369f37cb33259a4fae1dcf051699017ec8dce20f5401a768275f54cb61c346f06217de6eb195982b49b0a576d894fdeb1796a1b99b72d99783eca623fee56d239c263b0db23caea3462136cdac22128f0acbab8b332a7c1303bbb5997114f987398e0afbce9678ec9ce3a93b7d66fc8359c9ba1b53a65d90a1eb62caa8c56b98b337289809a56874f631edf56c508ef43106147be721c4597291f19dc8cd4150d2b34ea30846fcd8531b34dbbae516e7c42366e980c91d0180421195fb6bfb9574c2741d0a45583e275b1fd0e48f4b164957247b81a5c0292075a38f5016ab017d39c5783eb8b602281867cfdd980ee1fbe181617c526f2b3bc64905474d352b07ae36e89f5829c49b3bd2f27df0d11d1b893cfc16d2e3dcca2adc1f54915fdf6bf55be5995197bfdae10dec6556ff5f61e5e1f64112f153892b79051fa92f852854360eab66a2d9012eca143affe992ed5ad883bcb736a883e12c25d025790a1c477258a413b71fdf6321f2624efbe74f7bf816f6b07ef348bc8a8389c73293f320951d093307baa49f7544bab3b51cdc52a0cb1994358d4ca436aa66f791adae81921a01c807f1212e38b7dacc6ab7cd2a0809069c88787daecb201e7e82d321248c1f747eb9c31f76017436c2aa345c13ed45227214d37eb6701c15ff52b1d5d3d490dc80d67bd3b779009939a7dd65e759317103f21695ba06260f455d98454e3992f419899047e8ae24ef10b3c96621506d65a5c20dc5732a71478c019b240f1194fc959d77df7a1d5d6b1b6f8f43cf7e4d4d72dadf888041c3936f354045b15f2530bbdc38a2fbd8a966732ffe26d994b7ffa0c558259ff7395e4bad1f3225250ba85707e5c653e742bed1a342e6fe56c75a4c7cdf7f342e83b6a83e5dff2ee9aaab8edcc7a3ee33631887b2492995da3190e3ca8ba74ac2732a27d6524218605207c8387baf8372e3cc79879b78590dc5447ddc0aadd6c7aacbd354a445d826d6a07f89245c26ea48871a01dc9cdb40e0c6d20e5aae8141aa3aa15b5e6c85abf6eb8be70b056cabdd6da3f383b8e94fbbb1a0d9480dc55542cedb897a90b48a61776ddc4532c995c10c262c22bbac38ba5b111a09d3587ea98feaa6288bdb3f5bb3bee3ea69e4440f0192a34bf3498b933abdbfbeec830a6e74171cedc90847bc05047402f7f0501e5ca2503022c613dc779fe618ffec011ff69b9e37ad5cc2340f28656093f792742a3069c8a96e213cde8c33d110a2723bd41db10e3842e4f019f10b56c18d2093d9b508a043e1242bbc9de165f21df3530c470cda9e60a3859833bcccb9715ffd7313bac4ac1b9c1d0a3e71bb5ddba842084683a3e2ebb2b1d9fc9dbb6ecfc92af8c7bba41f3eee1c861e73d1e1e6aa7310b9adf5fc32f94913ce8cb2f924c6fb5df0be37b10d50c58b201833b03c1712d4fe50a2054a045084b892fb77457d2f0e399256a599bd91feffe659f3feeab33f8ffa4e4747ccad3814d43980d5cdb46b3a1f033b782162cdc89162a1d901590f5344781ec7d96713103893766684a4a71bf482d4223ab8c0f71b09bdfe176063ba3a967f5b5907f501302d00ad10f030aa640559feca28d9d2362ad4be69d9012ccb8ed8bb031ed27c03134c2e00de5743adf4deb78f3162f3d194d70250b4020ff64d52a30755e699d58460cac659c63c4633b43317a2265d8be16bb1abbe492033ede9d12744741124370e441e6614ab896aa239b30cfe55db1cf09c527fd23725bbd209e89aab62e517bf1449c2fbc203d78ad763892cdd5934fdbc97f023334201501260588ec39bc7b6231fe38b5b9ac8fc121049cd61c33fd23ff0480363ddd82fcb6f5d118724427fde4671cd416b96298727927f476e83bbc17f0856c7988b88e76f0cedb5d397ce4cb76efc02d7fc626e838b08ed594659cba8537f319585365f83b1269c3d4dd253bf238690dcf542b715b419100b03857f57a0dad7d2f0e099597de6bdbd9f0e18ce6a6ca478bfd7644e3ddb913bef96569c74f5733176fd25749436d6f6c8852821ad5653401814657f7ff5ccb1d47161eabdf56573f38f766827cb8bbd1fd9fd26d5eeb2e9dc5c0b0e05d0a8e335da8180f384c6bac1ad872accfe09ac9ca9102f2c35dad7689cf734a5378dc8d834b267560a089da2372d5cfbbce9aa13a55dba0b03def8ee1dec2f6a97ff7ff9a35e65272a0fff7db3aec4e9456b1d310f9b69e910be07fd161de8f67b845805282a51572a7b3668c923d03a600cfa68a881bddcf814ff4a98d9adfa2d06e883d3e65f8b6d4ca5dc4667be08449be9d08cd6fbb78c11873b1ef3f081b10cf6314bbd06ffb380df233d0e644dc8ee498bd95333c2daf9db0e6801fb274577205e791071debdb01d9786b1cc624e1425b1561afb438feaf5069937de348c51e0b4c79c88856791e9bf736d6c748025f9b28182521b67596acdf15a9e41fa02b592de42d72702ba41c1976029e082d4bb2f63da60d73732bb98783db88cc0d09e849ffac5323b2b28290ba34d1a3e0c1228a2fb0c2e92503b51d54fd0825948ca15c5511b032c36cce2c04431a47cbc378e3ec1c57ad3b37aa2b667bbc23f21880dce621a3b203579da06ffb79359619b181a72ed4d192e52c13f2dacfc18ba40f7254071e1103a164f5cf8323bbec9cd9fa6f2c9eae70715a1ef57b18c6908dabb0f7c1efe1a6ae9b6068e510209d54f760f922ed4401f1709ab65a1e4953772054d585b8a8a738463f6d70ee9dc180feeab307e6ee094ad80050a3dd450a75a7e7dff6e7a74256f2b651ce905d1c99eb30786c00e1544872b76892286848b297f31d8222cf23a4a4a664bd784ffb7a2c3abadac43cc7a791926e59e0471bdc45186ff4f564b68a9b8beedd2ef63b79823acc0a81c867b443d8f8a2242e6efe1838a8db801930644cbc73d769c0e1668a413eb2609b6151329edce4a024c5ff11110beb54a408e752729e033baccecbd321dfd8e4f16f79d16d13aa4ef212139d0cb81c8f755b6d189ef9c2869e5c2cee655df4b75c00828333c8b62c93b3ec270fe0c1af3fae784c950b441f6f78639ea5678652fbd216700d4ee85cd8662db78a061e959507787e12c7ba002f08fa01a860b34549e89bd1d3da3d23befc59ce2d50abcecba8671f4e8c312816f3977e65479b6fa8cfc618e1f569e9a12c8faea700e86748ff468c43adbd7ea74ce1702d2659bfc26ce49b24c62731dfc1f161bd31d8b6af4ea1100caf248ec18976f1a6c8143df40416e42ef9d225e40436b5fbf34450fad6f3bb8abfcffa367e0a16305dda8205bfdd33625667f709ec3a947e6ea1329c4f7d7aa8917aeccd6078e54ec7196ec7dfb27ee64e26df48a6a705c2ce330ca7b3f21a9ba1f55e2fc334adccbd7b05b489008a6d8c01f81b2b0d8933770e277ab8ceae9776e30df8573cc0032c487eea774893b300b7680188093074c71b4856436fb6dff8c82de2e227af5ea8dae0387a239c70ed977b9bc3087c55af8ec448eb4d819156fde9104bc6443d49ef5a4f3cf27614b99507c894af487637377d06476b3671c7158a870613e0a7d9ee3c693a7fd132adcc06c22e6d4655a2eef2570ab323f8a5a4b50360b0ec14c528b6cffa26b160a07c798947315ec19dafcb805b06dd45fd9a2f328dff773e680435b53349bb241cd82842f915fd23b27099b5ba5483a81fdea7f28408654f4932edfa33d10fd90281b208a9a5915543bc7e15427b4e5db36d1d1ab238e1c1cd5ffb646bf7cb033dd613bd2ddb6d56983d943618c5bd0e44f5c2d981b54ec7e5e7a988dbeb6d8b7c2707c3e7685ddbfe80fc77c1d9cb31c63c5436cd5b2b105dbc1cb7d024dcda8a47ba30068f24677b38503ba582c286437435d7b8a16dca4a56dad4db7e715a578391acfc62d6350ef92ef8b789877158c904803c3354affc8a235f2cc768856a13edf0a4cd9de6b67f7333e1b882a8ecadeb0fbc2005a708f838daf2dc86fe35d953a15d2ede3cc093e45f2719653da1d8936d10c596a66cfd588b5663e8c2afe73b5bc23c967826cf4d24fbbf9d68d18b8f65347933238d7242f69a458959cf51ae79f3f5c5a7180fe23cab53edbf0d81534b7f9b5c697981a0822c36aa483fd95111417834e5062e4ac25817727ac3380c91c7440bcb212a4354035c3813664c0fbf042623bd791873e90646940ef658f4784cdcb714e55d48cc3a30b0195895850aedc32df9435a53c0a9fab07ecfd8778d64b44be1d270fce94c2ff04e984b9f50d541e4d4d871d193a37a05f83d557be8d9cc66027d7dd3a6315b3c9838c0da8c897ca81bcb44e076bee3a7614d9806d018541c46c196b7fd677e2960306849be082875b535dd411428847dddfc2ee9af77a16c282c1ad32151ad2e2ec2a9a1281c593bddddda03afe69cd5bfd83a6e416fa2d47066533877a4dcf24b24d84dadd27acee6127fd94db9be4e3efe74650f2ad01a9adfcecfdc535cc48e3b770a9a8cde6cea193501fb89097c97d25f1bdf00c8b69ce94bd38e1c133b9f52fb8b05a7c477ce4bcaeffda896f457e21e4e93c779657cf05712a7ca161f9680a8619e1dee220ad153729b47789e737675a04733cf94fb494ecebfc8750dfe44e3959558d21ae42f76b705bf092e45445b2521162409cacc720aad8f00f5821f452953512798548369f5a5700c8d02d49cf797e7a48d05c7d7fcc09b9bbe21a907c81d5f4cbb978f21d25d802a047cd46640025f75f2c01c10a21c92a9dec5618dcbd6025dd67b215b038aaae91e76f7c729dd5b61092858013930675f124fc3c62b130f0d898affd9972a202785def90fe7f9ddd821c7de4b5acc2a30bc74085225c23e091cdb2ec42df6f5c88a6666ced41b601374c9e761c0686f71cc1c8f0daade0ba730dd6c2670df4db97c1d1ad250bf7eeaf7f5309ec18a4331e0c3a9808832898d208d7cd293bdfbb7c51d17e3f3d1397a579b8c81e5aec1e1b0ce4cd796f1cf68a49b19841126c73affc13641756cd954ad3c0e62caca61e71c9491441a294739e172d3306b00e4230febdb13bd7630184c8db1dc363fe62015e5985997d56b059dd0602b98a6bb4c0a8e0a10853cc19b2e9e187c0b2e8d70789cb863c71544445acb31edb4459698a21c1aed76a592786053f904f144d5e7715737c253a34a038cc47d4877f8140eb06fd7da9633772b445b21a7c6fe985997b64732bdf022538d57952f6f7340981ea8a2e1f19d639a3138e5f1e58f9413e74d1017f6f0649be152a3fb01a6f53521a446fd5f1a70d0279730a4ae15bc300490f55880232a3dc10a6519dc7b489160ef480e8fb3029428005c4cbee70ac0360094228e70afa66460d09e8d6ea83e89932d58a6a7ba76059de6ed122d3a02ca42bcb1572d214112e906ee607351663efea2dfd7d1a2bcb6d1d9f5d8351703b990944ca1db5452132de124677da884939c6b4890cb94f000d71f2edb511bb94a4f61afb5ee1edc7f4e14cf81ca27bbc5bcf7dd84dd495e0f174d3c9b43469c1ab1514430d7dd3adce3bdfeaa714162ea45e43f6a3b57d719449c7a191383d23069779fe7e57032c2d37d04054728acc67c2c87351d7615239978373bf22d2f5d70366eb7f3fb4a155293f98c9078b28aef1449e552616dc44963dd2b79061784f57a72105e180a6b2770c7cede4d321efda0dd526e0b5c05af55bfe606abf51569316dc0bdbc2f6f46c47a33b4bf9536acdf783dee9424605bd290f6ece0745b0890d836b24efb5361c457cc5fe6a61fe5251d60c60819365377c878a3a53229e88f3b02616ed33a23b46da3d3ecec20d174981ddb45bbfdafafc6d3296f6952e063f24a5024499b1a6b2045a29c1b8a7090e70c9f32bc187da0df89e3a1445057010206dc172ad0e247a84d8f665687f5c50eba70e019b88ebff42e9091675882af7c04c540e5b779603510d46f8e504a8a0cdcb9709ec0db4f882292c791398eefe3ac8951c0e055872c8cd29acf3b785dbd145a7c5b9e1e57853e6287ea09c2a167fd3f55ee323191dbc54f77c6875cd000a587896c658ccf47c66727d4e866206edd84b198a39adec533369ebaadb85b230b3457ed685548aa09c7c8a6e256b4c668a27a85871456e447fc221228a205ffe2b78276928416626d788feb47054db5409b03d923ab7d5443b135161171f70eee14f596d386707354be9422fcc4f3f318cd81ba2cce3e3d357b67e8fc70490a9a04d639d772077d5d8fb5665e4721e8142de055952f6c0152eb59d042f336e8e3b988de0cbad82fed64932fe71c3276ea1ec3034799b32761c71534f3b3db4037a9c541ccc6984b963c8da9cdc1ea4feaeb95ffece5aac1424a4e9d5e215c74c0f5d760e82d92126fc36eb5809ccc9e84e185494f5c0d01f68fc5623fedf20ba355166f22deabaaff5911b82ffefcb7e625ba4c3fd280d49eff03fe4114ed658c43a9d5321bd20ab75055fc3ae4270326f67e6d4ffc4ec54a727a5385f690aa18ca103edeeaf1725d4e13a7079314165e0ab1ed9e035bd530aaaaaee8f7e2a0134be70988795b535aefa64a8f52efb7ccaa3464dd9800a4281443dadfcc3d31d1acf1e205ff6f351a15efb2f19d587fbce90029ab9bc9d3dd3425c54b836492ae2c3726b91ce7e4b5082d83c8c22e394a529cb301c1288c03da50b3f16bb450522fcac0a2e7508640d130682557a615906be3506c27e6edfe2248182a5eb8f6df2da7be7d8db534b4f39e9ef46f336340e820a8433fd5df91c629e6bb459b770f750b3dd80f402b9297e72df4ef5a06d0e43acde89303cc7f5ed771f2b9fbc97166c48b277f6aa37766903d7d210899eede048a3ab9485edd521f917488913b5da3521c7b97717d27c26c7416276e9de97ea8427060c6c6c1d5049af3d793c99dd767177a6d5b123c688f93050956b024d4d49aa4573e9e9809aa5402da85eafc14979cba26420a6bf0bb2621948295d45c3279065cd3a7313c280864f78d4b274f5f92adb20e374c6d2f7cda8938a52da1f56ac226612b95ea1e4ef5bfd11c5e3fe9604972447d3aa7fd4d78f56ecd2dd3d9f79ee12485f1b8ba3cd86e62402a76a5cad273a5446da398a66f4c36cd14bf834cdde99f18201ed3d1922b48171cc9b62d632b5fb34424e610f2fdcc8595d28842d78b26b1f2a7dcdad1c02f91a09626079470eea9f90d08a543ecf9e6b50756a160d240bcfdc5f3ee6ed995c98fb64efca7dcdba8223c07902e3117161ce2ec916888a9780cfd34ac52083301e30fdddb111c1bb61fe38d3489f09f89ef5823a6fa0b41ea013056c0a7f27ed2f3deba06b68661f5eeffe5d53829edace17a81d788f8eb8c7ce644312cc23e9b6ff48b0153f7df30f544e33f9b791ddb45e93cfda5f9874ee1e70c0864cd295be114ab8dd42d89cc1b4c34ad91d5779dc68294c7085a166c917e72cd09b637307a1fc5efe6fe163eabe16bbbca30ee1f292a904156ac4782889378d439c3dee4f95bd63c59b5ce44104d929c93c0648279b98cb7fe8ba7638d94e8e77cb74e2ea560932b3a28017783230ff22287e5c00d93f69236d6f6670c412522f3fcd3c9146cb5c43f261705a08c64e84d923ce6b1a06e922c8dac6d7e5c22b2e5c9b8269b2810b490b8a43c0fe42b298bbc1f03f62dcdb67e24e89b14f7558fee85ca00f0a3d34b1664aeb940917dd3f1a08c5db10858f4cffee54f480e816a6dc9553b5043870d7f0a76134ee95a5a688b50281a1836fb721abe9105f9dfd7173f32bbb2bd00a75af11bc3a7618a0111cb8d5e30c5af5fe512bc23b5c590377817c063b25e2f5eed4a64825d4ca494518c4c0b9cac88cc3ccaa5477ad3e9c0b3577c156e88cd4df354d383efa800536d62790c86feb6a862cae1543e3e9c984c64ecb2b25319d62a3308e20b8ad261ecdb746bf28f58220c5ebe03204d5fe86094d81036a36ed905d4cfcc8054e7947f3ac9e88897a983adce3e3724745df71395b959b067ddc1bd8c30f092546d25a0b24f5df9136af84fb76a96d3eccefcf9ab5", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m54.734978234s ago: executing program 3 (id=2132): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xa) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x1) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x9) r5 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) 2m54.1933151s ago: executing program 3 (id=2133): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m53.720785429s ago: executing program 32 (id=2133): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.73610388s ago: executing program 4 (id=2883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x7}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x1, 0xfffffffffffffff8, 0x100000, 0x0, 0x202004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x2000000000], 0x0, 0x4000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x100000001, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0xc1101}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x800, 0x1, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioprio_set$pid(0x2, r9, 0x4007) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x91, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000403512148240000102030109027f00030101005c0904000000014100000a2401f97b22000201020c240203000203090500094b0c240206060203010700ff0409040100000102000009040101010102000009fc000900008001060725010402100009040200000102000009040201010102000007240108030100090582090800ff06040725010c100800"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 8.848243659s ago: executing program 1 (id=2888): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000280)=""/211, 0xd3, 0xea6) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000080)={0xc7, 0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_mptcp_buf(r1, 0x6, 0x3, 0xfffffffffffffffd, &(0x7f0000000040)=0x1) 8.717226469s ago: executing program 1 (id=2889): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a0001000000080046"], 0x20}}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x20, 0x13, 0x2, ',d'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) 7.50693188s ago: executing program 4 (id=2890): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000004000000dd0000000a000000", @ANYRES32, @ANYBLOB="b0539a7d10ece7c02c53c54cfea7186b6d3ce20c42f15eeb7454f724e693d7e3f13595", @ANYRES32], 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 5.669248847s ago: executing program 1 (id=2893): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.594017118s ago: executing program 1 (id=2894): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380000004800090329bd7000fddbdf250a003f00", @ANYRES32=0x0, @ANYBLOB="f9f7ffff08000200020000001400010000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x8001) write$UHID_CREATE2(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000071af49695a05c1ee3900"/261, @ANYBLOB="d400fa04fd055129f0c8c6d579c043b581a73b4d7ec7a50fc35aede64168dd3f677cf98cce883e1d10ef05d9c427d8f2928b2e93b6becbff0d38774bce5d8fac53909da620ed9d3fbf1d1f1ff1925bb5ab1f29195a5085df10d7fbb51d69dbedb3ed4da0e1ffa92e856ebd8e9f7e1921357dc522d03ec7a2a67ec7010db6"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 5.085349541s ago: executing program 2 (id=2897): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000001c0)={0x4, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x1ca1, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x200080, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES64=r4, @ANYBLOB="5dfbb2b6641d0c4b952c3548bfeea00cc05d487514e7794f2c389832f9500aac8dc4349d99edf3efeccdeba789fe62af348b78c59bf30f6f31ce8d10bc90c4b009cc3a247593beab0b731c43ee5684", @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRESOCT=r3, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x40, 0x8f, 0x7ffcffff}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(r5, 0x0, 0x0, 0xd4, 0x4) r6 = socket$inet(0x2, 0x4, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r6, 0x100000000) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r7) 5.068324157s ago: executing program 4 (id=2898): ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000140)="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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86d560081200000c2b0000000000000000000000ff"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x301, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 4.936688561s ago: executing program 4 (id=2899): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000008db039a374ecda61a000000000000000708000018430000fdffffff0000200000000000"], &(0x7f0000000280)='GPL\x00', 0x6, 0x39, &(0x7f00000002c0)=""/57, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xa, 0x3, 0xfffffc00}, 0x10, 0x5853, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x5, 0x3, 0xb, 0xa}, {0x1, 0x1, 0xc, 0x5}, {0x1, 0x2, 0x2, 0x3}, {0x2, 0x2, 0xd, 0x9}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x4, 0x6, 0x3}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80}, 0x10, 0x0, r0}, 0x94) r1 = socket(0x10, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0xc96) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @loopback, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x5, 0x40}}) tee(0xffffffffffffffff, r1, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000200)={r1, &(0x7f0000000100)='\x86\x00', 0x305200, &(0x7f0000000140)={@_ha_fsid={[0x4, 0x3]}, {0x2, 0x2, 0x8, 0x1bfe6e51}}, 0x7, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000580)={&(0x7f0000000540)=[0x0], 0x1}) 4.778630464s ago: executing program 1 (id=2901): syz_usb_connect(0x5, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="120110018e2f6b2037210100e50c010a030109021b001e030bc0020904"], 0x0) 4.680674592s ago: executing program 4 (id=2902): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2b696f202b6e6574205a72beca76f44415adc65b267b6376d7df68659530f2ff80cf44ae09a1a2570166c44b2af01a7965f5c9f3ffc88bea2ff9602402000000000000002613717826c571ecaafc603ef85307a26644f002c4afa8dee8e18a73380c82210700000000000000325d2e2e23343a83e4a8fde3c0978a2cb4d3a25e27d245068139030bdaa0c44ed1621e214f772202e496f7c0535c7dd007a14441856a0d1d00559e034881eb9e73ecc9afc26e7717ecf84a2ad97c429845bf6903191f3c5ab780932db3c819a8988773f6c404b7f27767c5353c6ed8ba34c08f95243d288ee6123e93c823c7d02f0072b295c4be2ea5d86f9a919f09612ce05065f61eb48c6a84c6d1b7d40b763264fbaaeaa4067b4c71bb468d173d2fbf91ccae0e22d97c4130031433764d333c864a9fd338f8bec397d36b2f1b72024243cc24e56041d33c88eafeacefa8"], 0x9) (async, rerun: 64) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) (async) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) 4.438743617s ago: executing program 4 (id=2904): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x0, 0x6}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, &(0x7f0000000280)="8c2a2ff8ed51137f0ef32067512627c5c9c37eec7da0846362999d5ade897deec82c97de39980d332b2cac67de8a709aa80fc295c8c3aaded69e89dc71065c764cfc", 0x42, 0x4000, &(0x7f0000000180)={0xa, 0x4e20, 0xfffff8b9, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x81}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x9, 0x2, 0x2, "5dd41ef17d1fac0ef4c2d854ce849813c5b224d3b63b1fa11dff804e7ebaed86", 0x20363159}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4140aecd, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x31, 0x31, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0xaac}, 0x48) 4.328513964s ago: executing program 5 (id=2905): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x8070bd25, 0x6, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r8, @ANYRESOCT=r9], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) unshare(0x400) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa35070000000000000280000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffffdf0000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b9349e31aa3701c38c527d3237c18e521ab219efdebb7b3de8f67581cf796a1d4223b90b80fcad3f6c962b9f292324b7ab7f7da31cf41ab12012fb1e0a494034127de745409e35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d307db98ca112874ec309baed0499104dcfe7c0f694bd5fc9e66d058b75fa4c81e5c9f42d9383e41d277b10392a96286744f049c3f128f8f92ef992239eafce5b43b4ec1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b2e00916de48a4e70f03cc415ba77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b638c234bbb55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4cc302b52e2101de18a1f1f7c551b3fa00055cc1c46c5fd9c26a54d43fa050645bd6109b113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97c870800000047546103f123f661c84726e7c7c55eff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef7be184f5e93ba5c8c2a4c04450b652b8d4c2ff030000000000000007c6bbd6cb2b240ce7d47ae636a5dbe9864a117d27326850a7c3b57086a4482c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c87c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a700a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c718d0ad23bc83ba3f3757210a057e177615c0683f000000000000006d4e0413ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fcff030000629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa63966945d93c33b038ce0d890f85f8a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f207ea3df3d6c0002a41783078e56c70afe8016b3dd9dc7785b36e609f173cc747837d600283b3452c57a5d44cacd363589845637071320921d32c1663964eddec97cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dcb0c42c4d719347f3d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57586e5fe2aa611f6232a9b71882ce24fce75cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed000080000000000000000000000fa36bbac00bb77c933d3961556f3fe647b05643b0000000000000000000000967aef9c5706e13d5889e77dab80a2548ec31629b7355a2bb8b93e4b6323061f545b26accc4621b568ab0bfaf30aa4f60705532c4a09c0a4a5487c762167edf362be35b9c90ad7e372a66bbb1471aa21000000000000104061c66a7432f25687618e31dcef8c5d4a2457a93f3fc6d3d7131746c75ccf400fc1a7a51826832ef7f5fbc78827d937768443a1c1ca3aba930826fd21aa1201d9225256df8de405d1f12c17cdaff3ad675aa333aa7e919459babd3cc1000000000000000000000000000000000000000000000000000000000000000059fdc6a54a2a8b28fa7d9b92aeb58e78e3b8594a5ef6bb67e52bf43b6145f544273a8f62852706c0abef368bfc72f92fa99a7bf121019cff8001fd7d2f6c2c295a5cab383235fec4c1decbed258ee9df8963c0fc828ad2119ffefe36c78692fffb6942b9da0922b2aa8f6b66c14ee7f42d5951edcc986356b41c0de3549f851ca340d9e425e355c1decb785a1042a72c1c98a084b04b1d9be473e50a15d76b110eda3b7cc1f2501211773cf510a43888422c1328476dd6f42659c61a18618fd28d5cd342c276aa9c4cc035077fa09d672b8dcfb3ac1751628647047d07338a8619037e3449a173ddd697f541a0795a2de7ef1396d70675341ebf004be122de04b5275fe7e53d28ebdc5051cec00759d73ca97229d93b965926060b6f91d01324bd458b425ea51c5d5b69551d599188fc6040370ac9ca7ae9eea9e5ede79bd66bd3d616dd7d7dd4c3a8fd055a3585af6fe7f5046c61154598cd33c33a48ece1072afd04b1fd85eb1655d9f3f813392c9634200d892dc6810b436820a1e0f6b464855e28953eb63cd3d6fc1b7bfb588ce28a51af1658d45d759a8399da55a3ff6597bb9f47167fe55ca240623a001e5fe15d9ddefea06a3750501916163844106c4ce662f418d9fc509e5447f712048d53e7e3"], &(0x7f0000000140)='GPL\x00'}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r10, r11}, 0xc) mknod$loop(0x0, 0x2000, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) 3.984232471s ago: executing program 2 (id=2908): getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x4, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0) 3.828879776s ago: executing program 0 (id=2909): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380000004800090329bd7000fddbdf250a003f00", @ANYRES32=0x0, @ANYBLOB="f9f7ffff08000200020000001400010000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x8001) write$UHID_CREATE2(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000071af49695a05c1ee3900"/261, @ANYBLOB="d400fa04fd055129f0c8c6d579c043b581a73b4d7ec7a50fc35aede64168dd3f677cf98cce883e1d10ef05d9c427d8f2928b2e93b6becbff0d38774bce5d8fac53909da620ed9d3fbf1d1f1ff1925bb5ab1f29195a5085df10d7fbb51d69dbedb3ed4da0e1ffa92e856ebd8e9f7e1921357dc522d03ec7a2a67ec7010db6"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 3.621103106s ago: executing program 2 (id=2910): socket(0x21, 0x5, 0x40001ff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75706461746529bb2a08bb03"], 0x17, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000b40)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000580)="0711d42db598c51394a543d23319e797f4d1187af49e0ed4c59d3213bf21201a7a44c9c987647012f77cfafebe284f0a18e74a2cc8671d8e58ad043e0c323e509413374ad46595e86f9625b0071dc3c635610f6bc4281a16c5dd6d4c7ae4d48cc2fd35eb06d5f62a897175a9a72fc07fcf2a7bca267835464de764692472fb32817dd932d3775398eca21a50f0948ac9eaac8a308dfaf9a6c98e666bca382f1a9ecaad7818fd7b1ef3d67a", 0xab}, {&(0x7f0000000640)="875d870d009ed42ba50e2b82993dd535b7c592098c6c2d093db746d304943bf2b62e051229a86e998d26b942c758c6663ebab7ffca63c1530640ea5177a981bc2b71a61f9b90345d8f1cd64554a6f1ab8067afb9025ab1d065e326784a7f7c8634f557974ebdbb", 0x67}, {&(0x7f00000006c0)="dcb282127d6c983d9fa090ce6124f2a58318575c9b2b62f7c2a82c53ffad79ba3c8f9c7524a4b1651fe8455dc3b65d43730a43cddca4c74f1336d62a4a6cf4f19187467c4141e14b7fc674ba244ec8b2c05dc3a3844fb4b5e1defb23db734fe2bab72a45d253dfd98c8c912daeb7ab58399eab97e6794235223fa5f82ee94ddc6693eae3a47827df63a0557d99d0a9125bfb4b559a5c2cc252a95dca91c66f24dd36fc9ec9e71acd94f2c521544e23631a500fa9fc4aeb6d7cafa1ed6e196b18808329a2e341642b97d14b3465948db1c158da9360e7cc2af81e2c819d3d02", 0xdf}, {&(0x7f0000000800)="dbed4fcb922234ff13f47ad281a5406684517b9694523abd1e48b0aab8ded46c5973d322dec1dbcbc1114c6bfe5415add29cf357b81617f2ce4b0c01565db8f2dc8fca709504b2fd364ee11b0c4932c3120247e2e0466e5a339cd1d37e1d10e6a74d95bebf29b1e10b9dbed7671d2975acb4b80000c05f312fde5ea8fa4254dc830079393207ed07", 0x88}], 0x4, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40, 0x4000005}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x20008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=@newtaction={0xf4, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0xe0, 0x1, [@m_gact={0xdc, 0x9, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7, 0x10000000, 0xb9, 0xe6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa, 0x1, 0x7, 0x7, 0x523e}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x10bf, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xeff, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x428, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1df1, 0xffffffffffffffff}}]}, {0x4e, 0x6, "932d9e0b588867c130d6e6776609ab903de98d9f4c1ac91dddcfab387e5607acbfb5e72f5397ae53ba29886b40d7a82ee789362614492a971f7a25e5891514d05d1396eef526e5b195c9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf4}, 0x1, 0x2b1e}, 0x10000084) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) io_uring_setup(0x2d71, &(0x7f0000000500)={0x0, 0x7a0, 0x80, 0x0, 0x291}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100040005001000d4757409b74241cc07000100", @ANYRES32, @ANYBLOB="00000000000000010000000005544ce8889ae1ef", @ANYRES8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x2a840, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0x13, 0x3, 0x4007, 0x10, 0xa, 0xa0, 0x1}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x4a, 0x4, 0x5c, 0x7}]}) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) 2.883082674s ago: executing program 0 (id=2911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004"], 0xfdef) 2.704281378s ago: executing program 2 (id=2912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001"], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x10) 2.572837638s ago: executing program 2 (id=2913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62d01) r1 = mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) readv(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000004c0)=""/165, 0xa5}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) accept4$tipc(r3, &(0x7f0000000000)=@name, 0x0, 0x80000) syz_usb_connect$uac3(0x2, 0x92, &(0x7f0000000dc0)=ANY=[@ANYBLOB="120101020000002044060f804000010203010902800003010310c0080b0002012030400904000000010130000a"], &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 2.561089526s ago: executing program 5 (id=2914): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.478629905s ago: executing program 5 (id=2915): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x5e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2.376173549s ago: executing program 5 (id=2916): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) 2.301153787s ago: executing program 5 (id=2917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000007f00000000000000030000000000000002000000000000000000000000000000ffffffffffffffff0002000000000000ff089369e516d9150d8cfdcc1c2668ba01fffffffffffffe03000000000000000000000000000000000000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ff010000000000000000000000000001000000000000000000000000000000004e2200004e21e14f0a00006000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000104000000000010fcffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff770000000000000003020000000000000000000000000000ff7f00000000000102000000b16b6e0001"], 0xc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xd230, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x4, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x4, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66ce, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x4, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x8401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x7fff, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x2007, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x4, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x400009, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x80000, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0xd, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x2, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x807, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x0, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0x5, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x80, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x1, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0x7f, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xfeff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a00050028bd7000fbdbdf250a108100"], 0x1c}}, 0x20000440) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xfffffffffffffea8, &(0x7f0000000780)=ANY=[]) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a40)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1.78089878s ago: executing program 0 (id=2918): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4001000010000100fe0700a7960000000000ac1e010100000000ffff000000000000fe8000000000000000000000000000aa4e2400001019f77e1208546f0320666226e1da3695b5c7dc6a8d3e0999e7bf71d9d2572670c0920b321b4f68c83ca8f269491de1da6e980b0ef7a73c08680fb4dade8251afcec82b8ad3b84ccc15096a1568e817fb2c4c47a1f1ca6c995f1923ab3928b6f3d3048562b804a99b92954096830cb3fb8d1d85470e68ac0a3181210e5923ebc68c85e51042ead4473f4ec03ba210e38773201a2dcd129830c5b2cfa187fa737f110d4337", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c000000ff01000000000000000000000000000100000000000000000000010008000000effffffffffffffffffffffff7ffffff0000000000000000000000000000000007000000000000000000000000000000010000000000000002000000000000000000000000000000000000000000000100000000000000000300000029bd700000000000020000010000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160000000000"], 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x900) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) r2 = io_uring_setup(0x1ddd, &(0x7f0000000400)={0x0, 0x5cb4, 0x800, 0x5, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000040)=[{0x8a, 0x1000, 0x0, 0x0}], 0x1}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x380, 0xffffffff, 0x1d0, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x3}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0xffffff00, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0x5, {0x2000012}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x1, 0x4}, {0x0, 0x3, 0x4}, {0x4, 0x2, 0x2}, 0x7fff, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 1.574223102s ago: executing program 1 (id=2919): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="202401"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xb000, 0xdddd0000, 0x0, 0xf0, 0x40, 0xfd, 0x5, 0xd4, 0x0, 0x4, 0xa, 0x5}, {0xffff1000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0x2, 0x3, 0xca}, {0xeeee0000, 0x9000, 0xb, 0x0, 0x2, 0x3, 0x4, 0x1, 0x8c, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x6, 0x3, 0x76, 0x1}, {0x100000, 0x50000, 0x3, 0x1, 0x3, 0x9, 0x7, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xfb, 0x4, 0x80, 0x4, 0xfc}, {0x6000, 0x2000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x57, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd0000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xeeef0000, [0x4, 0x2, 0x80000008, 0x8]}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.134670214s ago: executing program 0 (id=2920): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380000004800090329bd7000fddbdf250a003f00", @ANYRES32=0x0, @ANYBLOB="f9f7ffff08000200020000001400010000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x8001) write$UHID_CREATE2(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000071af49695a05c1ee3900"/261, @ANYBLOB="d400fa04fd055129f0c8c6d579c043b581a73b4d7ec7a50fc35aede64168dd3f677cf98cce883e1d10ef05d9c427d8f2928b2e93b6becbff0d38774bce5d8fac53909da620ed9d3fbf1d1f1ff1925bb5ab1f29195a5085df10d7fbb51d69dbedb3ed4da0e1ffa92e856ebd8e9f7e1921357dc522d03ec7a2a67ec7010db6"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 1.034474927s ago: executing program 2 (id=2921): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/hibernate_compression_threads', 0x159283, 0xc0) syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0xf9, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xdffe, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5a, 0x9e, 0x1001}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x8, 0x1, '*!<'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x4, 0x8, {0x7, 0x25, 0x1, 0x0, 0xa2, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x80, {0x7, 0x25, 0x1, 0xc, 0x2, 0x4}}}}}}}}]}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x101001, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x3, 0x4, 0x0, 0x5}, 0x20) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ftruncate(r4, 0xffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000033c0)={0x0, 0x0, &(0x7f00000032c0)=[{0x0}, {0x0}], 0x2}, 0x4004004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8701, 0x8000, 0xffffffff, 0x7fffffff, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x64, 0x0, 0x6, 0x0, 0x0, @loopback, @remote}}}}) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 07fb203a15fa0 R15: 00007fb203b3fa48 [ 604.619670][T14267] [ 604.621596][T14268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2592'. [ 604.875722][ T5880] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 605.043734][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 605.053732][ T5880] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 605.078728][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.109904][ T5880] usb 1-1: config 0 descriptor?? [ 605.127204][ T5880] as10x_usb: device has been detected [ 605.135579][T14273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2597'. [ 605.153648][ T5880] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 605.398568][ T5880] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 605.554231][ T5880] as10x_usb: error during firmware upload part1 [ 605.577193][ T5880] Registered device nBox DVB-T Dongle [ 605.982096][T14285] FAULT_INJECTION: forcing a failure. [ 605.982096][T14285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.020936][T14285] CPU: 0 UID: 0 PID: 14285 Comm: syz.5.2602 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.020975][T14285] Tainted: [L]=SOFTLOCKUP [ 606.020983][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 606.020994][T14285] Call Trace: [ 606.021002][T14285] [ 606.021012][T14285] dump_stack_lvl+0xe8/0x150 [ 606.021043][T14285] should_fail_ex+0x412/0x560 [ 606.021076][T14285] _copy_to_user+0x31/0xb0 [ 606.021100][T14285] simple_read_from_buffer+0xe1/0x170 [ 606.021132][T14285] proc_fail_nth_read+0x1bb/0x230 [ 606.021184][T14285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.021214][T14285] ? rw_verify_area+0x2a6/0x4d0 [ 606.021233][T14285] ? reacquire_held_locks+0x104/0x190 [ 606.021256][T14285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.021283][T14285] vfs_read+0x20c/0xa70 [ 606.021302][T14285] ? fdget_pos+0x246/0x320 [ 606.021334][T14285] ? __pfx___mutex_lock+0x10/0x10 [ 606.021358][T14285] ? __pfx_vfs_read+0x10/0x10 [ 606.021380][T14285] ? __fget_files+0x2a/0x420 [ 606.021411][T14285] ? __fget_files+0x3a0/0x420 [ 606.021437][T14285] ? __fget_files+0x2a/0x420 [ 606.021472][T14285] ksys_read+0x150/0x270 [ 606.021495][T14285] ? __pfx_ksys_read+0x10/0x10 [ 606.021513][T14285] ? fput+0xa0/0xd0 [ 606.021548][T14285] do_syscall_64+0x14d/0xf80 [ 606.021569][T14285] ? trace_irq_disable+0x3b/0x150 [ 606.021596][T14285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.021615][T14285] ? clear_bhb_loop+0x40/0x90 [ 606.021639][T14285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.021658][T14285] RIP: 0033:0x7f4c3515cfce [ 606.021677][T14285] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 606.021695][T14285] RSP: 002b:00007f4c35feafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 606.021716][T14285] RAX: ffffffffffffffda RBX: 00007f4c35feb6c0 RCX: 00007f4c3515cfce [ 606.021731][T14285] RDX: 000000000000000f RSI: 00007f4c35feb0a0 RDI: 0000000000000005 [ 606.021744][T14285] RBP: 00007f4c35feb090 R08: 0000000000000000 R09: 0000000000000000 [ 606.021756][T14285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.021767][T14285] R13: 00007f4c35416128 R14: 00007f4c35416090 R15: 00007f4c3553fa48 [ 606.021798][T14285] [ 606.347424][T14281] fuse: Unknown parameter 'ÿ' [ 606.701944][T14302] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2605'. [ 607.445612][ T10] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 607.640568][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.662153][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.685117][ T10] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 607.706406][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.744062][ T10] usb 2-1: config 0 descriptor?? [ 607.851637][T14315] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2610'. [ 607.862147][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2610'. [ 608.591547][T14327] netlink: 'syz.2.2612': attribute type 4 has an invalid length. [ 609.784593][T10810] usb 1-1: USB disconnect, device number 61 [ 609.802756][T10810] Unregistered device nBox DVB-T Dongle [ 609.813830][T10810] as10x_usb: device has been disconnected [ 610.022416][T10810] usb 2-1: USB disconnect, device number 59 [ 610.324695][T14369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2613'. [ 610.485613][T14361] fuse: Unknown parameter 'ÿ' [ 610.499931][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 610.499949][ T29] audit: type=1326 audit(1774149326.358:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 610.628759][T10810] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 610.644346][ T29] audit: type=1326 audit(1774149326.358:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 610.792702][T10810] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 610.805012][ T29] audit: type=1326 audit(1774149326.388:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 610.847369][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 610.912255][T10810] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 610.945918][T10810] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 610.963907][ T29] audit: type=1326 audit(1774149326.388:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 610.988501][T10810] usb 3-1: Product: syz [ 610.996241][T10810] usb 3-1: Manufacturer: syz [ 611.024128][T10810] usb 3-1: SerialNumber: syz [ 611.059192][T10810] usb 3-1: config 0 descriptor?? [ 611.068775][ T29] audit: type=1326 audit(1774149326.388:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 611.103660][T10810] usb 3-1: selecting invalid altsetting 0 [ 611.132252][ T29] audit: type=1326 audit(1774149326.388:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 611.265876][ T29] audit: type=1326 audit(1774149326.388:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 611.354396][ T10] usb 3-1: USB disconnect, device number 74 [ 611.397890][ T29] audit: type=1326 audit(1774149326.388:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 611.425087][ T29] audit: type=1326 audit(1774149326.388:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 611.555820][ T29] audit: type=1326 audit(1774149326.388:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.0.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 612.064629][T14399] FAULT_INJECTION: forcing a failure. [ 612.064629][T14399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.095935][T14399] CPU: 0 UID: 0 PID: 14399 Comm: syz.1.2634 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.095967][T14399] Tainted: [L]=SOFTLOCKUP [ 612.095975][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.095986][T14399] Call Trace: [ 612.095995][T14399] [ 612.096003][T14399] dump_stack_lvl+0xe8/0x150 [ 612.096036][T14399] should_fail_ex+0x412/0x560 [ 612.096069][T14399] _copy_from_user+0x2d/0xb0 [ 612.096091][T14399] kstrtouint_from_user+0xd6/0x180 [ 612.096121][T14399] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 612.096161][T14399] proc_fail_nth_write+0x8e/0x210 [ 612.096188][T14399] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 612.096220][T14399] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 612.096248][T14399] vfs_write+0x29a/0xb90 [ 612.096277][T14399] ? __pfx_vfs_write+0x10/0x10 [ 612.096299][T14399] ? __fget_files+0x2a/0x420 [ 612.096330][T14399] ? __fget_files+0x3a0/0x420 [ 612.096356][T14399] ? __fget_files+0x2a/0x420 [ 612.096390][T14399] ksys_write+0x150/0x270 [ 612.096414][T14399] ? __pfx_ksys_write+0x10/0x10 [ 612.096434][T14399] ? __pfx_sock_ioctl+0x10/0x10 [ 612.096468][T14399] do_syscall_64+0x14d/0xf80 [ 612.096489][T14399] ? trace_irq_disable+0x3b/0x150 [ 612.096516][T14399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.096536][T14399] ? clear_bhb_loop+0x40/0x90 [ 612.096559][T14399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.096578][T14399] RIP: 0033:0x7fb20375cfce [ 612.096596][T14399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 612.096613][T14399] RSP: 002b:00007fb20465dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 612.096634][T14399] RAX: ffffffffffffffda RBX: 00007fb20465e6c0 RCX: 00007fb20375cfce [ 612.096648][T14399] RDX: 0000000000000001 RSI: 00007fb20465e0a0 RDI: 0000000000000004 [ 612.096661][T14399] RBP: 00007fb20465e090 R08: 0000000000000000 R09: 0000000000000000 [ 612.096673][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.096685][T14399] R13: 00007fb203a16038 R14: 00007fb203a15fa0 R15: 00007fb203b3fa48 [ 612.096720][T14399] [ 612.527168][T14400] fuse: Unknown parameter 'ÿ' [ 613.004151][T14404] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2635'. [ 613.408986][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 613.569906][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 613.591507][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 613.607344][ T10] usb 6-1: config 1 has no interface number 0 [ 613.641214][ T10] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 613.673626][ T10] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 613.684300][ T10] usb 6-1: Product: syz [ 613.713681][ T10] usb 6-1: Manufacturer: syz [ 613.718463][ T10] usb 6-1: SerialNumber: syz [ 613.846782][T14434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2645'. [ 613.956526][ T10] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 613.965235][ T10] visor 6-1:1.4: probe with driver visor failed with error -71 [ 613.975594][ T10] usb 6-1: USB disconnect, device number 14 [ 614.009363][T10810] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 614.171294][T10810] usb 3-1: unable to get BOS descriptor or descriptor too short [ 614.179540][T10810] usb 3-1: not running at top speed; connect to a high speed hub [ 614.188352][T10810] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 614.201514][T10810] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 614.210814][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.220090][T10810] usb 3-1: Product: syz [ 614.228478][T10810] usb 3-1: Manufacturer: syz [ 614.237708][T10810] usb 3-1: SerialNumber: syz [ 614.255360][T14430] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 614.523588][T10810] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 614.585316][T14438] fuse: Unknown parameter 'ÿ' [ 614.631050][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2649'. [ 614.817267][T10810] usb 3-1: USB disconnect, device number 75 [ 614.965559][T14450] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2651'. [ 614.999967][ T6346] udevd[6346]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.519276][T10810] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 615.653289][T14461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2656'. [ 615.693781][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 615.720914][T10810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 615.780352][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 615.797709][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.820173][T10810] usb 3-1: Product: syz [ 615.824415][T10810] usb 3-1: Manufacturer: syz [ 615.838860][T10810] usb 3-1: SerialNumber: syz [ 615.858599][T10810] usb 3-1: config 0 descriptor?? [ 615.876409][T10810] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 615.896287][T10810] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 615.940370][T10915] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 616.119601][T10915] usb 6-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 616.138448][T10915] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 616.161654][T10915] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 616.178772][T10915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 616.187185][T10915] usb 6-1: SerialNumber: syz [ 616.423714][T10915] usb 6-1: 0:2 : does not exist [ 616.429141][T10915] usb 6-1: unit 127 not found! [ 616.466101][T10915] usb 6-1: USB disconnect, device number 15 [ 616.476482][T10810] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 616.513599][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.612990][T14475] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2662'. [ 616.625182][T14475] syzkaller0: entered promiscuous mode [ 616.632168][T14475] syzkaller0: entered allmulticast mode [ 617.053962][T14485] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2667'. [ 617.097389][T10810] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 617.113073][T10810] em28xx 3-1:0.0: board has no eeprom [ 617.118969][T14486] em28xx 3-1:0.0: reading from i2c device at 0x114 failed (error=-5) [ 617.207964][T14479] fuse: Unknown parameter 'ÿ' [ 617.221189][T10810] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 617.230177][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 617.230190][ T29] audit: type=1326 audit(1774149333.078:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 617.268931][T10810] em28xx 3-1:0.0: dvb set to bulk mode. [ 617.275698][ T5880] em28xx 3-1:0.0: Binding DVB extension [ 617.289429][T10810] usb 3-1: USB disconnect, device number 76 [ 617.301446][T10810] em28xx 3-1:0.0: Disconnecting em28xx [ 617.317984][ T29] audit: type=1326 audit(1774149333.078:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 617.345972][ T29] audit: type=1326 audit(1774149333.078:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 617.399396][ T29] audit: type=1326 audit(1774149333.078:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 617.446859][ T5880] em28xx 3-1:0.0: Registering input extension [ 617.453491][T10810] em28xx 3-1:0.0: Closing input extension [ 617.473618][T10810] em28xx 3-1:0.0: Freeing device [ 617.478776][ T29] audit: type=1326 audit(1774149333.078:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 617.531672][ T29] audit: type=1326 audit(1774149333.078:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 617.554858][ T29] audit: type=1326 audit(1774149333.078:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 617.583145][ T29] audit: type=1326 audit(1774149333.078:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 617.606278][ T29] audit: type=1326 audit(1774149333.318:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 617.632489][ T29] audit: type=1326 audit(1774149333.318:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.0.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 618.018816][T10915] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 618.182586][T10915] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 618.204351][T10915] usb 1-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 618.215894][T10915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.228732][T10915] usb 1-1: Product: syz [ 618.232926][T10915] usb 1-1: Manufacturer: syz [ 618.259187][T10915] usb 1-1: SerialNumber: syz [ 618.490449][T10915] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 618.503176][T10915] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 618.547029][T10915] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 618.558863][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 618.569431][T10915] usb 1-1: USB disconnect, device number 62 [ 618.598152][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.720567][ T10] usb 6-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 618.731212][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.741393][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 618.750499][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 618.758508][ T10] usb 6-1: SerialNumber: syz [ 618.975879][ T10] usb 6-1: 0:2 : does not exist [ 618.980945][ T10] usb 6-1: unit 127 not found! [ 619.011730][ T10] usb 6-1: USB disconnect, device number 16 [ 619.048085][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.180448][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2679'. [ 619.251841][T14526] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2680'. [ 619.743153][T14530] fuse: Unknown parameter 'ÿ' [ 619.890531][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 619.919377][T14543] bond0: (slave dummy0): Releasing backup interface [ 619.929393][T14543] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 619.957075][T14545] vti0: entered promiscuous mode [ 619.998764][T10915] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 620.069157][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 620.083264][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 620.101446][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 620.118000][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.128337][ T10] usb 6-1: Product: syz [ 620.133201][ T10] usb 6-1: Manufacturer: syz [ 620.137810][ T10] usb 6-1: SerialNumber: syz [ 620.159667][ T10] usb 6-1: config 0 descriptor?? [ 620.164773][T10915] usb 1-1: Using ep0 maxpacket: 32 [ 620.171870][T10915] usb 1-1: config 0 has no interfaces? [ 620.177358][T10915] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 620.188636][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 620.218368][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 620.224693][T10915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.256638][T10915] usb 1-1: config 0 descriptor?? [ 620.289453][T10810] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 620.471037][T10810] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 620.491359][T14540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.516239][T10810] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 620.526201][T14540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.535175][T10810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.544058][T10810] usb 2-1: Product: syz [ 620.548225][T10810] usb 2-1: Manufacturer: syz [ 620.555478][ T5880] usb 1-1: USB disconnect, device number 63 [ 620.586648][T10810] usb 2-1: SerialNumber: syz [ 620.774747][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 620.830976][T10810] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 620.844514][T10810] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 620.912419][T10810] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 620.933185][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.955458][T10810] usb 2-1: USB disconnect, device number 60 [ 620.961713][ T5880] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 621.028802][ T24] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 621.118780][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 621.128212][ T5880] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 621.137593][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.146076][ T5880] usb 3-1: Product: syz [ 621.150432][ T5880] usb 3-1: Manufacturer: syz [ 621.155068][ T5880] usb 3-1: SerialNumber: syz [ 621.162401][ T5880] usb 3-1: config 0 descriptor?? [ 621.188774][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 621.195458][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 621.204251][ T24] usb 1-1: config 6 has no interfaces? [ 621.213648][ T24] usb 1-1: New USB device found, idVendor=0403, idProduct=e0ed, bcdDevice=18.d3 [ 621.223207][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.231337][ T24] usb 1-1: Manufacturer: à ’ [ 621.235956][ T24] usb 1-1: SerialNumber: syz [ 621.395098][ T5880] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 621.397785][ T10] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 621.407703][ T5880] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 621.421354][ T10] em28xx 6-1:0.0: board has no eeprom [ 621.438262][ T5880] usb 3-1: USB disconnect, device number 77 [ 621.471631][ T24] usb 1-1: USB disconnect, device number 64 [ 621.511823][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 621.528036][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 621.538857][T10915] em28xx 6-1:0.0: Binding DVB extension [ 621.662101][ T10] usb 6-1: USB disconnect, device number 17 [ 621.707918][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 621.722449][T10915] em28xx 6-1:0.0: Registering input extension [ 621.729338][ T10] em28xx 6-1:0.0: Closing input extension [ 621.848501][ T10] em28xx 6-1:0.0: Freeing device [ 622.162498][T14570] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2697'. [ 622.316717][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 622.434548][T14574] fuse: Unknown parameter 'ÿ' [ 622.442995][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 622.443076][ T29] audit: type=1326 audit(1774149338.298:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 622.478867][ T29] audit: type=1326 audit(1774149338.328:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 622.523464][T14581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2700'. [ 622.630175][ T29] audit: type=1326 audit(1774149338.488:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 622.669723][ T29] audit: type=1326 audit(1774149338.488:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 622.709152][ T29] audit: type=1326 audit(1774149338.488:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 622.914392][ T29] audit: type=1326 audit(1774149338.488:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 623.025956][ T29] audit: type=1326 audit(1774149338.488:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 623.096250][ T29] audit: type=1326 audit(1774149338.488:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 623.148093][ T29] audit: type=1326 audit(1774149338.488:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 623.174064][ T29] audit: type=1326 audit(1774149338.708:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 623.638761][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 623.790966][ T10] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 623.801364][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 623.811678][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 623.821760][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 623.830705][ T10] usb 6-1: Product: syz [ 623.835682][ T10] usb 6-1: Manufacturer: syz [ 623.841647][ T10] usb 6-1: SerialNumber: syz [ 623.911855][ T10] usb 6-1: config 0 descriptor?? [ 623.921811][T14590] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 623.934093][ T10] usb 6-1: selecting invalid altsetting 0 [ 624.199843][T14599] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 624.312878][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.321860][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.602199][T14606] FAULT_INJECTION: forcing a failure. [ 624.602199][T14606] name failslab, interval 1, probability 0, space 0, times 0 [ 624.719305][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 624.746768][T14606] CPU: 0 UID: 0 PID: 14606 Comm: syz.2.2708 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.746800][T14606] Tainted: [L]=SOFTLOCKUP [ 624.746808][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.746820][T14606] Call Trace: [ 624.746828][T14606] [ 624.746836][T14606] dump_stack_lvl+0xe8/0x150 [ 624.746867][T14606] should_fail_ex+0x412/0x560 [ 624.746899][T14606] should_failslab+0xa8/0x100 [ 624.746923][T14606] ? skb_clone+0x212/0x3a0 [ 624.746945][T14606] kmem_cache_alloc_noprof+0x87/0x650 [ 624.746964][T14606] ? apparmor_capable+0x126/0x170 [ 624.746992][T14606] skb_clone+0x212/0x3a0 [ 624.747013][T14606] ? nfnetlink_rcv+0x4b0/0x27b0 [ 624.747055][T14606] nfnetlink_rcv+0x4e2/0x27b0 [ 624.747089][T14606] ? lockdep_hardirqs_on+0x7a/0x110 [ 624.747110][T14606] ? __dev_queue_xmit+0x277/0x3890 [ 624.747204][T14606] ? __local_bh_enable_ip+0xd0/0x130 [ 624.747229][T14606] ? __dev_queue_xmit+0x1e78/0x3890 [ 624.747248][T14606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.747275][T14606] ? __dev_queue_xmit+0x277/0x3890 [ 624.747302][T14606] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 624.747343][T14606] ? ref_tracker_free+0x693/0x840 [ 624.747369][T14606] ? __copy_skb_header+0xa3/0x4a0 [ 624.747392][T14606] ? __pfx_ref_tracker_free+0x10/0x10 [ 624.747425][T14606] ? __skb_clone+0x63/0x7a0 [ 624.747451][T14606] ? __skb_clone+0x483/0x7a0 [ 624.747478][T14606] ? skb_clone+0x246/0x3a0 [ 624.747501][T14606] ? __netlink_deliver_tap+0x807/0x850 [ 624.747526][T14606] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.747568][T14606] netlink_unicast+0x80f/0x9b0 [ 624.747598][T14606] ? __pfx_netlink_unicast+0x10/0x10 [ 624.747622][T14606] ? netlink_sendmsg+0x650/0xb40 [ 624.747647][T14606] ? skb_put+0x11b/0x210 [ 624.747668][T14606] netlink_sendmsg+0x813/0xb40 [ 624.747702][T14606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.747733][T14606] ? aa_sock_msg_perm+0xf1/0x1b0 [ 624.747758][T14606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.747781][T14606] ____sys_sendmsg+0x972/0x9f0 [ 624.747812][T14606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.747841][T14606] ? import_iovec+0x73/0xa0 [ 624.747864][T14606] ___sys_sendmsg+0x2a5/0x360 [ 624.747890][T14606] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.747941][T14606] ? __fget_files+0x2a/0x420 [ 624.747967][T14606] ? __fget_files+0x3a0/0x420 [ 624.748002][T14606] __x64_sys_sendmsg+0x1bd/0x2a0 [ 624.748026][T14606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.748056][T14606] ? __pfx_ksys_write+0x10/0x10 [ 624.748087][T14606] do_syscall_64+0x14d/0xf80 [ 624.748107][T14606] ? trace_irq_disable+0x3b/0x150 [ 624.748133][T14606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.748152][T14606] ? clear_bhb_loop+0x40/0x90 [ 624.748175][T14606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.748194][T14606] RIP: 0033:0x7f695c99c799 [ 624.748213][T14606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.748230][T14606] RSP: 002b:00007f695d868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.748252][T14606] RAX: ffffffffffffffda RBX: 00007f695cc15fa0 RCX: 00007f695c99c799 [ 624.748266][T14606] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 624.748278][T14606] RBP: 00007f695d868090 R08: 0000000000000000 R09: 0000000000000000 [ 624.748290][T14606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.748301][T14606] R13: 00007f695cc16038 R14: 00007f695cc15fa0 R15: 00007f695cd3fa48 [ 624.748330][T14606] [ 625.196829][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 625.263312][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 625.272793][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.477422][ T24] usb 2-1: Product: syz [ 625.497315][ T24] usb 2-1: Manufacturer: syz [ 625.502239][ T24] usb 2-1: SerialNumber: syz [ 625.512998][ T24] usb 2-1: config 0 descriptor?? [ 625.650461][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2709'. [ 625.728298][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2709'. [ 625.741094][ T24] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 625.750569][ T24] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 625.772700][ T24] usb 2-1: USB disconnect, device number 61 [ 625.990657][ T10] usb 6-1: USB disconnect, device number 18 [ 626.244975][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2709'. [ 626.504752][T14619] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2711'. [ 626.624522][T14621] IPVS: Error joining to the multicast group [ 626.950191][T14632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2715'. [ 626.978815][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 627.438485][ T10] usb 6-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 627.468019][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.490298][T14634] fuse: Unknown parameter 'ÿ' [ 627.496890][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 627.518969][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 627.563325][ T10] usb 6-1: SerialNumber: syz [ 627.568160][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 627.568175][ T29] audit: type=1326 audit(1774149343.418:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20379c799 code=0x7ffc0000 [ 627.713190][ T29] audit: type=1326 audit(1774149343.418:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb20379c799 code=0x7ffc0000 [ 627.777818][ T29] audit: type=1326 audit(1774149343.458:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20379c799 code=0x7ffc0000 [ 627.846886][ T10] usb 6-1: 0:2 : does not exist [ 627.848906][ T29] audit: type=1326 audit(1774149343.468:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb20379c799 code=0x7ffc0000 [ 627.904899][ T10] usb 6-1: unit 127 not found! [ 627.930559][ T29] audit: type=1326 audit(1774149343.468:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20379c799 code=0x7ffc0000 [ 628.149223][ T29] audit: type=1326 audit(1774149343.468:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fb20379c799 code=0x7ffc0000 [ 628.192281][ T29] audit: type=1326 audit(1774149343.468:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20379c799 code=0x7ffc0000 [ 628.227329][T14650] fuse: Unknown parameter 'fø¡ëNŠd' [ 628.247112][ T29] audit: type=1326 audit(1774149343.468:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.1.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb20379c799 code=0x7ffc0000 [ 628.483680][ T10] usb 6-1: USB disconnect, device number 19 [ 629.208778][ T5880] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 629.378937][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 629.394426][ T5880] usb 6-1: unable to get BOS descriptor or descriptor too short [ 629.405948][ T5880] usb 6-1: config 8 has an invalid interface number: 143 but max is 3 [ 629.417194][ T5880] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 629.432420][ T5880] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 629.441479][ T5880] usb 6-1: config 8 has no interface number 0 [ 629.447684][ T5880] usb 6-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 629.459399][ T24] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 629.467153][ T5880] usb 6-1: config 8 interface 143 altsetting 193 endpoint 0x9 has invalid wMaxPacketSize 0 [ 629.478897][ T5880] usb 6-1: config 8 interface 143 altsetting 193 bulk endpoint 0x9 has invalid maxpacket 0 [ 629.489057][ T5880] usb 6-1: config 8 interface 143 altsetting 193 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 629.502447][ T5880] usb 6-1: config 8 interface 143 has no altsetting 0 [ 629.513075][ T5880] usb 6-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 629.522923][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.531252][ T5880] usb 6-1: Product: syz [ 629.535493][ T5880] usb 6-1: Manufacturer: syz [ 629.541134][ T5880] usb 6-1: SerialNumber: syz [ 629.558765][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 629.632391][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 629.646443][ T24] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 629.658467][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.666865][ T24] usb 2-1: Product: syz [ 629.672007][ T24] usb 2-1: Manufacturer: syz [ 629.677238][ T24] usb 2-1: SerialNumber: syz [ 629.709019][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 629.720190][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 629.742636][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 629.757356][ T5880] io_ti 6-1:8.143: required endpoints missing [ 629.758776][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.779072][ T10] usb 3-1: Product: syz [ 629.780078][ T5880] usb 6-1: USB disconnect, device number 20 [ 629.783269][ T10] usb 3-1: Manufacturer: syz [ 629.783287][ T10] usb 3-1: SerialNumber: syz [ 629.800038][ T10] usb 3-1: config 0 descriptor?? [ 629.825954][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 629.856045][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 629.894931][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 629.908305][ T24] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 629.961824][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 629.979789][ T24] usb 2-1: USB disconnect, device number 62 [ 629.990411][T14671] fuse: Unknown parameter 'ÿ' [ 629.999610][ T29] audit: type=1326 audit(1774149345.848:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14669 comm="syz.0.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 630.054280][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.083993][ T29] audit: type=1326 audit(1774149345.848:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14669 comm="syz.0.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 630.445850][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 630.652770][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 630.843392][ T24] usb 6-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 630.855088][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.883420][ T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 630.899198][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 631.163232][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 631.183229][ T10] em28xx 3-1:0.0: board has no eeprom [ 631.192335][ T24] usb 6-1: SerialNumber: syz [ 631.265016][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 631.284302][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 631.296166][ T5835] em28xx 3-1:0.0: Binding DVB extension [ 631.320800][ T10] usb 3-1: USB disconnect, device number 78 [ 631.364177][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 631.517899][ T24] usb 6-1: 0:2 : does not exist [ 631.529102][ T24] usb 6-1: unit 127 not found! [ 631.545200][ T5835] em28xx 3-1:0.0: Registering input extension [ 631.564716][ T10] em28xx 3-1:0.0: Closing input extension [ 631.609643][ T10] em28xx 3-1:0.0: Freeing device [ 631.707661][T14690] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2735'. [ 631.825535][ T24] usb 6-1: USB disconnect, device number 21 [ 631.906453][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.779470][T14703] fuse: Unknown parameter 'ÿ' [ 632.844636][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 632.844692][ T29] audit: type=1326 audit(1774149348.698:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14702 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 632.924113][ T29] audit: type=1326 audit(1774149348.698:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14702 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 632.928795][ T10] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 632.963137][ T29] audit: type=1326 audit(1774149348.698:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14702 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 633.128828][ T29] audit: type=1326 audit(1774149348.698:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14702 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 633.297112][ T29] audit: type=1326 audit(1774149348.698:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14702 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 633.298249][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 633.499011][ T5835] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 633.508811][ T29] audit: type=1326 audit(1774149348.698:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14702 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 633.529638][ T10] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 633.558915][ T29] audit: type=1326 audit(1774149348.698:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14702 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 633.558941][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.656789][ T29] audit: type=1326 audit(1774149348.698:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14702 comm="syz.4.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 633.668750][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 633.706801][ T10] usb 2-1: Product: syz [ 633.715199][ T10] usb 2-1: Manufacturer: syz [ 633.723677][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 633.736692][ T10] usb 2-1: SerialNumber: syz [ 633.754403][ T5835] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 633.763578][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.775675][ T5835] usb 1-1: Product: syz [ 633.781048][ T5835] usb 1-1: Manufacturer: syz [ 633.787465][ T5835] usb 1-1: SerialNumber: syz [ 633.799531][ T5835] usb 1-1: config 0 descriptor?? [ 633.814993][ T5835] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 633.824906][ T5835] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 634.084466][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 634.091980][ T10] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 634.145966][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 634.174907][ T10] usb 2-1: USB disconnect, device number 63 [ 634.218790][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 634.249179][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.372489][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 634.443671][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 634.457843][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 634.476328][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 634.499574][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 634.512287][ T5835] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 634.532167][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.553271][ T5914] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 634.599021][ T5914] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 634.637997][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 634.663118][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.702779][ T5914] usb 5-1: USB disconnect, device number 64 [ 634.895148][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 634.902236][ T24] usbtmc 3-1:16.0: can't read capabilities [ 634.918795][ T5880] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 635.081164][ T5880] usb 6-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 635.091600][ T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 635.098745][ T5914] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 635.117716][T14731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.126499][T14731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.139154][ T5880] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.157271][ T5880] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 635.165848][ T5835] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 635.166854][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 635.182889][ T5880] usb 6-1: SerialNumber: syz [ 635.191881][ T5835] em28xx 1-1:0.0: board has no eeprom [ 635.269593][ T5835] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 635.277568][ T5835] em28xx 1-1:0.0: dvb set to bulk mode. [ 635.283265][ T10] em28xx 1-1:0.0: Binding DVB extension [ 635.289064][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 635.303262][ T5914] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 635.320461][ T5835] usb 1-1: USB disconnect, device number 65 [ 635.330072][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 635.336681][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.356837][ T5835] em28xx 1-1:0.0: Disconnecting em28xx [ 635.364523][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.373938][ T5914] usb 5-1: Product: syz [ 635.380516][ T5914] usb 5-1: Manufacturer: syz [ 635.385252][ T5914] usb 5-1: SerialNumber: syz [ 635.385624][ T24] usb 2-1: Product: syz [ 635.397558][ T5914] usb 5-1: config 0 descriptor?? [ 635.418102][ T5880] usb 6-1: 0:2 : does not exist [ 635.427923][ T24] usb 2-1: Manufacturer: syz [ 635.431393][ T10] em28xx 1-1:0.0: Registering input extension [ 635.433145][ T5880] usb 6-1: unit 127 not found! [ 635.439798][ T5835] em28xx 1-1:0.0: Closing input extension [ 635.444482][ T24] usb 2-1: SerialNumber: syz [ 635.465988][ T24] usb 2-1: config 0 descriptor?? [ 635.467078][ T5835] em28xx 1-1:0.0: Freeing device [ 635.559906][ T5880] usb 6-1: USB disconnect, device number 22 [ 635.601777][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.629263][ T5914] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 635.649269][ T5914] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 635.683613][ T5914] usb 5-1: USB disconnect, device number 65 [ 635.721536][ T24] usb 2-1: USB disconnect, device number 64 [ 636.240549][T14746] netlink: 'syz.5.2754': attribute type 4 has an invalid length. [ 636.795077][ T24] usb 3-1: USB disconnect, device number 79 [ 637.365081][T14761] fuse: Unknown parameter 'fø¡ëNŠd' [ 637.664339][T14763] fuse: Unknown parameter 'ÿ' [ 637.684161][ T29] audit: type=1326 audit(1774149353.538:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695c99c799 code=0x7ffc0000 [ 637.748491][ T29] audit: type=1326 audit(1774149353.568:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f695c99c799 code=0x7ffc0000 [ 637.852860][ T29] audit: type=1326 audit(1774149353.568:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695c99c799 code=0x7ffc0000 [ 637.904283][ T29] audit: type=1326 audit(1774149353.568:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695c99c799 code=0x7ffc0000 [ 637.995345][ T29] audit: type=1326 audit(1774149353.568:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f695c99c799 code=0x7ffc0000 [ 638.083584][ T29] audit: type=1326 audit(1774149353.568:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695c99c799 code=0x7ffc0000 [ 638.129182][ T29] audit: type=1326 audit(1774149353.568:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f695c99c799 code=0x7ffc0000 [ 638.153881][ T29] audit: type=1326 audit(1774149353.568:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695c99c799 code=0x7ffc0000 [ 638.177223][ T29] audit: type=1326 audit(1774149353.568:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695c99c799 code=0x7ffc0000 [ 638.200438][T14783] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 638.220164][T14783] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 638.237047][ T29] audit: type=1326 audit(1774149353.568:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f695c99c799 code=0x7ffc0000 [ 638.328976][ T5914] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 638.360861][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 638.500495][ T5880] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 638.526407][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 638.581103][ T24] usb 2-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 638.599146][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.608088][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 638.610548][ T5914] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 638.672047][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 638.681279][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 638.698714][ T24] usb 2-1: SerialNumber: syz [ 638.739741][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 638.740831][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.747035][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1568, setting to 64 [ 638.780809][ T5914] usb 1-1: Product: syz [ 638.787431][ T5914] usb 1-1: Manufacturer: syz [ 638.797331][ T5914] usb 1-1: SerialNumber: syz [ 638.797396][ T5880] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 638.924038][ T5914] usb 1-1: config 0 descriptor?? [ 638.930492][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.942389][ T5914] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 638.948846][ T5880] usb 6-1: Product: syz [ 638.957040][ T5914] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 638.966547][ T24] usb 2-1: 0:2 : does not exist [ 638.972161][ T24] usb 2-1: unit 127 not found! [ 638.987145][ T5880] usb 6-1: Manufacturer: syz [ 638.993024][ T5880] usb 6-1: SerialNumber: syz [ 639.014208][ T5880] usb 6-1: config 0 descriptor?? [ 639.031987][ T5880] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 639.052299][ T24] usb 2-1: USB disconnect, device number 65 [ 639.061564][ T5880] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 639.208870][T10810] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 639.378780][T10810] usb 3-1: Using ep0 maxpacket: 32 [ 639.386415][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.403571][T10810] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 639.412926][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.431820][T10810] usb 3-1: Product: syz [ 639.536119][T10810] usb 3-1: Manufacturer: syz [ 639.547034][T10810] usb 3-1: SerialNumber: syz [ 639.564039][T10810] usb 3-1: config 0 descriptor?? [ 639.572205][ T5914] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 639.587760][T10810] usb 3-1: bad CDC descriptors [ 639.594154][T10810] usb 3-1: unsupported MDLM descriptors [ 639.636671][ T5880] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 640.300223][ T5914] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 640.311601][ T5914] em28xx 1-1:0.0: board has no eeprom [ 640.388805][ T5914] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 640.396848][ T5914] em28xx 1-1:0.0: dvb set to bulk mode. [ 640.403046][ T5835] em28xx 1-1:0.0: Binding DVB extension [ 640.490991][T14783] warn_alloc: 1 callbacks suppressed [ 640.491010][T14783] syz.5.2765: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 640.520141][ T5914] usb 1-1: USB disconnect, device number 66 [ 640.528771][T14783] CPU: 1 UID: 0 PID: 14783 Comm: syz.5.2765 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.528810][T14783] Tainted: [L]=SOFTLOCKUP [ 640.528818][T14783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.528830][T14783] Call Trace: [ 640.528838][T14783] [ 640.528847][T14783] dump_stack_lvl+0xe8/0x150 [ 640.528882][T14783] warn_alloc+0x249/0x340 [ 640.528926][T14783] ? stack_trace_save+0xa9/0x100 [ 640.528951][T14783] ? __pfx_warn_alloc+0x10/0x10 [ 640.528980][T14783] ? kasan_save_track+0x4f/0x80 [ 640.529000][T14783] ? kasan_save_track+0x3e/0x80 [ 640.529019][T14783] ? __kasan_kmalloc+0x93/0xb0 [ 640.529039][T14783] ? __kmalloc_cache_noprof+0x31c/0x660 [ 640.529059][T14783] ? xskq_create+0x56/0x170 [ 640.529083][T14783] ? xsk_setsockopt+0x54c/0x990 [ 640.529117][T14783] ? do_sock_setsockopt+0x17c/0x1b0 [ 640.529138][T14783] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 640.529158][T14783] ? do_syscall_64+0x14d/0xf80 [ 640.529184][T14783] __vmalloc_node_range_noprof+0x132/0x1730 [ 640.529235][T14783] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 640.529263][T14783] ? __kasan_kmalloc+0x93/0xb0 [ 640.529291][T14783] vmalloc_user_noprof+0xad/0xe0 [ 640.529312][T14783] ? xskq_create+0xbf/0x170 [ 640.529332][T14783] xskq_create+0xbf/0x170 [ 640.529354][T14783] xsk_init_queue+0x8a/0xe0 [ 640.529384][T14783] xsk_setsockopt+0x54c/0x990 [ 640.529416][T14783] ? __pfx_xsk_setsockopt+0x10/0x10 [ 640.529442][T14783] ? __pfx_aa_sk_perm+0x10/0x10 [ 640.529472][T14783] ? aa_sock_opt_perm+0xff/0x1a0 [ 640.529502][T14783] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 640.529523][T14783] ? __pfx_xsk_setsockopt+0x10/0x10 [ 640.529551][T14783] do_sock_setsockopt+0x17c/0x1b0 [ 640.529578][T14783] __x64_sys_setsockopt+0x13d/0x1b0 [ 640.529604][T14783] do_syscall_64+0x14d/0xf80 [ 640.529625][T14783] ? trace_irq_disable+0x3b/0x150 [ 640.529652][T14783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.529671][T14783] ? clear_bhb_loop+0x40/0x90 [ 640.529695][T14783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.529715][T14783] RIP: 0033:0x7f4c3519c799 [ 640.529734][T14783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.529751][T14783] RSP: 002b:00007f4c3600c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 640.529772][T14783] RAX: ffffffffffffffda RBX: 00007f4c35415fa0 RCX: 00007f4c3519c799 [ 640.529787][T14783] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 640.529807][T14783] RBP: 00007f4c35232c99 R08: 0000000000000004 R09: 0000000000000000 [ 640.529819][T14783] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.529832][T14783] R13: 00007f4c35416038 R14: 00007f4c35415fa0 R15: 00007f4c3553fa48 [ 640.529863][T14783] [ 640.529879][T14783] Mem-Info: [ 640.877809][ T5835] em28xx 1-1:0.0: Registering input extension [ 640.988804][T14783] active_anon:14071 inactive_anon:0 isolated_anon:0 [ 640.988804][T14783] active_file:15697 inactive_file:40215 isolated_file:0 [ 640.988804][T14783] unevictable:768 dirty:112 writeback:0 [ 640.988804][T14783] slab_reclaimable:12293 slab_unreclaimable:108701 [ 640.988804][T14783] mapped:35771 shmem:6284 pagetables:1648 [ 640.988804][T14783] sec_pagetables:0 bounce:0 [ 640.988804][T14783] kernel_misc_reclaimable:0 [ 640.988804][T14783] free:1292083 free_pcp:8203 free_cma:0 [ 640.990134][ T5914] em28xx 1-1:0.0: Disconnecting em28xx [ 641.296669][T14783] Node 0 active_anon:57632kB inactive_anon:0kB active_file:62704kB inactive_file:160664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143004kB dirty:440kB writeback:0kB shmem:23608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12504kB pagetables:6228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 641.338393][ T5914] em28xx 1-1:0.0: Closing input extension [ 641.386695][ T5880] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 641.390902][ T5914] em28xx 1-1:0.0: Freeing device [ 641.430822][T14783] Node 1 active_anon:0kB inactive_anon:0kB active_file:84kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 641.498849][T14783] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 641.631577][ T5835] usb 3-1: USB disconnect, device number 80 [ 641.726727][T14807] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2772'. [ 641.774588][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'. [ 641.788811][ T5914] IPVS: starting estimator thread 0... [ 641.797106][ T5880] em28xx 6-1:0.0: board has no eeprom [ 641.881147][T14810] IPVS: using max 53 ests per chain, 127200 per kthread [ 641.893614][T14783] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 641.928792][ T5880] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 641.936729][ T5880] em28xx 6-1:0.0: dvb set to bulk mode. [ 641.958776][T14783] Node 0 DMA32 free:1200580kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54772kB inactive_anon:0kB active_file:62704kB inactive_file:160664kB unevictable:1536kB writepending:444kB zspages:0kB present:3129332kB managed:2552704kB mlocked:0kB bounce:0kB free_pcp:34744kB local_pcp:15632kB free_cma:0kB [ 641.999709][T10810] em28xx 6-1:0.0: Binding DVB extension [ 642.094284][T14783] lowmem_reserve[]: 0 0 0 0 0 [ 642.128379][T14783] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 642.218936][T14783] lowmem_reserve[]: 0 0 0 0 0 [ 642.228745][T14783] Node 1 Normal free:3950580kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:84kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 642.339089][T14783] lowmem_reserve[]: 0 0 0 0 0 [ 642.372809][T10810] em28xx 6-1:0.0: Registering input extension [ 642.392407][T14783] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 642.436638][T14783] Node 0 DMA32: 1429*4kB (UME) 3203*8kB (UME) 2103*16kB (UME) 345*32kB (UME) 402*64kB (UME) 207*128kB (UM) 125*256kB (UM) 64*512kB (UME) 27*1024kB (UME) 8*2048kB (M) 237*4096kB (M) = 1207804kB [ 642.469620][T14820] fuse: Unknown parameter 'fø¡ëNŠd' [ 642.488729][T14783] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 642.522665][T14783] Node 1 Normal: 9*4kB (UM) 16*8kB (UM) 11*16kB (UM) 9*32kB (UM) 8*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 962*4096kB (UM) = 3950580kB [ 642.567030][T14783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.591560][T14783] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 642.611366][T14783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.638775][T14783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 642.658421][T14783] 63414 total pagecache pages [ 642.668538][T14783] 0 pages in swap cache [ 642.673057][T14783] Free swap = 124996kB [ 642.686157][T14783] Total swap = 124996kB [ 642.690764][T14783] 2097051 pages RAM [ 642.694577][T14783] 0 pages HighMem/MovableOnly [ 642.718754][T14783] 427040 pages reserved [ 642.729002][T14783] 0 pages cma reserved [ 642.781345][T10810] usb 6-1: USB disconnect, device number 23 [ 642.803324][T10810] em28xx 6-1:0.0: Disconnecting em28xx [ 642.818787][T10810] em28xx 6-1:0.0: Closing input extension [ 642.893342][T10810] em28xx 6-1:0.0: Freeing device [ 643.015237][T14833] fuse: Unknown parameter 'ÿ' [ 643.024781][ T29] audit: type=1326 audit(1774149358.878:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 643.076452][ T29] audit: type=1326 audit(1774149358.898:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 643.130623][ T29] audit: type=1326 audit(1774149358.898:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 643.164698][ T29] audit: type=1326 audit(1774149358.898:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 643.168791][ T5914] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 643.188452][ T29] audit: type=1326 audit(1774149358.898:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 643.221620][ T29] audit: type=1326 audit(1774149358.898:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 643.247014][ T5880] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 643.257181][ T29] audit: type=1326 audit(1774149358.898:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 643.280630][ T29] audit: type=1326 audit(1774149358.898:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 643.303224][ T29] audit: type=1326 audit(1774149359.058:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 643.327305][ T29] audit: type=1326 audit(1774149359.058:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407599c799 code=0x7ffc0000 [ 643.370340][ T5914] usb 5-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 643.388910][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.409086][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 643.416360][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 643.436025][ T5880] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 643.445894][ T5914] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 643.446248][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.465385][ T5880] usb 3-1: Product: syz [ 643.471418][ T5880] usb 3-1: Manufacturer: syz [ 643.476262][ T5880] usb 3-1: SerialNumber: syz [ 643.488837][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 643.496851][ T5914] usb 5-1: SerialNumber: syz [ 643.507286][ T5880] usb 3-1: config 0 descriptor?? [ 643.552511][ T5880] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 643.588352][ T5880] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 643.599998][T14844] netlink: 'syz.5.2783': attribute type 11 has an invalid length. [ 643.653966][T14844] netlink: 'syz.5.2783': attribute type 11 has an invalid length. [ 643.764622][ T5914] usb 5-1: 0:2 : does not exist [ 643.796263][ T5914] usb 5-1: unit 127 not found! [ 643.861376][ T5914] usb 5-1: USB disconnect, device number 66 [ 643.922289][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.158754][ T5880] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 644.536832][T14868] fuse: Unknown parameter 'fø¡ëNŠd' [ 644.771585][ T5880] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 644.799467][ T5880] em28xx 3-1:0.0: board has no eeprom [ 644.868793][ T5880] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 644.888923][ T5880] em28xx 3-1:0.0: dvb set to bulk mode. [ 644.896842][ T24] em28xx 3-1:0.0: Binding DVB extension [ 644.922630][ T5880] usb 3-1: USB disconnect, device number 81 [ 644.947760][ T5880] em28xx 3-1:0.0: Disconnecting em28xx [ 645.007287][ T24] em28xx 3-1:0.0: Registering input extension [ 645.029032][ T5880] em28xx 3-1:0.0: Closing input extension [ 645.075311][ T5880] em28xx 3-1:0.0: Freeing device [ 645.445378][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2796'. [ 645.456000][T14878] fuse: Unknown parameter 'ÿ' [ 645.893040][T14894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2795'. [ 646.039620][ T5914] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 646.198753][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 646.209873][ T5914] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 646.218196][ T5914] usb 6-1: config 0 has no interface number 0 [ 646.269937][ T5914] usb 6-1: config 0 interface 12 has no altsetting 0 [ 646.285616][ T5914] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 646.295152][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.307532][ T5914] usb 6-1: Product: syz [ 646.316043][ T5914] usb 6-1: Manufacturer: syz [ 646.325049][ T5914] usb 6-1: SerialNumber: syz [ 646.461424][ T5914] usb 6-1: config 0 descriptor?? [ 646.515605][ T5880] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 646.589157][T10810] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 646.703783][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 646.711122][ T5880] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 646.720954][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.737415][ T5880] usb 2-1: config 0 descriptor?? [ 646.760032][T10810] usb 5-1: Using ep0 maxpacket: 32 [ 646.767060][T10810] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 646.789176][ T5880] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 646.795615][T10810] usb 5-1: config 0 has no interface number 0 [ 646.809473][T10810] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 646.827489][T10810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.859265][T10810] usb 5-1: Product: syz [ 646.863494][T10810] usb 5-1: Manufacturer: syz [ 646.878786][T10810] usb 5-1: SerialNumber: syz [ 646.890346][T10810] usb 5-1: config 0 descriptor?? [ 646.906955][T10810] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 647.137511][T10810] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 647.161996][ T5880] gspca_vc032x: reg_w err -71 [ 647.168777][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.196226][T10810] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 647.206396][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.212117][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.230665][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.236258][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.271045][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.302035][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.313348][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 105 [ 647.328124][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.362690][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.409912][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.415247][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.459048][ T5835] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 647.466916][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.497126][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.526024][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 647.536256][T10810] usb 5-1: USB disconnect, device number 67 [ 647.548156][T10810] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 647.566223][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.588598][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.596137][T10810] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 647.629656][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 647.636433][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.638394][ T5835] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 647.678756][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.690131][T10810] quatech2 5-1:0.51: device disconnected [ 647.711428][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 647.737484][ T5880] gspca_vc032x: Unknown sensor... [ 647.743128][ T5880] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 647.753762][ T5835] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 647.755925][ T5880] usb 2-1: USB disconnect, device number 66 [ 647.815340][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 647.834685][ T5835] usb 1-1: Product: syz [ 647.863178][ T5835] usb 1-1: Manufacturer: syz [ 647.883181][ T5835] usb 1-1: SerialNumber: syz [ 647.923273][T14911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2804'. [ 647.954588][ T5835] usb 1-1: config 0 descriptor?? [ 647.975470][T14903] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 648.003153][ T5835] hub 1-1:0.0: bad descriptor, ignoring hub [ 648.019779][ T5835] hub 1-1:0.0: probe with driver hub failed with error -5 [ 648.036096][ T5914] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 648.054788][ T5914] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 648.236154][ T5914] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 648.356829][T14915] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 648.365833][ T5914] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 648.396393][T14915] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 648.454449][ T5914] usb 6-1: USB disconnect, device number 24 [ 648.804128][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2810'. [ 649.176692][ T5835] usb 1-1: USB disconnect, device number 67 [ 649.798774][ T5835] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 650.043996][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 650.052315][ T5835] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 650.062595][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.103127][ T5835] usb 2-1: config 0 descriptor?? [ 650.332478][ T5835] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 650.342646][ T5835] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 650.358719][ T5835] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 650.763869][T14944] FAULT_INJECTION: forcing a failure. [ 650.763869][T14944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.779112][T14944] CPU: 0 UID: 0 PID: 14944 Comm: syz.2.2815 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.779141][T14944] Tainted: [L]=SOFTLOCKUP [ 650.779149][T14944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.779159][T14944] Call Trace: [ 650.779166][T14944] [ 650.779175][T14944] dump_stack_lvl+0xe8/0x150 [ 650.779207][T14944] should_fail_ex+0x412/0x560 [ 650.779239][T14944] _copy_from_user+0x2d/0xb0 [ 650.779261][T14944] xsk_setsockopt+0x33e/0x990 [ 650.779291][T14944] ? __pfx_xsk_setsockopt+0x10/0x10 [ 650.779318][T14944] ? __pfx_aa_sk_perm+0x10/0x10 [ 650.779347][T14944] ? aa_sock_opt_perm+0xff/0x1a0 [ 650.779377][T14944] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 650.779399][T14944] ? __pfx_xsk_setsockopt+0x10/0x10 [ 650.779428][T14944] do_sock_setsockopt+0x17c/0x1b0 [ 650.779453][T14944] __x64_sys_setsockopt+0x13d/0x1b0 [ 650.779478][T14944] do_syscall_64+0x14d/0xf80 [ 650.779498][T14944] ? trace_irq_disable+0x3b/0x150 [ 650.779525][T14944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.779544][T14944] ? clear_bhb_loop+0x40/0x90 [ 650.779568][T14944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.779587][T14944] RIP: 0033:0x7f695c99c799 [ 650.779606][T14944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.779623][T14944] RSP: 002b:00007f695d826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 650.779644][T14944] RAX: ffffffffffffffda RBX: 00007f695cc16180 RCX: 00007f695c99c799 [ 650.779658][T14944] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 650.779670][T14944] RBP: 00007f695d826090 R08: 0000000000000004 R09: 0000000000000000 [ 650.779683][T14944] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.779696][T14944] R13: 00007f695cc16218 R14: 00007f695cc16180 R15: 00007f695cd3fa48 [ 650.779727][T14944] [ 651.079726][ T5914] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 651.146480][T14948] erspan0: entered promiscuous mode [ 651.203073][T14948] erspan0: entered allmulticast mode [ 651.267507][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 651.281367][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 651.318735][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 651.362632][ T5914] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 651.392138][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 651.425582][ T5914] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 651.477443][ T5914] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 651.497001][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.513258][T14959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 651.576696][ T5914] usb 6-1: config 0 descriptor?? [ 651.608027][T14942] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 651.882533][T14971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2825'. [ 651.894891][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 651.919310][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 651.926434][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 651.933451][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 651.940443][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 651.947390][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 651.984392][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 651.991386][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 651.998262][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.005554][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.012547][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.019630][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.027382][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.034337][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.041427][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.048898][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.055861][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.062991][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.069901][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.077118][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.084030][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.091025][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.096069][ T10] usb 6-1: USB disconnect, device number 25 [ 652.098044][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.110692][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.117511][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.124410][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.131306][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.138240][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.145239][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.152466][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 652.162197][T13499] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 652.758889][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 652.940204][T14990] netlink: 'syz.5.2833': attribute type 4 has an invalid length. [ 652.957392][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 652.965492][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 652.975694][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.996949][ T10] usb 5-1: config 0 descriptor?? [ 653.347691][T14995] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2836'. [ 653.353468][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 653.372197][T14995] netlink: 'syz.1.2836': attribute type 1 has an invalid length. [ 653.380504][T14995] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2836'. [ 653.899135][T15001] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2838'. [ 654.108419][T15009] fuse: Unknown parameter 'fø¡ëNŠd' [ 655.554286][T15035] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 655.565126][T15021] IPVS: stopping backup sync thread 15035 ... [ 655.574676][T15037] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2853'. [ 655.942890][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 656.105407][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 656.113778][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 656.122074][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 656.129766][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 656.591497][T15044] FAULT_INJECTION: forcing a failure. [ 656.591497][T15044] name failslab, interval 1, probability 0, space 0, times 0 [ 656.604456][T15044] CPU: 1 UID: 0 PID: 15044 Comm: syz.5.2854 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.604475][T15044] Tainted: [L]=SOFTLOCKUP [ 656.604479][T15044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.604487][T15044] Call Trace: [ 656.604492][T15044] [ 656.604497][T15044] dump_stack_lvl+0xe8/0x150 [ 656.604518][T15044] should_fail_ex+0x412/0x560 [ 656.604537][T15044] should_failslab+0xa8/0x100 [ 656.604553][T15044] __kmalloc_cache_noprof+0x88/0x660 [ 656.604565][T15044] ? __hw_addr_add_ex+0x1dc/0x650 [ 656.604652][T15044] ? do_raw_spin_lock+0x12b/0x2f0 [ 656.604666][T15044] __hw_addr_add_ex+0x1dc/0x650 [ 656.604682][T15044] dev_mc_add_global+0xa4/0x120 [ 656.604697][T15044] dev_ifsioc+0xee9/0x1280 [ 656.604756][T15044] ? dev_load+0x21/0x1f0 [ 656.604772][T15044] dev_ioctl+0x7b4/0x1150 [ 656.604790][T15044] sock_do_ioctl+0x23e/0x320 [ 656.604806][T15044] ? __pfx_sock_do_ioctl+0x10/0x10 [ 656.604819][T15044] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 656.604840][T15044] sock_ioctl+0x5c6/0x7f0 [ 656.604854][T15044] ? __pfx_sock_ioctl+0x10/0x10 [ 656.604868][T15044] ? __fget_files+0x2a/0x420 [ 656.604883][T15044] ? __fget_files+0x3a0/0x420 [ 656.604897][T15044] ? __fget_files+0x2a/0x420 [ 656.604914][T15044] ? bpf_lsm_file_ioctl+0x9/0x20 [ 656.604928][T15044] ? __pfx_sock_ioctl+0x10/0x10 [ 656.604942][T15044] __se_sys_ioctl+0xfc/0x170 [ 656.604956][T15044] do_syscall_64+0x14d/0xf80 [ 656.604968][T15044] ? trace_irq_disable+0x3b/0x150 [ 656.604983][T15044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.604994][T15044] ? clear_bhb_loop+0x40/0x90 [ 656.605007][T15044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.605017][T15044] RIP: 0033:0x7f4c3519c799 [ 656.605029][T15044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.605039][T15044] RSP: 002b:00007f4c3600c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.605051][T15044] RAX: ffffffffffffffda RBX: 00007f4c35415fa0 RCX: 00007f4c3519c799 [ 656.605059][T15044] RDX: 0000200000000000 RSI: 0000000000008931 RDI: 0000000000000003 [ 656.605066][T15044] RBP: 00007f4c3600c090 R08: 0000000000000000 R09: 0000000000000000 [ 656.605072][T15044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.605079][T15044] R13: 00007f4c35416038 R14: 00007f4c35415fa0 R15: 00007f4c3553fa48 [ 656.605094][T15044] [ 657.011699][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 657.011717][ T29] audit: type=1326 audit(1774149372.868:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 657.044535][ T29] audit: type=1326 audit(1774149372.868:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 657.067277][ T29] audit: type=1326 audit(1774149372.868:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 657.089786][ T29] audit: type=1326 audit(1774149372.868:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 657.214680][ T29] audit: type=1326 audit(1774149372.868:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 657.450512][ T29] audit: type=1326 audit(1774149372.868:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 657.536932][ T29] audit: type=1326 audit(1774149372.868:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 657.548766][ T5880] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 657.559961][T10915] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 657.583367][T13585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.595000][ T29] audit: type=1326 audit(1774149372.868:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 657.618065][T13585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.629855][ T29] audit: type=1326 audit(1774149372.868:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 657.658975][ T29] audit: type=1326 audit(1774149372.868:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15046 comm="syz.5.2857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 657.759004][T10915] usb 3-1: Using ep0 maxpacket: 8 [ 657.761664][T13585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.775357][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 657.785846][T10915] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 657.790294][ T5880] usb 6-1: unable to get BOS descriptor or descriptor too short [ 657.795228][T10915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.830505][T10915] pvrusb2: Hardware description: Terratec Grabster AV400 [ 657.834752][T13585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.837671][T10915] pvrusb2: ********** [ 657.852073][T10915] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 657.865322][ T5880] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 657.877842][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.878737][T10915] pvrusb2: Important functionality might not be entirely working. [ 657.904459][ T5880] usb 6-1: Product: syz [ 657.909894][ T5880] usb 6-1: Manufacturer: syz [ 657.914644][ T5880] usb 6-1: SerialNumber: syz [ 657.921019][T10915] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 657.933816][T15040] chnl_net:caif_netlink_parms(): no params data found [ 657.941725][T10915] pvrusb2: ********** [ 658.030947][ T2345] pvrusb2: Invalid write control endpoint [ 658.048478][T13585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.074070][T15066] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 658.083803][T13585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.132801][ T2345] pvrusb2: Invalid write control endpoint [ 658.186551][ T5880] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 658.195692][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 658.217782][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 658.225916][T13499] Bluetooth: hci5: command tx timeout [ 658.262508][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 658.417823][ T2345] pvrusb2: Device being rendered inoperable [ 658.426646][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 658.438149][T15057] pvrusb2: Attempted to execute control transfer when device not ok [ 658.460671][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 658.477134][ T2345] pvrusb2: Attached sub-driver cx25840 [ 658.484110][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 658.490787][T13585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.506294][ T5880] usb 6-1: USB disconnect, device number 26 [ 658.506488][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 658.527856][T13585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.665959][ T6346] udevd[6346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.944842][T15040] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.982876][T15040] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.006531][T15040] bridge_slave_0: entered allmulticast mode [ 659.251091][T15040] bridge_slave_0: entered promiscuous mode [ 659.276017][ T5880] usb 3-1: USB disconnect, device number 82 [ 659.309566][T15040] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.343131][T15040] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.374236][T15040] bridge_slave_1: entered allmulticast mode [ 659.382412][T15040] bridge_slave_1: entered promiscuous mode [ 659.390078][T13585] bridge_slave_1: left allmulticast mode [ 659.395835][T13585] bridge_slave_1: left promiscuous mode [ 659.402026][T13585] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.433439][T13585] bridge_slave_0: left allmulticast mode [ 659.439656][T13585] bridge_slave_0: left promiscuous mode [ 659.445489][T13585] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.178708][T13585] dvmrp0 (unregistering): left allmulticast mode [ 660.309401][T13499] Bluetooth: hci5: command tx timeout [ 660.332354][T15101] FAULT_INJECTION: forcing a failure. [ 660.332354][T15101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.383004][T13585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.400884][T13585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.406602][T15101] CPU: 0 UID: 0 PID: 15101 Comm: syz.4.2868 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.406634][T15101] Tainted: [L]=SOFTLOCKUP [ 660.406641][T15101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.406654][T15101] Call Trace: [ 660.406662][T15101] [ 660.406671][T15101] dump_stack_lvl+0xe8/0x150 [ 660.406702][T15101] should_fail_ex+0x412/0x560 [ 660.406735][T15101] _copy_from_iter+0x1d3/0x1670 [ 660.406768][T15101] ? rcu_is_watching+0x15/0xb0 [ 660.406799][T15101] ? __pfx__copy_from_iter+0x10/0x10 [ 660.406835][T15101] ? netlink_sendmsg+0x650/0xb40 [ 660.406865][T15101] ? skb_put+0x11b/0x210 [ 660.406899][T15101] netlink_sendmsg+0x6c0/0xb40 [ 660.406935][T15101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.406966][T15101] ? aa_sock_msg_perm+0xf1/0x1b0 [ 660.406995][T15101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.407020][T15101] ____sys_sendmsg+0x972/0x9f0 [ 660.407050][T15101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.407080][T15101] ? import_iovec+0x73/0xa0 [ 660.407103][T15101] ___sys_sendmsg+0x2a5/0x360 [ 660.407130][T15101] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.407182][T15101] ? __fget_files+0x2a/0x420 [ 660.407209][T15101] ? __fget_files+0x3a0/0x420 [ 660.407245][T15101] __x64_sys_sendmsg+0x1bd/0x2a0 [ 660.407271][T15101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.407300][T15101] ? __pfx_ksys_write+0x10/0x10 [ 660.407332][T15101] do_syscall_64+0x14d/0xf80 [ 660.407355][T15101] ? trace_irq_disable+0x3b/0x150 [ 660.407381][T15101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.407399][T15101] ? clear_bhb_loop+0x40/0x90 [ 660.407423][T15101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.407442][T15101] RIP: 0033:0x7fd1ecb9c799 [ 660.407460][T15101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.407477][T15101] RSP: 002b:00007fd1eadf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.407498][T15101] RAX: ffffffffffffffda RBX: 00007fd1ece15fa0 RCX: 00007fd1ecb9c799 [ 660.407512][T15101] RDX: 000000002c048010 RSI: 0000200000003740 RDI: 0000000000000003 [ 660.407525][T15101] RBP: 00007fd1eadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 660.407538][T15101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.407551][T15101] R13: 00007fd1ece16038 R14: 00007fd1ece15fa0 R15: 00007fd1ecf3fa48 [ 660.407579][T15101] [ 660.783582][T13585] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 660.800196][T13585] bond0 (unregistering): Released all slaves [ 661.010458][T15097] pim6reg: entered allmulticast mode [ 661.063787][T13585] tipc: Left network mode [ 661.068891][T15116] FAULT_INJECTION: forcing a failure. [ 661.068891][T15116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 661.095456][T15040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.143625][T15040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.175403][T15116] CPU: 0 UID: 0 PID: 15116 Comm: syz.4.2872 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.175433][T15116] Tainted: [L]=SOFTLOCKUP [ 661.175440][T15116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.175450][T15116] Call Trace: [ 661.175457][T15116] [ 661.175463][T15116] dump_stack_lvl+0xe8/0x150 [ 661.175483][T15116] should_fail_ex+0x412/0x560 [ 661.175503][T15116] prepare_alloc_pages+0x22a/0x650 [ 661.175521][T15116] __alloc_frozen_pages_noprof+0x12f/0x380 [ 661.175536][T15116] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 661.175551][T15116] ? __pfx_policy_nodemask+0x10/0x10 [ 661.175569][T15116] alloc_pages_mpol+0x232/0x4a0 [ 661.175586][T15116] alloc_pages_noprof+0xa8/0x190 [ 661.175600][T15116] pte_alloc_one+0x22/0x370 [ 661.175628][T15116] do_pte_missing+0x12c2/0x3490 [ 661.175649][T15116] handle_mm_fault+0x1bec/0x3310 [ 661.175671][T15116] ? handle_mm_fault+0xee/0x3310 [ 661.175690][T15116] ? __pfx_handle_mm_fault+0x10/0x10 [ 661.175718][T15116] ? lock_mm_and_find_vma+0xa7/0x340 [ 661.175731][T15116] do_user_addr_fault+0x75b/0x1340 [ 661.175752][T15116] exc_page_fault+0x6a/0xc0 [ 661.175766][T15116] asm_exc_page_fault+0x26/0x30 [ 661.175777][T15116] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 661.175793][T15116] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 661.175803][T15116] RSP: 0018:ffffc90004d1fd58 EFLAGS: 00050212 [ 661.175814][T15116] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 661.175821][T15116] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc90004d1fdc0 [ 661.175828][T15116] RBP: ffffc90004d1feb8 R08: ffffc90004d1fdcf R09: 1ffff920009a3fb9 [ 661.175836][T15116] R10: dffffc0000000000 R11: fffff520009a3fba R12: 0000200000000100 [ 661.175844][T15116] R13: ffffc90004d1fdc0 R14: ffffc90004d1fdc0 R15: 0000200000000100 [ 661.175860][T15116] _copy_from_user+0x7a/0xb0 [ 661.175874][T15116] __sys_bind+0x1c6/0x410 [ 661.175893][T15116] ? __pfx___sys_bind+0x10/0x10 [ 661.175914][T15116] ? __pfx_ksys_write+0x10/0x10 [ 661.175929][T15116] __x64_sys_bind+0x7a/0x90 [ 661.175946][T15116] do_syscall_64+0x14d/0xf80 [ 661.175957][T15116] ? trace_irq_disable+0x3b/0x150 [ 661.175972][T15116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.175982][T15116] ? clear_bhb_loop+0x40/0x90 [ 661.175995][T15116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.176005][T15116] RIP: 0033:0x7fd1ecb9c799 [ 661.176015][T15116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.176024][T15116] RSP: 002b:00007fd1eadf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 661.176034][T15116] RAX: ffffffffffffffda RBX: 00007fd1ece15fa0 RCX: 00007fd1ecb9c799 [ 661.176041][T15116] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 661.176048][T15116] RBP: 00007fd1eadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 661.176054][T15116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.176060][T15116] R13: 00007fd1ece16038 R14: 00007fd1ece15fa0 R15: 00007fd1ecf3fa48 [ 661.176075][T15116] [ 661.582936][T15115] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2871'. [ 661.665239][T15040] team0: Port device team_slave_0 added [ 661.672589][T15040] team0: Port device team_slave_1 added [ 661.698118][T15040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.705300][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.731561][T15040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.743325][T15040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.750298][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.776401][T15040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.828286][T15040] hsr_slave_0: entered promiscuous mode [ 661.857471][T15040] hsr_slave_1: entered promiscuous mode [ 661.872592][T15040] debugfs: 'hsr0' already exists in 'hsr' [ 661.879447][T15040] Cannot create hsr debugfs directory [ 662.003478][T15124] FAULT_INJECTION: forcing a failure. [ 662.003478][T15124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.062275][T15124] CPU: 1 UID: 0 PID: 15124 Comm: syz.2.2874 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.062306][T15124] Tainted: [L]=SOFTLOCKUP [ 662.062313][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 662.062325][T15124] Call Trace: [ 662.062333][T15124] [ 662.062341][T15124] dump_stack_lvl+0xe8/0x150 [ 662.062373][T15124] should_fail_ex+0x412/0x560 [ 662.062405][T15124] _copy_to_user+0x31/0xb0 [ 662.062426][T15124] simple_read_from_buffer+0xe1/0x170 [ 662.062456][T15124] proc_fail_nth_read+0x1bb/0x230 [ 662.062484][T15124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 662.062509][T15124] ? rw_verify_area+0x2a6/0x4d0 [ 662.062527][T15124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 662.062554][T15124] vfs_read+0x20c/0xa70 [ 662.062572][T15124] ? fdget_pos+0x246/0x320 [ 662.062600][T15124] ? __pfx___mutex_lock+0x10/0x10 [ 662.062622][T15124] ? __pfx_vfs_read+0x10/0x10 [ 662.062641][T15124] ? __fget_files+0x2a/0x420 [ 662.062672][T15124] ? __fget_files+0x3a0/0x420 [ 662.062697][T15124] ? __fget_files+0x2a/0x420 [ 662.062732][T15124] ksys_read+0x150/0x270 [ 662.062754][T15124] ? __pfx_ksys_read+0x10/0x10 [ 662.062785][T15124] do_syscall_64+0x14d/0xf80 [ 662.062806][T15124] ? trace_irq_disable+0x3b/0x150 [ 662.062833][T15124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.062851][T15124] ? clear_bhb_loop+0x40/0x90 [ 662.062874][T15124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.062892][T15124] RIP: 0033:0x7f695c95cfce [ 662.062909][T15124] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 662.062925][T15124] RSP: 002b:00007f695d867fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 662.062946][T15124] RAX: ffffffffffffffda RBX: 00007f695d8686c0 RCX: 00007f695c95cfce [ 662.062960][T15124] RDX: 000000000000000f RSI: 00007f695d8680a0 RDI: 0000000000000006 [ 662.062972][T15124] RBP: 00007f695d868090 R08: 0000000000000000 R09: 0000000000000000 [ 662.062984][T15124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.062995][T15124] R13: 00007f695cc16038 R14: 00007f695cc15fa0 R15: 00007f695cd3fa48 [ 662.063024][T15124] [ 662.378736][T13499] Bluetooth: hci5: command tx timeout [ 662.403827][T15120] fuse: Unknown parameter 'ÿ' [ 662.458186][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 662.458204][ T29] audit: type=1326 audit(1774149378.308:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15119 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 662.490452][ T29] audit: type=1326 audit(1774149378.348:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15119 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 662.549075][ T29] audit: type=1326 audit(1774149378.408:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15119 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 662.600479][ T29] audit: type=1326 audit(1774149378.408:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15119 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 662.709791][ T29] audit: type=1326 audit(1774149378.408:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15119 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 662.782791][ T29] audit: type=1326 audit(1774149378.408:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15119 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 662.840061][T15137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.859407][T15137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.885732][ T29] audit: type=1326 audit(1774149378.408:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15119 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 662.913507][ T29] audit: type=1326 audit(1774149378.408:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15119 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 662.988282][ T29] audit: type=1326 audit(1774149378.428:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15119 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 663.014413][ T29] audit: type=1326 audit(1774149378.428:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15119 comm="syz.4.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ecb9c799 code=0x7ffc0000 [ 663.047929][T15142] FAULT_INJECTION: forcing a failure. [ 663.047929][T15142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.074677][ T5880] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 663.078399][T15142] CPU: 0 UID: 0 PID: 15142 Comm: syz.5.2879 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.078428][T15142] Tainted: [L]=SOFTLOCKUP [ 663.078435][T15142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 663.078446][T15142] Call Trace: [ 663.078454][T15142] [ 663.078462][T15142] dump_stack_lvl+0xe8/0x150 [ 663.078494][T15142] should_fail_ex+0x412/0x560 [ 663.078524][T15142] _copy_from_iter+0x1d3/0x1670 [ 663.078555][T15142] ? rcu_is_watching+0x15/0xb0 [ 663.078585][T15142] ? __pfx__copy_from_iter+0x10/0x10 [ 663.078619][T15142] ? netlink_sendmsg+0x650/0xb40 [ 663.078646][T15142] ? skb_put+0x11b/0x210 [ 663.078672][T15142] netlink_sendmsg+0x6c0/0xb40 [ 663.078707][T15142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.078737][T15142] ? aa_sock_msg_perm+0xf1/0x1b0 [ 663.078766][T15142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.078789][T15142] ____sys_sendmsg+0x972/0x9f0 [ 663.078818][T15142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.078846][T15142] ? import_iovec+0x73/0xa0 [ 663.078868][T15142] ___sys_sendmsg+0x2a5/0x360 [ 663.078894][T15142] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.078944][T15142] ? __fget_files+0x2a/0x420 [ 663.078969][T15142] ? __fget_files+0x3a0/0x420 [ 663.079011][T15142] __x64_sys_sendmsg+0x1bd/0x2a0 [ 663.079035][T15142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.079065][T15142] ? __pfx_ksys_write+0x10/0x10 [ 663.079095][T15142] do_syscall_64+0x14d/0xf80 [ 663.079116][T15142] ? trace_irq_disable+0x3b/0x150 [ 663.079141][T15142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.079160][T15142] ? clear_bhb_loop+0x40/0x90 [ 663.079183][T15142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.079202][T15142] RIP: 0033:0x7f4c3519c799 [ 663.079219][T15142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.079235][T15142] RSP: 002b:00007f4c3600c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.079255][T15142] RAX: ffffffffffffffda RBX: 00007f4c35415fa0 RCX: 00007f4c3519c799 [ 663.079269][T15142] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 663.079282][T15142] RBP: 00007f4c3600c090 R08: 0000000000000000 R09: 0000000000000000 [ 663.079294][T15142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.079305][T15142] R13: 00007f4c35416038 R14: 00007f4c35415fa0 R15: 00007f4c3553fa48 [ 663.079332][T15142] [ 663.385486][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'. [ 663.512941][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 663.550692][ T5880] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 663.568732][ T5880] usb 3-1: config 0 has no interface number 0 [ 663.597680][ T5880] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 663.622605][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.663312][ T5880] usb 3-1: Product: syz [ 663.677717][ T5880] usb 3-1: Manufacturer: syz [ 663.686597][ T5880] usb 3-1: SerialNumber: syz [ 663.707309][ T5880] usb 3-1: config 0 descriptor?? [ 663.716855][ T5880] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 663.880950][ T5914] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 664.042551][ T5914] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 664.043768][ T5880] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 664.052428][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.075651][ T5914] usb 6-1: Product: syz [ 664.114428][ T5880] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 664.116650][ T5914] usb 6-1: Manufacturer: syz [ 664.158571][ T5914] usb 6-1: SerialNumber: syz [ 664.179863][T15040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 664.187637][ T5914] usb 6-1: config 0 descriptor?? [ 664.207153][T15040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 664.224518][ T5914] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 664.232275][T15137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.251357][T15137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.264617][T15040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 664.313332][T15040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 664.458906][T13499] Bluetooth: hci5: command tx timeout [ 664.487520][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 664.493064][T10916] usb 3-1: USB disconnect, device number 83 [ 664.536167][T10916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 664.575992][T10916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 664.621704][T10916] quatech2 3-1:0.51: device disconnected [ 665.026163][T15189] fuse: Unknown parameter 'ÿ' [ 666.369008][ T5914] gspca_stk1135: reg_w 0x200 err -110 [ 666.375800][ T5914] gspca_stk1135: serial bus timeout: status=0x00 [ 666.383124][ T5914] gspca_stk1135: Sensor write failed [ 666.388548][ T5914] gspca_stk1135: serial bus timeout: status=0x00 [ 666.395930][ T5914] gspca_stk1135: Sensor write failed [ 666.402973][ T5914] gspca_stk1135: serial bus timeout: status=0x00 [ 666.409638][ T5914] gspca_stk1135: Sensor read failed [ 666.414945][ T5914] gspca_stk1135: serial bus timeout: status=0x00 [ 666.421393][ T5914] gspca_stk1135: Sensor read failed [ 666.426680][ T5914] gspca_stk1135: Detected sensor type unknown (0x0) [ 666.433368][ T5914] gspca_stk1135: serial bus timeout: status=0x00 [ 666.440152][ T5914] gspca_stk1135: Sensor read failed [ 666.445421][ T5914] gspca_stk1135: serial bus timeout: status=0x00 [ 666.452535][ T5914] gspca_stk1135: Sensor read failed [ 666.457770][ T5914] gspca_stk1135: serial bus timeout: status=0x00 [ 666.464416][ T5914] gspca_stk1135: Sensor write failed [ 666.469876][ T5914] gspca_stk1135: serial bus timeout: status=0x00 [ 666.476295][ T5914] gspca_stk1135: Sensor write failed [ 666.481870][ T5914] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 666.915077][T15232] netlink: 'syz.4.2890': attribute type 4 has an invalid length. [ 666.984532][ T5880] usb 6-1: USB disconnect, device number 27 [ 667.267230][T13585] hsr_slave_0: left promiscuous mode [ 667.325674][T13585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.369067][T13585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.377999][T13585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.385718][T13585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.450397][T13585] veth1_vlan: left allmulticast mode [ 667.458436][T13585] veth1_macvtap: left promiscuous mode [ 667.470305][T13585] veth0_macvtap: left promiscuous mode [ 667.478145][T13585] veth1_vlan: left promiscuous mode [ 667.506504][T13585] veth0_vlan: left promiscuous mode [ 667.572846][T15239] netlink: 'syz.2.2891': attribute type 4 has an invalid length. [ 667.757705][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 667.757722][ T29] audit: type=1326 audit(1774149383.608:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.5.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 667.808301][T15243] kAFS: unable to lookup cell '' [ 667.855312][ T29] audit: type=1326 audit(1774149383.638:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.5.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 667.939494][ T29] audit: type=1326 audit(1774149383.638:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.5.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 668.114612][ T29] audit: type=1326 audit(1774149383.638:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.5.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 668.185965][ T29] audit: type=1326 audit(1774149383.658:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.5.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 668.228929][T13585] team0 (unregistering): Port device team_slave_1 removed [ 668.266756][T13585] team0 (unregistering): Port device team_slave_0 removed [ 668.276718][ T29] audit: type=1326 audit(1774149383.668:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.5.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 668.318885][ T29] audit: type=1326 audit(1774149383.668:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.5.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 668.367726][ T29] audit: type=1326 audit(1774149383.668:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.5.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 668.441874][ T29] audit: type=1326 audit(1774149383.668:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15240 comm="syz.5.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3519c799 code=0x7ffc0000 [ 668.819689][T15040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.838533][T15040] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.853185][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.860336][T10047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.910257][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.917357][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.050290][T15040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.152916][T15040] veth0_vlan: entered promiscuous mode [ 669.174109][T15040] veth1_vlan: entered promiscuous mode [ 669.262166][T15040] veth0_macvtap: entered promiscuous mode [ 669.283506][T15040] veth1_macvtap: entered promiscuous mode [ 669.331993][T15040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.411881][T15040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.450034][T15261] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2900'. [ 669.461131][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.486086][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.501371][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.541263][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.620735][T15255] fuse: Unknown parameter 'ÿ' [ 669.657023][ T29] audit: type=1326 audit(1774149385.508:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15254 comm="syz.2.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695c99c799 code=0x7ffc0000 [ 669.701841][T10043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.717989][T10043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.755988][T10047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.765569][T10047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.017109][T15282] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2905'. [ 670.415415][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 670.427513][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 670.437542][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 670.447632][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 670.466414][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 670.648158][T15295] trusted_key: encrypted_key: insufficient parameters specified [ 671.328525][T15291] chnl_net:caif_netlink_parms(): no params data found [ 671.471098][T15300] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2911'. [ 671.523801][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 671.593342][T15301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2911'. [ 671.715565][T15291] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.730587][T15291] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.737792][T15291] bridge_slave_0: entered allmulticast mode [ 671.747596][T15291] bridge_slave_0: entered promiscuous mode [ 671.763933][T15291] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.781016][T15291] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.788247][T15291] bridge_slave_1: entered allmulticast mode [ 671.796585][T15291] bridge_slave_1: entered promiscuous mode [ 671.869036][ T5880] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 671.873158][T15317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2917'. [ 671.894100][T15291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.907186][T15291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.046648][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 672.064709][ T5880] usb 3-1: not running at top speed; connect to a high speed hub [ 672.089815][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.106215][ T5880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.122716][ T5880] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 672.131846][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.140277][ T5880] usb 3-1: Product: syz [ 672.144444][ T5880] usb 3-1: Manufacturer: syz [ 672.149115][ T5880] usb 3-1: SerialNumber: syz [ 672.178761][ T5914] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 672.309468][ T137] bond0 (unregistering): Released all slaves [ 672.332817][T15291] team0: Port device team_slave_0 added [ 672.338948][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 672.342258][T15291] team0: Port device team_slave_1 added [ 672.361830][T15319] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2918'. [ 672.379016][ T5914] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 672.379326][ T5880] usb 3-1: 0:1 : does not exist [ 672.387383][ T5914] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 672.387407][ T5914] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 672.387426][ T5914] usb 6-1: config 1 has no interface number 0 [ 672.387469][ T5914] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 672.393503][ T5880] usb 3-1: BAAD GENERIC IO: no channels? [ 672.418300][ T5914] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 672.460087][ T5914] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 672.469938][T15291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.469955][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.469979][T15291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.471705][T15291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.480887][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.514481][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.576132][T13499] Bluetooth: hci0: command tx timeout [ 672.588541][ T5914] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 672.601106][T15291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.613991][ T5880] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 672.654250][ T5880] usb 3-1: USB disconnect, device number 84 [ 672.677856][ T137] tipc: Left network mode [ 672.685553][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.775053][ T5914] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 672.808402][T15291] hsr_slave_0: entered promiscuous mode [ 672.834887][T15291] hsr_slave_1: entered promiscuous mode [ 672.841858][T15291] debugfs: 'hsr0' already exists in 'hsr' [ 672.847616][T15291] Cannot create hsr debugfs directory [ 673.438959][ T5880] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 673.469761][ T5914] usb 6-1: USB disconnect, device number 28 [ 673.486592][ T5914] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 673.600015][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 673.615516][ T5880] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.665101][ T5880] usb 3-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40 [ 673.689136][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.710727][ T5880] usb 3-1: Product: syz [ 673.714937][ T5880] usb 3-1: Manufacturer: syz [ 673.749439][ T5880] usb 3-1: SerialNumber: syz [ 673.867017][T15291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 673.916681][T15291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 673.934520][T15291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 673.948616][T15291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 674.018766][ T137] hsr_slave_0: left promiscuous mode [ 779.288721][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 779.295710][ C1] rcu: 0-...!: (1 GPs behind) idle=d904/1/0x4000000000000000 softirq=98309/98316 fqs=4 [ 779.306402][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15362/1:b..l [ 779.314399][ C1] rcu: (detected by 1, t=10502 jiffies, g=92541, q=746 ncpus=2) [ 779.322122][ C1] Sending NMI from CPU 1 to CPUs 0: [ 779.322156][ C0] NMI backtrace for cpu 0 [ 779.322175][ C0] CPU: 0 UID: 0 PID: 15335 Comm: syz.2.2921 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.322204][ C0] Tainted: [L]=SOFTLOCKUP [ 779.322211][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.322222][ C0] RIP: 0010:_find_first_zero_bit+0x12/0xb0 [ 779.322253][ C0] Code: ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 85 f6 74 46 <48> 89 f3 49 89 fe 49 bc 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 [ 779.322267][ C0] RSP: 0018:ffffc90003ab7c18 EFLAGS: 00000002 [ 779.322282][ C0] RAX: 0000000000000000 RBX: ffff888030d70b90 RCX: 0000000080000001 [ 779.322294][ C0] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: ffff888030d70b90 [ 779.322306][ C0] RBP: 0000000080000000 R08: 1ffff110061ae021 R09: 0000000000000000 [ 779.322317][ C0] R10: ffff888030d70254 R11: fffff52000756f78 R12: 1ffffffff1c361d3 [ 779.322330][ C0] R13: 0000000080000000 R14: 0000000000000002 R15: ffff888030d70000 [ 779.322342][ C0] FS: 00007f695d8686c0(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 779.322361][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 779.322373][ C0] CR2: 00007f98c2683d58 CR3: 0000000048bf2000 CR4: 00000000003526f0 [ 779.322388][ C0] Call Trace: [ 779.322397][ C0] [ 779.322408][ C0] sched_mm_cid_fork+0x5d5/0x1120 [ 779.322436][ C0] bprm_execve+0xda1/0x1460 [ 779.322463][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 779.322482][ C0] ? alloc_bprm+0x508/0x5c0 [ 779.322499][ C0] ? count+0x1cb/0x230 [ 779.322516][ C0] do_execveat_common+0x50d/0x690 [ 779.322540][ C0] __x64_sys_execveat+0xc7/0xf0 [ 779.322559][ C0] do_syscall_64+0x14d/0xf80 [ 779.322578][ C0] ? trace_irq_disable+0x3b/0x150 [ 779.322604][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.322622][ C0] ? clear_bhb_loop+0x40/0x90 [ 779.322641][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.322658][ C0] RIP: 0033:0x7f695c99c799 [ 779.322674][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.322687][ C0] RSP: 002b:00007f695d868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 779.322704][ C0] RAX: ffffffffffffffda RBX: 00007f695cc15fa0 RCX: 00007f695c99c799 [ 779.322717][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 779.322728][ C0] RBP: 00007f695ca32c99 R08: 0000000000001000 R09: 0000000000000000 [ 779.322738][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.322748][ C0] R13: 00007f695cc16038 R14: 00007f695cc15fa0 R15: 00007f695cd3fa48 [ 779.322769][ C0] [ 779.323146][ C1] task:syz-executor state:R running task stack:28128 pid:15362 tgid:15362 ppid:12601 task_flags:0x400040 flags:0x00080000 [ 779.606021][ C1] Call Trace: [ 779.609296][ C1] [ 779.612220][ C1] __schedule+0x15dd/0x52d0 [ 779.616741][ C1] ? __pfx___schedule+0x10/0x10 [ 779.621581][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 779.626521][ C1] preempt_schedule_irq+0x4d/0xa0 [ 779.631536][ C1] irqentry_exit+0x599/0x620 [ 779.636117][ C1] ? trace_irq_disable+0x3b/0x150 [ 779.641151][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 779.647122][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 779.653977][ C1] Code: b8 8a 56 11 65 8b 0d d9 8a 56 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba a4 16 00 00 00 74 52 8b 8a 80 16 00 00 <83> f9 03 75 47 48 8b 8a 88 16 00 00 44 8b 8a 84 16 00 00 49 c1 e1 [ 779.673571][ C1] RSP: 0018:ffffc90003a97868 EFLAGS: 00000246 [ 779.679630][ C1] RAX: ffffffff826b9c66 RBX: ffff88802e869800 RCX: 0000000000000000 [ 779.687591][ C1] RDX: ffff88803275bd00 RSI: 0000000000000001 RDI: 0000000000000000 [ 779.695550][ C1] RBP: 00000000000081a4 R08: ffffffff826b9b96 R09: ffffffff8e75e520 [ 779.703511][ C1] R10: dffffc0000000000 R11: ffffed10064eb8e8 R12: ffff888057e40ae4 [ 779.711558][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff88803275bd00 [ 779.719528][ C1] ? task_dump_owner+0x76/0x4c0 [ 779.724374][ C1] ? task_dump_owner+0x146/0x4c0 [ 779.729311][ C1] task_dump_owner+0x146/0x4c0 [ 779.734067][ C1] ? task_dump_owner+0x76/0x4c0 [ 779.738907][ C1] proc_pident_instantiate+0x1e6/0x2b0 [ 779.744372][ C1] proc_pident_lookup+0x1b7/0x270 [ 779.749393][ C1] path_openat+0x11ac/0x3860 [ 779.753987][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 779.759359][ C1] ? __pfx_path_openat+0x10/0x10 [ 779.764282][ C1] ? __x64_sys_openat+0x138/0x170 [ 779.769319][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 779.774255][ C1] do_file_open+0x23e/0x4a0 [ 779.778754][ C1] ? __pfx_do_file_open+0x10/0x10 [ 779.783780][ C1] ? __pfx_kfree_link+0x10/0x10 [ 779.788635][ C1] ? _raw_spin_unlock+0x28/0x50 [ 779.793487][ C1] ? alloc_fd+0x64b/0x6c0 [ 779.797823][ C1] do_sys_openat2+0x113/0x200 [ 779.802503][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 779.807701][ C1] ? kmem_cache_free+0x187/0x630 [ 779.812628][ C1] ? __se_sys_symlinkat+0x17e/0x2b0 [ 779.817824][ C1] __x64_sys_openat+0x138/0x170 [ 779.822676][ C1] do_syscall_64+0x14d/0xf80 [ 779.827258][ C1] ? trace_irq_disable+0x3b/0x150 [ 779.832275][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.838331][ C1] ? clear_bhb_loop+0x40/0x90 [ 779.843009][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.848891][ C1] RIP: 0033:0x7f4c3515cfce [ 779.853295][ C1] RSP: 002b:00007f4c3553f7f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 779.861695][ C1] RAX: ffffffffffffffda RBX: 000055555ffd0500 RCX: 00007f4c3515cfce [ 779.869653][ C1] RDX: 0000000000080001 RSI: 00007f4c35233c2e RDI: ffffffffffffff9c [ 779.877612][ C1] RBP: 00007f4c35233c2e R08: 0000000000000000 R09: 0000000000000000 [ 779.885575][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 779.893532][ C1] R13: 00007f4c3553f8d0 R14: 00000000000a47d4 R15: 00007f4c3553fe40 [ 779.901520][ C1] [ 779.904538][ C1] rcu: rcu_preempt kthread starved for 10494 jiffies! g92541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 779.915728][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 779.925722][ C1] rcu: RCU grace-period kthread stack dump: [ 779.931596][ C1] task:rcu_preempt state:R running task stack:27656 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 779.945072][ C1] Call Trace: [ 779.948344][ C1] [ 779.951266][ C1] __schedule+0x15dd/0x52d0 [ 779.955769][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 779.960731][ C1] ? __pfx___schedule+0x10/0x10 [ 779.965576][ C1] ? schedule+0x90/0x360 [ 779.969820][ C1] schedule+0x164/0x360 [ 779.973967][ C1] schedule_timeout+0x158/0x2c0 [ 779.978823][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 779.984198][ C1] ? __pfx_process_timeout+0x10/0x10 [ 779.989481][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 779.995277][ C1] ? prepare_to_swait_event+0x340/0x370 [ 780.000830][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 780.005689][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 780.011837][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 780.017111][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 780.022301][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 780.028097][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 780.032686][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 780.037875][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 780.043669][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 780.048605][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 780.053629][ C1] kthread+0x388/0x470 [ 780.057692][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 780.062878][ C1] ? __pfx_kthread+0x10/0x10 [ 780.067464][ C1] ret_from_fork+0x51e/0xb90 [ 780.072049][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 780.077149][ C1] ? __switch_to+0xc7d/0x1450 [ 780.081858][ C1] ? __pfx_kthread+0x10/0x10 [ 780.086438][ C1] ret_from_fork_asm+0x1a/0x30 [ 780.091211][ C1] [ 780.094216][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 780.100613][ C1] CPU: 1 UID: 0 PID: 10045 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.111709][ C1] Tainted: [L]=SOFTLOCKUP [ 780.116016][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 780.126143][ C1] Workqueue: events_unbound toggle_allocation_gate [ 780.132644][ C1] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0 [ 780.139336][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b4 e6 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5f e2 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 43 e2 [ 780.158929][ C1] RSP: 0018:ffffc900043af700 EFLAGS: 00000293 [ 780.164987][ C1] RAX: ffffffff81b9bebd RBX: 1ffff110170c8515 RCX: ffff8880307e9e80 [ 780.172946][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 780.180900][ C1] RBP: ffffc900043af840 R08: ffffffff9011a7b7 R09: 1ffffffff20234f6 [ 780.188861][ C1] R10: dffffc0000000000 R11: fffffbfff20234f7 R12: ffff8880b86428a8 [ 780.196819][ C1] R13: dffffc0000000000 R14: ffff8880b873bf80 R15: 0000000000000000 [ 780.204801][ C1] FS: 0000000000000000(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 780.213718][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 780.220291][ C1] CR2: 00007f98c1785900 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 780.228252][ C1] Call Trace: [ 780.231523][ C1] [ 780.234459][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 780.239504][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 780.245845][ C1] ? kmem_cache_alloc_bulk_noprof+0xae/0x7e0 [ 780.251837][ C1] ? __pfx___text_poke+0x10/0x10 [ 780.256784][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 780.261809][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 780.266931][ C1] smp_text_poke_batch_finish+0x5f5/0x1160 [ 780.272742][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 780.277761][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 780.283998][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 780.290240][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 780.296215][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 780.302111][ C1] static_key_enable+0x1a/0x20 [ 780.306871][ C1] toggle_allocation_gate+0xab/0x290 [ 780.312158][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 780.318051][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 780.323770][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 780.329479][ C1] process_scheduled_works+0xb6e/0x18c0 [ 780.335047][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 780.341028][ C1] ? assign_work+0x3d5/0x5e0 [ 780.345617][ C1] worker_thread+0xa53/0xfc0 [ 780.350221][ C1] kthread+0x388/0x470 [ 780.354278][ C1] ? __pfx_worker_thread+0x10/0x10 [ 780.359387][ C1] ? __pfx_kthread+0x10/0x10 [ 780.363965][ C1] ret_from_fork+0x51e/0xb90 [ 780.368548][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 780.373655][ C1] ? __switch_to+0xc7d/0x1450 [ 780.378326][ C1] ? __pfx_kthread+0x10/0x10 [ 780.382905][ C1] ret_from_fork_asm+0x1a/0x30 [ 780.387679][ C1]