last executing test programs: 2m50.282801254s ago: executing program 0 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {0x0}, {0x0}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000140)="6641ec11b58d", 0x6}, {0x0}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ce", 0x8b}], 0x7) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000007c00)=@newchain={0x43e8, 0x64, 0xd00, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0x12, 0xb}, {0x0, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4338, 0x2, [@TCA_CGROUP_ACT={0x164c, 0x1, [@m_mpls={0x1068, 0x4, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7fff, 0x6, 0x3, 0x9, 0x2}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x0, 0x10, 0x8000}, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xf4, 0x20, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x400, 0x20000000, 0x1}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x6, 0xff, 0x7}, 0x5}}]}, {0x89, 0x6, "7f6848ea25e6d883f9e5b428ca84c1fa026751f1f2c9ff8dd0f083af3b9d0e99dcc495d3f2d13f5d9f4566f023db181ccd558fb22a270e2a985f553f62334e37d47b34a241ed91c3cfc4a11ed3d8f68356fe6daf55668fdbe4ede7f5ec1a0662b2c1bfec2850c9eb9a5fe94efa72539559ae6930cc4bf28478176d6a65d77fd34096fded14"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x94, 0x1e, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x22dc, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff0a85, 0x6, 0x0, 0x7, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff, 0xe, 0x8, 0x5, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x20fd, 0x3}}]}, {0x1e, 0x6, "9efd0ac6cd018e39ae13adb975e3010b08f868e3d822be34997d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_mirred={0x150, 0x12, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xa183, 0x2, 0x1, 0x7fffffff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x2, 0x7, 0xffffffff}, 0x4}}]}, {0xe4, 0x6, "a0441f478723529528eb5ace06a9948242924fc6f92f8706fa603d3fb9ee590710abd4088b6d21a809e80ca88ce559be3d81fbc1bcf34bb6bce788cd15c68e868136497c1dabf95abec8717511b58d201fee7c8e20ecb454a55df2542985c87c786bf51d051b295f5c2b4663fe7a8b25c04f1a70afcbdc7aac0aadd186e02b0176514a99418768c89ddaf8c98ae483bf2cb3ff56b00e734cdd94303e28636b9a2a32a13f7cf3c5638b1044b6df915820588dd710f9225609b7b69ced800abadd2873a81a7bf9d63257c67b64264f1959ef45c40584da17506aafaac23975bdfd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x8c, 0x12, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x7, 0x4, 0x3}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x2f, 0x6, "6eb3c8f2c56d8127fa07e7b58de8ac2542cb6247db0790fecd3b4e000051c649b0d9158bca6520cf7fec27"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x180, 0x12, 0x0, 0x0, {{0x7}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0xa4, 0x6, {0x0, 'raw\x00', 0x4, 0x4, "a8eb0c7d6fc4be3def4891fd5bec24a596a67f01dd384f120347a014dd356addb6ac7c28f95682c9e3957449af3c72e1b5deea969d3bcce0ba49ae2da093073d15211ce24c862e0218b3b6f407e257b9b93654da9e3d7ee9f2ea7a2f787137a8f77609efcc26e9c1e212d950b30064c585aa98b771e83ad7ea9e"}}]}, {0xac, 0x6, "c5679d4653cec0fd0a4d40ca85eeb22e1a0b3fbf175a95b6c26e89f0448a53859970307c599b41f7948294589976d34412d060810dbfa6152290f1957d2fa105d9026b578ff2738fd072b7037e301935d150a162ff85e641619c9b115da1286b769d5139317bcf867969380ab9cf10e7a8cdb840603b453aaf8437867d184d5314d26432cb6b34b6d3445dcf8cb42a74c7862a797290c4d0749273ad37bee71d0f479fb831189ce8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xfc, 0x5, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}]}, {0xb0, 0x6, "fb57cfd7b666fa52c8c4d9d1bb03d5fa2860d0eea34a7ad5c914ed040eae313094748631a585ec97d3f6f20476cc4e82dbbf37691200a2fcf242d3e1e3aa6e288e996100d1d573546c851222388e79e3ec7ddca37c04d59720a42b06a059b54d83855f839d26b74722dfa352779c6ae73a742a0dc1dedcc0e80372079b1e74807bcfd73fb2e9e4cf5bda4cc99d382c8804ce1b992d5d9d15d1a7b48255ae1976e3e83055c7cc2dce3ac45942"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8}]}, @TCA_CGROUP_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x7, 0x13ad, 0xb9f, 0x5, 0xfe00, 0x5, 0x7, 0xdf, 0x2, 0x4, 0xfb, 0xf, 0x200, 0x9, 0x3ff, 0x3, 0x0, 0x7, 0x49f, 0x0, 0x40, 0x7, 0x3, 0xe8c1, 0x3, 0x1, 0x5, 0xfffff0e4, 0x1, 0xc, 0x3, 0x0, 0x8, 0x5, 0x400, 0x4, 0xffffffff, 0x7, 0x0, 0x2, 0x4, 0x5, 0x4, 0x9, 0x4, 0x800, 0xffff2e57, 0x5, 0x60, 0x8d, 0x4, 0x7, 0x5, 0x8, 0xc6, 0x0, 0x63c, 0x5, 0x401, 0x7f, 0xfffffffe, 0x4, 0x14, 0x7, 0x5efa, 0x3, 0x1, 0xfe, 0xad59, 0xca, 0xa, 0x8, 0x3, 0xf2, 0x2, 0x3, 0xa, 0x8, 0x4, 0x10001, 0x4, 0x9, 0xfff, 0x4, 0x6, 0x1, 0x1, 0xc5, 0x5, 0x6, 0x2, 0x8001, 0x2, 0x1, 0x69, 0x3, 0xffffff01, 0x5, 0x7, 0x80000001, 0x7, 0x5, 0xc, 0xfffffffc, 0x4, 0x3, 0xfffffe2e, 0x0, 0x5, 0xd, 0x0, 0xc7, 0x6, 0x8, 0x8, 0x9, 0x40, 0x47, 0x4c02, 0x4, 0x81, 0x1, 0x8, 0xd719, 0x303, 0x4, 0x3619, 0x7f, 0xbfb7, 0x8, 0xffffffff, 0xbe9, 0x8, 0x200, 0x0, 0x7, 0x80000000, 0x25a, 0x3, 0x8, 0x1e, 0x5, 0x4, 0x2, 0xf, 0x4, 0x1ff, 0x181, 0x88e6, 0x0, 0xffff, 0x6, 0x9, 0xffffffff, 0x80, 0x6, 0xa10, 0x4, 0x7, 0x10, 0x8001, 0x7, 0x5, 0x243a77a1, 0xfffff801, 0x9, 0x1, 0x2, 0x6, 0x2108000, 0x1, 0x7fffffff, 0x8, 0x3, 0x80000001, 0x1, 0x91, 0x0, 0xec4, 0x4, 0x2, 0x2, 0x0, 0x4, 0x0, 0x6e5, 0x7fffffff, 0x81, 0x4, 0x0, 0x80, 0x1, 0x80000000, 0x38cb, 0x8, 0xfffffffa, 0x0, 0x6, 0x0, 0x1, 0x7f, 0x3, 0x10, 0x0, 0x400, 0x3, 0x8, 0x5, 0x3, 0x2, 0x5, 0xfffffffe, 0x3, 0x7, 0x2, 0x1, 0xfffffffe, 0x5c6, 0x8, 0x0, 0x4, 0x6, 0x2, 0x5, 0x80, 0x3, 0x7, 0x0, 0x3, 0x10001, 0x80000001, 0xe81, 0x7fffffff, 0xd63, 0x7, 0x8, 0x8, 0x2, 0x1d, 0xc8, 0x9, 0x526, 0x6, 0x9, 0x1, 0x5, 0x80000001, 0xfff, 0x7, 0x3ff, 0x0, 0x0, 0xe5, 0xa, 0x80000001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_CGROUP_POLICE={0x85c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x6, 0xffffffff, 0x4, 0x0, {0x3, 0x1, 0x7, 0x4df, 0x5, 0x8}, {0x1, 0x0, 0x191, 0x80, 0x4, 0x6}, 0x8, 0x3, 0x1fffe}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0xffffff18, 0x6, 0x9, 0x8521, 0x31, 0x5, 0x6, 0xffffffff, 0x400, 0xcb4, 0xb, 0x7, 0x6, 0x3, 0x81, 0x7ff, 0xca, 0x5, 0x6, 0x2, 0x2, 0x7, 0x9, 0x400, 0x10, 0x6a1c, 0x7, 0x5, 0x0, 0x401, 0x9, 0x9, 0x8, 0xffff7fff, 0x1, 0x5f70, 0x5, 0x3, 0x7, 0xfffff970, 0x8, 0x2, 0x3, 0x0, 0xff, 0x6, 0x7dae, 0x1, 0x5, 0xa, 0x1, 0x10001, 0x2, 0x6, 0x7ff, 0x1, 0x8001, 0x63e9, 0xff, 0x1000, 0xfffffffd, 0xd7f, 0x0, 0x0, 0x5, 0x2, 0x400, 0x2, 0xfffffffd, 0x276e, 0x5, 0x8, 0x6, 0x6, 0x761, 0x7, 0xad98, 0xffff, 0x10, 0x4, 0x80000001, 0x10001, 0x5, 0xffffffff, 0x1, 0x9, 0x7fff, 0x10f6440b, 0x8, 0x8, 0x0, 0xff, 0xe7b, 0x5dc8, 0x1, 0x0, 0x8, 0x9, 0x4, 0x4, 0x6, 0x1ff, 0x8, 0x1, 0x1, 0x100, 0x9, 0x81, 0x6, 0x6, 0x8, 0x0, 0x4, 0xc, 0x2, 0x6, 0x1a, 0xb, 0xe43, 0x9, 0x8001, 0x3, 0x6, 0x9, 0x9, 0x7, 0x200, 0xb9, 0x9, 0xf35, 0x3, 0x0, 0x6, 0xb, 0x4, 0x4315, 0x8, 0x40, 0x1, 0x5, 0x9ed4, 0x1, 0x7f, 0x7089, 0x5, 0x9, 0x3, 0xfffffffc, 0xcb0d9b02, 0x5, 0x6e83, 0x7, 0x145, 0x7, 0xcc98, 0x428, 0x8, 0x8, 0x8, 0xfa, 0x8, 0x1, 0x1, 0x2, 0x1000, 0x9, 0x4c917dd5, 0x20000000, 0x3, 0x9, 0x1, 0x100, 0xfffffffb, 0x6, 0x60000, 0x6, 0x7, 0xaa8e, 0x3, 0x6, 0x4, 0x6, 0x7, 0x2, 0x10, 0x4930df19, 0xfffffff9, 0x400, 0x6, 0x2, 0x2, 0x80000000, 0x5, 0x2, 0x80, 0x80000000, 0x9, 0x3, 0x1, 0xac70, 0x2, 0x3, 0x2, 0x80000000, 0x80000, 0xffff, 0x6, 0x4, 0xa, 0x9, 0x8, 0x3, 0x7, 0x44, 0x4f, 0x69e8, 0x7, 0x2, 0x6, 0x8, 0xdc, 0x3, 0x5, 0x2, 0x8, 0x401, 0xfffffffd, 0x10, 0x6, 0x4c, 0x400, 0x9, 0x3, 0xffffffff, 0xf, 0x7, 0x0, 0xbb2, 0x7fffffff, 0x5, 0x4, 0x6, 0x0, 0x26164466, 0x5, 0x5, 0x11f8, 0x1, 0x8, 0xfffffff9, 0x8, 0xc6a7, 0x9a8, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0xfffff800, 0xc0000000, 0x100, 0x29e1, 0x4, 0x8, 0x8, 0x7, 0x90a0, 0x80000001, 0x9, 0x4, 0xfffffff4, 0x2, 0x5, 0xc, 0x3, 0x8, 0x80, 0x3, 0x10, 0xa3c1, 0x5, 0x9, 0x2, 0x6, 0x0, 0x1, 0x6, 0x3, 0x6, 0x0, 0x10001, 0x6, 0x5, 0x8, 0x1, 0x3, 0x9, 0x6, 0x3cb, 0xc325, 0x7fffffff, 0x1, 0x5, 0x7, 0x86, 0x7f, 0x1, 0x3, 0x100, 0xfffffffd, 0x9, 0x6, 0xa0f, 0x3, 0x7, 0x2, 0x3ff, 0x3ff, 0x100, 0xffffffff, 0x380, 0x8, 0x6, 0x7fffffff, 0x3, 0x1000000, 0x6, 0x7, 0x5, 0x1, 0x1, 0x6, 0x8, 0x3, 0x8, 0x8, 0x3, 0x4, 0x6, 0x1, 0x3, 0xcc5, 0x5, 0x1, 0x2, 0x8, 0x8, 0x2, 0xe9e3, 0x8, 0x0, 0x0, 0x4, 0x9, 0x9, 0xd1, 0x5, 0xc5, 0x9, 0x0, 0x7fff, 0x1ff, 0xc, 0x401, 0xfffffffd, 0xd4, 0x3, 0xf, 0x4, 0x1, 0x9c, 0xd9eb, 0x1, 0x3ff, 0x1d4, 0x2, 0x1, 0x55, 0x0, 0x3, 0x6, 0x6, 0xfffffffd, 0x4, 0x8, 0x31891ec9, 0x32, 0x1000, 0x7fffffff, 0xfffffe00, 0x1, 0x3, 0x81, 0x77f9, 0x5, 0x8584, 0xe, 0x3, 0xb, 0x8, 0x0, 0x6, 0x35800000, 0xd2, 0xa1b, 0x7f, 0x10000, 0x9, 0x7, 0x0, 0x7bfa, 0xfc, 0x6, 0x99, 0x9fa4, 0x5, 0x7, 0x8, 0x7, 0x7fffffff, 0xa, 0x3, 0x0, 0x0, 0x5, 0x80, 0x7, 0x8, 0x8, 0x4, 0x200, 0x5, 0x5, 0xe3b, 0x6, 0x9, 0x8000, 0x7, 0xc, 0x8, 0x3dcf51a6, 0xff, 0x48a, 0x400, 0xa, 0xad, 0x0, 0x40, 0x3, 0xfffffff9, 0x7, 0x6, 0x8001, 0x3000000, 0x9, 0x2, 0x5, 0xffffffff, 0xd, 0x9, 0x9, 0x0, 0x470, 0x4, 0xc7e, 0xd6a5, 0xe6000000, 0x7, 0x0, 0x5, 0x3, 0x6, 0x7fff, 0x0, 0x200, 0x9, 0x4, 0x6, 0x3, 0x40, 0x2, 0x8, 0x5, 0x7, 0x2, 0x9, 0x94, 0x6, 0x7, 0x6, 0x8, 0x9, 0x0, 0x4, 0x8, 0x1, 0x1000, 0x2, 0xc, 0xa, 0x2e5074e9, 0xb421, 0x80000001, 0x0, 0x3, 0x3, 0x6, 0x8, 0x5, 0x8, 0xb, 0xa7, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}]}, @TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x0, 0x2, 0x5}, {0x5, 0x6, 0x2, "de6bade9947c"}}}]}]}, @TCA_CGROUP_EMATCHES={0x12a4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x1288, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100, 0x1, 0x0, 0x0, {{0xd, 0x0, 0xffff}, "3f98cc6b0ef0b2eb684b2d59170a2c2a2f5b3a78bf789a21c16e7523864f7723c28080230df0b8a0c247c0a65c7fa1e077ffd3ff036dd5a1ba3c3ede7ffe843d8cafa64e351f4913bdbcb246797b4f2f99c970932f2271fb32cc6dba619b7d32958a42bbbddee83197bc8085c444766aff6f28e715ab641c944f44b424825678447e9391de29b7c20e41d57fda4c51ae70b91720c992a02191f556fdbeea401b7087759c630020b1bc4e6d5ad3ae072e8e0558d84a2e21f04598a976efe3146847c008e70549a731a3977173b0d35c62c837e80b2c019218fc727f83102972031a947e8dbee682ad0a13a95aebd1697050"}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0xfa61, 0x0, 0x800}, "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"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x745}, {0x1ff, 0x5, 0x2, "948b1a3e16"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x7}}}, @TCF_EM_CANID={0x14, 0xa, 0x0, 0x0, {{0x7, 0x7, 0x1}, {{0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0xff}, {0x273, 0x3ff, 0x9}}}, @TCF_EM_META={0xfc, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x38, 0x3, [@TCF_META_TYPE_VAR="003db8", @TCF_META_TYPE_VAR="8b2fc124f4471794d4aa", @TCF_META_TYPE_VAR="eff97e022b08e001", @TCF_META_TYPE_VAR="2ff9952fd3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="3e4eb3fe6d9204aa7719"]}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="6647859f7d", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b525e7", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="4c3e33ff2ced45", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="d7884a39661c5c5e0b59", @TCF_META_TYPE_VAR="48ea79269c970d28bd", @TCF_META_TYPE_VAR="25886832f75de4"]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="09b212f68dd7", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="ab7d7705b766b1", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="d6c3df29ff648c", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e0a1", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8bf77afa969f", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="c6101ce16807e493"]}]}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0xfcd9, 0x4, 0xc}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x59b7, 0x7, 0x2}, {0x800, 0x6, 0x34eea824ad11637f}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x4, 0x1}, {0x0, 0x0, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_ACT={0x434, 0x1, [@m_vlan={0xb4, 0x1c, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0xffffff01, 0x2, 0x2, 0x5}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xcd, 0x5, 0x8, 0x6, 0x3}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff8, 0x2, 0x10000007, 0x200, 0x9}, 0x1}}]}, {0x34, 0x6, "a1885b16988699713319ba6c2e9c533a133f243cf52378515b57e12dd86c260bdaf7bc020b26ad01fbf336a6b89abb0b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x78, 0x13, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0xdf, 0x2, 0x4, 0x4, 0x7}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x1b, 0x6, "689c3f1be8a296392b52fcc0b8da57c8452cbecd85bc90"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x84, 0xc, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'siw\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'virt_wifi0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x6, 0x93fdbc55c4340132, 0x8, 0x7fffffff}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x20, 0x6, "f120c056e9177b8f340053721731f8161b13b1bbdb8dc175426e29f2"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x148, 0x9, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x347}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x5, 0x1, 0x2, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x82e}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff, 0x1, 0x1, 0x40b, 0x3}, 0x1}}]}, {0xa2, 0x6, "df12fa8b4eab6548e2da59ee522c72e0416c14ac10e917cba1c166c32e653ff2f432a16cae73422f2fe4f808000c9014b62dab48575ef5fa38ef7baa4cfda2793211dbc964333607f46b2cd92b52a7e01ba0f6b264aaacb18dda0a35fc99fd6eb0a61fbfd687c942dd13dc34ccf2c4a5519a6475ed4726c8a94de64c09844b321fddec7ad7996a91f9ce50e9bd5d36d66609a12fd357019cec0fa1baa804"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xac, 0x1c, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x8, 0x4, 0x1000, 0x9}}]}, {0x66, 0x6, "0b09e6d692fc08e48a614ae1bc2694f613d2d4375631b5e605f93246750bf11084105ce88720e46de51148817a17a0dad8a9f2a2fb885dd2621d65eeb5a0234fa217fa16b551512635e6ac13c3625ee89fda20cd2cb3c7494ca72b9eae31db9ac858"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x8c, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x1, 0x9, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x3f, 0x6, "a501486799161fd0a9bcbebfc73b714b4343e6f21fce9dda8f1c344e63079e65c9a597444318bdced92bcf80114fbc660cec228a677ca524c964ed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x474, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8b}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5680}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x78a5, 0x2, 0x800}, {0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xffff, 0x7, 0x2}, {{0x2, 0x0, 0x1, 0x1}, {0x2}}}}]}, @TCA_EMATCH_TREE_LIST={0x2e4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x11c, 0x1, 0x0, 0x0, {{0x1000, 0x9, 0x1}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xe1, 0x5, "2cd3b1f526d67e375ea002b5b438feec1d6505857fe7e7fadead3c50c7210369b737e2035de10338b05d23911f0c54bbace509055c02169760d902efe03402880e5c0762029d286818b010b568588f16b35175f88b38713c1fa6e69fd5d1a6f1fe2e6065992a37a01b510ccaea4f5e7c5311f2692bd8dbdf0fb0e4dd185b36abd36e8a5e95fdf03c2dd5572254971cbd04574362c67855869e88e85898a2f8cef310ebb04779024a25f704e8c822a96f19ba4dbb6d81d94945329fd0ee13640323e052dd4598576ddacc543e9284db637b4544eb9e316c1882b055a68c"}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0xfff8}, {{0x2, 0x1, 0x1}, {0x4}}}}, @TCF_EM_IPT={0x6c, 0x2, 0x0, 0x0, {{0xfff8}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x15, 0x5, "03584e0c58f2fc63b994cd8dd253c2153a"}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe83, 0x3, 0x5}, {0x56, 0xca4, 0xe, 0xbdc}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x9955}, {0x8, 0xf8, 0x5, 0x4, 0xa, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0xd}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0xfffb}, {0x8001, 0x10a3529, 0x0, 0x67a}}}, @TCF_EM_CONTAINER={0xb4, 0x2, 0x0, 0x0, {{0x1471, 0x0, 0x4}, "bff7fd2b9ef549085c195d5d0aff453527ce863e62d56ce238b38f732f8c13734a65f98ca40872f58b627e7d333aeb17e58776cdc00396ab9732ecc477495bf183abc08f1becd20572faf8945d730f6e528ca871192cebc2a75bfe8e192c0c5b3a227da2d3a6d4144a203bd8a4043cda77d17038ab841c4ba11fd6ac673ad18f824572753cb845fd2138ae247a35c7a376037ee029a91e38213677eb9bd178a744267c285a"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x1000}, {0x0, 0x5, 0xc1, 0x2, 0x3, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x81}, {0x3, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x6}, {0x4, 0x9, 0x7ff, 0x4, 0x6, 0x2, 0x2}}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0xd, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="5aa8", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="3ba32a74407bb1c7af", @TCF_META_TYPE_VAR="79bf8715"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xbb, 0x5}, {0xa, 0x1, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x0, 0x2, 0xff36}, {0x1}}}, @TCF_EM_CONTAINER={0xb4, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x7ff}, "4de70788d5834bd7c4e050ce1ff294bf8629d11dd86a1d902b81c59140fca94324241b52aaff8831a9fbec78e65f003eef28c13aefc3ac7947ca8b318bb1d7dfc0020bcb147cc027a9d2d94b4c59374fe5d060181d07462e8df69e59b0a87e7587db1408e835d53f79a38ee2bcc1e49b8098502e3e0aad995b0764f9498ff46ba220a401d416fe6bff388e901f768702afc1df6adce2a597a1b88e6d870c02d1035760b14e"}}, @TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x101}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_CGROUP_EMATCHES={0x4f4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="c907a1f508401d63", @TCF_META_TYPE_VAR="fc38f3b9", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR="f493c50a"]}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x7}, {0xd6b3, 0x3, 0x1, "8b83d0"}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x9}, {0x3, 0x4, 0x2, "686980e0"}}}, @TCF_EM_META={0x3c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0xffff}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR="70666420f94288", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x400}, {0xfff, 0xf, 0x9, 0xc, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x14, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x4}, "c9105a4127333584"}}, @TCF_EM_CONTAINER={0x60, 0x2, 0x0, 0x0, {{0xff72, 0x0, 0x43}, "3e19621112e59bc32b00f4bd9f51dd66ffe642582d2c5a560154dd1121e81114cee543ff94260a0b4513968b0cd7efbbea610a8f0cbf866e1ea4c7066c1f0c232c560ab6d6cf6b489b1fba5c727c7a0e1d32"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xffff, 0x8, 0x5}, {0x0, 0x0, 0x3}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x4}, {0x4, 0x5, 0x2, 0x0, 0x8, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0x1ff}, {0x40, 0xa1, 0x7, 0x0, 0x0, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0xe6}, {0x2, 0x3, 0x1a, 0x4, 0x6, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x79, 0x1, 0x5}, {0xa, 0x9, 0x2, 0x4, 0x8, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x3ff, 0x2, 0x9}, {0xfff, 0x5, 0x0, "9d35804f1c"}}}, @TCF_EM_CONTAINER={0x34, 0x3, 0x0, 0x0, {{0x9}, "8a3b46b725d36b7d3eaa7a0c744c58e1f634c2da66fb036c79e87c2bd1a47367d350479fbb30"}}]}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x8}, {{0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0xc}, {0x4, 0x3}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xe, 0x2, 0x9}, {0x766, 0x9, 0x2, "51528559dec91941c4"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfffa, 0x8, 0x8}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfe2, 0x7, 0x9}, {{0x3, 0x1, 0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_CONTAINER={0x7c, 0x1, 0x0, 0x0, {{0x6, 0x0, 0xf0a8}, "be0e2f455c0411648dea2744191a64ea9eb1c2d4486a1201225f02b92789cfe93a2558e816b5791eba16931fabef9652e7bb704d526eeb06d29560c94b3425a8267f332687f0674135c7e63045fce4ceb40e7bbf24ec3c4b6f7df8ad09f4cb45458291c1527a63eca09f556c2369604f"}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x9, 0x1}, {0x4, 0x8, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8}, {0x7, 0x17, 0x2}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xb, 0x2}, {0x5, 0x1, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7ff}}, @TCA_EMATCH_TREE_LIST={0x1cc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x800, 0x7, 0x6}, {{0x3, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x4}, {0xf, 0x8, 0x1010, 0x2, 0x5, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2}, {0x8, 0x9, 0x9, 0x4, 0x0, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{}, {0xffff, 0x6, 0x2, "228dd15921be"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x5}, {{0x3}, {0x3, 0x1}}}}, @TCF_EM_CONTAINER={0x84, 0x2, 0x0, 0x0, {{0x7fff, 0x0, 0x2e41}, "7fdbae324619a9830fd311abf2795446b781af38fb2399dacea803c6e84f77ee995fac7c2a7ca5c29ff483127a79eb11488f76de4077bab95806a9cbf962e6b7bd8847a3049ffc17e4190224791da047123978998cde22473894043e915ddc643cd4a6bb7bba58c9a548979f2998f5d3019583538189fe"}}, @TCF_EM_META={0xd4, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="e5d5bfe9d230675a30", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="5323c02a2e"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="6c0bb21df22ed2ee241f"]}, @TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_VAR="709d77079c7e428954", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="86c8", @TCF_META_TYPE_VAR='#', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="3fc400", @TCF_META_TYPE_VAR="ef435e30ed1426305e"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x5, 0x1}, {0x3, 0x9, 0x2}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR="770c3cdfced5d8ae3827", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="7422b4086d89"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x71b, 0xf9, 0x1}, {0x4}}}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_VAR="3d87d25fb356c2261e", @TCF_META_TYPE_VAR="bf2164c5a6", @TCF_META_TYPE_VAR="1407925be00e0d9d74", @TCF_META_TYPE_VAR="b52244", @TCF_META_TYPE_INT=0x1]}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x881}, @TCA_RATE={0x6, 0x5, {0x2, 0xc6}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x9}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x47}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @local}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x8}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x22}}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e23}]}}]}, 0x43e8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r7) 2m48.834258529s ago: executing program 0 (id=330): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x1001, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$SG_BLKTRACESTOP(r4, 0x1275, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x3, 0xfffffffffffffffd) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) socket$inet6(0xa, 0x1, 0xffd) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706050008000000000000000100000205000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000700)='source', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x20) 2m45.354297819s ago: executing program 0 (id=335): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0xb3) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xe, 0x0, 0x0, 0x400000]}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000aee000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m42.076286967s ago: executing program 0 (id=340): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x7e, 0x8402) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000180)={0xffffffff, 0x4, "40179b048380a4f63751aa3b28f32e6c3199a4dfb027b8a93126c4af2a8f7cb7", 0xd5b, 0x5, 0x7, 0x7, 0x840}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x910fa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c1}, 0xc8c4) socket$rds(0x15, 0x5, 0x0) r7 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) shmat(r7, &(0x7f0000001000/0x3000)=nil, 0x0) 2m41.123445564s ago: executing program 0 (id=341): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) membarrier(0x2, 0x0) r2 = io_uring_setup(0x2f08, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r1}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) preadv2(r2, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/230, 0xe6}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/44, 0x2c}, {0x0}], 0x6, 0x6b3, 0x5, 0x41a6988b36f563b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000003080)={{r3}, 0x0, 0xa, @unused=[0xfffffffffffffffe, 0x1, 0x5, 0xd], @devid}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000100)={0x5, &(0x7f00000041c0)=[{0x2b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0xfffffff9}, {0x28, '\x00', @data, 0x7ff}, {0x26, '\x00', @st={0x4, [{0x3, @svalue=0x6}, {0x2, @svalue=0x775a}, {0x3, @svalue=0xd2}, {0x1, @uvalue=0xfff}]}, 0x7fe}, {0x1a, '\x00', @buffer={"1f29109593e94c1526b8498db6ffd285e263e707871c662b4b273dced21ffb38", 0x20}}, {0x0, '\x00', @data=0x4, 0x4}]}) ftruncate(0xffffffffffffffff, 0xffffffffffffffff) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) write$UHID_INPUT(r1, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xffffffe3) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x3, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x4}, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r9, &(0x7f0000000180)=0xfe5f, 0x12) 2m37.363363184s ago: executing program 0 (id=345): fanotify_mark(0xffffffffffffffff, 0x209, 0x40000032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r2 = open(0x0, 0x40000, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffc40, 0x2, {0x10, "00000000000000000000000000001010"}}}]}, 0x48}}, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2100) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x28082, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x1c, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x945f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x0, 0x3, 0x7, 0x9, 0x30, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000400)='GPL\x00', 0x400, 0xe9, &(0x7f0000000440)=""/233, 0x41000, 0x0, '\x00', r4, @fallback, r2, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x0, 0x2, 0x5}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f00000005c0)=[r2, r2, r2, r2, r3, r2, r2, r3, r0, r2], 0x0, 0x10, 0x3}, 0x94) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000018c0)={0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0xee00, &(0x7f0000000240)) 2m21.798701445s ago: executing program 32 (id=345): fanotify_mark(0xffffffffffffffff, 0x209, 0x40000032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r2 = open(0x0, 0x40000, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffc40, 0x2, {0x10, "00000000000000000000000000001010"}}}]}, 0x48}}, 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2100) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x28082, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x1c, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x945f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x0, 0x3, 0x7, 0x9, 0x30, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000400)='GPL\x00', 0x400, 0xe9, &(0x7f0000000440)=""/233, 0x41000, 0x0, '\x00', r4, @fallback, r2, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x0, 0x2, 0x5}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f00000005c0)=[r2, r2, r2, r2, r3, r2, r2, r3, r0, r2], 0x0, 0x10, 0x3}, 0x94) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000018c0)={0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0xee00, &(0x7f0000000240)) 16.330676695s ago: executing program 4 (id=750): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04", 0x12) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0}) syz_clone(0xa012c000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4004550d, &(0x7f0000001080)) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x68}}, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0xfffffffe, 0x0, 0x80000000, 0x8, 0xb, 0xa, 0xfc, 0x4000004, 0x8, 0xd, 0x4, 0x3, 0x80, 0xdf9, 0x1a449, 0x5, 0x8, 0x100, 0x2, 0xf27, 0x6, 0xa, 0x0, 0x5, 0x7, 0x4, 0x10000, 0x8]}) 15.215519463s ago: executing program 4 (id=755): mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x1001, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$SG_BLKTRACESTOP(r5, 0x1275, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x3, 0xfffffffffffffffd) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) socket$inet6(0xa, 0x1, 0xffd) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706050008000000000000000100000205000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x20) 14.675231788s ago: executing program 5 (id=760): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$inet(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x330, 0x0, 0x98, 0x0, 0x1a0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) preadv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0xf1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffc0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x4, 0x2, 0x1, "2b601e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x81, 0x4, {0x7, 0x25, 0x1, 0x4, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x8, 0xad, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x12a}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000100)=0x80, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) 8.061850149s ago: executing program 5 (id=770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a00000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8850d85ff978276fcf294", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 8.057292463s ago: executing program 1 (id=771): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x91f5cfc9f121b1d5, 0xeef, 0x7349, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0xf3, {0x9, 0x21, 0x1, 0xc, 0x1, {0x22, 0xffa}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x7, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0xaf}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x7, 0x0, 0x20, 0x8, 0x7}, 0x5b, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f5b00050b10010c110000075cfd08141004045b5516b51434ca5099c6f831fdb8315803100b03100b3110f632e4938f6a531fff4e46eb8752c9c6f4c5d2219964dcbcc2d20005b1785cb67a8a42532c6514f3c6026d1401482f7fe5ecef5d2d4f661924e1c83bea6141bad4217513ef498367a0e5a0a9b0a8403cdfcba3b62b01030363a9c7f3b034672a675e92faeba22a92abec56704336f31e8108fd944892bc285217c89c2da3b546c03a9bbc129d8cd969def3"], 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x5f, &(0x7f00000002c0)=@string={0x5f, 0x3, "385068a6839cf4ec88894ef890bc762dc5fbb087ee2826cfe56bcd6458065bbbcd61b2f003f41a0006dab31359e312077a6c8335ef10c5018a339abd7d66d6663de6fdf7e15f8baa47edf49313ec04e7ed20ec0e9aa45411c3b8c7f3cd"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "418a15fde7d6a40fb61c4d7a14ab8e5544b7fb6d612a909a672582a23b2b4480642777d6d05271ead06cde3ca4e5ff1fdaa5f0cc9b7c281357d44f4a2f2ddf3c5a391206ea628d944c6cbcf92d43dd5011bbd15e5155ec56dcefe0875dbdecd45bc56f3bccfb8c02596fbbbf1f2c34fb7457c16aacc0022bbbb34b5243f79c2cfaa8f070a43c3ae51877d354d14c3dd19f4456c61639d7890902821f0082d2d77d377954e03dba614ab34a83273b126cb3575cd02ec58d40ba9b4f0c290d6254fe8fda639b7880779bbeed3b5d4d5393902540d911bda20fb18b1938906406dce3c118eaabf430d1ea7810e4ebf56d96cfe7"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x9}, 0xfffffffffffffecb) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.919259632s ago: executing program 5 (id=773): syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, &(0x7f0000019380)={0x2, 0xe25, @loopback}, 0x10) getpid() 7.885773726s ago: executing program 3 (id=775): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa", 0xb, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$llc(r4, &(0x7f0000000180)={0x1a, 0x311, 0xf5, 0x28, 0xc, 0x3a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5f9c6344a9b4ea4}}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 7.158541403s ago: executing program 4 (id=776): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 7.009955525s ago: executing program 4 (id=777): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, 0x0) 6.943522715s ago: executing program 3 (id=778): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x15, 0x9, 0x80004, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) setfsuid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3136564e, 0x1, @discrete={0xff, 0x1}}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000140)) fcntl$setflags(r2, 0x2, 0xda1bbcf2caa2938d) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r3, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)="d2", 0x1}], 0x1}}], 0x1, 0x8080) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x462040, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000000ffe, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x1, 0xd, 0x80000002}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fefffffffedbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="ce42a39db8c868eecac5d18db8562eaef83a6cd0d3e7284695063ee335d0dfd3facfac0da95d933a0a723c6f57ac7f05df85fcbd133bd825c59012dbde715232e127d702a162c3880306e75e37294c8e33ec5e12263f3939f4b02d0d01a780b4750a19803358f39c759a08d0786b"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 6.743889792s ago: executing program 4 (id=779): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) r2 = io_uring_setup(0x2f08, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r1}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) preadv2(r2, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/230, 0xe6}, {&(0x7f00000006c0)=""/6, 0x6}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/44, 0x2c}, {0x0}], 0x6, 0x6b3, 0x5, 0x41a6988b36f563b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000003080)={{r3}, 0x0, 0xa, @unused=[0xfffffffffffffffe, 0x1, 0x5, 0xd], @devid=r5}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x5, &(0x7f00000041c0)=[{0x2b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0xfffffff9}, {0x28, '\x00', @data, 0x7ff}, {0x26, '\x00', @st={0x4, [{0x3, @svalue=0x6}, {0x2, @svalue=0x775a}, {0x3, @svalue=0xd2}, {0x1, @uvalue=0xfff}]}, 0x7fe}, {0x1a, '\x00', @buffer={"1f29109593e94c1526b8498db6ffd285e263e707871c662b4b273dced21ffb38", 0x20}}, {0x0, '\x00', @data=0x4, 0x4}]}) ftruncate(0xffffffffffffffff, 0xffffffffffffffff) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) write$UHID_INPUT(r1, &(0x7f0000001c40)={0x8, {"4cc26d78f0b492b0ab79d1a8ffbcc2ea8790938b7c7e7366858ce5a1f010c96049f5c2d67bd01a7fd29a82f9a85aab8dac62aea9faacad00bfcd9eb9210ab033e922e1b1535cd9566e217572f401d3fee7ecb41dbae2e22ed61e7382c31e7c36f3fe27327d3488ddaaefb5ef54e779fd7b8fc259074252a63eca44a07dd8c0abf6b1674d33408bbe0f17710249c5c01bcd05a2d111f5678955d95e97e0aea1b98331d2ea004ca86e925eba8757163217e01e18d8491f823f7b3ad71d36494c71da4640cb598171ec77586e7ca918d63b89f6ac3820264fcd56834ebd936f56c916ed285ed9daf6f7b2f4e8af02e35d56ab005b70d9af48d6c47d405a2b854278a8f16c94f2406a39db188d99fcd13065a3cdc7cc9303fbf96671718841baab055aef985be1921fd7c538f03afe823837a5939db7dacc9b8dcc52350c73ea04f276ec3828e883169a824b6f64f86318137be3b66ad3c79ea8b53c58a0b60d1cd0110240c71d6f4c99e627461082f69848c5e3f85db68507f6e808af116a465b25aa274430cd35d3d678033581da38ef8b9dc7d7e208504dc24e9e65bae79510857a26a61948d7ddab79c0d4ddb01769f7455af7a042dc2ac457bc6c8020411199a6285db62391f13a6e2b19fe1749b1bb4d1789d4ccf50b00a561ff343c1377852fa4c3f0cf31f077baa03ad9dea1a14e2771a65a94d08c4bffe3591f2fe9e4f0029b6725f9109b46a30807c63d7e9a93eda2174e2c860e5434fc8f96eed53131a7825ba9eeef3d2e43a6a2517e6ae711e698a2a8f80ce32b00a12d04ef46e916d0cca8e35f49e730d082b489f2554400f680c35d811616bc4ab0b4bbac739b65d5e95ca71f66774a2287e5575d78f7a460a58dbc4691d5d125cbc836214c57e23d88b9742dd105d9906a02586c16d3088858d03edd7a3593a417bd578b8a6cd8ae7f792b3ee1a7bce3c31059bbba94f7722e4460fb2a06b4c9ed4298fc2c4e5cf66d8d75d4cbb9d4b30cacc0679a3f8c28688265f976372f04b2cc96d6d8f4a86db465bd1458b41b18166349f9fc2f448ad175d4e537ba465118371b887f5b257ffa5ca6a63c3f1fa9ba6ab1356100c50e1b74b1457c5016807b253e0f8af074da2d6e70cf9d7285ada27939afc411bb2854ba7bd03dbc93b1916335c1d433fdff0ff77c82ef04961fe8502fe74c9d94162b3c8193a71fabae11dce00e35cdedf26315b59eec4ff1d5d84ab08dddd93f329cb5efaa1a5fdebb930f2611097e5193f9006e4f65689b091606c7b85a83fc76db3f9440c95ed12cc6767542700949f4c181b9c2f315b8de147cb5baa49ee7bb64ea4df2dd895cf83c63c766d88ba6fab2f561d047c4ecdb0ffec58e9474143feecb43fbdcc1a1dd631e1607c3bfe9b36d994f9acd4db0333a33a6cfc563926f45976d0e611a02b97ed04ade0982a96b31eabeacc3e2340626f6e733f177a07f779a9e83d00096db163a8bf347fba7ee6cd2974236b6be429a793d87c1453d8c63013b66db9e18e7acd6b54d264a405feb4489acc0b57734ec6b41d663235b6fa5698b4d0f3b037979088018cc3ca0307e5135922eeec3b3b6d81a5fa9c8bb9009b1413bac4083ee656f3885bf0e81c18d46a4dfe749a3845de58d90f91a64ea36a1f97b3290693c371af50ea17054c81ebe9ede28f92f53e04f69cb8771ffcab81f03cfd8b05f6892cf2928560a74d1170b09b46a27abe3de93c1405d7cec4b886f3bf2a519eab8a4462011e576b29cf962f91400b5520ce0bb8a2ddbcb484284ab76cad060f1c7f091bf313b9d1111e870d64eb51efec5c9d78c047301f4d8af92e5e9b277ab2149bef214814e6d0d0ced6f693da5b4a287d7a12532d4231070d1cc0e7966bb710f304f157c69b3f2f12116931af6b72e4af6cfb27d6ad511d5c029c16707078f6b08f3c13188a355cb4c10c78c2ee5bde32b3de219914bbca42f96b2e3456f3ed9f5e7a44f1ea2e8fe7980dfae31ee26679e1efd977a37d57c0916e29c7bfb35e893a662c4f61973e1b323e97fc8b0528c660142ac36877f04a05146fdd3a84130c15e9e99746362df6dbdef1fc98537b2435d0602953d118707b6231348e33ff304a5cabeaf0fe54bf7bea05b412300be6bfe7a95e2ed8ddb8ea3c273d1e1198356fdfa3625c009c33d6d6adf883e0543a54c64d0235975fc3662b3d812163a29913e649019fca6cd11622dad9e53bb200f4c8789958e5cd950e84b2bdf8317c19ede65e41c8890a9c06c995b2a99f6a4b60014780ed8f8895f2f78ad1daf35ff94d5d93526d606fc936ceca39b0d2d85533ce439d2081bf06ad0e0c8230afbf86f1e85ddc07fb78e3c72cd69a28809b7167ca9e98daa06ea39e05b7dc6199afc1deb4447d7d9231906b6d69713afe7a02a690a852065bfdd6c00332482412a5a0d7fcd7f4c6606d13a328035c1875e194a20076754046c1321a96930a3b8eba7eac91c148356ca572be79d6db7cc402481959ee4239946864572f131c57d5a1bb47aa0eae9aa0b4b7a6cccbba225c269ec21846b35ef7828c60d461a3ff1d1d56ccea26e45f4718105eaccdb84f5f4ceead19ce07c658416090408469857f701402032fe3b3187bfd265e9017eeb63d34bccb9302d5e0c3c208a3df94df18a8764e83bb28920c1685faee496ace3780d8b9948db29fe8698e27c1e644fbd57eb7867be33a7e0150860d30d867dc591d39a94515901d0f0895a4aec3324139739072bf9129d7f9c2701ccfb5235f56390ccd068af1de9afe342c71dde9fa21bf093eb9b922875310ced348d610940255598ef985fca090a3568ec16c5a4ff605301ee70250a3d03e69400589b1eca2089c5e860964c58d3d46e0d831968ecb5d3cbe35a94fe977af9aa2ef1b9e1170ac11df726d77269afab9dc16a9f63e45583c78bbaf9ce98cfe6e5b52d0fa077a3153373d038ab577c783729fe15bec3e8f973b5904bf061b17bd4aa5f496999166300bab514ebc80d156394d8bbe3976fbad04502def036214aaa8a6ac63853352fd3c8b95f0bff1cf8cb1386f6ade60c0a4cf02962d7d0cc97fb0f2abdb70add6638fff154c103b965f1acffed0a958630b1ff796de1917ab0f6f4a616cd1ab84e3a1ca308eb9609fb56797a18016af4f866a6058f8524e5434f2f6ab9ebcc286e2c78256e9b43669bdccefdb06b053994731dcc59de819747a83555b84dadb776d0aad8fdd010283cc6f07e1fb4b9c63d75092f38706f71d98a45a596c9508cdf3dd6687afabe74e7fadd5374fb0b711740eb76733d783ae9de1df62b26c2fda0a4cff30ffd3bacf08f4fe6d1c88b1e8ede4f88538f76afa760d596b5e2ffe86a8f119ab3e536e8f6edc5db24c6c4b4cadda1a59fbef61487812f507be0a6015bdb55b138ce685ee857f0a5aab70a29a2fd7637fe547c8022e297ef0beca1b4f7dbe8d1a5c75ce6d59b0356c215af0c1e876afd2c8648c38bcadaad7ed96d68d2fc6b30a6cceece9a3b33edf40757a21c3675ce2d29adfe69aa3b0f27fb7a788092ae812e8e0bbdc7c06e94b97743b8a0d6ebabcc4eb04cc66fea547a76fdd8d329c577cd2ace0bf29294697acce5e7bea1cabd757d6c372909c142b414174a930ddeb84d211f52b4a0a8234539e44020cbd96891ef2bca611b883f5db521610906d94a417c48aea2d6f4e39b2a8716fe8e14f5fd4d012240f1e8ea049be815e3763ee6d4ac624b1db5e3eefea197d3b44de9a6984a5f309225df7fbd3cd085d2c2047817086da2b248ebcfb460362ac9e7964e80d09d4e449e850045215b1f5c15ceaee355d0f5b74be0adadced59b28ac6b34c10779d7ba80fb4cc05b2b130cd93d7ee8f5935e2620a395911648273918ff4a20dcee387825a6f926483d8776e5efd5da2d46a5ca7d3032bd0e0884c470bb1159ff5ba2b8d7ea2c4cc455aaf19fc73f6cd008153d726ed85e10fd2e8ad3a233595fa57f01e639aa3795843321db45d2a80b86688ea384da431e0910b039126e3d710762a2e40a610f1262526d99f04703d456c7a72f1938aa62eeb6d526d33329c3149056d82cac3048e2fde6a96612c50d753ee83170079ebd62258aeda67756431d3bd6625b7ab74f2e76108ab663a157bf472b7079547bc9ade8c5bd3878b590435780d03f16f6775dd6ce98daa64cbc7c8ede938456c8d140e9feab9d223d5a0477558de2968facb73f2a39461e19f8ef70c5805b20128510f6f1ad7edc3ddf0a1bdf55711f763717a4038ec93718893bd68f69ca50b13071df85ed1ded2956ad6888626c3b1f5ec3ff5fac4261d9b5e5313ebb2eac41fcd173315b9df4c5b59393e01820ecb1cc78cf2af50348ff472e3fba34d42db28f37a16997a972fb560af012cab3acd6be9689a25fbb41fc492fcf221078c4d952ca02295945bd95b3211c36928493afa73bc2df9a9ea15df8ce0722ea41a6781630a19fb166dc9031459f48aa73241cb608f53369a5f4997596d2db7e85a0b39b8f4f41e9f34753cc212062b3afd6099c2ab6ef9f077af4fe3ee52e74b3da417d8d5c65e38dd7f34ddebd7fc67e88f1b1e624603c9172ce9fa5212d397be13726806b8c14e0df6979298195a5ff195ce30ae2b8f52696e4ab82bd64cb24257fad61e08b9adc4a08b6d88074156910720c50cdf5539b0043fa4c65b4680f190af4faebaccbe10369528ca0b13a08ef086c0fdd4c6eda86ea5813bab484aeb102f9f4b1e82a402325ed7fa765602efb75ef16ae87596c839f42fbd56d43fd70bade425afa5e70144058ece7a70d3dc5892efcbba2f098b28d9dc95e8ea56ae3a3acd5c59582cdf7010277cfee5b95783cfd49517ce4830ee8179ad442cc85b74225c6b82e46d7e365a0d839b6e6e094b216eefde93231f61ca993c9507bec5a39f853ffddc2d2313d098e94be5a21e323237a7405cbf652e5698bc6eef0ce1d4653d6711106b4e8b6ecdb7b8488b33330669c90f54278813628c054f20ef97ae20acbd09ff16ddc262803028da3e11a9cdd843079664029068545b714f86b32e2b3f64e799375d95a4872a2f296fe9ec6c1332525f2eafafc58c252200d5b1a741863008bcb4a1866f573f31025a424e91a9ef840b16159ad61c30f102fb1e02ce6cf9b9ba44796da4daa8337d97f1ccf7ddda2073cbf4ac926892ba3d6b97ec15aa12d1740e55d672131a977af911bb01c7c00bb98cbcc3e2f423204c2884808749fb3e925567f64f207ad9ef5795b75d9af6917ea88d42d9570fa4a2eabb9e77d1918562eefc7aa3dc6ca5bd50f9b0175bb33997b6430290b10b07fff019af953c419256ba786842a08d3716114ead44f490adab7fa4d5d4cbeb7fa092967cfc0b6de7ae88acc4e58492308a1e503170cc0bb6fa76b62da650d3177407e23982a3ae913063e3476e442c57e92815de3c8d7568b0b054379006a9fdb6e7736c4462dc03905d2537425da58f72026b8fe7ffa1bf6b2612fc3e8b2d8be354b23d24bfa29921dfc690f86e138247a4023ec7cb4c5ee37a48a9027b35fec46f38a10c9688a6de840289c56c63b65abc6c2ebd038ee9cf1c6cfb67bdce62e25619415a4ce642afcbcf0babdd7a79232bdfe381e22260c56a9f6c260c775f09b653339b734a9c788fec82c197c180887f435e8e438bc09efe07d65749c556fc5b9b348d73b50b567736533a0dbfe0c15783d9743a540fea97a8f9d1fff4ba0f61957109b077750b19b60ee3686749eda9edb7dbdbd9f10acdfa676e2219a9ff4fc1efb6a0c9e7e42d8a96b69f9", 0x1000}}, 0x1006) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xffffffe3) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r9 = syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x3, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x4}, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r10, &(0x7f0000000180)=0xfe5f, 0x12) 5.517035654s ago: executing program 2 (id=781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syslog(0xa, &(0x7f0000000180)=""/216, 0xffffffffffffff47) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) dup(r0) setregid(0xee00, 0xee00) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) socket(0xa, 0x5, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101901, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x9, 0x8, 0x4, 0x6f, 0x3}}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) semget$private(0x0, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) 4.204959762s ago: executing program 4 (id=782): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000008c0)={0x0, 0x10001, 0x0, [0x4cb, 0x3, 0x747cc96, 0x5, 0xfffffffeffffffff], [0x2, 0x3, 0x400, 0x3, 0x8, 0x80, 0x80000000, 0x8, 0x7fffffff, 0x8001, 0x0, 0x6, 0x9, 0x3, 0xfffffffffffffffb, 0x0, 0xad, 0x6, 0xbb4, 0x0, 0x1, 0x0, 0x10001, 0x7, 0x9, 0x7fffffff, 0x80000000, 0x7, 0x4, 0x2, 0x2, 0x7fffffff, 0xf, 0x1000, 0x7d4c, 0x8001, 0x80000000, 0x5, 0x10, 0x2, 0xda, 0x0, 0x1, 0x4, 0x5, 0x9, 0x5, 0x2, 0x7cd7, 0x840, 0x9, 0x6, 0x1, 0x7, 0x9, 0x5fc6, 0x733fbc0d, 0x9bd, 0x7, 0xfffffffffffffc00, 0xfffffffffffffff8, 0x0, 0x4d, 0x8000, 0x200, 0xffffffffffffff80, 0x7, 0x5, 0x2, 0x9, 0x6, 0x8, 0x1, 0x3, 0x4, 0x8, 0x1, 0x6, 0x5, 0x1fd, 0x60, 0xd1905e6, 0x6, 0x6, 0x2000000000009, 0x9, 0x9, 0x0, 0x2, 0x8, 0x2, 0x8, 0x1, 0xd, 0x8, 0x7, 0x8, 0x9, 0x8, 0x6, 0x3, 0xd9e, 0x9, 0x7, 0xbe, 0x9, 0x39, 0xfffffffffffffffd, 0x2, 0x1, 0x8, 0x7, 0x8a, 0xb, 0x7fffffffffffffff, 0xffffffffffffffff, 0x4, 0x81, 0x4, 0x1ff, 0x10]}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000d00)={{}, {@val={r0}, @max}}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=0x0], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000880)={0x24, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r6}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) close(0x4) r9 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r9, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) syz_usb_control_io$uac2(r9, &(0x7f0000000440)={0x14, &(0x7f0000000280)={0x20, 0xb, 0xfc, {0xfc, 0x30, "b74107fcaa3a383b6824d369217567ff3222000bc4417bd3da64ba68e57a2cd61f4ddb93e96810afaa1415905adfd1b628c10c6751f5502fea1fc111b65b77550b31d7998f18f444d026c20375ccce59ca6ae6ccebef0c3777e0643589b11ef5b2550f953aaae75368751ffd1811c68d154f73cf60487414d27723c697506e1dae6a257e39c4919e98abfb69cf35ad6a2b7979c72080beb102193b641c0131470d30d2fc6e8055f967f34f1278d6d462273a15b10d93ca62f73dd3bdce75e92057b9ecd41203e1bfc8b007cf16faf2cd93fd011585edcd8af019ed5ecabd8f5967e49544cf02238b58719cc81ba48c7e4d239e9edc6f512e2e94"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000500)={0x0, 0x15, 0xca, "5fc92c4a25346726bb186c23d4938398ab54cc444a6fd3295e73e2aef9971c789cd76e60ceef887a390099d5184a14b59b576d386dd8a99f2eebfa64abc1b8e3e42a5e92fb1a8150ab2e0994e971af6c6a406f2ed03fbd5db898de7ee01fd8a51ed0393fbf00a0a5652b2acf6771e914fee4184365e8e40b8de675ce6ec69102348c4d16cf12867f803d819b1c404a6f427b55e04a0027d79c8b62f576444c9f8fd02f2e707a4c5d7e42ca5a6e95411f4ab2cbb716f60a915760e88b778cd78e57933a45f1f41820fbe2"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000680)={0x20, 0x81, 0x2, "b48f"}, &(0x7f00000006c0)={0x20, 0x82, 0x3, "83d264"}, &(0x7f0000000700)={0x20, 0x83, 0x3, "1a6cd9"}, &(0x7f0000000740)={0x20, 0x84, 0x3, "ae703e"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "a4172c"}}) 3.913212292s ago: executing program 1 (id=783): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a00000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8850d85ff978276fcf294", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 3.878976763s ago: executing program 1 (id=784): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000240)={0x0, 0x4, 0x1000000}) 3.549480232s ago: executing program 3 (id=785): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 3.408969422s ago: executing program 3 (id=786): mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x1001, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$SG_BLKTRACESTOP(r5, 0x1275, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x3, 0xfffffffffffffffd) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) socket$inet6(0xa, 0x1, 0xffd) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706050008000000000000000100000205000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x20) 3.391741895s ago: executing program 1 (id=787): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x4, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) socket$inet6(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x184}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r1, 0x0) shutdown(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)={0x268, 0x0, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xf1d9}, 0x3, 0x3, 0x1, 0x3, 0x26, 'syz1\x00', "23707500344f229d060376b62239c1a20d0cd464cadfd33a9a94ccf0e218dda2", "7e9ea6076861bf624ff2665fa86680f1193a87faeb80d3af33bfca0a957ff6a3", [{0x7, 0x9, {0x3, 0x10001}}, {0xf, 0x8, {0x0, 0x811}}, {0x8000, 0xfffe, {0x0, 0x1}}, {0x10, 0x5, {0x0, 0x9}}, {0x1, 0x7ff, {0x2, 0xffffff7f}}, {0x6, 0x2, {0x3, 0x5}}, {0x6, 0xdf9d, {0x3, 0xffff}}, {0x4, 0xfff8, {0x3, 0x200}}, {0xac, 0x0, {0x2, 0x6}}, {0x4, 0x100, {0x1, 0x6}}, {0x400, 0x7f, {0x3, 0x9}}, {0x6, 0xa, {0x1, 0x3}}, {0xabd4, 0x4, {0x0, 0x4}}, {0x4, 0x2, {0x0, 0x9}}, {0xc, 0x9, {0x2, 0x8}}, {0x0, 0xfff7, {0x3, 0x8}}, {0x2, 0x7, {0x1}}, {0x5, 0x2, {0x0, 0x2}}, {0x8, 0x8000, {0x1, 0x1}}, {0x2, 0x4, {0x3, 0x4}}, {0x800, 0x3c4e, {0x2, 0x2}}, {0xa8fa, 0x0, {0x2, 0x5}}, {0x4c0, 0x1}, {0x3, 0x93f, {0x1, 0x4}}, {0x8, 0x62, {0x2, 0x7}}, {0x3, 0x4, {0x1, 0x51f5}}, {0x5, 0x6, {0x0, 0x200}}, {0x9, 0x101, {0x1, 0xfffffffe}}, {0x4, 0xf80, {0x1, 0xfffffff7}}, {0x53, 0x5820, {0x3, 0xffff8001}}, {0xfffc, 0xff8b, {0x3, 0x6}}, {0xffff, 0x6, {0x5, 0x7}}, {0x2de0, 0xc, {0x1, 0x1}}, {0x4, 0x3, {0x1, 0xffff}}, {0xfffe, 0x22, {0x1, 0x4}}, {0x0, 0x4da, {0x1}}, {0x5fff, 0x4, {0x3}}, {0x0, 0x4, {0x2, 0x2}}, {0x4, 0x877, {0x1, 0x9}}, {0xff, 0x0, {0x3, 0x1}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x80}, 0x48040) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40004}}], 0x1, 0x8041) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000500)=ANY=[], 0x78) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) 3.307214528s ago: executing program 5 (id=788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x100000000000000) 2.341267521s ago: executing program 2 (id=789): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, 0x0) 2.136730303s ago: executing program 1 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000020000000c000000200001801400020076657468305f746f5f6257276400000008000100", @ANYRES32=r2, @ANYBLOB="10000380040001000400040004000100"], 0x44}, 0x1, 0x0, 0x0, 0x4000085}, 0x24048044) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101b01) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) symlink(0x0, &(0x7f00000000c0)='./file0\x00') ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) prctl$PR_GET_SPECULATION_CTRL(0x22, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) 1.914822087s ago: executing program 5 (id=791): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$PPPIOCSPASS(r2, 0x40087447, &(0x7f0000000300)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000006c0)={@fd={0x77622a85, 0x0, r2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x36}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r4, 0x1, 0xffffffff, 0x200a, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000850) 1.734488018s ago: executing program 2 (id=792): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.124657145s ago: executing program 5 (id=793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000085804184000000000000109022400010000402009040000020300010009210700000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40c000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x3, 0x5, "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", 0x80, 0x3, 0x0, 0x5, 0xb, 0x7, 0x0, 0x1}, r4}}, 0x120) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a03, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000980), 0x402900, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x404a001}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x541c, &(0x7f0000000040)) poll(&(0x7f00000009c0)=[{r0, 0x442d}, {r2, 0x4}, {r3, 0x88}, {r0, 0x10}, {r0, 0x5503}, {r0, 0x4480}, {r5, 0xa020}, {r6, 0x104}, {r0}, {r9, 0x4000}], 0xa, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x40, 0x39, 0x70, {0x70, 0x7, "99f16cf21b624258a133e9f5523ba7d1858006243401cbc0481571f705bf44327298adde08d6259bf5f1627e22bd2d38b93b8c5675dbb2cb76ccb3e6881e30a0302add78588dc0b84d97651a1b0773387fec7c2aad81abdc6523de1f68152ee4764a99a64799f962c91f39d91df7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0xffffffffffffffff, 0x0, 0x1}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) r10 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x100, 0xdb, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0xc4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x9, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x7, 0x1, 0x1, 0xff, 0x5}, 0x99, &(0x7f00000001c0)={0x5, 0xf, 0x99, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x4, 0x0, 0xf4, [0x60]}, @generic={0x6d, 0x10, 0x1, "ab5f80509081c4e030a8559d6c28fd213e979e30b5858c2a36f30af8b1ea3f4495067c157c990c94095e34414592b1f40fe3bc111c21e37b4deb95058b7d1be5fdd12b013471efeddaf83e0ead3775e31af2e14d54d68745741aee719896369ad852b32a00ba1f2a6d2f"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x40, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x81, 0x7}]}, 0x2, [{0x95, &(0x7f0000000340)=@string={0x95, 0x3, "29138e0825dc91efacf88b2a81871bc8db55d3db9c159d2e743edce6ee14f8525e6744bd6e62c5693cc422f762ac86712d395ad72dbac0b064263bdf715400e1eee12c2cc738c073df02b0e6741ee5f728f668d9ece42804c3c265dcfe54aeb042fca646d4c47f2dd0d591d28156eb447cd92e399d56eefcd29e86e9b10f36062330260de87fc41e2d6df80328745f2f2952d4"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$printer(r10, &(0x7f0000000640)={0x14, &(0x7f0000000480)={0x0, 0x10, 0xfd, {0xfd, 0x22, "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"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "4bcbedd1479542ae7f7594a9d4dbeeb3e711f0f6493b646081ed4593a2973dc209a5766f03ad9ffcb1ffe5ea6db04e1160a99794cae0a44f5f414296c56e333e45f792d7c345c44fbd54e9"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x40, 0x18, 0x51, "d00d08ee16fc93f2d7ed88aceab00106f21d087d4db5c1590bfb97efec2f37b5edb4a045f923e5e469aa436632a8fb61d2acd46901a0480ae2f1804ed60cd2435d719475a2b6cce1064667f58e143ea4f2"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)={0x20, 0x0, 0x67, {0x65, "d8fa1df7f81c706741c1d76208f2e163df685c7b5c7645b347b4e41fa4bac08b1a1e29134547162b5576d9c5c45a5b0dd2f4c7e27eba13ca090e4a9c8213e575a165b6bebed1cacf046377c73c66616aa94fdf7c89869b32491f9c818991e9f4533914d6a5"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x81}}) 1.123580832s ago: executing program 2 (id=794): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x91f5cfc9f121b1d5, 0xeef, 0x7349, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0x0, 0x6, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0xf3, {0x9, 0x21, 0x1, 0xc, 0x1, {0x22, 0xffa}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x7, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0xaf}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x7, 0x0, 0x20, 0x8, 0x7}, 0x5b, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f5b00050b10010c110000075cfd08141004045b5516b51434ca5099c6f831fdb8315803100b03100b3110f632e4938f6a531fff4e46eb8752c9c6f4c5d2219964dcbcc2d20005b1785cb67a8a42532c6514f3c6026d1401482f7fe5ecef5d2d4f661924e1c83bea6141bad4217513ef498367a0e5a0a9b0a8403cdfcba3b62b01030363a9c7f3b034672a675e92faeba22a92abec56704336f31e8108fd944892bc285217c89c2da3b546c03a9bbc129d8cd969def3"], 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x5f, &(0x7f00000002c0)=@string={0x5f, 0x3, "385068a6839cf4ec88894ef890bc762dc5fbb087ee2826cfe56bcd6458065bbbcd61b2f003f41a0006dab31359e312077a6c8335ef10c5018a339abd7d66d6663de6fdf7e15f8baa47edf49313ec04e7ed20ec0e9aa45411c3b8c7f3cd"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xf4, &(0x7f0000000400)=@string={0xf4, 0x3, "418a15fde7d6a40fb61c4d7a14ab8e5544b7fb6d612a909a672582a23b2b4480642777d6d05271ead06cde3ca4e5ff1fdaa5f0cc9b7c281357d44f4a2f2ddf3c5a391206ea628d944c6cbcf92d43dd5011bbd15e5155ec56dcefe0875dbdecd45bc56f3bccfb8c02596fbbbf1f2c34fb7457c16aacc0022bbbb34b5243f79c2cfaa8f070a43c3ae51877d354d14c3dd19f4456c61639d7890902821f0082d2d77d377954e03dba614ab34a83273b126cb3575cd02ec58d40ba9b4f0c290d6254fe8fda639b7880779bbeed3b5d4d5393902540d911bda20fb18b1938906406dce3c118eaabf430d1ea7810e4ebf56d96cfe7"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x9}, 0xfffffffffffffecb) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.004068213s ago: executing program 1 (id=795): r0 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x0, 0x300000000004}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r5, &(0x7f00000008c0)={&(0x7f0000000900)=@pppoe={0x18, 0x0, {0x4, @broadcast, 'team0\x00'}}, 0x80, 0x0}, 0x20004000) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000000c0)) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x7000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r6, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc, 0x0, 0x1}}, 0x40) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f00008b2000/0x4000)=nil, 0x3) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106"], 0x18}], 0x1}, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x5008, 0x0) socket(0x400000000010, 0x3, 0x0) read$msr(r7, &(0x7f0000000300)=""/193, 0xc1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) 134.041442ms ago: executing program 3 (id=796): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 52.562965ms ago: executing program 2 (id=797): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000240)={0x0, 0x4, 0x1000000}) 8.385898ms ago: executing program 2 (id=798): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000000000000850000009700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffdffffffff6) 0s ago: executing program 3 (id=799): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$inet(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x330, 0x0, 0x98, 0x0, 0x1a0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) preadv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0xf1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffc0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x4, 0x2, 0x1, "2b601e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x81, 0x4, {0x7, 0x25, 0x1, 0x4, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x8, 0xad, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x12a}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000100)=0x80, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) kernel console output (not intermixed with test programs): 9 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.041397][ T7367] RSP: 002b:00007f49f0c78fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.041414][ T7367] RAX: ffffffffffffffda RBX: 00007f49f0c796c0 RCX: 00007f49efd5d68e [ 211.041426][ T7367] RDX: 000000000000000f RSI: 00007f49f0c790a0 RDI: 0000000000000003 [ 211.041436][ T7367] RBP: 00007f49f0c79090 R08: 0000000000000000 R09: 0000000000000000 [ 211.041445][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.041455][ T7367] R13: 00007f49f0016128 R14: 00007f49f0016090 R15: 00007ffd264ffb78 [ 211.041480][ T7367] [ 212.245869][ T30] audit: type=1400 audit(1778800154.766:683): avc: denied { accept } for pid=7371 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 212.345804][ T30] audit: type=1400 audit(1778800154.776:684): avc: denied { read } for pid=7371 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 212.348148][ T7373] netlink: 'syz.4.358': attribute type 4 has an invalid length. [ 212.559154][ T30] audit: type=1400 audit(1778800155.076:685): avc: denied { write } for pid=7366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.611886][ T5738] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 212.654738][ T30] audit: type=1400 audit(1778800155.176:686): avc: denied { write } for pid=7389 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.777435][ T7390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.794262][ T5709] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 212.839576][ T5738] usb 2-1: Using ep0 maxpacket: 8 [ 212.850143][ T5738] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.861383][ T5738] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.881863][ T5738] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 212.891467][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.937057][ T5738] usb 2-1: config 0 descriptor?? [ 212.957689][ T5709] usb 5-1: config index 0 descriptor too short (expected 65426, got 146) [ 212.988343][ T5709] usb 5-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 213.012988][ T5738] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 213.021770][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.069178][ T5709] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 213.093644][ T5709] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 213.106223][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.128243][ T5709] usb 5-1: SerialNumber: syz [ 213.161314][ T5709] usb 5-1: config 0 descriptor?? [ 213.619122][ T7403] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 213.627531][ T7403] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 213.670174][ T11] block nbd0: Possible stuck request ffff8880279e0000: control (read@0,1024B). Runtime 90 seconds [ 213.688259][ T11] block nbd0: Possible stuck request ffff8880279e01c0: control (read@1024,1024B). Runtime 90 seconds [ 213.733180][ T11] block nbd0: Possible stuck request ffff8880279e0380: control (read@2048,1024B). Runtime 90 seconds [ 213.775977][ T11] block nbd0: Possible stuck request ffff8880279e0540: control (read@3072,1024B). Runtime 90 seconds [ 213.847543][ T7408] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 214.192098][ T7410] netlink: 'syz.1.357': attribute type 4 has an invalid length. [ 214.668985][ T30] audit: type=1400 audit(1778800157.186:687): avc: denied { write } for pid=7392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.705709][ T5709] usb 5-1: USB disconnect, device number 7 [ 214.999027][ T30] audit: type=1400 audit(1778800157.516:688): avc: denied { write } for pid=7418 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.695241][ T7428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.718539][ T7428] kvm: user requested TSC rate below hardware speed [ 215.974183][ T804] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 216.048226][ T5797] usb 2-1: USB disconnect, device number 16 [ 216.139448][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 216.146418][ T804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 216.170323][ T804] usb 3-1: config 42 has an invalid interface number: 178 but max is 0 [ 216.192706][ T804] usb 3-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 216.204445][ T804] usb 3-1: config 42 has no interface number 0 [ 216.425546][ T30] audit: type=1400 audit(1778800158.916:689): avc: denied { setopt } for pid=7429 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.458858][ T804] usb 3-1: config 42 interface 178 has no altsetting 0 [ 216.737455][ T804] usb 3-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 216.749851][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.757989][ T804] usb 3-1: Product: syz [ 216.766176][ T804] usb 3-1: Manufacturer: syz [ 216.784798][ T804] usb 3-1: SerialNumber: syz [ 217.192957][ T804] uvcvideo 3-1:42.178: probe with driver uvcvideo failed with error -22 [ 217.213437][ T804] usb 3-1: USB disconnect, device number 13 [ 217.241184][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 217.277154][ T7443] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 217.364681][ T7443] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 218.545034][ T30] audit: type=1400 audit(1778800161.066:690): avc: denied { create } for pid=7453 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.555740][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 218.564511][ T30] audit: type=1400 audit(1778800161.066:691): avc: denied { bind } for pid=7453 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.564558][ T30] audit: type=1400 audit(1778800161.066:692): avc: denied { setopt } for pid=7453 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.740962][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 218.751790][ T7457] nbd5: detected capacity change from 0 to 63 [ 218.788403][ T7467] nbd: must specify an index to disconnect [ 219.297073][ T30] audit: type=1400 audit(1778800161.806:693): avc: denied { write } for pid=7445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.361948][ T10] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 219.379592][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.394272][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.418202][ T10] usb 4-1: Product: syz [ 219.424527][ T30] audit: type=1400 audit(1778800161.946:694): avc: denied { write } for pid=7472 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.431679][ T10] usb 4-1: Manufacturer: syz [ 219.491363][ T10] usb 4-1: SerialNumber: syz [ 219.507527][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 220.135616][ T5738] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.384005][ T5613] block nbd5: Receive control failed (result -104) [ 220.491653][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 220.632380][ T7490] kvm: user requested TSC rate below hardware speed [ 220.689393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 221.048870][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.107782][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.195812][ T5738] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 221.327469][ T5738] ath9k_htc: Failed to initialize the device [ 222.045923][ T5738] usb 4-1: ath9k_htc: USB layer deinitialized [ 222.218928][ T7498] syz.1.379 (7498): drop_caches: 2 [ 223.082998][ T7498] syz.1.379 (7498): drop_caches: 2 [ 223.284678][ T5709] usb 4-1: USB disconnect, device number 18 [ 223.433518][ T30] audit: type=1400 audit(1778800165.956:695): avc: denied { write } for pid=7478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.463991][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.479721][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.495266][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.503462][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.610411][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.462153][ T30] audit: type=1400 audit(1778800166.986:696): avc: denied { write } for pid=7518 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.942828][ T7542] syz.1.386 (7542): drop_caches: 2 [ 224.996828][ T7542] syz.1.386 (7542): drop_caches: 2 [ 225.323655][ T7501] vxcan1 speed is unknown, defaulting to 1000 [ 225.378948][ T7546] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 225.417752][ T7546] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.545019][ T30] audit: type=1400 audit(1778800168.066:697): avc: denied { connect } for pid=7548 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.783038][ T5613] Bluetooth: hci5: command tx timeout [ 227.245599][ T7568] nbd6: detected capacity change from 0 to 63 [ 227.333664][ T7571] nbd: must specify an index to disconnect [ 227.352597][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.361622][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.368854][ T7501] bridge_slave_0: entered allmulticast mode [ 227.376579][ T7501] bridge_slave_0: entered promiscuous mode [ 227.385141][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.392552][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.399963][ T7501] bridge_slave_1: entered allmulticast mode [ 227.407482][ T7501] bridge_slave_1: entered promiscuous mode [ 227.438658][ T7501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.496440][ T7501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.829433][ T5617] Bluetooth: hci5: command tx timeout [ 227.989271][ T7501] team0: Port device team_slave_0 added [ 228.018508][ T7501] team0: Port device team_slave_1 added [ 228.106098][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.114400][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.155335][ T7501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.746615][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.756203][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.819841][ T7501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.780784][ T7501] hsr_slave_0: entered promiscuous mode [ 229.800223][ T7501] hsr_slave_1: entered promiscuous mode [ 229.828470][ T7501] debugfs: 'hsr0' already exists in 'hsr' [ 229.840483][ T7501] Cannot create hsr debugfs directory [ 229.916985][ T5617] Bluetooth: hci5: command tx timeout [ 229.971542][ T5613] block nbd6: Receive control failed (result -104) [ 230.049706][ T5709] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 230.247154][ T5709] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 230.266837][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.293076][ T5709] usb 4-1: config 0 descriptor?? [ 230.326383][ T5709] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 230.362039][ T5709] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 230.546539][ T7501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.614930][ T7501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.635633][ T7501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.660841][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 230.688540][ T7501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.695698][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 230.709394][ T7501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.746131][ T7501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.763871][ T7501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.806077][ T7501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.826864][ T7612] netlink: 822 bytes leftover after parsing attributes in process `syz.3.397'. [ 230.853681][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.881167][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.940017][ T7612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.975198][ T7612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.074414][ T7621] FAULT_INJECTION: forcing a failure. [ 231.074414][ T7621] name failslab, interval 1, probability 0, space 0, times 0 [ 231.134967][ T7621] CPU: 1 UID: 0 PID: 7621 Comm: syz.1.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.134992][ T7621] Tainted: [L]=SOFTLOCKUP [ 231.134997][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.135005][ T7621] Call Trace: [ 231.135009][ T7621] [ 231.135018][ T7621] dump_stack_lvl+0x100/0x190 [ 231.135042][ T7621] should_fail_ex.cold+0x5/0xa [ 231.135061][ T7621] ? tomoyo_realpath_from_path+0xb6/0x690 [ 231.135081][ T7621] should_failslab+0xc2/0x120 [ 231.135097][ T7621] __kmalloc_noprof+0xe0/0x850 [ 231.135122][ T7621] ? kfree+0x1dd/0x6c0 [ 231.135143][ T7621] tomoyo_realpath_from_path+0xb6/0x690 [ 231.135166][ T7621] tomoyo_path_number_perm+0x23c/0x580 [ 231.135183][ T7621] ? tomoyo_path_number_perm+0x22e/0x580 [ 231.135200][ T7621] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 231.135236][ T7621] ? find_held_lock+0x2b/0x80 [ 231.135249][ T7621] ? __fget_files+0x215/0x3d0 [ 231.135266][ T7621] ? hook_file_ioctl_common+0x149/0x410 [ 231.135285][ T7621] ? __fget_files+0x215/0x3d0 [ 231.135305][ T7621] ? __fget_files+0x21f/0x3d0 [ 231.135325][ T7621] security_file_ioctl+0xd3/0x230 [ 231.135345][ T7621] __x64_sys_ioctl+0xb7/0x210 [ 231.135362][ T7621] do_syscall_64+0x10b/0xf80 [ 231.135381][ T7621] ? clear_bhb_loop+0x40/0x90 [ 231.135399][ T7621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.135414][ T7621] RIP: 0033:0x7f3c7c79ce59 [ 231.135426][ T7621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.135440][ T7621] RSP: 002b:00007f3c7d5e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.135454][ T7621] RAX: ffffffffffffffda RBX: 00007f3c7ca15fa0 RCX: 00007f3c7c79ce59 [ 231.135463][ T7621] RDX: 0000200000000040 RSI: 0000000000005414 RDI: 0000000000000003 [ 231.135471][ T7621] RBP: 00007f3c7d5e2090 R08: 0000000000000000 R09: 0000000000000000 [ 231.135479][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.135487][ T7621] R13: 00007f3c7ca16038 R14: 00007f3c7ca15fa0 R15: 00007ffe181a4738 [ 231.135508][ T7621] [ 231.345926][ T7621] ERROR: Out of memory at tomoyo_realpath_from_path. [ 231.353180][ T30] audit: type=1400 audit(1778800173.876:698): avc: denied { ioctl } for pid=7620 comm="syz.1.399" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 231.663972][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.724065][ T7501] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.787303][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.794407][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.818326][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.825488][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.099731][ T5613] Bluetooth: hci5: command tx timeout [ 232.681365][ T7501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.764870][ T30] audit: type=1400 audit(1778800175.286:699): avc: denied { ioctl } for pid=7644 comm="syz.1.403" path="socket:[18926]" dev="sockfs" ino=18926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.845909][ T30] audit: type=1400 audit(1778800175.366:700): avc: denied { name_bind } for pid=7644 comm="syz.1.403" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 232.882259][ T5797] usb 4-1: USB disconnect, device number 19 [ 232.988212][ T7653] vivid-004: disconnect [ 233.006277][ T7653] tap0: tun_chr_ioctl cmd 1074025677 [ 233.012584][ T7653] tap0: linktype set to 804 [ 233.079930][ T7653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.792205][ T7648] vivid-004: reconnect [ 233.977705][ T7501] veth0_vlan: entered promiscuous mode [ 234.029931][ T7501] veth1_vlan: entered promiscuous mode [ 234.104168][ T7501] veth0_macvtap: entered promiscuous mode [ 234.189798][ T7670] netlink: 32 bytes leftover after parsing attributes in process `syz.1.407'. [ 234.239938][ T7501] veth1_macvtap: entered promiscuous mode [ 234.293347][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.324689][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.343752][ T3392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.371928][ T6773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.400650][ T6773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.424724][ T30] audit: type=1400 audit(1778800176.946:701): avc: denied { create } for pid=7677 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.445627][ T30] audit: type=1400 audit(1778800176.976:702): avc: denied { write } for pid=7677 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.445706][ T6773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.476230][ T30] audit: type=1400 audit(1778800176.976:703): avc: denied { read } for pid=7677 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.576553][ T6777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.598935][ T6777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.645662][ T3392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.655180][ T3392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.675414][ T30] audit: type=1400 audit(1778800177.196:704): avc: denied { mounton } for pid=7501 comm="syz-executor" path="/root/syzkaller.a7wxXY/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 234.718757][ T30] audit: type=1400 audit(1778800177.226:705): avc: denied { mounton } for pid=7501 comm="syz-executor" path="/root/syzkaller.a7wxXY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 234.772244][ T30] audit: type=1400 audit(1778800177.226:706): avc: denied { mounton } for pid=7501 comm="syz-executor" path="/root/syzkaller.a7wxXY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 234.856470][ T30] audit: type=1400 audit(1778800177.226:707): avc: denied { mounton } for pid=7501 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 236.145393][ T7695] hub 8-0:1.0: USB hub found [ 236.152748][ T7695] hub 8-0:1.0: 1 port detected [ 237.249747][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 237.334293][ T7715] xt_hashlimit: size too large, truncated to 1048576 [ 237.356973][ T30] audit: type=1400 audit(1778800179.846:708): avc: denied { connect } for pid=7708 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.431380][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.445722][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.475901][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.489531][ T7721] ipt_ECN: cannot use operation on non-tcp rule [ 237.497237][ T7722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.422'. [ 237.549511][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.562908][ T7722] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 237.783926][ T9] usb 6-1: usb_control_msg returned -32 [ 237.793082][ T9] usbtmc 6-1:16.0: can't read capabilities [ 237.849755][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 238.083403][ T9] usb 6-1: USB disconnect, device number 2 [ 238.132273][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 238.198704][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 238.359509][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 238.564409][ T10] usb 5-1: string descriptor 0 read error: -22 [ 238.665784][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 238.777264][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.929675][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 238.960268][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 239.857419][ T10] snd-ua101 5-1:1.0: invalid num_altsetting [ 240.209614][ T7741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.227932][ T7741] kvm: user requested TSC rate below hardware speed [ 240.519339][ T7742] vivid-002: disconnect [ 240.531345][ T7742] tap0: tun_chr_ioctl cmd 1074025677 [ 240.537625][ T7742] tap0: linktype set to 804 [ 240.553922][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 240.557534][ T2690] block nbd3: Possible stuck request ffff888027aa7000: control (read@0,1024B). Runtime 60 seconds [ 240.574371][ T7742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.636288][ T2690] block nbd3: Possible stuck request ffff888027aa71c0: control (read@1024,1024B). Runtime 60 seconds [ 240.665744][ T2690] block nbd3: Possible stuck request ffff888027aa7380: control (read@2048,1024B). Runtime 60 seconds [ 240.724198][ T2690] block nbd3: Possible stuck request ffff888027aa7540: control (read@3072,1024B). Runtime 60 seconds [ 240.856306][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 240.867343][ T7724] netlink: 'syz.4.421': attribute type 10 has an invalid length. [ 240.915148][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.922753][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.007669][ T7721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.028405][ T7733] vivid-002: reconnect [ 241.049181][ T7721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.661911][ T10] usb 5-1: USB disconnect, device number 8 [ 241.896126][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 242.825761][ T7770] kvm: user requested TSC rate below hardware speed [ 243.084733][ T7773] ipt_ECN: cannot use operation on non-tcp rule [ 243.276911][ T30] audit: type=1400 audit(1778800185.796:709): avc: denied { write } for pid=7756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.320321][ T5709] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 243.386930][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 243.408405][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 243.439867][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 243.449302][ T30] audit: type=1400 audit(1778800185.956:710): avc: denied { write } for pid=7790 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.489307][ T82] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.499480][ T5709] usb 3-1: Using ep0 maxpacket: 8 [ 243.506449][ T5709] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.516629][ T82] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.516667][ T82] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.526469][ T5709] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.570223][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 243.594741][ T5709] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 243.607056][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 243.607717][ T82] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.616807][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.633156][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 243.640422][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 243.653605][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 243.665422][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 243.702523][ T9] usb 4-1: string descriptor 0 read error: -22 [ 243.711897][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 243.722864][ T5709] usb 3-1: config 0 descriptor?? [ 243.738295][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 243.742865][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.756127][ T11] block nbd0: Possible stuck request ffff8880279e0000: control (read@0,1024B). Runtime 120 seconds [ 243.767142][ T11] block nbd0: Possible stuck request ffff8880279e01c0: control (read@1024,1024B). Runtime 120 seconds [ 243.780711][ T5709] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 243.799337][ T11] block nbd0: Possible stuck request ffff8880279e0380: control (read@2048,1024B). Runtime 120 seconds [ 243.819585][ T11] block nbd0: Possible stuck request ffff8880279e0540: control (read@3072,1024B). Runtime 120 seconds [ 243.836984][ T9] snd-ua101 4-1:1.0: invalid num_altsetting [ 244.591367][ T7800] nbd7: detected capacity change from 0 to 63 [ 244.625069][ T7808] nbd: must specify an index to disconnect [ 244.641988][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 244.664219][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 244.696594][ T7784] netlink: 'syz.3.434': attribute type 10 has an invalid length. [ 244.720744][ T30] audit: type=1400 audit(1778800187.236:711): avc: denied { write } for pid=7793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.772787][ T7773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.798238][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.873945][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.887983][ T30] audit: type=1400 audit(1778800187.416:712): avc: denied { write } for pid=7816 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.940688][ T7773] bond1: (slave bond0): making interface the new active one [ 245.010190][ T7773] bond1: (slave bond0): Enslaving as an active interface with an up link [ 245.059162][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.066757][ T7784] bridge0: port 1(1x9) entered disabled state [ 245.327950][ T5613] block nbd7: Receive control failed (result -104) [ 245.791752][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.798897][ T7784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.806341][ T7784] bridge0: port 1(1x9) entered blocking state [ 245.812749][ T7784] bridge0: port 1(1x9) entered forwarding state [ 245.872640][ T7784] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 245.893330][ T7807] netlink: 'syz.2.435': attribute type 4 has an invalid length. [ 245.958158][ T5797] usb 4-1: USB disconnect, device number 20 [ 246.061632][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.443'. [ 246.114357][ T7830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.165747][ T7830] ipt_ECN: cannot use operation on non-tcp rule [ 246.489481][ T5797] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 246.589463][ T5817] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 246.659548][ T5797] usb 6-1: Using ep0 maxpacket: 16 [ 246.668021][ T5797] usb 6-1: unable to get BOS descriptor or descriptor too short [ 246.681971][ T5797] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 246.698336][ T5797] usb 6-1: string descriptor 0 read error: -22 [ 246.707044][ T5797] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 246.716862][ T5797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.742884][ T5797] snd-ua101 6-1:1.0: invalid num_altsetting [ 246.760164][ T7838] fuse: Unknown parameter 'user_i00000000000000000000' [ 246.873731][ T30] audit: type=1400 audit(1778800189.396:713): avc: denied { setopt } for pid=7843 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.897202][ T30] audit: type=1400 audit(1778800189.396:714): avc: denied { append } for pid=7843 comm="syz.4.447" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.992949][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.443'. [ 247.045539][ T5797] usb 3-1: USB disconnect, device number 14 [ 247.060006][ T7832] netlink: 'syz.5.443': attribute type 10 has an invalid length. [ 247.068365][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.075978][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.099609][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.107898][ T7832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.115402][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.122533][ T7832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.416619][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.518039][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.602841][ T7832] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 247.749387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 248.020893][ T29] usb 6-1: USB disconnect, device number 3 [ 248.349473][ T5797] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 248.500686][ T5797] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.510092][ T5797] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 248.521614][ T5797] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 248.530864][ T5797] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 248.542855][ T5797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 248.593319][ T5797] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 248.906927][ T11] block nbd5: Possible stuck request ffff888027bf0000: control (read@0,1024B). Runtime 30 seconds [ 248.917867][ T11] block nbd5: Possible stuck request ffff888027bf01c0: control (read@1024,1024B). Runtime 30 seconds [ 248.928869][ T11] block nbd5: Possible stuck request ffff888027bf0380: control (read@2048,1024B). Runtime 30 seconds [ 248.939888][ T11] block nbd5: Possible stuck request ffff888027bf0540: control (read@3072,1024B). Runtime 30 seconds [ 248.945876][ T5797] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.974030][ T5797] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.987739][ T5797] usb 5-1: Product: syz [ 248.993189][ T5797] usb 5-1: Manufacturer: syz [ 249.005419][ T5797] cdc_wdm 5-1:1.0: skipping garbage [ 249.011659][ T5797] cdc_wdm 5-1:1.0: skipping garbage [ 249.017341][ T5797] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 249.047518][ T7865] netlink: 'syz.5.451': attribute type 1 has an invalid length. [ 249.249390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 249.550966][ T5817] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.560326][ T5817] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 249.589668][ T5817] usb 2-1: can't read configurations, error -71 [ 249.833593][ T7880] PKCS7: Unknown OID: [4] 0.0 [ 249.838308][ T7880] PKCS7: Only support pkcs7_signedData type [ 249.959569][ T5817] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 250.131215][ T5817] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 250.145592][ T5817] usb 2-1: config 0 has no interface number 0 [ 250.163534][ T5817] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 250.178030][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.199094][ T5817] usb 2-1: Product: syz [ 250.207464][ T5817] usb 2-1: Manufacturer: syz [ 250.218081][ T5817] usb 2-1: SerialNumber: syz [ 250.234591][ T5817] usb 2-1: config 0 descriptor?? [ 250.452393][ T5817] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 250.483481][ T5817] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 250.517847][ T5817] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 250.573140][ T5817] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 250.602684][ T5817] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 250.875979][ T5817] usb 2-1: USB disconnect, device number 18 [ 250.920287][ T5817] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 250.951519][ T5817] keyspan 2-1:0.133: device disconnected [ 251.238625][ T10] usb 5-1: USB disconnect, device number 9 [ 251.244802][ T5738] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 251.451285][ T5738] usb 6-1: Using ep0 maxpacket: 8 [ 251.557574][ T5738] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.675538][ T7893] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 251.800765][ T5738] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 251.957727][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.197603][ T5738] usb 6-1: config 0 descriptor?? [ 253.049669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 253.195739][ T5738] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 253.234182][ T30] audit: type=1400 audit(1778800195.176:715): avc: denied { block_suspend } for pid=7899 comm="syz.4.460" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 253.333043][ T30] audit: type=1400 audit(1778800195.846:716): avc: denied { connect } for pid=7905 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 253.683878][ T7910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.694221][ T7910] kvm: user requested TSC rate below hardware speed [ 253.880424][ T7913] FAULT_INJECTION: forcing a failure. [ 253.880424][ T7913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.880471][ T7913] CPU: 0 UID: 0 PID: 7913 Comm: syz.3.464 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.880501][ T7913] Tainted: [L]=SOFTLOCKUP [ 253.880507][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.880517][ T7913] Call Trace: [ 253.880523][ T7913] [ 253.880530][ T7913] dump_stack_lvl+0x100/0x190 [ 253.880556][ T7913] should_fail_ex.cold+0x5/0xa [ 253.880581][ T7913] _copy_from_user+0x2e/0xd0 [ 253.880608][ T7913] kstrtouint_from_user+0xd6/0x1d0 [ 253.880629][ T7913] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 253.880648][ T7913] ? __lock_acquire+0x4a5/0x2630 [ 253.880676][ T7913] ? lock_acquire+0x1b1/0x370 [ 253.880704][ T7913] proc_fail_nth_write+0x83/0x220 [ 253.880725][ T7913] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.880751][ T7913] vfs_write+0x2aa/0x1070 [ 253.880772][ T7913] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.880794][ T7913] ? __pfx_vfs_write+0x10/0x10 [ 253.880814][ T7913] ? __fget_files+0x215/0x3d0 [ 253.880842][ T7913] ? __fget_files+0x21f/0x3d0 [ 253.880872][ T7913] ksys_write+0x12a/0x250 [ 253.880891][ T7913] ? __pfx_ksys_write+0x10/0x10 [ 253.880915][ T7913] ? rcu_is_watching+0x12/0xc0 [ 253.880942][ T7913] do_syscall_64+0x10b/0xf80 [ 253.880963][ T7913] ? clear_bhb_loop+0x40/0x90 [ 253.880984][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.881000][ T7913] RIP: 0033:0x7f18de55d68e [ 253.881014][ T7913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.881029][ T7913] RSP: 002b:00007f18df3d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.881044][ T7913] RAX: ffffffffffffffda RBX: 00007f18df3d16c0 RCX: 00007f18de55d68e [ 253.881055][ T7913] RDX: 0000000000000001 RSI: 00007f18df3d10a0 RDI: 0000000000000005 [ 253.881064][ T7913] RBP: 00007f18df3d1090 R08: 0000000000000000 R09: 0000000000000000 [ 253.881072][ T7913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.881082][ T7913] R13: 00007f18de816128 R14: 00007f18de816090 R15: 00007fff569878f8 [ 253.881106][ T7913] [ 254.171909][ T7919] hub 8-0:1.0: USB hub found [ 254.172626][ T7919] hub 8-0:1.0: 1 port detected [ 254.548036][ T7920] netlink: 'syz.5.458': attribute type 4 has an invalid length. [ 254.625322][ T7924] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 254.818721][ T7925] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 254.933614][ T5738] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 255.079492][ T5738] usb 4-1: device descriptor read/64, error -71 [ 255.201089][ T7932] Bluetooth: MGMT ver 1.23 [ 255.202331][ T7932] Bluetooth: hci0: unsupported parameter 255 [ 255.202350][ T7932] Bluetooth: hci0: unsupported parameter 255 [ 255.320274][ T5738] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 255.980228][ T5738] usb 4-1: device descriptor read/64, error -71 [ 255.992671][ T5817] usb 6-1: USB disconnect, device number 4 [ 256.072563][ T7944] kvm: user requested TSC rate below hardware speed [ 256.100696][ T5738] usb usb4-port1: attempt power cycle [ 256.745953][ T7948] __nla_validate_parse: 1 callbacks suppressed [ 256.745973][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 256.779338][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 256.792875][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 256.802130][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 256.812211][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 256.821248][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 256.990689][ T5738] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 257.179255][ T7952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.190525][ T7952] kvm: user requested TSC rate below hardware speed [ 257.207413][ T5738] usb 4-1: device descriptor read/8, error -71 [ 257.400780][ T804] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 257.612804][ T804] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 257.643824][ T804] usb 5-1: config 0 has no interface number 0 [ 257.676257][ T804] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 257.993752][ T11] block nbd6: Possible stuck request ffff888027c20000: control (read@0,1024B). Runtime 30 seconds [ 258.004477][ T11] block nbd6: Possible stuck request ffff888027c201c0: control (read@1024,1024B). Runtime 30 seconds [ 258.015476][ T11] block nbd6: Possible stuck request ffff888027c20380: control (read@2048,1024B). Runtime 30 seconds [ 258.026407][ T11] block nbd6: Possible stuck request ffff888027c20540: control (read@3072,1024B). Runtime 30 seconds [ 258.103893][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.161797][ T804] usb 5-1: Product: syz [ 258.187898][ T804] usb 5-1: Manufacturer: syz [ 258.214929][ T804] usb 5-1: SerialNumber: syz [ 258.248419][ T804] usb 5-1: config 0 descriptor?? [ 258.317968][ T7967] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 258.490303][ T804] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 258.508965][ T804] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 258.526745][ T804] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 258.565822][ T7967] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 258.600754][ T804] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 258.618523][ T30] audit: type=1400 audit(1778800201.136:717): avc: denied { bind } for pid=7971 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 258.643866][ T30] audit: type=1400 audit(1778800201.166:718): avc: denied { write } for pid=7971 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 258.668635][ T804] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 258.699653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 258.714142][ T7969] vxcan1 speed is unknown, defaulting to 1000 [ 258.750536][ T30] audit: type=1400 audit(1778800201.216:719): avc: denied { setopt } for pid=7971 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 259.302437][ T24] usb 5-1: USB disconnect, device number 10 [ 259.322949][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 259.345838][ T24] keyspan 5-1:0.133: device disconnected [ 260.619027][ T7992] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 262.240091][ T8000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.251482][ T8000] kvm: user requested TSC rate below hardware speed [ 262.791190][ T8003] kvm: user requested TSC rate below hardware speed [ 264.580958][ T8020] syz.1.492 (8020): drop_caches: 2 [ 264.802644][ T8020] syz.1.492 (8020): drop_caches: 2 [ 265.609968][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 266.412826][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 266.431306][ T8047] bond1: option mode: unable to set because the bond device has slaves [ 266.450262][ T8047] ipt_ECN: cannot use operation on non-tcp rule [ 266.998567][ T30] audit: type=1400 audit(1778800209.516:720): avc: denied { mount } for pid=8063 comm="syz.3.504" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 267.135017][ T804] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 267.469524][ T30] audit: type=1400 audit(1778800209.856:721): avc: denied { mounton } for pid=8063 comm="syz.3.504" path="/91/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 267.531480][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 267.767360][ T8058] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 268.438716][ T30] audit: type=1400 audit(1778800210.696:722): avc: denied { unmount } for pid=5623 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 268.509373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 268.544136][ T804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 268.557259][ T804] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 268.572230][ T804] usb 3-1: string descriptor 0 read error: -22 [ 268.578890][ T804] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 268.588458][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.066316][ T804] snd-ua101 3-1:1.0: invalid num_altsetting [ 269.159445][ T5738] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 269.213515][ T8082] vxcan1 speed is unknown, defaulting to 1000 [ 269.263902][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 269.291698][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 269.309417][ T5738] usb 6-1: Using ep0 maxpacket: 8 [ 269.318948][ T5738] usb 6-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 269.332925][ T8047] netlink: 'syz.2.501': attribute type 10 has an invalid length. [ 269.339396][ T5738] usb 6-1: config 1 interface 0 altsetting 11 endpoint 0x2 has an invalid bInterval 30, changing to 8 [ 269.341028][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.359182][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.367555][ T5738] usb 6-1: config 1 interface 0 has no altsetting 0 [ 269.381563][ T5738] usb 6-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.40 [ 269.399449][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.409435][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 269.456806][ T5738] usb 6-1: Product: ဌ [ 269.470003][ T5738] usb 6-1: Manufacturer: ̼ẗ靺ڷ痪᢭㴍덤汇磸ඃ굧쁩㨩聤㌛ၿ䡪癭ؖ蘰즫祷㊠徭䊥쯣짫隕ྪ㴹ṉ땘鹣锡穕꣤䊤驔確냉␕ퟬ漌⦮k밾ꄻ☄쉇꫊㖿൹꺯꽐ᡈ㐁 [ 269.517869][ T5738] usb 6-1: SerialNumber: syz [ 269.552227][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.629975][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.667100][ T10] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 269.676692][ T10] usb 5-1: config 0 has no interface number 0 [ 269.688500][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 269.691418][ T804] usb 3-1: USB disconnect, device number 15 [ 269.697816][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.711681][ T10] usb 5-1: Product: syz [ 269.718103][ T10] usb 5-1: Manufacturer: syz [ 269.723858][ T10] usb 5-1: SerialNumber: syz [ 269.779883][ T8087] PKCS7: Unknown OID: [4] 0.0 [ 269.784605][ T8087] PKCS7: Only support pkcs7_signedData type [ 270.156248][ T10] usb 5-1: config 0 descriptor?? [ 270.201591][ T5738] usbhid 6-1:1.0: can't add hid device: -71 [ 270.232071][ T5738] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 270.255918][ T5738] usb 6-1: USB disconnect, device number 5 [ 270.535945][ T10] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 270.568572][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 270.627024][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 270.635189][ T2690] block nbd3: Possible stuck request ffff888027aa7000: control (read@0,1024B). Runtime 90 seconds [ 270.688711][ T2690] block nbd3: Possible stuck request ffff888027aa71c0: control (read@1024,1024B). Runtime 90 seconds [ 270.693450][ T10] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 270.699849][ T2690] block nbd3: Possible stuck request ffff888027aa7380: control (read@2048,1024B). Runtime 90 seconds [ 270.743261][ T2690] block nbd3: Possible stuck request ffff888027aa7540: control (read@3072,1024B). Runtime 90 seconds [ 270.859433][ T8099] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 270.867698][ T8099] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 271.161800][ T10] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 271.343372][ T8107] syz.1.515 (8107): drop_caches: 2 [ 271.360984][ T8107] syz.1.515 (8107): drop_caches: 2 [ 271.858780][ T10] usb 5-1: USB disconnect, device number 11 [ 272.450437][ T8099] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 272.558297][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 272.909176][ T10] keyspan 5-1:0.133: device disconnected [ 273.675319][ T5709] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 273.819532][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 274.084724][ T11] block nbd0: Possible stuck request ffff8880279e0000: control (read@0,1024B). Runtime 150 seconds [ 274.104737][ T11] block nbd0: Possible stuck request ffff8880279e01c0: control (read@1024,1024B). Runtime 150 seconds [ 274.117364][ T11] block nbd0: Possible stuck request ffff8880279e0380: control (read@2048,1024B). Runtime 150 seconds [ 274.129469][ T11] block nbd0: Possible stuck request ffff8880279e0540: control (read@3072,1024B). Runtime 150 seconds [ 274.201917][ T5709] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 274.211141][ T5709] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 274.221511][ T5709] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 274.231134][ T5709] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 274.242288][ T5709] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 274.255446][ T5709] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 274.264854][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 274.273251][ T5709] usb 6-1: Product: syz [ 274.277705][ T5709] usb 6-1: Manufacturer: syz [ 274.361428][ T5709] cdc_wdm 6-1:1.0: skipping garbage [ 274.430446][ T8131] PKCS7: Unknown OID: [4] 0.0 [ 274.435161][ T8131] PKCS7: Only support pkcs7_signedData type [ 274.805410][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.836525][ T5709] cdc_wdm 6-1:1.0: skipping garbage [ 274.855825][ T5709] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 274.863298][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.874326][ T5709] cdc_wdm 6-1:1.0: Unknown control protocol [ 274.880383][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 274.904642][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.941744][ T9] usb 2-1: config 0 descriptor?? [ 275.017746][ T8133] vxcan1 speed is unknown, defaulting to 1000 [ 275.110183][ T11] block nbd7: Possible stuck request ffff888027c57000: control (read@0,1024B). Runtime 30 seconds [ 275.114357][ T8136] FAULT_INJECTION: forcing a failure. [ 275.114357][ T8136] name failslab, interval 1, probability 0, space 0, times 0 [ 275.121013][ T11] block nbd7: Possible stuck request ffff888027c571c0: control (read@1024,1024B). Runtime 30 seconds [ 275.133753][ T8136] CPU: 1 UID: 0 PID: 8136 Comm: syz.4.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.133776][ T8136] Tainted: [L]=SOFTLOCKUP [ 275.133781][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.133790][ T8136] Call Trace: [ 275.133796][ T8136] [ 275.133801][ T8136] dump_stack_lvl+0x100/0x190 [ 275.133825][ T8136] should_fail_ex.cold+0x5/0xa [ 275.133846][ T8136] ? alloc_pipe_info+0x1ec/0x590 [ 275.133865][ T8136] should_failslab+0xc2/0x120 [ 275.133883][ T8136] __kmalloc_noprof+0xe0/0x850 [ 275.133909][ T8136] alloc_pipe_info+0x1ec/0x590 [ 275.133931][ T8136] splice_direct_to_actor+0x78f/0xa30 [ 275.133954][ T8136] ? __pfx_direct_splice_actor+0x10/0x10 [ 275.133974][ T8136] ? inode_has_perm+0x16d/0x1d0 [ 275.133992][ T8136] ? __file_has_perm+0x336/0x460 [ 275.134010][ T8136] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 275.134030][ T8136] ? __pfx___file_has_perm+0x10/0x10 [ 275.134053][ T8136] do_splice_direct+0x174/0x240 [ 275.134073][ T8136] ? __pfx_do_splice_direct+0x10/0x10 [ 275.134094][ T8136] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 275.134114][ T8136] ? bpf_lsm_file_permission+0x9/0x10 [ 275.134129][ T8136] ? security_file_permission+0x76/0x210 [ 275.134150][ T8136] ? rw_verify_area+0xce/0x6d0 [ 275.134167][ T8136] do_sendfile+0xadc/0xe20 [ 275.134187][ T8136] ? __pfx_do_sendfile+0x10/0x10 [ 275.134203][ T8136] ? __fget_files+0x21f/0x3d0 [ 275.134227][ T8136] __x64_sys_sendfile64+0x1d8/0x220 [ 275.134246][ T8136] ? ksys_write+0x1ac/0x250 [ 275.134262][ T8136] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 275.134284][ T8136] ? rcu_is_watching+0x12/0xc0 [ 275.134310][ T8136] do_syscall_64+0x10b/0xf80 [ 275.134329][ T8136] ? clear_bhb_loop+0x40/0x90 [ 275.134347][ T8136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.134362][ T8136] RIP: 0033:0x7f49efd9ce59 [ 275.134376][ T8136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.134391][ T8136] RSP: 002b:00007f49f0c9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 275.134406][ T8136] RAX: ffffffffffffffda RBX: 00007f49f0015fa0 RCX: 00007f49efd9ce59 [ 275.134421][ T8136] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 275.134429][ T8136] RBP: 00007f49f0c9a090 R08: 0000000000000000 R09: 0000000000000000 [ 275.134438][ T8136] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 275.134447][ T8136] R13: 00007f49f0016038 R14: 00007f49f0015fa0 R15: 00007ffd264ffb78 [ 275.134467][ T8136] [ 275.395480][ T11] block nbd7: Possible stuck request ffff888027c57380: control (read@2048,1024B). Runtime 30 seconds [ 275.406440][ T11] block nbd7: Possible stuck request ffff888027c57540: control (read@3072,1024B). Runtime 30 seconds [ 275.421544][ T30] audit: type=1400 audit(1778800217.926:723): avc: denied { read write } for pid=8120 comm="syz.5.517" name="cdc-wdm0" dev="devtmpfs" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 275.566685][ T30] audit: type=1400 audit(1778800217.926:724): avc: denied { open } for pid=8120 comm="syz.5.517" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 275.672452][ T30] audit: type=1400 audit(1778800218.176:725): avc: denied { bind } for pid=8122 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 275.769849][ T30] audit: type=1400 audit(1778800218.246:726): avc: denied { write } for pid=8122 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.790510][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 275.832745][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.876386][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.901942][ T8149] binder: 8147:8149 ioctl c0306201 200000000040 returned -14 [ 276.051259][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 276.074962][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 276.114193][ T9] usb 2-1: USB disconnect, device number 19 [ 276.383202][ T8159] hub 8-0:1.0: USB hub found [ 276.388657][ T8159] hub 8-0:1.0: 1 port detected [ 276.424515][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 276.816841][ T9] usb 6-1: USB disconnect, device number 6 [ 276.914257][ T24] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 276.951700][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.982335][ T24] usb 5-1: config 0 descriptor?? [ 277.492145][ T24] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 277.964925][ T24] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 277.984627][ T24] [drm] Initialized udl on minor 2 [ 278.549506][ T8180] PKCS7: Unknown OID: [4] 0.0 [ 278.554633][ T8180] PKCS7: Only support pkcs7_signedData type [ 278.840983][ T24] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 2 failed err ffffffb9 [ 278.951266][ T11] block nbd5: Possible stuck request ffff888027bf0000: control (read@0,1024B). Runtime 60 seconds [ 278.952554][ T24] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 278.962461][ T11] block nbd5: Possible stuck request ffff888027bf01c0: control (read@1024,1024B). Runtime 60 seconds [ 278.962491][ T11] block nbd5: Possible stuck request ffff888027bf0380: control (read@2048,1024B). Runtime 60 seconds [ 278.962514][ T11] block nbd5: Possible stuck request ffff888027bf0540: control (read@3072,1024B). Runtime 60 seconds [ 279.122189][ T30] audit: type=1400 audit(1778800221.646:727): avc: denied { watch watch_reads } for pid=8183 comm="syz.5.534" path="/18" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 279.229167][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.237983][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.245896][ T24] usb 5-1: USB disconnect, device number 12 [ 279.276437][ T5817] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 279.369182][ T8191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.536'. [ 279.408260][ T30] audit: type=1326 audit(1778800221.926:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.5.534" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa333b9ce59 code=0x0 [ 279.747549][ T5613] Bluetooth: hci3: unexpected event for opcode 0x6c2f [ 280.026425][ T8202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.539'. [ 280.200083][ T8204] loop5: detected capacity change from 0 to 7 [ 280.215007][ T30] audit: type=1400 audit(1778800222.716:729): avc: denied { append } for pid=8203 comm="syz.2.541" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.247549][ T8204] loop5: p1 p3 p4 [ 280.255164][ T8204] loop5: partition table partially beyond EOD, truncated [ 280.284768][ T8204] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 280.509608][ T5709] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 280.518897][ T8210] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 280.519406][ T804] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 280.535170][ T8210] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 280.777593][ T5709] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.804469][ T5709] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 280.858134][ T5709] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.912526][ T5709] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 280.960766][ T5709] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 281.061824][ T5709] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.101465][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.162771][ T5709] usb 6-1: Product: syz [ 281.193531][ T5709] usb 6-1: Manufacturer: syz [ 281.387164][ T8210] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 281.465339][ T5709] cdc_wdm 6-1:1.0: skipping garbage [ 281.556745][ T5709] cdc_wdm 6-1:1.0: skipping garbage [ 282.088495][ T8215] vxcan1 speed is unknown, defaulting to 1000 [ 282.108521][ T5709] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 282.195552][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 282.269084][ T8225] hub 8-0:1.0: USB hub found [ 282.274830][ T8225] hub 8-0:1.0: 1 port detected [ 282.555763][ T5709] cdc_wdm 6-1:1.0: Unknown control protocol [ 282.635879][ T30] audit: type=1400 audit(1778800225.156:730): avc: denied { bind } for pid=8203 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 282.655505][ T8204] input: syz0 as /devices/virtual/input/input15 [ 282.670458][ T30] audit: type=1400 audit(1778800225.156:731): avc: denied { node_bind } for pid=8203 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 282.772696][ T8227] netlink: 156 bytes leftover after parsing attributes in process `syz.4.545'. [ 282.822767][ T8227] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 283.164208][ T8232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.438313][ T10] usb 6-1: USB disconnect, device number 7 [ 284.750792][ T804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 284.759723][ T804] usb 3-1: no configurations [ 284.764445][ T804] usb 3-1: can't read configurations, error -22 [ 284.767362][ T4979] loop5: p1 p3 p4 [ 284.786452][ T4979] loop5: partition table partially beyond EOD, truncated [ 284.997187][ T4979] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 285.444995][ T5636] udevd[5636]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 285.446760][ T5638] udevd[5638]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 285.459032][ T7903] udevd[7903]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 285.484113][ T8247] input: syz0 as /devices/virtual/input/input16 [ 286.209369][ T8255] hub 8-0:1.0: USB hub found [ 286.215608][ T8255] hub 8-0:1.0: 1 port detected [ 287.116753][ T8251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.551'. [ 287.257193][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 287.285127][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 288.019502][ T8275] PKCS7: Unknown OID: [4] 0.0 [ 288.024255][ T8275] PKCS7: Only support pkcs7_signedData type [ 288.555120][ T11] block nbd6: Possible stuck request ffff888027c20000: control (read@0,1024B). Runtime 60 seconds [ 288.566032][ T11] block nbd6: Possible stuck request ffff888027c201c0: control (read@1024,1024B). Runtime 60 seconds [ 288.576978][ T11] block nbd6: Possible stuck request ffff888027c20380: control (read@2048,1024B). Runtime 60 seconds [ 288.588417][ T11] block nbd6: Possible stuck request ffff888027c20540: control (read@3072,1024B). Runtime 60 seconds [ 288.813117][ T30] audit: type=1400 audit(1778800231.336:732): avc: denied { ioctl } for pid=8280 comm="syz.2.557" path="socket:[21449]" dev="sockfs" ino=21449 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.839841][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 288.975967][ T8292] vivid-004: disconnect [ 289.123622][ T8294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.275949][ T8282] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 289.299098][ T8282] macvlan2: entered allmulticast mode [ 289.356413][ T8282] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 289.517310][ T8306] vivid-003: disconnect [ 289.644843][ T8288] vivid-004: reconnect [ 289.759374][ T8307] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 289.893405][ T8292] tap0: tun_chr_ioctl cmd 1074025677 [ 289.904342][ T8292] tap0: linktype set to 804 [ 290.007698][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 290.096126][ T8296] vivid-003: reconnect [ 291.033816][ T8306] tap0: tun_chr_ioctl cmd 1074025677 [ 291.044935][ T8306] tap0: linktype set to 804 [ 292.269442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 293.025827][ T8336] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 293.036080][ T8327] vxcan1 speed is unknown, defaulting to 1000 [ 293.347150][ T8336] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 293.522014][ T8346] team0: entered allmulticast mode [ 293.527249][ T8346] team_slave_0: entered allmulticast mode [ 293.533082][ T8346] team_slave_1: entered allmulticast mode [ 293.539593][ T8346] netlink: 32 bytes leftover after parsing attributes in process `syz.1.570'. [ 293.548594][ T8346] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 293.992376][ T30] audit: type=1400 audit(1778800236.516:733): avc: denied { write } for pid=8318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.121083][ T30] audit: type=1400 audit(1778800236.616:734): avc: denied { write } for pid=8354 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.783941][ T30] audit: type=1400 audit(1778800238.306:735): avc: denied { write } for pid=8364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.418411][ T30] audit: type=1400 audit(1778800238.936:736): avc: denied { write } for pid=8391 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.660277][ T8397] netlink: 14 bytes leftover after parsing attributes in process `syz.1.576'. [ 297.229647][ T804] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 297.311701][ T82] Bluetooth: hci6: Frame reassembly failed (-84) [ 297.419467][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 297.446055][ T804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 297.792168][ T804] usb 4-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 297.811213][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.819263][ T804] usb 4-1: Product: syz [ 297.822329][ T8414] tap0: tun_chr_ioctl cmd 1074025677 [ 297.824770][ T804] usb 4-1: Manufacturer: syz [ 297.829934][ T8416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.835132][ T804] usb 4-1: SerialNumber: syz [ 297.846588][ T8414] tap0: linktype set to 804 [ 297.918611][ T8417] vivid-004: disconnect [ 297.931635][ T8417] tap0: tun_chr_ioctl cmd 1074025677 [ 297.939832][ T8417] tap0: linktype set to 804 [ 298.395443][ T804] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 298.439709][ T804] usb 4-1: MIDIStreaming interface descriptor not found [ 298.451179][ T8413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.477305][ T8412] vivid-004: reconnect [ 298.663536][ T804] usb 4-1: USB disconnect, device number 25 [ 299.292117][ T5613] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 299.439067][ T8281] Set syz1 is full, maxelem 65536 reached [ 299.482776][ T8428] nbd8: detected capacity change from 0 to 63 [ 299.509653][ T8430] nbd: must specify an index to disconnect [ 299.518635][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.563610][ T8437] vxcan1 speed is unknown, defaulting to 1000 [ 299.699543][ T30] audit: type=1400 audit(1778800242.216:737): avc: denied { read } for pid=8441 comm="syz.3.590" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 299.947334][ T30] audit: type=1400 audit(1778800242.466:738): avc: denied { create } for pid=8441 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 299.986508][ T804] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 300.051167][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 300.170940][ T8445] fuse: Unknown parameter '0x0000000000000003' [ 300.350887][ T10] usb 3-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 300.361651][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 300.371210][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.388226][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.406194][ T5613] block nbd8: Receive control failed (result -104) [ 300.409668][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.918605][ T2690] block nbd3: Possible stuck request ffff888027aa7000: control (read@0,1024B). Runtime 120 seconds [ 300.929394][ T2690] block nbd3: Possible stuck request ffff888027aa71c0: control (read@1024,1024B). Runtime 120 seconds [ 300.940361][ T2690] block nbd3: Possible stuck request ffff888027aa7380: control (read@2048,1024B). Runtime 120 seconds [ 300.951759][ T2690] block nbd3: Possible stuck request ffff888027aa7540: control (read@3072,1024B). Runtime 120 seconds [ 300.990199][ T10] usb 3-1: Product: syz [ 301.008772][ T10] usb 3-1: Manufacturer: syz [ 301.032826][ T10] usb 3-1: SerialNumber: syz [ 301.154172][ T10] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 301.169782][ T10] cdc_mbim 3-1:1.0: bind() failure [ 301.482724][ T8449] overlayfs: workdir and upperdir must reside under the same mount [ 301.657576][ T10] usb 3-1: USB disconnect, device number 18 [ 301.844692][ T8475] FAULT_INJECTION: forcing a failure. [ 301.844692][ T8475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.878772][ T8475] CPU: 1 UID: 0 PID: 8475 Comm: syz.3.597 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.878795][ T8475] Tainted: [L]=SOFTLOCKUP [ 301.878798][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.878805][ T8475] Call Trace: [ 301.878808][ T8475] [ 301.878813][ T8475] dump_stack_lvl+0x100/0x190 [ 301.878829][ T8475] should_fail_ex.cold+0x5/0xa [ 301.878844][ T8475] _copy_to_user+0x32/0xd0 [ 301.878862][ T8475] simple_read_from_buffer+0xcb/0x170 [ 301.878877][ T8475] proc_fail_nth_read+0x1af/0x230 [ 301.878890][ T8475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.878902][ T8475] ? rw_verify_area+0xce/0x6d0 [ 301.878912][ T8475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.878923][ T8475] vfs_read+0x1e4/0xb30 [ 301.878937][ T8475] ? __pfx_vfs_read+0x10/0x10 [ 301.878947][ T8475] ? __fget_files+0x215/0x3d0 [ 301.878964][ T8475] ? __fget_files+0x21f/0x3d0 [ 301.878981][ T8475] ksys_read+0x12a/0x250 [ 301.878992][ T8475] ? __pfx_ksys_read+0x10/0x10 [ 301.879004][ T8475] ? rcu_is_watching+0x12/0xc0 [ 301.879023][ T8475] do_syscall_64+0x10b/0xf80 [ 301.879038][ T8475] ? clear_bhb_loop+0x40/0x90 [ 301.879051][ T8475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.879061][ T8475] RIP: 0033:0x7f18de55d68e [ 301.879075][ T8475] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.879090][ T8475] RSP: 002b:00007f18df3affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.879107][ T8475] RAX: ffffffffffffffda RBX: 00007f18df3b06c0 RCX: 00007f18de55d68e [ 301.879113][ T8475] RDX: 000000000000000f RSI: 00007f18df3b00a0 RDI: 0000000000000009 [ 301.879119][ T8475] RBP: 00007f18df3b0090 R08: 0000000000000000 R09: 0000000000000000 [ 301.879125][ T8475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.879131][ T8475] R13: 00007f18de816218 R14: 00007f18de816180 R15: 00007fff569878f8 [ 301.879145][ T8475] [ 302.134852][ T30] audit: type=1400 audit(1778800244.656:739): avc: denied { bind } for pid=8476 comm="syz.5.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 302.835019][ T804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 302.853347][ T804] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 302.872225][ T804] usb 5-1: can't read configurations, error -71 [ 302.987251][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 302.999736][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 303.059141][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 303.164511][ T6282] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.169158][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 303.186305][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.209870][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.728871][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 303.731495][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.761315][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 303.968056][ T8510] kvm: user requested TSC rate below hardware speed [ 304.282548][ T8517] hub 8-0:1.0: USB hub found [ 304.288027][ T8517] hub 8-0:1.0: 1 port detected [ 304.629569][ T11] block nbd0: Possible stuck request ffff8880279e0000: control (read@0,1024B). Runtime 180 seconds [ 304.641897][ T11] block nbd0: Possible stuck request ffff8880279e01c0: control (read@1024,1024B). Runtime 180 seconds [ 304.653148][ T11] block nbd0: Possible stuck request ffff8880279e0380: control (read@2048,1024B). Runtime 180 seconds [ 304.664414][ T11] block nbd0: Possible stuck request ffff8880279e0540: control (read@3072,1024B). Runtime 180 seconds [ 304.716183][ T8519] [U]  [ 304.979538][ T5817] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 305.188797][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 305.198541][ T11] block nbd7: Possible stuck request ffff888027c57000: control (read@0,1024B). Runtime 60 seconds [ 305.209680][ T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 305.382382][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.416571][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 305.440252][ T11] block nbd7: Possible stuck request ffff888027c571c0: control (read@1024,1024B). Runtime 60 seconds [ 305.452268][ T11] block nbd7: Possible stuck request ffff888027c57380: control (read@2048,1024B). Runtime 60 seconds [ 305.470406][ T11] block nbd7: Possible stuck request ffff888027c57540: control (read@3072,1024B). Runtime 60 seconds [ 305.492085][ T10] usb 4-1: config 7 has an invalid interface number: 229 but max is 0 [ 305.511934][ T10] usb 4-1: config 7 has no interface number 0 [ 305.518613][ T10] usb 4-1: config 7 interface 229 altsetting 28 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 305.531308][ T10] usb 4-1: config 7 interface 229 has no altsetting 0 [ 305.541088][ T5817] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 305.543054][ T10] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=1a.d5 [ 305.558682][ T5817] usb 5-1: config 0 has no interface number 0 [ 305.558783][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.574326][ T10] usb 4-1: Product: syz [ 305.579709][ T10] usb 4-1: Manufacturer: syz [ 305.594519][ T10] usb 4-1: SerialNumber: syz [ 305.597511][ T5817] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 305.632476][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.634384][ T8525] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 305.651171][ T5817] usb 5-1: Product: syz [ 305.662914][ T5817] usb 5-1: Manufacturer: syz [ 305.667683][ T5817] usb 5-1: SerialNumber: syz [ 305.697972][ T5817] usb 5-1: config 0 descriptor?? [ 305.736477][ T8536] use of bytesused == 0 is deprecated and will be removed in the future, [ 305.745334][ T8536] use the actual size instead. [ 305.941008][ T10] radio-si470x 4-1:7.229: could not find interrupt in endpoint [ 305.949594][ T10] radio-si470x 4-1:7.229: probe with driver radio-si470x failed with error -5 [ 305.962452][ T10] usbhid 4-1:7.229: couldn't find an input interrupt endpoint [ 305.981188][ T10] usb 4-1: USB disconnect, device number 26 [ 306.183362][ T30] audit: type=1400 audit(1778800248.696:740): avc: denied { create } for pid=8542 comm="syz.5.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 306.337598][ T30] audit: type=1400 audit(1778800248.816:741): avc: denied { ioctl } for pid=8542 comm="syz.5.620" path="socket:[22308]" dev="sockfs" ino=22308 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 306.455015][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.5.620'. [ 307.176463][ T8553] rdma_op ffff88805345a9f0 conn xmit_rdma 0000000000000000 [ 307.185065][ T30] audit: type=1400 audit(1778800249.696:742): avc: denied { write } for pid=8548 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.530452][ T5817] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 307.559594][ T5817] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 307.595001][ T5817] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 307.624454][ T5817] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 308.136045][ T30] audit: type=1400 audit(1778800250.326:743): avc: denied { bind } for pid=8560 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.201141][ T5817] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 308.229440][ T5709] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 308.248662][ T5817] usb 5-1: USB disconnect, device number 15 [ 308.276577][ T5817] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 308.331109][ T30] audit: type=1400 audit(1778800250.856:744): avc: denied { ioctl } for pid=8570 comm="syz.2.629" path="socket:[22948]" dev="sockfs" ino=22948 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 308.426437][ T5817] keyspan 5-1:0.133: device disconnected [ 308.449427][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 308.458173][ T5709] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 308.908499][ T5723] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 308.923129][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 308.943204][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 308.970884][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 308.989712][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 309.006544][ T5709] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 309.019553][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.027620][ T5709] usb 4-1: Product: syz [ 309.037002][ T11] block nbd5: Possible stuck request ffff888027bf0000: control (read@0,1024B). Runtime 90 seconds [ 309.047734][ T11] block nbd5: Possible stuck request ffff888027bf01c0: control (read@1024,1024B). Runtime 90 seconds [ 309.058836][ T11] block nbd5: Possible stuck request ffff888027bf0380: control (read@2048,1024B). Runtime 90 seconds [ 309.071314][ T11] block nbd5: Possible stuck request ffff888027bf0540: control (read@3072,1024B). Runtime 90 seconds [ 309.082461][ T5709] usb 4-1: Manufacturer: syz [ 309.087145][ T5709] usb 4-1: SerialNumber: syz [ 309.091837][ T5723] usb 6-1: Using ep0 maxpacket: 16 [ 309.102897][ T8574] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 309.113262][ T5723] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 309.124637][ T5723] usb 6-1: config 0 has no interface number 0 [ 309.139199][ T5723] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 309.152787][ T5709] usb 4-1: config 0 descriptor?? [ 309.164557][ T5723] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 309.666736][ T5723] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 309.677169][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.685826][ T5723] usb 6-1: Product: syz [ 309.690304][ T5723] usb 6-1: Manufacturer: syz [ 309.694961][ T5723] usb 6-1: SerialNumber: syz [ 309.702544][ T5723] usb 6-1: config 0 descriptor?? [ 309.711837][ T8567] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 309.719186][ T8567] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 309.898658][ T5709] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 309.907844][ T5709] input input17: Device does not respond to id packet M [ 309.916181][ T5709] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 309.927055][ T5709] input input17: Device does not respond to id packet P [ 309.956886][ T8567] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 309.964216][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 309.987639][ T8567] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 310.129415][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 310.139177][ T5709] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 310.154521][ T10] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 310.270324][ T5709] input input17: Device does not respond to id packet N [ 310.283219][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.299536][ T5709] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 310.308732][ T5709] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 310.319615][ T10] usb 5-1: config 0 has no interface number 0 [ 310.810344][ T5709] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 310.816592][ T10] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 310.825907][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.834207][ T5709] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 310.845941][ T5709] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 310.859145][ T10] usb 5-1: Product: syz [ 310.866090][ T10] usb 5-1: Manufacturer: syz [ 310.878051][ T10] usb 5-1: SerialNumber: syz [ 310.896249][ T5709] usb 4-1: USB disconnect, device number 27 [ 310.909017][ T10] usb 5-1: config 0 descriptor?? [ 311.083728][ T10] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 311.163440][ T5709] usb 5-1: USB disconnect, device number 16 [ 311.185644][ T30] audit: type=1400 audit(1778800253.706:745): avc: denied { getopt } for pid=8601 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.890496][ T10] libceph: connect (1)[c::]:6789 error -101 [ 311.900788][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 311.991912][ T8610] ceph: No mds server is up or the cluster is laggy [ 313.098928][ T5723] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 313.167343][ T5723] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 313.199416][ T8629] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 313.220543][ T5723] asix 6-1:0.34: probe with driver asix failed with error -71 [ 313.278201][ T5723] usb 6-1: USB disconnect, device number 8 [ 313.349195][ T8633] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 313.376903][ T8636] binder: 8635:8636 ioctl 40087447 200000000300 returned -22 [ 313.389240][ T30] audit: type=1400 audit(1778800255.916:746): avc: denied { call } for pid=8635 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 313.432096][ T30] audit: type=1400 audit(1778800255.916:747): avc: denied { transfer } for pid=8635 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 313.470128][ T8629] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 313.564548][ T30] audit: type=1400 audit(1778800256.086:748): avc: denied { write } for pid=8637 comm="syz.5.649" path="socket:[23005]" dev="sockfs" ino=23005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.703237][ T30] audit: type=1400 audit(1778800256.226:749): avc: denied { write } for pid=8639 comm="syz.3.650" name="file1" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 threaded./file0/file1[ 313.748299][ T30] audit: type=1400 audit(1778800256.246:750): avc: denied { open } for pid=8639 comm="syz.3.650" path="/119/file0/file1" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1  @   /dev/fusefd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)̆@s [ 314.230833][ T5617] Bluetooth: hci6: command 0x1003 tx timeout [ 314.260765][ T5613] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 314.406765][ T8651] fuse: Bad value for 'fd' [ 315.865090][ T30] audit: type=1400 audit(1778800258.376:751): avc: denied { ioctl } for pid=8672 comm="syz.4.660" path="socket:[22498]" dev="sockfs" ino=22498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.484981][ T30] audit: type=1400 audit(1778800258.976:752): avc: denied { connect } for pid=8678 comm="syz.5.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 316.792209][ T30] audit: type=1400 audit(1778800258.986:753): avc: denied { write } for pid=8678 comm="syz.5.661" path="socket:[22512]" dev="sockfs" ino=22512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 318.183937][ T5613] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 318.608555][ T8719] netlink: 156 bytes leftover after parsing attributes in process `syz.3.678'. [ 318.635662][ T11] block nbd6: Possible stuck request ffff888027c20000: control (read@0,1024B). Runtime 90 seconds [ 318.688982][ T11] block nbd6: Possible stuck request ffff888027c201c0: control (read@1024,1024B). Runtime 90 seconds [ 318.818322][ T8719] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 318.826186][ T11] block nbd6: Possible stuck request ffff888027c20380: control (read@2048,1024B). Runtime 90 seconds [ 318.837124][ T11] block nbd6: Possible stuck request ffff888027c20540: control (read@3072,1024B). Runtime 90 seconds [ 320.357383][ T5817] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 322.594275][ T4979] udevd[4979]: worker [6639] /devices/virtual/block/nbd3 is taking a long time [ 322.888043][ T4979] udevd[4979]: worker [7321] /devices/virtual/block/nbd5 is taking a long time [ 322.910688][ T4979] udevd[4979]: worker [5627] /devices/virtual/block/nbd0 timeout; kill it [ 322.926588][ T4979] udevd[4979]: seq 11273 '/devices/virtual/block/nbd0' killed [ 322.941492][ T4979] udevd[4979]: worker [5619] /devices/virtual/block/nbd6 is taking a long time [ 322.955573][ T4979] udevd[4979]: worker [5630] /devices/virtual/block/nbd7 is taking a long time [ 324.707241][ T8748] kvm: user requested TSC rate below hardware speed [ 324.940551][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 324.964360][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 325.013391][ T82] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.021908][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 325.046979][ T82] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.049449][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 325.074475][ T8756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.093798][ T1323] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.118909][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 325.128286][ T1323] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.147245][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 325.155463][ T8756] kvm: user requested TSC rate below hardware speed [ 325.159513][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 325.329534][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 325.352553][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 325.377901][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.413930][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.448102][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 325.466392][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.484709][ T24] usb 4-1: Product: syz [ 325.492325][ T24] usb 4-1: Manufacturer: syz [ 325.502900][ T24] usb 4-1: SerialNumber: syz [ 325.805793][ T24] usb 4-1: 0:1 : does not exist [ 325.824407][ T8766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.835556][ T8766] kvm: user requested TSC rate below hardware speed [ 325.847891][ T24] usb 4-1: 0:2 : does not exist [ 325.910558][ T24] usb 4-1: USB disconnect, device number 28 [ 326.119652][ T5817] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 326.221949][ T8775] netlink: 156 bytes leftover after parsing attributes in process `syz.4.693'. [ 326.238204][ T8775] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 326.269999][ T5817] usb 6-1: device descriptor read/64, error -71 [ 328.650294][ T5817] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 328.689042][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 328.704212][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 328.796469][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 328.809994][ T5817] usb 6-1: device descriptor read/64, error -71 [ 329.358368][ T29] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 329.367117][ T5817] usb usb6-port1: attempt power cycle [ 329.520727][ T29] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 329.539437][ T29] usb 4-1: config 0 has no interface number 0 [ 329.567826][ T2690] block nbd8: Possible stuck request ffff888027cce000: control (read@0,1024B). Runtime 30 seconds [ 329.578745][ T2690] block nbd8: Possible stuck request ffff888027cce1c0: control (read@1024,1024B). Runtime 30 seconds [ 329.592596][ T2690] block nbd8: Possible stuck request ffff888027cce380: control (read@2048,1024B). Runtime 30 seconds [ 329.608029][ T2690] block nbd8: Possible stuck request ffff888027cce540: control (read@3072,1024B). Runtime 30 seconds [ 329.620082][ T29] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 329.632075][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.640342][ T29] usb 4-1: Product: syz [ 329.659451][ T29] usb 4-1: Manufacturer: syz [ 329.672414][ T29] usb 4-1: SerialNumber: syz [ 329.698041][ T29] usb 4-1: config 0 descriptor?? [ 329.779447][ T5817] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 329.928176][ T8812] hub 8-0:1.0: USB hub found [ 329.933861][ T8812] hub 8-0:1.0: 1 port detected [ 330.252608][ T5817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.270362][ T29] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 330.284038][ T5817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 330.294111][ T29] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 330.310401][ T29] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 330.318334][ T5817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 330.333592][ T29] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 330.343668][ T5817] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 330.355080][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.364706][ T29] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 330.399778][ T8800] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 330.410294][ T5817] hub 6-1:1.0: bad descriptor, ignoring hub [ 330.417305][ T5817] hub 6-1:1.0: probe with driver hub failed with error -5 [ 330.427117][ T5817] cdc_wdm 6-1:1.0: skipping garbage [ 330.433141][ T5817] cdc_wdm 6-1:1.0: skipping garbage [ 330.930196][ T5817] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 330.952622][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 330.959416][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 330.965672][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 330.972244][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 330.979841][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 330.986415][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 330.993839][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 331.000410][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 331.006728][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 331.013296][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 331.019751][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 331.026320][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 331.032623][ T5817] cdc_wdm 6-1:1.0: Unknown control protocol [ 331.038777][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 331.038797][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 331.045642][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 331.045665][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 331.058886][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 331.058912][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 331.113084][ T5817] usb 6-1: USB disconnect, device number 11 [ 331.281342][ T5738] usb 4-1: USB disconnect, device number 29 [ 331.300155][ T5738] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 331.737658][ T5738] keyspan 4-1:0.133: device disconnected [ 331.745208][ T2690] block nbd3: Possible stuck request ffff888027aa7000: control (read@0,1024B). Runtime 150 seconds [ 331.756039][ T2690] block nbd3: Possible stuck request ffff888027aa71c0: control (read@1024,1024B). Runtime 150 seconds [ 331.767012][ T2690] block nbd3: Possible stuck request ffff888027aa7380: control (read@2048,1024B). Runtime 150 seconds [ 331.777970][ T2690] block nbd3: Possible stuck request ffff888027aa7540: control (read@3072,1024B). Runtime 150 seconds [ 331.913665][ T8824] syz2: rxe_newlink: already configured on vxcan1 [ 331.928281][ T30] audit: type=1326 audit(1778800274.446:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.4.707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49efd9ce59 code=0x7ffc0000 [ 331.955248][ T30] audit: type=1326 audit(1778800274.446:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.4.707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f49efd9ce59 code=0x7ffc0000 [ 332.054751][ T30] audit: type=1326 audit(1778800274.446:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.4.707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49efd9ce59 code=0x7ffc0000 [ 332.084603][ T30] audit: type=1326 audit(1778800274.446:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.4.707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f49efd9ce59 code=0x7ffc0000 [ 332.139890][ T30] audit: type=1326 audit(1778800274.446:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.4.707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49efd9ce59 code=0x7ffc0000 [ 332.241823][ T30] audit: type=1326 audit(1778800274.446:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.4.707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f49efd9ce59 code=0x7ffc0000 [ 332.343872][ T30] audit: type=1326 audit(1778800274.446:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.4.707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49efd9ce59 code=0x7ffc0000 [ 332.454733][ T8835] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 332.457972][ T30] audit: type=1326 audit(1778800274.446:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.4.707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f49efd9ce59 code=0x7ffc0000 [ 332.608411][ T5817] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 332.630369][ T30] audit: type=1326 audit(1778800274.446:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.4.707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49efd9ce59 code=0x7ffc0000 [ 332.799438][ T5817] usb 6-1: device descriptor read/64, error -71 [ 333.099656][ T5817] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 333.379790][ T8851] hub 8-0:1.0: USB hub found [ 333.385271][ T8851] hub 8-0:1.0: 1 port detected [ 333.835304][ T5817] usb 6-1: device descriptor read/64, error -71 [ 334.103867][ T5817] usb usb6-port1: attempt power cycle [ 334.591845][ T5817] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 334.739906][ T5817] usb 6-1: device descriptor read/8, error -71 [ 335.082316][ T5817] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 335.223770][ T5817] usb 6-1: device descriptor read/8, error -71 [ 335.267819][ T30] audit: type=1326 audit(1778800274.446:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.4.707" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49efd9ce59 code=0x7ffc0000 [ 335.297937][ T5885] block nbd7: Possible stuck request ffff888027c57000: control (read@0,1024B). Runtime 90 seconds [ 335.308734][ T11] block nbd0: Possible stuck request ffff8880279e0000: control (read@0,1024B). Runtime 210 seconds [ 335.319674][ T11] block nbd0: Possible stuck request ffff8880279e01c0: control (read@1024,1024B). Runtime 210 seconds [ 335.330743][ T11] block nbd0: Possible stuck request ffff8880279e0380: control (read@2048,1024B). Runtime 210 seconds [ 335.341829][ T11] block nbd0: Possible stuck request ffff8880279e0540: control (read@3072,1024B). Runtime 210 seconds [ 335.459809][ T11] block nbd7: Possible stuck request ffff888027c571c0: control (read@1024,1024B). Runtime 90 seconds [ 335.471081][ T11] block nbd7: Possible stuck request ffff888027c57380: control (read@2048,1024B). Runtime 90 seconds [ 335.473490][ T5817] usb usb6-port1: unable to enumerate USB device [ 335.520525][ T11] block nbd7: Possible stuck request ffff888027c57540: control (read@3072,1024B). Runtime 90 seconds [ 337.376253][ T8883] __nla_validate_parse: 3 callbacks suppressed [ 337.376265][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 337.393814][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 337.466333][ T8884] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 337.484857][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 337.523939][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 337.582764][ T8884] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 337.593383][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 337.629391][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 338.728283][ T8891] batadv_slave_1: entered promiscuous mode [ 338.867380][ T8897] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 338.886617][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 338.886628][ T30] audit: type=1326 audit(1778800281.396:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18de59ce59 code=0x7ffc0000 [ 339.167725][ T11] block nbd5: Possible stuck request ffff888027bf0000: control (read@0,1024B). Runtime 120 seconds [ 339.181302][ T11] block nbd5: Possible stuck request ffff888027bf01c0: control (read@1024,1024B). Runtime 120 seconds [ 339.228147][ T11] block nbd5: Possible stuck request ffff888027bf0380: control (read@2048,1024B). Runtime 120 seconds [ 339.229441][ T5817] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 339.240248][ T11] block nbd5: Possible stuck request ffff888027bf0540: control (read@3072,1024B). Runtime 120 seconds [ 339.282368][ T30] audit: type=1326 audit(1778800281.396:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18de59ce59 code=0x7ffc0000 [ 339.308827][ T30] audit: type=1326 audit(1778800281.396:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f18de59ce59 code=0x7ffc0000 [ 339.336027][ T30] audit: type=1326 audit(1778800281.396:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18de59ce59 code=0x7ffc0000 [ 339.362612][ T30] audit: type=1326 audit(1778800281.396:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18de59ce59 code=0x7ffc0000 [ 339.394320][ T30] audit: type=1326 audit(1778800281.396:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f18de59ce59 code=0x7ffc0000 [ 339.420743][ T30] audit: type=1326 audit(1778800281.396:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18de59ce59 code=0x7ffc0000 [ 339.439422][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 339.449437][ T30] audit: type=1326 audit(1778800281.396:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18de59ce59 code=0x7ffc0000 [ 339.483355][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.498927][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.512883][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.525975][ T5817] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.537359][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.539674][ T30] audit: type=1326 audit(1778800281.396:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f18de59ce59 code=0x7ffc0000 [ 339.573612][ T30] audit: type=1326 audit(1778800281.396:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.3.723" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18de59ce59 code=0x7ffc0000 [ 339.583299][ T5817] usb 2-1: config 0 descriptor?? [ 339.947200][ T8902] syz.3.730 (8902): drop_caches: 2 [ 339.969475][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 340.244641][ T9] usb 3-1: device descriptor read/64, error -71 [ 340.630820][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 340.752984][ T8891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.810379][ T9] usb 3-1: device descriptor read/64, error -71 [ 340.844457][ T8891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.981097][ T9] usb usb3-port1: attempt power cycle [ 341.411268][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 341.501300][ T9] usb 3-1: device descriptor read/8, error -71 [ 341.704961][ T5817] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input18 [ 341.780731][ T5817] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 341.807541][ T8912] vivid-002: disconnect [ 341.809773][ T5817] usb 2-1: USB disconnect, device number 20 [ 341.830304][ T8912] tap0: tun_chr_ioctl cmd 1074025677 [ 341.849139][ T8912] tap0: linktype set to 804 [ 341.920907][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 341.984594][ T9] usb 3-1: device descriptor read/8, error -71 [ 342.070834][ T8912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.289902][ T9] usb usb3-port1: unable to enumerate USB device [ 342.358898][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 342.368006][ T8917] fido_id[8917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 342.406131][ T8911] vivid-002: reconnect [ 342.541037][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 342.550069][ T10] usb 6-1: config 0 has no interfaces? [ 342.556596][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.567208][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.603953][ T10] usb 6-1: Manufacturer: syz [ 342.627888][ T10] usb 6-1: config 0 descriptor?? [ 342.874488][ T8932] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 342.940437][ T8932] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 343.633562][ T9] usb 6-1: USB disconnect, device number 16 [ 344.953619][ T5738] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 345.142182][ T5738] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 345.262429][ T8960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.273040][ T8960] kvm: user requested TSC rate below hardware speed [ 345.308767][ T5738] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.396954][ T5738] usb 6-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 345.408112][ T5738] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 345.435046][ T5738] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.467737][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.502267][ T5738] usb 6-1: Product: syz [ 345.515467][ T5738] usb 6-1: Manufacturer: syz [ 345.526817][ T5738] usb 6-1: SerialNumber: syz [ 345.559724][ T5738] usb 6-1: selecting invalid altsetting 1 [ 345.670862][ T5817] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 345.867707][ T8947] overlayfs: workdir and upperdir must reside under the same mount [ 345.911944][ T5738] cdc_mbim 6-1:1.0: bind() failure [ 345.987059][ T5738] usb 6-1: USB disconnect, device number 17 [ 346.002311][ T5817] usb 4-1: device descriptor read/64, error -71 [ 346.249418][ T5817] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 346.399529][ T5817] usb 4-1: device descriptor read/64, error -71 [ 346.461104][ T8972] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 346.468543][ T8972] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 346.519622][ T5817] usb usb4-port1: attempt power cycle [ 346.675146][ T8982] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 346.728355][ T8982] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 346.910308][ T5817] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 346.937335][ T8972] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 347.002809][ T5817] usb 4-1: device descriptor read/8, error -71 [ 347.293823][ T5817] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 347.446610][ T5817] usb 4-1: device descriptor read/8, error -71 [ 347.641685][ T5817] usb usb4-port1: unable to enumerate USB device [ 347.679524][ T8995] vivid-003: disconnect [ 347.698639][ T8995] tap0: tun_chr_ioctl cmd 1074025677 [ 347.706344][ T8995] tap0: linktype set to 804 [ 347.804383][ T8995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.968669][ T8987] vivid-003: reconnect [ 348.117176][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 348.127267][ T9002] bond1: option mode: unable to set because the bond device is up [ 348.155237][ T9002] ipt_ECN: cannot use operation on non-tcp rule [ 348.729456][ T11] block nbd6: Possible stuck request ffff888027c20000: control (read@0,1024B). Runtime 120 seconds [ 348.869178][ T11] block nbd6: Possible stuck request ffff888027c201c0: control (read@1024,1024B). Runtime 120 seconds [ 348.880296][ T11] block nbd6: Possible stuck request ffff888027c20380: control (read@2048,1024B). Runtime 120 seconds [ 348.891664][ T11] block nbd6: Possible stuck request ffff888027c20540: control (read@3072,1024B). Runtime 120 seconds [ 349.371029][ T5738] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 349.550780][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 349.603800][ T5738] usb 6-1: Using ep0 maxpacket: 16 [ 350.084814][ T5738] usb 6-1: unable to get BOS descriptor or descriptor too short [ 350.097081][ T5738] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 350.110852][ T5738] usb 6-1: string descriptor 0 read error: -22 [ 350.117155][ T5738] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 350.126736][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.150998][ T5738] snd-ua101 6-1:1.0: invalid num_altsetting [ 351.329458][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 351.660077][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 351.806892][ T9036] bond1: option mode: unable to set because the bond device has slaves [ 351.822006][ T9039] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 352.467298][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 352.467315][ T30] audit: type=1400 audit(1778800294.986:794): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 354.603430][ T5817] usb 6-1: USB disconnect, device number 18 [ 354.768716][ T9044] 9p: Bad value for 'wfdno' [ 355.059425][ T5723] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 355.599547][ T5723] usb 2-1: Using ep0 maxpacket: 16 [ 355.633141][ T5723] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.673152][ T5723] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.704110][ T5723] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 355.722582][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.804427][ T5723] usb 2-1: config 0 descriptor?? [ 355.892997][ T9053] Set syz1 is full, maxelem 65536 reached [ 356.140167][ T9047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.212026][ T9047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.348786][ T5817] usb 2-1: USB disconnect, device number 21 [ 356.932996][ T9077] hub 8-0:1.0: USB hub found [ 356.937921][ T9077] hub 8-0:1.0: 1 port detected [ 356.961851][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 357.037415][ T9079] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 358.928640][ T9087] 9p: Bad value for 'rfdno' [ 359.291718][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 359.518360][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.595829][ T2690] block nbd8: Possible stuck request ffff888027cce000: control (read@0,1024B). Runtime 60 seconds [ 359.607031][ T2690] block nbd8: Possible stuck request ffff888027cce1c0: control (read@1024,1024B). Runtime 60 seconds [ 359.654567][ T2690] block nbd8: Possible stuck request ffff888027cce380: control (read@2048,1024B). Runtime 60 seconds [ 359.682632][ T2690] block nbd8: Possible stuck request ffff888027cce540: control (read@3072,1024B). Runtime 60 seconds [ 359.813856][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.862107][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 360.736793][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.758142][ T10] usb 5-1: config 0 descriptor?? [ 360.929409][ T30] audit: type=1400 audit(1778800303.416:795): avc: denied { write } for pid=9093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.044582][ T9125] binder: 9124:9125 ioctl 40087447 200000000300 returned -22 [ 361.524994][ T30] audit: type=1400 audit(1778800303.556:796): avc: denied { write } for pid=9123 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.550807][ T10] usb 5-1: language id specifier not provided by device, defaulting to English [ 361.774390][ T10] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 361.810717][ T10] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 361.828656][ T10] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 361.854241][ T10] usb 5-1: USB disconnect, device number 17 [ 361.860336][ T5723] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 361.899531][ T5738] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 362.029411][ T5723] usb 6-1: Using ep0 maxpacket: 8 [ 362.043632][ T5723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.066848][ T5738] usb 3-1: Using ep0 maxpacket: 16 [ 362.075690][ T5723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.095106][ T5738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.109118][ T5723] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.129854][ T5738] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 362.148190][ T5738] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 362.158295][ T5723] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 362.167745][ T2690] block nbd3: Possible stuck request ffff888027aa7000: control (read@0,1024B). Runtime 180 seconds [ 362.174850][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.186806][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 362.191112][ T2690] block nbd3: Possible stuck request ffff888027aa71c0: control (read@1024,1024B). Runtime 180 seconds [ 362.194643][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.205432][ T2690] block nbd3: Possible stuck request ffff888027aa7380: control (read@2048,1024B). Runtime 180 seconds [ 362.205464][ T2690] block nbd3: Possible stuck request ffff888027aa7540: control (read@3072,1024B). Runtime 180 seconds [ 362.254792][ T30] audit: type=1400 audit(1778800304.776:797): avc: denied { write } for pid=9138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.289295][ T5738] usb 3-1: config 0 descriptor?? [ 362.339710][ T5723] usb 6-1: config 0 descriptor?? [ 362.393540][ T30] audit: type=1400 audit(1778800304.916:798): avc: denied { write } for pid=9153 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.426179][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.449422][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.472761][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 362.493585][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.525876][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.536235][ T10] usb 5-1: config 0 descriptor?? [ 362.549804][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.566172][ T24] usb 3-1: USB disconnect, device number 24 [ 362.707391][ T9159] 9p: Bad value for 'rfdno' [ 362.792173][ T31] INFO: task syz.0.345:7313 blocked for more than 143 seconds. [ 362.805689][ T31] Tainted: G L syzkaller #0 [ 362.818401][ T5723] kye 0003:0458:4018.0008: unknown main item tag 0x7 [ 362.839299][ T5723] kye 0003:0458:4018.0008: item fetching failed at offset 1/5 [ 362.848174][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.866349][ T5723] kye 0003:0458:4018.0008: parse failed [ 362.872048][ T31] task:syz.0.345 state:D stack:26856 pid:7313 tgid:7308 ppid:5609 task_flags:0x400140 flags:0x00080002 [ 362.888009][ T5723] kye 0003:0458:4018.0008: probe with driver kye failed with error -22 [ 362.897578][ T31] Call Trace: [ 362.915042][ T31] [ 362.918331][ T31] __schedule+0x1295/0x67a0 [ 362.923001][ T31] ? __pfx___schedule+0x10/0x10 [ 362.928292][ T31] ? find_held_lock+0x2b/0x80 [ 362.933140][ T31] ? schedule+0x2bf/0x390 [ 362.937507][ T31] schedule+0xdd/0x390 [ 362.941651][ T31] schedule_preempt_disabled+0x13/0x30 [ 362.947204][ T31] __mutex_lock+0xced/0x1b10 [ 362.952027][ T31] ? bdev_open+0x41a/0xe40 [ 362.956507][ T31] ? find_inode_fast+0x5e3/0x910 [ 362.961571][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 362.966946][ T31] ? find_inode_fast+0x1fa/0x910 [ 362.975216][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 362.990628][ T9164] bond1: option mode: unable to set because the bond device has slaves [ 362.999004][ T31] ? bdev_open+0x41a/0xe40 [ 363.003532][ T31] bdev_open+0x41a/0xe40 [ 363.007805][ T31] ? iput+0x3a/0x40 [ 363.011981][ T31] blkdev_open+0x34e/0x4f0 [ 363.016673][ T31] do_dentry_open+0x6d8/0x1660 [ 363.021793][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 363.027292][ T31] vfs_open+0x82/0x3f0 [ 363.031944][ T31] path_openat+0x208c/0x31a0 [ 363.036809][ T31] ? __pfx_path_openat+0x10/0x10 [ 363.042019][ T9164] ipt_ECN: cannot use operation on non-tcp rule [ 363.048453][ T31] do_file_open+0x20e/0x430 [ 363.053766][ T31] ? __pfx_do_file_open+0x10/0x10 [ 363.079187][ T31] ? alloc_fd+0x476/0x790 [ 363.083805][ T31] ? do_getname+0x191/0x390 [ 363.089938][ T31] do_sys_openat2+0x10d/0x1e0 [ 363.091444][ T9132] netlink: 'syz.5.793': attribute type 4 has an invalid length. [ 363.099573][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 363.117431][ T31] __x64_sys_openat+0x12d/0x210 [ 363.130326][ T5817] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 363.132625][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 363.144153][ T31] ? rcu_is_watching+0x12/0xc0 [ 363.149577][ T31] do_syscall_64+0x10b/0xf80 [ 363.154352][ T31] ? clear_bhb_loop+0x40/0x90 [ 363.159110][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.162127][ T24] usb 6-1: USB disconnect, device number 19 [ 363.165397][ T31] RIP: 0033:0x7f3ee355d68e [ 363.185590][ T31] RSP: 002b:00007f3ee17f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 363.202832][ T31] RAX: ffffffffffffffda RBX: 00007f3ee17f66c0 RCX: 00007f3ee355d68e [ 363.211129][ T31] RDX: 0000000000002100 RSI: 00007f3ee17f5c00 RDI: ffffffffffffff9c [ 363.219165][ T31] RBP: 00007f3ee17f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 363.227579][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 363.236934][ T31] R13: 00007f3ee3816038 R14: 00007f3ee3815fa0 R15: 00007ffc84f27e58 [ 363.245118][ T31] [ 363.248175][ T31] [ 363.248175][ T31] Showing all locks held in the system: [ 363.259235][ T31] 6 locks held by kworker/0:1/10: [ 363.264593][ T10] usb 5-1: string descriptor 0 read error: -71 [ 363.271074][ T10] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 363.280696][ T31] 3 locks held by kworker/1:0/24: [ 363.285759][ T10] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 363.293865][ T31] #0: ffff888022e84d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 363.300930][ T5817] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.304803][ T10] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 363.322656][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.322690][ T31] #1: ffffc900001e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 363.338059][ T5817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 363.344500][ T10] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 363.354093][ T5817] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.360933][ T31] #2: [ 363.371789][ T10] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 363.372635][ T5817] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.374632][ T31] ffff8880b8529248 [ 363.390635][ T5817] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 363.393390][ T5723] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 363.397253][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 363.409889][ T10] usb 5-1: USB disconnect, device number 18 [ 363.416710][ T5817] usb 3-1: Product: syz [ 363.429261][ T31] (lock#6){..-.}-{3:3}, at: kcov_remote_stop+0x77/0x540 [ 363.435556][ T5817] usb 3-1: Manufacturer: syz [ 363.447818][ T31] 1 lock held by khungtaskd/31: [ 363.454265][ T5817] cdc_wdm 3-1:1.0: skipping garbage [ 363.455037][ T31] #0: ffffffff8e7e5760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 363.460853][ T5817] cdc_wdm 3-1:1.0: skipping garbage [ 363.471109][ T31] 2 locks held by getty/5379: [ 363.479940][ T31] #0: ffff888034d090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 363.480449][ T5817] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 363.490296][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 363.496123][ T5817] cdc_wdm 3-1:1.0: Unknown control protocol [ 363.506064][ T31] 1 lock held by udevd/5619: [ 363.516911][ T31] #0: ffff888027a54350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 363.527897][ T31] 1 lock held by udevd/5627: [ 363.535961][ T31] #0: ffff8880278cd350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 363.545896][ T31] 1 lock held by udevd/5630: [ 363.551162][ T31] #0: ffff888027bd8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 363.560583][ T31] 1 lock held by udevd/5638: [ 363.565176][ T31] #0: ffff888027bdc350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 363.574592][ T5723] usb 4-1: Using ep0 maxpacket: 16 [ 363.580120][ T31] 5 locks held by kworker/0:4/5723: [ 363.585740][ T31] #0: ffff888022e84d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 363.597529][ T31] #1: ffffc900042bfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 363.608991][ T31] #2: ffff88802adeb1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 363.617967][ T31] #3: ffff88802ade8568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 363.628058][ T5723] usb 4-1: unable to get BOS descriptor or descriptor too short [ 363.635874][ T31] #4: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 363.645157][ T31] 3 locks held by kworker/1:7/5797: [ 363.650469][ T31] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 363.661196][ T5723] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 363.673052][ T31] #1: ffffc900043bfd08 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 363.682697][ T31] #2: ffffffff8e7f12a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 363.692955][ T31] 1 lock held by udevd/6639: [ 363.697638][ T31] #0: ffff888027970350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 363.707215][ T31] 1 lock held by syz.0.345/7313: [ 363.712274][ T31] #0: ffff8880278cd350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 363.721801][ T31] 1 lock held by udevd/7321: [ 363.733596][ T5817] usb 3-1: USB disconnect, device number 25 [ 363.743924][ T31] #0: ffff888027a50350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 363.753630][ T5723] usb 4-1: string descriptor 0 read error: -22 [ 363.762124][ T5723] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 363.773023][ T31] 3 locks held by syz.4.782/9088: [ 363.778064][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.786083][ T31] #0: ffff888038513e40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 363.797303][ T31] #1: ffff888029076260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1fa/0x9d0 [ 363.807541][ T31] #2: ffffffff8e7f12a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 363.817757][ T31] [ 363.823351][ T5723] snd-ua101 4-1:1.0: invalid num_altsetting [ 363.837897][ T31] ============================================= [ 363.837897][ T31] [ 363.846859][ T31] NMI backtrace for cpu 0 [ 363.846880][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 363.846905][ T31] Tainted: [L]=SOFTLOCKUP [ 363.846911][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.846921][ T31] Call Trace: [ 363.846926][ T31] [ 363.846933][ T31] dump_stack_lvl+0x100/0x190 [ 363.846959][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 363.846982][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 363.847005][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 363.847027][ T31] sys_info+0x141/0x190 [ 363.847053][ T31] watchdog+0xcb1/0x1030 [ 363.847079][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 363.847102][ T31] ? __pfx_watchdog+0x10/0x10 [ 363.847121][ T31] ? __kthread_parkme+0x18c/0x230 [ 363.847142][ T31] ? kthread+0x13a/0x450 [ 363.847161][ T31] ? __pfx_watchdog+0x10/0x10 [ 363.847179][ T31] kthread+0x370/0x450 [ 363.847198][ T31] ? __pfx_kthread+0x10/0x10 [ 363.847220][ T31] ret_from_fork+0x72b/0xd50 [ 363.847244][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 363.847266][ T31] ? __switch_to+0x800/0x1100 [ 363.847292][ T31] ? __pfx_kthread+0x10/0x10 [ 363.847311][ T31] ret_from_fork_asm+0x1a/0x30 [ 363.847345][ T31] [ 363.847352][ T31] Sending NMI from CPU 0 to CPUs 1: [ 363.980886][ C1] NMI backtrace for cpu 1 [ 363.980902][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.980921][ C1] Tainted: [L]=SOFTLOCKUP [ 363.980925][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.980934][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 363.980959][ C1] Code: c6 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 f1 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 363.980972][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 363.980984][ C1] RAX: 0000000001ca1929 RBX: ffff88801e2c2500 RCX: ffffffff8b8aa095 [ 363.980993][ C1] RDX: 0000000000000000 RSI: ffffffff8df215d0 RDI: ffffffff8c1c3800 [ 363.981002][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 363.981010][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 363.981023][ C1] R13: ffffed1003c584a0 R14: 0000000000000001 R15: ffffffff90d7bc50 [ 363.981032][ C1] FS: 0000000000000000(0000) GS:ffff888124470000(0000) knlGS:0000000000000000 [ 363.981047][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.981056][ C1] CR2: 0000001b337f1ff8 CR3: 0000000035a81000 CR4: 00000000003526f0 [ 363.981065][ C1] Call Trace: [ 363.981069][ C1] [ 363.981074][ C1] default_idle+0x9/0x10 [ 363.981093][ C1] default_idle_call+0x6c/0xb0 [ 363.981105][ C1] do_idle+0x464/0x590 [ 363.981120][ C1] ? __pfx_do_idle+0x10/0x10 [ 363.981136][ C1] cpu_startup_entry+0x4f/0x60 [ 363.981149][ C1] start_secondary+0x21d/0x2d0 [ 363.981165][ C1] ? __pfx_start_secondary+0x10/0x10 [ 363.981182][ C1] common_startup_64+0x13e/0x148 [ 363.981207][ C1] [ 364.077146][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 364.077170][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 364.127918][ T9164] netlink: 'syz.3.799': attribute type 10 has an invalid length. [ 364.130885][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 364.130905][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 364.130927][ T31] Tainted: [L]=SOFTLOCKUP [ 364.130932][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 364.130942][ T31] Call Trace: [ 364.130948][ T31] [ 364.130955][ T31] dump_stack_lvl+0x100/0x190 [ 364.130979][ T31] vpanic+0x552/0x970 [ 364.130996][ T31] ? __pfx_vpanic+0x10/0x10 [ 364.131011][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 364.131030][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 364.131049][ T31] panic+0xd1/0xe0 [ 364.131064][ T31] ? __pfx_panic+0x10/0x10 [ 364.131081][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 364.131097][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 364.131114][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 364.131130][ T31] ? watchdog.cold+0x1ec/0x234 [ 364.131147][ T31] ? watchdog+0xcc1/0x1030 [ 364.131167][ T31] watchdog.cold+0x1fd/0x234 [ 364.131188][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 364.131208][ T31] ? __pfx_watchdog+0x10/0x10 [ 364.131227][ T31] ? __kthread_parkme+0x18c/0x230 [ 364.131246][ T31] ? kthread+0x13a/0x450 [ 364.131263][ T31] ? __pfx_watchdog+0x10/0x10 [ 364.131279][ T31] kthread+0x370/0x450 [ 364.131297][ T31] ? __pfx_kthread+0x10/0x10 [ 364.131316][ T31] ret_from_fork+0x72b/0xd50 [ 364.131338][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 364.131358][ T31] ? __switch_to+0x800/0x1100 [ 364.131382][ T31] ? __pfx_kthread+0x10/0x10 [ 364.131401][ T31] ret_from_fork_asm+0x1a/0x30 [ 364.131432][ T31] [ 364.134078][ T31] Kernel Offset: disabled