last executing test programs: 21m6.13685996s ago: executing program 4 (id=936): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_NEWSETELEM={0x6ac, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68c, 0x3, 0x0, 0x1, [{0x4e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x38c, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x65}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x27}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x31c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x30c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x100, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "7b11b2779cd45212d8d31174a6195fed4669e5f2992713e6a691d235f909c4f19a87daaf7ff6cffcef7ab4d6763c572b4f62fb5d9b3458830e13175e55c93472ff18131c30c12018f11ed857277f86e7bba92655ca8d7cd65fc3d4a2ecbb67314c50655c1d8035afc669d6d7625fb5008d0501befb93b256b81a0e57ba932da2026bbb5d41a78bf5085c1d93c1328bd5f765f8f15bbcdc7d2dc2a4659b14fb50c0a49dc462e5cf9a67"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_RANGE_TO_DATA={0x1f4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x65, 0x1, "30602e1d704e6d4f1b57f35e9e101ed0b4ac6e22f04cc8a3b5c6724d70a51ff8a48fdf39d5e0c29059df1c5a2757320beb13942c807efef2893bd32a7ad7c616f15d9f03304da307aae6a2b65ea698d495ab2a6a4005585aa096de981ba18dd30f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "a53f2d53d95e3b494de86e24e7a3ed163b1d7c8987b834be2e4f6f05ed1433bfcdb96b36f067833f567a9aee529a18cf65d328e92dc1256117f715a4c11cdb89f11ee61d46840c66c74fb977668b0fac0751d04caeb3610831520d6445c7d8437b714049ce0d98e496b3beeb1f9e52bc6e6916fe7ec102ecd2d3d0da01a476cd823660c967f095dc7724ae5b80c16214a5ce2b53673bb2763380803c74a89bcba84322bb581143c3c6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}]}, @NFTA_DATA_VALUE={0x79, 0x1, "48b6ba9267b56931c7dbb40dbb401ce55d9f9b7963529249cceb8216cff287d37d1904728889022b6a4e0484b30077928b0c2bf2404eecbbe4935316efef94ce756796bfc745584f336eabe12ae6fdff80e13d62720bbd525e51af715c9ce4a8c67e541e92d6a81442b58a6bd98b22a8c7483d3213"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0xa0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd0ae}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa9f5}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_KEY={0x150, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "0780d863df421c1cef576091d8915be624c2d13eef524444ec0293921b552f74e06f4c343ebc8da88f7785a382bb070bfd567a71857ee0bfe76c6103623ae4873b08250531af4045aa09572f280894bceb72737b1acf89ed3bbe66fb510a51b957f9d97070643df6cd373a87dd9f65354bf8b2c1829d32a630d954325c2c5560287f88049a4d3a9def78ac2e092fecc939e6b11d2654a15b85a2fa76bfe678c85f"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40000007}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x31, 0x1, "22b615e8d13d69d4bf9ade182dab971078dd6216625bbe043c9350e1e5202a24dcc18d74c843424b85858df982"}]}]}]}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14}}, 0x6e8}, 0x1, 0x0, 0x0, 0x40000}, 0x24008800) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) 21m5.362806094s ago: executing program 4 (id=937): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc1101, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x4440010) pwritev(r1, &(0x7f0000000780)=[{&(0x7f0000000580)="2f538d9d7dc4e4ff08d76c0b880cb8739a9cdfa11fecb18eed2a2f37edbdf39de6e35b31ba5d333659dc2a1019d43550d05c611a59884adc47", 0x39}, {&(0x7f0000000680)="533644321dddedcf7c9382a8f2755a7a32417a6ecadce47a5e934324414d760c06bf2566b15d4568dacd1a20629691aa375f77051c771f12dac4c4299f06faf6853077d0c7c99ddeb4e9bda10938afe91e450da56881749eac0a3c3f5f17a75899b2cc55a1f6698a02c230d2332fb126d5ac431b5c5c2ceb5f64a77085cf5b944f50814cf05b", 0x86}], 0x2, 0x217, 0x7) 21m5.069813498s ago: executing program 4 (id=938): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0xed, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x9, 0x1, 0x4, 0x0, 0xf9}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r3, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x2) readv(r7, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0), 0x0, 0x0) 21m3.777739957s ago: executing program 4 (id=941): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000500000000100000030000000300000000000000010000000000000001000000030000000300000000000000000000000200000000100000") ioctl(r1, 0x40140921, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)="01000000010000000100") ioctl(r1, 0x40140921, &(0x7f0000000480)="0200000001000000020000000200000006000000") ioctl(r1, 0x400c0930, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0) write(r2, &(0x7f0000000580)='check\n\x00', 0x6) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 21m2.731135396s ago: executing program 4 (id=947): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_NEWSETELEM={0x6ac, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68c, 0x3, 0x0, 0x1, [{0x4e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x38c, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x65}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x27}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x31c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x30c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x100, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "7b11b2779cd45212d8d31174a6195fed4669e5f2992713e6a691d235f909c4f19a87daaf7ff6cffcef7ab4d6763c572b4f62fb5d9b3458830e13175e55c93472ff18131c30c12018f11ed857277f86e7bba92655ca8d7cd65fc3d4a2ecbb67314c50655c1d8035afc669d6d7625fb5008d0501befb93b256b81a0e57ba932da2026bbb5d41a78bf5085c1d93c1328bd5f765f8f15bbcdc7d2dc2a4659b14fb50c0a49dc462e5cf9a67"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_RANGE_TO_DATA={0x1f4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x65, 0x1, "30602e1d704e6d4f1b57f35e9e101ed0b4ac6e22f04cc8a3b5c6724d70a51ff8a48fdf39d5e0c29059df1c5a2757320beb13942c807efef2893bd32a7ad7c616f15d9f03304da307aae6a2b65ea698d495ab2a6a4005585aa096de981ba18dd30f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "a53f2d53d95e3b494de86e24e7a3ed163b1d7c8987b834be2e4f6f05ed1433bfcdb96b36f067833f567a9aee529a18cf65d328e92dc1256117f715a4c11cdb89f11ee61d46840c66c74fb977668b0fac0751d04caeb3610831520d6445c7d8437b714049ce0d98e496b3beeb1f9e52bc6e6916fe7ec102ecd2d3d0da01a476cd823660c967f095dc7724ae5b80c16214a5ce2b53673bb2763380803c74a89bcba84322bb581143c3c6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}]}, @NFTA_DATA_VALUE={0x79, 0x1, "48b6ba9267b56931c7dbb40dbb401ce55d9f9b7963529249cceb8216cff287d37d1904728889022b6a4e0484b30077928b0c2bf2404eecbbe4935316efef94ce756796bfc745584f336eabe12ae6fdff80e13d62720bbd525e51af715c9ce4a8c67e541e92d6a81442b58a6bd98b22a8c7483d3213"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0xa0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd0ae}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa9f5}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_KEY={0x150, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "0780d863df421c1cef576091d8915be624c2d13eef524444ec0293921b552f74e06f4c343ebc8da88f7785a382bb070bfd567a71857ee0bfe76c6103623ae4873b08250531af4045aa09572f280894bceb72737b1acf89ed3bbe66fb510a51b957f9d97070643df6cd373a87dd9f65354bf8b2c1829d32a630d954325c2c5560287f88049a4d3a9def78ac2e092fecc939e6b11d2654a15b85a2fa76bfe678c85f"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40000007}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x31, 0x1, "22b615e8d13d69d4bf9ade182dab971078dd6216625bbe043c9350e1e5202a24dcc18d74c843424b85858df982"}]}]}]}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14}}, 0x6e8}, 0x1, 0x0, 0x0, 0x40000}, 0x24008800) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) 21m0.260064222s ago: executing program 4 (id=951): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 20m45.025614564s ago: executing program 32 (id=951): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m37.403098522s ago: executing program 0 (id=3354): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_getsetattr(r0, 0x0, 0x0) epoll_create1(0x0) write(0xffffffffffffffff, &(0x7f0000000080)="aad92b6948dec6534a0bc0889ef7386273843cda9683b33cb0c7d3dee371d7341204f8c5cbc2492da89b0448149eedd76fc747cc4bccdb4147203745f537d128a94565dbeca37337a7210aec02b3d52761d110a09540e49dd9fb4b97bd710e7c18df88a146aabbf1a8f83090904989f85dc467def1213f332a140a410ac1720c50f7c6ed3ad78061e59a52e6d997ec7a264cbfcbdd81b21081c5a6d9be8fed04a12b696ac4e27efa47debd67919c48916081eda6bccb99b1e83244524dc32fcde621b25673bb0f0ef407700f87", 0xcd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000540)={@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2, {0xa, 0x4e21, 0x3693, @initdev={0xfe, 0x88, '\x00', 0x93, 0x0}, 0x7f}}}, {&(0x7f00000003c0)=""/208, 0xd0}, &(0x7f0000000500), 0x16}, 0xa0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x406, r1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) syz_usb_disconnect(r3) 1m33.167598912s ago: executing program 0 (id=3362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000014c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0xc0) 1m31.91145635s ago: executing program 0 (id=3363): mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) r3 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './proc/mtrr\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=w', 0x23) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000009200000000000000000000319d8b7d00000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000d000000000000fcffffff000002000000000000"]}, 0xdd) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x4c40, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1m31.791103046s ago: executing program 0 (id=3364): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x40000, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@RTM_NEWMDB={0x18, 0x54, 0x635, 0x70bd25, 0x25dfdbfd, {0x7, r3}}, 0x18}}, 0x40080) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20001, 0xcbfa, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x420000000000007, 0xd, 0x3, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x280500, 0x28) name_to_handle_at(r5, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x0, 0x400) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/81, 0x51}], 0x1, 0x10000, 0x77) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002140)=0x1) 1m30.691564238s ago: executing program 0 (id=3367): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m28.16346014s ago: executing program 0 (id=3371): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./loop0\x00', 0x6180, 0x700) mount(&(0x7f0000000040)=@filename='./loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x85, &(0x7f0000000400)='rtdev=./loop0\x00') r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write$vga_arbiter(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="15423e1c9aedb64c170d50215fc645ff72d4aa16f9ec479f1f50c09fddf093f908b5fb274070983ebab0b124d91cd642d4d539a31640b133d83463f1cc59f5b1ffabaaa4d025ddc475313a71354b4213e55b73171fb8f5a66129c137aa0e7f37d4983c4816f0a4f22338f4646564c6e91bfc05747030f1509c4f60c1bd8da9dfeab2cf8b7b42f4fd2ec5e452a2a185d211e992b39af3c15416dd3f71fd371961c63c9372bda70db07a9ab7c8f269462e467bc58a3ef586da021823d726124fcdb5264b7369e7ffad761a9ef484fcf630b7ec1bdc9a15d806f58ad9002beb2073e5d45552761b09b05d14f2f0826a24cc3b3ebc", @ANYRES8=r1, @ANYRES16=r0, @ANYRESHEX=0x0, @ANYBLOB], 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = epoll_create1(0x80000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x10000014}) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r3, r4}) shutdown(r2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc4) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) (async) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000080)=0x2c) 1m27.909600055s ago: executing program 33 (id=3371): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./loop0\x00', 0x6180, 0x700) mount(&(0x7f0000000040)=@filename='./loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x85, &(0x7f0000000400)='rtdev=./loop0\x00') r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write$vga_arbiter(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="15423e1c9aedb64c170d50215fc645ff72d4aa16f9ec479f1f50c09fddf093f908b5fb274070983ebab0b124d91cd642d4d539a31640b133d83463f1cc59f5b1ffabaaa4d025ddc475313a71354b4213e55b73171fb8f5a66129c137aa0e7f37d4983c4816f0a4f22338f4646564c6e91bfc05747030f1509c4f60c1bd8da9dfeab2cf8b7b42f4fd2ec5e452a2a185d211e992b39af3c15416dd3f71fd371961c63c9372bda70db07a9ab7c8f269462e467bc58a3ef586da021823d726124fcdb5264b7369e7ffad761a9ef484fcf630b7ec1bdc9a15d806f58ad9002beb2073e5d45552761b09b05d14f2f0826a24cc3b3ebc", @ANYRES8=r1, @ANYRES16=r0, @ANYRESHEX=0x0, @ANYBLOB], 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = epoll_create1(0x80000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x10000014}) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r3, r4}) shutdown(r2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc4) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) (async) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000080)=0x2c) 14.851839139s ago: executing program 3 (id=3558): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 13.775292003s ago: executing program 3 (id=3561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x13}, 0x44) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/205, 0xcd}], 0x1}, 0x40000010) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x7fffffff, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x401, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000600000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x1103, r4}, 0x38) 13.716501536s ago: executing program 2 (id=3562): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0x40044102, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x19, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x20000b, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvfrom(r2, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x80010, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x23, 0x0) sendto$inet6(r2, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@nat={'nat\x00', 0x670, 0x5, 0x3e8, 0x278, 0x350, 0xfeffffff, 0x0, 0xa8, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key=0x3}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {0x0, 0x7}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@set={{0x11}, {{0x1, [0x4, 0x7, 0x0, 0x6, 0x2, 0xc], 0x3, 0x4}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x350}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x6, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x40, 0x17f]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="13000000533f0000030000000400000051200000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000030000000200000000000043bc5451df20aff6b50ff25706"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 13.598257053s ago: executing program 2 (id=3563): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$evdev(0x0, 0x191, 0x400080) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.4140266s ago: executing program 2 (id=3565): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$midi(0x0, 0x59, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100300000040351201824000010203010902470001011898040904000002010300060908050b20000fd3020f25010b3d1813da062a56c3efd1de09058c0220006df78014250110"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0x3, 0x8, 0x0, 0x3, 0x1, 0xe, 0x2, 0x8, 0x4, 0x8, 0xfb, 0x0, 0x7, 0xc, 0xe, 0x6, 0x3, 0x5, '\x00', 0x7, 0xf54}) 11.931000683s ago: executing program 3 (id=3568): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_getsetattr(r0, 0x0, 0x0) epoll_create1(0x0) write(0xffffffffffffffff, &(0x7f0000000080)="aad92b6948dec6534a0bc0889ef7386273843cda9683b33cb0c7d3dee371d7341204f8c5cbc2492da89b0448149eedd76fc747cc4bccdb4147203745f537d128a94565dbeca37337a7210aec02b3d52761d110a09540e49dd9fb4b97bd710e7c18df88a146aabbf1a8f83090904989f85dc467def1213f332a140a410ac1720c50f7c6ed3ad78061e59a52e6d997ec7a264cbfcbdd81b21081c5a6d9be8fed04a12b696ac4e27efa47debd67919c48916081eda6bccb99b1e83244524dc32fcde621b25673bb0f0ef407700f87", 0xcd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000540)={@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2, {0xa, 0x4e21, 0x3693, @initdev={0xfe, 0x88, '\x00', 0x93, 0x0}, 0x7f}}}, {&(0x7f00000003c0)=""/208, 0xd0}, &(0x7f0000000500), 0x16}, 0xa0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x406, r1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'], 0x10) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) 11.866990456s ago: executing program 5 (id=3569): r0 = open$dir(&(0x7f0000000180)='./proc_mnt/kcore\x00', 0x38b200, 0x180) mkdirat(r0, &(0x7f0000000040)='./proc_mnt\x00', 0x1fa) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', &(0x7f0000000200)={0x40080, 0x2ca672bf1d9f487c, 0x12}, 0x18) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000180)={0x2, 0x0, 0x98, &(0x7f0000000300)={0x0, 0x7, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='9', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10080, 0x0) r4 = openat(r1, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_QUERY(r4, 0x23, &(0x7f0000001d40)=[{&(0x7f0000000700)={&(0x7f00000005c0)={0x0, &(0x7f0000000500)="8e895eb7ec157245f8c904275b537c8538c76fd5dbe6240e1e87700a8c0727d66ba5084111b7f3c5ebb87dc5c959a78f1bb107cdb06514eca60ed7b699eebab25c5c609d38c83276dc7fb9989bbd3752e1faf37d9052cc9b4d93b88aa6bb55cc2489867f55c54dfcc8c5e1d3218b372da1fd56a865d7ecb52a934743935462b95a2280022573240d6e5fa035861a0525744f", 0x0, 0x92}, &(0x7f0000000600)="1a519d90ce9b4a86e899a9d43319ada8d2e52a948b5144a3c4232235dd6505ce4f27de686b3a7f5e1b8899d5dd66ad3e8e4eb018b59070b6bc57904e5925af78eca49c09ce2dca48774cbf265108acbd7195c742406dd99056314b397eec36d5c201c8f0ac5d68d42e4e653a54cbaa73bc6e56c4b48076f36f6c650c6bbf10ed8f89d627190345532f8cb6e014cbe98be57cb2079aa3120286b505fd2c8f0c2c4bdd8f62f848492a7783ba36e70f8ef2cea7007397dfd226c920c171ec51fe134aaddbccf2c115ca0e82aa197db41fc2f19ced6f0980955d3790d593c828f8d6d4e83c38a0c18264f648cf5d7e", 0x1, 0xed}, &(0x7f0000000880)="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", 0x0, 0x1000}, {0x0, &(0x7f0000001880), 0x1}, {&(0x7f0000001a80)={&(0x7f0000001940)={0x0, &(0x7f00000018c0)="1c18e9d1f2f4328b850d37d2bf55b227cb3bbe91ef07f876cd1c1ebf8b14f53a203827ce72b06ab126cca5e5ccd009b8b5d342a6c3d26be537d0e34127a2a92d6e8de87eb6845cf3d268b16f722d57c2b366d81e40946d56f706ca0d48b7ef73f6e1f633b6c65281d706def9e7c3990d4b9839195fac14118f", 0x0, 0x79}, &(0x7f0000001980)="78810a91b610166fd5b92dfafab1c73d86aeff89ae62b2e978d83ce998a0913435b6465aa2abe644985f9008ea2bf107b2890af6aa15dae154594001c3537e81a6223bf1dfa37cb000fe6181addc0bf94cc76ee82b3683c0491c924a299c1f98b1fdb2cb69562d74088c663fc7dc5a44aa325b75d21c3b0042c4d2d57c3e35b561f690b95dfcf46001871deb17e5e1cb9f528925a20281044bce04cb8a7ed1575ccd01c472f55805f262eaecc4e901e77bd9afba23ac59023b3482a841ef1411b38bcf1a2217927539163081033a9bec9593cd6b4b7a5a906e71af9e412225d2a11a12a50cddb64ea31f17bd96940d5b62deed9d198d3c", 0x2, 0xf7}, &(0x7f0000001ac0)="41273319117f0cb8b82a41a3bbdc82bb1095", 0x0, 0x12}, {&(0x7f0000001c80)={&(0x7f0000001bc0)={0x0, &(0x7f0000001b00)="b76f182cee3941016d3b613b74dd3f233207860dcf069ef39f6f6fc7e5d39c3a89832b7a2734eb581331b2e935f625632d11db019504640ef995329db5c989213f0fc1639605b6927fa69afca8453cd42efd32ddaf98f23f7de0baca3eb3baf2beb789ca5694dfaa03957716226979ea1e9e7b20999294c7362d3b6211d5cee48ba3daf90cf9eecf6220436512a5abd2d4ab09639dd05ead14d70cea", 0x1, 0x9c}, &(0x7f0000001c00)="65181b3c5ed901f2199850beb98a1180f36c387e6cb85b2d9a99417c56b3d66785c29dd7ff68c84131055168ee60903209199d82aad36d62ab2cb2d0b4458331519d07cab309224ef7d4e3062be683cdf6ec7d64", 0x0, 0x54}, &(0x7f0000001cc0)="f048f814ccab1e6520", 0x1, 0x9}, {0x0, &(0x7f0000001d00)="47376d83a797f973066e842cccb31a14feb9c3955920caa64d69afa96d", 0x1, 0x1d}], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x10c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x8000000}, {0x0, 0x1}, {0x81, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x5, 0x0, 0xac}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x4}}]}, 0x10c}}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x8d9f, 0x2, 0x1, 0x372}, 0x0, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 10.4694816s ago: executing program 5 (id=3571): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 9.700924724s ago: executing program 1 (id=3572): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20048001) r0 = socket(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r5, 0x1) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_mtu=0x44}) r6 = socket(0x2d, 0x2, 0x0) sendto(r6, &(0x7f0000000600)="0101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101", 0x44, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) 9.559189598s ago: executing program 2 (id=3573): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000340)="99c56942a1df38e8af762b4cf3e309e7b5529a5d676c5f4d6f75526f60580a1fb8583cf97bce350b7a321257e8e3010cf3dc2490b9f99ae2463ab5d859716f7921cb2b500bab0c5b5ef98795f706996861d8b075f5cb8ffafabb7a9e595999cdc574822c315ff7240076388cfa40b6d3f305e7d05b51abfc98e306670f5ef5cb4aac8cac08a79ac9648252d2c5050f0183eb223dc1ffc7ef1c3b2aa52a75ded120b85c16e691bc227f9c6eaac8f8543f2a18f035435d9d4bd9d00c5752690ed654070de13b79aad2bedbf37d813a", 0xce) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) 8.419150579s ago: executing program 1 (id=3574): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0xc, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0xae7, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x127}}}, &(0x7f0000000300)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) r10 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r10, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioperm(0xe, 0x9, 0x20) syz_ublk_setup_queues(r9, r8, &(0x7f0000000180)={0x0, 0x3e0e, 0x400, 0x0, 0x28e}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x40, 0x2, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x0, 0x3b2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x0, 0x16a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x400, 0x43, 0x201}}], 0x4, &(0x7f0000001f40)={0x2e, 0x44, 0x0, r9, 0xc0107523, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r7, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, &(0x7f0000000280)) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040f0400"], 0x7) syz_open_dev$I2C(&(0x7f0000001380), 0x200, 0x1) 8.269382077s ago: executing program 5 (id=3575): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_getsetattr(r0, 0x0, 0x0) epoll_create1(0x0) write(0xffffffffffffffff, &(0x7f0000000080)="aad92b6948dec6534a0bc0889ef7386273843cda9683b33cb0c7d3dee371d7341204f8c5cbc2492da89b0448149eedd76fc747cc4bccdb4147203745f537d128a94565dbeca37337a7210aec02b3d52761d110a09540e49dd9fb4b97bd710e7c18df88a146aabbf1a8f83090904989f85dc467def1213f332a140a410ac1720c50f7c6ed3ad78061e59a52e6d997ec7a264cbfcbdd81b21081c5a6d9be8fed04a12b696ac4e27efa47debd67919c48916081eda6bccb99b1e83244524dc32fcde621b25673bb0f0ef407700f87", 0xcd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000540)={@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2, {0xa, 0x4e21, 0x3693, @initdev={0xfe, 0x88, '\x00', 0x93, 0x0}, 0x7f}}}, {&(0x7f00000003c0)=""/208, 0xd0}, &(0x7f0000000500), 0x16}, 0xa0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x406, r1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) 8.237286484s ago: executing program 6 (id=3576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$tun(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c0001"], 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x6, 0x0, {0xa, 0x4e23, 0x9, @mcast1, 0x97}}}, 0x80, 0x0}, 0x2000f765) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @remote}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000480)=0x7) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x28, r7, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 6.39227562s ago: executing program 3 (id=3577): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.946058708s ago: executing program 1 (id=3578): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) getpriority(0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 5.262455054s ago: executing program 3 (id=3579): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) getpriority(0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 4.666317452s ago: executing program 6 (id=3580): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x5, 0x62) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000005d40)='./file0\x00', 0x2100, 0x7ff, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000005e80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000007ec0)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000007f40), 0x1, 0x0) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000007f80), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000007fc0)={0xb, 0xffffffffffffffff, 0x1}) pipe(&(0x7f0000008000)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000008180)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000680)="4bff1ccb24ef7ea97e277fa2a87a0c51d9ae385239c327945985861f1669fdcbdbcd8fb7794a4ab42248a4c27d3f9fbc170105a26a259f0aa4731c44dd00ddcce2af5f533acb6f693064e19cbc58d3e9fbfc068cddd6878ca398c166d071822e3a24bfe8be2f80b68fe4ab0cbf83f48347fc6f6277eb8c49035d8c34dad5e17fc4ad8a167eb5224b3c759d509e05aa43b352e44974", 0x95}, {&(0x7f0000000740)="3b5b5add03392d020742761fefa6053e15c636390e42fe47f080fd24d59d58f83745055abc6c86bf2222df36d9e9375e3110d3e78ff5", 0x36}, {&(0x7f0000000780)="c5aef9a7b39125de466dd70a49e6f7e0e3e52abaf04a81598529d5de8a7d1d1330ed99e1d57cb7bdfe06b8d4e237ad24e3b5429823b74fd87b2360980c41e4791e246b87fe79e9df18d22333ca267182688567fdbac123a334ffeb58eed40bf615520ba17397550bb114321324e85fef4344ff5ab612c73a1994bd09964c4acba1f7b8676d3c4bd7ef9d8142f5287866bdf67b96bc01ec19595fedd3b8ff91691bab8707ec843855b98fa686fdadfaacc373f709ce33ba7dae7302ee9a3c04d782c8", 0xc2}, {&(0x7f0000001f80)="d250aafa89208307c66306dfba419eb713948256a5a25ef4e5ac17b7307e40a14a1b6fdedf772cf3d20b7908d39bc952028369a014c9217c60c19125023350a0312409366e023a062b9ba003f8554952d974b11e7ab33f91db5cd49047a45be597b51abfe527f21017e63ce50ec1fdda8599db7321a445e566926538d1924147387e4ed0b639f04e406b96da8f07f9329b95dec9542531d54cd339eb35d4f7fd0ab4cda1ce706489a5e48e088f69ffb8f9a79e25b658793ff1e26a513d9a3d968e561f80eff51bd12c984ae86c1ba7e617bb73579245fb4e4702279f10303fbd505a72a0787557d084da5ef8d225d252a1a681f97c0ce625bac4fcb165de1ca8d8d72d99f25102cc661eb337d503cef24a02b58b96457957f0c15f0d6c97172643b72d43bd7614e12220d0d7a0efaec058d9ff1aeb9ffb20761908e86b4b87569b05e0f5d5ee9e03fb256e1b3c80e872eb6d9aa7860d07e54adeed854c6d39bf8915cf0bfc7eec6c93e39e4aaf364b6123ac7c51f8f469f15708663909e35e56d3bddfe1cdde10cba588b4446faa7c78a6698e21b7462e7ecb023045d436ba8b577adb4ba05f6f18cc2cb61f16efc5427e6339f676adfae1a7b9157ba1713e7b70b7a5a5dd8b3bb0ed15c51f93d5bdf4e567d142e188015cb5a6b66e53f31a21cff7d3457ac51022c0ca6bad060eeb00e1f48f718bd1642bdb7aefb103739969a8ac58952b9031cf84a90841b1c0942f7013f1c157fce74e1732bfaaef3c710b3d22f2520dd93ba2cf577e5688025418125d118c30902f13728b3b7c5ea8dc32f9ad938fc1719da91b22dc7cdf7419ba1019b453f8c488da07d3a8371fbe62bbc3966823c70a14cd4851bda7c6eb254d540b6b75ae5b73d219ab9acfc8efd8957c938b5cc924e73cfdd1113ad5d33561d93c5df3aaef5a718c36aeb778bf4aae9dafa0fd23f24d59196c05299a1d8894ff089856ffe0f04b74a1bcfdc472d55cf899221e1d69bd12c8e39e233d9f4bc4154c2ac7492270a242524e96b2d51cf5723338877bd2d641c84c8045754d25b6b6aec0286bac9b5cf5fab5a081fe0bf5b5af955de1f05a09106a827e1a032c921046d10feda4cf22b1eefb45dbee5623858f94e1b672cd14e6611a2bc5972388c6b0798498092882a4f7f68f86c7c0a57384fd89028760b3eed1840ea131fa7dd87aa6109ba897576e17d4425bfc1df2913db2a7a5fa90eff8bb0a7d3aeeb0adbd7821ff694061058ea75e293fdd116905814e29ebc33c96f2e9823abe76b0306f7bae77fcc5455d5505ba7c855c29d167b93233e248f25697fb52eb386132361b3756260a2bd7973806f25297d4dd11aacf1495d5eb4d842e13eb6c330fd3f90974ea1b13875a151b2f1ca8079bf51f81f42df8a65aed152af797bd402f4ec25f0155efcea951a243f991547b30d87d3092fa6088dbc46889ac19cc9046408a59eea50b0adbd202c225e624f0597f9c49b6ebaf9a2954bd37760e8f1a99e33c8a56d27569b8cf82ba9dcf6e1fe0b8f2809af6f34aa82be84c0fa4fd9d71c8a29902f5895a66b33c2edd8388823a9aa229310fd2a0cc771b0176588502f02b8d0683ff0aa38d49a722b866f9baacf9eed0b0ca2fd8a4e3315c0dfde72c93f623c7160d7fb91bd6ae222e66e1e39aa9aadd030b70e8996e608032829af19f1639ea1b0d2bf86b23fa293f3271aa9b1cf5cc835b1e311ff81fe9f6aeb83dbd21311d1645c3f048be662fc9e2b45c0ca5508d94d1b43ffac357e72c6af27b3cfccf5cdfe8d8e801cc7a4cd9ae0f7d8bddeb72fffe79e21b036a0f49232b7204c5d785c8e9f9407926390946a9dd3e65a339237c0dc375c8ee9ae5614823c43c1d94e8747d35d10bcb970f850dc064368f5670c2de4e4740f998ce3ae245bb45966fa140c3629fe60521e202af25fba8677d512e60d77ab570c4a7b15c9d8cafcdabe8fa40fd7670ef290afcbb34745913b11d9a64b67d71a130083ce42c90dd34c09f4935633800278728539c84aeec386aa8c5a010071acfc480a63d0712dd1782248413a6187ff0dc785574dd960e91a8779dc3b325885a1cb633bd6d605a48d96ded82c55f932487c7471fed964e2626b26b3f31862cdfb050b104a12b0d3c15cc3b0ccd798458195ca1a8ef4ea50d63898f13ca20db5764759ec5e771afc1f823c92608a4b9b33b71019bbbff4f156fa79a5dbee58efd554cf5b2dded125facad0e97204bcfde09ca020a4fbfba5b9f89166d2390bf21f68ea7434eefb3f9ef57c5b2adf798e23d91608f5e7693c2c6029ba14b3d644e8fcdfcce406c3c32c06cf63a6ab34cb733e98dd64cf70b4c1661d4a9db26cb2d26a0198bd5cd58959d08ef0fcd6f4cf35bcdd8ab030c49d0b45a963d7f0c63e87396cc5039f6778ed26c9e4ffb76bb56fda2032fbf42ac7f41b33456b473909bf152d1db77cdc29c972b76a766406f307cd41c2d77195949198a381d5b6942c48194c52f4c818d72ee3cc0ebf84c5ddb01dfb692e73cd4b71918d7acf466e8e5d94bde3b998e64def87f96ba0b3544d681a3a7106f838da48d7c7fe758279dd99c3120bad87821813385ec5d4e07a3f42c1e2faa0fe99362ec417fc2d61a0e26c53534f4858cbc89b87e71ee55245c396dcf3db7c1d9cc9e6bef553f94c9fb03f186b58c01623b6b488eeb95e2c5649e58d577da0da61075563d79baaf33a1e69d9432b19a88159f358bdf097be7f1623dacaddaf00c5dae0560e73e570d68e4c296b01e6649a2b871f51ef8dd651285cb7646f24be25df5df00cd75c9b0e77ffeaefea1bb6f0f58683cf432cd2462b9a6ed0e054fd0e074ba318f2d24d7e2a039b9b948bd554e1ae863bf9b555b91c9edd43149dd38baf71bb3ddd1f3121b215ba71cbda4c45456dc9e2b7dc57456c45d2ebfbcd2a8200d5595424ae09490608cb5601570cacc67127bff4447eb4c24a1e4510e50279f48349fc51ee37ae65444de23d0d51c26a82e284d4c3c5b73278366dd23432a9a201247913c0f307cc0ae0c952428709ac5c234155ee44e7c3775f322708c5178ab13e2ecaa7b70c2b9eb4e8854c71f05bc2365d499057e11aab0a09e827154e4b4284bf803993b08e7f0e4f0fcc9a3054c06cb129435f0f0a67623260e94fa0c68bb0d966a3542b4a152c844875f88151e61d63b382815681a698c844a98c6bb26ba3ce6d0589852895abf79e3d3a7667e7caa415c9c71cb3e6d1264bd54062502757ea03ea8b9440460b9246b3f55c78c64b902d848ae6918c35fd7dc005144950a10f4e0f1550f47172f0936899445b738cc3ca98a50c40d35a8e2d82eca13e5f14a985aae89afcdb966139d8fde998d85f48abd6a4056e734fa700a0caad440c005d442b224404c7262a277b2a70992a0a9029d715307fe64561c04a7b5152741411c6e858128196995adfae8add2ab3100403ab21f64efd71af8973e5a82f2fea227aab414a5d6dfe595240f2edd9c339a394d28f67576b72e9bb1d59642703b5b0aa75d31f4e12d2baf2871d06654f7a6a3782f99e00d76c9a2522d6ffd6b5cda90eb6bcafc06af9c3e1fd3ae66f0b1994661b74afb8f36079969f031566cde63e8996a05568ed41e30cb06f7bf97f893777ea4ba3e0f7aa6ac704e9d4aa78d322fcb882f2e68c7c200924c10aaadd1fe42c104540fb635253559076908ffe9c7fa61816cf0fdc6eef1a02d7ce4fc48b0e6edb63f539da2ebaff1d64ad6b54162c67dd08662b18f50b815cf6001b0deec8399b609e99e7a321e741fd2b45f27e2f3e23102b493b3c56b8dce731c27a341856359d2a6c9febba4fe2288f6064af61e24b59973a8cdfaebcdb46503b01a4cee6406273b293dbd08d84fa94ff0e4c5d6497ea4b724824c53c322705c04a551baeff6da686ad54f9b3b79e97b7937e4511ee9f153cb5bfe1e6a71332b20d03074966a7d74aca64e1eaf73b7628f3caa9ce09dc032ec742603630df57d5c37f1f81e8a5aacccb1fb2dc5c6125f7aa58efdadc0595b90d7bf2d0bf863bcac7dc86a58e1f14997f44c0d9959073664e9b7cf9b5a57dd6a75af0909016de885a92b2497d34caa5e102bab46a7527f597be9ef8ea6fa43b356c757ef479ed63b6e433a0e2c3a9e2610672db86714f60bc0d2cc75efc65100ce8469a808658aed2c648c7e33f60fe93c969d9a57e2590d723b9b33ec099f5f2f125833dcbc167bfbd5b488650b81a7a33e05f87888a5c3b6ef8ea1884674ae8bdf34bb7f593cef99e662489c86a21b7a9f50fb7938979d45c1bf3f701ff3d200824a84e94c95ac79771e033e4de12ae653965dc5f32529c3f8db29aa0f5354923b732ede5153962976f8c4d61236ea1a10d8d9fa4f66b8b84299554f7e3cd9f860239e952c66572148072c47a066d2597a115b7af6cf18870eb4d622ddf7f933326be047c0f8e8fd301986e655e714710f18f93a57d9c7e892c48e9c29db7f7c40f6b23d66ea78edf2679349e40abe5a0237a58d9145646d9e0fc33d5aa366e811fa79c811c1c70a0394d1c9ff7c862603dd7112116473b426c60dea23f4d6d82d36ca163cdfa1be582951723fa6424bdf042f7eb27157dec252850ec7bd11f85c54d559793883b0398945aa71e5efe1aa53548d34b863d28dc9944a511956e0e62d1f6f95603adecb24181116e8f28da4806d0cdf53dfa3979bd49cb1f6ae25d1214ac2c8a44075b15ce151e53990119b13c2d72d42375bffbf77698e36b9366dd4fb4956530b0a7231902fb8e91129939c9c8810a59e3b7367f11e9a6cc1d078e4838ea516a049fba41e53968a9e4752e2df97aa4f35929a10b74619415b3a757326efb7b411b9e1b04ee849f68d7aaa05bcc49de18f06eb9f27eca575e27e880e30084a3ec22cd7f6f1b587f197b3f5aa5481ff75ab7fd99fef29a769f236300cdfdffa960e9ed9be995a958104018374de1d96965a8aade7cf4cb6f3fd09a2cf4bcd54ede09b18d07ec0adedce782614bbe94f84f9567daf790bfb72b3734b525cb91721e4c85e0bfc8a5a3a55ed7e808402c8a3d2767afe1022b1761804e6d85d29225a4fb4582000df1e599aec2aca99d2688c5a300453e528c594c46f4656931b131cdc1ebe475cfd0caab15987684d34e1f499ccc9b2a2af238ae993741885e91dbd1f155977a53fffc4521466d5aa76b4cfd99924254e2ea6ea1cd9ba80c031eb4078ab8a5fe7c97d035c6c134f6d7555706c54523600cd2422eeed9d489be92bf403d70e18e6c85377cf5c90e38826d863c5d1e1ad18ceac8025ca1fd6f11479e873db9960864410bbdb024f2a4636b9c17fa063675ac33614fe45f836b144080e834df24130b457754d0041475cdc12b85b7eabdc0ed86314d6df729fddcdaa178ffceb4e7878888298b751bc646d1e8bd60b8f6cf61f7e301383234997c1e169612b9fcc7150c8f3c1f7081556109a7a391107dd2ec89c2f52f6400023130aeb3c94b949fe560eb4766fc29be3c8d477ef69e75292ad16638b9786a7d7e3941cd365f1e2c4b89815188d14e125643cfd61b7b02e145736aeea2436b197721af5458bf50576346737fcb7ed7d58ee73239b786b01c976003639c9400f98c3c9617ade85e366b8b6354c82893ad1ac8fc92f763f003680351448474113722e3d78acc175ff01af584bc878acfe6e9b63ae7a0eec50a69f866cf651757519feebca7a6150b250a3b9c38fa84ab5fa4f2697156fed192ed62a39f4d60e7150a71ad5e533749c9195cafbc7cc89c620dd42569768", 0x1000}, {&(0x7f0000002f80)="1fe27ab8c9c3309b5f042d2aafc928c68ba1833297f701672e573bf40f136f182843c6fc63c753e3abfd7a1551e1869ddcb66ba7780bfce972980342b9433254fac8c128c1c21f55fbe9b9404e75e4dcece86c5009180ba99f8667924d630205752fb019fe65720a48bf8bb2b9d7b00d32b1d09b15eed0", 0x77}], 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r12, @ANYBLOB="0971d7968ac71f00de5b2ddea3af735feccb068fff0096df972c1201525ba47d7754c507364a195bdcac18193aa6b3d0e936a4b0fe0936ab13293b67c2912df05ba0ae24bd5437969640d8972cc4d5a1b6a11cc6e23cc389df6972e511173e4940c41e806fc2a5f4d110f27c0c08522f4812e1c8f86d06524a76007e1a4da99168d4affbca4bcc498c6d5dbf852afcb859d4e039c60cea21909d0780dc8e58352a3caa198591a1b1708ef881f7a6de5093e776b9de23c6fdf7a6a132fd969466546f75f7678020d8497e4034e32e15000000000000000000"], 0x120, 0x40000}, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r2, 0x5608) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r3, @ANYRESOCT=r3], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r13 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r13, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r13, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 4.037064614s ago: executing program 1 (id=3581): r0 = open$dir(&(0x7f0000000180)='./proc_mnt/kcore\x00', 0x38b200, 0x180) mkdirat(r0, &(0x7f0000000040)='./proc_mnt\x00', 0x1fa) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', &(0x7f0000000200)={0x40080, 0x2ca672bf1d9f487c, 0x12}, 0x18) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000180)={0x2, 0x0, 0x98, &(0x7f0000000300)={0x0, 0x7, 0x10}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='9', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10080, 0x0) r4 = openat(r1, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_QUERY(r4, 0x23, &(0x7f0000001d40)=[{&(0x7f0000000700)={&(0x7f00000005c0)={0x0, &(0x7f0000000500)="8e895eb7ec157245f8c904275b537c8538c76fd5dbe6240e1e87700a8c0727d66ba5084111b7f3c5ebb87dc5c959a78f1bb107cdb06514eca60ed7b699eebab25c5c609d38c83276dc7fb9989bbd3752e1faf37d9052cc9b4d93b88aa6bb55cc2489867f55c54dfcc8c5e1d3218b372da1fd56a865d7ecb52a934743935462b95a2280022573240d6e5fa035861a0525744f", 0x0, 0x92}, &(0x7f0000000600)="1a519d90ce9b4a86e899a9d43319ada8d2e52a948b5144a3c4232235dd6505ce4f27de686b3a7f5e1b8899d5dd66ad3e8e4eb018b59070b6bc57904e5925af78eca49c09ce2dca48774cbf265108acbd7195c742406dd99056314b397eec36d5c201c8f0ac5d68d42e4e653a54cbaa73bc6e56c4b48076f36f6c650c6bbf10ed8f89d627190345532f8cb6e014cbe98be57cb2079aa3120286b505fd2c8f0c2c4bdd8f62f848492a7783ba36e70f8ef2cea7007397dfd226c920c171ec51fe134aaddbccf2c115ca0e82aa197db41fc2f19ced6f0980955d3790d593c828f8d6d4e83c38a0c18264f648cf5d7e", 0x1, 0xed}, &(0x7f0000000880)="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", 0x0, 0x1000}, {0x0, &(0x7f0000001880), 0x1}, {&(0x7f0000001a80)={&(0x7f0000001940)={0x0, &(0x7f00000018c0)="1c18e9d1f2f4328b850d37d2bf55b227cb3bbe91ef07f876cd1c1ebf8b14f53a203827ce72b06ab126cca5e5ccd009b8b5d342a6c3d26be537d0e34127a2a92d6e8de87eb6845cf3d268b16f722d57c2b366d81e40946d56f706ca0d48b7ef73f6e1f633b6c65281d706def9e7c3990d4b9839195fac14118f", 0x0, 0x79}, &(0x7f0000001980)="78810a91b610166fd5b92dfafab1c73d86aeff89ae62b2e978d83ce998a0913435b6465aa2abe644985f9008ea2bf107b2890af6aa15dae154594001c3537e81a6223bf1dfa37cb000fe6181addc0bf94cc76ee82b3683c0491c924a299c1f98b1fdb2cb69562d74088c663fc7dc5a44aa325b75d21c3b0042c4d2d57c3e35b561f690b95dfcf46001871deb17e5e1cb9f528925a20281044bce04cb8a7ed1575ccd01c472f55805f262eaecc4e901e77bd9afba23ac59023b3482a841ef1411b38bcf1a2217927539163081033a9bec9593cd6b4b7a5a906e71af9e412225d2a11a12a50cddb64ea31f17bd96940d5b62deed9d198d3c", 0x2, 0xf7}, &(0x7f0000001ac0)="41273319117f0cb8b82a41a3bbdc82bb1095", 0x0, 0x12}, {&(0x7f0000001c80)={&(0x7f0000001bc0)={0x0, &(0x7f0000001b00)="b76f182cee3941016d3b613b74dd3f233207860dcf069ef39f6f6fc7e5d39c3a89832b7a2734eb581331b2e935f625632d11db019504640ef995329db5c989213f0fc1639605b6927fa69afca8453cd42efd32ddaf98f23f7de0baca3eb3baf2beb789ca5694dfaa03957716226979ea1e9e7b20999294c7362d3b6211d5cee48ba3daf90cf9eecf6220436512a5abd2d4ab09639dd05ead14d70cea", 0x1, 0x9c}, &(0x7f0000001c00)="65181b3c5ed901f2199850beb98a1180f36c387e6cb85b2d9a99417c56b3d66785c29dd7ff68c84131055168ee60903209199d82aad36d62ab2cb2d0b4458331519d07cab309224ef7d4e3062be683cdf6ec7d64", 0x0, 0x54}, &(0x7f0000001cc0)="f048f814ccab1e6520", 0x1, 0x9}, {0x0, &(0x7f0000001d00)="47376d83a797f973066e842cccb31a14feb9c3955920caa64d69afa96d", 0x1, 0x1d}], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x10c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x8000000}, {0x0, 0x1}, {0x81, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x5, 0x0, 0xac}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x4}}]}, 0x10c}}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x8d9f, 0x2, 0x1, 0x372}, 0x0, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 4.009381465s ago: executing program 5 (id=3582): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0xc, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0xae7, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x127}}}, &(0x7f0000000300)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) r10 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r10, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) ioperm(0xe, 0x9, 0x20) syz_ublk_setup_queues(r9, r8, &(0x7f0000000180)={0x0, 0x3e0e, 0x400, 0x0, 0x28e}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x40, 0x2, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x0, 0x3b2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x0, 0x16a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x400, 0x43, 0x201}}], 0x4, &(0x7f0000001f40)={0x2e, 0x44, 0x0, r9, 0xc0107523, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r7, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040f0400001c04"], 0x7) syz_open_dev$I2C(&(0x7f0000001380), 0x200, 0x1) 3.198359712s ago: executing program 6 (id=3583): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.040238513s ago: executing program 6 (id=3584): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) (async, rerun: 64) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000190a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async, rerun: 64) close(r2) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) 1.971028426s ago: executing program 1 (id=3585): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000440)=[{&(0x7f0000001700)=""/4095, 0xfff}, {&(0x7f00000003c0)=""/91, 0x5b}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.928993927s ago: executing program 2 (id=3586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) 1.926326044s ago: executing program 5 (id=3587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0xc, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0xae7, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x127}}}, &(0x7f0000000300)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) r10 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r10, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioperm(0xe, 0x9, 0x20) syz_ublk_setup_queues(r9, r8, &(0x7f0000000180)={0x0, 0x3e0e, 0x400, 0x0, 0x28e}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x40, 0x2, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x0, 0x3b2, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x0, 0x16a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x400, 0x43, 0x201}}], 0x4, &(0x7f0000001f40)={0x2e, 0x44, 0x0, r9, 0xc0107523, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r7, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, &(0x7f0000000280)) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x7) syz_open_dev$I2C(&(0x7f0000001380), 0x200, 0x1) 1.379958567s ago: executing program 6 (id=3588): mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, 0x0, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "97451a24bdc556"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000000600)={r8, r7, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r9 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) 1.378939866s ago: executing program 1 (id=3589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000040a00ffffffffffffffe8000100fff4"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f0000000600)={&(0x7f0000002f00)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, 0x5, 0x0, 0x0, 0x5, 0x7, 0x2, 0x5}) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407f1800010000000000010902200001010080320904000002ff0000000705810240000007050202400000"], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="010000145d324fe14f003b0000000800030029f2c5f5aae31558b4be41a86b4a174657c088e7e1f39766d47900d128cb", @ANYRES8=r2, @ANYRESDEC=r2], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x800) 379.242488ms ago: executing program 6 (id=3590): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b3, 0x3109, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x11, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfc, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r2 = getpgid(0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) r4 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0xff04, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0xf4) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r8, &(0x7f00000009c0)='1', 0x47f, 0xf, 0x0, 0x0, r8}]) ioctl$DVB_DVR_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f0000000140)={0x6, 0x0, r4}) fsetxattr$security_ima(r10, 0x0, &(0x7f0000000cc0)=ANY=[@ANYRES16=r6, @ANYBLOB="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", @ANYRES64=r2, @ANYRES16=r1, @ANYRES64=r2, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC=r7, @ANYRES32=r3], 0x5, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 307.641709ms ago: executing program 5 (id=3591): mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) r3 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './proc/mtrr\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=w', 0x23) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000009200000000000000000000319d8b7d00000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000d000000000000fcffffff000002000000000000"]}, 0xdd) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x4c40, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) 213.495595ms ago: executing program 3 (id=3592): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) getpriority(0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 0s ago: executing program 2 (id=3593): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x8000007, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x4, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x9, 0x14, 0xd, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x8, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000003, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff8, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x2851, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/63, 0x18}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000240)=[{0x7, 0x0, 0x0, 0x0}, {0x7, 0x8001, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): pfx___mutex_unlock_slowpath+0x10/0x10 [ 1562.086043][T19096] __x64_sys_openat+0x12d/0x210 [ 1562.086072][T19096] ? __pfx___x64_sys_openat+0x10/0x10 [ 1562.086111][T19096] do_syscall_64+0x123/0x790 [ 1562.086136][T19096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.086156][T19096] RIP: 0033:0x7fc3cdb9e159 [ 1562.086174][T19096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.086193][T19096] RSP: 002b:00007fc3cea02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1562.086213][T19096] RAX: ffffffffffffffda RBX: 00007fc3cde25fa0 RCX: 00007fc3cdb9e159 [ 1562.086232][T19096] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1562.086245][T19096] RBP: 00007fc3cdc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1562.086256][T19096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.086268][T19096] R13: 00007fc3cde26038 R14: 00007fc3cde25fa0 R15: 00007ffd29002f88 [ 1562.086292][T19096] [ 1562.407570][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3310'. [ 1564.083915][T10042] Bluetooth: hci3: command 0x1003 tx timeout [ 1564.088308][ T5620] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1565.399136][T17952] net_ratelimit: 80 callbacks suppressed [ 1565.904158][ T5795] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1566.064440][ T5795] usb 6-1: Using ep0 maxpacket: 32 [ 1566.069125][ T5795] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1566.094421][ T5795] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1566.129390][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1566.129418][ T5795] usb 6-1: Product: syz [ 1566.129555][ T5795] usb 6-1: Manufacturer: syz [ 1566.129858][ T5795] usb 6-1: SerialNumber: syz [ 1566.279414][ T5795] usb 6-1: config 0 descriptor?? [ 1566.291074][T19105] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1566.374693][ T5795] hub 6-1:0.0: bad descriptor, ignoring hub [ 1566.375989][ T5795] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1566.773829][ T5795] usb 6-1: USB disconnect, device number 65 [ 1568.683492][T19111] futex_wake_op: syz.0.3316 tries to shift op by 144; fix this program [ 1570.393888][ T5795] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1570.760767][ T5795] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1570.854042][ T5795] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.854076][ T5795] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1570.894207][ C1] net_ratelimit: 97 callbacks suppressed [ 1570.996326][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.996344][ T5795] usb 1-1: Product: syz [ 1570.996359][ T5795] usb 1-1: Manufacturer: syz [ 1570.996373][ T5795] usb 1-1: SerialNumber: syz [ 1571.057702][ T5795] cdc_mbim 1-1:1.0: skipping garbage [ 1571.562623][T19128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1572.353949][ T968] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1572.360580][T19128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1572.361000][ T5795] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 1572.362699][ T5795] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 1572.398332][ T5795] wwan wwan0: port wwan0mbim0 attached [ 1572.414963][ T5795] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 32:17:f4:33:1c:ed [ 1572.525156][ T968] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1572.525195][ T968] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 1572.529359][ T968] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 1572.529398][ T968] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1572.551628][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.551646][ T968] usb 4-1: Product: syz [ 1572.551668][ T968] usb 4-1: Manufacturer: syz [ 1572.551681][ T968] usb 4-1: SerialNumber: syz [ 1572.608192][T19145] FAULT_INJECTION: forcing a failure. [ 1572.608192][T19145] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.608243][T19145] CPU: 1 UID: 0 PID: 19145 Comm: syz.2.3326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1572.608269][T19145] Tainted: [L]=SOFTLOCKUP [ 1572.608277][T19145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1572.608288][T19145] Call Trace: [ 1572.608295][T19145] [ 1572.608303][T19145] dump_stack_lvl+0x100/0x190 [ 1572.608335][T19145] should_fail_ex.cold+0x5/0xa [ 1572.608362][T19145] should_failslab+0xc2/0x120 [ 1572.608388][T19145] __kmalloc_cache_noprof+0x91/0x6d0 [ 1572.608408][T19145] ? con_insert_unipair+0x1c0/0x270 [ 1572.608440][T19145] con_insert_unipair+0x1c0/0x270 [ 1572.608469][T19145] con_set_unimap+0x1b7/0x640 [ 1572.608506][T19145] vt_ioctl+0xeea/0x3170 [ 1572.608528][T19145] ? __pfx_vt_ioctl+0x10/0x10 [ 1572.608547][T19145] ? irqentry_exit+0x24d/0xa10 [ 1572.608567][T19145] ? lockdep_hardirqs_on+0x7d/0x110 [ 1572.608587][T19145] ? irqentry_exit+0x24d/0xa10 [ 1572.608617][T19145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1572.608642][T19145] ? tty_jobctrl_ioctl+0x152/0xce0 [ 1572.608661][T19145] ? __pfx_vt_ioctl+0x10/0x10 [ 1572.608681][T19145] tty_ioctl+0x26a/0x1800 [ 1572.608707][T19145] ? __pfx_tty_ioctl+0x10/0x10 [ 1572.608730][T19145] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1572.608758][T19145] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1572.608787][T19145] ? __fget_files+0x34/0x3d0 [ 1572.608823][T19145] ? selinux_file_ioctl+0x13b/0x290 [ 1572.608845][T19145] ? selinux_file_ioctl+0xb6/0x290 [ 1572.608871][T19145] ? __pfx_tty_ioctl+0x10/0x10 [ 1572.608896][T19145] __x64_sys_ioctl+0x18e/0x210 [ 1572.608926][T19145] do_syscall_64+0x123/0x790 [ 1572.608950][T19145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.608969][T19145] RIP: 0033:0x7fe4db39e159 [ 1572.608985][T19145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.609003][T19145] RSP: 002b:00007fe4dc2c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.609022][T19145] RAX: ffffffffffffffda RBX: 00007fe4db626180 RCX: 00007fe4db39e159 [ 1572.609034][T19145] RDX: 00002000000001c0 RSI: 0000000000004b67 RDI: 0000000000000003 [ 1572.609046][T19145] RBP: 00007fe4dc2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.609057][T19145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.609068][T19145] R13: 00007fe4db626218 R14: 00007fe4db626180 R15: 00007ffd45fc0588 [ 1572.609094][T19145] [ 1572.992446][T19136] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1573.287603][ T968] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1573.287637][ T968] usb 4-1: MIDIStreaming interface descriptor not found [ 1573.357981][ T968] usb 4-1: USB disconnect, device number 100 [ 1573.538842][T18366] usb 1-1: USB disconnect, device number 92 [ 1573.540107][T18366] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 1573.687239][T18366] wwan wwan0: port wwan0mbim0 disconnected [ 1573.716730][T18883] udevd[18883]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1574.090731][T19162] Process accounting paused [ 1574.215510][ T31] audit: type=1400 audit(1791163394.014:1545): avc: denied { write } for pid=19146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1574.322723][T19171] FAULT_INJECTION: forcing a failure. [ 1574.322723][T19171] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.322752][T19171] CPU: 1 UID: 0 PID: 19171 Comm: syz.1.3329 Tainted: G L syzkaller #0 PREEMPT(full) [ 1574.322779][T19171] Tainted: [L]=SOFTLOCKUP [ 1574.322786][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1574.322799][T19171] Call Trace: [ 1574.322806][T19171] [ 1574.322815][T19171] dump_stack_lvl+0x100/0x190 [ 1574.322851][T19171] should_fail_ex.cold+0x5/0xa [ 1574.322880][T19171] should_failslab+0xc2/0x120 [ 1574.322909][T19171] __kmalloc_cache_noprof+0x91/0x6d0 [ 1574.322928][T19171] ? ptmx_open+0x11a/0x360 [ 1574.322949][T19171] ? alloc_tty_struct+0x96/0x8e0 [ 1574.322982][T19171] alloc_tty_struct+0x96/0x8e0 [ 1574.323010][T19171] ? __pfx_alloc_tty_struct+0x10/0x10 [ 1574.323046][T19171] tty_init_dev.part.0+0x20/0x470 [ 1574.323073][T19171] tty_init_dev+0x60/0x80 [ 1574.323101][T19171] ? __pfx_ptmx_open+0x10/0x10 [ 1574.323119][T19171] ptmx_open+0x128/0x360 [ 1574.323139][T19171] ? __pfx_ptmx_open+0x10/0x10 [ 1574.323159][T19171] chrdev_open+0x234/0x6a0 [ 1574.323184][T19171] ? __pfx_chrdev_open+0x10/0x10 [ 1574.323211][T19171] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1574.323237][T19171] do_dentry_open+0x6ab/0x14d0 [ 1574.323260][T19171] ? __pfx_chrdev_open+0x10/0x10 [ 1574.323292][T19171] vfs_open+0x82/0x3f0 [ 1574.323324][T19171] path_openat+0x19fa/0x2440 [ 1574.323356][T19171] ? __pfx_path_openat+0x10/0x10 [ 1574.323391][T19171] do_file_open+0x20e/0x430 [ 1574.323421][T19171] ? __pfx_do_file_open+0x10/0x10 [ 1574.323467][T19171] ? _raw_spin_unlock+0x28/0x50 [ 1574.323497][T19171] ? alloc_fd+0x471/0x7a0 [ 1574.323539][T19171] do_sys_openat2+0x10f/0x1e0 [ 1574.323569][T19171] ? __pfx_do_sys_openat2+0x10/0x10 [ 1574.323599][T19171] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1574.323631][T19171] __x64_sys_openat+0x12d/0x210 [ 1574.323662][T19171] ? __pfx___x64_sys_openat+0x10/0x10 [ 1574.323696][T19171] do_syscall_64+0x123/0x790 [ 1574.323727][T19171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.323749][T19171] RIP: 0033:0x7f3aaa59e159 [ 1574.323766][T19171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.323784][T19171] RSP: 002b:00007f3aab399028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1574.323806][T19171] RAX: ffffffffffffffda RBX: 00007f3aaa825fa0 RCX: 00007f3aaa59e159 [ 1574.323818][T19171] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1574.323829][T19171] RBP: 00007f3aaa63506b R08: 0000000000000000 R09: 0000000000000000 [ 1574.323840][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.323851][T19171] R13: 00007f3aaa826038 R14: 00007f3aaa825fa0 R15: 00007ffc078105a8 [ 1574.323876][T19171] [ 1574.374876][ T968] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1574.442931][T19172] futex_wake_op: syz.2.3330 tries to shift op by 144; fix this program [ 1574.664575][ T968] usb 4-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 1574.672812][ T968] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1574.672842][ T968] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1574.672870][ T968] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1574.673029][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.795524][ T968] usb 4-1: config 0 descriptor?? [ 1574.798844][T19165] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1575.700580][ T968] lenovo 0003:04B3:3109.0059: ignoring exceeding usage max [ 1576.093897][ C1] net_ratelimit: 73 callbacks suppressed [ 1576.351275][ T968] lenovo 0003:04B3:3109.0059: hidraw0: USB HID v0.11 Joystick [HID 04b3:3109] on usb-dummy_hcd.3-1/input0 [ 1576.564303][ T968] usb 4-1: USB disconnect, device number 101 [ 1576.676777][ T31] audit: type=1400 audit(1791163396.474:1546): avc: denied { write } for pid=19178 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1577.892564][T19181] fido_id[19181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1579.387464][ T968] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1580.361809][ T968] usb 6-1: Using ep0 maxpacket: 32 [ 1580.645814][T10055] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1581.040703][ T968] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1581.165494][T10055] usb 2-1: Using ep0 maxpacket: 32 [ 1581.203869][ C1] net_ratelimit: 64 callbacks suppressed [ 1581.259629][ T968] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1581.259660][ T968] usb 6-1: can't read configurations, error -71 [ 1581.311371][T10055] usb 2-1: device descriptor read/all, error -71 [ 1582.482701][ T9935] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1582.585902][T19223] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3340'. [ 1582.649778][T19225] futex_wake_op: syz.2.3342 tries to shift op by 144; fix this program [ 1583.154031][ T9935] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1583.154068][ T9935] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 1583.157526][ T9935] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 1583.157565][ T9935] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1583.185742][ T9935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.185759][ T9935] usb 4-1: Product: syz [ 1583.185771][ T9935] usb 4-1: Manufacturer: syz [ 1583.185784][ T9935] usb 4-1: SerialNumber: syz [ 1583.200057][T19205] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1583.356897][ T31] audit: type=1400 audit(1791163403.154:1547): avc: denied { write } for pid=19211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1583.479085][ T9935] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1583.479127][ T9935] usb 4-1: MIDIStreaming interface descriptor not found [ 1583.495038][T19243] binder: 19238:19243 ioctl c0189379 200000000380 returned -22 [ 1583.579957][ T9935] usb 4-1: USB disconnect, device number 102 [ 1583.730102][ T31] audit: type=1400 audit(1791163403.524:1548): avc: denied { write } for pid=19246 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1583.997676][ T31] audit: type=1400 audit(1791163403.614:1549): avc: denied { getopt } for pid=19244 comm="syz.1.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1584.147989][T19167] udevd[19167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1584.191628][T19239] binder: 19238:19239 ioctl c0306201 200000000040 returned -14 [ 1585.296628][T10055] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1585.344122][ T9935] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1585.454085][T10055] usb 4-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 1585.478664][T10055] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1585.478914][T10055] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1585.479284][T10055] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1585.479942][T10055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.512847][ T9935] usb 2-1: Using ep0 maxpacket: 32 [ 1585.539451][ T9935] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1585.553938][ T5795] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1585.593744][ T9935] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1585.639809][ T9935] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1585.639837][ T9935] usb 2-1: Product: syz [ 1585.639867][ T9935] usb 2-1: Manufacturer: syz [ 1585.639968][ T9935] usb 2-1: SerialNumber: syz [ 1585.717174][T10055] usb 4-1: config 0 descriptor?? [ 1585.778249][T19267] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1585.853705][ T5795] usb 6-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 1585.880932][ T9935] usb 2-1: config 0 descriptor?? [ 1585.891123][T19270] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1585.913140][ T5795] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1585.913164][ T5795] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1585.913184][ T5795] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1585.913230][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.059469][ T9935] hub 2-1:0.0: bad descriptor, ignoring hub [ 1586.059563][ T9935] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1586.236782][ T5795] usb 6-1: config 0 descriptor?? [ 1586.283651][T19265] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1586.323853][ C0] net_ratelimit: 91 callbacks suppressed [ 1587.227379][T10055] lenovo 0003:04B3:3109.005A: ignoring exceeding usage max [ 1587.295418][ T9935] usb 2-1: USB disconnect, device number 81 [ 1587.623223][T10055] lenovo 0003:04B3:3109.005A: hidraw0: USB HID v0.11 Joystick [HID 04b3:3109] on usb-dummy_hcd.3-1/input0 [ 1587.645966][ T5795] lenovo 0003:04B3:3109.005B: ignoring exceeding usage max [ 1587.651100][T10055] usb 4-1: USB disconnect, device number 103 [ 1588.696069][T19287] fido_id[19287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1588.722392][ T5795] lenovo 0003:04B3:3109.005B: hidraw0: USB HID v0.11 Joystick [HID 04b3:3109] on usb-dummy_hcd.5-1/input0 [ 1588.752666][ T5795] usb 6-1: USB disconnect, device number 68 [ 1589.364258][T10055] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1589.554121][T10055] usb 1-1: Using ep0 maxpacket: 32 [ 1589.588149][T10055] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1589.695561][T10055] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1589.742419][T10055] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1589.742446][T10055] usb 1-1: Product: syz [ 1589.742511][T10055] usb 1-1: Manufacturer: syz [ 1589.742575][T10055] usb 1-1: SerialNumber: syz [ 1590.035703][T10055] usb 1-1: config 0 descriptor?? [ 1590.043131][T19293] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1590.237126][T10055] hub 1-1:0.0: bad descriptor, ignoring hub [ 1590.237820][T10055] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1590.459383][T19291] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1590.668095][T10055] usb 1-1: USB disconnect, device number 93 [ 1591.014992][T19292] fido_id[19292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1591.443891][ C1] net_ratelimit: 170 callbacks suppressed [ 1591.823626][ T31] audit: type=1400 audit(1791163411.184:1550): avc: denied { connect } for pid=19300 comm="syz.5.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1592.330797][ T5708] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1592.404117][T18366] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1592.503987][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 1592.516467][ T5708] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1592.556449][ T5708] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.556801][ T5708] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1592.564106][T18366] usb 4-1: Using ep0 maxpacket: 32 [ 1592.575911][T18366] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1592.616864][T18366] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1592.667406][T18366] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1592.667433][T18366] usb 4-1: Product: syz [ 1592.667498][T18366] usb 4-1: Manufacturer: syz [ 1592.667534][T18366] usb 4-1: SerialNumber: syz [ 1592.673658][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.673684][ T5708] usb 2-1: Product: syz [ 1592.683071][ T5708] usb 2-1: Manufacturer: syz [ 1592.683139][ T5708] usb 2-1: SerialNumber: syz [ 1592.911571][T18366] usb 4-1: config 0 descriptor?? [ 1592.932939][T19308] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1593.008513][ T5708] cdc_ether 2-1:1.0: skipping garbage [ 1593.008570][ T5708] usb 2-1: No union descriptors [ 1593.066432][T18366] hub 4-1:0.0: bad descriptor, ignoring hub [ 1593.066754][T18366] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1593.476975][T18366] usb 4-1: USB disconnect, device number 104 [ 1593.632219][T19305] FAULT_INJECTION: forcing a failure. [ 1593.632219][T19305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.632281][T19305] CPU: 1 UID: 0 PID: 19305 Comm: syz.1.3359 Tainted: G L syzkaller #0 PREEMPT(full) [ 1593.632312][T19305] Tainted: [L]=SOFTLOCKUP [ 1593.632321][T19305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1593.632333][T19305] Call Trace: [ 1593.632340][T19305] [ 1593.632348][T19305] dump_stack_lvl+0x100/0x190 [ 1593.632383][T19305] should_fail_ex.cold+0x5/0xa [ 1593.632412][T19305] strncpy_from_user+0x3b/0x2d0 [ 1593.632445][T19305] do_getname+0x78/0x390 [ 1593.632469][T19305] do_sys_openat2+0xc7/0x1e0 [ 1593.632499][T19305] ? __pfx_do_sys_openat2+0x10/0x10 [ 1593.632539][T19305] __x64_sys_openat+0x12d/0x210 [ 1593.632570][T19305] ? __pfx___x64_sys_openat+0x10/0x10 [ 1593.632604][T19305] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 1593.632641][T19305] do_syscall_64+0x123/0x790 [ 1593.632667][T19305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.632687][T19305] RIP: 0033:0x7f3aaa55e98e [ 1593.632705][T19305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1593.632733][T19305] RSP: 002b:00007f3aab398b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1593.632753][T19305] RAX: ffffffffffffffda RBX: 00007f3aab3996c0 RCX: 00007f3aaa55e98e [ 1593.632769][T19305] RDX: 0000000000000800 RSI: 00007f3aab398c00 RDI: ffffffffffffff9c [ 1593.632781][T19305] RBP: 00007f3aab398c00 R08: 0000000000000000 R09: 0000000000000000 [ 1593.632793][T19305] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1593.632806][T19305] R13: 00007f3aaa826038 R14: 00007f3aaa825fa0 R15: 00007ffc078105a8 [ 1593.632833][T19305] [ 1594.145737][ T5708] usb 2-1: USB disconnect, device number 82 [ 1594.323651][T19317] binder: 19315:19317 ioctl c0189379 200000000380 returned -22 [ 1594.383940][T19047] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1594.543887][T19047] usb 6-1: Using ep0 maxpacket: 16 [ 1594.544536][T19047] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1594.545631][T19047] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.545665][T19047] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1594.547535][T19047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.547547][T19047] usb 6-1: Product: syz [ 1594.547555][T19047] usb 6-1: Manufacturer: syz [ 1594.547564][T19047] usb 6-1: SerialNumber: syz [ 1594.555188][T19047] cdc_ether 6-1:1.0: skipping garbage [ 1594.555201][T19047] usb 6-1: No union descriptors [ 1594.986525][T19311] FAULT_INJECTION: forcing a failure. [ 1594.986525][T19311] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1594.986621][T19311] CPU: 0 UID: 0 PID: 19311 Comm: syz.5.3361 Tainted: G L syzkaller #0 PREEMPT(full) [ 1594.986650][T19311] Tainted: [L]=SOFTLOCKUP [ 1594.986657][T19311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1594.986669][T19311] Call Trace: [ 1594.986676][T19311] [ 1594.986685][T19311] dump_stack_lvl+0x100/0x190 [ 1594.986721][T19311] should_fail_ex.cold+0x5/0xa [ 1594.986749][T19311] get_futex_key+0x1d0/0x14f0 [ 1594.986780][T19311] ? __pfx_get_futex_key+0x10/0x10 [ 1594.986809][T19311] ? find_held_lock+0x2b/0x80 [ 1594.986839][T19311] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1594.986868][T19311] futex_wait_setup+0x91/0x540 [ 1594.986899][T19311] __futex_wait+0x19f/0x300 [ 1594.986924][T19311] ? __pfx___futex_wait+0x10/0x10 [ 1594.986950][T19311] ? __pfx_futex_wake_mark+0x10/0x10 [ 1594.986977][T19311] ? __pfx___schedule+0x10/0x10 [ 1594.986996][T19311] ? futex_wake+0x4ea/0x5e0 [ 1594.987017][T19311] ? preempt_schedule_irq+0x79/0x90 [ 1594.987041][T19311] futex_wait+0xe6/0x370 [ 1594.987062][T19311] ? __pfx_futex_wait+0x10/0x10 [ 1594.987091][T19311] ? do_futex+0x190/0x440 [ 1594.987122][T19311] do_futex+0x265/0x440 [ 1594.987152][T19311] ? __pfx_do_futex+0x10/0x10 [ 1594.987180][T19311] ? fd_install+0x223/0x580 [ 1594.987212][T19311] __x64_sys_futex+0x34f/0x4d0 [ 1594.987242][T19311] ? __sys_socket+0xac/0x260 [ 1594.987266][T19311] ? __pfx___x64_sys_futex+0x10/0x10 [ 1594.987310][T19311] do_syscall_64+0x123/0x790 [ 1594.987335][T19311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.987357][T19311] RIP: 0033:0x7faa2ab9e159 [ 1594.987374][T19311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.987395][T19311] RSP: 002b:00007faa2b9a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1594.987418][T19311] RAX: ffffffffffffffda RBX: 00007faa2ae25fa8 RCX: 00007faa2ab9e159 [ 1594.987432][T19311] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa2ae25fa8 [ 1594.987445][T19311] RBP: 00007faa2ae25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1594.987457][T19311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1594.987470][T19311] R13: 00007faa2ae26038 R14: 00007fffe1f99a10 R15: 00007fffe1f99af8 [ 1594.987497][T19311] [ 1595.888428][T19047] usb 6-1: USB disconnect, device number 69 [ 1596.034128][ T5708] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1596.205153][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 1596.208896][ T5708] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1596.237494][ T5708] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1596.275217][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1596.275266][ T5708] usb 4-1: Product: syz [ 1596.275311][ T5708] usb 4-1: Manufacturer: syz [ 1596.275375][ T5708] usb 4-1: SerialNumber: syz [ 1596.402082][ T5708] usb 4-1: config 0 descriptor?? [ 1596.417461][T19333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1596.503214][ T5708] hub 4-1:0.0: bad descriptor, ignoring hub [ 1596.511851][ T5708] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1596.727958][T18683] net_ratelimit: 101 callbacks suppressed [ 1596.830258][ T5708] usb 4-1: USB disconnect, device number 105 [ 1598.453248][T10042] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1598.465253][T10042] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1598.466946][T10042] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1598.469031][T10042] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1598.470593][T10042] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1599.252619][T19361] binder: 19360:19361 ioctl c0189379 200000000380 returned -22 [ 1599.333889][T18366] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1599.341418][T19364] netlink: 'syz.1.3376': attribute type 4 has an invalid length. [ 1599.345442][ T31] audit: type=1400 audit(1791163419.134:1551): avc: denied { write } for pid=19362 comm="syz.1.3376" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1599.379457][T19364] usb usb8: usbfs: process 19364 (syz.1.3376) did not claim interface 0 before use [ 1599.385283][ T31] audit: type=1400 audit(1791163419.184:1552): avc: denied { setopt } for pid=19362 comm="syz.1.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1599.405640][ T31] audit: type=1400 audit(1791163419.204:1553): avc: denied { accept } for pid=19362 comm="syz.1.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1599.494238][T18366] usb 4-1: Using ep0 maxpacket: 16 [ 1599.494906][T18366] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1599.521161][T18366] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.521218][T18366] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1599.596642][T18366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.596660][T18366] usb 4-1: Product: syz [ 1599.596681][T18366] usb 4-1: Manufacturer: syz [ 1599.596695][T18366] usb 4-1: SerialNumber: syz [ 1600.564636][ T5620] Bluetooth: hci0: command tx timeout [ 1600.662280][T19356] FAULT_INJECTION: forcing a failure. [ 1600.662280][T19356] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.662349][T19356] CPU: 0 UID: 0 PID: 19356 Comm: syz.3.3375 Tainted: G L syzkaller #0 PREEMPT(full) [ 1600.662379][T19356] Tainted: [L]=SOFTLOCKUP [ 1600.662386][T19356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1600.662399][T19356] Call Trace: [ 1600.662406][T19356] [ 1600.662416][T19356] dump_stack_lvl+0x100/0x190 [ 1600.662452][T19356] should_fail_ex.cold+0x5/0xa [ 1600.662482][T19356] should_failslab+0xc2/0x120 [ 1600.662511][T19356] __kmalloc_noprof+0xfc/0x840 [ 1600.662536][T19356] ? rcu_is_watching+0x13/0xc0 [ 1600.662565][T19356] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1600.662599][T19356] tomoyo_realpath_from_path+0xb6/0x690 [ 1600.662631][T19356] tomoyo_check_open_permission+0x2af/0x3c0 [ 1600.662657][T19356] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1600.662681][T19356] ? trace_sched_exit_tp+0x120/0x160 [ 1600.662713][T19356] ? __schedule+0x126b/0x6920 [ 1600.662739][T19356] ? hook_file_open+0x248/0x8e0 [ 1600.662784][T19356] tomoyo_file_open+0x6b/0x90 [ 1600.662803][T19356] security_file_open+0xb5/0x1e0 [ 1600.662829][T19356] do_dentry_open+0x588/0x14d0 [ 1600.662861][T19356] vfs_open+0x82/0x3f0 [ 1600.662894][T19356] path_openat+0x19fa/0x2440 [ 1600.662927][T19356] ? __pfx_path_openat+0x10/0x10 [ 1600.662963][T19356] do_file_open+0x20e/0x430 [ 1600.662993][T19356] ? __pfx_do_file_open+0x10/0x10 [ 1600.663040][T19356] ? _raw_spin_unlock+0x28/0x50 [ 1600.663069][T19356] ? alloc_fd+0x471/0x7a0 [ 1600.663105][T19356] do_sys_openat2+0x10f/0x1e0 [ 1600.663135][T19356] ? __pfx_do_sys_openat2+0x10/0x10 [ 1600.663175][T19356] __x64_sys_openat+0x12d/0x210 [ 1600.663205][T19356] ? __pfx___x64_sys_openat+0x10/0x10 [ 1600.663237][T19356] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 1600.663274][T19356] do_syscall_64+0x123/0x790 [ 1600.663299][T19356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.663320][T19356] RIP: 0033:0x7fc3cdb5e98e [ 1600.663337][T19356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1600.663356][T19356] RSP: 002b:00007fc3cea01b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1600.663376][T19356] RAX: ffffffffffffffda RBX: 00007fc3cea026c0 RCX: 00007fc3cdb5e98e [ 1600.663390][T19356] RDX: 0000000000000800 RSI: 00007fc3cea01c00 RDI: ffffffffffffff9c [ 1600.663403][T19356] RBP: 00007fc3cea01c00 R08: 0000000000000000 R09: 0000000000000000 [ 1600.663415][T19356] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1600.663428][T19356] R13: 00007fc3cde26038 R14: 00007fc3cde25fa0 R15: 00007ffd29002f88 [ 1600.663455][T19356] [ 1600.711032][T19356] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1600.839394][T18366] cdc_ether 4-1:1.0: skipping garbage [ 1600.839407][T18366] usb 4-1: No union descriptors [ 1601.755372][T17508] net_ratelimit: 86 callbacks suppressed [ 1601.814186][T10055] usb 4-1: USB disconnect, device number 106 [ 1601.848189][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1602.206619][T19392] binder: 19384:19392 ioctl c0189379 200000000380 returned -22 [ 1602.647323][T19348] Bluetooth: hci0: command tx timeout [ 1603.057393][T19399] FAULT_INJECTION: forcing a failure. [ 1603.057393][T19399] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.057439][T19399] CPU: 0 UID: 0 PID: 19399 Comm: syz.2.3383 Tainted: G L syzkaller #0 PREEMPT(full) [ 1603.057466][T19399] Tainted: [L]=SOFTLOCKUP [ 1603.057473][T19399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1603.057484][T19399] Call Trace: [ 1603.057492][T19399] [ 1603.057500][T19399] dump_stack_lvl+0x100/0x190 [ 1603.057533][T19399] should_fail_ex.cold+0x5/0xa [ 1603.057560][T19399] should_failslab+0xc2/0x120 [ 1603.057598][T19399] __kmalloc_noprof+0xfc/0x840 [ 1603.057620][T19399] ? trace_kmalloc+0xeb/0x110 [ 1603.057645][T19399] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1603.057673][T19399] kernfs_fop_write_iter+0x26a/0x5f0 [ 1603.057698][T19399] iter_file_splice_write+0x830/0x10b0 [ 1603.057743][T19399] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1603.057775][T19399] ? preempt_schedule_irq+0x79/0x90 [ 1603.057811][T19399] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1603.057840][T19399] direct_splice_actor+0x192/0x690 [ 1603.057870][T19399] splice_direct_to_actor+0x345/0xa30 [ 1603.057899][T19399] ? __pfx_direct_splice_actor+0x10/0x10 [ 1603.057931][T19399] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1603.057967][T19399] do_splice_direct+0x174/0x240 [ 1603.057995][T19399] ? __pfx_do_splice_direct+0x10/0x10 [ 1603.058020][T19399] ? avc_policy_seqno+0x9/0x20 [ 1603.058039][T19399] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1603.058070][T19399] ? rw_verify_area+0xce/0x6d0 [ 1603.058092][T19399] do_sendfile+0xadc/0xe20 [ 1603.058118][T19399] ? __pfx_do_sendfile+0x10/0x10 [ 1603.058137][T19399] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1603.058169][T19399] ? __pfx___schedule+0x10/0x10 [ 1603.058190][T19399] __x64_sys_sendfile64+0x1d8/0x220 [ 1603.058217][T19399] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1603.058243][T19399] ? trace_hardirqs_off+0x70/0x170 [ 1603.058275][T19399] do_syscall_64+0x123/0x790 [ 1603.058299][T19399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.058318][T19399] RIP: 0033:0x7fe4db39e159 [ 1603.058335][T19399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.058352][T19399] RSP: 002b:00007fe4dc2c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1603.058372][T19399] RAX: ffffffffffffffda RBX: 00007fe4db626180 RCX: 00007fe4db39e159 [ 1603.058385][T19399] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1603.058396][T19399] RBP: 00007fe4dc2c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.058407][T19399] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1603.058419][T19399] R13: 00007fe4db626218 R14: 00007fe4db626180 R15: 00007ffd45fc0588 [ 1603.058446][T19399] [ 1604.086805][T19348] Bluetooth: hci3: command 0x1003 tx timeout [ 1604.087727][ T5620] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1604.583137][ T31] audit: type=1400 audit(1791163424.374:1554): avc: denied { write } for pid=19400 comm="syz.2.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1604.583414][ T31] audit: type=1400 audit(1791163424.374:1555): avc: denied { read } for pid=19400 comm="syz.2.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1604.724230][ T5620] Bluetooth: hci0: command tx timeout [ 1604.994632][T19414] binder: 19411:19414 ioctl c0189379 200000000380 returned -22 [ 1605.464828][ T5708] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1605.614015][ T5708] usb 6-1: Using ep0 maxpacket: 16 [ 1605.614497][ T5708] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1605.618456][ T5708] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.618489][ T5708] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1605.618505][ T5708] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1605.618532][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.623160][ T5708] usb 6-1: config 0 descriptor?? [ 1605.638545][ T5708] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1605.845624][T19387] Process accounting resumed [ 1605.950827][T19345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.953123][T19345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.953225][T19345] bridge_slave_0: entered allmulticast mode [ 1605.955501][T19345] bridge_slave_0: entered promiscuous mode [ 1605.979776][T19345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.982467][T19345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.982607][T19345] bridge_slave_1: entered allmulticast mode [ 1605.983878][T19345] bridge_slave_1: entered promiscuous mode [ 1606.804442][ T5620] Bluetooth: hci0: command tx timeout [ 1607.152227][T19423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.152608][T19423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.273056][T19440] futex_wake_op: syz.1.3393 tries to shift op by 144; fix this program [ 1607.289469][T19423] net_ratelimit: 135 callbacks suppressed [ 1607.574984][T19423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.597331][T19423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.791481][T19345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.803687][T19046] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.804587][T19199] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.804619][T19199] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.804645][T19199] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.857148][T19345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.874166][ T5708] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1607.890649][T10055] usb 6-1: USB disconnect, device number 70 [ 1608.028916][T19451] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [12] [ 1608.029013][T19451] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 1608.029088][T19451] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1608.029100][T19451] One or more global auth toks could not properly register; rc = [-22] [ 1608.029238][T19451] Error validating options; rc = [-22] [ 1608.047413][T19452] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [102] [ 1608.047523][T19452] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 1608.047564][T19452] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1608.047659][T19452] One or more global auth toks could not properly register; rc = [-22] [ 1608.047827][T19452] Error validating options; rc = [-22] [ 1608.507771][ T5708] usb 4-1: Using ep0 maxpacket: 16 [ 1609.089968][ T5708] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1609.884562][ T5708] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.884821][ T5708] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1610.469813][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.469832][ T5708] usb 4-1: Product: syz [ 1610.469848][ T5708] usb 4-1: Manufacturer: syz [ 1610.469862][ T5708] usb 4-1: SerialNumber: syz [ 1610.515089][ T5708] cdc_ether 4-1:1.0: skipping garbage [ 1610.515103][ T5708] usb 4-1: No union descriptors [ 1610.554454][T19345] team0: Port device team_slave_0 added [ 1610.624906][T19345] team0: Port device team_slave_1 added [ 1610.658064][T18366] usb 4-1: USB disconnect, device number 107 [ 1610.789220][T19456] binder: 19455:19456 ioctl c0189379 200000000380 returned -22 [ 1610.799986][T19345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.799994][T19345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1610.800013][T19345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.819061][T19345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.819076][T19345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1610.819097][T19345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.153883][T10055] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1611.339317][T19345] hsr_slave_0: entered promiscuous mode [ 1611.381657][T10055] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1611.402455][T19345] hsr_slave_1: entered promiscuous mode [ 1611.442186][T19345] debugfs: 'hsr0' already exists in 'hsr' [ 1611.442249][T19345] Cannot create hsr debugfs directory [ 1611.559890][T10055] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1611.559924][T10055] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1611.645128][T10055] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.645147][T10055] usb 2-1: Product: syz [ 1611.645163][T10055] usb 2-1: Manufacturer: syz [ 1611.645177][T10055] usb 2-1: SerialNumber: syz [ 1611.909156][T10055] cdc_mbim 2-1:1.0: skipping garbage [ 1612.126979][T19461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1612.238211][ T31] audit: type=1400 audit(1791163432.034:1556): avc: denied { block_suspend } for pid=19457 comm="syz.3.3399" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1612.253893][ T5722] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1612.405071][ T5722] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1612.408597][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.408615][ T5722] usb 3-1: Product: syz [ 1612.408628][ T5722] usb 3-1: Manufacturer: syz [ 1612.408640][ T5722] usb 3-1: SerialNumber: syz [ 1612.483931][ C0] net_ratelimit: 61 callbacks suppressed [ 1612.669086][ T5722] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 1612.681216][ T5722] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 1612.847754][T19461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1612.848268][T10055] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 1612.851693][T10055] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1612.872185][T10055] wwan wwan0: port wwan0mbim0 attached [ 1612.891316][ T5722] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 1613.011477][T10055] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 8a:e6:6a:bf:25:5e [ 1613.099617][T19478] FAULT_INJECTION: forcing a failure. [ 1613.099617][T19478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1613.099668][T19478] CPU: 0 UID: 0 PID: 19478 Comm: syz.5.3405 Tainted: G L syzkaller #0 PREEMPT(full) [ 1613.099693][T19478] Tainted: [L]=SOFTLOCKUP [ 1613.099700][T19478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1613.099711][T19478] Call Trace: [ 1613.099717][T19478] [ 1613.099724][T19478] dump_stack_lvl+0x100/0x190 [ 1613.099753][T19478] should_fail_ex.cold+0x5/0xa [ 1613.099781][T19478] _copy_from_user+0x2e/0xd0 [ 1613.099804][T19478] __x64_sys_rt_tgsigqueueinfo+0x11d/0x210 [ 1613.099831][T19478] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 1613.099855][T19478] ? fput+0x7c/0x100 [ 1613.099889][T19478] do_syscall_64+0x123/0x790 [ 1613.099912][T19478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.099931][T19478] RIP: 0033:0x7faa2ab9e159 [ 1613.099946][T19478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.099963][T19478] RSP: 002b:00007faa2b9a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 1613.099982][T19478] RAX: ffffffffffffffda RBX: 00007faa2ae25fa0 RCX: 00007faa2ab9e159 [ 1613.099995][T19478] RDX: 000000000000000b RSI: 0000000000000695 RDI: 0000000000000694 [ 1613.100006][T19478] RBP: 00007faa2b9a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1613.100017][T19478] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 1613.100028][T19478] R13: 00007faa2ae26038 R14: 00007faa2ae25fa0 R15: 00007fffe1f99af8 [ 1613.100050][T19478] [ 1613.462579][T18366] usb 2-1: USB disconnect, device number 83 [ 1613.469700][T18366] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1613.689415][ T31] audit: type=1400 audit(1791163433.464:1557): avc: denied { create } for pid=19480 comm="syz.5.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1613.689566][ T31] audit: type=1400 audit(1791163433.474:1558): avc: denied { write } for pid=19480 comm="syz.5.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1614.012278][T18366] wwan wwan0: port wwan0mbim0 disconnected [ 1614.075815][T19345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1614.132207][T19345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1614.144335][T19345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1614.220480][T19491] futex_wake_op: syz.1.3407 tries to shift op by 144; fix this program [ 1614.229820][T19345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1614.230760][T19345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1614.376953][T19345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1614.377691][T19345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1614.480867][T19345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1614.558794][T19500] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [95] [ 1614.558839][T19500] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 1614.558899][T19500] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1614.558934][T19500] One or more global auth toks could not properly register; rc = [-22] [ 1614.559073][T19500] Error validating options; rc = [-22] [ 1615.438705][ T5722] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 1615.438895][ T5722] kalmia 3-1:1.0: probe with driver kalmia failed with error -71 [ 1615.492368][ T5722] usb 3-1: USB disconnect, device number 99 [ 1615.643927][ T31] audit: type=1400 audit(1791163435.434:1559): avc: denied { write } for pid=19493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1616.256102][T18366] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1616.321775][T19345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.363268][T19345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1616.369261][ T31] audit: type=1400 audit(1791163436.134:1560): avc: denied { write } for pid=19521 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1616.500648][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.500731][ T8934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1616.522550][T18366] usb 6-1: Using ep0 maxpacket: 32 [ 1616.530093][T18366] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 1616.552828][T18366] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.552888][T18366] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1616.910951][T18366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.910962][T18366] usb 6-1: Product: syz [ 1616.910971][T18366] usb 6-1: Manufacturer: syz [ 1616.910980][T18366] usb 6-1: SerialNumber: syz [ 1616.922219][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.922289][ T8934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1618.013354][T19519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1618.052356][T17508] net_ratelimit: 65 callbacks suppressed [ 1618.057152][T19519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1618.089445][T18366] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1618.102925][T18366] usb 6-1: USB disconnect, device number 71 [ 1618.649649][ T31] audit: type=1400 audit(1791163438.444:1561): avc: denied { write } for pid=19538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1618.735468][T19568] futex_wake_op: syz.1.3419 tries to shift op by 144; fix this program [ 1618.997924][ T31] audit: type=1400 audit(1791163438.794:1562): avc: denied { write } for pid=19577 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1619.480515][T19587] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [144] [ 1619.480596][T19587] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 1619.481020][T19587] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1619.481037][T19587] One or more global auth toks could not properly register; rc = [-22] [ 1619.481260][T19587] Error validating options; rc = [-22] [ 1620.238127][T19345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1620.465139][T19592] overlayfs: failed to resolve 'obj_user=/': -2 [ 1621.276892][ T5722] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1621.467605][ T5722] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1621.469979][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.470020][ T5722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1621.470045][ T5722] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1621.470097][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.577215][T19345] veth0_vlan: entered promiscuous mode [ 1621.607345][T19345] veth1_vlan: entered promiscuous mode [ 1621.713261][T19345] veth0_macvtap: entered promiscuous mode [ 1621.731381][T19345] veth1_macvtap: entered promiscuous mode [ 1621.922863][T19345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1622.083261][T19345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1622.329197][ T1499] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.329229][ T1499] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.329330][ T1499] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.344010][T18873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.622512][T17887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1622.622526][T17887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.689441][ T8934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1622.689453][ T8934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.690750][ T31] audit: type=1400 audit(1791163442.484:1563): avc: denied { getopt } for pid=19607 comm="syz.2.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1622.794228][T19047] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1622.802273][T19617] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18059] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[19617] [ 1622.946504][T19047] usb 6-1: Using ep0 maxpacket: 8 [ 1622.956351][T19047] usb 6-1: New USB device found, idVendor=5050, idProduct=8001, bcdDevice=cc.b3 [ 1622.959836][T19047] usb 6-1: config 139 has an invalid interface number: 96 but max is 2 [ 1622.959859][T19047] usb 6-1: config 139 contains an unexpected descriptor of type 0x2, skipping [ 1622.959878][T19047] usb 6-1: config 139 has an invalid interface number: 232 but max is 2 [ 1622.959896][T19047] usb 6-1: config 139 has an invalid interface number: 33 but max is 2 [ 1622.959913][T19047] usb 6-1: config 139 contains an unexpected descriptor of type 0x1, skipping [ 1622.959930][T19047] usb 6-1: config 139 has no interface number 0 [ 1622.959943][T19047] usb 6-1: config 139 has no interface number 1 [ 1622.959957][T19047] usb 6-1: config 139 has no interface number 2 [ 1622.960013][T19047] usb 6-1: config 139 interface 96 altsetting 9 bulk endpoint 0xF has invalid maxpacket 32 [ 1622.960046][T19047] usb 6-1: config 139 interface 96 altsetting 9 endpoint 0x1 has an invalid bInterval 253, changing to 11 [ 1622.960065][T19047] usb 6-1: config 139 interface 96 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1622.960096][T19047] usb 6-1: config 139 interface 96 altsetting 9 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1622.960133][T19047] usb 6-1: config 139 interface 96 altsetting 9 has a duplicate endpoint with address 0x8F, skipping [ 1622.960152][T19047] usb 6-1: config 139 interface 96 altsetting 9 endpoint 0x7 has invalid maxpacket 999, setting to 64 [ 1622.960174][T19047] usb 6-1: config 139 interface 96 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 1622.960193][T19047] usb 6-1: config 139 interface 96 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 1622.960266][T19047] usb 6-1: config 139 interface 232 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 1622.960283][T19047] usb 6-1: config 139 interface 232 altsetting 8 endpoint 0xD has an invalid bInterval 255, changing to 11 [ 1622.960303][T19047] usb 6-1: config 139 interface 232 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 1622.960334][T19047] usb 6-1: config 139 interface 232 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 1622.960351][T19047] usb 6-1: config 139 interface 232 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 1622.960375][T19047] usb 6-1: config 139 interface 33 altsetting 6 has an endpoint descriptor with address 0x1C, changing to 0xC [ 1622.960393][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 1622.960410][T19047] usb 6-1: config 139 interface 33 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1622.960446][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 1622.960462][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 1622.960478][T19047] usb 6-1: config 139 interface 33 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1622.960493][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 1622.960510][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 1622.960529][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 1622.960548][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 1622.960566][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 1622.960585][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 1622.960603][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 1622.960621][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 1622.960641][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 1622.960659][T19047] usb 6-1: config 139 interface 33 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 1622.960678][T19047] usb 6-1: config 139 interface 96 has no altsetting 0 [ 1622.960694][T19047] usb 6-1: config 139 interface 232 has no altsetting 0 [ 1622.960709][T19047] usb 6-1: config 139 interface 33 has no altsetting 0 [ 1622.972708][T19047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.972724][T19047] usb 6-1: Product: 䣼 [ 1622.972736][T19047] usb 6-1: Manufacturer: Ь [ 1622.972749][T19047] usb 6-1: SerialNumber: ⶋ億䄴煞ᾟ盚儺릖Џ᜘㠠ᣳℑ壼ꌅ鏆뗜䓭ꔃﭿ椨窹♈ᩒ♌ᑟ后蟷⫖⽚죈﫨ఆ棲俼澇ⰼ䥁텨鲕䕨퉿䘁먧푿ᵍ [ 1622.981893][T19615] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1623.000257][T18683] Bluetooth: hci3: Frame reassembly failed (-84) [ 1623.206945][T16052] net_ratelimit: 193 callbacks suppressed [ 1623.468296][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3372'. [ 1623.800399][ T5708] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1623.830655][ T31] audit: type=1400 audit(1791163443.554:1564): avc: denied { create } for pid=19614 comm="syz.5.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1623.962376][T19615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.989298][T19615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.132606][T19615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.180506][T19615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.324261][ T5722] cxacru 4-1:1.0: send of cm 0x84 failed (-104) [ 1624.324463][ T5722] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -104 [ 1624.333392][ T5708] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1624.367549][ T5708] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.367585][ T5708] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1624.435793][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.435811][ T5708] usb 2-1: Product: syz [ 1624.435825][ T5708] usb 2-1: Manufacturer: syz [ 1624.435857][ T5708] usb 2-1: SerialNumber: syz [ 1624.587316][ T5722] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 1624.589096][ T5722] ATM dev 0: poll status: error -71 [ 1624.589153][ T5722] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 1624.589606][ T5722] ATM dev 0: usbatm_submit_urb: urb 0xffff88807b4ab400 submission failed (-8)! [ 1624.608604][ T5722] ATM dev 0: usbatm_submit_urb: urb 0xffff88807b4abe00 submission failed (-8)! [ 1624.621153][ T5722] ATM dev 0: usbatm_submit_urb: urb 0xffff88807b4ab500 submission failed (-8)! [ 1624.621626][ T5722] ATM dev 0: usbatm_submit_urb: urb 0xffff88807b4abd00 submission failed (-8)! [ 1624.734567][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88807b4abd00 submission failed (-8)! [ 1624.844116][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88807b4abd00 submission failed (-8)! [ 1624.953932][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88807b4abd00 submission failed (-8)! [ 1625.044008][T19348] Bluetooth: hci3: command 0x1003 tx timeout [ 1625.044139][ T5620] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1625.102587][ T5722] usb 4-1: USB disconnect, device number 108 [ 1625.499181][ T5708] cdc_mbim 2-1:1.0: skipping garbage [ 1625.516425][T19622] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1625.570761][T19047] ftdi_sio 6-1:139.96: FTDI USB Serial Device converter detected [ 1625.572268][T19047] ftdi_sio ttyUSB0: unknown device type: 0xccb3 [ 1625.708090][T19047] ftdi_sio 6-1:139.232: FTDI USB Serial Device converter detected [ 1625.730667][T19047] ftdi_sio ttyUSB1: unknown device type: 0xccb3 [ 1625.890983][T19047] ftdi_sio 6-1:139.33: FTDI USB Serial Device converter detected [ 1625.971316][T19047] ftdi_sio ttyUSB2: unknown device type: 0xccb3 [ 1626.079515][T19047] usb 6-1: USB disconnect, device number 72 [ 1626.155574][T19047] ftdi_sio 6-1:139.96: device disconnected [ 1626.178456][T19047] ftdi_sio 6-1:139.232: device disconnected [ 1626.204526][T19047] ftdi_sio 6-1:139.33: device disconnected [ 1626.231229][T19622] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1626.232635][ T5708] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 1626.252181][ T5708] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1626.281914][ T5708] wwan wwan0: port wwan0mbim0 attached [ 1626.298644][ T5708] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:95:4b:be:1e:d5 [ 1626.570353][T19633] binder: 19631:19633 ioctl c0189379 200000000380 returned -22 [ 1627.121152][ T5795] usb 2-1: USB disconnect, device number 84 [ 1627.135920][ T5795] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1627.358261][ T5795] wwan wwan0: port wwan0mbim0 disconnected [ 1627.864713][ T5722] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1627.877293][T19665] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [21] [ 1627.877305][T19665] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 1627.877313][T19665] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1627.877320][T19665] One or more global auth toks could not properly register; rc = [-22] [ 1627.877337][T19665] Error validating options; rc = [-22] [ 1628.069975][ T5722] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1628.071844][ T5722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.071879][ T5722] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1628.073898][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.073915][ T5722] usb 4-1: Product: syz [ 1628.073927][ T5722] usb 4-1: Manufacturer: syz [ 1628.073939][ T5722] usb 4-1: SerialNumber: syz [ 1628.112450][ T5722] cdc_mbim 4-1:1.0: skipping garbage [ 1628.288951][T19679] SELinux: failed to load policy [ 1628.307156][T19650] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1628.403849][ C0] net_ratelimit: 210 callbacks suppressed [ 1629.940231][T19697] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1629.940733][ T5722] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 1629.947341][ T5722] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1629.957354][ T5722] wwan wwan0: port wwan0mbim0 attached [ 1629.991209][ T5722] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, ae:46:35:43:89:ca [ 1630.100050][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1630.100067][ T31] audit: type=1400 audit(1791163448.901:1570): avc: denied { write } for pid=19685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1630.263684][ T31] audit: type=1400 audit(1791163449.061:1571): avc: denied { write } for pid=19708 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1630.418024][T19712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3445'. [ 1630.472275][ T31] audit: type=1400 audit(1791163449.161:1572): avc: denied { append } for pid=19698 comm="syz.2.3445" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1630.472566][ T31] audit: type=1400 audit(1791163449.181:1573): avc: denied { setattr } for pid=19698 comm="syz.2.3445" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1630.947761][T18841] udevd[18841]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1630.970428][T19047] usb 4-1: USB disconnect, device number 109 [ 1631.009059][T19047] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1631.087757][T19047] wwan wwan0: port wwan0mbim0 disconnected [ 1631.168529][T19717] xt_hashlimit: max too large, truncated to 1048576 [ 1631.168684][T19717] xt_hashlimit: overflow, try lower: 0/0 [ 1632.003495][T19725] jffs2: notice: (19725) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1633.053547][T19733] futex_wake_op: syz.3.3449 tries to shift op by 144; fix this program [ 1633.289680][T19745] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3451'. [ 1633.728204][T17508] net_ratelimit: 136 callbacks suppressed [ 1633.795442][ T31] audit: type=1400 audit(1791163452.601:1574): avc: denied { write } for pid=19719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1633.983914][ T31] audit: type=1400 audit(1791163452.781:1575): avc: denied { write } for pid=19751 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1634.411410][ T5795] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1634.915286][ T5795] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1634.916501][ T5795] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.916537][ T5795] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1634.918920][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.918939][ T5795] usb 2-1: Product: syz [ 1634.918952][ T5795] usb 2-1: Manufacturer: syz [ 1634.918965][ T5795] usb 2-1: SerialNumber: syz [ 1634.967342][ T5795] cdc_mbim 2-1:1.0: skipping garbage [ 1635.186978][ T31] audit: type=1400 audit(1791163453.981:1576): avc: denied { write } for pid=19759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1635.210513][T19755] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1635.254263][T19778] FAULT_INJECTION: forcing a failure. [ 1635.254263][T19778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1635.254294][T19778] CPU: 0 UID: 0 PID: 19778 Comm: syz.5.3458 Tainted: G L syzkaller #0 PREEMPT(full) [ 1635.254328][T19778] Tainted: [L]=SOFTLOCKUP [ 1635.254336][T19778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1635.254348][T19778] Call Trace: [ 1635.254357][T19778] [ 1635.254365][T19778] dump_stack_lvl+0x100/0x190 [ 1635.254397][T19778] should_fail_ex.cold+0x5/0xa [ 1635.254424][T19778] ? prepare_alloc_pages+0x16d/0x5b0 [ 1635.254453][T19778] should_fail_alloc_page+0xeb/0x140 [ 1635.254483][T19778] prepare_alloc_pages+0x1f0/0x5b0 [ 1635.254514][T19778] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1635.254547][T19778] ? lock_acquire+0x1d1/0x380 [ 1635.254574][T19778] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1635.254600][T19778] ? __lock_acquire+0x5c0/0x1f40 [ 1635.254622][T19778] ? look_up_lock_class+0x64/0x120 [ 1635.254645][T19778] ? register_lock_class+0x3f/0x7b0 [ 1635.254676][T19778] ? __lock_acquire+0x5c0/0x1f40 [ 1635.254704][T19778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1635.254729][T19778] ? policy_nodemask+0xed/0x4f0 [ 1635.254759][T19778] alloc_pages_mpol+0x201/0x550 [ 1635.254789][T19778] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1635.254816][T19778] ? __anon_vma_prepare+0x2f1/0x690 [ 1635.254834][T19778] ? __anon_vma_prepare+0x2f1/0x690 [ 1635.254855][T19778] folio_alloc_mpol_noprof+0x36/0x260 [ 1635.254876][T19778] vma_alloc_folio_noprof+0xed/0x1d0 [ 1635.254893][T19778] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1635.254918][T19778] do_wp_page+0xe11/0x45c0 [ 1635.254951][T19778] ? lock_acquire+0x1d1/0x380 [ 1635.254974][T19778] ? __pfx_do_wp_page+0x10/0x10 [ 1635.255003][T19778] ? do_raw_spin_lock+0x128/0x260 [ 1635.255030][T19778] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1635.255062][T19778] __handle_mm_fault+0x1cd2/0x2f60 [ 1635.255092][T19778] ? lock_vma_under_rcu+0x11d/0x590 [ 1635.255117][T19778] ? __pfx___handle_mm_fault+0x10/0x10 [ 1635.255148][T19778] ? lock_vma_under_rcu+0x17c/0x590 [ 1635.255189][T19778] handle_mm_fault+0x363/0xa20 [ 1635.255221][T19778] do_user_addr_fault+0x59c/0x12f0 [ 1635.255251][T19778] exc_page_fault+0x6f/0xd0 [ 1635.255271][T19778] asm_exc_page_fault+0x26/0x30 [ 1635.255290][T19778] RIP: 0033:0x7faa2aa52d1f [ 1635.255318][T19778] Code: 24 10 4c 89 44 24 08 48 8b 74 24 28 48 8b 5c 24 20 4c 8b 74 24 18 4c 8b 64 24 10 4c 8b 6c 24 08 48 89 da e8 23 b4 14 00 8b 13 <49> 89 1e b9 01 80 00 00 48 89 c5 8b 43 40 41 89 e8 8d 14 90 8b 43 [ 1635.255337][T19778] RSP: 002b:00007faa2b9a7fc0 EFLAGS: 00010286 [ 1635.255354][T19778] RAX: ffffffffffffffff RBX: 0000000000000000 RCX: ffffffffffffffe8 [ 1635.255366][T19778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001004175 [ 1635.255376][T19778] RBP: 00007faa2ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 1635.255387][T19778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1635.255398][T19778] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffe1f99af8 [ 1635.255422][T19778] [ 1635.255443][T19778] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1635.262643][ T31] audit: type=1400 audit(1791163454.061:1577): avc: denied { shutdown } for pid=19772 comm="syz.6.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1635.494140][T16052] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1635.587241][ T31] audit: type=1400 audit(1791163454.371:1578): avc: denied { write } for pid=19781 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1635.704517][T16052] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1635.706037][T16052] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.706078][T16052] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1635.711939][T16052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.711959][T16052] usb 4-1: Product: syz [ 1635.711973][T16052] usb 4-1: Manufacturer: syz [ 1635.711986][T16052] usb 4-1: SerialNumber: syz [ 1635.777922][T16052] cdc_mbim 4-1:1.0: skipping garbage [ 1635.867017][T19755] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1635.867501][ T5795] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 1635.870813][ T5795] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1635.889426][ T5795] wwan wwan0: port wwan0mbim0 attached [ 1635.894679][ T5722] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1635.904029][ T5795] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, f2:8e:85:f0:c2:ff [ 1635.992783][T19777] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1636.045336][ T5722] usb 6-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 1636.048639][ T5722] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1636.048771][ T5722] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1636.048817][ T5722] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1636.048931][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.124240][T19792] jffs2: notice: (19792) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1636.148147][ T5708] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1636.218139][ T5722] usb 6-1: config 0 descriptor?? [ 1636.339196][T19783] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1636.505255][ T5708] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1636.520030][ T5708] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.520060][ T5708] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1636.757562][ T5708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.757581][ T5708] usb 7-1: Product: syz [ 1636.757595][ T5708] usb 7-1: Manufacturer: syz [ 1636.757608][ T5708] usb 7-1: SerialNumber: syz [ 1636.899465][ T5708] cdc_mbim 7-1:1.0: skipping garbage [ 1636.990349][T19777] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1636.990892][T16052] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 1637.010589][T16052] cdc_mbim 4-1:1.0: cdc-wdm1: USB WDM device [ 1637.026575][T16052] wwan wwan1: port wwan1mbim0 attached [ 1637.043684][T16052] cdc_mbim 4-1:1.0 wwan1: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 72:54:6b:be:d6:a0 [ 1637.111189][T19786] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1637.135032][ T5722] lenovo 0003:04B3:3109.005C: ignoring exceeding usage max [ 1637.145850][T18952] usb 2-1: USB disconnect, device number 85 [ 1637.161528][T18952] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1637.180159][ T5722] lenovo 0003:04B3:3109.005C: hidraw0: USB HID v0.11 Joystick [HID 04b3:3109] on usb-dummy_hcd.5-1/input0 [ 1637.628052][T18952] wwan wwan0: port wwan0mbim0 disconnected [ 1637.945201][T19797] Process accounting paused [ 1638.072229][T19811] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1638.103871][ T5708] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 1638.177668][ T5708] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 1638.177903][ T9935] usb 6-1: USB disconnect, device number 73 [ 1638.219623][ T5708] wwan wwan0: port wwan0mbim0 attached [ 1638.286042][ T5708] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 3e:e2:75:f3:fd:97 [ 1638.322486][ T31] audit: type=1400 audit(1791163457.121:1579): avc: denied { write } for pid=19795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1638.420454][ T5722] usb 4-1: USB disconnect, device number 110 [ 1638.422639][ T5722] cdc_mbim 4-1:1.0 wwan1: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1638.572059][ T5722] wwan wwan1: port wwan1mbim0 disconnected [ 1638.592481][T18952] usb 7-1: USB disconnect, device number 2 [ 1638.606765][T19822] binder: 19816:19822 ioctl c0189379 200000000380 returned -22 [ 1638.613383][T18952] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 1639.020620][T11352] net_ratelimit: 104 callbacks suppressed [ 1639.071383][ T31] audit: type=1400 audit(1791163457.871:1580): avc: denied { write } for pid=19827 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1639.168864][T18952] wwan wwan0: port wwan0mbim0 disconnected [ 1639.272558][T19833] tipc: Can't bind to reserved service type 0 [ 1639.386985][T19834] CacheFiles: No cache directory specified [ 1639.394562][ T31] audit: type=1400 audit(1791163458.191:1581): avc: denied { map } for pid=19831 comm="syz.3.3468" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1639.395578][ T31] audit: type=1400 audit(1791163458.201:1582): avc: denied { execute } for pid=19831 comm="syz.3.3468" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1640.581415][T19851] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [50] [ 1640.581431][T19851] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 1640.581444][T19851] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1640.581455][T19851] One or more global auth toks could not properly register; rc = [-22] [ 1640.627761][T19851] Error validating options; rc = [-22] [ 1641.225563][ T31] audit: type=1400 audit(1791163460.031:1583): avc: denied { write } for pid=19838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1641.304294][T19868] jffs2: notice: (19868) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1641.381104][ T31] audit: type=1400 audit(1791163460.161:1584): avc: denied { write } for pid=19862 comm="syz.3.3474" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1642.247173][ T31] audit: type=1400 audit(1791163461.051:1585): avc: denied { write } for pid=19871 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1642.425135][ T31] audit: type=1400 audit(1791163461.231:1586): avc: denied { getopt } for pid=19839 comm="syz.1.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1642.795139][ T31] audit: type=1400 audit(1791163461.521:1587): avc: denied { write } for pid=19877 comm="syz.3.3477" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1643.399428][ T31] audit: type=1400 audit(1791163462.121:1588): avc: denied { getopt } for pid=19885 comm="syz.2.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1643.402994][T19886] batadv_slave_1: entered promiscuous mode [ 1643.430405][ T31] audit: type=1400 audit(1791163462.231:1589): avc: denied { name_bind } for pid=19887 comm="syz.5.3479" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1643.647747][T19885] batadv_slave_1: left promiscuous mode [ 1644.064149][T18366] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1644.115974][T19199] net_ratelimit: 92 callbacks suppressed [ 1644.236256][T18366] usb 2-1: Using ep0 maxpacket: 32 [ 1644.249756][T18366] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1644.328709][T18366] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1644.605401][T18366] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1644.605421][T18366] usb 2-1: Product: syz [ 1644.605436][T18366] usb 2-1: Manufacturer: syz [ 1644.605450][T18366] usb 2-1: SerialNumber: syz [ 1644.700797][T18366] usb 2-1: config 0 descriptor?? [ 1644.707686][T19896] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1644.714687][T18366] hub 2-1:0.0: bad descriptor, ignoring hub [ 1644.714703][T18366] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1644.763668][T19901] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [149] [ 1644.763689][T19901] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 1644.763711][T19901] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1644.763722][T19901] One or more global auth toks could not properly register; rc = [-22] [ 1644.763752][T19901] Error validating options; rc = [-22] [ 1644.896100][ T31] audit: type=1400 audit(1791163463.701:1590): avc: denied { accept } for pid=19904 comm="syz.2.3485" lport=38230 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1644.896579][ T31] audit: type=1400 audit(1791163463.701:1591): avc: denied { setopt } for pid=19904 comm="syz.2.3485" lport=38230 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1644.898795][ T31] audit: type=1400 audit(1791163463.701:1592): avc: denied { write } for pid=19904 comm="syz.2.3485" lport=38230 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1645.030948][T19913] binder: 19910:19913 ioctl c0189379 200000000380 returned -22 [ 1646.032046][T19915] binder: 19907:19915 ioctl c0189379 200000000380 returned -22 [ 1646.372958][ T9935] usb 2-1: USB disconnect, device number 86 [ 1647.765297][ T5722] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1647.959143][ T5722] usb 6-1: Using ep0 maxpacket: 32 [ 1647.961826][ T5722] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1647.984761][ T5722] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1648.024775][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1648.024802][ T5722] usb 6-1: Product: syz [ 1648.024866][ T5722] usb 6-1: Manufacturer: syz [ 1648.024931][ T5722] usb 6-1: SerialNumber: syz [ 1648.272371][ T5722] usb 6-1: config 0 descriptor?? [ 1648.292040][T19932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1648.437513][ T5722] hub 6-1:0.0: bad descriptor, ignoring hub [ 1648.438399][ T5722] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1649.214299][ C1] net_ratelimit: 100 callbacks suppressed [ 1649.656611][ T5722] usb 6-1: USB disconnect, device number 74 [ 1651.026845][T19958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=19958 comm=syz.3.3499 [ 1651.280369][T19962] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [14] [ 1651.280389][T19962] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 1651.280404][T19962] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1651.280416][T19962] One or more global auth toks could not properly register; rc = [-22] [ 1651.280442][T19962] Error validating options; rc = [-22] [ 1651.520992][T19968] binder: 19963:19968 ioctl c0189379 200000000380 returned -22 [ 1651.713600][T19973] futex_wake_op: syz.3.3503 tries to shift op by 144; fix this program [ 1653.421242][T19998] jffs2: notice: (19998) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1653.498785][ T31] audit: type=1400 audit(1791163472.251:1593): avc: denied { write } for pid=19992 comm="syz.6.3509" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1653.537350][T20000] binder: 19991:20000 ioctl c0189379 200000000380 returned -22 [ 1654.244154][ C1] net_ratelimit: 100 callbacks suppressed [ 1656.076623][T20009] 9pnet_fd: Insufficient options for proto=fd [ 1656.089246][ T31] audit: type=1400 audit(1791163474.891:1594): avc: denied { connect } for pid=20008 comm="syz.5.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1657.407639][T20025] futex_wake_op: syz.3.3517 tries to shift op by 144; fix this program [ 1659.557611][T20046] net_ratelimit: 78 callbacks suppressed [ 1660.014888][T20049] futex_wake_op: syz.2.3522 tries to shift op by 144; fix this program [ 1660.153468][T20052] FAULT_INJECTION: forcing a failure. [ 1660.153468][T20052] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.153495][T20052] CPU: 0 UID: 0 PID: 20052 Comm: syz.3.3523 Tainted: G L syzkaller #0 PREEMPT(full) [ 1660.153511][T20052] Tainted: [L]=SOFTLOCKUP [ 1660.153515][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1660.153522][T20052] Call Trace: [ 1660.153526][T20052] [ 1660.153531][T20052] dump_stack_lvl+0x100/0x190 [ 1660.153556][T20052] should_fail_ex.cold+0x5/0xa [ 1660.153572][T20052] should_failslab+0xc2/0x120 [ 1660.153589][T20052] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1660.153603][T20052] ? __alloc_skb+0x5b7/0x710 [ 1660.153618][T20052] ? __alloc_skb+0x140/0x710 [ 1660.153635][T20052] __alloc_skb+0x140/0x710 [ 1660.153650][T20052] ? __alloc_skb+0x5b7/0x710 [ 1660.153665][T20052] ? __pfx___alloc_skb+0x10/0x10 [ 1660.153679][T20052] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1660.153694][T20052] ? sock_has_perm+0x25a/0x2f0 [ 1660.153706][T20052] ? __pfx_sock_has_perm+0x10/0x10 [ 1660.153720][T20052] netlink_alloc_large_skb+0x69/0x150 [ 1660.153736][T20052] netlink_sendmsg+0x680/0xda0 [ 1660.153760][T20052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1660.153784][T20052] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1660.153808][T20052] ____sys_sendmsg+0xa4d/0xbe0 [ 1660.153824][T20052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1660.153847][T20052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1660.153870][T20052] ? lock_acquire+0x1d1/0x380 [ 1660.153891][T20052] ? get_pid_task+0x2a/0x250 [ 1660.153916][T20052] ___sys_sendmsg+0x190/0x1e0 [ 1660.153939][T20052] ? __pfx____sys_sendmsg+0x10/0x10 [ 1660.153960][T20052] ? get_pid_task+0x106/0x250 [ 1660.153993][T20052] ? find_held_lock+0x2b/0x80 [ 1660.154036][T20052] __sys_sendmsg+0x160/0x210 [ 1660.154062][T20052] ? __pfx___sys_sendmsg+0x10/0x10 [ 1660.154102][T20052] do_syscall_64+0x123/0x790 [ 1660.154126][T20052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.154146][T20052] RIP: 0033:0x7fc3cdb9e159 [ 1660.154162][T20052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1660.154179][T20052] RSP: 002b:00007fc3cea02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1660.154198][T20052] RAX: ffffffffffffffda RBX: 00007fc3cde25fa0 RCX: 00007fc3cdb9e159 [ 1660.154211][T20052] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 1660.154222][T20052] RBP: 00007fc3cea02090 R08: 0000000000000000 R09: 0000000000000000 [ 1660.154233][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1660.154244][T20052] R13: 00007fc3cde26038 R14: 00007fc3cde25fa0 R15: 00007ffd29002f88 [ 1660.154269][T20052] [ 1661.894507][T18366] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1662.290371][T18366] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1662.290409][T18366] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 1662.292039][T18366] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 1662.292122][T18366] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1662.300147][T18366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.300164][T18366] usb 4-1: Product: syz [ 1662.300176][T18366] usb 4-1: Manufacturer: syz [ 1662.300188][T18366] usb 4-1: SerialNumber: syz [ 1662.351677][T20062] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1662.398899][T20069] tipc: Started in network mode [ 1662.398915][T20069] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1662.399071][T20069] tipc: Enabled bearer , priority 1 [ 1662.647975][T18366] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1662.648012][T18366] usb 4-1: MIDIStreaming interface descriptor not found [ 1662.844802][T18366] usb 4-1: USB disconnect, device number 111 [ 1662.866520][T20080] binder: 20075:20080 ioctl c0189379 200000000380 returned -22 [ 1662.988690][T20084] udevd[20084]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1663.011800][T20086] binder: 20077:20086 ioctl c0189379 200000000380 returned -22 [ 1663.027652][T20078] binder: 20077:20078 ioctl c0306201 200000000040 returned -14 [ 1663.284702][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1663.714555][ T5708] tipc: Node number set to 43690 [ 1663.902001][T20098] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1663.993257][ T31] audit: type=1400 audit(1791163482.791:1595): avc: denied { mounton } for pid=20100 comm="syz.3.3538" path="/proc/359/task" dev="proc" ino=67144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1664.033000][T20101] gretap1: entered promiscuous mode [ 1664.073870][ T5722] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1664.084788][ T31] audit: type=1400 audit(1791163482.881:1596): avc: denied { mounton } for pid=20095 comm="syz.1.3536" path="/150/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1664.223954][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 1664.224521][ T5722] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1664.226650][ T5722] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1664.226672][ T5722] usb 3-1: config 0 has no interface number 0 [ 1664.228717][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.228736][ T5722] usb 3-1: Product: syz [ 1664.228750][ T5722] usb 3-1: Manufacturer: syz [ 1664.228765][ T5722] usb 3-1: SerialNumber: syz [ 1664.287998][ T5722] usb 3-1: config 0 descriptor?? [ 1664.301778][ T5722] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1664.301837][ T5722] usb 3-1: selecting invalid altsetting 1 [ 1664.301849][ T5722] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1664.332642][ T5722] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1664.346134][ T5722] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1664.346190][ T5722] usb 3-1: media controller created [ 1664.407917][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1664.413949][T18366] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1664.477199][T20108] binder: 20107:20108 ioctl c0189379 200000000380 returned -22 [ 1664.564540][T18366] usb 6-1: Using ep0 maxpacket: 16 [ 1664.565281][T18366] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1664.568842][T18366] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.568893][T18366] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1664.572620][T18366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.572637][T18366] usb 6-1: Product: syz [ 1664.572649][T18366] usb 6-1: Manufacturer: syz [ 1664.572662][T18366] usb 6-1: SerialNumber: syz [ 1664.587550][T18366] cdc_ether 6-1:1.0: skipping garbage [ 1664.587562][T18366] usb 6-1: No union descriptors [ 1664.723832][ C1] net_ratelimit: 110 callbacks suppressed [ 1665.052002][ T31] audit: type=1400 audit(1791163483.841:1597): avc: denied { write } for pid=20093 comm="syz.2.3535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1665.345767][T20118] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input97 [ 1665.535601][ T5722] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1666.035810][ T5722] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1666.096636][T20094] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1666.096852][T20104] FAULT_INJECTION: forcing a failure. [ 1666.096852][T20104] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1666.096880][T20104] CPU: 1 UID: 0 PID: 20104 Comm: syz.5.3539 Tainted: G L syzkaller #0 PREEMPT(full) [ 1666.096909][T20104] Tainted: [L]=SOFTLOCKUP [ 1666.096917][T20104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1666.096930][T20104] Call Trace: [ 1666.096938][T20104] [ 1666.096947][T20104] dump_stack_lvl+0x100/0x190 [ 1666.096981][T20104] should_fail_ex.cold+0x5/0xa [ 1666.097010][T20104] get_futex_key+0x1d0/0x14f0 [ 1666.097040][T20104] ? __pfx_get_futex_key+0x10/0x10 [ 1666.097067][T20104] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1666.097096][T20104] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1666.097123][T20104] futex_wait_setup+0x91/0x540 [ 1666.097147][T20104] __futex_wait+0x19f/0x300 [ 1666.097166][T20104] ? __pfx___futex_wait+0x10/0x10 [ 1666.097182][T20104] ? __pfx_try_to_wake_up+0x10/0x10 [ 1666.097203][T20104] ? futex_hash+0x311/0x400 [ 1666.097229][T20104] ? __pfx_futex_wake_mark+0x10/0x10 [ 1666.097253][T20104] ? find_held_lock+0x2b/0x80 [ 1666.097280][T20104] ? futex_wake+0x4ea/0x5e0 [ 1666.097307][T20104] futex_wait+0xe6/0x370 [ 1666.097327][T20104] ? __pfx_futex_wait+0x10/0x10 [ 1666.097354][T20104] ? percpu_counter_add_batch+0xb9/0x230 [ 1666.097381][T20104] ? errseq_sample+0x51/0x70 [ 1666.097405][T20104] ? file_init_path+0x48e/0x670 [ 1666.097438][T20104] do_futex+0x265/0x440 [ 1666.097468][T20104] ? __pfx_do_futex+0x10/0x10 [ 1666.097496][T20104] ? fd_install+0x223/0x580 [ 1666.097535][T20104] __x64_sys_futex+0x34f/0x4d0 [ 1666.097566][T20104] ? __sys_socket+0xac/0x260 [ 1666.097591][T20104] ? __pfx___x64_sys_futex+0x10/0x10 [ 1666.097630][T20104] do_syscall_64+0x123/0x790 [ 1666.097658][T20104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.097679][T20104] RIP: 0033:0x7faa2ab9e159 [ 1666.097696][T20104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1666.097716][T20104] RSP: 002b:00007faa2b9a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1666.097736][T20104] RAX: ffffffffffffffda RBX: 00007faa2ae25fa8 RCX: 00007faa2ab9e159 [ 1666.097750][T20104] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa2ae25fa8 [ 1666.097763][T20104] RBP: 00007faa2ae25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1666.097775][T20104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1666.097787][T20104] R13: 00007faa2ae26038 R14: 00007fffe1f99a10 R15: 00007fffe1f99af8 [ 1666.097816][T20104] [ 1666.385987][T20122] binder: 20121:20122 ioctl c0189379 200000000380 returned -22 [ 1666.669486][T19047] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1667.065905][T19047] usb 2-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 1667.079421][T19047] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1667.079448][T19047] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1667.079473][T19047] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1667.079521][T19047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.761842][T19047] usb 2-1: config 0 descriptor?? [ 1667.771635][T20125] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1667.873339][ T9935] usb 6-1: USB disconnect, device number 75 [ 1667.875773][ T5722] usb 3-1: USB disconnect, device number 100 [ 1667.995359][T20136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3547'. [ 1667.996289][T20138] FAULT_INJECTION: forcing a failure. [ 1667.996289][T20138] name failslab, interval 1, probability 0, space 0, times 0 [ 1667.996314][T20138] CPU: 0 UID: 0 PID: 20138 Comm: syz.5.3548 Tainted: G L syzkaller #0 PREEMPT(full) [ 1667.996339][T20138] Tainted: [L]=SOFTLOCKUP [ 1667.996346][T20138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1667.996357][T20138] Call Trace: [ 1667.996363][T20138] [ 1667.996370][T20138] dump_stack_lvl+0x100/0x190 [ 1667.996401][T20138] should_fail_ex.cold+0x5/0xa [ 1667.996427][T20138] should_failslab+0xc2/0x120 [ 1667.996453][T20138] __kmalloc_noprof+0xfc/0x840 [ 1667.996473][T20138] ? rcu_is_watching+0x13/0xc0 [ 1667.996498][T20138] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1667.996530][T20138] tomoyo_realpath_from_path+0xb6/0x690 [ 1667.996559][T20138] tomoyo_path_number_perm+0x23c/0x580 [ 1667.996579][T20138] ? tomoyo_path_number_perm+0x22e/0x580 [ 1667.996602][T20138] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1667.996633][T20138] ? __lock_acquire+0x5c0/0x1f40 [ 1667.996665][T20138] ? __fget_files+0x34/0x3d0 [ 1667.996689][T20138] ? find_held_lock+0x2b/0x80 [ 1667.996714][T20138] ? hook_file_ioctl_common+0x140/0x440 [ 1667.996744][T20138] ? __fget_files+0x21f/0x3d0 [ 1667.996772][T20138] security_file_ioctl+0xd3/0x230 [ 1667.996796][T20138] __x64_sys_ioctl+0xb7/0x210 [ 1667.996818][T20138] do_syscall_64+0x123/0x790 [ 1667.996841][T20138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.996860][T20138] RIP: 0033:0x7faa2ab9e159 [ 1667.996875][T20138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.996893][T20138] RSP: 002b:00007faa2b9a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1667.996911][T20138] RAX: ffffffffffffffda RBX: 00007faa2ae25fa0 RCX: 00007faa2ab9e159 [ 1667.996923][T20138] RDX: 0000200000000b40 RSI: 000000000000227d RDI: 0000000000000003 [ 1667.996934][T20138] RBP: 00007faa2b9a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1667.996945][T20138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 ** 3147 printk messages dropped ** ** 55 printk messages dropped ** ** 61 printk messages dropped ** ** 56 printk messages dropped ** ** 65 printk messages dropped ** ** 72 printk messages dropped ** ** 57 printk messages dropped ** ** 65 printk messages dropped ** ** 56 printk messages dropped ** ** 59 printk messages dropped ** ** 58 printk messages dropped ** ** 61 printk messages dropped ** ** 74 printk messages dropped ** ** 76 printk messages dropped ** ** 61 printk messages dropped ** ** 59 printk messages dropped ** ** 58 printk messages dropped ** ** 1750 printk messages dropped ** ** 19 printk messages dropped ** ** 7 printk messages dropped ** ** 11 printk messages dropped ** ** 24 printk messages dropped ** ** 15 printk messages dropped ** ** 96 printk messages dropped ** ** 31 printk messages dropped ** ** 3 printk messages dropped ** ** 30 printk messages dropped ** ** 3 printk messages dropped ** ** 3 printk messages dropped ** ** 3 printk messages dropped ** ** 3 printk messages dropped ** ** 7 printk messages dropped ** ** 11 printk messages dropped ** ** 4 printk messages dropped ** ** 12 printk messages dropped ** ** 3 printk messages dropped ** ** 3 printk messages dropped ** ** 3 printk messages dropped ** ** 43 printk messages dropped ** ** 3 printk messages dropped ** ** 41 printk messages dropped ** ** 35 printk messages dropped ** ** 39 printk messages dropped ** ** 11 printk messages dropped ** ** 37 printk messages dropped ** ** 11 printk messages dropped ** ** 22 printk messages dropped ** ** 36 printk messages dropped ** ** 3 printk messages dropped ** ** 35 printk messages dropped ** ** 23 printk messages dropped ** ** 3 printk messages dropped ** ** 8 printk messages dropped ** ** 3 printk messages dropped ** ** 3 printk messages dropped ** [ 1669.456906][T20148] fido_id[20148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1669.527701][T19047] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1669.684750][T19047] usb 3-1: Using ep0 maxpacket: 16 [ 1669.685845][T19047] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1669.687928][T19047] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1669.687949][T19047] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1669.687964][T19047] usb 3-1: config 0 has no interface number 0 [ 1669.693011][T19047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.693157][T19047] usb 3-1: Product: syz [ 1669.693170][T19047] usb 3-1: Manufacturer: syz [ 1669.693183][T19047] usb 3-1: SerialNumber: syz [ 1669.712673][T19047] usb 3-1: config 0 descriptor?? [ 1669.733389][T19047] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1669.733549][T19047] uvcvideo 3-1:0.105: No valid video chain found. [ 1669.824424][ T5708] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1669.886853][T17949] net_ratelimit: 103 callbacks suppressed [ 1669.969821][ T9935] usb 7-1: USB disconnect, device number 3 [ 1670.093846][ T5708] usb 6-1: Using ep0 maxpacket: 32 [ 1670.094512][ T5708] usb 6-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 1670.096743][ T5708] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1670.096774][ T5708] usb 6-1: can't read configurations, error -61 [ 1670.135070][T20157] FAULT_INJECTION: forcing a failure. [ 1670.135070][T20157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.135097][T20157] CPU: 1 UID: 0 PID: 20157 Comm: syz.2.3552 Tainted: G L syzkaller #0 PREEMPT(full) [ 1670.135122][T20157] Tainted: [L]=SOFTLOCKUP [ 1670.135129][T20157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1670.135141][T20157] Call Trace: [ 1670.135147][T20157] [ 1670.135157][T20157] dump_stack_lvl+0x100/0x190 [ 1670.135189][T20157] should_fail_ex.cold+0x5/0xa [ 1670.135216][T20157] _copy_from_user+0x2e/0xd0 [ 1670.135240][T20157] do_ip_vs_set_ctl+0x53c/0xc90 [ 1670.135265][T20157] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1670.135285][T20157] ? rcu_is_watching+0x13/0xc0 [ 1670.135317][T20157] ? find_held_lock+0x2b/0x80 [ 1670.135343][T20157] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1670.135370][T20157] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1670.135406][T20157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1670.135442][T20157] ? nf_setsockopt+0x8d/0xf0 [ 1670.135467][T20157] nf_setsockopt+0x8d/0xf0 [ 1670.135494][T20157] ip_setsockopt+0xcb/0xf0 [ 1670.135518][T20157] ipv6_setsockopt+0x155/0x170 [ 1670.135547][T20157] tcp_setsockopt+0xa7/0x100 [ 1670.135572][T20157] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1670.135593][T20157] do_sock_setsockopt+0xf3/0x1d0 [ 1670.135614][T20157] __sys_setsockopt+0x195/0x220 [ 1670.135644][T20157] __x64_sys_setsockopt+0xbd/0x160 [ 1670.135667][T20157] ? do_syscall_64+0xae/0x790 [ 1670.135687][T20157] ? lockdep_hardirqs_on+0x7d/0x110 [ 1670.135706][T20157] do_syscall_64+0x123/0x790 [ 1670.135727][T20157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.135747][T20157] RIP: 0033:0x7fe4db39e159 [ 1670.135763][T20157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.135780][T20157] RSP: 002b:00007fe4dc2e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1670.135798][T20157] RAX: ffffffffffffffda RBX: 00007fe4db626090 RCX: 00007fe4db39e159 [ 1670.135810][T20157] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000007 [ 1670.135821][T20157] RBP: 00007fe4dc2e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.135832][T20157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.135843][T20157] R13: 00007fe4db626128 R14: 00007fe4db626090 R15: 00007ffd45fc0588 [ 1670.135868][T20157] [ 1670.205828][T20125] Process accounting resumed [ 1670.225137][ T5708] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1670.374093][ T5708] usb 6-1: Using ep0 maxpacket: 32 [ 1670.374757][ T5708] usb 6-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 1670.377281][ T5708] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1670.377306][ T5708] usb 6-1: can't read configurations, error -61 [ 1670.377631][ T5708] usb usb6-port1: attempt power cycle [ 1670.533997][T19047] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1670.805554][ T5708] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1670.839148][ T5708] usb 6-1: Using ep0 maxpacket: 32 [ 1670.854921][ T5708] usb 6-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 1670.925792][T19047] usb 2-1: Using ep0 maxpacket: 16 [ 1670.969374][ T5708] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1670.969409][ T5708] usb 6-1: can't read configurations, error -61 [ 1670.969728][T19047] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1671.015478][T19047] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.015533][T19047] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1671.018067][T20083] udevd[20083]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 1671.019792][T19047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.019811][T19047] usb 2-1: Product: syz [ 1671.019825][T19047] usb 2-1: Manufacturer: syz [ 1671.019838][T19047] usb 2-1: SerialNumber: syz [ 1671.083576][T19047] cdc_ether 2-1:1.0: skipping garbage [ 1671.083591][T19047] usb 2-1: No union descriptors [ 1671.154646][ T5708] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1671.176401][ T5708] usb 6-1: Using ep0 maxpacket: 32 [ 1671.177720][ T5708] usb 6-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 1671.179154][ T5708] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1671.179181][ T5708] usb 6-1: can't read configurations, error -61 [ 1671.179497][ T5708] usb usb6-port1: unable to enumerate USB device [ 1671.373191][T20159] FAULT_INJECTION: forcing a failure. [ 1671.373191][T20159] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1671.373226][T20159] CPU: 0 UID: 0 PID: 20159 Comm: syz.1.3555 Tainted: G L syzkaller #0 PREEMPT(full) [ 1671.373255][T20159] Tainted: [L]=SOFTLOCKUP [ 1671.373263][T20159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1671.373276][T20159] Call Trace: [ 1671.373284][T20159] [ 1671.373293][T20159] dump_stack_lvl+0x100/0x190 [ 1671.373328][T20159] should_fail_ex.cold+0x5/0xa [ 1671.373356][T20159] get_futex_key+0x1d0/0x14f0 [ 1671.373388][T20159] ? __pfx_get_futex_key+0x10/0x10 [ 1671.373424][T20159] futex_wait_setup+0x91/0x540 [ 1671.373453][T20159] __futex_wait+0x19f/0x300 [ 1671.373478][T20159] ? __pfx___futex_wait+0x10/0x10 [ 1671.373498][T20159] ? futex_hash+0x311/0x400 [ 1671.373532][T20159] ? __pfx_futex_wake_mark+0x10/0x10 [ 1671.373558][T20159] ? __pfx_futex_hash+0x10/0x10 [ 1671.373594][T20159] futex_wait+0xe6/0x370 [ 1671.373616][T20159] ? __pfx_futex_wait+0x10/0x10 [ 1671.373643][T20159] ? percpu_counter_add_batch+0xb9/0x230 [ 1671.373671][T20159] ? errseq_sample+0x51/0x70 [ 1671.373694][T20159] ? file_init_path+0x48e/0x670 [ 1671.373725][T20159] do_futex+0x265/0x440 [ 1671.373753][T20159] ? __pfx_do_futex+0x10/0x10 [ 1671.373775][T20159] ? fd_install+0x223/0x580 [ 1671.373801][T20159] __x64_sys_futex+0x34f/0x4d0 [ 1671.373827][T20159] ? __sys_socket+0xac/0x260 [ 1671.373849][T20159] ? __pfx___x64_sys_futex+0x10/0x10 [ 1671.373884][T20159] do_syscall_64+0x123/0x790 [ 1671.373909][T20159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.373930][T20159] RIP: 0033:0x7f3aaa59e159 [ 1671.373947][T20159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.373967][T20159] RSP: 002b:00007f3aab3990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1671.373988][T20159] RAX: ffffffffffffffda RBX: 00007f3aaa825fa8 RCX: 00007f3aaa59e159 [ 1671.374002][T20159] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3aaa825fa8 [ 1671.374014][T20159] RBP: 00007f3aaa825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1671.374026][T20159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1671.374038][T20159] R13: 00007f3aaa826038 R14: 00007ffc078104c0 R15: 00007ffc078105a8 [ 1671.374062][T20159] [ 1671.409520][ T5722] usb 2-1: USB disconnect, device number 88 [ 1671.419948][T19047] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1672.109320][T19047] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1672.111912][T19047] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1672.111946][T19047] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1672.112100][ T5708] usb 3-1: USB disconnect, device number 101 [ 1672.157987][T19047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.158005][T19047] usb 7-1: Product: syz [ 1672.158018][T19047] usb 7-1: Manufacturer: syz [ 1672.158030][T19047] usb 7-1: SerialNumber: syz [ 1672.183029][T20172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3559'. [ 1672.188487][T19047] cdc_mbim 7-1:1.0: skipping garbage [ 1672.425383][T20166] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1673.239855][T20166] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1673.265187][T19047] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 1673.596370][T19047] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 1673.601196][T20189] Bluetooth: MGMT ver 1.23 [ 1673.601237][T20189] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1673.602340][T19047] wwan wwan0: port wwan0mbim0 attached [ 1673.611543][T19047] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 26:f6:a4:c7:e9:58 [ 1673.778906][T19047] usb 7-1: USB disconnect, device number 4 [ 1673.783089][T19047] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 1673.915608][T19047] wwan wwan0: port wwan0mbim0 disconnected [ 1674.131232][ T62] rpcbind: server 127.0.0.1 not responding, timed out [ 1674.235906][T16052] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1674.270056][T20208] FAULT_INJECTION: forcing a failure. [ 1674.270056][T20208] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.270086][T20208] CPU: 0 UID: 0 PID: 20208 Comm: syz.5.3569 Tainted: G L syzkaller #0 PREEMPT(full) [ 1674.270110][T20208] Tainted: [L]=SOFTLOCKUP [ 1674.270117][T20208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1674.270127][T20208] Call Trace: [ 1674.270134][T20208] [ 1674.270142][T20208] dump_stack_lvl+0x100/0x190 [ 1674.270175][T20208] should_fail_ex.cold+0x5/0xa [ 1674.270202][T20208] should_failslab+0xc2/0x120 [ 1674.270229][T20208] __kmalloc_noprof+0xfc/0x840 [ 1674.270253][T20208] ? tomoyo_encode2+0xfb/0x3c0 [ 1674.270285][T20208] tomoyo_encode2+0xfb/0x3c0 [ 1674.270315][T20208] tomoyo_encode+0x29/0x50 [ 1674.270341][T20208] tomoyo_realpath_from_path+0x18c/0x690 [ 1674.270374][T20208] tomoyo_check_open_permission+0x2af/0x3c0 [ 1674.270400][T20208] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1674.270444][T20208] ? hook_file_open+0x248/0x8e0 [ 1674.270487][T20208] ? path_get+0x61/0x80 [ 1674.270521][T20208] tomoyo_file_open+0x6b/0x90 [ 1674.270541][T20208] security_file_open+0xb5/0x1e0 [ 1674.270567][T20208] do_dentry_open+0x588/0x14d0 [ 1674.270596][T20208] vfs_open+0x82/0x3f0 [ 1674.270624][T20208] path_openat+0x19fa/0x2440 [ 1674.270653][T20208] ? __pfx_path_openat+0x10/0x10 [ 1674.270686][T20208] do_file_open+0x20e/0x430 [ 1674.270713][T20208] ? __pfx_do_file_open+0x10/0x10 [ 1674.270753][T20208] ? _raw_spin_unlock+0x28/0x50 [ 1674.270783][T20208] ? alloc_fd+0x471/0x7a0 [ 1674.270816][T20208] do_sys_openat2+0x10f/0x1e0 [ 1674.270846][T20208] ? __pfx_do_sys_openat2+0x10/0x10 [ 1674.270877][T20208] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1674.270922][T20208] __x64_sys_openat+0x12d/0x210 [ 1674.270952][T20208] ? __pfx___x64_sys_openat+0x10/0x10 [ 1674.270991][T20208] do_syscall_64+0x123/0x790 [ 1674.271015][T20208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.271036][T20208] RIP: 0033:0x7faa2ab9e159 [ 1674.271054][T20208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.271073][T20208] RSP: 002b:00007faa2b9a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1674.271093][T20208] RAX: ffffffffffffffda RBX: 00007faa2ae25fa0 RCX: 00007faa2ab9e159 [ 1674.271107][T20208] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1674.271120][T20208] RBP: 00007faa2ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 1674.271132][T20208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1674.271144][T20208] R13: 00007faa2ae26038 R14: 00007faa2ae25fa0 R15: 00007fffe1f99af8 [ 1674.271171][T20208] [ 1674.271288][T20208] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1674.556729][T16052] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1674.556768][T16052] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 1674.557781][T16052] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 1674.557820][T16052] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1674.644280][T16052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.644299][T16052] usb 3-1: Product: syz [ 1674.644313][T16052] usb 3-1: Manufacturer: syz [ 1674.644327][T16052] usb 3-1: SerialNumber: syz [ 1674.745048][T20193] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1675.029368][ T9935] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1675.233177][ T9935] usb 4-1: Using ep0 maxpacket: 32 [ 1675.244478][ T9935] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1675.274972][ T9935] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1675.284084][ C0] net_ratelimit: 77 callbacks suppressed [ 1675.359373][ T9935] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1675.359562][ T9935] usb 4-1: Product: syz [ 1675.360108][ T9935] usb 4-1: Manufacturer: syz [ 1675.360765][ T9935] usb 4-1: SerialNumber: syz [ 1675.648442][ T9935] usb 4-1: config 0 descriptor?? [ 1675.685458][T20213] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1675.791774][ T9935] hub 4-1:0.0: bad descriptor, ignoring hub [ 1675.793483][ T9935] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1676.118959][T16052] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1676.119187][T16052] usb 3-1: MIDIStreaming interface descriptor not found [ 1676.256392][ T9935] usb 4-1: USB disconnect, device number 112 [ 1676.619221][T20223] jffs2: notice: (20223) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1676.954069][ T31] audit: type=1400 audit(1791163495.751:1599): avc: denied { write } for pid=20197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1677.659111][T20222] No such timeout policy "syz1" [ 1677.800805][T16052] usb 3-1: USB disconnect, device number 102 [ 1677.978475][T20231] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1678.316913][T20240] futex_wake_op: syz.1.3574 tries to shift op by 144; fix this program [ 1678.403325][ T9935] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1678.419140][T20238] syzkaller1: entered promiscuous mode [ 1678.439682][T20238] syzkaller1: entered allmulticast mode [ 1678.996045][ T9935] usb 6-1: Using ep0 maxpacket: 32 [ 1679.002598][ T9935] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1679.113601][ T9935] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1679.255111][ T9935] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1679.255131][ T9935] usb 6-1: Product: syz [ 1679.255144][ T9935] usb 6-1: Manufacturer: syz [ 1679.255159][ T9935] usb 6-1: SerialNumber: syz [ 1679.778821][ T9935] usb 6-1: config 0 descriptor?? [ 1679.798226][T20243] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1679.799637][ T9935] hub 6-1:0.0: bad descriptor, ignoring hub [ 1679.799653][ T9935] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1679.812345][T20081] udevd[20081]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1679.880633][ T31] audit: type=1400 audit(1791163498.681:1600): avc: denied { write } for pid=20237 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.996623][T20235] SELinux: DCCP has been removed, pid=20235 comm=syz.6.3576 [ 1680.006841][T20235] netlink: 'syz.6.3576': attribute type 12 has an invalid length. [ 1680.006859][T20235] netlink: 'syz.6.3576': attribute type 29 has an invalid length. [ 1680.006871][T20235] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3576'. [ 1680.006886][T20235] netlink: 'syz.6.3576': attribute type 1 has an invalid length. [ 1680.006897][T20235] netlink: 47 bytes leftover after parsing attributes in process `syz.6.3576'. [ 1680.323863][ C1] net_ratelimit: 79 callbacks suppressed [ 1680.784905][T10055] usb 6-1: USB disconnect, device number 80 [ 1682.301855][T20275] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3580'. [ 1682.740851][ T31] audit: type=1400 audit(1791163501.541:1601): avc: denied { write } for pid=20254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1682.836146][T20280] FAULT_INJECTION: forcing a failure. [ 1682.836146][T20280] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.836179][T20280] CPU: 0 UID: 0 PID: 20280 Comm: syz.1.3581 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.836213][T20280] Tainted: [L]=SOFTLOCKUP [ 1682.836222][T20280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1682.836235][T20280] Call Trace: [ 1682.836243][T20280] [ 1682.836256][T20280] dump_stack_lvl+0x100/0x190 [ 1682.836291][T20280] should_fail_ex.cold+0x5/0xa [ 1682.836320][T20280] should_failslab+0xc2/0x120 [ 1682.836349][T20280] __kmalloc_cache_noprof+0x91/0x6d0 [ 1682.836369][T20280] ? lock_acquire+0x1d1/0x380 [ 1682.836390][T20280] ? tty_alloc_file+0x3f/0xa0 [ 1682.836420][T20280] ? __pfx_ptmx_open+0x10/0x10 [ 1682.836442][T20280] tty_alloc_file+0x3f/0xa0 [ 1682.836467][T20280] ptmx_open+0x61/0x360 [ 1682.836490][T20280] ? __pfx_ptmx_open+0x10/0x10 [ 1682.836511][T20280] chrdev_open+0x234/0x6a0 [ 1682.836538][T20280] ? __pfx_chrdev_open+0x10/0x10 [ 1682.836565][T20280] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1682.836586][T20280] do_dentry_open+0x6ab/0x14d0 [ 1682.836607][T20280] ? __pfx_chrdev_open+0x10/0x10 [ 1682.836638][T20280] vfs_open+0x82/0x3f0 [ 1682.836668][T20280] path_openat+0x19fa/0x2440 [ 1682.836699][T20280] ? __pfx_path_openat+0x10/0x10 [ 1682.836729][T20280] do_file_open+0x20e/0x430 [ 1682.836759][T20280] ? __pfx_do_file_open+0x10/0x10 [ 1682.836803][T20280] ? _raw_spin_unlock+0x28/0x50 [ 1682.836833][T20280] ? alloc_fd+0x471/0x7a0 [ 1682.836868][T20280] do_sys_openat2+0x10f/0x1e0 [ 1682.836907][T20280] ? __pfx_do_sys_openat2+0x10/0x10 [ 1682.836939][T20280] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1682.836967][T20280] __x64_sys_openat+0x12d/0x210 [ 1682.836994][T20280] ? __pfx___x64_sys_openat+0x10/0x10 [ 1682.837030][T20280] do_syscall_64+0x123/0x790 [ 1682.837054][T20280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.837076][T20280] RIP: 0033:0x7f3aaa59e159 [ 1682.837094][T20280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.837113][T20280] RSP: 002b:00007f3aab399028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1682.837136][T20280] RAX: ffffffffffffffda RBX: 00007f3aaa825fa0 RCX: 00007f3aaa59e159 [ 1682.837149][T20280] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1682.837162][T20280] RBP: 00007f3aaa63506b R08: 0000000000000000 R09: 0000000000000000 [ 1682.837179][T20280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.837191][T20280] R13: 00007f3aaa826038 R14: 00007f3aaa825fa0 R15: 00007ffc078105a8 [ 1682.837218][T20280] [ 1682.858155][T20278] futex_wake_op: syz.5.3582 tries to shift op by 144; fix this program [ 1683.286371][ T31] audit: type=1400 audit(1791163502.091:1602): avc: denied { write } for pid=20284 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1684.304969][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3584'. [ 1684.305628][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3584'. [ 1684.305763][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3584'. [ 1684.305849][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3584'. [ 1684.305926][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3584'. [ 1684.306010][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3584'. [ 1684.306088][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3584'. [ 1684.363645][T20295] futex_wake_op: syz.5.3587 tries to shift op by 144; fix this program [ 1685.368315][T14705] net_ratelimit: 108 callbacks suppressed [ 1685.448510][T20083] udevd[20083]: inotify_add_watch(7, /dev/loop1536, 10) failed: No such file or directory [ 1685.813913][ T5708] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1685.964967][ T5708] usb 2-1: New USB device found, idVendor=187f, idProduct=0100, bcdDevice= 0.00 [ 1685.965905][ T5708] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1685.965921][ T5708] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1685.965954][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.972992][T20311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1685.973080][T20311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1686.034325][ T5708] smsusb:smsusb_probe: board id=1, interface number 0 [ 1686.043111][ T5708] smsusb:siano_media_device_register: media controller created [ 1686.053397][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.053548][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.053686][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.053826][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.053968][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.054105][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.054242][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.056127][ T5708] smsusb:smsusb1_detectmode: product string not found [ 1686.056272][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.056414][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.056549][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.059483][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.062098][ T5708] smsmdtv:smscore_set_device_mode: return error code -71. [ 1686.062114][ T5708] smsmdtv:smscore_start_dev ** replaying previous printk message ** [ 1686.062114][ T5708] smsmdtv:smscore_start_device: set device mode failed , rc -71 [ 1686.062125][ T5708] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 1686.089643][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.089750][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.089850][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.089951][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.090047][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.090139][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.090240][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.090342][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.090448][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 1686.129529][T20321] binder: 20316:20321 ioctl c0189379 200000000380 returned -22 [ 1686.150908][ T5795] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1686.166076][ T5708] ------------[ cut here ]------------ [ 1686.166083][ T5708] !PageLargeKmalloc(page) [ 1686.166089][ T5708] WARNING: mm/slub.c:6734 at free_large_kmalloc+0xbf/0x100, CPU#1: kworker/1:4/5708 [ 1686.285582][ T5708] Modules linked in: [ 1686.289490][ T5708] CPU: 1 UID: 0 PID: 5708 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1686.300568][ T5708] Tainted: [L]=SOFTLOCKUP [ 1686.304110][T20311] __nla_validate_parse: 3 callbacks suppressed [ 1686.304126][T20311] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3589'. [ 1686.320397][ T5708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1686.330849][ T5708] Workqueue: usb_hub_wq hub_event [ 1686.336120][ T5708] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 1686.341860][ T5708] Code: 28 90 0f 0b 90 80 3d 7b e5 b9 0e 00 0f 84 74 0b b1 fe 48 8b 74 24 28 48 89 ef e8 3c 50 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 8c ac 37 8e 5b 5d 41 5c 41 [ 1686.362254][ T5708] RSP: 0018:ffffc900045decd8 EFLAGS: 00010202 [ 1686.368665][ T5708] RAX: 00000000000000ff RBX: ffffea000296ac40 RCX: 000000000000002e [ 1686.376661][ T5708] RDX: 0000000000000000 RSI: ffff8880a5ab1000 RDI: ffffea000296ac40 [ 1686.384796][ T5708] RBP: ffff8880a5ab1000 R08: 0000000000000005 R09: 0000000000000000 [ 1686.392851][ T5708] R10: ffffffffffffffff R11: 0000000000000001 R12: ffff8880213ff000 [ 1686.401102][ T5708] R13: ffff8880213f8000 R14: dffffc0000000000 R15: ffff8880213ff0f0 [ 1686.409676][ T5708] FS: 0000000000000000(0000) GS:ffff888123c4e000(0000) knlGS:0000000000000000 [ 1686.418658][ T5708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1686.425289][ T5708] CR2: 0000001b30bffff8 CR3: 0000000076a92000 CR4: 00000000003526f0 [ 1686.433248][ T5708] Call Trace: [ 1686.436624][ T5708] [ 1686.439562][ T5708] usb_free_urb.part.0+0xf8/0x110 [ 1686.445022][ T5708] usb_free_urb+0x1f/0x30 [ 1686.449382][ T5708] smsusb_term_device+0x108/0x200 [ 1686.454835][ T5708] smsusb_init_device+0xb4e/0xbb0 [ 1686.460840][ T5708] ? __pfx_smsusb_init_device+0x10/0x10 [ 1686.467155][ T5708] ? kfree+0x1e5/0x6d0 [ 1686.471236][ T5708] ? __pfx_smsusb1_setmode+0x10/0x10 [ 1686.476819][ T5708] ? __pfx_smsusb1_detectmode+0x10/0x10 [ 1686.482384][ T5708] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1686.488381][ T5708] ? usb_clear_halt+0xb5/0x160 [ 1686.493239][ T5708] smsusb_probe+0xd7f/0xe1f [ 1686.497980][ T5708] ? __pfx_smsusb_probe+0x10/0x10 [ 1686.502991][ T5708] ? mark_held_locks+0x40/0x70 [ 1686.507765][ T5708] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1686.513584][ T5708] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1686.519401][ T5708] ? __pm_runtime_set_status+0x13c/0x970 [ 1686.525142][ T5708] usb_probe_interface+0x386/0x9b0 [ 1686.530248][ T5708] ? __pfx_usb_probe_interface+0x10/0x10 [ 1686.535910][ T5708] ? kernfs_put+0x3f/0x60 [ 1686.540228][ T5708] ? sysfs_create_link+0x68/0xc0 [ 1686.545281][ T5708] ? __pfx_usb_probe_interface+0x10/0x10 [ 1686.550918][ T5708] really_probe+0x241/0xa60 [ 1686.555468][ T5708] __driver_probe_device+0x210/0x460 [ 1686.560746][ T5708] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1686.567186][ T5708] driver_probe_device+0x4a/0x140 [ 1686.572230][ T5708] __device_attach_driver+0x1df/0x320 [ 1686.577904][ T5708] ? __pfx___device_attach_driver+0x10/0x10 [ 1686.583821][ T5708] bus_for_each_drv+0x159/0x1e0 [ 1686.588674][ T5708] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1686.594058][ T5708] ? lockdep_hardirqs_on+0x7d/0x110 [ 1686.599239][ T5708] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1686.605114][ T5708] __device_attach+0x1e4/0x4d0 [ 1686.609883][ T5708] ? __pfx___device_attach+0x10/0x10 [ 1686.615186][ T5708] ? do_raw_spin_unlock+0x145/0x1e0 [ 1686.620374][ T5708] device_initial_probe+0xaf/0xd0 [ 1686.625534][ T5708] bus_probe_device+0x64/0x160 [ 1686.630335][ T5708] device_add+0x121d/0x1970 [ 1686.635026][ T5708] ? __pfx_device_add+0x10/0x10 [ 1686.639889][ T5708] ? mark_held_locks+0x40/0x70 [ 1686.644678][ T5708] usb_set_configuration+0xd97/0x1dc0 [ 1686.650047][ T5708] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1686.656124][ T5708] usb_generic_driver_probe+0xa1/0xe0 [ 1686.661488][ T5708] usb_probe_device+0xef/0x400 [ 1686.666692][ T5708] ? __pfx_usb_probe_device+0x10/0x10 [ 1686.672366][ T5708] really_probe+0x241/0xa60 [ 1686.676920][ T5708] __driver_probe_device+0x210/0x460 [ 1686.682213][ T5708] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1686.688083][ T5708] driver_probe_device+0x4a/0x140 [ 1686.693131][ T5708] __device_attach_driver+0x1df/0x320 [ 1686.698551][ T5708] ? __pfx___device_attach_driver+0x10/0x10 [ 1686.704472][ T5708] bus_for_each_drv+0x159/0x1e0 [ 1686.709311][ T5708] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1686.714702][ T5708] ? lockdep_hardirqs_on+0x7d/0x110 [ 1686.719909][ T5708] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1686.725816][ T5708] __device_attach+0x1e4/0x4d0 [ 1686.730580][ T5708] ? __pfx___device_attach+0x10/0x10 [ 1686.735903][ T5708] ? do_raw_spin_unlock+0x145/0x1e0 [ 1686.741092][ T5708] device_initial_probe+0xaf/0xd0 [ 1686.746166][ T5708] bus_probe_device+0x64/0x160 [ 1686.750932][ T5708] device_add+0x121d/0x1970 [ 1686.755505][ T5708] ? __pfx_device_add+0x10/0x10 [ 1686.760358][ T5708] ? usb_detect_static_quirks+0x335/0x3e0 [ 1686.766098][ T5708] usb_new_device.part.0+0xcc2/0x1686 [ 1686.771883][ T5708] ? do_raw_spin_lock+0x128/0x260 [ 1686.777179][ T5708] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1686.782990][ T5708] ? mark_held_locks+0x40/0x70 [ 1686.787784][ T5708] hub_event.cold+0x1e3/0xe90 [ 1686.792460][ T5708] ? __pfx_hub_event+0x10/0x10 [ 1686.794225][T20317] binder: 20316:20317 ioctl c0306201 200000000040 returned -14 [ 1686.804833][ T5708] ? __bfs+0x30/0x2a0 [ 1686.808842][ T5708] ? lock_acquire+0x1d1/0x380 [ 1686.813531][ T5708] ? process_one_work+0xa2c/0x1b10 [ 1686.818728][ T5708] ? process_one_work+0x906/0x1b10 [ 1686.823937][ T5708] ? process_one_work+0x906/0x1b10 [ 1686.829077][ T5708] process_one_work+0xac7/0x1b10 [ 1686.834118][ T5708] ? __pfx_process_one_work+0x10/0x10 [ 1686.839515][ T5708] ? lock_acquire+0x1d1/0x380 [ 1686.844267][ T5708] ? __pfx_hub_event+0x10/0x10 [ 1686.849046][ T5708] worker_thread+0x5ef/0xe50 [ 1686.853646][ T5708] ? kthread+0x13a/0x450 [ 1686.857953][ T5708] ? __pfx_worker_thread+0x10/0x10 [ 1686.863059][ T5708] kthread+0x373/0x450 [ 1686.867168][ T5708] ? __pfx_kthread+0x10/0x10 [ 1686.872150][ T5708] ret_from_fork+0x730/0xd60 [ 1686.877115][ T5708] ? __pfx_ret_from_fork+0x10/0x10 [ 1686.882226][ T5708] ? __switch_to+0x800/0x10f0 [ 1686.887002][ T5708] ? __pfx_kthread+0x10/0x10 [ 1686.891603][ T5708] ret_from_fork_asm+0x1a/0x30 [ 1686.896452][ T5708] [ 1686.899455][ T5708] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1686.906716][ T5708] CPU: 1 UID: 0 PID: 5708 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1686.917642][ T5708] Tainted: [L]=SOFTLOCKUP [ 1686.921954][ T5708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1686.931994][ T5708] Workqueue: usb_hub_wq hub_event [ 1686.937025][ T5708] Call Trace: [ 1686.940289][ T5708] [ 1686.943216][ T5708] dump_stack_lvl+0x100/0x190 [ 1686.947910][ T5708] vpanic+0x553/0x970 [ 1686.951895][ T5708] ? __pfx_vpanic+0x10/0x10 [ 1686.956384][ T5708] panic+0xd1/0xe0 [ 1686.960107][ T5708] ? __pfx_panic+0x10/0x10 [ 1686.964510][ T5708] check_panic_on_warn.cold+0x19/0x34 [ 1686.969884][ T5708] ? free_large_kmalloc+0xbf/0x100 [ 1686.975003][ T5708] __warn.cold+0x191/0x318 [ 1686.979416][ T5708] __report_bug+0x30f/0x440 [ 1686.983910][ T5708] ? free_large_kmalloc+0xbf/0x100 [ 1686.989008][ T5708] ? __pfx___report_bug+0x10/0x10 [ 1686.994019][ T5708] ? __dynamic_pr_debug+0x201/0x270 [ 1686.999221][ T5708] ? __pfx___dynamic_pr_debug+0x10/0x10 [ 1687.004772][ T5708] ? find_held_lock+0x2b/0x80 [ 1687.009448][ T5708] ? free_large_kmalloc+0xbf/0x100 [ 1687.014554][ T5708] report_bug+0xb3/0x220 [ 1687.018960][ T5708] ? free_large_kmalloc+0xbf/0x100 [ 1687.024052][ T5708] handle_bug+0x16a/0x2a0 [ 1687.028362][ T5708] exc_invalid_op+0x17/0x50 [ 1687.032904][ T5708] asm_exc_invalid_op+0x1a/0x20 [ 1687.037741][ T5708] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 1687.043463][ T5708] Code: 28 90 0f 0b 90 80 3d 7b e5 b9 0e 00 0f 84 74 0b b1 fe 48 8b 74 24 28 48 89 ef e8 3c 50 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 8c ac 37 8e 5b 5d 41 5c 41 [ 1687.063053][ T5708] RSP: 0018:ffffc900045decd8 EFLAGS: 00010202 [ 1687.069105][ T5708] RAX: 00000000000000ff RBX: ffffea000296ac40 RCX: 000000000000002e [ 1687.077066][ T5708] RDX: 0000000000000000 RSI: ffff8880a5ab1000 RDI: ffffea000296ac40 [ 1687.085024][ T5708] RBP: ffff8880a5ab1000 R08: 0000000000000005 R09: 0000000000000000 [ 1687.093064][ T5708] R10: ffffffffffffffff R11: 0000000000000001 R12: ffff8880213ff000 [ 1687.101019][ T5708] R13: ffff8880213f8000 R14: dffffc0000000000 R15: ffff8880213ff0f0 [ 1687.108988][ T5708] usb_free_urb.part.0+0xf8/0x110 [ 1687.114005][ T5708] usb_free_urb+0x1f/0x30 [ 1687.118322][ T5708] smsusb_term_device+0x108/0x200 [ 1687.123325][ T5708] smsusb_init_device+0xb4e/0xbb0 [ 1687.128331][ T5708] ? __pfx_smsusb_init_device+0x10/0x10 [ 1687.133859][ T5708] ? kfree+0x1e5/0x6d0 [ 1687.137920][ T5708] ? __pfx_smsusb1_setmode+0x10/0x10 [ 1687.143198][ T5708] ? __pfx_smsusb1_detectmode+0x10/0x10 [ 1687.148733][ T5708] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1687.154277][ T5708] ? usb_clear_halt+0xb5/0x160 [ 1687.159037][ T5708] smsusb_probe+0xd7f/0xe1f [ 1687.163550][ T5708] ? __pfx_smsusb_probe+0x10/0x10 [ 1687.168571][ T5708] ? mark_held_locks+0x40/0x70 [ 1687.173334][ T5708] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1687.179119][ T5708] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1687.184918][ T5708] ? __pm_runtime_set_status+0x13c/0x970 [ 1687.190546][ T5708] usb_probe_interface+0x386/0x9b0 [ 1687.195638][ T5708] ? __pfx_usb_probe_interface+0x10/0x10 [ 1687.201257][ T5708] ? kernfs_put+0x3f/0x60 [ 1687.205595][ T5708] ? sysfs_create_link+0x68/0xc0 [ 1687.210521][ T5708] ? __pfx_usb_probe_interface+0x10/0x10 [ 1687.216131][ T5708] really_probe+0x241/0xa60 [ 1687.220629][ T5708] __driver_probe_device+0x210/0x460 [ 1687.225894][ T5708] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1687.231682][ T5708] driver_probe_device+0x4a/0x140 [ 1687.236708][ T5708] __device_attach_driver+0x1df/0x320 [ 1687.242065][ T5708] ? __pfx___device_attach_driver+0x10/0x10 [ 1687.247948][ T5708] bus_for_each_drv+0x159/0x1e0 [ 1687.252789][ T5708] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1687.258148][ T5708] ? lockdep_hardirqs_on+0x7d/0x110 [ 1687.263324][ T5708] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1687.269119][ T5708] __device_attach+0x1e4/0x4d0 [ 1687.273872][ T5708] ? __pfx___device_attach+0x10/0x10 [ 1687.279155][ T5708] ? do_raw_spin_unlock+0x145/0x1e0 [ 1687.284364][ T5708] device_initial_probe+0xaf/0xd0 [ 1687.289381][ T5708] bus_probe_device+0x64/0x160 [ 1687.294149][ T5708] device_add+0x121d/0x1970 [ 1687.298636][ T5708] ? __pfx_device_add+0x10/0x10 [ 1687.303468][ T5708] ? mark_held_locks+0x40/0x70 [ 1687.308221][ T5708] usb_set_configuration+0xd97/0x1dc0 [ 1687.313584][ T5708] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1687.319640][ T5708] usb_generic_driver_probe+0xa1/0xe0 [ 1687.324994][ T5708] usb_probe_device+0xef/0x400 [ 1687.329737][ T5708] ? __pfx_usb_probe_device+0x10/0x10 [ 1687.335086][ T5708] really_probe+0x241/0xa60 [ 1687.339585][ T5708] __driver_probe_device+0x210/0x460 [ 1687.344864][ T5708] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1687.350660][ T5708] driver_probe_device+0x4a/0x140 [ 1687.355685][ T5708] __device_attach_driver+0x1df/0x320 [ 1687.361043][ T5708] ? __pfx___device_attach_driver+0x10/0x10 [ 1687.366945][ T5708] bus_for_each_drv+0x159/0x1e0 [ 1687.371775][ T5708] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1687.377124][ T5708] ? lockdep_hardirqs_on+0x7d/0x110 [ 1687.382306][ T5708] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1687.388123][ T5708] __device_attach+0x1e4/0x4d0 [ 1687.392869][ T5708] ? __pfx___device_attach+0x10/0x10 [ 1687.398141][ T5708] ? do_raw_spin_unlock+0x145/0x1e0 [ 1687.403341][ T5708] device_initial_probe+0xaf/0xd0 [ 1687.408351][ T5708] bus_probe_device+0x64/0x160 [ 1687.413099][ T5708] device_add+0x121d/0x1970 [ 1687.417599][ T5708] ? __pfx_device_add+0x10/0x10 [ 1687.422430][ T5708] ? usb_detect_static_quirks+0x335/0x3e0 [ 1687.428147][ T5708] usb_new_device.part.0+0xcc2/0x1686 [ 1687.433506][ T5708] ? do_raw_spin_lock+0x128/0x260 [ 1687.438525][ T5708] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1687.444322][ T5708] ? mark_held_locks+0x40/0x70 [ 1687.449071][ T5708] hub_event.cold+0x1e3/0xe90 [ 1687.453741][ T5708] ? __pfx_hub_event+0x10/0x10 [ 1687.458497][ T5708] ? __bfs+0x30/0x2a0 [ 1687.462457][ T5708] ? lock_acquire+0x1d1/0x380 [ 1687.467122][ T5708] ? process_one_work+0xa2c/0x1b10 [ 1687.472236][ T5708] ? process_one_work+0x906/0x1b10 [ 1687.477337][ T5708] ? process_one_work+0x906/0x1b10 [ 1687.482437][ T5708] process_one_work+0xac7/0x1b10 [ 1687.487367][ T5708] ? __pfx_process_one_work+0x10/0x10 [ 1687.492726][ T5708] ? lock_acquire+0x1d1/0x380 [ 1687.497390][ T5708] ? __pfx_hub_event+0x10/0x10 [ 1687.502140][ T5708] worker_thread+0x5ef/0xe50 [ 1687.506710][ T5708] ? kthread+0x13a/0x450 [ 1687.510951][ T5708] ? __pfx_worker_thread+0x10/0x10 [ 1687.516043][ T5708] kthread+0x373/0x450 [ 1687.520128][ T5708] ? __pfx_kthread+0x10/0x10 [ 1687.524725][ T5708] ret_from_fork+0x730/0xd60 [ 1687.529309][ T5708] ? __pfx_ret_from_fork+0x10/0x10 [ 1687.534406][ T5708] ? __switch_to+0x800/0x10f0 [ 1687.539067][ T5708] ? __pfx_kthread+0x10/0x10 [ 1687.543656][ T5708] ret_from_fork_asm+0x1a/0x30 [ 1687.548425][ T5708] [ 1687.551642][ T5708] Kernel Offset: disabled [ 1687.556048][ T5708] Rebooting in 86400 seconds..