last executing test programs: 7m9.937439624s ago: executing program 4 (id=449): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write$P9_RGETATTR(r5, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x30d0, {0x20, 0x8001, 0x5}, 0x1ce, 0x0, 0x0, 0x10000, 0x5, 0x7, 0x5, 0x3, 0x4, 0x39, 0x7bf, 0xfff, 0x5, 0x96a, 0x9d4d, 0x0, 0x0, 0x7}}, 0xa0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff05000000000000000200000100000000030000000000000002000000000000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000300000000800000ff030000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="040000000400000000000000000000000000200037050000000000002b000000090000003a2d285cc980000000c30000f3397dd86d4d928d24d3a461b60245898556c60000000000002b133b0000000000000000"], 0x0, 0x0, 0x0}) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) r10 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000000040)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, r8, r7, r8, 0x61, 0x8}, 0xf0, 0x10000, 0x9, 0x6, r9, r10, 0x7f}) shutdown(r4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f2, &(0x7f0000000100)={0x3, 0xa, 0x0, 0x401, 0x7, "bb40af00008000"}) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000000)={0x1, 0xffc, 0x6, 0x8c}) 7m9.240415913s ago: executing program 4 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m7.05388283s ago: executing program 4 (id=461): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) write(r0, &(0x7f0000000000)="01000000", 0x4) 7m6.59057943s ago: executing program 4 (id=464): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) 7m4.432973179s ago: executing program 4 (id=476): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m4.158462548s ago: executing program 4 (id=477): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 6m49.003279707s ago: executing program 32 (id=477): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 23.830380269s ago: executing program 1 (id=1839): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000180)={{0x0, 0x0, 0xe3, 0x7, 0x80000001}, [{0x5, 0x3, 0x1, 0x80}, {0x5, 0xfffffffffffffffd, 0x9, 0x20}, {0x6d, 0x3, 0xf8, 0x4}, {0x6, 0x8, 0xb, 0x4}, {0x4, 0x7, 0xa1, 0x7}, {0x9, 0x400, 0x1, 0xb5}, {0xe621, 0x5, 0x29, 0x9}, {0x2, 0x1, 0x8, 0x3}, {0x9, 0x3, 0x8, 0x5}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000001c0)={0x3, &(0x7f0000000140)}) ioctl(0xffffffffffffffff, 0x40186f40, &(0x7f00000001c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) set_mempolicy(0x3, 0x0, 0xf) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket(0x2b, 0x1, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) accept4$unix(r5, 0x0, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x8000001, 0x0, 0x0, 0x1, 0x10000003}]}) 19.712199314s ago: executing program 0 (id=1845): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) msync(&(0x7f0000bc9000/0x2000)=nil, 0x2000, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) listen(0xffffffffffffffff, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 18.784102564s ago: executing program 5 (id=1846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xc0000001, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x8a81bbba17ca66d4, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000300000100001800128008000100677470000c00028008000100", @ANYRES32=r6, @ANYBLOB="0800f1c7f428f2", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x24000840) 17.80650237s ago: executing program 5 (id=1847): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x5422, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) 17.717034326s ago: executing program 1 (id=1849): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x43be, &(0x7f0000000140)={0x0, 0xf611, 0x200, 0xffffffff, 0x389}) r1 = syz_io_uring_setup(0xeec, &(0x7f0000000400)={0x0, 0x595f, 0x40, 0x0, 0xed, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000000c0)) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f00000001c0)={0x34, 0x89, 0x8, 0x4, 0x0, 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) 14.849979757s ago: executing program 2 (id=1851): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x3c, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000080)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0xa4}}, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401"], 0x18}}, 0x2000481c) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000003380)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x20000090}, 0x20048883) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 13.553987833s ago: executing program 1 (id=1852): socket(0x1d, 0x4, 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x14, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$SIOCSIFHWADDR(r0, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$packet(0x11, 0x3, 0x300) memfd_create(&(0x7f00000005c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xc8Ng\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r3 = socket$packet(0x11, 0x3, 0x300) msgget$private(0x0, 0x20) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x82002, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioprio_get$pid(0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, &(0x7f0000000100)=0x9, r8, 0x0, 0x7, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56543, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x3, 0x0, 0xfffffffc}, [@TCA_NETEM_CORR={0x10, 0x1, {0x4, 0x8, 0x6}}]}}}]}, 0x5c}}, 0x0) 13.289380777s ago: executing program 3 (id=1853): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @rand_addr=0x64010101, 0x0, 0x6, [@private=0xa010100, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @broadcast]}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) 13.182351934s ago: executing program 0 (id=1854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bind$unix(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) futex(0x0, 0x5, 0x10000, 0x0, 0x0, 0x3000000) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0xffffffffffffffff, 0x9, 0x6, 0xfffffffffffffff9, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x3, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newsa={0xf0, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x4}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 11.443484229s ago: executing program 2 (id=1855): r0 = syz_open_dev$mtd(0x0, 0x260c, 0xa02) ioctl$MEMWRITEOOB64(r0, 0x125f, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 11.266172742s ago: executing program 0 (id=1856): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write$P9_RGETATTR(r5, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x30d0, {0x20, 0x8001, 0x5}, 0x1ce, 0x0, 0x0, 0x10000, 0x5, 0x7, 0x5, 0x3, 0x4, 0x39, 0x7bf, 0xfff, 0x5, 0x96a, 0x9d4d, 0x0, 0x0, 0x7}}, 0xa0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff05000000000000000200000100000000030000000000000002000000000000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000300000000800000ff030000", @ANYRES32=0x0, @ANYBLOB="040000000400000000000000000000000000200037050000000000002b000000090000003a2d285cc980000000c30000f3397dd86d4d928d24d3a461b60245898556c60000000000002b133b0000000000000000"], 0x0, 0x0, 0x0}) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) r10 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000000040)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, r8, r7, r8, 0x61, 0x8}, 0xf0, 0x10000, 0x9, 0x6, r9, r10, 0x7f}) shutdown(r4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f2, &(0x7f0000000100)={0x3, 0xa, 0x0, 0x401, 0x7, "bb40af00008000"}) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000000)={0x1, 0xffc, 0x6, 0x8c}) 11.238737925s ago: executing program 3 (id=1857): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @empty}}}, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x40002001}) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000240)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b1b7ab93a9ce1f19357600", 0x800, 0x1}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.863037188s ago: executing program 2 (id=1858): gettid() write$input_event(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0xea60}, 0x15, 0x8}, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1000, 0x1800}], 0x1, 0x0) unshare(0x2c040000) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0x3}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) 8.622368382s ago: executing program 1 (id=1859): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x20001, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) statx(r3, 0x0, 0x7100, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x3, 0x6, 0x8, 0x7}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x67ce, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000140)=0x3, 0x4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000180)='t', 0x1) setuid(0xee01) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x20) openat$cgroup_ro(r2, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000001840), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r6, 0xc02063a0, &(0x7f0000001a40)=[0x0, 0x10, 0x1af, 0xf0000000, 0x6, 0x331, 0x7, 0xffffffe0]) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0x5}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003740)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 8.620952182s ago: executing program 3 (id=1860): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0xa4}}, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r4, 0xa) recvmmsg(r4, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000100000000000000010"], 0x28}, 0x0) 7.357481504s ago: executing program 2 (id=1861): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(0x0, &(0x7f0000000140)={0x200000, 0x200003, 0x200000, 0x0, 0x6}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000240)={r2, &(0x7f0000000200)=[{0x80000000}, {0x80000000, 0x0}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f000000a300)={{r3, 0x0, 0x2, [0x80000001, 0x8]}, {0x80000000, r4, 0x2, [0xc1b, 0x8004]}, 0x0, [0x7e, 0x8]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40902, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x9, 0x0, 0x0, "810002ee0900598c44ff00be875f3c00"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r6 = syz_open_pts(r5, 0x141601) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000040)={0x5, 0xff7f, 0x1, 0x9, 0x5, "995e825fc02930cf"}) fcntl$setstatus(r6, 0x4, 0x102800) 7.357039347s ago: executing program 5 (id=1862): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x2000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000d40)={{0x12, 0x1, 0x310, 0xf4, 0xdb, 0x5f, 0x8, 0xaf0, 0x7111, 0xd69c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x5, 0x0, 0x9, "", [{{0x9, 0x4, 0xa5, 0x5, 0x0, 0x3c, 0x4, 0x7d, 0x24}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) io_uring_setup(0x73d, &(0x7f0000000400)={0x0, 0x958, 0x20, 0x8, 0x2a}) 7.239209011s ago: executing program 3 (id=1863): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "e33af1dd0596f30c", "364fc93c3c0c7baafaacdf222d02a60e", "fffe1258", "6ea60eec69063f28"}, 0x28) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) unshare(0x2a020400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r6, &(0x7f0000000a00)='- 1 0 1', 0x7) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5.328455371s ago: executing program 2 (id=1864): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d00)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc0202000}, 0xc, &(0x7f0000000480)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x20004040) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, 0x0, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r6, r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r6}) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x34}, 0x28) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 5.083055751s ago: executing program 3 (id=1865): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) io_uring_setup(0x66a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0xa4}}, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401"], 0x18}}, 0x2000481c) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000003380)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x20000090}, 0x20048883) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 3.806394228s ago: executing program 0 (id=1866): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0xa4}}, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r5, 0xa) recvmmsg(r5, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) 2.760726733s ago: executing program 5 (id=1867): r0 = socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x801, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x80) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, 0x0) 2.63341839s ago: executing program 1 (id=1868): fchdir(0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000002c0)={"c6ffffff", 0x0, 0x5, 0x1, 0x200, 0x2, "0000000000e0ff00", "00ad4a00", '\x00', "97ad3700", ["fd60fdffffffffffffff0041", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000480)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac0000deff8f9a25bb00", 0x4, 0x4, 0x8, 0x0, 0x4, 0x7}) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.636358157s ago: executing program 0 (id=1869): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = fsopen(&(0x7f0000000040)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&!\xfd\xea\xb0\xb0', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b700000000000000950000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fanotify_init(0x200, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x8048802) 1.567006712s ago: executing program 5 (id=1870): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) 1.492336572s ago: executing program 3 (id=1871): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000900)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e20, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x800, 0x0, 0x800000000}, {0x1, 0xfffffffffffffffe, 0x0, 0x1ffffffffe}, 0x20, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x3, 0xfffffc01, 0x4001, 0x6}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="70750995aaaaffffffff2cb749f142cc269bb0a1f5f4bcffff0800450000280000d335bf4b124a43a8bccbfa43110000069078", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r3, 0x1) getsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, &(0x7f0000000040)) r4 = syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x13, &(0x7f0000000440)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x21, 0xa9, 0x81, 0x5}]}, 0x3, [{0x76, &(0x7f00000005c0)=@string={0x76, 0x3, "d945b885dbd9a1c84357fef009e3778d266b2cacfefdca0e2e2bdca13291092505eb0fd7ea175ad8e85c05ac7268ca26857caad608c0637e127373d706872813aaa8b7b4e8d8bae00060b128a3432ca8269dd53c0724af9be2a9267b64389dd381cb3916a75761a9e84b73801bdb8f16bd46f191"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44d}}, {0x4b, &(0x7f0000000680)=@string={0x4b, 0x3, "915248e9bcfd995db9879487f2f12bc4572a0d66c04dc1b09adb88277758936974a347e21db001067040ded481113d01bc277b2fd607cd476d72d7fa3f3210d408d8f7fba79a5a10ca"}}]}) syz_usb_control_io$hid(r4, &(0x7f00000009c0)={0x24, &(0x7f0000000780)={0x40, 0x24, 0xf3, {0xf3, 0x8, "690fff06e8c428ee7c520d84b8d5a66eec27106f03fb4c7a90b1bc142a11fbf6136b0d1ace1f38b99695aa775daa379a5adc81d4426f6fa424a552650756e1a01d55dd0acb84598c64482d2f82cc7258fafe897b573615554f08aa4405e21d4b08b16a87b0ea56549cb317ac2682db8ddecdd39e9f025d300d5892ca8c76f0d378bd5b1070bf6b0fd02b91def3fd24d4f76aaf1c980881c5d56c58762700586ddb0ac23484e11743e48d7d28e2a5b14164d2c48fdce4163e7e9ed1dcc6b5cf72ad5018177b0db06c2d42227084a557462aa78b41b8e5fde672af3058c7240f609a0bacaa00f1debdcbcbb162ebc3c13463"}}, &(0x7f0000000880)={0x0, 0x3, 0x54, @string={0x54, 0x3, "5dc1c0d5b9419761a9a11fac947a69504ea52c1aab8632345b073b19b6618d0050ae747695641778e96c715414345125aa1a3ab82d15bde3b8d63879b5e3f4ee1325fecdfbf12616831f27bc7c719b60ffc8"}}, &(0x7f0000000940)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x3}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x4a}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000a00)={0x0, 0x16, 0x39, "f3983776c6dd6ea32e3f332b77ad64f4e74d917bfcd78fdbbd0c5300d30be2aea22e87b0e544438e82d941cae0b6349d4f089cc08e6385e845"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000ac0)={0x20, 0x1, 0x1a, "b58095d0d35e78bb5aa7b6d709027f299534403aef5122f07a55"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x1}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r6, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x10020, 0xffffffffffffffff, 0x0}) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000053, 0x3) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001, 0x2}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x15}, 0x80) connect$inet6(r1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000100)="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", 0x1f1}], 0x1) 1.426411513s ago: executing program 2 (id=1872): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x8) fsetxattr(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='user.'], 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x4, &(0x7f0000000440)=[{0x3, 0x0, 0x8, 0x7fff0000}, {0x3, 0x0, 0x10}, {0xe, 0x5, 0x20, 0x3ff}, {0x1000, 0x0, 0x8, 0x1ff}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x282, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @loopback, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000580), r1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@multicast1, @loopback}, &(0x7f0000000200)=0xc) socket$inet_sctp(0x2, 0x1, 0x84) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x4e, 0x0, 0x0) 1.35993363s ago: executing program 0 (id=1873): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0xa4}}, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r4, 0xa) recvmmsg(r4, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000100000000000000010"], 0x28}, 0x0) 171.594776ms ago: executing program 5 (id=1874): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) landlock_restrict_self(r3, 0x0) r5 = open$dir(0x0, 0x90100, 0x100) fspick(r5, &(0x7f0000000140)='./file0\x00', 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=1875): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) unshare(0x22020600) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x10000000) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0xfffffffc}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e30000000000000000000000012e0531f7ad3f42c20e32eb771db8200a8a19e6053163f3d4262"], 0x38}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000041401000000000002000000080001000000000008000300"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): =1, Product=2, SerialNumber=3 [ 362.960099][ T10] usb 3-1: Product: syz [ 362.960108][ T10] usb 3-1: Manufacturer: syz [ 362.960123][ T10] usb 3-1: SerialNumber: syz [ 363.026718][ T10] usb 3-1: config 0 descriptor?? [ 363.044388][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 363.424680][ T9347] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 363.460334][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 363.460384][ T10] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 363.491232][ T10] usb 3-1: USB disconnect, device number 17 [ 363.588779][ T9376] netlink: 104 bytes leftover after parsing attributes in process `syz.1.987'. [ 363.623410][ T9377] netlink: 40 bytes leftover after parsing attributes in process `syz.5.988'. [ 363.966595][ T9392] netlink: 88 bytes leftover after parsing attributes in process `syz.1.993'. [ 364.080563][ T30] audit: type=1400 audit(1789453314.400:1306): avc: denied { write } for pid=9362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.249316][ T9401] trusted_key: encrypted_key: master key parameter is missing [ 364.275685][ T9402] netlink: 256 bytes leftover after parsing attributes in process `syz.2.997'. [ 364.337812][ T30] audit: type=1400 audit(1789453314.660:1307): avc: denied { getopt } for pid=9404 comm="syz.3.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 364.502957][ T30] audit: type=1400 audit(1789453314.820:1308): avc: denied { write } for pid=9407 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.994665][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 365.051898][ T9426] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 365.146955][ T10] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 365.148170][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 365.148195][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.626914][ T10] qmi_wwan 2-1:1.0: probe with driver qmi_wwan failed with error -22 [ 365.662004][ T10] usb 2-1: USB disconnect, device number 16 [ 365.790052][ T30] audit: type=1400 audit(1789453316.110:1309): avc: denied { write } for pid=9428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.187577][ T30] audit: type=1400 audit(1789453316.510:1310): avc: denied { write } for pid=9476 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.642332][ T30] audit: type=1400 audit(1789453316.960:1311): avc: denied { append } for pid=9502 comm="syz.1.1026" name="sg0" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 366.708651][ T9505] sg_write: data in/out 768/136 bytes for SCSI command 0x0-- guessing data in; [ 366.708651][ T9505] program syz.1.1026 not setting count and/or reply_len properly [ 367.924811][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 368.102896][ T52] Bluetooth: hci4: connection err: -111 [ 368.245312][ T9526] IPVS: sh: FWM 3 0x00000003 - no destination available [ 368.774339][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 368.930101][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.931606][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 368.931627][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.40 [ 368.967189][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 368.980165][ T10] usb 2-1: string descriptor 0 read error: -22 [ 368.980234][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.003101][ T190] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 369.155631][ T190] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 369.156584][ T190] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 369.156601][ T190] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 369.156611][ T190] usb 4-1: config 0 has no interface number 0 [ 369.217413][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.217432][ T190] usb 4-1: Product: syz [ 369.217440][ T190] usb 4-1: Manufacturer: syz [ 369.217449][ T190] usb 4-1: SerialNumber: syz [ 369.219157][ T190] usb 4-1: config 0 descriptor?? [ 369.689457][ T190] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 369.689491][ T190] uvcvideo 4-1:0.64: No valid video chain found. [ 369.718127][ T190] usb 4-1: USB disconnect, device number 22 [ 369.875009][ T9538] zram0: detected capacity change from 0 to 65536 [ 370.001685][ T30] audit: type=1400 audit(1789453320.320:1312): avc: denied { write } for pid=9547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.028002][ T10] logitech 0003:046D:C286.0011: unknown main item tag 0x2 [ 372.028025][ T10] logitech 0003:046D:C286.0011: unknown main item tag 0x0 [ 372.028040][ T10] logitech 0003:046D:C286.0011: unknown main item tag 0x0 [ 372.028087][ T10] logitech 0003:046D:C286.0011: unknown main item tag 0x0 [ 372.028102][ T10] logitech 0003:046D:C286.0011: unknown main item tag 0x0 [ 372.028118][ T10] logitech 0003:046D:C286.0011: unknown main item tag 0x0 [ 372.028133][ T10] logitech 0003:046D:C286.0011: unknown main item tag 0x0 [ 372.028147][ T10] logitech 0003:046D:C286.0011: unknown main item tag 0x0 [ 372.028162][ T10] logitech 0003:046D:C286.0011: unknown main item tag 0x0 [ 372.028177][ T10] logitech 0003:046D:C286.0011: unknown main item tag 0x0 [ 372.170405][ T30] audit: type=1400 audit(1789453322.490:1313): avc: denied { write } for pid=9583 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.174476][ T9586] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 372.386073][ T10] input: HID 046d:c286 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:046D:C286.0011/input/input34 [ 372.448434][ T10] logitech 0003:046D:C286.0011: offset (39) exceeds report_count (19) [ 372.448498][ T10] logitech 0003:046D:C286.0011: offset (25) exceeds report_count (19) [ 373.008210][ T9573] ftl_cs: FTL header not found. [ 373.133506][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 373.387884][ T10] logitech 0003:046D:C286.0011: input,hidraw0: USB HID v0.0a Keyboard [HID 046d:c286] on usb-dummy_hcd.1-1/input0 [ 373.387993][ T10] hid_logitech: Force feedback for Logitech force feedback devices by Johann Deneux [ 373.917826][ T30] audit: type=1400 audit(1789453324.240:1314): avc: denied { write } for pid=9599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.156744][ T9573] block2mtd: mtd1: [/dev/zram0] erase_size = 64KiB [65536] [ 374.236991][ T190] usb 2-1: USB disconnect, device number 17 [ 374.299541][ T30] audit: type=1400 audit(1789453324.620:1315): avc: denied { write } for pid=9652 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.814247][ T52] Bluetooth: hci4: connection err: -111 [ 375.437226][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 375.853648][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 376.173145][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 376.181059][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.181093][ T10] usb 4-1: config 0 has no interface number 0 [ 376.209371][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.209387][ T10] usb 4-1: Product: syz [ 376.209396][ T10] usb 4-1: Manufacturer: syz [ 376.209404][ T10] usb 4-1: SerialNumber: syz [ 376.240361][ T10] usb 4-1: config 0 descriptor?? [ 376.250818][ T10] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 376.250841][ T10] usb 4-1: selecting invalid altsetting 1 [ 376.250854][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 376.301188][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 376.325698][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 376.325738][ T10] usb 4-1: media controller created [ 376.352800][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'. [ 376.382741][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.593711][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1091'. [ 376.616167][ T10] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 376.616209][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 376.643326][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 376.794136][ T10] usb 4-1: USB disconnect, device number 23 [ 378.376953][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.510628][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 379.745509][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1108'. [ 380.004332][ T9756] binder: 9753:9756 ioctl c0306201 200000000180 returned -14 [ 380.903642][ T5698] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 380.927392][ T30] audit: type=1400 audit(1789453331.250:1316): avc: denied { setopt } for pid=9789 comm="syz.0.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.958034][ T190] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 381.069665][ T5698] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 381.082768][ T5698] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.082790][ T5698] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.082809][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.105653][ T5698] usb 6-1: config 0 descriptor?? [ 381.133636][ T190] usb 3-1: Using ep0 maxpacket: 8 [ 381.134144][ T190] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 381.135001][ T190] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 381.136561][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.136576][ T190] usb 3-1: Product: syz [ 381.136585][ T190] usb 3-1: Manufacturer: syz [ 381.136607][ T190] usb 3-1: SerialNumber: syz [ 381.193619][ T190] usb 3-1: config 0 descriptor?? [ 381.197710][ T190] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 381.197741][ T190] usb 3-1: setting power ON [ 381.197755][ T190] dvb-usb: bulk message failed: -22 (2/0) [ 381.202811][ T190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.228663][ T190] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 381.228695][ T190] usb 3-1: media controller created [ 381.276924][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.312104][ T190] usb 3-1: selecting invalid altsetting 6 [ 381.312120][ T190] usb 3-1: digital interface selection failed (-22) [ 381.312128][ T190] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 381.339275][ T190] usb 3-1: setting power OFF [ 381.339290][ T190] dvb-usb: bulk message failed: -22 (2/0) [ 381.339299][ T190] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 381.339307][ T190] (NULL device *): no alternate interface [ 381.415256][ T190] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 381.442736][ T190] usb 3-1: USB disconnect, device number 18 [ 381.595362][ T5698] hid_parser_main: 3522 callbacks suppressed [ 381.595379][ T5698] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 381.595441][ T5698] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 381.595458][ T5698] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 381.595473][ T5698] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 381.595487][ T5698] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 381.595502][ T5698] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 381.595526][ T5698] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 381.595541][ T5698] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 381.595556][ T5698] kye 0003:0458:0087.0012: unknown main item tag 0x0 [ 381.602509][ T5698] kye 0003:0458:0087.0012: hidraw0: USB HID v0.08 Device [HID 0458:0087] on usb-dummy_hcd.5-1/input0 [ 382.752650][ T190] usb 6-1: USB disconnect, device number 9 [ 382.792583][ T9803] fido_id[9803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 383.194232][ T30] audit: type=1400 audit(1789453333.520:1317): avc: denied { shutdown } for pid=9820 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.200363][ T30] audit: type=1400 audit(1789453333.520:1318): avc: denied { read } for pid=9820 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.910895][ T9849] openvswitch: netlink: VLAN attribute unexpected. [ 384.140825][ T30] audit: type=1400 audit(1789453334.460:1319): avc: denied { write } for pid=9819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.253659][ T5707] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 384.414034][ T5707] usb 2-1: Using ep0 maxpacket: 16 [ 384.414600][ T5707] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 384.415561][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.415579][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.415592][ T5707] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.415614][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.420837][ T5707] usb 2-1: config 0 descriptor?? [ 384.567757][ T30] audit: type=1400 audit(1789453334.890:1320): avc: denied { write } for pid=9872 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.843228][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 384.997854][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 384.999966][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 384.999985][ T10] usb 3-1: config 0 has no interface number 0 [ 385.000007][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.039401][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.039418][ T10] usb 3-1: Product: syz [ 385.039427][ T10] usb 3-1: Manufacturer: syz [ 385.039435][ T10] usb 3-1: SerialNumber: syz [ 385.121229][ T10] usb 3-1: config 0 descriptor?? [ 385.145524][ T10] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 385.201691][ T5707] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0013/input/input35 [ 385.232711][ T5707] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 385.282826][ T5707] usb 2-1: USB disconnect, device number 18 [ 385.422124][ T190] usb 3-1: USB disconnect, device number 19 [ 385.438344][ T9903] netlink: 'syz.3.1172': attribute type 2 has an invalid length. [ 385.438373][ T9903] netlink: 'syz.3.1172': attribute type 2 has an invalid length. [ 385.472801][ T190] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 385.612321][ T9902] fido_id[9902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 385.739105][ T30] audit: type=1400 audit(1789453336.060:1321): avc: denied { connect } for pid=9910 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 385.782198][ T30] audit: type=1400 audit(1789453336.100:1322): avc: denied { write } for pid=9910 comm="syz.0.1175" laddr=fe80::a07b:3eff:feb3:40ff lport=29802 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 385.838012][ T30] audit: type=1400 audit(1789453336.160:1323): avc: denied { read } for pid=9910 comm="syz.0.1175" laddr=fe80::a07b:3eff:feb3:40ff lport=29802 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 385.914334][ T30] audit: type=1400 audit(1789453336.240:1324): avc: denied { write } for pid=9885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.069717][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1177'. [ 387.221532][ T30] audit: type=1400 audit(1789453337.540:1325): avc: denied { write } for pid=9926 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.583275][ T190] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 387.735070][ T190] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 387.735834][ T190] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.735853][ T190] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.735866][ T190] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 387.735881][ T190] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.735899][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.774075][ T190] usb 3-1: config 0 descriptor?? [ 388.097470][ T30] audit: type=1400 audit(1789453338.420:1326): avc: denied { write } for pid=9948 comm="syz.3.1187" name="mtd1" dev="devtmpfs" ino=3359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 388.167585][ T30] audit: type=1400 audit(1789453338.490:1327): avc: denied { ioctl } for pid=9948 comm="syz.3.1187" path="/dev/mtd1" dev="devtmpfs" ino=3359 ioctlcmd=0x4d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 388.290296][ T190] samsung 0003:0419:0600.0014: unbalanced collection at end of report description [ 388.290708][ T190] samsung 0003:0419:0600.0014: parse failed [ 388.290745][ T190] samsung 0003:0419:0600.0014: probe with driver samsung failed with error -22 [ 388.326552][ T30] audit: type=1400 audit(1789453338.650:1328): avc: denied { mounton } for pid=9950 comm="syz.1.1188" path="/257/file0" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.393095][ T30] audit: type=1400 audit(1789453338.710:1329): avc: denied { read } for pid=9950 comm="syz.1.1188" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.393134][ T30] audit: type=1400 audit(1789453338.710:1330): avc: denied { open } for pid=9950 comm="syz.1.1188" path="/257/file0" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.513988][ T9] usb 3-1: USB disconnect, device number 20 [ 388.613507][ T190] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 388.763476][ T190] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 388.764913][ T190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.766507][ T190] usb 6-1: config 0 descriptor?? [ 388.989922][ T190] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 389.230465][ T30] audit: type=1400 audit(1789453339.550:1331): avc: denied { write } for pid=9951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.305015][ T190] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 389.305033][ T190] [drm] Initialized udl on minor 1 [ 389.622592][ T30] audit: type=1400 audit(1789453339.940:1332): avc: denied { write } for pid=9981 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.084772][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 390.233209][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 390.234623][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 390.237477][ T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 390.237493][ T9] usb 2-1: config 0 has no interface number 0 [ 390.237515][ T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.237530][ T9] usb 2-1: config 0 interface 85 has no altsetting 0 [ 390.246060][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.246079][ T9] usb 2-1: Product: syz [ 390.246087][ T9] usb 2-1: Manufacturer: syz [ 390.246096][ T9] usb 2-1: SerialNumber: syz [ 390.308485][ T9] usb 2-1: config 0 descriptor?? [ 390.617690][ T30] audit: type=1400 audit(1789453340.940:1333): avc: denied { write } for pid=9992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.734385][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 390.765840][ T30] audit: type=1400 audit(1789453341.090:1334): avc: denied { write } for pid=10013 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.886103][ T10] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 390.886884][ T10] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 390.886915][ T10] usb 3-1: config 1 has no interface number 0 [ 390.888758][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.888772][ T10] usb 3-1: Product: syz [ 390.888781][ T10] usb 3-1: Manufacturer: syz [ 390.888789][ T10] usb 3-1: SerialNumber: syz [ 390.948676][ T10] usb 3-1: 3:1 : does not exist [ 390.948691][ T10] usb 3-1: 3:2 : does not exist [ 390.963281][ T9] appletouch 2-1:0.85: Geyser mode initialized. [ 390.964480][ T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input36 [ 391.145352][ T10] usb 3-1: USB disconnect, device number 21 [ 391.222541][ T5707] usb 2-1: USB disconnect, device number 19 [ 391.325591][ T5707] appletouch 2-1:0.85: input: appletouch disconnected [ 391.932044][T10030] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 392.173831][T10036] tipc: Started in network mode [ 392.173852][T10036] tipc: Node identity ac1414aa, cluster identity 4711 [ 392.198809][T10036] tipc: New replicast peer: 172.20.20.187 [ 392.274375][T10036] tipc: Enabled bearer , priority 10 [ 393.316325][ T10] tipc: Node number set to 2886997162 [ 393.897770][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'. [ 394.148824][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 394.148836][ T30] audit: type=1326 audit(1789453344.470:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc399e159 code=0x7ffc0000 [ 394.188558][ T30] audit: type=1326 audit(1789453344.520:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc399e159 code=0x7ffc0000 [ 394.233569][ T30] audit: type=1326 audit(1789453344.550:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8bc399e159 code=0x7ffc0000 [ 394.233603][ T30] audit: type=1326 audit(1789453344.560:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc399e159 code=0x7ffc0000 [ 394.233640][ T30] audit: type=1326 audit(1789453344.560:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc399e159 code=0x7ffc0000 [ 394.332725][ T30] audit: type=1326 audit(1789453344.660:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8bc399e159 code=0x7ffc0000 [ 394.332774][ T30] audit: type=1326 audit(1789453344.660:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc399e159 code=0x7ffc0000 [ 394.332799][ T30] audit: type=1326 audit(1789453344.660:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc399e159 code=0x7ffc0000 [ 394.421713][ T190] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 394.421948][ T190] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 394.454537][ T30] audit: type=1326 audit(1789453344.780:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bc395e98e code=0x7ffc0000 [ 394.454573][ T30] audit: type=1326 audit(1789453344.780:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.2.1228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8bc399f457 code=0x7ffc0000 [ 394.588515][ T190] usb 6-1: USB disconnect, device number 10 [ 394.610045][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 395.211559][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 395.253194][ T190] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 395.403448][ T190] usb 2-1: Using ep0 maxpacket: 16 [ 395.409337][ T190] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 395.420165][ T190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.431723][ T190] usb 2-1: config 0 descriptor?? [ 395.448371][ T190] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 395.677127][ T190] usb 2-1: Detected FT232B [ 395.680605][T10108] xt_hashlimit: size too large, truncated to 1048576 [ 395.740182][T10109] xt_hashlimit: size too large, truncated to 1048576 [ 395.882662][ T190] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 395.882930][ T190] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 395.904716][ T190] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 395.911693][T10112] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 395.911708][T10112] device-mapper: ioctl: error adding target to table [ 395.940723][ T190] usb 2-1: USB disconnect, device number 20 [ 395.960038][ T190] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 395.978717][ T190] ftdi_sio 2-1:0.0: device disconnected [ 396.338510][T10121] input: syz1 as /devices/virtual/input/input37 [ 396.883088][ T190] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 396.920140][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 397.033546][ T190] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 397.034307][ T190] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.034322][ T190] usb 2-1: config 0 has no interface number 0 [ 397.035942][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.035956][ T190] usb 2-1: Product: syz [ 397.035965][ T190] usb 2-1: Manufacturer: syz [ 397.035973][ T190] usb 2-1: SerialNumber: syz [ 397.041075][ T190] usb 2-1: config 0 descriptor?? [ 397.133100][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 397.259762][ T190] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 397.280679][ T190] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 397.280849][ T190] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 397.280874][ T190] usb 2-1: media controller created [ 397.284006][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 397.318252][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 397.319077][ T10] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 397.319105][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 397.319121][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 397.319135][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.319150][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.319172][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.425628][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.517965][ T190] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 397.559130][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 397.559157][ T10] usbtmc 4-1:16.0: can't read capabilities [ 397.689896][ T190] usb 2-1: USB disconnect, device number 21 [ 397.995272][T10142] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 397.996294][ T190] usb 4-1: USB disconnect, device number 24 [ 398.264187][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 398.413090][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 398.413566][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 398.414468][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.414480][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.416622][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.416637][ T10] usb 6-1: Product: syz [ 398.416646][ T10] usb 6-1: Manufacturer: syz [ 398.416654][ T10] usb 6-1: SerialNumber: syz [ 398.670567][ T10] usb 6-1: unit 6 not found! [ 399.762383][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 399.872323][ T10] usb 6-1: USB disconnect, device number 11 [ 399.901314][T10176] batadv_slave_1: entered promiscuous mode [ 399.932836][T10175] batadv_slave_1: left promiscuous mode [ 399.982265][ T7204] udevd[7204]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.015584][T10178] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1270'. [ 401.419486][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'. [ 401.447596][T10193] FAULT_INJECTION: forcing a failure. [ 401.447596][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 401.447634][T10193] CPU: 0 UID: 0 PID: 10193 Comm: syz.3.1275 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.447652][T10193] Tainted: [L]=SOFTLOCKUP [ 401.447657][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 401.447669][T10193] Call Trace: [ 401.447673][T10193] [ 401.447678][T10193] dump_stack_lvl+0x100/0x190 [ 401.447702][T10193] should_fail_ex.cold+0x5/0xa [ 401.447720][T10193] should_failslab+0xc2/0x120 [ 401.447743][T10193] kmem_cache_alloc_noprof+0x92/0x6a0 [ 401.447762][T10193] ? posix_lock_inode+0x5b5/0x2760 [ 401.447783][T10193] posix_lock_inode+0x5b5/0x2760 [ 401.447802][T10193] ? __file_has_perm+0x336/0x460 [ 401.447816][T10193] ? __pfx_posix_lock_inode+0x10/0x10 [ 401.447833][T10193] ? lockdep_init_map_type+0x5c/0x250 [ 401.447846][T10193] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 401.447861][T10193] vfs_lock_file+0xfb/0x150 [ 401.447878][T10193] fcntl_setlk+0x757/0xe20 [ 401.447890][T10193] ? __pfx_fcntl_setlk+0x10/0x10 [ 401.447900][T10193] ? lock_acquire+0x1d1/0x380 [ 401.447911][T10193] ? __might_fault+0xc5/0x140 [ 401.447927][T10193] ? __might_fault+0xc5/0x140 [ 401.447942][T10193] ? __might_fault+0xc5/0x140 [ 401.447964][T10193] do_fcntl+0xf39/0x1670 [ 401.447981][T10193] ? __pfx_do_fcntl+0x10/0x10 [ 401.448001][T10193] ? selinux_file_fcntl+0xea/0x170 [ 401.448015][T10193] __x64_sys_fcntl+0x163/0x200 [ 401.448033][T10193] do_syscall_64+0x123/0x790 [ 401.448050][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.448062][T10193] RIP: 0033:0x7f787fb9e159 [ 401.448073][T10193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.448084][T10193] RSP: 002b:00007f788099f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 401.448099][T10193] RAX: ffffffffffffffda RBX: 00007f787fe25fa0 RCX: 00007f787fb9e159 [ 401.448106][T10193] RDX: 00002000000000c0 RSI: 0000000000000026 RDI: 0000000000000003 [ 401.448114][T10193] RBP: 00007f787fc3503b R08: 0000000000000000 R09: 0000000000000000 [ 401.448122][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.448129][T10193] R13: 00007f787fe26038 R14: 00007f787fe25fa0 R15: 00007ffd50ca8568 [ 401.448144][T10193] [ 402.050527][T10199] device-mapper: ioctl: Unable to rename non-existent device, to uuid j [ 402.603358][T10211] Need at least one configuration in g1. [ 402.712325][T10211] udc usbip-vudc.0: failed to start g1: -22 [ 402.712343][T10211] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 402.998052][T10211] UDC core: g1: couldn't find an available UDC or it's busy [ 403.163101][ T5599] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 403.166915][T10221] overlayfs: failed to clone upperpath [ 403.313855][ T5599] usb 6-1: not running at top speed; connect to a high speed hub [ 403.313877][ T5599] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 403.314642][ T5599] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 403.316134][ T5599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.316148][ T5599] usb 6-1: Product: syz [ 403.316157][ T5599] usb 6-1: Manufacturer: syz [ 403.316165][ T5599] usb 6-1: SerialNumber: syz [ 403.319786][ T5599] oti6858 6-1:1.0: oti6858 converter detected [ 403.321990][ T5599] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 403.924438][ T5599] usb 6-1: USB disconnect, device number 12 [ 403.962910][ T5599] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 403.963328][ T5599] oti6858 6-1:1.0: device disconnected [ 404.263231][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 404.430170][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 404.431956][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 404.450021][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 404.450038][ T10] usb 2-1: config 0 has no interface number 0 [ 404.450059][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 404.450072][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 404.450085][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 404.450099][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 404.450110][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.450131][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.545609][ T10] usb 2-1: config 0 descriptor?? [ 404.585135][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 404.807926][T10235] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 404.809033][ T10] usb 2-1: USB disconnect, device number 22 [ 404.812294][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 405.805532][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 405.959298][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 405.960470][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.962101][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.962117][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.962130][ T9] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 405.962145][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 405.962159][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 405.962173][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.962194][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.181301][ T9] usb 2-1: usb_control_msg returned -32 [ 406.181330][ T9] usbtmc 2-1:16.0: can't read capabilities [ 407.264887][T10213] Set syz1 is full, maxelem 65536 reached [ 407.325542][T10310] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1320'. [ 407.384314][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 407.384328][ T30] audit: type=1400 audit(1789453357.710:1364): avc: denied { getopt } for pid=10311 comm="syz.2.1321" lport=54079 faddr=::ffff:10.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 407.527541][ T5599] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 407.673719][ T5599] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 407.674600][ T5599] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 407.674617][ T5599] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 407.674630][ T5599] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 407.674645][ T5599] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 407.674667][ T5599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.679827][T10308] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 407.679886][T10308] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 407.679952][T10308] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 407.682596][ T5599] pl2303 6-1:1.0: pl2303 converter detected [ 407.781449][ T5599] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 407.994825][T10308] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 407.995101][T10308] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 407.995398][T10308] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 407.995864][T10308] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 407.996151][T10308] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 408.265052][T10308] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 408.268161][T10308] pl2303 ttyUSB0: error sending break = -32 [ 408.288575][ T5599] usb 6-1: USB disconnect, device number 13 [ 408.304309][ T5599] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 408.304677][ T5599] pl2303 6-1:1.0: device disconnected [ 408.563969][ T5599] usb 2-1: USB disconnect, device number 23 [ 408.973060][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 409.123051][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 409.123621][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 409.124598][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 409.124616][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 409.124628][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 409.124651][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 409.124663][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 409.124675][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 409.124697][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.128274][ T10] usb 3-1: config 0 descriptor?? [ 409.167160][T10288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.390132][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 410.424660][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 410.458783][ T190] usb 3-1: USB disconnect, device number 22 [ 410.464168][ T190] usblp0: removed [ 412.103176][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 412.488427][T10377] FAULT_INJECTION: forcing a failure. [ 412.488427][T10377] name failslab, interval 1, probability 0, space 0, times 0 [ 412.488456][T10377] CPU: 0 UID: 0 PID: 10377 Comm: syz.5.1345 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.488473][T10377] Tainted: [L]=SOFTLOCKUP [ 412.488478][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 412.488486][T10377] Call Trace: [ 412.488490][T10377] [ 412.488496][T10377] dump_stack_lvl+0x100/0x190 [ 412.488521][T10377] should_fail_ex.cold+0x5/0xa [ 412.488539][T10377] should_failslab+0xc2/0x120 [ 412.488554][T10377] __kmalloc_cache_noprof+0x91/0x6d0 [ 412.488572][T10377] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 412.488593][T10377] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 412.488611][T10377] ? rcu_is_watching+0x13/0xc0 [ 412.488626][T10377] ? trace_contention_end+0x126/0x160 [ 412.488641][T10377] ? snd_pcm_oss_write+0x49a/0xa30 [ 412.488657][T10377] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 412.488672][T10377] ? futex_hash+0x311/0x400 [ 412.488688][T10377] ? __pfx___mutex_lock+0x10/0x10 [ 412.488712][T10377] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 412.488734][T10377] snd_pcm_oss_write+0x4bb/0xa30 [ 412.488758][T10377] ? bpf_lsm_file_permission+0x9/0x10 [ 412.488775][T10377] ? security_file_permission+0x76/0x210 [ 412.488794][T10377] vfs_write+0x2aa/0x1050 [ 412.488808][T10377] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 412.488825][T10377] ? lock_acquire+0x1d1/0x380 [ 412.488837][T10377] ? __fget_files+0x34/0x3d0 [ 412.488850][T10377] ? __pfx_vfs_write+0x10/0x10 [ 412.488861][T10377] ? find_held_lock+0x2b/0x80 [ 412.488875][T10377] ? __fget_files+0x215/0x3d0 [ 412.488888][T10377] ? __fget_files+0x215/0x3d0 [ 412.488904][T10377] ? __fget_files+0x21f/0x3d0 [ 412.488922][T10377] ksys_write+0x12a/0x250 [ 412.488933][T10377] ? __pfx_ksys_write+0x10/0x10 [ 412.488949][T10377] do_syscall_64+0x123/0x790 [ 412.488966][T10377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.488978][T10377] RIP: 0033:0x7f3f8f79e159 [ 412.488988][T10377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.488999][T10377] RSP: 002b:00007f3f90709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.489012][T10377] RAX: ffffffffffffffda RBX: 00007f3f8fa25fa0 RCX: 00007f3f8f79e159 [ 412.489020][T10377] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 412.489028][T10377] RBP: 00007f3f8f83503b R08: 0000000000000000 R09: 0000000000000000 [ 412.489034][T10377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.489041][T10377] R13: 00007f3f8fa26038 R14: 00007f3f8fa25fa0 R15: 00007ffd2e90c708 [ 412.489057][T10377] [ 413.865063][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 414.393251][ T190] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 414.556200][ T190] usb 4-1: Using ep0 maxpacket: 32 [ 414.561133][ T190] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 414.578190][ T190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.578221][ T190] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.578247][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.615355][ T190] usb 4-1: config 0 descriptor?? [ 414.638463][ T190] hub 4-1:0.0: bad descriptor, ignoring hub [ 414.638482][ T190] hub 4-1:0.0: probe with driver hub failed with error -5 [ 414.639432][ T190] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 414.849946][ T30] audit: type=1400 audit(1789453365.170:1365): avc: denied { read } for pid=10407 comm="syz.1.1359" path="socket:[30776]" dev="sockfs" ino=30776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.136445][T10412] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 415.136671][T10412] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 415.295903][T10420] input: syz0 as /devices/virtual/input/input38 [ 416.986984][T10453] fuse: Bad value for 'fd' [ 417.294151][ T190] usb 4-1: USB disconnect, device number 25 [ 417.319129][ T30] audit: type=1400 audit(1789453367.640:1366): avc: denied { bind } for pid=10463 comm="syz.3.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 417.422816][ T30] audit: type=1400 audit(1789453367.740:1367): avc: denied { accept } for pid=10463 comm="syz.3.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 417.873544][T10476] cgroup: Setting release_agent not allowed [ 418.269331][T10497] FAULT_INJECTION: forcing a failure. [ 418.269331][T10497] name failslab, interval 1, probability 0, space 0, times 0 [ 418.269356][T10497] CPU: 0 UID: 0 PID: 10497 Comm: syz.5.1387 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.269374][T10497] Tainted: [L]=SOFTLOCKUP [ 418.269379][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 418.269387][T10497] Call Trace: [ 418.269391][T10497] [ 418.269396][T10497] dump_stack_lvl+0x100/0x190 [ 418.269419][T10497] should_fail_ex.cold+0x5/0xa [ 418.269435][T10497] should_failslab+0xc2/0x120 [ 418.269450][T10497] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 418.269465][T10497] ? __d_alloc+0x35/0xa50 [ 418.269482][T10497] __d_alloc+0x35/0xa50 [ 418.269500][T10497] d_alloc_pseudo+0x1c/0xc0 [ 418.269511][T10497] alloc_file_pseudo+0x118/0x290 [ 418.269528][T10497] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 418.269544][T10497] ? __kasan_kmalloc+0xaa/0xb0 [ 418.269559][T10497] __anon_inode_getfile+0xe8/0x280 [ 418.269574][T10497] sync_file_alloc+0x65/0x160 [ 418.269587][T10497] sync_file_create+0x17/0xf0 [ 418.269601][T10497] sw_sync_ioctl+0x3b4/0x13f0 [ 418.269618][T10497] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 418.269636][T10497] ? selinux_file_ioctl+0x13b/0x290 [ 418.269649][T10497] ? selinux_file_ioctl+0xb6/0x290 [ 418.269662][T10497] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 418.269677][T10497] __x64_sys_ioctl+0x18e/0x210 [ 418.269690][T10497] do_syscall_64+0x123/0x790 [ 418.269707][T10497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.269719][T10497] RIP: 0033:0x7f3f8f79e159 [ 418.269732][T10497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.269743][T10497] RSP: 002b:00007f3f90709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.269756][T10497] RAX: ffffffffffffffda RBX: 00007f3f8fa25fa0 RCX: 00007f3f8f79e159 [ 418.269764][T10497] RDX: 0000200000000b00 RSI: 00000000c0285700 RDI: 0000000000000005 [ 418.269771][T10497] RBP: 00007f3f8f83503b R08: 0000000000000000 R09: 0000000000000000 [ 418.269779][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.269786][T10497] R13: 00007f3f8fa26038 R14: 00007f3f8fa25fa0 R15: 00007ffd2e90c708 [ 418.269802][T10497] [ 418.575544][T10486] syzkaller0: entered promiscuous mode [ 418.575562][T10486] syzkaller0: entered allmulticast mode [ 418.679599][ T30] audit: type=1400 audit(1789453369.000:1368): avc: denied { write } for pid=10470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.054607][ T30] audit: type=1400 audit(1789453369.380:1369): avc: denied { write } for pid=10512 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.444910][ T30] audit: type=1400 audit(1789453369.770:1370): avc: denied { read } for pid=10516 comm="syz.5.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.799119][T10515] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 420.169768][ T30] audit: type=1400 audit(1789453370.490:1371): avc: denied { write } for pid=10517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.325857][T10542] ip_tables: iptables: counters copy to user failed while replacing table [ 420.439077][ T30] audit: type=1400 audit(1789453370.760:1372): avc: denied { write } for pid=10543 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.509322][T10575] fuse: fd is not a fuse device [ 422.864456][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 423.099253][T10600] fuse: fd is not a fuse device [ 423.600405][T10608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1423'. [ 427.199057][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'. [ 429.152693][T10662] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 429.282611][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 429.311574][T10668] FAULT_INJECTION: forcing a failure. [ 429.311574][T10668] name failslab, interval 1, probability 0, space 0, times 0 [ 429.311603][T10668] CPU: 0 UID: 0 PID: 10668 Comm: syz.2.1441 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.311621][T10668] Tainted: [L]=SOFTLOCKUP [ 429.311626][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 429.311634][T10668] Call Trace: [ 429.311639][T10668] [ 429.311644][T10668] dump_stack_lvl+0x100/0x190 [ 429.311669][T10668] should_fail_ex.cold+0x5/0xa [ 429.311687][T10668] should_failslab+0xc2/0x120 [ 429.311702][T10668] __kvmalloc_node_noprof+0x113/0x9b0 [ 429.311715][T10668] ? __might_fault+0xc5/0x140 [ 429.311733][T10668] ? xt_alloc_table_info+0x44/0xa0 [ 429.311751][T10668] xt_alloc_table_info+0x44/0xa0 [ 429.311765][T10668] do_ipt_set_ctl+0x611/0xcf0 [ 429.311784][T10668] ? nf_sockopt_find.isra.0+0x222/0x290 [ 429.311800][T10668] ? nf_sockopt_find.isra.0+0x222/0x290 [ 429.311817][T10668] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 429.311834][T10668] ? __mutex_unlock_slowpath+0x35d/0x930 [ 429.311860][T10668] ? sockopt_release_sock+0x5c/0x70 [ 429.311877][T10668] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.311902][T10668] ? nf_sockopt_find.isra.0+0x222/0x290 [ 429.311919][T10668] nf_setsockopt+0x8d/0xf0 [ 429.311936][T10668] ip_setsockopt+0xcb/0xf0 [ 429.311956][T10668] udp_setsockopt+0x64/0xb0 [ 429.311972][T10668] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 429.311989][T10668] do_sock_setsockopt+0xf3/0x1d0 [ 429.312006][T10668] __sys_setsockopt+0x195/0x220 [ 429.312022][T10668] __x64_sys_setsockopt+0xbd/0x160 [ 429.312034][T10668] ? do_syscall_64+0xae/0x790 [ 429.312048][T10668] ? lockdep_hardirqs_on+0x7d/0x110 [ 429.312063][T10668] do_syscall_64+0x123/0x790 [ 429.312079][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.312091][T10668] RIP: 0033:0x7f8bc399e159 [ 429.312101][T10668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.312113][T10668] RSP: 002b:00007f8bc1bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 429.312124][T10668] RAX: ffffffffffffffda RBX: 00007f8bc3c25fa0 RCX: 00007f8bc399e159 [ 429.312132][T10668] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 429.312138][T10668] RBP: 00007f8bc3a3503b R08: 0000000000000408 R09: 0000000000000000 [ 429.312145][T10668] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000000 [ 429.312152][T10668] R13: 00007f8bc3c26038 R14: 00007f8bc3c25fa0 R15: 00007ffeb7471638 [ 429.312167][T10668] [ 430.198227][T10690] FAULT_INJECTION: forcing a failure. [ 430.198227][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 430.198251][T10690] CPU: 0 UID: 0 PID: 10690 Comm: syz.1.1451 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.198268][T10690] Tainted: [L]=SOFTLOCKUP [ 430.198273][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 430.198282][T10690] Call Trace: [ 430.198287][T10690] [ 430.198292][T10690] dump_stack_lvl+0x100/0x190 [ 430.198315][T10690] should_fail_ex.cold+0x5/0xa [ 430.198333][T10690] should_failslab+0xc2/0x120 [ 430.198348][T10690] __kmalloc_noprof+0xfc/0x840 [ 430.198363][T10690] ? video_usercopy+0x1a3/0x1730 [ 430.198381][T10690] video_usercopy+0x1a3/0x1730 [ 430.198397][T10690] ? __pfx___video_do_ioctl+0x10/0x10 [ 430.198421][T10690] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 430.198440][T10690] ? __pfx_video_usercopy+0x10/0x10 [ 430.198467][T10690] v4l2_ioctl+0x1bd/0x250 [ 430.198485][T10690] ? __pfx_v4l2_ioctl+0x10/0x10 [ 430.198502][T10690] __x64_sys_ioctl+0x18e/0x210 [ 430.198515][T10690] do_syscall_64+0x123/0x790 [ 430.198532][T10690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.198545][T10690] RIP: 0033:0x7f642199e159 [ 430.198555][T10690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.198567][T10690] RSP: 002b:00007f6422842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.198580][T10690] RAX: ffffffffffffffda RBX: 00007f6421c25fa0 RCX: 00007f642199e159 [ 430.198588][T10690] RDX: 0000000000000000 RSI: 00000000c0f8565c RDI: 0000000000000004 [ 430.198595][T10690] RBP: 00007f6421a3503b R08: 0000000000000000 R09: 0000000000000000 [ 430.198602][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.198609][T10690] R13: 00007f6421c26038 R14: 00007f6421c25fa0 R15: 00007ffc2dc4aa78 [ 430.198624][T10690] [ 430.580322][ T30] audit: type=1400 audit(1789453380.900:1373): avc: denied { bind } for pid=10675 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 431.043058][ T190] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 431.470103][ T190] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice= 0.02 [ 431.658093][ T190] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.658122][ T190] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 431.659183][ T190] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.659207][ T190] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 431.711835][ T190] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.711867][ T190] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 431.711893][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.739122][ T190] usb 3-1: config 0 descriptor?? [ 431.794968][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1454'. [ 432.003740][ T190] usb 3-1: USB disconnect, device number 23 [ 433.019183][T10719] binder_alloc: 10717: binder_alloc_buf, no vma [ 434.147712][ T30] audit: type=1400 audit(1789453384.470:1374): avc: denied { write } for pid=10715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.386370][ T30] audit: type=1400 audit(1789453385.710:1375): avc: denied { write } for pid=10759 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.492078][ T30] audit: type=1400 audit(1789453385.820:1376): avc: denied { create } for pid=10763 comm="syz.5.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 435.556767][ T30] audit: type=1400 audit(1789453385.880:1377): avc: denied { listen } for pid=10763 comm="syz.5.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 435.823219][ T5599] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 435.925814][T10777] FAULT_INJECTION: forcing a failure. [ 435.925814][T10777] name failslab, interval 1, probability 0, space 0, times 0 [ 435.925839][T10777] CPU: 0 UID: 0 PID: 10777 Comm: syz.3.1477 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.925858][T10777] Tainted: [L]=SOFTLOCKUP [ 435.925863][T10777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 435.925877][T10777] Call Trace: [ 435.925882][T10777] [ 435.925887][T10777] dump_stack_lvl+0x100/0x190 [ 435.925911][T10777] should_fail_ex.cold+0x5/0xa [ 435.925929][T10777] should_failslab+0xc2/0x120 [ 435.925944][T10777] kmem_cache_alloc_noprof+0x92/0x6a0 [ 435.925956][T10777] ? __pfx_map_id_range_down+0x10/0x10 [ 435.925970][T10777] ? security_inode_alloc+0x3b/0x2c0 [ 435.925984][T10777] security_inode_alloc+0x3b/0x2c0 [ 435.925996][T10777] inode_init_always_gfp+0xc6f/0xfb0 [ 435.926013][T10777] alloc_inode+0x8e/0x250 [ 435.926025][T10777] new_inode+0x22/0x1c0 [ 435.926037][T10777] __debugfs_create_file+0xd8/0x4d0 [ 435.926056][T10777] debugfs_create_file_full+0x41/0x60 [ 435.926073][T10777] ? __pfx_blk_create_buf_file_callback+0x10/0x10 [ 435.926090][T10777] relay_open_buf.part.0+0x784/0xb70 [ 435.926107][T10777] relay_open+0x7b9/0xa00 [ 435.926121][T10777] blk_trace_setup_prepare+0x35c/0x6c0 [ 435.926140][T10777] blk_trace_setup+0x217/0x440 [ 435.926153][T10777] ? __pfx_blk_trace_setup+0x10/0x10 [ 435.926164][T10777] ? vsnprintf+0x4c5/0x1300 [ 435.926183][T10777] ? __pfx_vsnprintf+0x10/0x10 [ 435.926206][T10777] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 435.926220][T10777] ? do_vfs_ioctl+0x226/0x13e0 [ 435.926234][T10777] blk_trace_ioctl+0x245/0x320 [ 435.926246][T10777] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 435.926264][T10777] blkdev_ioctl+0x17c/0x6f0 [ 435.926280][T10777] ? __pfx_blkdev_ioctl+0x10/0x10 [ 435.926292][T10777] ? selinux_file_ioctl+0x13b/0x290 [ 435.926304][T10777] ? selinux_file_ioctl+0xb6/0x290 [ 435.926318][T10777] ? __pfx_blkdev_ioctl+0x10/0x10 [ 435.926332][T10777] __x64_sys_ioctl+0x18e/0x210 [ 435.926345][T10777] do_syscall_64+0x123/0x790 [ 435.926363][T10777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.926375][T10777] RIP: 0033:0x7f787fb9e159 [ 435.926387][T10777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.926397][T10777] RSP: 002b:00007f788099f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.926409][T10777] RAX: ffffffffffffffda RBX: 00007f787fe25fa0 RCX: 00007f787fb9e159 [ 435.926416][T10777] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000003 [ 435.926423][T10777] RBP: 00007f787fc3503b R08: 0000000000000000 R09: 0000000000000000 [ 435.926430][T10777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.926437][T10777] R13: 00007f787fe26038 R14: 00007f787fe25fa0 R15: 00007ffd50ca8568 [ 435.926454][T10777] [ 435.977857][ T5599] usb 6-1: Using ep0 maxpacket: 16 [ 436.136051][ T5599] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 436.268362][ T5599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.268380][ T5599] usb 6-1: Product: syz [ 436.268389][ T5599] usb 6-1: Manufacturer: syz [ 436.268398][ T5599] usb 6-1: SerialNumber: syz [ 436.312881][T10777] debugfs: out of free dentries, can not create file 'trace0' [ 436.635500][ T30] audit: type=1400 audit(1789453386.960:1378): avc: denied { write } for pid=10786 comm="syz.3.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 436.636993][T10792] fuse: fd is not a fuse device [ 436.638252][ T5599] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.638288][ T5599] usb 6-1: MIDIStreaming interface descriptor not found [ 437.877978][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 437.928755][T10802] fuse: fd is not a fuse device [ 438.017484][ T30] audit: type=1400 audit(1789453388.340:1379): avc: denied { write } for pid=10772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.132560][ T5599] usb 6-1: USB disconnect, device number 14 [ 439.195760][T10678] udevd[10678]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.288196][T10814] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 779 (only 8 groups) [ 439.329693][ T30] audit: type=1400 audit(1789453389.660:1380): avc: denied { shutdown } for pid=10815 comm="syz.0.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.356874][ T30] audit: type=1400 audit(1789453389.690:1381): avc: denied { write } for pid=10815 comm="syz.0.1488" path="socket:[32484]" dev="sockfs" ino=32484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.489642][ T30] audit: type=1400 audit(1789453389.810:1382): avc: denied { write } for pid=10820 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.747937][T10828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10828 comm=syz.3.1491 [ 439.816413][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.980846][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 441.060566][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 441.117354][T10849] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 441.269470][T10852] FAULT_INJECTION: forcing a failure. [ 441.269470][T10852] name failslab, interval 1, probability 0, space 0, times 0 [ 441.269498][T10852] CPU: 0 UID: 0 PID: 10852 Comm: syz.5.1498 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.269517][T10852] Tainted: [L]=SOFTLOCKUP [ 441.269522][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 441.269534][T10852] Call Trace: [ 441.269538][T10852] [ 441.269543][T10852] dump_stack_lvl+0x100/0x190 [ 441.269566][T10852] should_fail_ex.cold+0x5/0xa [ 441.269584][T10852] should_failslab+0xc2/0x120 [ 441.269600][T10852] kmem_cache_alloc_noprof+0x92/0x6a0 [ 441.269613][T10852] ? skb_clone+0x190/0x400 [ 441.269630][T10852] skb_clone+0x190/0x400 [ 441.269644][T10852] pfkey_process+0xc0/0x810 [ 441.269660][T10852] ? trace_contention_end+0x126/0x160 [ 441.269675][T10852] ? __pfx_pfkey_process+0x10/0x10 [ 441.269689][T10852] ? pfkey_sendmsg+0x41a/0x840 [ 441.269713][T10852] ? __pfx___alloc_skb+0x10/0x10 [ 441.269731][T10852] pfkey_sendmsg+0x428/0x840 [ 441.269751][T10852] ____sys_sendmsg+0xa4d/0xbe0 [ 441.269766][T10852] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 441.269783][T10852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.269808][T10852] ___sys_sendmsg+0x190/0x1e0 [ 441.269828][T10852] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.269845][T10852] ? futex_wait+0x11e/0x370 [ 441.269862][T10852] ? find_held_lock+0x2b/0x80 [ 441.269887][T10852] __sys_sendmsg+0x160/0x210 [ 441.269901][T10852] ? __pfx___sys_sendmsg+0x10/0x10 [ 441.269924][T10852] do_syscall_64+0x123/0x790 [ 441.269941][T10852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.269953][T10852] RIP: 0033:0x7f3f8f79e159 [ 441.269963][T10852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.269974][T10852] RSP: 002b:00007f3f90709028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.269985][T10852] RAX: ffffffffffffffda RBX: 00007f3f8fa25fa0 RCX: 00007f3f8f79e159 [ 441.269993][T10852] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 441.269999][T10852] RBP: 00007f3f8f83503b R08: 0000000000000000 R09: 0000000000000000 [ 441.270006][T10852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.270013][T10852] R13: 00007f3f8fa26038 R14: 00007f3f8fa25fa0 R15: 00007ffd2e90c708 [ 441.270028][T10852] [ 441.600993][T10854] FAULT_INJECTION: forcing a failure. [ 441.600993][T10854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 441.601022][T10854] CPU: 0 UID: 0 PID: 10854 Comm: syz.2.1499 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.601040][T10854] Tainted: [L]=SOFTLOCKUP [ 441.601045][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 441.601052][T10854] Call Trace: [ 441.601058][T10854] [ 441.601063][T10854] dump_stack_lvl+0x100/0x190 [ 441.601087][T10854] should_fail_ex.cold+0x5/0xa [ 441.601103][T10854] ? prepare_alloc_pages+0x16d/0x5b0 [ 441.601119][T10854] should_fail_alloc_page+0xeb/0x140 [ 441.601135][T10854] prepare_alloc_pages+0x1f0/0x5b0 [ 441.601152][T10854] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 441.601168][T10854] ? stack_trace_save+0x8e/0xc0 [ 441.601180][T10854] ? __pfx_stack_trace_save+0x10/0x10 [ 441.601190][T10854] ? stack_depot_save_flags+0x27/0x9f0 [ 441.601208][T10854] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 441.601223][T10854] ? __lock_acquire+0x5c0/0x1f40 [ 441.601236][T10854] ? look_up_lock_class+0x55/0x120 [ 441.601253][T10854] ? register_lock_class+0x3f/0x7b0 [ 441.601265][T10854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.601283][T10854] ? __lock_acquire+0x5c0/0x1f40 [ 441.601299][T10854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 441.601314][T10854] ? policy_nodemask+0xed/0x4f0 [ 441.601342][T10854] alloc_pages_mpol+0x201/0x550 [ 441.601359][T10854] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 441.601375][T10854] ? find_held_lock+0x2b/0x80 [ 441.601392][T10854] ? __anon_vma_prepare+0x2d7/0x5e0 [ 441.601408][T10854] ? __anon_vma_prepare+0x2d7/0x5e0 [ 441.601426][T10854] folio_alloc_mpol_noprof+0x36/0x260 [ 441.601444][T10854] vma_alloc_folio_noprof+0xed/0x1d0 [ 441.601460][T10854] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 441.601476][T10854] ? __anon_vma_prepare+0x2de/0x5e0 [ 441.601496][T10854] do_wp_page+0xe11/0x45c0 [ 441.601514][T10854] ? lock_acquire+0x1d1/0x380 [ 441.601526][T10854] ? __pfx_do_wp_page+0x10/0x10 [ 441.601541][T10854] ? do_raw_spin_lock+0x128/0x260 [ 441.601556][T10854] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 441.601575][T10854] __handle_mm_fault+0x1cd2/0x2f60 [ 441.601594][T10854] ? __pfx___handle_mm_fault+0x10/0x10 [ 441.601609][T10854] ? __pfx_mt_find+0x10/0x10 [ 441.601634][T10854] ? find_vma+0xbf/0x140 [ 441.601645][T10854] ? __pfx_find_vma+0x10/0x10 [ 441.601661][T10854] handle_mm_fault+0x363/0xa20 [ 441.601680][T10854] do_user_addr_fault+0x745/0x12f0 [ 441.601699][T10854] exc_page_fault+0x6f/0xd0 [ 441.601714][T10854] asm_exc_page_fault+0x26/0x30 [ 441.601726][T10854] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 441.601739][T10854] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f b1 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 441.601751][T10854] RSP: 0018:ffffc90005547cc0 EFLAGS: 00050202 [ 441.601761][T10854] RAX: 0000000000000001 RBX: 0000000000000078 RCX: 0000000000000078 [ 441.601768][T10854] RDX: 0000000000000001 RSI: ffffc90005547db8 RDI: 0000000000000000 [ 441.601775][T10854] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000aa8fc5 [ 441.601782][T10854] R10: ffffc90005547e2f R11: 0000000000000000 R12: ffffc90005547db8 [ 441.601789][T10854] R13: 0000000000000078 R14: 00007ffffffff000 R15: 0000000000000000 [ 441.601804][T10854] _copy_to_user+0xa4/0xd0 [ 441.601818][T10854] io_uring_setup.cold+0x14b9/0x1cde [ 441.601835][T10854] ? __pfx_io_uring_setup+0x10/0x10 [ 441.601850][T10854] ? find_held_lock+0x2b/0x80 [ 441.601878][T10854] ? xfd_validate_state+0x129/0x190 [ 441.601896][T10854] __x64_sys_io_uring_setup+0xc2/0x170 [ 441.601911][T10854] do_syscall_64+0x123/0x790 [ 441.601927][T10854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.601938][T10854] RIP: 0033:0x7f8bc399e159 [ 441.601948][T10854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.601958][T10854] RSP: 002b:00007f8bc1bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 441.601968][T10854] RAX: ffffffffffffffda RBX: 00007f8bc3c25fa0 RCX: 00007f8bc399e159 [ 441.601976][T10854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 441.601982][T10854] RBP: 00007f8bc3a3503b R08: 0000000000000000 R09: 0000000000000000 [ 441.601989][T10854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.601996][T10854] R13: 00007f8bc3c26038 R14: 00007f8bc3c25fa0 R15: 00007ffeb7471638 [ 441.602012][T10854] [ 442.375228][T10857] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 442.377519][T10857] virtio_blk virtio3: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 442.914269][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1506'. [ 442.914616][T10874] FAULT_INJECTION: forcing a failure. [ 442.914616][T10874] name failslab, interval 1, probability 0, space 0, times 0 [ 442.914636][T10874] CPU: 0 UID: 0 PID: 10874 Comm: syz.5.1506 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.914654][T10874] Tainted: [L]=SOFTLOCKUP [ 442.914658][T10874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 442.914666][T10874] Call Trace: [ 442.914671][T10874] [ 442.914676][T10874] dump_stack_lvl+0x100/0x190 [ 442.914699][T10874] should_fail_ex.cold+0x5/0xa [ 442.914718][T10874] should_failslab+0xc2/0x120 [ 442.914734][T10874] __kmalloc_noprof+0xfc/0x840 [ 442.914747][T10874] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 442.914764][T10874] apply_wqattrs_prepare+0xfe/0xbb0 [ 442.914777][T10874] ? __alloc_workqueue+0x8ca/0x1950 [ 442.914796][T10874] apply_workqueue_attrs_locked+0x64/0xe0 [ 442.914809][T10874] __alloc_workqueue+0x9a7/0x1950 [ 442.914829][T10874] alloc_workqueue_noprof+0xc7/0x130 [ 442.914843][T10874] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 442.914859][T10874] ? bond_init+0xc0/0xb80 [ 442.914875][T10874] ? find_held_lock+0x2b/0x80 [ 442.914910][T10874] ? bond_init+0x187/0xb80 [ 442.914927][T10874] ? bond_init+0x187/0xb80 [ 442.914946][T10874] bond_init+0x1b8/0xb80 [ 442.914963][T10874] ? kasan_save_track+0x14/0x30 [ 442.914977][T10874] ? __kasan_kmalloc+0xaa/0xb0 [ 442.914991][T10874] ? __pfx_bond_init+0x10/0x10 [ 442.915006][T10874] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 442.915024][T10874] ? register_netdevice+0x50c/0x25a0 [ 442.915042][T10874] ? __pfx_bond_init+0x10/0x10 [ 442.915057][T10874] register_netdevice+0x685/0x25a0 [ 442.915074][T10874] ? __pfx_validate_linkmsg+0x10/0x10 [ 442.915088][T10874] ? __pfx_register_netdevice+0x10/0x10 [ 442.915107][T10874] bond_newlink+0x6a/0x100 [ 442.915121][T10874] ? __pfx_bond_newlink+0x10/0x10 [ 442.915133][T10874] rtnl_newlink+0x1697/0x2620 [ 442.915153][T10874] ? __pfx_rtnl_newlink+0x10/0x10 [ 442.915166][T10874] ? avc_has_perm_noaudit+0x56/0x3b0 [ 442.915183][T10874] ? find_held_lock+0x2b/0x80 [ 442.915198][T10874] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 442.915213][T10874] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 442.915244][T10874] ? lock_acquire+0x1d1/0x380 [ 442.915256][T10874] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 442.915271][T10874] ? find_held_lock+0x2b/0x80 [ 442.915286][T10874] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 442.915300][T10874] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 442.915325][T10874] ? __pfx_rtnl_newlink+0x10/0x10 [ 442.915342][T10874] rtnetlink_rcv_msg+0x95e/0xe90 [ 442.915360][T10874] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 442.915382][T10874] ? ref_tracker_free+0x37e/0x6c0 [ 442.915399][T10874] netlink_rcv_skb+0x159/0x420 [ 442.915412][T10874] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 442.915428][T10874] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.915447][T10874] ? netlink_deliver_tap+0x1ae/0xcc0 [ 442.915462][T10874] netlink_unicast+0x585/0x850 [ 442.915476][T10874] ? __pfx_netlink_unicast+0x10/0x10 [ 442.915493][T10874] netlink_sendmsg+0x8b0/0xda0 [ 442.915508][T10874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.915522][T10874] ? selinux_socket_sendmsg+0x198/0x2f0 [ 442.915537][T10874] ____sys_sendmsg+0xa4d/0xbe0 [ 442.915553][T10874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.915567][T10874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.915590][T10874] ___sys_sendmsg+0x190/0x1e0 [ 442.915608][T10874] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.915625][T10874] ? futex_wait+0x11e/0x370 [ 442.915642][T10874] ? find_held_lock+0x2b/0x80 [ 442.915668][T10874] __sys_sendmsg+0x160/0x210 [ 442.915685][T10874] ? __pfx___sys_sendmsg+0x10/0x10 [ 442.915707][T10874] do_syscall_64+0x123/0x790 [ 442.915725][T10874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.915738][T10874] RIP: 0033:0x7f3f8f79e159 [ 442.915749][T10874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.915760][T10874] RSP: 002b:00007f3f90709028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.915773][T10874] RAX: ffffffffffffffda RBX: 00007f3f8fa25fa0 RCX: 00007f3f8f79e159 [ 442.915781][T10874] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 442.915789][T10874] RBP: 00007f3f8f83503b R08: 0000000000000000 R09: 0000000000000000 [ 442.915797][T10874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.915804][T10874] R13: 00007f3f8fa26038 R14: 00007f3f8fa25fa0 R15: 00007ffd2e90c708 [ 442.915821][T10874] [ 443.526650][T10878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.590960][T10878] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 443.960927][T10891] tipc: Started in network mode [ 443.960946][T10891] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 445.941473][T10891] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 445.941942][T10891] tipc: Enabled bearer , priority 10 [ 446.008152][T10898] FAULT_INJECTION: forcing a failure. [ 446.008152][T10898] name failslab, interval 1, probability 0, space 0, times 0 [ 446.008179][T10898] CPU: 0 UID: 0 PID: 10898 Comm: syz.1.1516 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.008198][T10898] Tainted: [L]=SOFTLOCKUP [ 446.008203][T10898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 446.008211][T10898] Call Trace: [ 446.008215][T10898] [ 446.008220][T10898] dump_stack_lvl+0x100/0x190 [ 446.008245][T10898] should_fail_ex.cold+0x5/0xa [ 446.008263][T10898] should_failslab+0xc2/0x120 [ 446.008279][T10898] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 446.008294][T10898] ? add_policy+0x1fd/0x3c0 [ 446.008313][T10898] krealloc_node_align_noprof+0x1f9/0x3e0 [ 446.008328][T10898] add_policy+0x1fd/0x3c0 [ 446.008345][T10898] netlink_policy_dump_add_policy+0x243/0x4d0 [ 446.008363][T10898] ? __pfx_netlink_policy_dump_add_policy+0x10/0x10 [ 446.008381][T10898] ? ctrl_dumppolicy_start+0x725/0xb70 [ 446.008399][T10898] ctrl_dumppolicy_start+0x89d/0xb70 [ 446.008415][T10898] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 446.008431][T10898] ? genl_start+0x6b6/0x970 [ 446.008447][T10898] ? __pfx___mutex_lock+0x10/0x10 [ 446.008466][T10898] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 446.008481][T10898] ? __pfx_nl80211_get_wiphy+0x10/0x10 [ 446.008492][T10898] ? __pfx_nl80211_post_doit+0x10/0x10 [ 446.008508][T10898] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 446.008519][T10898] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 446.008533][T10898] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 446.008551][T10898] ? genl_start+0x1e8/0x970 [ 446.008566][T10898] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 446.008581][T10898] genl_start+0x601/0x970 [ 446.008596][T10898] __netlink_dump_start+0x60e/0x990 [ 446.008611][T10898] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 446.008627][T10898] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 446.008643][T10898] ? __pfx___mutex_lock+0x10/0x10 [ 446.008661][T10898] ? __pfx_genl_get_cmd+0x10/0x10 [ 446.008673][T10898] ? __pfx_genl_start+0x10/0x10 [ 446.008685][T10898] ? __pfx_genl_dumpit+0x10/0x10 [ 446.008698][T10898] ? __pfx_genl_done+0x10/0x10 [ 446.008713][T10898] ? __dev_queue_xmit+0xa33/0x4970 [ 446.008725][T10898] ? __radix_tree_lookup+0x217/0x2b0 [ 446.008741][T10898] genl_rcv_msg+0x471/0x800 [ 446.008758][T10898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.008771][T10898] ? __lock_acquire+0x5c0/0x1f40 [ 446.008783][T10898] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 446.008797][T10898] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 446.008810][T10898] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 446.008829][T10898] netlink_rcv_skb+0x159/0x420 [ 446.008841][T10898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.008856][T10898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.008875][T10898] ? netlink_deliver_tap+0x1ae/0xcc0 [ 446.008890][T10898] genl_rcv+0x28/0x40 [ 446.008901][T10898] netlink_unicast+0x585/0x850 [ 446.008916][T10898] ? __pfx_netlink_unicast+0x10/0x10 [ 446.008934][T10898] netlink_sendmsg+0x8b0/0xda0 [ 446.008949][T10898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.008963][T10898] ? selinux_socket_sendmsg+0x198/0x2f0 [ 446.008979][T10898] ____sys_sendmsg+0xa4d/0xbe0 [ 446.008994][T10898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.009008][T10898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.009033][T10898] ___sys_sendmsg+0x190/0x1e0 [ 446.009062][T10898] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.009081][T10898] ? futex_wait+0x11e/0x370 [ 446.009099][T10898] ? find_held_lock+0x2b/0x80 [ 446.009125][T10898] __sys_sendmsg+0x160/0x210 [ 446.009139][T10898] ? __pfx___sys_sendmsg+0x10/0x10 [ 446.009162][T10898] do_syscall_64+0x123/0x790 [ 446.009179][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.009192][T10898] RIP: 0033:0x7f642199e159 [ 446.009202][T10898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.009214][T10898] RSP: 002b:00007f6422842028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.009227][T10898] RAX: ffffffffffffffda RBX: 00007f6421c25fa0 RCX: 00007f642199e159 [ 446.009236][T10898] RDX: 0000000000000800 RSI: 00002000000029c0 RDI: 0000000000000005 [ 446.009243][T10898] RBP: 00007f6421a3503b R08: 0000000000000000 R09: 0000000000000000 [ 446.009251][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.009259][T10898] R13: 00007f6421c26038 R14: 00007f6421c25fa0 R15: 00007ffc2dc4aa78 [ 446.009276][T10898] [ 446.390084][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 446.832112][T10908] picdev_read: 504 callbacks suppressed [ 446.832130][T10908] kvm: pic: non byte read [ 446.832135][T10908] kvm: pic: non byte read [ 446.860771][T10908] kvm: pic: non byte read [ 446.860786][T10908] kvm: pic: non byte read [ 446.860790][T10908] kvm: pic: non byte read [ 446.860795][T10908] kvm: pic: non byte read [ 446.860799][T10908] kvm: pic: non byte read [ 446.860804][T10908] kvm: pic: non byte read [ 446.860808][T10908] kvm: pic: non byte read [ 446.860812][T10908] kvm: pic: non byte read [ 447.097191][ T5599] tipc: Node number set to 1 [ 447.200793][ T30] audit: type=1800 audit(1789453397.520:1383): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1523" name="(" dev="sda1" ino=2054 res=0 errno=0 [ 447.434304][T10927] FAULT_INJECTION: forcing a failure. [ 447.434304][T10927] name failslab, interval 1, probability 0, space 0, times 0 [ 447.434331][T10927] CPU: 0 UID: 0 PID: 10927 Comm: syz.3.1528 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.434350][T10927] Tainted: [L]=SOFTLOCKUP [ 447.434354][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 447.434362][T10927] Call Trace: [ 447.434367][T10927] [ 447.434372][T10927] dump_stack_lvl+0x100/0x190 [ 447.434394][T10927] should_fail_ex.cold+0x5/0xa [ 447.434413][T10927] should_failslab+0xc2/0x120 [ 447.434428][T10927] __kmalloc_cache_noprof+0x91/0x6d0 [ 447.434446][T10927] ? tomoyo_find_next_domain+0x145/0x2010 [ 447.434468][T10927] tomoyo_find_next_domain+0x145/0x2010 [ 447.434487][T10927] ? __pfx___kernel_read+0x10/0x10 [ 447.434522][T10927] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 447.434546][T10927] tomoyo_bprm_check_security+0x12d/0x1d0 [ 447.434562][T10927] ? tomoyo_bprm_check_security+0x11f/0x1d0 [ 447.434581][T10927] security_bprm_check+0x87/0x1e0 [ 447.434600][T10927] bprm_execve+0x80b/0x1940 [ 447.434616][T10927] ? __pfx_bprm_execve+0x10/0x10 [ 447.434627][T10927] ? copy_string_kernel+0x339/0x3f0 [ 447.434643][T10927] do_execveat_common.isra.0+0x4a5/0x580 [ 447.434659][T10927] __x64_sys_execve+0x93/0xd0 [ 447.434672][T10927] do_syscall_64+0x123/0x790 [ 447.434690][T10927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.434702][T10927] RIP: 0033:0x7f787fb9e159 [ 447.434713][T10927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.434724][T10927] RSP: 002b:00007f788099f028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 447.434737][T10927] RAX: ffffffffffffffda RBX: 00007f787fe25fa0 RCX: 00007f787fb9e159 [ 447.434744][T10927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 447.434751][T10927] RBP: 00007f787fc3503b R08: 0000000000000000 R09: 0000000000000000 [ 447.434758][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.434765][T10927] R13: 00007f787fe26038 R14: 00007f787fe25fa0 R15: 00007ffd50ca8568 [ 447.434782][T10927] [ 447.476470][ T5599] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 447.694638][ T5599] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 447.695795][ T5599] usb 3-1: config 0 has no interfaces? [ 447.695817][ T5599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.698814][ T5599] usb 3-1: config 0 descriptor?? [ 448.084490][ T5599] usb 3-1: USB disconnect, device number 24 [ 448.515128][ T30] audit: type=1400 audit(1789453398.840:1384): avc: denied { listen } for pid=10942 comm="syz.0.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 448.517194][ T30] audit: type=1400 audit(1789453398.840:1385): avc: denied { accept } for pid=10942 comm="syz.0.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 448.728334][ T30] audit: type=1400 audit(1789453399.050:1386): avc: denied { write } for pid=10947 comm="syz.3.1536" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 449.447818][T10958] md0: Warning: Device ram0 is misaligned [ 449.447895][T10958] md/raid0:md0: too few disks (1 of 124) - aborting! [ 449.447928][T10958] md: pers->run() failed ... [ 449.484481][ T30] audit: type=1400 audit(1789453399.810:1387): avc: denied { write } for pid=10949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.781394][ T30] audit: type=1400 audit(1789453400.100:1388): avc: denied { write } for pid=10981 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.814629][T10979] TC_ACT_REPEAT abuse ? [ 450.435573][ T30] audit: type=1400 audit(1789453400.760:1389): avc: denied { name_bind } for pid=11001 comm="syz.1.1549" src=609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 451.147116][ T30] audit: type=1400 audit(1789453401.470:1390): avc: denied { write } for pid=10988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.224495][ T30] audit: type=1400 audit(1789453401.550:1391): avc: denied { accept } for pid=11025 comm="syz.3.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 451.228332][T11028] FAULT_INJECTION: forcing a failure. [ 451.228332][T11028] name fail_futex, interval 1, probability 0, space 0, times 1 [ 451.228357][T11028] CPU: 0 UID: 0 PID: 11028 Comm: syz.3.1554 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.228375][T11028] Tainted: [L]=SOFTLOCKUP [ 451.228379][T11028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 451.228388][T11028] Call Trace: [ 451.228392][T11028] [ 451.228397][T11028] dump_stack_lvl+0x100/0x190 [ 451.228420][T11028] should_fail_ex.cold+0x5/0xa [ 451.228439][T11028] get_futex_key+0x1d0/0x14f0 [ 451.228458][T11028] ? __pfx_get_futex_key+0x10/0x10 [ 451.228477][T11028] futex_wake+0xf4/0x5e0 [ 451.228495][T11028] ? trace_kmem_cache_alloc+0xdd/0x100 [ 451.228510][T11028] ? __pfx_futex_wake+0x10/0x10 [ 451.228530][T11028] ? lockdep_init_map_type+0x5c/0x250 [ 451.228546][T11028] do_futex+0x2b2/0x440 [ 451.228561][T11028] ? __pfx_do_futex+0x10/0x10 [ 451.228580][T11028] __x64_sys_futex+0x34f/0x4d0 [ 451.228604][T11028] ? fd_install+0x223/0x580 [ 451.228620][T11028] ? __pfx___x64_sys_futex+0x10/0x10 [ 451.228642][T11028] do_syscall_64+0x123/0x790 [ 451.228661][T11028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.228674][T11028] RIP: 0033:0x7f787fb9e159 [ 451.228684][T11028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.228696][T11028] RSP: 002b:00007f788099f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 451.228708][T11028] RAX: ffffffffffffffda RBX: 00007f787fe25fa8 RCX: 00007f787fb9e159 [ 451.228716][T11028] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f787fe25fac [ 451.228723][T11028] RBP: 00007f787fe25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 451.228730][T11028] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 451.228737][T11028] R13: 00007f787fe26038 R14: 00007ffd50ca8480 R15: 00007ffd50ca8568 [ 451.228752][T11028] [ 452.887902][ T30] audit: type=1400 audit(1789453403.210:1392): avc: denied { write } for pid=11037 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.290225][T11050] isp1760 pcspkr: error -ENXIO: IRQ index 0 not found [ 453.978511][T11052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 454.222849][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1566'. [ 454.805497][T11067] FAULT_INJECTION: forcing a failure. [ 454.805497][T11067] name fail_futex, interval 1, probability 0, space 0, times 0 [ 454.805528][T11067] CPU: 0 UID: 0 PID: 11067 Comm: syz.5.1557 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.805547][T11067] Tainted: [L]=SOFTLOCKUP [ 454.805552][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 454.805559][T11067] Call Trace: [ 454.805565][T11067] [ 454.805570][T11067] dump_stack_lvl+0x100/0x190 [ 454.805593][T11067] should_fail_ex.cold+0x5/0xa [ 454.805612][T11067] get_futex_key+0x1d0/0x14f0 [ 454.805629][T11067] ? __pfx_get_futex_key+0x10/0x10 [ 454.805644][T11067] ? blk_finish_plug+0x83/0xa0 [ 454.805662][T11067] futex_wake+0xf4/0x5e0 [ 454.805678][T11067] ? __up_read+0x333/0x980 [ 454.805692][T11067] ? __pfx___up_read+0x10/0x10 [ 454.805706][T11067] ? __pfx_futex_wake+0x10/0x10 [ 454.805725][T11067] ? madvise_unlock+0xa9/0x220 [ 454.805743][T11067] do_futex+0x2b2/0x440 [ 454.805759][T11067] ? __pfx_do_futex+0x10/0x10 [ 454.805777][T11067] __x64_sys_futex+0x34f/0x4d0 [ 454.805799][T11067] ? __pfx___x64_sys_futex+0x10/0x10 [ 454.805821][T11067] do_syscall_64+0x123/0x790 [ 454.805840][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.805854][T11067] RIP: 0033:0x7f3f8f79e159 [ 454.805864][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.805874][T11067] RSP: 002b:00007f3f907090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 454.805886][T11067] RAX: ffffffffffffffda RBX: 00007f3f8fa25fa8 RCX: 00007f3f8f79e159 [ 454.805894][T11067] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3f8fa25fac [ 454.805901][T11067] RBP: 00007f3f8fa25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 454.805908][T11067] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 454.805915][T11067] R13: 00007f3f8fa26038 R14: 00007ffd2e90c620 R15: 00007ffd2e90c708 [ 454.805930][T11067] [ 457.506161][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1571'. [ 458.756608][T11107] md: array md0 already has disks! [ 458.786060][T11107] md: could not open device unknown-block(1,0). [ 458.786108][T11107] md: error, md_import_device() returned -16 [ 458.928694][T11107] md0: Warning: Device ram0 is misaligned [ 458.928733][T11107] md/raid0:md0: too few disks (1 of 124) - aborting! [ 458.928759][T11107] md: pers->run() failed ... [ 459.483341][ T30] audit: type=1400 audit(1789453409.810:1393): avc: denied { write } for pid=11102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.695071][ T30] audit: type=1400 audit(1789453410.020:1394): avc: denied { write } for pid=11135 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.794081][ T5264] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 461.324355][T11161] jffs2: notice: (11161) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 461.394801][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1590'. [ 462.721108][ T30] audit: type=1400 audit(1789453413.040:1395): avc: denied { write } for pid=11143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.220274][ T30] audit: type=1400 audit(1789453413.540:1396): avc: denied { write } for pid=11178 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.763162][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 464.103614][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 464.572638][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 464.572662][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.572677][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 464.572702][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.694945][T11189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 464.878853][T11197] binder: 11196:11197 ioctl c0306201 2000000003c0 returned -14 [ 467.178024][ T30] audit: type=1400 audit(1789453417.500:1397): avc: denied { write } for pid=11217 comm="syz.1.1608" name="cluster" dev="configfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 467.247100][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 468.395465][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 468.396715][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input39 [ 468.720085][ T9] usb 4-1: USB disconnect, device number 26 [ 468.720186][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 469.234150][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 470.061073][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 470.062844][ T9] usb 4-1: config 0 has no interfaces? [ 470.062865][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.095531][ T9] usb 4-1: config 0 descriptor?? [ 470.985132][ T10] usb 4-1: USB disconnect, device number 27 [ 472.678918][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 472.852903][ T9] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 472.869086][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 472.869117][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.113620][ T9] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 474.252849][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 474.272515][T11279] syz_tun: entered allmulticast mode [ 474.302024][T11276] syz_tun: left allmulticast mode [ 474.534264][ T30] audit: type=1400 audit(1789453424.860:1398): avc: denied { write } for pid=11253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.605052][ T9] wwan wwan0: port wwan0qmi0 attached [ 475.850367][ T9] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 52:65:b2:bc:19:36 [ 475.875434][ T9] usb 2-1: USB disconnect, device number 24 [ 475.880424][ T30] audit: type=1400 audit(1789453426.200:1399): avc: denied { write } for pid=11289 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.916317][ T9] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 476.187441][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 476.319350][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 476.319367][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 478.393142][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 478.943622][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 478.944372][ T10] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 478.944400][ T10] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 478.944414][ T10] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 478.944444][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 478.950540][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.950558][ T10] usb 3-1: Product: syz [ 478.950566][ T10] usb 3-1: Manufacturer: syz [ 478.950575][ T10] usb 3-1: SerialNumber: syz [ 479.037256][ T30] audit: type=1400 audit(1789453429.370:1400): avc: denied { write } for pid=11308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.040416][T11326] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 479.040491][T11326] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 479.392498][ T30] audit: type=1400 audit(1789453429.700:1401): avc: denied { write } for pid=11343 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.458607][ T10] rtl8150 3-1:1.0: couldn't find required endpoints [ 479.458727][ T10] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 479.489744][ T10] usb 3-1: USB disconnect, device number 25 [ 480.053158][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 480.205070][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 480.205856][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.205885][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.207875][ T10] usb 6-1: config 0 descriptor?? [ 480.435633][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 480.435695][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 480.437250][ T10] usb 6-1: USB disconnect, device number 15 [ 480.478546][ T30] audit: type=1400 audit(1789453430.810:1402): avc: denied { write } for pid=11349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.730586][ T30] audit: type=1400 audit(1789453431.050:1403): avc: denied { write } for pid=11374 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.953030][ T5707] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 481.828424][ T5707] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 481.886532][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.886562][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.922281][ T5707] usb 6-1: config 0 descriptor?? [ 482.898919][ T5707] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 482.917242][ T5707] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input40 [ 482.978717][ T5707] usb 6-1: USB disconnect, device number 16 [ 482.978843][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 484.177353][T11394] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 485.082432][T11394] bond1: (slave bridge1): making interface the new active one [ 487.040569][ T30] audit: type=1400 audit(1789453437.360:1404): avc: denied { write } for pid=11409 comm="syz.2.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 491.423322][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 495.581332][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1674'. [ 495.763046][ T5707] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 495.914820][ T5707] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 495.989089][ T5707] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 495.990492][ T5707] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 496.021410][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.021427][ T5707] usb 2-1: Product: syz [ 496.021437][ T5707] usb 2-1: Manufacturer: syz [ 496.021445][ T5707] usb 2-1: SerialNumber: syz [ 496.079066][ T5707] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 496.096921][ T5707] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 496.937300][ T5707] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 499.501171][T11478] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 499.568232][ T5599] usb 2-1: USB disconnect, device number 25 [ 500.346363][ T5599] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 500.374392][ T5599] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 500.374864][ T5599] ti_usb_3410_5052 2-1:2.0: device disconnected [ 501.257577][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.607874][T11519] kAFS: No cell specified [ 502.353233][ T30] audit: type=1400 audit(1789453452.680:1405): avc: denied { write } for pid=11513 comm="syz.5.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 503.406959][T11530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1692'. [ 503.539774][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 504.075406][T11540] device-mapper: ioctl: Invalid ioctl structure: name cdev, dev f801 [ 510.041020][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1706'. [ 514.024048][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 514.123550][T11610] lo speed is unknown, defaulting to 1000 [ 514.217628][ T30] audit: type=1400 audit(1789453464.540:1406): avc: denied { write } for pid=11620 comm="syz.5.1716" path="socket:[35465]" dev="sockfs" ino=35465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 517.987338][ T30] audit: type=1400 audit(1789453468.310:1407): avc: denied { read } for pid=11636 comm="syz.2.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 519.295871][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1723'. [ 522.374694][ T1100] Bluetooth: Error in BCSP hdr checksum [ 522.428331][ T59] Bluetooth: Error in BCSP hdr checksum [ 523.234711][T11682] ubi0: attaching mtd0 [ 523.235727][T11682] ubi0: scanning is finished [ 523.235752][T11682] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 523.355967][T11682] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 524.391112][T11689] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1733'. [ 524.407750][ T52] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 528.621160][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'. [ 530.197801][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 534.779688][T11752] lo speed is unknown, defaulting to 1000 [ 535.749328][T11770] LUN: removable file: (no medium) [ 535.770039][T11769] LUN: removable file: (no medium) [ 535.770977][ T30] audit: type=1400 audit(1789453486.070:1408): avc: denied { write } for pid=11764 comm="syz.3.1750" name="functions" dev="configfs" ino=17966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 535.771013][ T30] audit: type=1400 audit(1789453486.090:1409): avc: denied { write } for pid=11764 comm="syz.3.1750" name="mass_storage.0" dev="configfs" ino=36050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 537.150467][ T30] audit: type=1400 audit(1789453487.470:1410): avc: denied { write } for pid=11738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.183147][T11785] hub 8-0:1.0: USB hub found [ 537.184264][T11785] hub 8-0:1.0: 1 port detected [ 539.344840][ T30] audit: type=1400 audit(1789453489.670:1411): avc: denied { write } for pid=11794 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.501582][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1757'. [ 544.283143][T11827] loop8: detected capacity change from 0 to 16384 [ 544.422917][ T30] audit: type=1400 audit(1789453494.740:1412): avc: denied { write } for pid=11806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.523276][ T5599] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 544.749877][ T5599] usb 2-1: Using ep0 maxpacket: 32 [ 544.759893][ T5599] usb 2-1: unable to get BOS descriptor or descriptor too short [ 544.759922][ T5599] usb 2-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=f5.00 [ 544.787402][ T5599] usb 2-1: config 165 has an invalid interface number: 188 but max is 0 [ 544.787421][ T5599] usb 2-1: config 165 has no interface number 0 [ 544.787437][ T5599] usb 2-1: config 165 interface 188 has no altsetting 0 [ 545.578418][ T5599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.578435][ T5599] usb 2-1: Product: syz [ 545.578444][ T5599] usb 2-1: Manufacturer: syz [ 545.578452][ T5599] usb 2-1: SerialNumber: syz [ 545.785609][ T30] audit: type=1400 audit(1789453496.110:1413): avc: denied { write } for pid=11834 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.975879][ T30] audit: type=1400 audit(1789453496.300:1414): avc: denied { watch watch_reads } for pid=11824 comm="syz.1.1752" path="/344" dev="tmpfs" ino=1901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 548.354652][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 548.428023][T11845] loop8: detected capacity change from 16384 to 16383 [ 549.574568][T11845] Dev loop8: unable to read RDB block 8 [ 549.574778][T11845] loop8: unable to read partition table [ 549.574919][T11845] loop_reread_partitions: partition scan of loop8 ((õÉê—) failed (rc=-5) [ 549.700970][ T5599] mxuport 2-1:165.188: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 549.701505][ T5599] mxuport 2-1:165.188: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 549.701537][ T5599] mxuport 2-1:165.188: probe with driver mxuport failed with error -71 [ 549.754592][ T5599] usb 2-1: USB disconnect, device number 26 [ 551.015665][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'. [ 554.079423][T11889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1776'. [ 555.055705][ T30] audit: type=1400 audit(1789453505.380:1415): avc: denied { write } for pid=11894 comm="syz.2.1779" name="subsystems" dev="configfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 555.120186][T11895] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 555.142400][ T30] audit: type=1400 audit(1789453505.460:1416): avc: denied { write } for pid=11894 comm="syz.2.1779" name="subsystems" dev="configfs" ino=23819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 555.142433][ T30] audit: type=1400 audit(1789453505.460:1417): avc: denied { write } for pid=11894 comm="syz.2.1779" name="subsystems" dev="configfs" ino=23819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 556.557722][ T30] audit: type=1400 audit(1789453506.880:1418): avc: denied { write } for pid=11878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.713670][ T30] audit: type=1400 audit(1789453508.040:1419): avc: denied { write } for pid=11916 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.079641][ T30] audit: type=1800 audit(1789453510.400:1420): pid=11947 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1789" name=08 dev="sda1" ino=2053 res=0 errno=0 [ 562.483559][ T30] audit: type=1400 audit(1789453512.800:1421): avc: denied { write } for pid=11929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.700618][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.830567][ T30] audit: type=1400 audit(1789453513.150:1422): avc: denied { write } for pid=11962 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.836714][ T30] audit: type=1800 audit(1789453514.140:1423): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1796" name="file0" dev="overlay" ino=1875 res=0 errno=0 [ 565.153220][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'. [ 565.455099][T11978] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5612] was attempted by ""[11978] [ 567.933271][T12000] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1795'. [ 569.047405][ T5599] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 569.811578][T12012] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 569.883616][ T5599] usb 3-1: Using ep0 maxpacket: 32 [ 569.955596][ T5599] usb 3-1: device descriptor read/all, error -71 [ 572.229801][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 573.618040][ T30] audit: type=1400 audit(1789453523.940:1424): avc: denied { mounton } for pid=12022 comm="syz.5.1809" path="/233/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 577.778248][ T30] audit: type=1400 audit(1789453528.100:1425): avc: denied { shutdown } for pid=12054 comm="syz.5.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 577.813440][T12055] FAULT_INJECTION: forcing a failure. [ 577.813440][T12055] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 577.813471][T12055] CPU: 0 UID: 0 PID: 12055 Comm: syz.3.1815 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.813492][T12055] Tainted: [L]=SOFTLOCKUP [ 577.813497][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 577.813505][T12055] Call Trace: [ 577.813509][T12055] [ 577.813515][T12055] dump_stack_lvl+0x100/0x190 [ 577.813538][T12055] should_fail_ex.cold+0x5/0xa [ 577.813557][T12055] strncpy_from_user+0x3b/0x2d0 [ 577.813573][T12055] do_getname+0x78/0x390 [ 577.813594][T12055] delayed_getname_uflags+0x2a/0xa0 [ 577.813609][T12055] io_statx_prep+0x223/0x330 [ 577.813624][T12055] io_submit_sqes+0xa03/0x2480 [ 577.813645][T12055] __do_sys_io_uring_enter+0xa88/0x1b10 [ 577.813660][T12055] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 577.813678][T12055] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 577.813695][T12055] ? xfd_validate_state+0x129/0x190 [ 577.813707][T12055] ? exit_to_user_mode_loop+0x166/0x700 [ 577.813727][T12055] do_syscall_64+0x123/0x790 [ 577.813752][T12055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.813766][T12055] RIP: 0033:0x7f787fb9e159 [ 577.813777][T12055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.813789][T12055] RSP: 002b:00007f788099ef38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 577.813802][T12055] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f787fb9e159 [ 577.813811][T12055] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000015 [ 577.813818][T12055] RBP: 000000000000025e R08: 0000000000000000 R09: 0000000000000008 [ 577.813825][T12055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 577.813831][T12055] R13: 0000200000000a88 R14: 00000000000003c9 R15: 0000000000000000 [ 577.813847][T12055] [ 578.262527][T12063] befs: (nbd5): unable to read superblock [ 578.333637][T12065] snd_dummy snd_dummy.0: control 2:0:0:syz0:254 is already present [ 579.596416][ T30] audit: type=1400 audit(1789453529.920:1426): avc: denied { write } for pid=12072 comm="syz.5.1821" name="usb_gadget" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 579.638068][ T30] audit: type=1400 audit(1789453529.960:1427): avc: denied { write } for pid=12072 comm="syz.5.1821" name="functions" dev="configfs" ino=37094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 579.688337][ T30] audit: type=1400 audit(1789453530.010:1428): avc: denied { write } for pid=12072 comm="syz.5.1821" name="configs" dev="configfs" ino=37095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 579.724309][ T30] audit: type=1400 audit(1789453530.050:1429): avc: denied { write } for pid=12072 comm="syz.5.1821" name="c.1" dev="configfs" ino=37102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 579.809800][T12076] Config c/1 of g_uac2 needs at least one function. [ 579.809866][T12076] udc usbip-vudc.0: failed to start g_uac2: -22 [ 579.809880][T12076] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 579.810250][T12076] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 579.873470][ T30] audit: type=1400 audit(1789453530.190:1430): avc: denied { write } for pid=12072 comm="syz.5.1821" name="c.1" dev="configfs" ino=37102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 581.632731][T12083] tipc: Cannot configure node identity twice [ 582.677278][T12093] lo speed is unknown, defaulting to 1000 [ 582.918761][ T4127] Bluetooth: (null): Invalid header checksum [ 583.905179][T12098] lo speed is unknown, defaulting to 1000 [ 587.789992][T12123] : renamed from bond_slave_0 (while UP) [ 587.853488][ T5707] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 588.024708][ T5707] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 588.031405][ T5707] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 588.031424][ T5707] usb 6-1: config 0 has no interface number 0 [ 588.031447][ T5707] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 588.071960][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.071976][ T5707] usb 6-1: Product: syz [ 588.071984][ T5707] usb 6-1: Manufacturer: syz [ 588.071992][ T5707] usb 6-1: SerialNumber: syz [ 588.120748][ T5707] usb 6-1: config 0 descriptor?? [ 588.202238][ T5707] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 590.644470][ T30] audit: type=1400 audit(1789453540.960:1431): avc: denied { write } for pid=12118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.649895][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 590.983533][ T30] audit: type=1400 audit(1789453541.310:1432): avc: denied { write } for pid=12151 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.504590][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 592.665511][ T9] usb 6-1: USB disconnect, device number 17 [ 592.680837][ T9] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 593.385658][ T30] audit: type=1400 audit(1789453543.710:1433): avc: denied { write } for pid=12155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.548517][ T30] audit: type=1400 audit(1789453544.870:1434): avc: denied { bind } for pid=12176 comm="syz.1.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 594.586476][ T30] audit: type=1400 audit(1789453544.920:1435): avc: denied { listen } for pid=12176 comm="syz.1.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 594.591949][ T30] audit: type=1400 audit(1789453544.920:1436): avc: denied { accept } for pid=12176 comm="syz.1.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 594.642274][T12179] FAULT_INJECTION: forcing a failure. [ 594.642274][T12179] name failslab, interval 1, probability 0, space 0, times 0 [ 594.642301][T12179] CPU: 0 UID: 0 PID: 12179 Comm: syz.2.1840 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.642317][T12179] Tainted: [L]=SOFTLOCKUP [ 594.642322][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 594.642329][T12179] Call Trace: [ 594.642334][T12179] [ 594.642339][T12179] dump_stack_lvl+0x100/0x190 [ 594.642369][T12179] should_fail_ex.cold+0x5/0xa [ 594.642388][T12179] should_failslab+0xc2/0x120 [ 594.642405][T12179] __kmalloc_cache_noprof+0x91/0x6d0 [ 594.642422][T12179] ? ceph_get_tree+0x188/0x1fd0 [ 594.642442][T12179] ceph_get_tree+0x188/0x1fd0 [ 594.642458][T12179] ? bpf_lsm_capable+0x9/0x10 [ 594.642476][T12179] ? security_capable+0x80/0x260 [ 594.642493][T12179] vfs_get_tree+0x92/0x320 [ 594.642511][T12179] vfs_cmd_create+0xd7/0x2a0 [ 594.642524][T12179] __do_sys_fsconfig+0x55a/0xcb0 [ 594.642536][T12179] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 594.642556][T12179] do_syscall_64+0x123/0x790 [ 594.642573][T12179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.642585][T12179] RIP: 0033:0x7f8bc399e159 [ 594.642596][T12179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.642607][T12179] RSP: 002b:00007f8bc1bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 594.642619][T12179] RAX: ffffffffffffffda RBX: 00007f8bc3c25fa0 RCX: 00007f8bc399e159 [ 594.642627][T12179] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 594.642634][T12179] RBP: 00007f8bc3a3503b R08: 0000000000000000 R09: 0000000000000000 [ 594.642641][T12179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.642647][T12179] R13: 00007f8bc3c26038 R14: 00007f8bc3c25fa0 R15: 00007ffeb7471638 [ 594.642663][T12179] [ 595.470800][ T30] audit: type=1400 audit(1789453545.790:1437): avc: denied { write } for pid=12188 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.765946][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 601.824418][T12223] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 601.825020][T12223] CIFS: Attempting to mount //127.0.0.1/share [ 601.830740][T12223] CIFS: VFS: Error connecting to socket. Aborting operation. [ 601.830845][T12223] CIFS: VFS: cifs_mount failed w/return code = -111 [ 601.998458][ T30] audit: type=1400 audit(1789453552.320:1438): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 603.275753][ T30] audit: type=1400 audit(1789453553.600:1439): avc: denied { write } for pid=12233 comm="syz.1.1852" name="functions" dev="configfs" ino=17966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 610.545702][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 611.804955][T12285] vlan2: entered promiscuous mode [ 611.804971][T12285] bridge0: entered promiscuous mode [ 612.941736][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 612.941751][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1868'. [ 612.978586][T12292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.167867][T12287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.186048][T12287] bond1: (slave bond0): Enslaving as an active interface with a down link [ 613.213713][ T5707] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 613.373170][ T5707] usb 4-1: Using ep0 maxpacket: 32 [ 613.373889][ T5707] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 613.375389][ T5707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.375405][ T5707] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 613.375509][ T5707] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 613.375530][ T5707] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 613.378170][ T5707] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 613.378186][ T5707] usb 4-1: config 1 interface 1 has no altsetting 0 [ 613.382732][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.382748][ T5707] usb 4-1: Product: syz [ 613.382757][ T5707] usb 4-1: Manufacturer: syz [ 613.382766][ T5707] usb 4-1: SerialNumber: syz [ 613.564454][T12312] wlan0 speed is unknown, defaulting to 1000 [ 613.564497][T12312] wlan0 speed is unknown, defaulting to 1000 [ 613.565382][T12312] wlan0 speed is unknown, defaulting to 1000 [ 613.566050][T12312] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 613.566071][T12312] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 613.566095][T12312] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 613.567899][T12312] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 613.575740][T12312] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 613.592024][T12312] wlan0 speed is unknown, defaulting to 1000 [ 613.593026][T12312] wlan0 speed is unknown, defaulting to 1000 [ 613.594214][T12312] wlan0 speed is unknown, defaulting to 1000 [ 613.595164][T12312] wlan0 speed is unknown, defaulting to 1000 [ 613.596065][T12312] wlan0 speed is unknown, defaulting to 1000 [ 613.615266][T12312] smc: removing ib device syz1 [ 613.632134][T12312] smbdirect: ib_dev[syz1] removed [ 614.249109][T12312] ------------[ cut here ]------------ [ 614.249119][T12312] !xa_empty(&pool->xa) [ 614.249129][T12312] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.1.1875/12312 [ 614.384515][T12312] Modules linked in: [ 614.388417][T12312] CPU: 0 UID: 0 PID: 12312 Comm: syz.1.1875 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.399378][T12312] Tainted: [L]=SOFTLOCKUP [ 614.403895][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 614.413985][T12312] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 614.419468][T12312] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 66 bc 17 f9 5b c3 cc cc cc cc e8 5b bc 17 f9 90 <0f> 0b 90 e8 52 bc 17 f9 5b c3 cc cc cc cc e8 d7 ff 8a f9 eb d0 0f [ 614.439954][T12312] RSP: 0018:ffffc900042a7190 EFLAGS: 00010246 [ 614.446062][T12312] RAX: 0000000000080000 RBX: ffff88807f1793d8 RCX: ffffc9001052c000 [ 614.454407][T12312] RDX: 0000000000080000 RSI: ffffffff88f460b5 RDI: ffff88807f179458 [ 614.462376][T12312] RBP: ffffffff88f2b850 R08: 0000000000000005 R09: 0000000000000001 [ 614.470389][T12312] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807f1786d0 [ 614.478403][T12312] R13: ffff88807f177fe0 R14: ffff88807f177fe0 R15: ffff88807f179138 [ 614.486403][T12312] FS: 00007f64228006c0(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 614.495367][T12312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.501942][T12312] CR2: 0000001b329fdff8 CR3: 00000000735cf000 CR4: 00000000003526f0 [ 614.509944][T12312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 614.517922][T12312] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 614.526472][T12312] Call Trace: [ 614.529732][T12312] [ 614.532658][T12312] rxe_dealloc+0x25/0xc0 [ 614.537365][T12312] ib_dealloc_device+0x49/0x230 [ 614.542217][T12312] __ib_unregister_device+0x396/0x480 [ 614.547611][T12312] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 614.553456][T12312] ib_unregister_device_and_put+0x5a/0x80 [ 614.559172][T12312] nldev_dellink+0x308/0x440 [ 614.563778][T12312] ? __pfx_nldev_dellink+0x10/0x10 [ 614.568949][T12312] ? rcu_is_watching+0x13/0xc0 [ 614.573750][T12312] ? cap_capable+0x107/0x430 [ 614.578339][T12312] ? bpf_lsm_capable+0x9/0x10 [ 614.583028][T12312] ? security_capable+0x80/0x260 [ 614.587957][T12312] ? ns_capable+0xd2/0xf0 [ 614.592274][T12312] ? __pfx_nldev_dellink+0x10/0x10 [ 614.597430][T12312] rdma_nl_rcv_msg+0x392/0x6f0 [ 614.602184][T12312] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 614.607497][T12312] ? __lock_acquire+0x5c0/0x1f40 [ 614.612443][T12312] ? __netlink_lookup+0xa9/0x900 [ 614.617669][T12312] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 614.624222][T12312] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 614.631657][T12312] ? netlink_deliver_tap+0x1ae/0xcc0 [ 614.637239][T12312] netlink_unicast+0x585/0x850 [ 614.642005][T12312] ? __pfx_netlink_unicast+0x10/0x10 [ 614.647344][T12312] netlink_sendmsg+0x8b0/0xda0 [ 614.652099][T12312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.657402][T12312] ? selinux_socket_sendmsg+0x198/0x2f0 [ 614.662959][T12312] ____sys_sendmsg+0xa4d/0xbe0 [ 614.667720][T12312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.673029][T12312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.678312][T12312] ___sys_sendmsg+0x190/0x1e0 [ 614.683009][T12312] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.688201][T12312] ? futex_wait+0x11e/0x370 [ 614.692697][T12312] ? find_held_lock+0x2b/0x80 [ 614.697456][T12312] __sys_sendmsg+0x160/0x210 [ 614.702040][T12312] ? __pfx___sys_sendmsg+0x10/0x10 [ 614.707193][T12312] do_syscall_64+0x123/0x790 [ 614.711784][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.717730][T12312] RIP: 0033:0x7f642199e159 [ 614.722151][T12312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.742333][T12312] RSP: 002b:00007f6422800028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.751043][T12312] RAX: ffffffffffffffda RBX: 00007f6421c26180 RCX: 00007f642199e159 [ 614.759086][T12312] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 614.767095][T12312] RBP: 00007f6421a3503b R08: 0000000000000000 R09: 0000000000000000 [ 614.775309][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.783364][T12312] R13: 00007f6421c26218 R14: 00007f6421c26180 R15: 00007ffc2dc4aa78 [ 614.791358][T12312] [ 614.794398][T12312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 614.801654][T12312] CPU: 0 UID: 0 PID: 12312 Comm: syz.1.1875 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.812566][T12312] Tainted: [L]=SOFTLOCKUP [ 614.816888][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 614.826951][T12312] Call Trace: [ 614.830218][T12312] [ 614.833148][T12312] dump_stack_lvl+0x100/0x190 [ 614.837822][T12312] vpanic+0x553/0x970 [ 614.841783][T12312] ? __pfx_vpanic+0x10/0x10 [ 614.846282][T12312] panic+0xd1/0xe0 [ 614.849980][T12312] ? __pfx_panic+0x10/0x10 [ 614.854377][T12312] check_panic_on_warn.cold+0x19/0x34 [ 614.859727][T12312] ? rxe_pool_cleanup+0x46/0x60 [ 614.864573][T12312] __warn.cold+0x191/0x318 [ 614.868986][T12312] __report_bug+0x30f/0x440 [ 614.873471][T12312] ? rxe_pool_cleanup+0x46/0x60 [ 614.878304][T12312] ? __pfx___report_bug+0x10/0x10 [ 614.883318][T12312] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 614.889099][T12312] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 614.894905][T12312] ? __flush_workqueue+0x426/0x1200 [ 614.900081][T12312] ? rxe_pool_cleanup+0x46/0x60 [ 614.904912][T12312] report_bug+0xb3/0x220 [ 614.909134][T12312] ? rxe_pool_cleanup+0x46/0x60 [ 614.913961][T12312] handle_bug+0x16a/0x2a0 [ 614.918272][T12312] exc_invalid_op+0x17/0x50 [ 614.922754][T12312] asm_exc_invalid_op+0x1a/0x20 [ 614.927580][T12312] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 614.933017][T12312] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 66 bc 17 f9 5b c3 cc cc cc cc e8 5b bc 17 f9 90 <0f> 0b 90 e8 52 bc 17 f9 5b c3 cc cc cc cc e8 d7 ff 8a f9 eb d0 0f [ 614.952609][T12312] RSP: 0018:ffffc900042a7190 EFLAGS: 00010246 [ 614.958659][T12312] RAX: 0000000000080000 RBX: ffff88807f1793d8 RCX: ffffc9001052c000 [ 614.966618][T12312] RDX: 0000000000080000 RSI: ffffffff88f460b5 RDI: ffff88807f179458 [ 614.974577][T12312] RBP: ffffffff88f2b850 R08: 0000000000000005 R09: 0000000000000001 [ 614.982534][T12312] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807f1786d0 [ 614.990485][T12312] R13: ffff88807f177fe0 R14: ffff88807f177fe0 R15: ffff88807f179138 [ 614.998437][T12312] ? __pfx_rxe_dealloc+0x10/0x10 [ 615.003362][T12312] ? rxe_pool_cleanup+0x45/0x60 [ 615.008197][T12312] rxe_dealloc+0x25/0xc0 [ 615.012444][T12312] ib_dealloc_device+0x49/0x230 [ 615.017288][T12312] __ib_unregister_device+0x396/0x480 [ 615.022639][T12312] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 615.028455][T12312] ib_unregister_device_and_put+0x5a/0x80 [ 615.034155][T12312] nldev_dellink+0x308/0x440 [ 615.038721][T12312] ? __pfx_nldev_dellink+0x10/0x10 [ 615.043848][T12312] ? rcu_is_watching+0x13/0xc0 [ 615.048595][T12312] ? cap_capable+0x107/0x430 [ 615.053169][T12312] ? bpf_lsm_capable+0x9/0x10 [ 615.057827][T12312] ? security_capable+0x80/0x260 [ 615.062766][T12312] ? ns_capable+0xd2/0xf0 [ 615.067073][T12312] ? __pfx_nldev_dellink+0x10/0x10 [ 615.072161][T12312] rdma_nl_rcv_msg+0x392/0x6f0 [ 615.076901][T12312] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 615.082165][T12312] ? __lock_acquire+0x5c0/0x1f40 [ 615.087079][T12312] ? __netlink_lookup+0xa9/0x900 [ 615.091995][T12312] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 615.098389][T12312] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 615.105309][T12312] ? netlink_deliver_tap+0x1ae/0xcc0 [ 615.110573][T12312] netlink_unicast+0x585/0x850 [ 615.115334][T12312] ? __pfx_netlink_unicast+0x10/0x10 [ 615.120600][T12312] netlink_sendmsg+0x8b0/0xda0 [ 615.125343][T12312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.130609][T12312] ? selinux_socket_sendmsg+0x198/0x2f0 [ 615.136135][T12312] ____sys_sendmsg+0xa4d/0xbe0 [ 615.140878][T12312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.146138][T12312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.151411][T12312] ___sys_sendmsg+0x190/0x1e0 [ 615.156075][T12312] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.161261][T12312] ? futex_wait+0x11e/0x370 [ 615.165749][T12312] ? find_held_lock+0x2b/0x80 [ 615.170422][T12312] __sys_sendmsg+0x160/0x210 [ 615.175014][T12312] ? __pfx___sys_sendmsg+0x10/0x10 [ 615.180132][T12312] do_syscall_64+0x123/0x790 [ 615.184706][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.190577][T12312] RIP: 0033:0x7f642199e159 [ 615.194969][T12312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.214559][T12312] RSP: 002b:00007f6422800028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.222973][T12312] RAX: ffffffffffffffda RBX: 00007f6421c26180 RCX: 00007f642199e159 [ 615.230925][T12312] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 615.238870][T12312] RBP: 00007f6421a3503b R08: 0000000000000000 R09: 0000000000000000 [ 615.246828][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.254791][T12312] R13: 00007f6421c26218 R14: 00007f6421c26180 R15: 00007ffc2dc4aa78 [ 615.262770][T12312] [ 615.265837][T12312] Kernel Offset: disabled [ 615.270150][T12312] Rebooting in 86400 seconds..