last executing test programs: 15m10.837373805s ago: executing program 3 (id=1385): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = io_uring_setup(0x1b7c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getpid() r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 15m9.949921947s ago: executing program 3 (id=1394): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000042c0)=@newchain={0x11c, 0x64, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x3, 0xc}, {0xffe0, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x800}, @TCA_RATE={0x6, 0x5, {0x9, 0xfe}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1c}}, @filter_kind_options=@f_flow={{0x9}, {0xd4, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x7}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x80}, @TCA_FLOW_XOR={0x8, 0x7, 0x7ff}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x128e5}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6}, @TCA_FLOW_POLICE={0x88, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x16a, 0x80000001, 0xfffffffd, {0x2, 0x2, 0x0, 0x7, 0x6, 0x5}, {0x5, 0x1, 0x2, 0x81, 0x5}, 0x7fffffff, 0x9, 0xe36}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x20}, @TCA_FLOW_KEYS={0x8, 0x1, 0xff12}, @TCA_FLOW_MODE={0x8}]}}]}, 0x11c}}, 0x26000841) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000100)={0x1f, @any, 0x4}, 0xa) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20060400) socket$inet6_tcp(0xa, 0x1, 0x0) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x400040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 15m9.600934458s ago: executing program 3 (id=1397): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000280)=@x86={0x6, 0x1, 0x8, 0x0, 0xc, 0x3, 0x4, 0xb, 0x3, 0x13, 0x5, 0x6c, 0x0, 0x10, 0xb, 0x0, 0x0, 0x0, 0x4, '\x00', 0x4, 0xf}) 15m9.425770915s ago: executing program 3 (id=1401): syz_open_dev$dvb_demux(&(0x7f00000001c0), 0xfffffffffffffffe, 0x4205c1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) unshare(0x2a060400) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="20000000000000008400000008060000fe8000000000000000000000bb"], 0x20, 0x4855}, 0x24000052) dup2(r0, r0) mknodat(r1, &(0x7f00000006c0)='./file0/file0\x00', 0x800, 0x5) socket(0x13, 0xa, 0xa8) io_setup(0x8, &(0x7f0000000280)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xfff) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) fadvise64(r0, 0x5, 0xc6dc, 0x1) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40c5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="200b980013f2d74a34d116f50000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5dc96e20d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f06"], 0x0, 0x0}) syz_usb_control_io$hid(r6, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 15m6.765314237s ago: executing program 3 (id=1421): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r0, &(0x7f00000011c0)=ANY=[], 0xb0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x8, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000000600)="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", 0x27b) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x2c, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 15m6.305135717s ago: executing program 3 (id=1424): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000040)={&(0x7f0000000780)=[0x3, 0x0, 0xe, 0x40, 0x4, 0x7f, 0x6000, 0x5, 0x7, 0x493, 0x7, 0x8000, 0x101, 0x3, 0x6, 0x8, 0x9, 0x7fff, 0x7, 0x7, 0x40, 0xfffffffb, 0x7, 0x6584, 0xb, 0xfffff000, 0x401, 0x5506, 0x9, 0x9, 0x3795, 0x6, 0x101, 0x81, 0x81, 0x8, 0x9, 0x9, 0x10, 0x3, 0x6, 0x9, 0x401, 0xfffffff9, 0x35, 0xc, 0x0, 0xb0b6, 0x4, 0x20000, 0x6f, 0x5, 0x5, 0x0, 0xe, 0x0, 0x401, 0xc, 0x10001, 0x10e, 0xd64, 0x6, 0x6, 0x1ff, 0x7fffffff, 0x10, 0x7, 0x8, 0x11, 0x6, 0x9, 0x9fcb, 0xfffffffc, 0x0, 0x596, 0xd, 0x3, 0x412c, 0x101, 0x6, 0x7, 0x6, 0xb, 0x0, 0x7fffffff, 0x154, 0x9, 0x2, 0x6, 0x8, 0xe, 0x9, 0x8, 0x38, 0x4, 0x5, 0x9, 0x100, 0x10001, 0x9, 0x28000, 0x3ff, 0xffffff3e, 0x2, 0x6, 0x8, 0x7, 0x8, 0x8, 0x7, 0x8, 0x10000, 0x2, 0xbc3, 0xfff, 0x4d57, 0xfffffffa, 0x2, 0x3ff, 0x4, 0x100, 0x5, 0x0, 0xd, 0xa843, 0x7, 0x2, 0x6f5, 0x7fffffff, 0x7, 0x1, 0x2, 0x10001, 0x0, 0xfffffffd, 0x9, 0xc, 0x7fff, 0x1, 0x4, 0x7fffffff, 0x5, 0x8, 0x8001, 0x7, 0x6, 0xdf1, 0xfffffff9, 0x8, 0x0, 0x6, 0xffffff80, 0x1, 0x7f, 0x4, 0x3, 0x6, 0x6, 0x30, 0x6, 0x0, 0x6, 0x80000001, 0x2, 0x5, 0x0, 0xffff0001, 0x57c, 0x3, 0x7, 0x5, 0x2, 0x3, 0x0, 0xcd, 0x2, 0x3472, 0xf23b, 0x7, 0x2, 0x81, 0x3, 0x4, 0x7, 0x10000, 0x54af, 0x800, 0x8c25, 0x3, 0x1, 0xf7f, 0xffff, 0x1376, 0x3, 0x4, 0x9, 0x0, 0x180, 0x2, 0x3, 0x6, 0x0, 0x6, 0x3, 0xed, 0xffffffff, 0x5, 0x6, 0xbfb, 0x80000001, 0xa5b, 0x280, 0x5, 0x1, 0x0, 0x2022, 0xb, 0x80000000, 0x8, 0x7, 0x80000001, 0x8, 0x4, 0x1, 0x3, 0x4, 0x5, 0x8000, 0x9, 0x2, 0x11d, 0x9, 0x8, 0x5, 0x0, 0x5, 0x180000, 0xfffffff3, 0xfffffff9, 0x789e, 0xf0000000, 0x4, 0x8, 0x1, 0xeef, 0x7, 0x0, 0x0, 0xaa1, 0xffa00000, 0x80000001, 0x6, 0x9, 0xe, 0x1, 0x4, 0xfffffff4, 0x10000, 0xfc, 0x6, 0x4, 0x9d4d, 0xada, 0x5, 0xcab, 0x8f5, 0x80, 0x2, 0x2, 0x3, 0x1c000, 0xe, 0x1, 0x2, 0x5, 0x8, 0x6, 0x5, 0xfffffff3, 0x2, 0x1, 0xa, 0x80000001, 0x35, 0xcb2, 0x4, 0x1, 0x1, 0xfffffffb, 0x7, 0x40, 0xf, 0x1, 0x3, 0xae, 0xc53, 0x3, 0x1, 0x0, 0x4, 0xffff, 0x10, 0x6, 0x5, 0x0, 0x5, 0x1, 0x8, 0xffffffff, 0xc, 0x1, 0x9, 0xe8bf, 0x80, 0x1, 0x5, 0x9, 0x5, 0xffffff81, 0xb, 0x5, 0x4a19, 0x9, 0x0, 0xe2, 0x0, 0xfffffff9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x1, 0xa0000, 0x7, 0x0, 0x6, 0x5, 0x7, 0x5, 0x65f, 0x6, 0x572, 0x200, 0xa2, 0x7fffffff, 0x0, 0x4, 0x299a, 0x6, 0x7fffffff, 0xfffffff7, 0x2, 0x0, 0x9, 0x9, 0x4, 0x0, 0x0, 0x200, 0x3, 0x8000, 0x70, 0x1000, 0x4, 0x9, 0xfffffffa, 0x1, 0x0, 0x7fffffff, 0x5, 0xffffffff, 0xfffffffe, 0x401, 0x5e9b, 0x1, 0x8, 0x1, 0x800, 0xb2, 0x4, 0x5, 0x1000, 0x5d4, 0xe, 0x7, 0x6, 0x1ff, 0x400, 0x4, 0x7, 0x3, 0x5, 0x3, 0x4, 0x9, 0xdfe, 0x6, 0x9, 0x6, 0x3, 0x6, 0x97, 0x80, 0x40, 0x8, 0x4, 0x5, 0x6, 0x3, 0x9, 0x8bd5, 0x80, 0x10000, 0xa189, 0x10001, 0xad, 0x6, 0x401, 0x9, 0xfffffffe, 0x6, 0x5, 0xfffffff8, 0x1, 0x4ff80107, 0x25c3, 0x3, 0x3, 0x7fffffff, 0x5, 0x282c22c9, 0x1, 0x200, 0x6, 0x3, 0x1, 0xde, 0x7, 0x10001, 0x7, 0x10001, 0x6, 0x0, 0xb, 0x6, 0x3, 0x9, 0x11a2, 0x8001, 0x5, 0x5, 0x6, 0x5, 0x6, 0x6, 0xf, 0x80000000, 0x7, 0x7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x500, 0x10001, 0x2, 0x8c, 0x3, 0x4, 0x720, 0x7, 0x8, 0x10000, 0x6, 0xfffffff8, 0x8, 0x9, 0x9, 0xff56, 0x1, 0x9, 0x0, 0x3, 0x0, 0x40, 0x8001, 0xffffffff, 0x1, 0xeb7d, 0xf, 0x6, 0x4, 0x5, 0x100f5ac1, 0xfff, 0x7fff, 0xffff, 0x800, 0x8, 0xc34d, 0xf, 0x401, 0x0, 0x1, 0x7, 0x2b8, 0x1, 0x7f, 0x9, 0x310b0c71, 0x7fffffff, 0xb365, 0xfff, 0x929b, 0x7, 0x8, 0x8, 0x4, 0x8, 0x8001, 0x143, 0x7, 0x7f, 0x4, 0xf, 0x3, 0x31c, 0x1ff, 0x6, 0xfffffffa, 0x3ff, 0xbd60, 0x9, 0x7, 0x4, 0x80, 0x2, 0x4, 0x4, 0x1, 0x7, 0x5, 0xe, 0x8, 0x0, 0xfffffff8, 0x200, 0x5, 0xfe, 0x6, 0x2, 0x5, 0x800, 0x0, 0x10000, 0x0, 0x4, 0x2, 0x6, 0x8, 0xff, 0x1, 0x0, 0x9, 0x7fff, 0x4f, 0xc9e, 0xffff, 0x3, 0x9, 0x9, 0x0, 0x80, 0x0, 0x6, 0x8, 0xfff, 0x1000, 0x1, 0xc, 0x7e, 0x0, 0x5, 0x4, 0xe71, 0xffff8001, 0x81, 0x1, 0x5, 0x5, 0x4, 0xa07, 0x2, 0x1, 0x6, 0x3, 0x1, 0x2, 0x4, 0x6, 0x5, 0x5, 0x6, 0xf1, 0x80, 0x0, 0x1, 0x0, 0x9, 0x5, 0x3450, 0x7f, 0x2, 0x1, 0x0, 0x9, 0x7fffffff, 0x40, 0x8, 0xfff, 0x4, 0x7, 0x6, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x3ff, 0x23c3, 0x0, 0x6, 0x40, 0x6, 0x7, 0x7, 0x7, 0xed, 0x1, 0x3, 0x1ff, 0x80000000, 0x3, 0x3, 0x1, 0x10, 0xfffffffe, 0x0, 0xa7, 0xe, 0x80, 0x5, 0x2, 0x1, 0x8, 0x7a, 0x0, 0xc4b, 0x24, 0x63, 0x9, 0x800, 0x3, 0xfed40, 0x3, 0x11e, 0x7ff, 0x5, 0x32, 0x6, 0xffff, 0x3, 0xa4b, 0x1, 0x5, 0xb23, 0xfff, 0x1, 0x1, 0x9, 0x4, 0x8, 0x8, 0x7, 0x401, 0x9, 0x4, 0x6, 0x6, 0x70, 0x660, 0x3, 0xd5f, 0x8, 0x3, 0x200, 0x3, 0x0, 0x3, 0x3, 0x10001, 0xa5, 0x3, 0x80000000, 0x8, 0xffffffff, 0x5, 0x0, 0x1, 0x7f, 0x4cb3, 0x6, 0x1, 0x0, 0x6, 0x3a85, 0x7, 0xa, 0xffffffff, 0x6, 0x9, 0xe, 0x5, 0x23, 0x5, 0x96, 0x0, 0x9e, 0x80000000, 0x4080000, 0x1000, 0x4, 0x0, 0x10, 0x7, 0x401, 0xf046, 0x19, 0x5, 0x2, 0x4, 0x9, 0x7, 0xfffffff1, 0xffffffff, 0x1, 0xab7fbaaf, 0x2, 0xb4, 0xffff, 0x80, 0x2, 0x2, 0x6, 0x20000000, 0x7, 0xa, 0xfffff2ea, 0x3800, 0x0, 0xf, 0x9, 0x9, 0x3, 0xfffffff7, 0x6, 0x4, 0x8000, 0x7fff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x401, 0x7, 0x329, 0x4, 0xff, 0x4, 0x3, 0x6, 0x0, 0x1, 0x6, 0xfffffffd, 0x3, 0x6c99, 0x2, 0x3, 0x2, 0x89fd, 0x7, 0x68c109f7, 0x5, 0xfffffffa, 0x0, 0x39a703cd, 0x3, 0x0, 0x800, 0x4, 0x1, 0x0, 0x8, 0x7f, 0x4, 0x100000e, 0x7f53, 0x1ff, 0x5, 0x2, 0xd, 0x8, 0x2c69e094, 0x800, 0xffff3ec3, 0x3, 0x3f9f, 0x0, 0xedb1, 0xb, 0x8, 0x0, 0x4, 0xb, 0x3, 0x8, 0x1ff, 0x1, 0x4, 0x8, 0xe, 0x10, 0xffffffff, 0x9, 0xe44, 0x2, 0xda, 0x5, 0x0, 0xfffffff7, 0x0, 0x0, 0xc9, 0x7, 0x10000, 0xd75, 0x80000001, 0x7, 0x400, 0x5e, 0x7fff, 0x4, 0x7, 0x800, 0x4, 0x3, 0x6, 0x1, 0x4, 0xfffffffa, 0xffffffff, 0x7c, 0x2, 0x9, 0x2a7becf9, 0x9, 0x7, 0x1, 0x5c8b0e92, 0x3ff, 0x40, 0x9, 0x5, 0xfffffff9, 0x80, 0x7ff, 0x2d, 0x0, 0x8001, 0x7, 0x101, 0x1, 0x5, 0x6, 0x2, 0x5, 0xb72, 0xfff, 0x9, 0x7ffffffc, 0x100, 0x6, 0x1, 0x15, 0x2, 0xff, 0xbb, 0xa55, 0x2, 0x2, 0x3, 0x2, 0x800, 0xf, 0x6, 0x7, 0xe4c1, 0x0, 0x1, 0x5, 0x7, 0x2210, 0x6, 0xda, 0xd, 0x958d, 0x8, 0x7, 0xffc, 0x2000000, 0x9, 0x3, 0x67a7bb72, 0x5, 0x9, 0xda800000, 0x9, 0xfffffff4, 0x3b1a, 0x2, 0x9, 0xb, 0xffff, 0x4, 0x1, 0x6, 0x2, 0x10000, 0x5, 0x4e3f, 0x9, 0x4, 0xa3, 0x7, 0xbe66, 0xfffffff9, 0x1, 0x8, 0x5, 0x7, 0x0, 0x0, 0x8, 0x8, 0x3, 0x8, 0x80000000, 0x7fffffff, 0xa, 0x80000000, 0x6, 0x8ea, 0x101, 0x8, 0x1, 0x3, 0x4, 0x9, 0x80, 0x1, 0x4, 0x7, 0xbd5d, 0x0, 0x2, 0x2, 0x6, 0x80, 0x7fffffff, 0x9fe2, 0x4, 0x2, 0x3, 0x400, 0xfffffff9, 0x371c, 0x6, 0x3, 0x3e, 0x20, 0x8, 0x4, 0x100, 0x5, 0x3, 0x6, 0x4, 0x1, 0x3, 0x2, 0x1, 0x0, 0xc, 0x0, 0x8, 0x200, 0x2, 0x200, 0x0, 0x1, 0x4, 0x80000001, 0x0, 0x7, 0x5, 0x4, 0x7, 0x4d40, 0x4, 0x80000001], 0x6, 0x400}) 15m6.196402863s ago: executing program 32 (id=1424): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000040)={&(0x7f0000000780)=[0x3, 0x0, 0xe, 0x40, 0x4, 0x7f, 0x6000, 0x5, 0x7, 0x493, 0x7, 0x8000, 0x101, 0x3, 0x6, 0x8, 0x9, 0x7fff, 0x7, 0x7, 0x40, 0xfffffffb, 0x7, 0x6584, 0xb, 0xfffff000, 0x401, 0x5506, 0x9, 0x9, 0x3795, 0x6, 0x101, 0x81, 0x81, 0x8, 0x9, 0x9, 0x10, 0x3, 0x6, 0x9, 0x401, 0xfffffff9, 0x35, 0xc, 0x0, 0xb0b6, 0x4, 0x20000, 0x6f, 0x5, 0x5, 0x0, 0xe, 0x0, 0x401, 0xc, 0x10001, 0x10e, 0xd64, 0x6, 0x6, 0x1ff, 0x7fffffff, 0x10, 0x7, 0x8, 0x11, 0x6, 0x9, 0x9fcb, 0xfffffffc, 0x0, 0x596, 0xd, 0x3, 0x412c, 0x101, 0x6, 0x7, 0x6, 0xb, 0x0, 0x7fffffff, 0x154, 0x9, 0x2, 0x6, 0x8, 0xe, 0x9, 0x8, 0x38, 0x4, 0x5, 0x9, 0x100, 0x10001, 0x9, 0x28000, 0x3ff, 0xffffff3e, 0x2, 0x6, 0x8, 0x7, 0x8, 0x8, 0x7, 0x8, 0x10000, 0x2, 0xbc3, 0xfff, 0x4d57, 0xfffffffa, 0x2, 0x3ff, 0x4, 0x100, 0x5, 0x0, 0xd, 0xa843, 0x7, 0x2, 0x6f5, 0x7fffffff, 0x7, 0x1, 0x2, 0x10001, 0x0, 0xfffffffd, 0x9, 0xc, 0x7fff, 0x1, 0x4, 0x7fffffff, 0x5, 0x8, 0x8001, 0x7, 0x6, 0xdf1, 0xfffffff9, 0x8, 0x0, 0x6, 0xffffff80, 0x1, 0x7f, 0x4, 0x3, 0x6, 0x6, 0x30, 0x6, 0x0, 0x6, 0x80000001, 0x2, 0x5, 0x0, 0xffff0001, 0x57c, 0x3, 0x7, 0x5, 0x2, 0x3, 0x0, 0xcd, 0x2, 0x3472, 0xf23b, 0x7, 0x2, 0x81, 0x3, 0x4, 0x7, 0x10000, 0x54af, 0x800, 0x8c25, 0x3, 0x1, 0xf7f, 0xffff, 0x1376, 0x3, 0x4, 0x9, 0x0, 0x180, 0x2, 0x3, 0x6, 0x0, 0x6, 0x3, 0xed, 0xffffffff, 0x5, 0x6, 0xbfb, 0x80000001, 0xa5b, 0x280, 0x5, 0x1, 0x0, 0x2022, 0xb, 0x80000000, 0x8, 0x7, 0x80000001, 0x8, 0x4, 0x1, 0x3, 0x4, 0x5, 0x8000, 0x9, 0x2, 0x11d, 0x9, 0x8, 0x5, 0x0, 0x5, 0x180000, 0xfffffff3, 0xfffffff9, 0x789e, 0xf0000000, 0x4, 0x8, 0x1, 0xeef, 0x7, 0x0, 0x0, 0xaa1, 0xffa00000, 0x80000001, 0x6, 0x9, 0xe, 0x1, 0x4, 0xfffffff4, 0x10000, 0xfc, 0x6, 0x4, 0x9d4d, 0xada, 0x5, 0xcab, 0x8f5, 0x80, 0x2, 0x2, 0x3, 0x1c000, 0xe, 0x1, 0x2, 0x5, 0x8, 0x6, 0x5, 0xfffffff3, 0x2, 0x1, 0xa, 0x80000001, 0x35, 0xcb2, 0x4, 0x1, 0x1, 0xfffffffb, 0x7, 0x40, 0xf, 0x1, 0x3, 0xae, 0xc53, 0x3, 0x1, 0x0, 0x4, 0xffff, 0x10, 0x6, 0x5, 0x0, 0x5, 0x1, 0x8, 0xffffffff, 0xc, 0x1, 0x9, 0xe8bf, 0x80, 0x1, 0x5, 0x9, 0x5, 0xffffff81, 0xb, 0x5, 0x4a19, 0x9, 0x0, 0xe2, 0x0, 0xfffffff9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x1, 0xa0000, 0x7, 0x0, 0x6, 0x5, 0x7, 0x5, 0x65f, 0x6, 0x572, 0x200, 0xa2, 0x7fffffff, 0x0, 0x4, 0x299a, 0x6, 0x7fffffff, 0xfffffff7, 0x2, 0x0, 0x9, 0x9, 0x4, 0x0, 0x0, 0x200, 0x3, 0x8000, 0x70, 0x1000, 0x4, 0x9, 0xfffffffa, 0x1, 0x0, 0x7fffffff, 0x5, 0xffffffff, 0xfffffffe, 0x401, 0x5e9b, 0x1, 0x8, 0x1, 0x800, 0xb2, 0x4, 0x5, 0x1000, 0x5d4, 0xe, 0x7, 0x6, 0x1ff, 0x400, 0x4, 0x7, 0x3, 0x5, 0x3, 0x4, 0x9, 0xdfe, 0x6, 0x9, 0x6, 0x3, 0x6, 0x97, 0x80, 0x40, 0x8, 0x4, 0x5, 0x6, 0x3, 0x9, 0x8bd5, 0x80, 0x10000, 0xa189, 0x10001, 0xad, 0x6, 0x401, 0x9, 0xfffffffe, 0x6, 0x5, 0xfffffff8, 0x1, 0x4ff80107, 0x25c3, 0x3, 0x3, 0x7fffffff, 0x5, 0x282c22c9, 0x1, 0x200, 0x6, 0x3, 0x1, 0xde, 0x7, 0x10001, 0x7, 0x10001, 0x6, 0x0, 0xb, 0x6, 0x3, 0x9, 0x11a2, 0x8001, 0x5, 0x5, 0x6, 0x5, 0x6, 0x6, 0xf, 0x80000000, 0x7, 0x7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x500, 0x10001, 0x2, 0x8c, 0x3, 0x4, 0x720, 0x7, 0x8, 0x10000, 0x6, 0xfffffff8, 0x8, 0x9, 0x9, 0xff56, 0x1, 0x9, 0x0, 0x3, 0x0, 0x40, 0x8001, 0xffffffff, 0x1, 0xeb7d, 0xf, 0x6, 0x4, 0x5, 0x100f5ac1, 0xfff, 0x7fff, 0xffff, 0x800, 0x8, 0xc34d, 0xf, 0x401, 0x0, 0x1, 0x7, 0x2b8, 0x1, 0x7f, 0x9, 0x310b0c71, 0x7fffffff, 0xb365, 0xfff, 0x929b, 0x7, 0x8, 0x8, 0x4, 0x8, 0x8001, 0x143, 0x7, 0x7f, 0x4, 0xf, 0x3, 0x31c, 0x1ff, 0x6, 0xfffffffa, 0x3ff, 0xbd60, 0x9, 0x7, 0x4, 0x80, 0x2, 0x4, 0x4, 0x1, 0x7, 0x5, 0xe, 0x8, 0x0, 0xfffffff8, 0x200, 0x5, 0xfe, 0x6, 0x2, 0x5, 0x800, 0x0, 0x10000, 0x0, 0x4, 0x2, 0x6, 0x8, 0xff, 0x1, 0x0, 0x9, 0x7fff, 0x4f, 0xc9e, 0xffff, 0x3, 0x9, 0x9, 0x0, 0x80, 0x0, 0x6, 0x8, 0xfff, 0x1000, 0x1, 0xc, 0x7e, 0x0, 0x5, 0x4, 0xe71, 0xffff8001, 0x81, 0x1, 0x5, 0x5, 0x4, 0xa07, 0x2, 0x1, 0x6, 0x3, 0x1, 0x2, 0x4, 0x6, 0x5, 0x5, 0x6, 0xf1, 0x80, 0x0, 0x1, 0x0, 0x9, 0x5, 0x3450, 0x7f, 0x2, 0x1, 0x0, 0x9, 0x7fffffff, 0x40, 0x8, 0xfff, 0x4, 0x7, 0x6, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x3ff, 0x23c3, 0x0, 0x6, 0x40, 0x6, 0x7, 0x7, 0x7, 0xed, 0x1, 0x3, 0x1ff, 0x80000000, 0x3, 0x3, 0x1, 0x10, 0xfffffffe, 0x0, 0xa7, 0xe, 0x80, 0x5, 0x2, 0x1, 0x8, 0x7a, 0x0, 0xc4b, 0x24, 0x63, 0x9, 0x800, 0x3, 0xfed40, 0x3, 0x11e, 0x7ff, 0x5, 0x32, 0x6, 0xffff, 0x3, 0xa4b, 0x1, 0x5, 0xb23, 0xfff, 0x1, 0x1, 0x9, 0x4, 0x8, 0x8, 0x7, 0x401, 0x9, 0x4, 0x6, 0x6, 0x70, 0x660, 0x3, 0xd5f, 0x8, 0x3, 0x200, 0x3, 0x0, 0x3, 0x3, 0x10001, 0xa5, 0x3, 0x80000000, 0x8, 0xffffffff, 0x5, 0x0, 0x1, 0x7f, 0x4cb3, 0x6, 0x1, 0x0, 0x6, 0x3a85, 0x7, 0xa, 0xffffffff, 0x6, 0x9, 0xe, 0x5, 0x23, 0x5, 0x96, 0x0, 0x9e, 0x80000000, 0x4080000, 0x1000, 0x4, 0x0, 0x10, 0x7, 0x401, 0xf046, 0x19, 0x5, 0x2, 0x4, 0x9, 0x7, 0xfffffff1, 0xffffffff, 0x1, 0xab7fbaaf, 0x2, 0xb4, 0xffff, 0x80, 0x2, 0x2, 0x6, 0x20000000, 0x7, 0xa, 0xfffff2ea, 0x3800, 0x0, 0xf, 0x9, 0x9, 0x3, 0xfffffff7, 0x6, 0x4, 0x8000, 0x7fff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x401, 0x7, 0x329, 0x4, 0xff, 0x4, 0x3, 0x6, 0x0, 0x1, 0x6, 0xfffffffd, 0x3, 0x6c99, 0x2, 0x3, 0x2, 0x89fd, 0x7, 0x68c109f7, 0x5, 0xfffffffa, 0x0, 0x39a703cd, 0x3, 0x0, 0x800, 0x4, 0x1, 0x0, 0x8, 0x7f, 0x4, 0x100000e, 0x7f53, 0x1ff, 0x5, 0x2, 0xd, 0x8, 0x2c69e094, 0x800, 0xffff3ec3, 0x3, 0x3f9f, 0x0, 0xedb1, 0xb, 0x8, 0x0, 0x4, 0xb, 0x3, 0x8, 0x1ff, 0x1, 0x4, 0x8, 0xe, 0x10, 0xffffffff, 0x9, 0xe44, 0x2, 0xda, 0x5, 0x0, 0xfffffff7, 0x0, 0x0, 0xc9, 0x7, 0x10000, 0xd75, 0x80000001, 0x7, 0x400, 0x5e, 0x7fff, 0x4, 0x7, 0x800, 0x4, 0x3, 0x6, 0x1, 0x4, 0xfffffffa, 0xffffffff, 0x7c, 0x2, 0x9, 0x2a7becf9, 0x9, 0x7, 0x1, 0x5c8b0e92, 0x3ff, 0x40, 0x9, 0x5, 0xfffffff9, 0x80, 0x7ff, 0x2d, 0x0, 0x8001, 0x7, 0x101, 0x1, 0x5, 0x6, 0x2, 0x5, 0xb72, 0xfff, 0x9, 0x7ffffffc, 0x100, 0x6, 0x1, 0x15, 0x2, 0xff, 0xbb, 0xa55, 0x2, 0x2, 0x3, 0x2, 0x800, 0xf, 0x6, 0x7, 0xe4c1, 0x0, 0x1, 0x5, 0x7, 0x2210, 0x6, 0xda, 0xd, 0x958d, 0x8, 0x7, 0xffc, 0x2000000, 0x9, 0x3, 0x67a7bb72, 0x5, 0x9, 0xda800000, 0x9, 0xfffffff4, 0x3b1a, 0x2, 0x9, 0xb, 0xffff, 0x4, 0x1, 0x6, 0x2, 0x10000, 0x5, 0x4e3f, 0x9, 0x4, 0xa3, 0x7, 0xbe66, 0xfffffff9, 0x1, 0x8, 0x5, 0x7, 0x0, 0x0, 0x8, 0x8, 0x3, 0x8, 0x80000000, 0x7fffffff, 0xa, 0x80000000, 0x6, 0x8ea, 0x101, 0x8, 0x1, 0x3, 0x4, 0x9, 0x80, 0x1, 0x4, 0x7, 0xbd5d, 0x0, 0x2, 0x2, 0x6, 0x80, 0x7fffffff, 0x9fe2, 0x4, 0x2, 0x3, 0x400, 0xfffffff9, 0x371c, 0x6, 0x3, 0x3e, 0x20, 0x8, 0x4, 0x100, 0x5, 0x3, 0x6, 0x4, 0x1, 0x3, 0x2, 0x1, 0x0, 0xc, 0x0, 0x8, 0x200, 0x2, 0x200, 0x0, 0x1, 0x4, 0x80000001, 0x0, 0x7, 0x5, 0x4, 0x7, 0x4d40, 0x4, 0x80000001], 0x6, 0x400}) 9.35521826s ago: executing program 1 (id=5654): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = dup2(r1, r0) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r2) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004000) ioctl$DRM_IOCTL_AGP_RELEASE(r6, 0x6431) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000640)=@gcm_256={{0x304}, "55b2bfe456f65ac5", "94933eabd65daad540f97d075c35dc3d0c5423c36a5a29e09986c18918a9d481", "ea6eda2b", "a3df11c174fa26bb"}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 9.253014294s ago: executing program 5 (id=5655): syz_open_dev$media(0x0, 0x1, 0xc4000) io_submit(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x400000000002d5, 0x2, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff0, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a6, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x7ffffffffffffff, 0x7, 0x7, 0x81, 0x100, 0x5, 0x931, 0x1000000000000004, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x9, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x1, 0x4, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x9, 0x401, 0x8000000000000000, 0x7, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x1000000004, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x7, 0x406, 0x3, 0x6, 0x4, 0x5, 0x2000003, 0x43, 0x7fffffff, 0x7, 0x11, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="8300000000002000128008000100736974001400028008000c000000008008000300e00000010000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 8.715085831s ago: executing program 5 (id=5657): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x80000001, 0x4) (fail_nth: 2) 7.097267621s ago: executing program 5 (id=5659): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x27, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4008059}, 0x0) 6.853489861s ago: executing program 5 (id=5662): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x3, &(0x7f0000000440)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x9, 0x3, 0x6}}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0) r8 = socket$inet(0x2, 0x802, 0x1) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newtaction={0x48, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r12 = dup3(r10, r9, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) 5.773798439s ago: executing program 4 (id=5664): socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003, {}, 0xff}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0x6, 0x400, 0x3, "54d208457f0b0000000001040000000000f700"}) 5.657817482s ago: executing program 5 (id=5665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030b000000000000000006000000791dc0d16c299a564aa3e538b5b08ce4a0dd68c4504d75c01950e01b4902646911e8da7fa7167f60afdd5b32d841c8e41e4dfdfc9f5dbbcce678a9e8dadc9907f5cfac3c8e982101792024a04cf171c8da8dc3018ff82d1390b656e022cf9229ee33284f05705a8e2bae70923828ed883fc2cd8ca3a28d46292ab9339c6149416eb08012516a7487d9f3130fcc2961230164853f190147be5a5d71185b8243f61dbfd419e48169f5bd215495d44cc79f9660c9c59801aa9946e2256996f9d2727582bbeba031d13e01"], 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup(r3) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000280)={'syzkaller0\x00', {0x2, 0x4e22, @local}}) close(r7) mmap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x4, 0x40010, r2, 0x34e64000) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) write$tun(0xffffffffffffffff, 0x0, 0x0) r8 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r8, &(0x7f00000002c0)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="c74c4e5782b74b96db461cdcf86ba260d5ad6af02801d6c5496d672298765bb1923fecaa5a8575b83d40eaf9a8987dfbf05e2164744fe6199643750dae444e4ddae3d64d150593cefef4f3bd4192f9ef3b99f6b8a4c51e8b14a51f6c3661779b0db9cc416f6fe7aa9057eef496aef3573f188c9993e556e3afa3d92a9b11c1025704e2e027831bea8484b516411a67e0a67563bc68bd4b", @ANYRESDEC=0x0], 0x0}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) copy_file_range(r4, &(0x7f0000000100)=0x3, r9, &(0x7f0000000200)=0x200, 0x4, 0x0) 5.633591479s ago: executing program 1 (id=5666): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x1, 0x3}, 0x18, 0x1) landlock_restrict_self(r0, 0x9) prctl$PR_CAPBSET_DROP(0x18, 0x7) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x572c, @loopback, 0x401}, 0x1c) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x40, 0x6, 0x58, {0x58, 0xb, "958e9a296c0ee1ce7238a9b6c5facd8fed1e0576eece1c55a89af22f1341ced2a122aa1b47ea6acabb210a3e106ea1cb6323ba65e1eab3cf446192d7e9f9d87ea03a3cfe671cf5e41a9b74a0e7e45f4d15073af3e988"}}, &(0x7f0000000200)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "d987281f41b12356ee97850f3e0f5edadd9dc12394dbf2770b8b7b56690c85d12c1394d122b6ead3d359ed5574d39fe91805f6038207994734846517629ffab5b07e1cdc620a9ffde458bf5c08415cb459e3fb4e4a6ce677bfc065be9b"}}, &(0x7f0000000280)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0xf, 0x9}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x2, 0x3}]}}, 0x0, 0x0}, &(0x7f00000009c0)={0x84, &(0x7f0000000480)={0x0, 0x17, 0x7e, "74933981c73153a51ec959333dc4cfda9306a9db357461318653c1e185af16cb0da3b430fc638a9ab3d374fe4cb95fbf582df340ef9455cec8af2ab1d9c5580008d85bbc9e9f01441c75a707104b7780ef0a8d80ab770d199dee3ff6b145740596b71857918ea2dcc93b308d5bcec2bf185f0056a576793c44d673ea8119"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1d}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3a}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000600)=ANY=[@ANYBLOB="20000400000000100104"], &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "e815"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f0000000800)={0x40, 0x19, 0x2, "72ea"}, 0x0, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x40}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x1}}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000302000000020397a100ec63ef3a3768c11e18947322bd021edb70fce721678e"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000940)={0x24, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0003d9"], 0x0, 0x0}, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000100)={0x800, 0x8000, 0x5, 0x2}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="010028bd7000ffdbdf2516000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x20000040) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2) eventfd2(0x9, 0x80800) socket$inet_udp(0x2, 0x2, 0x0) 4.930602099s ago: executing program 2 (id=5668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x6}, 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) timer_create(0x5, &(0x7f0000000100)={0x0, 0x40, 0x0, @tid=r4}, &(0x7f0000000140)) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000580)={0x2, 0xfc}, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000071, 0x0, 0x3ff}]}) 4.601534845s ago: executing program 2 (id=5670): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/172, &(0x7f0000000400)=0xac) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r2 = syz_clone(0x40200000, &(0x7f0000000180)="c0d7ed645d4c636e87a701509d5a4fc9a6dc5801d221271f4efaba24d4bfa03cb2ecd148aba2d592fd6beff6c22bc35e8eef63a07ab61174e109", 0x3a, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000500)="b2c0c7d240b4564b714db363c48a59384769c80aa6fccbdad8d4c2fd29a06729d510a6a974120afa6b37e82d5ae2bf08be141d0ed2c45330a80009e99e280d12fd3a1242c3f76dc9b0d80fb88bbffe02ea4035b47ccda9ce0b60ab72e3aa940de630e735a5445e1b91a6b0f5") prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getitimer(0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r5) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp-reno', 0xa) 4.107348382s ago: executing program 4 (id=5671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 3.62160297s ago: executing program 4 (id=5674): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) r3 = fcntl$getown(r0, 0x9) sched_setscheduler(r3, 0x3, &(0x7f0000000040)=0xfffffff7) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81b39d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x9, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0xd5, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 3.608874999s ago: executing program 2 (id=5675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x488, 0x0, 0x8000000000000000}]}) (fail_nth: 2) 3.479956812s ago: executing program 5 (id=5676): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_deladdr={0x74, 0x15, 0x300, 0x70bd2d, 0x25dfdbfc, {0x2, 0x8, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x46a0572c}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x3, 0x1}}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x500}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x40408c4}, 0x40000) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0x6, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x2, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3fd, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x7, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0x2c1, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x4, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x7, &(0x7f0000000240)=0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000961e410b1134200557b0102030109021b0001000000000904"], 0x0) 3.228562825s ago: executing program 4 (id=5677): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000100)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8083}, 0x4000800) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.997721346s ago: executing program 2 (id=5678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x3ffd, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x10000000, 0x0, 0x400}}]}, {0xfffffffffffffe24}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="080006"], 0x24}}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r7) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}]}, 0x34}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1c, 0x4, 0xffff0000, 0x9, 0x820, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r9, r12, 0x25, 0x4}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe4, r8, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4048084}, 0x8000000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0xd0, r6, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0x51, 0x2a, [@mic={0x8c, 0x18, {0x308, "321cf7ed1090", @long="ab52c7ba208e1f2f6062dc4ac83779cf"}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x8, 0x0, @device_b, 0xfffffffa, 0x910, 0x3}}, @ht={0x2d, 0x1a, {0x61d2d16f1389f3cf, 0x0, 0x0, 0x0, {0x1, 0x3, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x800, 0x8, 0x3}}]}, @NL80211_ATTR_IE={0x23, 0x2a, [@ht={0x2d, 0x1a, {0x0, 0x1, 0x2, 0x0, {0x0, 0xc, 0x0, 0x322, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x83db, 0x7}}, @challenge={0x10, 0x1, 0xd7}]}, @NL80211_ATTR_IE={0x26, 0x2a, [@mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0xad, 0xd, @device_a, 0x7, 0x1, 0x8}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000800}, 0x480c1) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) userfaultfd(0x40001) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564dff, 0x0, 0x4000000000005}]}) 2.304588255s ago: executing program 1 (id=5679): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e1a051f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c00", 0x2000, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1, 0x0, 0x0, 0x4c890}, 0x48800) (fail_nth: 2) 2.241075509s ago: executing program 2 (id=5680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00767b08000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x804) (fail_nth: 2) 1.907570165s ago: executing program 1 (id=5681): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$key(0xf, 0x3, 0x2) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x6]}, 0x8) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000800)={0x20, 0x4, 0x0, 0x65, 0x1}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000440)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000840)={{}, "8c5e6eb368a124637adacefe381523e6e51a62b83ff288e8df748011bc1e82a7852f101335d197191468490174b164aac6ce7acff16a9ea57453654d2e91bb62753f1b8e5706642d2c47f39693891b0e2cd3f3ca76cdd952ad40a12f4c16ab6b354d504f84c02602c3671a324bf7b03c60020913e754dcaf27541df2c1e28277e4043d1002ca36233b3e17ed3479b563d971c59f9ddfaa21d3129c667365e91d9d10b1d7188afa3b885cc16ecc08806592ca34a71f7f9be01558ccbcf8f86e543fa92ac1d619f312b1043ed6028422a547188dadf60f534020ae69fae1fbfb22bcd35b56aa7494218a4a4c8345d67f931e24e5084ae659576ffd63012a3528074b374e6206ac8ba405899ebf2f128c773b619859874297e6b2d797de2e7ab674dfe533cb0d290dc275e460ba96d07be908611fe1b9d787e5e78b6fe55c0d1d47b5f3aa838bb8ab12e09616c68cdd639ea8c1691f61014f937f7ed7c9510b05518c3dd1c2238dc6cd7772c8f6379ba0c307e013c4045cef8a39b85d63310851a0e85b9ceeb768f72816e8ad106972b7ae221e79a3cea0f6847437bb75caea80b32038549d44ca0c45000c5655f42d412f5da63415fb7279cfbf12b5bb95ea271edaa6d2b0938ded2903b78be32983cfa289f6bb9e2d717d4aa284daa48767951407c02845cdfe3cbe61e5fe681166251543219212487e3f53883ad79069f5394e3e58203425954a8bdeef95acc26ac4ae4ec55ca44657fb4a6671b0686a758ff631d2b4658acdae076aed4cbe581ff9f9bde8ae3aa1dad4d134d271facfd978206bc8c3a8686169d9cac36a079020a3ba05a2e8feffabd7f8873671d2edb44feffd1774d1c08665c96e4d7d0fdf75f1eb6ceff510b5ab76a541f7838415b94326f217f448959c7503f383bad11595b3186e632b8d59560e6b7b7c36dba224d52dee3eacd0aa33ce22cb68cd4efee5f8ac871303cb6a1d1cb985a13ca26ca099777caef5b8d621753c36da4401b346278820e4baba046f3d147d20a94dc5acfab3a6c706bd696394b989ba710e1d3dca6f85cc5fc525782010d1fe4c71cdfa84c226f4f8ab9d43b9c7af4aa9a498ea5bcc1872ff40b4c17560e4aaac8da431be0457798632bd396aad4fa448b2ec8c1bd60ebf7faa74de0dceb6d3e82eba5341b5cd193f58ae35fc5e1b8156b6d04e6d974551d00e8ec1b8d8d62dc5953db827eef25305eeaa8a50dc8125f6a1e4792b8a509571fc14576c17a1052cab8a96e9d0d09fba033ac26dec89a2b11a5490a34b8812f8ad1f1c825d8f626916de33dd680b19e7b7460468ee029242c2b905c37eee575e0dd2f9c64da1a3311f59043785e958d6265931eb942c4d98733d0d64a0588f72fa15c6acaff5933e760904e610e4bcd27123fc9854fd2a3113bf7d5b1cd21f6ad55e60e809f0442f3cf99df0eaa8da6aa49031bd201c2753419e0f2ae1685a0af31d161279da65053e8fc0083673eb2292cea1ea79176f8ed61073d348fa1217b4a43a840c312a48cf1982a1229736044da9b09c6fb3b43bfa95df6984d65f2c88d7ee888599f311bfac0a9dabef6685f6a3d94c97c86cd98700026675b44ef74c46a6d5b64e328d6117736f5d5c05fafcc9c25fd605edc384cb848fa7b97fd95bdd0f93a1bffb9d80f4cdb10f144bba600e89f64c20fa6af93782eee20bf417e6621dfdef2573642f7608f5c19563291e9337c3349b1fb311944aefa374df698bd1d0d62c8bb0d1ad2d813356b74cd708978ac99f32b065530bbd1c5574104a2bc8316814d03306d33794aa495b7ef014082c83b471be922d21f24a78feaba5d5c2adeb42c258cac0e13887a6905e13e015935348541f66b984b648291a2da627020bb66799c1bd54820b277a0f01d0811838f30ec7a338660ce4f227eff6fc29c5cac06e6d002609f519a29079cf0ac9cc91b538cf4297aaa907d6b61deea639b7193a304275fa7eb8bf06beee3a81b586b053255a96e47aee324a7d1cdcb06fdad79015aaed1c7dd80c3a5cc0f9d78891da6eaf2315b16dcf6164f660e5594921c761cc7ae58fa8b25f71e03611e2c271b3f97f151c1448a9a2934656075f3d76004e643ac8cb3da77e1bc0432fe2a44e3ebc60cf3dcb263dd1ccbb69affaf72519e759029bc74486e926276e5bc79030301f6aa612f6bfd9fb1298a1b98cc20ecf7a2557a3ddeb32597733d1d5d1ff06ad4117905acc08cd46d8df36035928a7c14249dc929570bd6bc72de6ed9fc9249a5fb392cbd47cd1de28f99a7ad72ee10042e452f6df3204fdcf9a01599a8d5b83ebdd96c141c5191ffb0aea83c328dfde0a909dd581276ab23d49a2408174dba29251a0d04b0bf28c0701d006ee25ef0abd854fa366fefd9054e1b4212a591f774744cae6e7b15d429111bced82af761a5f07a234d45d776d0c535ce5dbfd236e5e2a39546d8faa18d5252e2e5d2869466948b1a27d2cbc18fff04b51032900d5d75352fe4c96c23625d53f1c8ac0b3e1e07b5b6cbebff3eee0e007231009801b6608536d94ffc775cb321b86422aad2d2044dd0a426dc8cfbca8fccbd820fad10415440ab4713621fcec133a61a2cfdcdacdc86207f989009c8f2c0d0bf0b3716174f942e6a12dd9c03b3d301967fb8cae30e7989f0c117c2783788a8fe05b65b4b4a2e52401244e75ce46a72f5c3a47c6ad35608223fda0c58b69fe64d8bb33275eaf038e06ddb3db58774968838091092c135d24ce1619061702a188075ee3188428880973e3efb744d8b14bf023e0e5b544f0efdccaffd20ae0c6b64e402c522e493ade7e654e232942031f93165d9fa09f33d2254fb0d7c460afe3e3d9bc6cc4df961d6c5e06961ccdfbc0dd0191eb81416e7c25a3fc93e6ce16a51c9a219103900cd98e2058e540c5616d32d0e2e8e1ede215465e38550243fe49b3dda7ac3560f253eb0f5b1513af5c094e2148363fdd0f485bef52e13f1bf6deafe18c3ca90a938845ca56bc063f2605300a9aca6310c0876c8a53012e9705c049981af65442de5778082415c93d054d9db0d58a0b577fd0565a9c8246a317a6350a7c5f560801694f69d580fb8fc2270b9afd7c03f145734b71a5e0c14516138c1ddf449cf7e8daf6ac3e13a091dacf6907a0c76b7b08ba0e70b28ab89e723ea6730ebd7b7785b608fbc50abd8ea4ee962c4abcef04cb614930a298c66ac477fa35a9af4071ea3ec4b156b1a7ca4ed4d3ee9642bb6745941bfcb3e84b3df754e05548d5b5672820d967350d50d350c61b36fa283338656a51fb2cab4225a15e90a12e0c21355a72bf5f335d8431a027b2fa47ef5dd8de1e10030f4b6065b2850924f89c883e2aa60a921527205ca6b79291c2079815c9527c34ab37c32a502f854c71a31dd1a5bf4ee256851db5d92f6d77b95fd45f854b1f47c4cc11941526476fb4ebce160cf107785688958104ba7512e44927b910fbf34f0665ac099ab3da7dfb727646d7e7a12531e01ef15f7d0e18cc102b3496f5eb72d4c28c2b21ba2bcfbc546a50a009de5ce681d060cdcf79ed3abcf2dcf9a9b3a9c15173bcf37daac954a96cf392d13ffc0cfb0f0fd247f78b3fd5c29e95b955deb86eb449535633b7071a6b4371b8780bb4f7c0fc88e778c03bfe1aa65705ebd93a40ee16899f06488829726e17e3cfa01f56ee45443475ee40cfac550880c17037f7bd331484006e660bcef3f64b7d179a2b195b2690869a0f7adef7bb4f490726fbf63701c251b422c698a4ef5772d419ebfc259782ff6834529000e6ec1e863759c91cfe8d0d1523eec0c7b2705b7b5cd87c6d9d644790a5f4c9de5e68e1595a95a48c60b49c024f8d54ba4155c6490c0ca4d30ecbbe75475f8236cd4471f527607823b1a916280f2052098b0ffd0f879dff9178be6a0159c8ace921f6647bde2d24e80602d9f64c90c5f44648128929bde036e3ff17a746579ab167de42e4ddcd4126225e65d7d0dbcdab788c6593f158ff8f18bd5dd37e729573fd7f292b966d96323b2f5b877eb775a05c6001b1e3f7ce93051fcb5104782d3ecf60137239e5c0b2bd3f691f9d81409693cd321822dfc20c08e87296b122731488124730ffe56810b006e6cf70c4e1071795b77e1476ce47fd1df94cdc56fffd0f41529f805b119e8328232e745588eb73a64c52e4bb8a6a44b087550581c79ee6c2746bc7bd3d2ef3a6883f2d2d32f38469fbf6807af24b43f2455f09e7a31d0dbe8a7180d036f40294172f18653027f61b26c87b451551531f20cf87e37fd855ab57c2dc983115b8c02d1fec28deb9da286fba0374ae29a27c15bd407449d5f0399818eed6c67be9bd7c131abc9e7199090474c5fbbfa0a4307731e7fc0f64a064fe3a567e832049448c1928e8c2357ddcdb0fac66cd6302b51c954471936f490f09c20256b3c210afe91ffa716bbf0f0f5d1f6e49f592fab4cba9f4601fd550e8abea86d72815623b9f79b11c65e4cd011dfb28bfe2f1f829c721cd8a6b380c036ef1be038d58e6046581754fc416e1dfe272f56fa055d2f91664fd20aa906b35178349a1ef9fee451fee60d475bee963d90e96e01863bf7a4197ba0b25ed43cd7021f177b2f30d95a66825a28c93757f93a35d7df5ce7702fc4b81a966171415a25d21446214de613544be47ab3248b126b49a5806cf79ff51d314b5063d21bc81c950a8000fdd3f7e644b952e8b2bb782a52592a9d546a732c3739cf36bb50bfe2bd53d1f7149ba5986523a069b739e7386d7550ffcdfb445e5e2d5d2e32ce158ba3dd14fd366dcab69260966d9b85b98337fe38d97c128572f779523d39d52f43aedaf6f17f1608c9b84c20b9762b57c9d42866641d2c00f1eeb47906364f62cb369bef21d2054b045d8432ac7980eb451e98d969278b2556afaa28d9477f5521b57b6225d953c18b3e63db73e5d9d4d39620caef88761dbd110d3e8fed03194d9f4fff1c86aa549b25c9b123d82fa4c8598c0beb01106e183be24a09cd5c71f13ff6e1b79f69b3170a10994d9bd60678619acafa6c466b63ac585e691f5bd1cee71d887f975013f7f0146a98ba71cb2024442f34302239e884cefb33b4ab52902755c87ac695ed74b29a3c4ea87dbd37971ea8f72916a89e16ad2135b46ca60501f096ac7bd0dd4320dc18ead0c9c9c5b2eecfaf14f7b9aecde70df561350748609465e77543d3c71ec1606bcdca2c6ba36ad501448689274979426abfb61efd21bc6a7b0855fda3807ae7d0d404006d81a3622f5d33deaf5b76cb274d6a2d1b6a89d4fa74261d14fdc66629da3d414c0644c491c1260e60d14051307270987d4108a22103427db8ded76b8b5ffed2dbd98d6f0e9f232c7173cc7d41f40f1ec0b892519a4b4778856d3833b817bb73a1483a0c4ee720dff2f914c9aff0ed5e3b128084b9debe454160e3a44d0f4cfccb2ce893b4773b798f98a2634ec58183ea479f63601d8a98cc32ad88328bbdd5986806a2afeaf66aa58f48fbad8ff2a39f5bed3ff6ed3c6ae482916045b0c6d7efba925d8e3c70ee0e8e714feb0698e65ed042efbd831cee0e5810cfc0a0e95f59a19b31ba41f8701af0ddf82bcc7dacd9cf7551e99cea1efe5af9d2f9a496fe7c7282bc28764ca44bc0dd992a9ef98fa43a9690988d17ea710fe1d466acf6fd55099353410cf999149e4ff3900ef970e026fd4643a7d9ffc6ad01f9d76bda4a6ca5a76cbf5d14345c7d47ed91dac2ba1967c8bf4113da277a05b678e6d2df442d5981fb8915609e183f86117"}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) getpid() 1.259833173s ago: executing program 2 (id=5684): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000207e050e2000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) setpriority(0x1, 0x0, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0xdc0abf05cf659433, 0xffffffffffffffff, 0xe00b2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f00000000c0)) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x8044) io_setup(0x7d, 0x0) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') getpgid(0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "86352346"}, @local=@item_4={0x3, 0x2, 0x8, "b1cece77"}]}}, 0x0}, 0x0) syz_usb_connect$uac2(0x6, 0x7b, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x80, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x1, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x5, 0xfb, {0x8, 0x25, 0x1, 0x80, 0x30, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x10, 0x7, 0x0, {0x8, 0x25, 0x1, 0x80, 0xe, 0x2d}}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000340)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 1.256870795s ago: executing program 4 (id=5685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0040d07, &(0x7f0000000040)=0x121) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r9, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105000017006195e2fb0002af5bf7f459"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 516.133934ms ago: executing program 0 (id=5687): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) acct(0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={r3, r4, 0x1, 0x0, 0x3}) 356.53223ms ago: executing program 1 (id=5688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x491, 0x0, 0x5}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000005c0)) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 347.36127ms ago: executing program 4 (id=5689): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001300)=ANY=[], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000001080)=0x91b) read$dsp(r8, &(0x7f0000001300)=""/4096, 0x1000) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$netlink(0x10, 0x3, 0x2) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 236.673919ms ago: executing program 0 (id=5690): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x4, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x20) r3 = socket(0x2, 0x80805, 0x0) mkdir(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r4 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r5 = dup(r4) mount(0x0, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000340)='smb3\x00', 0x10000, &(0x7f0000000380)='nocase') ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000019680)) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f00000196c0)={&(0x7f0000ff9000/0x4000)=nil, 0x8, 0x3, 0x53}) bpf$TOKEN_CREATE(0x24, &(0x7f0000019580)={0x0, r2}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000195c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00'}, 0x94) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000019540)={r6, 0xe0, &(0x7f0000019440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x18, &(0x7f0000019300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000019380), &(0x7f00000193c0), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000019400)}}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x6, @mcast2}}, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}}, 0x108) 156.041252ms ago: executing program 0 (id=5691): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000380600fe88000000000000000000001c000001fc0100"/51, @ANYRES32=0x41424344, @ANYBLOB="e40000009078000013123432d50049a01b5156c2f44c038e91ba1d12d2b653e0c9d32072c19dd6ca814b7d7b"], 0x0) syz_emit_ethernet(0x142, &(0x7f0000000b00)={@random="205ed234b49c", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x2, 0x4, 0x12c, 0x66, 0x0, 0x26, 0x6, 0x0, @local, @local, {[@rr={0x7, 0x1f, 0x69, [@remote, @local, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e23, 0x4e23, r0, r1, 0x1, 0x0, 0x1c, 0x98, 0x3, 0x0, 0x3ff, {[@exp_fastopen={0xfe, 0x14, 0xf989, "5b7a8c1d0400000000000000f99e3aae"}, @mss={0x2, 0x4, 0x1}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "fb2846dc4f84d60a8c8764bc89f3fc15"}, @eol, @generic={0x9, 0xa, "fa43ccbbca2c512a"}, @mss={0x2, 0x4, 0xb56}, @timestamp={0x8, 0xa, 0x81, 0xffffffff}, @exp_fastopen={0xfe, 0x10, 0xf989, "4d5e2df6f8f20dce5843db42"}]}}, {"2e74b393102cbbc177478849cfaf514e0568ec7b86aedcd705924253d9fbd8916c869cdf741c731e2748ac96ae0727e90dc230a2816eb4638795e8bcddcde9d7cacd6f075b9094de8e4828a5e8666dbf2b3e65bb067510518f24f4b9a1ec92bb7604e81632cbf999fef6cab088b421784cc7986549bceaebb408aef04b7d0a9691858a49d55c53b5"}}}}}}, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, &(0x7f00000002c0)={0x0, 0xbbd7, 0x40, 0xfffffffd, 0xe4}, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r6 = syz_clone(0x18200000, &(0x7f0000000580)="dd17b5a9bc271ac6bff9922674916dc913d0fc4648f937b3c9694bfc2a13e0b0d56fabd949e7441768efed65cde205cfe2c11881654a36cc10700d403a6baa73aa73b1fe45ed136f6e50ddba7c9142fde1e0db3c0a8a66a6b1d8d54c75229dc4a8f0af7b30ef12d701bebe24cb9d4d3343b08c990a549618a24a8951aa9df5d54fe324ffc707fa954f5c1f84e4533a79ff74dc5d8ea1e15fac0d", 0x9a, &(0x7f0000000140), &(0x7f0000000680), &(0x7f00000006c0)="047be0a508f3fb1565f8ed576140b1037c584e3823ce7f7704c22f58cab985e100734f181a646df7e8c2c9b27c2c8f40b98c07c84377b2eac9c736159d083c8c87bacfec699ef4c1db7d3a407bd7ce13c204d3d890b1855932cd7350d3dc3839c442b5f44caff9d5d6bdf92e3d4d2c6174dc34953c10964d74260842852714a8eed44072835e383aba13983a3ed0d2363816ea28de29601ed683e34040aecc3deaa3ed9156477da174626030") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0x2, 0xffffff0a, {r6}, {0xee00}, 0x8, 0xe0000000000000}) write$cgroup_pid(r5, &(0x7f0000000440)=r6, 0x12) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='sysv\x00', 0x41, &(0x7f0000000780)='cgroup.procs\x00') connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x880) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000080)=@generic={0x0, 0xfffffffffffffffc, 0x8}) 142.537209ms ago: executing program 1 (id=5692): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f1"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x0, "", [{{0x9, 0x4, 0x0, 0x4, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xd16e, 0x0, 0x1, {0x22, 0x337}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb, 0x0, 0xe9}}}}}]}}]}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4(r1, 0x0, 0x0, 0x80800) r2 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000400)={0x14, &(0x7f0000000200)={0x20, 0x23, 0xf4, {0xf4, 0x5, "7540953969ff3fa02beda421ce5f234118ac5a328d16adde3001b262f34d6cb8f7df0cfa22b4bf2ee3f6c25f8d51f230f7e9722755b2c030038a0d0a184f348f6dd3719ca7f2e18831c93191261aa0eeb0402ebb289493b5400f05217d12082552df6d6ddf7bfb8e8f0c84cbb977297becfb499df3d903aed2144261a19f08092a225c35cde2fadddab4f5fce6a62db973f7b5fd213ba55e0b4cb3d73b5b3ca539d7d19f1bbf987668a240161367c7dad2ec4d8d3b1d189acf27df991a859645c7d31c8f17a0e0a570e12d3b2a59a9c7b7790bd3e598f36a507607c95f2643874404d9114205336ee92b3f1c9b36949c1606"}}, &(0x7f0000000300)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "60592b3f5f0b0523251c74a4e0c5072acb4baf9a8d9a07d5dca5d5223400d0060538369d975b5a543e47953ac7c435b91a7d6f757e026ae755f39930743ab194f6e6a0580e4f91bfd29abf9074e900a8d78e4af98afb2f418c160f9cb21a07fca3b6f9c38436c7d9dcf19506d52d37a1183303244ca7f508288c721b031a34e00fdb8ecbca67b83e9edcab69f118dd0675b6bbd12b3d97b2d10cc9c1406dc85a0b3a20afee82bd0dcc5b04fb0b71d621c96168ced0381163993c660c051e7148"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x40, 0xd, 0x8, "df7c7b3e055fb15f"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000580)={0x20, 0x81, 0x1, '8'}, &(0x7f00000005c0)={0x20, 0x82, 0x3, "6fd6bc"}, &(0x7f0000000600)={0x20, 0x83, 0x2, 'r!'}, &(0x7f0000000640)={0x20, 0x84, 0x2, "64e8"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "bc311d"}}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) preadv(r3, &(0x7f0000000ac0)=[{&(0x7f0000000740)=""/182, 0xb6}, {&(0x7f0000000800)=""/91, 0x5b}, {&(0x7f0000000880)=""/1, 0x1}, {&(0x7f00000008c0)=""/14, 0xe}, {&(0x7f0000000900)=""/147, 0x93}, {&(0x7f00000009c0)=""/120, 0x78}, {&(0x7f0000000a40)=""/111, 0x6f}], 0x7, 0xffff, 0x5) 103.770233ms ago: executing program 0 (id=5693): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1086dd69000000001406fffe800000000000000000000000000039fe8000000000000000000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ff79aa371c5ff29038d8b5cb2fe421f116c520d91892fb5800f9cfddd173f710b71479a4fb9dcb1d109a86a4792467b06e9a366b9c37b3ef581403af53eabfc34b9876a2c61c6d2e781f947c36b038448130fce99902fdd831b01ed783f437a28caf938acc5285f1ce28aacc25569b3cbe9288d85e8f3e6738b14986a15069f8f8378484eedda5b397ccab5b2b7ad37a4644b7347c168e91dad69c5ebefb50d31dee95bc8ca191fad43496633d32f154eb428204ddde05bfe5411ea7c6fe0be7826b64a2b438fe86a3aa81595cae7c50493d4429d0d2"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) 78.309026ms ago: executing program 0 (id=5694): syz_open_dev$media(0x0, 0x1, 0xc4000) io_submit(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x400000000002d5, 0x2, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff0, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a6, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x7ffffffffffffff, 0x7, 0x7, 0x81, 0x100, 0x5, 0x931, 0x1000000000000004, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x9, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x1, 0x4, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x9, 0x401, 0x8000000000000000, 0x7, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x1000000004, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x7, 0x406, 0x3, 0x6, 0x4, 0x5, 0x2000003, 0x43, 0x7fffffff, 0x7, 0x11, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="8300000000002000128008000100736974001400028008000c000000008008000300e00000010000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 0s ago: executing program 0 (id=5695): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf2}]}, 0x58}, 0x1, 0x0, 0x0, 0x48084}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100"], 0x18}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xeffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): _ip_generic_getfrag+0x10/0x10 [ 1175.332480][T24560] ? ip_dst_mtu_maybe_forward.constprop.0+0x3df/0x750 [ 1175.332510][T24560] ? rcu_is_watching+0x12/0xc0 [ 1175.332530][T24560] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 1175.332556][T24560] ? __pfx___ip_append_data+0x10/0x10 [ 1175.332578][T24560] ip_make_skb+0x28b/0x310 [ 1175.332599][T24560] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1175.332620][T24560] ? __pfx_ip_make_skb+0x10/0x10 [ 1175.332646][T24560] ? udp_sendmsg+0x171c/0x2720 [ 1175.332663][T24560] udp_sendmsg+0x171c/0x2720 [ 1175.332685][T24560] ? __pfx_udp_sendmsg+0x10/0x10 [ 1175.332703][T24560] ? vsnprintf+0x4ee/0x1240 [ 1175.332721][T24560] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1175.332743][T24560] ? __pfx_snprintf+0x10/0x10 [ 1175.332762][T24560] ? irqentry_exit+0x24d/0xa00 [ 1175.332783][T24560] udpv6_sendmsg+0x1420/0x2c20 [ 1175.332800][T24560] ? get_random_u32+0x3fc/0x7d0 [ 1175.332823][T24560] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1175.332838][T24560] ? do_raw_spin_lock+0x128/0x260 [ 1175.332855][T24560] ? udp_lib_get_port+0x560/0x1b50 [ 1175.332874][T24560] ? udp_lib_get_port+0x560/0x1b50 [ 1175.332891][T24560] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1175.332908][T24560] ? udp_lib_get_port+0x560/0x1b50 [ 1175.332933][T24560] ? rcu_is_watching+0x12/0xc0 [ 1175.332953][T24560] ? inet_autobind+0x145/0x1a0 [ 1175.332971][T24560] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1175.332988][T24560] ? inet_autobind+0x145/0x1a0 [ 1175.333007][T24560] ? inet_autobind+0x145/0x1a0 [ 1175.333025][T24560] ? __local_bh_enable_ip+0x9e/0x120 [ 1175.333043][T24560] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1175.333059][T24560] ? inet6_sendmsg+0x105/0x140 [ 1175.333075][T24560] inet6_sendmsg+0x105/0x140 [ 1175.333092][T24560] ____sys_sendmsg+0x704/0xb70 [ 1175.333112][T24560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1175.333132][T24560] ? kstrtouint_from_user+0x13c/0x1d0 [ 1175.333158][T24560] ___sys_sendmsg+0x190/0x1e0 [ 1175.333178][T24560] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.333196][T24560] ? get_pid_task+0x106/0x250 [ 1175.333219][T24560] ? rcu_is_watching+0x12/0xc0 [ 1175.333246][T24560] __sys_sendmsg+0x160/0x210 [ 1175.333270][T24560] ? __pfx___sys_sendmsg+0x10/0x10 [ 1175.333296][T24560] ? rcu_is_watching+0x12/0xc0 [ 1175.333316][T24560] do_syscall_64+0x115/0x870 [ 1175.333334][T24560] ? clear_bhb_loop+0x40/0x90 [ 1175.333353][T24560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.333370][T24560] RIP: 0033:0x7fc42c79ce59 [ 1175.333384][T24560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.333400][T24560] RSP: 002b:00007fc42d651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.333417][T24560] RAX: ffffffffffffffda RBX: 00007fc42ca15fa0 RCX: 00007fc42c79ce59 [ 1175.333428][T24560] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 1175.333439][T24560] RBP: 00007fc42d651090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.333449][T24560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.333459][T24560] R13: 00007fc42ca16038 R14: 00007fc42ca15fa0 R15: 00007ffc0cd879a8 [ 1175.333475][T24560] [ 1175.824849][ T804] usb 2-1: USB disconnect, device number 124 [ 1175.827429][ T5718] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1175.861833][ T5718] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1175.872153][ T5718] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1175.879432][ T5718] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1175.887887][ T5718] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1175.895375][ T5718] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1175.905346][ T5718] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1175.918618][ T5718] cp2112 0003:10C4:EA90.004D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1175.951925][T24564] udevd[24564]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 1176.028198][T24567] No source specified [ 1176.033885][T24567] loop6: detected capacity change from 0 to 2640 [ 1176.043816][ T8724] buffer_io_error: 10 callbacks suppressed [ 1176.043829][ T8724] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.044501][ T5718] cp2112 0003:10C4:EA90.004D: Part Number: 0x00 Device Version: 0x00 [ 1176.049935][ T8724] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.073836][ T8724] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.082612][ T8724] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.090703][ T8724] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.100047][T24567] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.110047][T24567] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.119640][T24567] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.127756][T24567] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.135788][T24567] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.146423][T24567] ldm_validate_partition_table(): Disk read failed. [ 1176.154238][T24567] Dev loop6: unable to read RDB block 0 [ 1176.160196][T24567] loop6: unable to read partition table [ 1176.166051][T24567] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1176.357010][ T29] audit: type=1400 audit(1781694124.372:1962): avc: denied { unmount } for pid=24092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1176.408257][T24569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1176.461451][ T5718] cp2112 0003:10C4:EA90.004D: error setting SMBus config [ 1176.496956][ T5718] cp2112 0003:10C4:EA90.004D: probe with driver cp2112 failed with error -71 [ 1176.516923][ T29] audit: type=1400 audit(1781694124.532:1963): avc: denied { search } for pid=24575 comm="syz.2.5330" name="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1176.547023][ T5718] usb 6-1: USB disconnect, device number 24 [ 1176.580743][ T29] audit: type=1400 audit(1781694124.532:1964): avc: denied { search } for pid=24575 comm="syz.2.5330" name="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1176.748539][ T4983] ldm_validate_partition_table(): Disk read failed. [ 1176.760466][ T4983] Dev loop6: unable to read RDB block 0 [ 1176.766887][ T4983] loop6: unable to read partition table [ 1176.928329][T24594] EXT4-fs error: 25 callbacks suppressed [ 1176.928341][T24594] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1176.950131][T24595] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1177.041777][ T5718] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1177.272523][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1177.307496][T24608] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.5342: iget: checksum invalid [ 1177.319542][T24608] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1177.331832][T24608] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.5342: iget: checksum invalid [ 1177.344225][T24608] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1177.355691][T24608] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.5342: iget: checksum invalid [ 1177.367611][T24608] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1177.378917][T24608] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.5342: iget: checksum invalid [ 1177.390842][T24608] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1177.428177][T24608] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1177.438336][T24608] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1178.152489][T24611] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1178.183559][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1178.234066][ T5718] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1178.383551][ T5718] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1178.404597][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.413443][ T5718] usb 3-1: Product: syz [ 1178.418031][ T5718] usb 3-1: Manufacturer: syz [ 1178.423047][ T5718] usb 3-1: SerialNumber: syz [ 1178.581339][T24625] FAULT_INJECTION: forcing a failure. [ 1178.581339][T24625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1178.595044][T24625] CPU: 1 UID: 0 PID: 24625 Comm: syz.1.5344 Tainted: G L syzkaller #0 PREEMPT(full) [ 1178.595074][T24625] Tainted: [L]=SOFTLOCKUP [ 1178.595081][T24625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1178.595092][T24625] Call Trace: [ 1178.595099][T24625] [ 1178.595105][T24625] dump_stack_lvl+0x100/0x190 [ 1178.595127][T24625] should_fail_ex.cold+0x5/0xa [ 1178.595149][T24625] _copy_from_iter+0x1f4/0x1690 [ 1178.595170][T24625] ? __asan_memset+0x23/0x50 [ 1178.595191][T24625] ? __pfx__copy_from_iter+0x10/0x10 [ 1178.595210][T24625] ? __pfx___alloc_skb+0x10/0x10 [ 1178.595233][T24625] ? netlink_autobind.isra.0+0x160/0x370 [ 1178.595257][T24625] netlink_sendmsg+0x808/0xda0 [ 1178.595278][T24625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1178.595302][T24625] ____sys_sendmsg+0x9e1/0xb70 [ 1178.595320][T24625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1178.595341][T24625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1178.595361][T24625] ? kstrtouint_from_user+0x13c/0x1d0 [ 1178.595389][T24625] ___sys_sendmsg+0x190/0x1e0 [ 1178.595409][T24625] ? __pfx____sys_sendmsg+0x10/0x10 [ 1178.595429][T24625] ? get_pid_task+0x106/0x250 [ 1178.595454][T24625] ? rcu_is_watching+0x12/0xc0 [ 1178.595481][T24625] __sys_sendmsg+0x160/0x210 [ 1178.595506][T24625] ? __pfx___sys_sendmsg+0x10/0x10 [ 1178.595534][T24625] ? rcu_is_watching+0x12/0xc0 [ 1178.595556][T24625] do_syscall_64+0x115/0x870 [ 1178.595575][T24625] ? clear_bhb_loop+0x40/0x90 [ 1178.595595][T24625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.595613][T24625] RIP: 0033:0x7f981019ce59 [ 1178.595628][T24625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.595645][T24625] RSP: 002b:00007f9810ff1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1178.595663][T24625] RAX: ffffffffffffffda RBX: 00007f9810416180 RCX: 00007f981019ce59 [ 1178.595674][T24625] RDX: 0000000004040800 RSI: 0000200000000480 RDI: 0000000000000008 [ 1178.595685][T24625] RBP: 00007f9810ff1090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.595696][T24625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.595707][T24625] R13: 00007f9810416218 R14: 00007f9810416180 R15: 00007ffe3ef20a68 [ 1178.595723][T24625] [ 1178.934770][T21353] Bluetooth: hci0: command 0x0406 tx timeout [ 1178.954490][T24627] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:2: iget: checksum invalid [ 1179.098038][ T5718] usb 3-1: config 0 descriptor?? [ 1179.112519][T24584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1179.437396][T24584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1179.804485][ T5718] usb 3-1: USB disconnect, device number 97 [ 1179.817755][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1179.854611][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1179.895324][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1180.149782][T24641] FAULT_INJECTION: forcing a failure. [ 1180.149782][T24641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.261646][T24641] CPU: 0 UID: 0 PID: 24641 Comm: syz.1.5350 Tainted: G L syzkaller #0 PREEMPT(full) [ 1180.261676][T24641] Tainted: [L]=SOFTLOCKUP [ 1180.261683][T24641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1180.261693][T24641] Call Trace: [ 1180.261699][T24641] [ 1180.261706][T24641] dump_stack_lvl+0x100/0x190 [ 1180.261728][T24641] should_fail_ex.cold+0x5/0xa [ 1180.261750][T24641] _copy_from_user+0x2e/0xd0 [ 1180.261770][T24641] move_addr_to_kernel+0x65/0x170 [ 1180.261791][T24641] copy_msghdr_from_user+0x3f0/0x4c0 [ 1180.261810][T24641] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1180.261832][T24641] ? __pfx__kstrtoull+0x10/0x10 [ 1180.261855][T24641] ? putname+0xb1/0x110 [ 1180.261875][T24641] ___sys_sendmsg+0x106/0x1e0 [ 1180.261894][T24641] ? __pfx____sys_sendmsg+0x10/0x10 [ 1180.261917][T24641] ? rcu_is_watching+0x12/0xc0 [ 1180.261945][T24641] __sys_sendmmsg+0x20c/0x440 [ 1180.261969][T24641] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1180.261992][T24641] ? rcu_is_watching+0x12/0xc0 [ 1180.262012][T24641] ? ksys_write+0x190/0x250 [ 1180.262042][T24641] ? fput+0x79/0x100 [ 1180.262060][T24641] ? ksys_write+0x1ac/0x250 [ 1180.262085][T24641] ? __pfx_ksys_write+0x10/0x10 [ 1180.262111][T24641] __x64_sys_sendmmsg+0x9c/0x100 [ 1180.262136][T24641] do_syscall_64+0x115/0x870 [ 1180.262155][T24641] ? clear_bhb_loop+0x40/0x90 [ 1180.262174][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.262191][T24641] RIP: 0033:0x7f981019ce59 [ 1180.262205][T24641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.262221][T24641] RSP: 002b:00007f9811033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1180.262238][T24641] RAX: ffffffffffffffda RBX: 00007f9810415fa0 RCX: 00007f981019ce59 [ 1180.262249][T24641] RDX: 0000000000000001 RSI: 0000200000002640 RDI: 0000000000000009 [ 1180.262260][T24641] RBP: 00007f9811033090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.262270][T24641] R10: 0000000000008810 R11: 0000000000000246 R12: 0000000000000001 [ 1180.262280][T24641] R13: 00007f9810416038 R14: 00007f9810415fa0 R15: 00007ffe3ef20a68 [ 1180.262297][T24641] [ 1180.347220][ T29] audit: type=1400 audit(1781694128.362:1965): avc: denied { ioctl } for pid=24642 comm="syz.4.5351" path="/dev/usbmon9" dev="devtmpfs" ino=749 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1180.450056][T24647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5352'. [ 1180.569197][T24647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5352'. [ 1180.595381][T24651] netlink: 392 bytes leftover after parsing attributes in process `syz.2.5354'. [ 1180.641077][ T29] audit: type=1326 audit(1781694128.652:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24654 comm="syz.0.5355" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65a4b9ce59 code=0x0 [ 1180.831525][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1180.961642][ T804] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1181.670431][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1181.931894][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.942879][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.953234][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1181.960061][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1181.978504][ T804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1182.072770][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.084252][ T10] usb 2-1: config 0 descriptor?? [ 1182.090384][ T804] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.100762][ T804] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1182.186151][ T804] usb 3-1: string descriptor 0 read error: -22 [ 1182.188649][ T8724] EXT4-fs error: 1 callbacks suppressed [ 1182.188671][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1182.222566][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1182.245012][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1182.258133][ T804] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1182.282578][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.481809][ T804] usb 3-1: selecting invalid altsetting 1 [ 1182.501513][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1182.501729][ T804] usb 3-1: unit 3 not found! [ 1182.530005][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1182.552140][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1182.571523][ T29] audit: type=1400 audit(1781694130.572:1967): avc: denied { execute } for pid=24671 comm="syz.5.5361" path="/dev/video8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1182.674007][ T804] usb 3-1: cannot request logical cluster ID: 0 (err: -5) [ 1182.695386][ T804] usb 3-1: invalid MIXER UNIT descriptor 6 [ 1182.701693][ T10] hid (null): unknown global tag 0xd [ 1182.780067][T24676] overlayfs: failed to clone lowerpath [ 1183.064124][T24679] netlink: 'syz.4.5363': attribute type 1 has an invalid length. [ 1183.315481][T24679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1183.498654][T24680] random: crng reseeded on system resumption [ 1183.505030][ T29] audit: type=1400 audit(1781694131.512:1968): avc: denied { write } for pid=24678 comm="syz.4.5363" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1183.569743][ T29] audit: type=1326 audit(1781694131.552:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24678 comm="syz.4.5363" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42c79ce59 code=0x0 [ 1183.665950][ T10] hid (null): unknown global tag 0xe [ 1183.693763][ T10] usb 2-1: USB disconnect, device number 125 [ 1183.718779][ T804] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 1183.720684][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1183.729198][ T804] usb 3-1: USB disconnect, device number 98 [ 1183.756741][ T6772] udevd[6772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1183.791418][ T5718] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1183.822552][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1183.841824][T17015] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1183.883232][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1184.013938][T24693] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.5367: iget: checksum invalid [ 1184.025481][T24693] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1184.037292][T24693] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1184.048053][T24693] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1184.059019][T24693] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1184.068858][T24693] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1184.078951][T24693] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1184.151390][ T10] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1184.339030][ T10] usb 2-1: config 73 has an invalid descriptor of length 248, skipping remainder of the config [ 1184.349737][ T10] usb 2-1: config 73 has 0 interfaces, different from the descriptor's value: 3 [ 1184.363508][ T10] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1184.372921][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.380918][ T10] usb 2-1: Product: syz [ 1184.385820][ T10] usb 2-1: Manufacturer: syz [ 1184.404697][ T10] usb 2-1: SerialNumber: syz [ 1184.541348][ T804] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 1184.711397][ T5718] usb 6-1: Using ep0 maxpacket: 32 [ 1184.718406][ T5718] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1184.727217][ T5718] usb 6-1: config 0 has no interface number 0 [ 1184.734156][ T5718] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1184.745865][ T5718] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1184.760941][ T5718] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1184.773229][ T5718] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1184.801329][ T5718] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1184.831742][ T5718] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1184.855301][ T5718] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1184.886827][T15120] usb 2-1: USB disconnect, device number 126 [ 1184.902906][ T5718] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 26624, setting to 1024 [ 1185.073409][ T804] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1185.084263][ T804] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1185.098359][ T804] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1185.099430][ T5718] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1185.107280][ T804] usb 3-1: string descriptor 0 read error: -22 [ 1185.127632][ T804] usb 3-1: New USB device found, idVendor=0408, idProduct=3001, bcdDevice= 0.40 [ 1185.148651][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.150856][ T5718] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1185.183601][ T5718] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1185.187130][T24702] overlayfs: failed to clone upperpath [ 1185.196703][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.214602][T24695] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1185.229465][ T5718] usb 6-1: Product: syz [ 1185.329893][ T5718] usb 6-1: Manufacturer: syz [ 1185.335216][ T5718] usb 6-1: SerialNumber: syz [ 1185.344670][ T5718] usb 6-1: config 0 descriptor?? [ 1185.352129][T24684] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1185.365907][ T5718] usb 6-1: will this work? Response EP is not usually 3 [ 1185.373148][ T5718] usb 6-1: will this work? Image data EP is not usually 2 [ 1185.393341][ T5718] scsi host1: microtekX6 [ 1185.790438][ T5708] usb 6-1: USB disconnect, device number 25 [ 1186.503925][T24720] 9p: Bad value for 'wfdno' [ 1186.513046][T24720] CIFS mount error: No usable UNC path provided in device string! [ 1186.513046][T24720] [ 1186.523225][T24720] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1186.543650][T24720] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1186.713717][ T5708] IPVS: starting estimator thread 0... [ 1186.891276][T24721] IPVS: using max 57 ests per chain, 136800 per kthread [ 1188.011129][ T9533] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1188.086350][ T804] usbhid 3-1:1.0: can't add hid device: -71 [ 1188.112283][ T804] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1188.212776][ T804] usb 3-1: USB disconnect, device number 99 [ 1188.213743][ T9533] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1188.352835][ T9533] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1188.436486][ T9533] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1188.448741][ T9533] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1188.459426][ T9533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.500773][T24736] FAULT_INJECTION: forcing a failure. [ 1188.500773][T24736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.500947][ T9533] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1188.513990][T24736] CPU: 0 UID: 0 PID: 24736 Comm: syz.4.5381 Tainted: G L syzkaller #0 PREEMPT(full) [ 1188.514016][T24736] Tainted: [L]=SOFTLOCKUP [ 1188.514022][T24736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1188.514033][T24736] Call Trace: [ 1188.514039][T24736] [ 1188.514045][T24736] dump_stack_lvl+0x100/0x190 [ 1188.514066][T24736] should_fail_ex.cold+0x5/0xa [ 1188.514088][T24736] _copy_from_user+0x2e/0xd0 [ 1188.514107][T24736] move_addr_to_kernel+0x65/0x170 [ 1188.514128][T24736] __sys_connect+0xb5/0x170 [ 1188.514149][T24736] ? __pfx___sys_connect+0x10/0x10 [ 1188.514170][T24736] ? __fget_files+0x21f/0x3d0 [ 1188.514191][T24736] ? __pfx_ksys_write+0x10/0x10 [ 1188.514218][T24736] __x64_sys_connect+0x72/0xb0 [ 1188.514240][T24736] do_syscall_64+0x115/0x870 [ 1188.514258][T24736] ? clear_bhb_loop+0x40/0x90 [ 1188.514278][T24736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.514295][T24736] RIP: 0033:0x7fc42c79ce59 [ 1188.514307][T24736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.514323][T24736] RSP: 002b:00007fc42d651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1188.514341][T24736] RAX: ffffffffffffffda RBX: 00007fc42ca15fa0 RCX: 00007fc42c79ce59 [ 1188.514352][T24736] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 1188.514362][T24736] RBP: 00007fc42d651090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.514372][T24736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.514382][T24736] R13: 00007fc42ca16038 R14: 00007fc42ca15fa0 R15: 00007ffc0cd879a8 [ 1188.514397][T24736] [ 1188.555205][ T8724] EXT4-fs error: 11 callbacks suppressed [ 1188.555216][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1188.583122][ T9533] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1188.622765][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1188.736007][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1188.791182][ T5708] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1188.971336][ T804] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1189.047138][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1189.094400][T24739] XFS (nullb0): Invalid superblock magic number [ 1189.124674][ T9533] usb 2-1: USB disconnect, device number 127 [ 1189.181095][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 1189.187451][ T5708] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1189.198475][ T804] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1189.208820][ T5708] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1189.220042][ T804] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1189.229978][ T5708] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1189.240890][ T804] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1189.250621][ T5708] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1189.259889][ T804] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1189.269654][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.277779][ T804] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1189.288072][ T804] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1189.295339][ T804] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1189.306223][ T5708] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1189.319378][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1189.330440][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.340967][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1189.363395][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1189.378152][ T804] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1189.387726][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1189.388488][ T5708] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1189.422184][ T5607] udevd[5607]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1189.423475][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1189.481406][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1189.630012][ T804] scsi host1: usb-storage 3-1:1.0 [ 1189.654201][T24750] XFS (nullb0): Invalid superblock magic number [ 1189.773504][T24758] 9p: Bad value for 'wfdno' [ 1189.779593][T24758] CIFS mount error: No usable UNC path provided in device string! [ 1189.779593][T24758] [ 1189.789660][T24758] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1189.801076][T24758] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1190.108266][ T29] audit: type=1400 audit(1781694138.123:1970): avc: denied { bind } for pid=24759 comm="syz.1.5384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1190.671836][ T5708] usb 6-1: USB disconnect, device number 26 [ 1190.696273][T24780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5393'. [ 1190.716613][ T58] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 1190.730183][ T58] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 1190.738590][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1191.199098][ T29] audit: type=1400 audit(1781694139.213:1971): avc: denied { write } for pid=24781 comm="syz.1.5394" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1191.227491][ T29] audit: type=1400 audit(1781694139.213:1972): avc: denied { open } for pid=24781 comm="syz.1.5394" path="/38/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1191.265940][ T29] audit: type=1400 audit(1781694139.243:1973): avc: denied { ioctl } for pid=24781 comm="syz.1.5394" path="/38/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1191.475284][T24789] FAULT_INJECTION: forcing a failure. [ 1191.475284][T24789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.490264][T24789] CPU: 1 UID: 0 PID: 24789 Comm: syz.5.5396 Tainted: G L syzkaller #0 PREEMPT(full) [ 1191.490285][T24789] Tainted: [L]=SOFTLOCKUP [ 1191.490289][T24789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1191.490295][T24789] Call Trace: [ 1191.490299][T24789] [ 1191.490303][T24789] dump_stack_lvl+0x100/0x190 [ 1191.490317][T24789] should_fail_ex.cold+0x5/0xa [ 1191.490331][T24789] _copy_to_user+0x32/0xd0 [ 1191.490343][T24789] snd_pcm_oss_read+0x2bd/0x730 [ 1191.490357][T24789] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1191.490370][T24789] vfs_read+0x1e4/0xb40 [ 1191.490386][T24789] ? __pfx_vfs_read+0x10/0x10 [ 1191.490400][T24789] ? rcu_is_watching+0x12/0xc0 [ 1191.490414][T24789] ? __rcu_read_unlock+0x27f/0x5e0 [ 1191.490424][T24789] ? __fget_files+0x21f/0x3d0 [ 1191.490441][T24789] ksys_read+0x12a/0x250 [ 1191.490463][T24789] ? __pfx_ksys_read+0x10/0x10 [ 1191.490481][T24789] ? rcu_is_watching+0x12/0xc0 [ 1191.490494][T24789] do_syscall_64+0x115/0x870 [ 1191.490506][T24789] ? clear_bhb_loop+0x40/0x90 [ 1191.490518][T24789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.490528][T24789] RIP: 0033:0x7f455bb9ce59 [ 1191.490537][T24789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.490548][T24789] RSP: 002b:00007f455ca0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1191.490559][T24789] RAX: ffffffffffffffda RBX: 00007f455be16090 RCX: 00007f455bb9ce59 [ 1191.490566][T24789] RDX: 0000000000002020 RSI: 000020000001b480 RDI: 0000000000000004 [ 1191.490572][T24789] RBP: 00007f455ca0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.490578][T24789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.490584][T24789] R13: 00007f455be16128 R14: 00007f455be16090 R15: 00007ffd4ef84078 [ 1191.490593][T24789] [ 1191.761264][T24795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5397'. [ 1191.785245][T24795] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5397'. [ 1191.927443][T24795] netlink: 'syz.0.5397': attribute type 1 has an invalid length. [ 1191.972008][T24797] block nbd1: not configured, cannot reconfigure [ 1191.995299][ T804] usb 3-1: USB disconnect, device number 100 [ 1191.997297][T24749] sddr09: could not read card info [ 1192.016362][T24802] netlink: 'syz.0.5397': attribute type 10 has an invalid length. [ 1192.033436][T24802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5397'. [ 1192.041400][ T3776] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1192.058816][T24803] ubi16: attaching mtd0 [ 1192.062315][ T3776] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 1192.089511][ T3776] sd 1:0:0:0: [sdb] Write Protect is off [ 1192.093082][T24803] ubi16: scanning is finished [ 1192.112310][ T3776] sd 1:0:0:0: [sdb] Asking for cache data failed [ 1192.214871][ T3776] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 1192.279398][ T3776] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1192.300647][T24808] udevd[24808]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sdb': Bad message [ 1192.359760][ T6772] udevd[6772]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1192.420235][T24814] udevd[24814]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sdb': Bad message [ 1192.467293][T24803] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1192.495965][T24803] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1192.526603][T24803] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1192.559503][T24803] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 1192.604182][ T8724] udevd[8724]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1192.660770][T24803] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1192.731011][ T804] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1193.034803][T24803] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1193.055353][T24803] ubi16: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 4233386385 [ 1193.075823][T24803] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1193.086424][T24815] ubi16: background thread "ubi_bgt16d" started, PID 24815 [ 1193.104718][T24820] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.5404'. [ 1193.151178][ T804] usb 3-1: device descriptor read/64, error -71 [ 1193.546317][T24826] 9p: Bad value for 'wfdno' [ 1193.553660][T24826] CIFS mount error: No usable UNC path provided in device string! [ 1193.553660][T24826] [ 1193.563759][T24826] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1193.580067][T24826] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1193.850791][ T804] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1193.981264][ T804] usb 3-1: device descriptor read/64, error -71 [ 1194.081625][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1194.101101][ T804] usb usb3-port1: attempt power cycle [ 1194.240898][ T10] usb 6-1: device descriptor read/64, error -71 [ 1194.260765][ T5715] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1194.411972][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.422336][ T5715] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1194.431582][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.441358][ T5715] usb 2-1: config 0 descriptor?? [ 1194.450760][ T804] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1194.460963][ T5715] pwc: Askey VC010 type 2 USB webcam detected. [ 1194.468676][ T8724] EXT4-fs error: 9 callbacks suppressed [ 1194.468688][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1194.486945][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1194.495296][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1194.506401][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1194.517376][ T804] usb 3-1: device descriptor read/8, error -71 [ 1194.620749][ T10] usb 6-1: device descriptor read/64, error -71 [ 1194.637126][T24846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1194.740835][ T10] usb usb6-port1: attempt power cycle [ 1194.770738][ T804] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1194.809153][ T804] usb 3-1: device descriptor read/8, error -71 [ 1194.861024][T24854] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1194.873595][T24855] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1194.900217][ T5715] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1194.907441][ T5715] pwc: recv_control_msg error -32 req 02 val 2700 [ 1194.926005][ T5715] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1194.933159][ T804] usb usb3-port1: unable to enumerate USB device [ 1194.947064][ T5715] pwc: recv_control_msg error -32 req 04 val 1000 [ 1194.961358][ T5715] pwc: recv_control_msg error -32 req 04 val 1300 [ 1194.977544][ T5715] pwc: recv_control_msg error -32 req 04 val 1400 [ 1194.988821][ T5715] pwc: recv_control_msg error -32 req 02 val 2000 [ 1195.006662][ T5715] pwc: recv_control_msg error -32 req 02 val 2100 [ 1195.021997][ T5715] pwc: recv_control_msg error -32 req 04 val 1500 [ 1195.034850][ T5715] pwc: recv_control_msg error -32 req 02 val 2500 [ 1195.090755][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1195.133757][ T10] usb 6-1: device descriptor read/8, error -71 [ 1195.252802][ T5715] pwc: recv_control_msg error -71 req 02 val 2600 [ 1195.264312][ T5715] pwc: recv_control_msg error -71 req 02 val 2900 [ 1195.283103][ T5715] pwc: recv_control_msg error -71 req 02 val 2800 [ 1195.296907][ T5715] pwc: recv_control_msg error -71 req 04 val 1100 [ 1195.308282][ T5715] pwc: recv_control_msg error -71 req 04 val 1200 [ 1195.317538][ T5715] pwc: Registered as video103. [ 1195.324645][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1258: comm udevd: iget: checksum invalid [ 1195.335932][ T5715] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input166 [ 1195.352002][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1195.369463][ T5715] usb 2-1: USB disconnect, device number 2 [ 1195.377073][T24864] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1258: comm udevd: iget: checksum invalid [ 1195.388619][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1195.400256][T24864] udevd[24864]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': Bad message [ 1195.412014][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1195.422435][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1195.472166][ T10] usb 6-1: device descriptor read/8, error -71 [ 1195.592200][ T10] usb usb6-port1: unable to enumerate USB device [ 1195.814615][T24872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5424'. [ 1195.876010][T24870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5422'. [ 1196.062885][ T29] audit: type=1400 audit(1781694144.083:1974): avc: denied { map } for pid=24879 comm="syz.1.5425" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1196.820719][ T10] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1197.248020][ T10] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1197.269913][ T10] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1197.296016][ T10] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1197.419799][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1197.436093][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.564237][T24904] overlayfs: failed to clone lowerpath [ 1197.570694][ T29] audit: type=1400 audit(1781694145.533:1975): avc: denied { write } for pid=24901 comm="syz.0.5431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1197.700445][T24895] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1198.150935][ T10] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1198.174481][ T10] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input167 [ 1198.227983][ T10] usb 3-1: USB disconnect, device number 105 [ 1198.234049][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1198.934387][T24930] snd_dummy snd_dummy.0: control 4:57412:0:syz0:511 is already present [ 1198.956972][T24931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5438'. [ 1198.970511][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1198.990363][T24930] syzkaller0: entered promiscuous mode [ 1198.995958][T24930] syzkaller0: entered allmulticast mode [ 1199.121091][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1199.140655][T24924] netlink: 'syz.2.5436': attribute type 39 has an invalid length. [ 1199.244376][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1199.253040][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1199.260860][ T10] usb 3-1: can't read configurations, error -71 [ 1199.938890][T24950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1199.957059][T24950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1200.086414][T24954] netlink: 'syz.4.5447': attribute type 5 has an invalid length. [ 1200.140983][T15120] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1200.370815][T15120] usb 6-1: Using ep0 maxpacket: 32 [ 1200.413714][T15120] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 1200.438119][T15120] usb 6-1: config 0 has no interface number 1 [ 1200.453802][T15120] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1200.465447][T15120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.499186][T15120] usb 6-1: Product: syz [ 1200.518104][T15120] usb 6-1: Manufacturer: syz [ 1200.528822][T15120] usb 6-1: SerialNumber: syz [ 1200.542316][T15120] usb 6-1: config 0 descriptor?? [ 1200.553287][ T8724] EXT4-fs error: 12 callbacks suppressed [ 1200.553300][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1200.571865][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1200.585736][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1200.672954][T15120] viperboard 6-1:0.61: version 0.00 found at bus 006 address 031 [ 1200.706684][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1200.709618][T15120] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1200.733646][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1200.756348][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1200.756482][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1200.771624][T15120] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1200.803614][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1200.816590][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1200.836029][ T6270] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1200.851907][T15120] viperboard 6-1:0.0: version 0.00 found at bus 006 address 031 [ 1200.878636][T15120] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1200.904760][T15120] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1200.940569][T15120] usb 6-1: USB disconnect, device number 31 [ 1201.183996][T24972] 9p: Bad value for 'wfdno' [ 1201.189910][T24972] CIFS mount error: No usable UNC path provided in device string! [ 1201.189910][T24972] [ 1201.200009][T24972] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1201.213329][T24972] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1201.215051][T24969] overlayfs: failed to resolve './file2': -2 [ 1201.762695][T24983] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24983 comm=syz.4.5458 [ 1201.972221][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1202.000655][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5462'. [ 1202.140305][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1202.152471][ T10] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1202.167769][ T10] usb 2-1: config 0 has no interface number 0 [ 1202.181257][ T10] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1202.202810][ T10] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1202.223066][ T10] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1202.251070][ T10] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1202.268456][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1202.270312][ T9533] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1202.285934][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.302340][ T10] usb 2-1: Product: syz [ 1202.306577][ T10] usb 2-1: Manufacturer: syz [ 1202.350543][T24998] ubi: mtd0 is already attached to ubi16 [ 1202.736668][T24997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5463'. [ 1202.745841][ T10] usb 2-1: SerialNumber: syz [ 1202.752967][ T10] usb 2-1: config 0 descriptor?? [ 1202.763870][T24981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1202.900401][ T9533] usb 3-1: Using ep0 maxpacket: 16 [ 1202.912320][ T9533] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1202.921542][ T9533] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.932852][ T9533] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1202.944641][ T9533] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1202.954733][ T9533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.963580][ T9533] usb 3-1: Product: syz [ 1202.968069][ T9533] usb 3-1: Manufacturer: syz [ 1202.973120][ T9533] usb 3-1: SerialNumber: syz [ 1203.084969][ T9533] usb 3-1: 0:2 : does not exist [ 1203.160294][ T5708] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1203.312372][ T5708] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 1203.320688][ T5708] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.334376][ T10] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 3 bytes [ 1203.343669][ T5708] usb 6-1: config 0 has no interface number 0 [ 1203.346410][T25005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5466'. [ 1203.349856][ T10] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 1203.353769][ T5708] usb 6-1: config 0 interface 117 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1203.378473][ T5708] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1203.390365][ T5708] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1203.400379][ T5708] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1203.415677][ T5708] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1203.425465][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.433565][ T5708] usb 6-1: Product: syz [ 1203.437768][ T5708] usb 6-1: Manufacturer: syz [ 1203.442819][ T5708] usb 6-1: SerialNumber: syz [ 1203.448827][ T5708] usb 6-1: config 0 descriptor?? [ 1203.920733][T25021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1203.972652][T25021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1204.101778][T25021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1204.375058][ T9533] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1204.396580][ T9533] usb 3-1: USB disconnect, device number 108 [ 1204.523240][ T29] audit: type=1400 audit(1781694152.543:1976): avc: denied { mounton } for pid=25001 comm="syz.5.5465" path="/137/bus" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1204.547635][ T29] audit: type=1400 audit(1781694152.563:1977): avc: denied { setopt } for pid=25001 comm="syz.5.5465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1204.790971][ T9533] usb 2-1: USB disconnect, device number 3 [ 1204.912186][T25035] FAULT_INJECTION: forcing a failure. [ 1204.912186][T25035] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.925698][T25035] CPU: 0 UID: 0 PID: 25035 Comm: syz.4.5476 Tainted: G L syzkaller #0 PREEMPT(full) [ 1204.925723][T25035] Tainted: [L]=SOFTLOCKUP [ 1204.925729][T25035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1204.925739][T25035] Call Trace: [ 1204.925745][T25035] [ 1204.925751][T25035] dump_stack_lvl+0x100/0x190 [ 1204.925772][T25035] should_fail_ex.cold+0x5/0xa [ 1204.925791][T25035] ? fs_reclaim_acquire+0x70/0x100 [ 1204.925808][T25035] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1204.925831][T25035] should_failslab+0xc2/0x120 [ 1204.925857][T25035] __kmalloc_noprof+0xe0/0x840 [ 1204.925876][T25035] ? kfree+0x1e5/0x6c0 [ 1204.925901][T25035] tomoyo_realpath_from_path+0xb6/0x690 [ 1204.925928][T25035] tomoyo_path_number_perm+0x23c/0x580 [ 1204.925949][T25035] ? tomoyo_path_number_perm+0x22e/0x580 [ 1204.925970][T25035] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1204.925994][T25035] ? preempt_count_add+0x76/0x150 [ 1204.926015][T25035] ? rcu_is_watching+0x12/0xc0 [ 1204.926036][T25035] ? __fget_files+0x215/0x3d0 [ 1204.926053][T25035] ? hook_file_ioctl_common+0x149/0x410 [ 1204.926070][T25035] ? lock_release+0x24d/0x310 [ 1204.926088][T25035] ? __fget_files+0x21f/0x3d0 [ 1204.926105][T25035] security_file_ioctl+0xd3/0x230 [ 1204.926128][T25035] __x64_sys_ioctl+0xb7/0x210 [ 1204.926153][T25035] do_syscall_64+0x115/0x870 [ 1204.926172][T25035] ? clear_bhb_loop+0x40/0x90 [ 1204.926191][T25035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.926209][T25035] RIP: 0033:0x7fc42c79ce59 [ 1204.926225][T25035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.926243][T25035] RSP: 002b:00007fc42d651028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1204.926260][T25035] RAX: ffffffffffffffda RBX: 00007fc42ca15fa0 RCX: 00007fc42c79ce59 [ 1204.926273][T25035] RDX: 0000000000000000 RSI: 0000000000005415 RDI: 0000000000000003 [ 1204.926283][T25035] RBP: 00007fc42d651090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.926293][T25035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.926303][T25035] R13: 00007fc42ca16038 R14: 00007fc42ca15fa0 R15: 00007ffc0cd879a8 [ 1204.926319][T25035] [ 1204.926334][T25035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1205.282913][T25044] netlink: 'syz.0.5480': attribute type 12 has an invalid length. [ 1205.377965][T25050] ubi: mtd0 is already attached to ubi16 [ 1205.450139][ T10] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1205.850194][T25054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5483'. [ 1206.163857][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1206.188504][ T5715] usb 6-1: USB disconnect, device number 32 [ 1206.203666][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1206.213618][ T29] audit: type=1400 audit(1781694154.214:1978): avc: denied { unmount } for pid=22060 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1206.288495][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1206.306034][ T29] audit: type=1400 audit(1781694154.324:1979): avc: denied { execute } for pid=25064 comm="syz.1.5486" name="cgroup" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 1206.328862][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1206.328887][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.331838][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1206.359994][ T8724] EXT4-fs error: 28 callbacks suppressed [ 1206.360006][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1206.397713][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1206.412561][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1206.423220][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1206.450982][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1206.540490][ T5708] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1206.631599][T25071] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:16: iget: checksum invalid [ 1206.650704][T25072] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:16: iget: checksum invalid [ 1206.686240][T25073] XFS (nullb0): Invalid superblock magic number [ 1206.695327][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 1206.701961][T25079] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1206.721815][ T5708] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 1206.733789][ T5708] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 1206.734457][T25080] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1206.763241][ T5708] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 1206.774970][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.783107][ T5708] usb 2-1: Product: syz [ 1206.787396][ T5708] usb 2-1: Manufacturer: syz [ 1206.792963][ T5708] usb 2-1: SerialNumber: syz [ 1207.065136][ T5708] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1207.090954][ T5708] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1207.109470][ T5708] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1207.125687][ T5708] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 1207.160283][ T5708] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1207.178456][ T5708] usb 2-1: USB disconnect, device number 4 [ 1207.186921][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1207.206452][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1207.217606][ T6270] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1207.233855][ T8724] udevd[8724]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1208.386936][ T29] audit: type=1400 audit(1781694155.514:1980): avc: denied { ioctl } for pid=25089 comm="syz.1.5490" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1208.412956][ T29] audit: type=1400 audit(1781694155.514:1981): avc: denied { getattr } for pid=25089 comm="syz.1.5490" path="/" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1208.818925][ T5718] usb 3-1: USB disconnect, device number 109 [ 1209.579913][ T5708] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1209.750269][ T5708] usb 6-1: Using ep0 maxpacket: 16 [ 1209.770322][ T5708] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.793837][ T5708] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.806081][ T5708] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1209.828167][ T5708] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1209.847264][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.869149][ T5708] usb 6-1: config 0 descriptor?? [ 1210.301900][T25137] tmpfs: Unknown parameter 'À' [ 1210.449995][ T5708] hid (null): unknown global tag 0xd [ 1210.471257][ T5708] hid (null): unknown global tag 0xe [ 1210.493430][ T29] audit: type=1400 audit(1781694158.514:1982): avc: denied { read } for pid=25139 comm="syz.2.5506" path="socket:[92668]" dev="sockfs" ino=92668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1210.659032][ T5718] usb 6-1: USB disconnect, device number 33 [ 1211.609769][ T5708] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1211.709773][ T5715] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 1211.759808][ T5708] usb 6-1: Using ep0 maxpacket: 16 [ 1211.766059][ T5708] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1211.775864][ T5708] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.786233][ T5708] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1211.796660][ T5708] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1211.806212][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.814230][ T5708] usb 6-1: Product: syz [ 1211.818395][ T5708] usb 6-1: Manufacturer: syz [ 1211.823133][ T5708] usb 6-1: SerialNumber: syz [ 1211.833364][ T5708] usb 6-1: 0:2 : does not exist [ 1211.861010][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.871298][ T5715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1211.880395][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1211.891383][ T5715] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1211.900518][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.910501][T25163] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1211.918592][ T5715] hub 2-1:1.0: bad descriptor, ignoring hub [ 1211.924963][ T5715] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1211.932743][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 1211.937960][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 1211.943258][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 1211.944014][ T6772] EXT4-fs error: 18 callbacks suppressed [ 1211.944036][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1211.949500][ T5715] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1211.967737][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1211.971364][ T5715] cdc_wdm 2-1:1.0: Unknown control protocol [ 1211.991856][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1212.279965][ T6762] usb 2-1: USB disconnect, device number 5 [ 1212.552126][T25175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5518'. [ 1212.564965][T25175] netlink: 'syz.0.5518': attribute type 1 has an invalid length. [ 1212.619763][ T6762] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1212.633116][T25175] netlink: 'syz.0.5518': attribute type 10 has an invalid length. [ 1212.641049][T25175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5518'. [ 1212.782786][ T6762] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.797665][ T6762] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1212.808858][ T6762] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1212.823965][ T6762] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1212.834775][ T6762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.848875][T25162] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1212.857426][ T6762] hub 2-1:1.0: bad descriptor, ignoring hub [ 1212.864394][ T6762] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1212.873711][ T6762] cdc_wdm 2-1:1.0: skipping garbage [ 1212.880006][T25186] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1212.891856][ T6762] cdc_wdm 2-1:1.0: skipping garbage [ 1212.898115][ T6762] cdc_wdm 2-1:1.0: skipping garbage [ 1212.914178][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1212.918954][T25183] netlink: 'syz.0.5523': attribute type 29 has an invalid length. [ 1212.933602][ T6762] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1212.933908][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1212.940388][ T6762] cdc_wdm 2-1:1.0: Unknown control protocol [ 1212.964026][ T5708] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1212.973935][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1213.005537][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1213.017182][ T5708] usb 6-1: USB disconnect, device number 34 [ 1213.047339][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1213.112177][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1213.131299][ T8724] udevd[8724]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1213.190032][ T10] usb 2-1: USB disconnect, device number 6 [ 1213.795838][ T29] audit: type=1400 audit(1781694161.814:1983): avc: denied { read append } for pid=25202 comm="syz.1.5528" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1213.822636][ T29] audit: type=1400 audit(1781694161.814:1984): avc: denied { open } for pid=25202 comm="syz.1.5528" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1214.130517][ T29] audit: type=1400 audit(1781694162.154:1985): avc: denied { ioctl } for pid=25202 comm="syz.1.5528" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1214.156526][T25203] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1214.488839][T25215] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5533'. [ 1214.534469][T25212] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5532'. [ 1215.409011][T25240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.430033][T25240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.453620][T25240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.467009][T25240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.829971][ T48] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1216.089871][ T6762] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1216.391453][ T6762] usb 3-1: not running at top speed; connect to a high speed hub [ 1216.405750][ T6762] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1216.417446][ T6762] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1216.426976][ T6762] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 1216.436571][ T6762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.445491][ T6762] usb 3-1: Product: І [ 1216.449957][ T6762] usb 3-1: Manufacturer: Ы [ 1216.456438][ T6762] usb 3-1: SerialNumber: К [ 1216.779589][ T5708] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1216.882940][T25245] vivid-000: disconnect [ 1216.896040][T25245] vivid-000: reconnect [ 1216.904102][ T6762] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input169 [ 1216.925464][ T4968] bcm5974 3-1:1.0: could not read from device [ 1216.938243][ T4968] bcm5974 3-1:1.0: could not read from device [ 1216.948029][ T4968] bcm5974 3-1:1.0: could not read from device [ 1216.958748][ T6762] usb 3-1: USB disconnect, device number 110 [ 1216.959527][ T8724] EXT4-fs error: 4 callbacks suppressed [ 1216.959538][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1216.994565][ T5708] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.017328][ T5708] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1217.031837][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1217.048212][ T5708] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1217.054018][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1217.075755][ T5708] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 1217.089790][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1217.101752][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=184, SerialNumber=3 [ 1217.102516][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1217.124107][ T5708] usb 2-1: Product: syz [ 1217.128283][ T5708] usb 2-1: Manufacturer: syz [ 1217.143036][ T5708] usb 2-1: SerialNumber: syz [ 1217.148551][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1217.342390][T25275] nfs: Unknown parameter 'acÿÿÿÿÿÿÿÿ¢J3åí„ ”Û‚7öw!‚uO¥ñ?\‡Z½¸È—EU^þcý'é¤8ÇúszTÀ-Æ_N' [ 1217.938057][T25284] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:3: iget: checksum invalid [ 1217.962020][T25285] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:3: iget: checksum invalid [ 1217.978589][T25287] FAULT_INJECTION: forcing a failure. [ 1217.978589][T25287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.992090][T25287] CPU: 0 UID: 0 PID: 25287 Comm: syz.5.5553 Tainted: G L syzkaller #0 PREEMPT(full) [ 1217.992115][T25287] Tainted: [L]=SOFTLOCKUP [ 1217.992124][T25287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1217.992135][T25287] Call Trace: [ 1217.992140][T25287] [ 1217.992146][T25287] dump_stack_lvl+0x100/0x190 [ 1217.992166][T25287] should_fail_ex.cold+0x5/0xa [ 1217.992187][T25287] _copy_from_iter+0x1f4/0x1690 [ 1217.992207][T25287] ? __asan_memset+0x23/0x50 [ 1217.992226][T25287] ? __pfx__copy_from_iter+0x10/0x10 [ 1217.992245][T25287] ? __pfx___alloc_skb+0x10/0x10 [ 1217.992266][T25287] ? netlink_autobind.isra.0+0x160/0x370 [ 1217.992288][T25287] netlink_sendmsg+0x808/0xda0 [ 1217.992307][T25287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.992329][T25287] ____sys_sendmsg+0x9e1/0xb70 [ 1217.992346][T25287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.992366][T25287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1217.992385][T25287] ? kstrtouint_from_user+0x13c/0x1d0 [ 1217.992409][T25287] ___sys_sendmsg+0x190/0x1e0 [ 1217.992428][T25287] ? __pfx____sys_sendmsg+0x10/0x10 [ 1217.992446][T25287] ? get_pid_task+0x106/0x250 [ 1217.992470][T25287] ? rcu_is_watching+0x12/0xc0 [ 1217.992495][T25287] __sys_sendmsg+0x160/0x210 [ 1217.992518][T25287] ? __pfx___sys_sendmsg+0x10/0x10 [ 1217.992544][T25287] ? rcu_is_watching+0x12/0xc0 [ 1217.992564][T25287] do_syscall_64+0x115/0x870 [ 1217.992582][T25287] ? clear_bhb_loop+0x40/0x90 [ 1217.992600][T25287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.992615][T25287] RIP: 0033:0x7f455bb9ce59 [ 1217.992628][T25287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.992643][T25287] RSP: 002b:00007f455ca2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1217.992660][T25287] RAX: ffffffffffffffda RBX: 00007f455be15fa0 RCX: 00007f455bb9ce59 [ 1217.992671][T25287] RDX: 0000000004008014 RSI: 0000200000000100 RDI: 0000000000000003 [ 1217.992681][T25287] RBP: 00007f455ca2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.992691][T25287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.992701][T25287] R13: 00007f455be16038 R14: 00007f455be15fa0 R15: 00007ffd4ef84078 [ 1217.992716][T25287] [ 1217.999731][ T9533] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1218.381512][ T9533] usb 3-1: device descriptor read/64, error -71 [ 1218.629551][ T9533] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1218.771205][ T9533] usb 3-1: device descriptor read/64, error -71 [ 1218.891473][ T9533] usb usb3-port1: attempt power cycle [ 1219.086790][ T29] audit: type=1400 audit(1781694167.104:1986): avc: denied { audit_control } for pid=25302 comm="syz.4.5561" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1219.399352][ T9533] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1219.698204][ T9533] usb 3-1: device descriptor read/8, error -71 [ 1220.020759][T25311] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.5562: iget: checksum invalid [ 1220.033823][T25311] netdevsim netdevsim1: loading /lib/firmware/updates/syzkaller/./file0 failed with error -74 [ 1220.045853][T25311] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.5562: iget: checksum invalid [ 1220.058603][T25311] netdevsim netdevsim1: loading /lib/firmware/updates/./file0 failed with error -74 [ 1220.069150][T25311] netdevsim netdevsim1: loading /lib/firmware/syzkaller/./file0 failed with error -74 [ 1220.212663][ T9533] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1220.214807][ T5708] usb 2-1: 0:2 : does not exist [ 1220.246469][T25311] netdevsim netdevsim1: loading /lib/firmware/./file0 failed with error -74 [ 1220.257838][T25311] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -74 [ 1220.260550][ T9533] usb 3-1: device descriptor read/8, error -71 [ 1220.268963][ T5708] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1220.283246][T25311] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1220.564961][ T5708] usb 2-1: USB disconnect, device number 7 [ 1220.587876][ T8724] udevd[8724]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1220.669534][ T9533] usb usb3-port1: unable to enumerate USB device [ 1220.767517][T25321] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5565'. [ 1220.931419][ T29] audit: type=1400 audit(1781694168.954:1987): avc: denied { ioctl } for pid=25322 comm="syz.2.5566" path="socket:[93895]" dev="sockfs" ino=93895 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1220.972799][ T5708] IPVS: starting estimator thread 0... [ 1221.270911][T25327] IPVS: using max 120 ests per chain, 288000 per kthread [ 1221.289264][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1221.439383][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1221.450208][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.461957][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.472310][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1221.486203][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1221.498874][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.525129][ T10] usb 2-1: config 0 descriptor?? [ 1222.010451][ T10] hid (null): unknown global tag 0xd [ 1222.022021][ T10] hid (null): unknown global tag 0xe [ 1222.117083][ T10] hid (null): unknown global tag 0xe [ 1222.202161][ T10] hid (null): unknown global tag 0xc [ 1222.287585][ T10] hid (null): global environment stack underflow [ 1222.312018][ T8724] EXT4-fs error: 11 callbacks suppressed [ 1222.312032][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1222.326301][ T10] usb 2-1: USB disconnect, device number 8 [ 1222.343621][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1222.354908][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1222.390363][ T29] audit: type=1400 audit(1781694170.404:1988): avc: denied { mount } for pid=25339 comm="syz.0.5572" name="/" dev="ramfs" ino=94447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1222.642308][T25350] fuse: fd is not a fuse device [ 1222.655336][T25350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5576'. [ 1222.675900][T25350] openvswitch: netlink: Missing key (keys=240, expected=2000) [ 1222.959179][ T9533] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1223.140471][ T9533] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1223.163541][ T9533] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1223.206240][ T9533] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1223.241374][ T9533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.257389][ T29] audit: type=1326 audit(1781694171.275:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25357 comm="syz.0.5579" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65a4b9ce59 code=0x7ffb0000 [ 1223.327422][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1223.414117][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1223.438594][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1223.504246][ T9533] usb 6-1: GET_CAPABILITIES returned 0 [ 1223.511138][ T9533] usbtmc 6-1:16.0: can't read capabilities [ 1223.939166][ T9533] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1224.118868][ T29] audit: type=1400 audit(1781694172.135:1990): avc: denied { watch watch_reads } for pid=25364 comm="syz.2.5582" path="pipe:[93951]" dev="pipefs" ino=93951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1224.159732][ T9533] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1224.172904][ T9533] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1224.199053][ T9533] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1224.211630][ T9533] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1224.227035][ T9533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.250425][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1224.263829][ T9533] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1224.271912][ T5708] usb 6-1: USB disconnect, device number 35 [ 1224.273333][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1224.302531][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1224.400067][T25371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5584'. [ 1224.424482][ T9533] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1224.889435][T25373] syzkaller0: entered promiscuous mode [ 1224.895324][T25373] syzkaller0: entered allmulticast mode [ 1224.935745][ T10] usb 2-1: USB disconnect, device number 9 [ 1225.010733][T25378] openvswitch: netlink: IP tunnel dst address not specified [ 1225.019569][T25378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1225.508997][ T5708] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1225.674985][ T5708] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.708220][ T5708] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1225.730429][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.746952][ T5708] usb 3-1: Product: syz [ 1225.755301][ T5708] usb 3-1: Manufacturer: syz [ 1225.765091][ T5708] usb 3-1: SerialNumber: syz [ 1225.781159][ T5708] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1225.798156][ T5708] dvb-usb: bulk message failed: -22 (3/0) [ 1225.830366][ T5708] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1225.853222][ T5708] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1225.877270][ T5708] dvb_usb_umt_010 3-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1225.908444][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1226.015984][ T5708] usb 3-1: USB disconnect, device number 115 [ 1226.023671][T25377] ALSA: mixer_oss: invalid OSS volume 'u' [ 1226.055198][T25402] veth0_to_bond: entered promiscuous mode [ 1226.098050][ T29] audit: type=1400 audit(1781694174.115:1991): avc: denied { ioctl } for pid=25398 comm="syz.1.5592" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1226.127325][T25402] hsr1: entered allmulticast mode [ 1226.138717][T25402] dummy0: entered allmulticast mode [ 1226.156319][T25402] veth0_to_bond: entered allmulticast mode [ 1226.191397][ T29] audit: type=1326 audit(1781694174.215:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25403 comm="syz.5.5593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455bb9ce59 code=0x7ffc0000 [ 1226.256859][ T29] audit: type=1326 audit(1781694174.215:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25403 comm="syz.5.5593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455bb9ce59 code=0x7ffc0000 [ 1226.329387][ T29] audit: type=1326 audit(1781694174.215:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25403 comm="syz.5.5593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455bb9ce59 code=0x7ffc0000 [ 1226.397936][ T29] audit: type=1326 audit(1781694174.215:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25403 comm="syz.5.5593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f455bb9ce59 code=0x7ffc0000 [ 1226.465752][ T29] audit: type=1326 audit(1781694174.245:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25403 comm="syz.5.5593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455bb9ce59 code=0x7ffc0000 [ 1226.679061][ T29] audit: type=1326 audit(1781694174.335:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25403 comm="syz.5.5593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455bb9ce59 code=0x7ffc0000 [ 1226.852236][ T5715] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1227.044176][ T29] audit: type=1326 audit(1781694174.335:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25403 comm="syz.5.5593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455bb9ce59 code=0x7ffc0000 [ 1227.108149][ T5715] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1227.133788][ T29] audit: type=1326 audit(1781694174.335:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25403 comm="syz.5.5593" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f455bb9ce59 code=0x7ffc0000 [ 1227.161770][ T5715] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1227.200090][ T5715] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1227.211081][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1227.229952][ T5715] usb 6-1: Product: syz [ 1227.239173][ T5715] usb 6-1: Manufacturer: syz [ 1227.259817][ T5715] usb 6-1: SerialNumber: syz [ 1227.302834][ T5715] usb 6-1: config 0 descriptor?? [ 1227.321023][ T5715] usb 6-1: selecting invalid altsetting 0 [ 1227.387367][T25420] EXT4-fs error: 2 callbacks suppressed [ 1227.387381][T25420] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1227.387948][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1227.420051][T25421] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:5: iget: checksum invalid [ 1227.449162][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1227.479152][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1227.582916][ T9533] usb 6-1: USB disconnect, device number 36 [ 1227.582935][ C0] usb 6-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 1227.598107][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 1227.624125][T25425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5598'. [ 1227.769361][T25432] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:1: iget: checksum invalid [ 1227.800531][T25436] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1228.101489][T25445] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:3: iget: checksum invalid [ 1228.127837][T25446] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:3: iget: checksum invalid [ 1228.157277][T25447] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:3: iget: checksum invalid [ 1228.955158][T25462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5606'. [ 1229.379434][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 1229.379450][ T29] audit: type=1326 audit(1781694177.405:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25471 comm="syz.5.5608" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f455bb9ce59 code=0x0 [ 1229.688837][ T6762] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1229.840276][ T9533] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1229.868782][ T6762] usb 6-1: Using ep0 maxpacket: 32 [ 1229.879409][ T6762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1229.891654][ T6762] usb 6-1: can't read configurations, error -61 [ 1229.899463][T25479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1229.919010][T25479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1230.009891][ T9533] usb 3-1: Using ep0 maxpacket: 32 [ 1230.017546][ T9533] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1230.026173][ T9533] usb 3-1: config 0 has no interface number 0 [ 1230.035502][ T9533] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1230.045134][ T6762] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1230.053213][ T9533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.061709][ T9533] usb 3-1: Product: syz [ 1230.065969][ T9533] usb 3-1: Manufacturer: syz [ 1230.071309][ T9533] usb 3-1: SerialNumber: syz [ 1230.077088][ T9533] usb 3-1: config 0 descriptor?? [ 1230.218746][ T6762] usb 6-1: Using ep0 maxpacket: 32 [ 1230.225942][ T6762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1230.233695][ T6762] usb 6-1: can't read configurations, error -61 [ 1230.240666][ T6762] usb usb6-port1: attempt power cycle [ 1230.489337][ T9533] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1230.500310][ T9533] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1230.578757][ T6762] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1230.599100][ T6762] usb 6-1: Using ep0 maxpacket: 32 [ 1230.605755][ T6762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1230.613870][ T6762] usb 6-1: can't read configurations, error -61 [ 1230.691007][T25475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.700305][T25475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.712385][ T9533] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1230.724050][ T9533] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1230.734856][ T9533] usb 3-1: USB disconnect, device number 116 [ 1230.748951][ T6762] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1230.770235][ T6762] usb 6-1: Using ep0 maxpacket: 32 [ 1230.776930][ T6762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1230.785292][ T6762] usb 6-1: can't read configurations, error -61 [ 1230.799634][ T6762] usb usb6-port1: unable to enumerate USB device [ 1231.589723][T25511] ubi: mtd0 is already attached to ubi16 [ 1232.748489][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5623'. [ 1233.109472][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.219580][ T6061] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 1233.230066][ T6061] Registered device nBox DVB-T Dongle [ 1233.242269][ T6061] usb 5-1: USB disconnect, device number 24 [ 1233.266409][ T6061] Unregistered device nBox DVB-T Dongle [ 1233.268806][ T6061] as10x_usb: device has been disconnected [ 1233.361792][T25539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1233.408826][T25539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1233.478700][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1233.695096][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1233.708358][T25547] EXT4-fs error: 12 callbacks suppressed [ 1233.708416][T25547] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:3: iget: checksum invalid [ 1233.906379][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.906558][ T6061] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1233.925128][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1233.943805][T25548] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:14: iget: checksum invalid [ 1233.973196][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1233.983379][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1233.994382][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.064417][ T10] usb 6-1: selecting invalid altsetting 1 [ 1234.099370][ T10] usb 6-1: unit 3 not found! [ 1234.108561][ T6061] usb 5-1: Using ep0 maxpacket: 8 [ 1234.137170][ T6061] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1234.146965][ T6061] usb 5-1: config 2 has no interface number 0 [ 1234.154293][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1234.155574][ T6061] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1234.178210][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1234.179917][ T6061] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1234.202240][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1234.202383][ T6061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.230199][ T6061] usb 5-1: Product: syz [ 1234.235377][ T6061] usb 5-1: Manufacturer: syz [ 1234.236856][ T10] usb 6-1: cannot request logical cluster ID: 0 (err: -5) [ 1234.247979][ T10] usb 6-1: invalid MIXER UNIT descriptor 6 [ 1234.248632][ T6061] usb 5-1: SerialNumber: syz [ 1234.395971][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 1234.452923][ T10] usb 6-1: USB disconnect, device number 41 [ 1234.748486][ T5708] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1234.758536][ T9533] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1234.900014][ T5708] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1234.912787][ T5708] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1234.916774][ T9533] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1234.922704][ T5708] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1234.922736][ T5708] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1234.922756][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.991938][ T9533] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1235.002417][ T9533] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1235.014868][ T6061] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1235.148462][ T6061] usb 5-1: USB disconnect, device number 25 [ 1235.168517][ T9533] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1235.217358][ T5708] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1235.224388][ T9533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.261293][ T5606] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1235.316027][ T6772] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1235.328019][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1235.339815][ T5606] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1235.369120][ T5708] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1235.369472][ T9533] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1235.378348][ T5606] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1235.390132][ T9785] udevd[9785]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.421414][T25560] syzkaller0: entered promiscuous mode [ 1235.427022][T25560] syzkaller0: entered allmulticast mode [ 1235.578658][ T8724] udevd[8724]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.604448][T25561] XFS (nullb0): Invalid superblock magic number [ 1235.620064][ T9533] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1236.015937][T25574] XFS (nullb0): Invalid superblock magic number [ 1236.436729][T25589] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1236.447739][T25589] FAULT_INJECTION: forcing a failure. [ 1236.447739][T25589] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.466007][T25589] CPU: 0 UID: 0 PID: 25589 Comm: syz.4.5641 Tainted: G L syzkaller #0 PREEMPT(full) [ 1236.466035][T25589] Tainted: [L]=SOFTLOCKUP [ 1236.466041][T25589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1236.466051][T25589] Call Trace: [ 1236.466058][T25589] [ 1236.466064][T25589] dump_stack_lvl+0x100/0x190 [ 1236.466085][T25589] should_fail_ex.cold+0x5/0xa [ 1236.466104][T25589] ? fs_reclaim_acquire+0x70/0x100 [ 1236.466121][T25589] ? tomoyo_encode2+0xfb/0x3c0 [ 1236.466144][T25589] should_failslab+0xc2/0x120 [ 1236.466170][T25589] __kmalloc_noprof+0xe0/0x840 [ 1236.466190][T25589] ? d_absolute_path+0x136/0x1b0 [ 1236.466215][T25589] tomoyo_encode2+0xfb/0x3c0 [ 1236.466240][T25589] tomoyo_encode+0x29/0x50 [ 1236.466263][T25589] tomoyo_realpath_from_path+0x18c/0x690 [ 1236.466289][T25589] tomoyo_path_number_perm+0x23c/0x580 [ 1236.466309][T25589] ? tomoyo_path_number_perm+0x22e/0x580 [ 1236.466331][T25589] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1236.466355][T25589] ? preempt_count_add+0x76/0x150 [ 1236.466375][T25589] ? rcu_is_watching+0x12/0xc0 [ 1236.466396][T25589] ? __fget_files+0x215/0x3d0 [ 1236.466411][T25589] ? hook_file_ioctl_common+0x149/0x410 [ 1236.466433][T25589] ? lock_release+0x24d/0x310 [ 1236.466448][T25589] ? __fget_files+0x21f/0x3d0 [ 1236.466465][T25589] security_file_ioctl+0xd3/0x230 [ 1236.466486][T25589] __x64_sys_ioctl+0xb7/0x210 [ 1236.466509][T25589] do_syscall_64+0x115/0x870 [ 1236.466526][T25589] ? clear_bhb_loop+0x40/0x90 [ 1236.466545][T25589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.466561][T25589] RIP: 0033:0x7fc42c79ce59 [ 1236.466573][T25589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.466589][T25589] RSP: 002b:00007fc42d651028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.466605][T25589] RAX: ffffffffffffffda RBX: 00007fc42ca15fa0 RCX: 00007fc42c79ce59 [ 1236.466616][T25589] RDX: 00002000000000c0 RSI: 0000000040026f33 RDI: 0000000000000003 [ 1236.466625][T25589] RBP: 00007fc42d651090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.466634][T25589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.466644][T25589] R13: 00007fc42ca16038 R14: 00007fc42ca15fa0 R15: 00007ffc0cd879a8 [ 1236.466659][T25589] [ 1236.497820][T25590] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1236.785900][T25589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1236.797225][ T5715] usb 2-1: USB disconnect, device number 10 [ 1236.886709][T25594] FAULT_INJECTION: forcing a failure. [ 1236.886709][T25594] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.899762][T25594] CPU: 0 UID: 0 PID: 25594 Comm: syz.4.5643 Tainted: G L syzkaller #0 PREEMPT(full) [ 1236.899788][T25594] Tainted: [L]=SOFTLOCKUP [ 1236.899794][T25594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1236.899804][T25594] Call Trace: [ 1236.899810][T25594] [ 1236.899816][T25594] dump_stack_lvl+0x100/0x190 [ 1236.899836][T25594] should_fail_ex.cold+0x5/0xa [ 1236.899854][T25594] ? fs_reclaim_acquire+0x70/0x100 [ 1236.899870][T25594] ? tomoyo_encode2+0xfb/0x3c0 [ 1236.899892][T25594] should_failslab+0xc2/0x120 [ 1236.899916][T25594] __kmalloc_noprof+0xe0/0x840 [ 1236.899937][T25594] tomoyo_encode2+0xfb/0x3c0 [ 1236.899961][T25594] tomoyo_encode+0x29/0x50 [ 1236.899982][T25594] tomoyo_realpath_from_path+0x18c/0x690 [ 1236.900008][T25594] tomoyo_path_number_perm+0x23c/0x580 [ 1236.900028][T25594] ? tomoyo_path_number_perm+0x22e/0x580 [ 1236.900048][T25594] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1236.900073][T25594] ? preempt_count_add+0x76/0x150 [ 1236.900093][T25594] ? rcu_is_watching+0x12/0xc0 [ 1236.900112][T25594] ? __fget_files+0x215/0x3d0 [ 1236.900128][T25594] ? hook_file_ioctl_common+0x149/0x410 [ 1236.900143][T25594] ? lock_release+0x24d/0x310 [ 1236.900159][T25594] ? __fget_files+0x21f/0x3d0 [ 1236.900176][T25594] security_file_ioctl+0xd3/0x230 [ 1236.900197][T25594] __x64_sys_ioctl+0xb7/0x210 [ 1236.900220][T25594] do_syscall_64+0x115/0x870 [ 1236.900238][T25594] ? clear_bhb_loop+0x40/0x90 [ 1236.900256][T25594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.900273][T25594] RIP: 0033:0x7fc42c79ce59 [ 1236.900286][T25594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.900301][T25594] RSP: 002b:00007fc42d651028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.900318][T25594] RAX: ffffffffffffffda RBX: 00007fc42ca15fa0 RCX: 00007fc42c79ce59 [ 1236.900329][T25594] RDX: 0000000000000000 RSI: 0000000040086201 RDI: 0000000000000004 [ 1236.900339][T25594] RBP: 00007fc42d651090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.900349][T25594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.900358][T25594] R13: 00007fc42ca16038 R14: 00007fc42ca15fa0 R15: 00007ffc0cd879a8 [ 1236.900374][T25594] [ 1236.900432][T25594] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1237.318226][ T5715] usb 3-1: USB disconnect, device number 117 [ 1237.366232][T25600] syzkaller0: entered promiscuous mode [ 1237.371931][T25600] syzkaller0: entered allmulticast mode [ 1237.439564][ T5708] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1237.666445][T25610] syz_tun: entered allmulticast mode [ 1237.673340][T25610] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1237.682203][T25610] mroute: pending queue full, dropping entries [ 1237.820847][ T5708] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1237.829374][ T5708] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.839710][ T5708] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1237.850891][ T5708] usb 6-1: string descriptor 0 read error: -22 [ 1237.857284][ T5708] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1237.866508][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.880894][ T5708] usb 6-1: selecting invalid altsetting 1 [ 1237.893201][ T5708] usb 6-1: unit 3 not found! [ 1238.181502][ T5708] usb 6-1: cannot request logical cluster ID: 0 (err: -5) [ 1238.194111][ T5708] usb 6-1: invalid MIXER UNIT descriptor 6 [ 1238.228655][ T5707] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1238.326642][T25602] syz_tun: left allmulticast mode [ 1238.707692][ T5708] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 1238.733875][ T5708] usb 6-1: USB disconnect, device number 42 [ 1239.828475][ T5707] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1239.842709][T25623] EXT4-fs error: 9 callbacks suppressed [ 1239.842719][T25623] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:16: iget: checksum invalid [ 1239.857059][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.009032][ T5707] usb 5-1: config 0 has no interface number 0 [ 1240.038593][ T5707] usb 5-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1240.074724][ T5707] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1240.107551][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.133599][ T5707] usb 5-1: config 0 descriptor?? [ 1240.151462][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1240.177937][ T5707] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1240.198477][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1240.238701][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1240.267012][T25634] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5655'. [ 1240.613031][T25646] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1240.640075][T25648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1240.735976][T25650] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1241.250290][ T48] usb 5-1: Failed to submit usb control message: -110 [ 1241.278595][ T48] usb 5-1: unable to send the bmi data to the device: -110 [ 1241.331907][ T48] usb 5-1: unable to get target info from device [ 1241.369592][ T48] usb 5-1: could not get target info (-110) [ 1241.394238][T25654] FAULT_INJECTION: forcing a failure. [ 1241.394238][T25654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1241.413986][ T48] usb 5-1: could not probe fw (-110) [ 1241.465212][T25654] CPU: 0 UID: 0 PID: 25654 Comm: syz.5.5657 Tainted: G L syzkaller #0 PREEMPT(full) [ 1241.465239][T25654] Tainted: [L]=SOFTLOCKUP [ 1241.465245][T25654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1241.465255][T25654] Call Trace: [ 1241.465262][T25654] [ 1241.465268][T25654] dump_stack_lvl+0x100/0x190 [ 1241.465290][T25654] should_fail_ex.cold+0x5/0xa [ 1241.465312][T25654] _copy_to_user+0x32/0xd0 [ 1241.465332][T25654] simple_read_from_buffer+0xcb/0x170 [ 1241.465361][T25654] proc_fail_nth_read+0x1af/0x230 [ 1241.465387][T25654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1241.465413][T25654] ? security_file_permission+0x76/0x210 [ 1241.465439][T25654] ? rw_verify_area+0xce/0x6d0 [ 1241.465461][T25654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1241.465487][T25654] vfs_read+0x1e4/0xb40 [ 1241.465513][T25654] ? __pfx_vfs_read+0x10/0x10 [ 1241.465536][T25654] ? rcu_is_watching+0x12/0xc0 [ 1241.465559][T25654] ? __fget_files+0x21f/0x3d0 [ 1241.465579][T25654] ksys_read+0x12a/0x250 [ 1241.465603][T25654] ? __pfx_ksys_read+0x10/0x10 [ 1241.465628][T25654] ? rcu_is_watching+0x12/0xc0 [ 1241.465650][T25654] do_syscall_64+0x115/0x870 [ 1241.465668][T25654] ? clear_bhb_loop+0x40/0x90 [ 1241.465687][T25654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.465705][T25654] RIP: 0033:0x7f455bb5d68e [ 1241.465718][T25654] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1241.465734][T25654] RSP: 002b:00007f455ca0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1241.465756][T25654] RAX: ffffffffffffffda RBX: 00007f455ca0e6c0 RCX: 00007f455bb5d68e [ 1241.465768][T25654] RDX: 000000000000000f RSI: 00007f455ca0e0a0 RDI: 0000000000000004 [ 1241.465779][T25654] RBP: 00007f455ca0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.465789][T25654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.465799][T25654] R13: 00007f455be16128 R14: 00007f455be16090 R15: 00007ffd4ef84078 [ 1241.465816][T25654] [ 1243.496657][T25667] binder: 25665:25667 ioctl c0306201 200000000080 returned -14 [ 1243.546324][T25670] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:14: iget: checksum invalid [ 1243.608653][T25676] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:2: iget: checksum invalid [ 1243.622131][T25677] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:14: iget: checksum invalid [ 1243.658194][ T5707] usb 5-1: USB disconnect, device number 26 [ 1243.677563][T25678] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:2: iget: checksum invalid [ 1243.726863][T25674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5663'. [ 1244.017990][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1244.183956][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1244.192116][ T5707] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1244.241429][T25690] CIFS mount error: No usable UNC path provided in device string! [ 1244.241429][T25690] [ 1244.251917][T25690] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1244.478823][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.496826][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1244.518526][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1244.526079][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1244.535360][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.566236][ T10] usb 6-1: selecting invalid altsetting 1 [ 1244.582275][ T10] usb 6-1: unit 3 not found! [ 1244.619089][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.640510][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.654801][ T5707] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1244.667477][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.696273][ T5707] usb 2-1: config 0 descriptor?? [ 1244.765592][ T10] usb 6-1: cannot request logical cluster ID: 0 (err: -5) [ 1244.773332][ T10] usb 6-1: invalid MIXER UNIT descriptor 6 [ 1244.801728][T25699] CIFS mount error: No usable UNC path provided in device string! [ 1244.801728][T25699] [ 1244.832326][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 1244.850670][T25699] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1245.107319][ T10] usb 6-1: USB disconnect, device number 43 [ 1245.156702][T25705] PKCS8: Unsupported PKCS#8 version [ 1245.166676][T25705] CIFS: VFS: UNC: missing share name [ 1245.172135][T25705] CIFS: VFS: Malformed UNC in devname [ 1245.275716][ T5606] EXT4-fs error: 9 callbacks suppressed [ 1245.275730][ T5606] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1245.292647][T25706] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1259: comm kworker/u8:4: iget: checksum invalid [ 1245.305078][ T5606] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1245.321291][ T5606] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1245.419810][T25709] FAULT_INJECTION: forcing a failure. [ 1245.419810][T25709] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.450538][T25709] CPU: 1 UID: 0 PID: 25709 Comm: syz.4.5671 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.450561][T25709] Tainted: [L]=SOFTLOCKUP [ 1245.450565][T25709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1245.450572][T25709] Call Trace: [ 1245.450575][T25709] [ 1245.450579][T25709] dump_stack_lvl+0x100/0x190 [ 1245.450594][T25709] should_fail_ex.cold+0x5/0xa [ 1245.450610][T25709] ? fs_reclaim_acquire+0x70/0x100 [ 1245.450626][T25709] ? tomoyo_encode2+0xfb/0x3c0 [ 1245.450650][T25709] should_failslab+0xc2/0x120 [ 1245.450673][T25709] __kmalloc_noprof+0xe0/0x840 [ 1245.450692][T25709] tomoyo_encode2+0xfb/0x3c0 [ 1245.450707][T25709] tomoyo_encode+0x29/0x50 [ 1245.450721][T25709] tomoyo_realpath_from_path+0x18c/0x690 [ 1245.450743][T25709] tomoyo_path_number_perm+0x23c/0x580 [ 1245.450758][T25709] ? tomoyo_path_number_perm+0x22e/0x580 [ 1245.450779][T25709] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1245.450802][T25709] ? preempt_count_add+0x76/0x150 [ 1245.450821][T25709] ? rcu_is_watching+0x12/0xc0 [ 1245.450837][T25709] ? __fget_files+0x215/0x3d0 [ 1245.450847][T25709] ? hook_file_ioctl_common+0x149/0x410 [ 1245.450858][T25709] ? lock_release+0x24d/0x310 [ 1245.450868][T25709] ? __fget_files+0x21f/0x3d0 [ 1245.450878][T25709] security_file_ioctl+0xd3/0x230 [ 1245.450893][T25709] __x64_sys_ioctl+0xb7/0x210 [ 1245.450916][T25709] do_syscall_64+0x115/0x870 [ 1245.450934][T25709] ? clear_bhb_loop+0x40/0x90 [ 1245.450951][T25709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.450967][T25709] RIP: 0033:0x7fc42c79ce59 [ 1245.450981][T25709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.450997][T25709] RSP: 002b:00007fc42d651028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.451013][T25709] RAX: ffffffffffffffda RBX: 00007fc42ca15fa0 RCX: 00007fc42c79ce59 [ 1245.451024][T25709] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1245.451033][T25709] RBP: 00007fc42d651090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.451043][T25709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.451054][T25709] R13: 00007fc42ca16038 R14: 00007fc42ca15fa0 R15: 00007ffc0cd879a8 [ 1245.451069][T25709] [ 1245.451112][T25709] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1245.548299][ T5707] usb 2-1: language id specifier not provided by device, defaulting to English [ 1245.836679][T25715] input: syz0 as /devices/virtual/input/input171 [ 1245.840865][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1245.874694][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1245.896072][ T8724] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1135: comm udevd: iget: checksum invalid [ 1245.938485][T25719] FAULT_INJECTION: forcing a failure. [ 1245.938485][T25719] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.978155][T25719] CPU: 0 UID: 0 PID: 25719 Comm: syz.2.5675 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.978185][T25719] Tainted: [L]=SOFTLOCKUP [ 1245.978194][T25719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1245.978205][T25719] Call Trace: [ 1245.978211][T25719] [ 1245.978217][T25719] dump_stack_lvl+0x100/0x190 [ 1245.978245][T25719] should_fail_ex.cold+0x5/0xa [ 1245.978265][T25719] ? fs_reclaim_acquire+0x70/0x100 [ 1245.978282][T25719] ? tomoyo_encode2+0xfb/0x3c0 [ 1245.978305][T25719] should_failslab+0xc2/0x120 [ 1245.978330][T25719] __kmalloc_noprof+0xe0/0x840 [ 1245.978351][T25719] tomoyo_encode2+0xfb/0x3c0 [ 1245.978377][T25719] tomoyo_encode+0x29/0x50 [ 1245.978399][T25719] tomoyo_realpath_from_path+0x18c/0x690 [ 1245.978426][T25719] tomoyo_path_number_perm+0x23c/0x580 [ 1245.978447][T25719] ? tomoyo_path_number_perm+0x22e/0x580 [ 1245.978470][T25719] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1245.978494][T25719] ? preempt_count_add+0x76/0x150 [ 1245.978515][T25719] ? rcu_is_watching+0x12/0xc0 [ 1245.978536][T25719] ? __fget_files+0x215/0x3d0 [ 1245.978552][T25719] ? hook_file_ioctl_common+0x149/0x410 [ 1245.978569][T25719] ? lock_release+0x24d/0x310 [ 1245.978585][T25719] ? __fget_files+0x21f/0x3d0 [ 1245.978603][T25719] security_file_ioctl+0xd3/0x230 [ 1245.978627][T25719] __x64_sys_ioctl+0xb7/0x210 [ 1245.978651][T25719] do_syscall_64+0x115/0x870 [ 1245.978670][T25719] ? clear_bhb_loop+0x40/0x90 [ 1245.978688][T25719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.978706][T25719] RIP: 0033:0x7fd40119ce59 [ 1245.978719][T25719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.978735][T25719] RSP: 002b:00007fd402136028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.978753][T25719] RAX: ffffffffffffffda RBX: 00007fd401415fa0 RCX: 00007fd40119ce59 [ 1245.978764][T25719] RDX: 0000200000000000 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1245.978775][T25719] RBP: 00007fd402136090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.978785][T25719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.978796][T25719] R13: 00007fd401416038 R14: 00007fd401415fa0 R15: 00007ffd7c5f7eb8 [ 1245.978812][T25719] [ 1245.980968][T25719] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1246.596669][ T5707] uclogic 0003:256C:006D.0051: v1 frame probing failed: -71 [ 1246.884163][ T5707] uclogic 0003:256C:006D.0051: failed probing parameters: -71 [ 1246.915503][ T5707] uclogic 0003:256C:006D.0051: probe with driver uclogic failed with error -71 [ 1246.953595][ T5707] usb 2-1: USB disconnect, device number 11 [ 1247.180293][T25734] FAULT_INJECTION: forcing a failure. [ 1247.180293][T25734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.215257][T25734] CPU: 0 UID: 0 PID: 25734 Comm: syz.1.5679 Tainted: G L syzkaller #0 PREEMPT(full) [ 1247.215283][T25734] Tainted: [L]=SOFTLOCKUP [ 1247.215289][T25734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1247.215300][T25734] Call Trace: [ 1247.215306][T25734] [ 1247.215312][T25734] dump_stack_lvl+0x100/0x190 [ 1247.215334][T25734] should_fail_ex.cold+0x5/0xa [ 1247.215355][T25734] _copy_from_user+0x2e/0xd0 [ 1247.215375][T25734] move_addr_to_kernel+0x65/0x170 [ 1247.215396][T25734] copy_msghdr_from_user+0x3f0/0x4c0 [ 1247.215415][T25734] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1247.215437][T25734] ? kstrtouint_from_user+0x13c/0x1d0 [ 1247.215464][T25734] ___sys_sendmsg+0x106/0x1e0 [ 1247.215482][T25734] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.215502][T25734] ? get_pid_task+0x106/0x250 [ 1247.215526][T25734] ? rcu_is_watching+0x12/0xc0 [ 1247.215554][T25734] __sys_sendmsg+0x160/0x210 [ 1247.215577][T25734] ? __pfx___sys_sendmsg+0x10/0x10 [ 1247.215606][T25734] ? rcu_is_watching+0x12/0xc0 [ 1247.215627][T25734] do_syscall_64+0x115/0x870 [ 1247.215645][T25734] ? clear_bhb_loop+0x40/0x90 [ 1247.215665][T25734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.215682][T25734] RIP: 0033:0x7f981019ce59 [ 1247.215696][T25734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.215712][T25734] RSP: 002b:00007f9811033028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.215738][T25734] RAX: ffffffffffffffda RBX: 00007f9810415fa0 RCX: 00007f981019ce59 [ 1247.215750][T25734] RDX: 0000000000048800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1247.215761][T25734] RBP: 00007f9811033090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.215771][T25734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.215781][T25734] R13: 00007f9810416038 R14: 00007f9810415fa0 R15: 00007ffe3ef20a68 [ 1247.215798][T25734] [ 1247.524392][T25736] FAULT_INJECTION: forcing a failure. [ 1247.524392][T25736] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.547867][ T6061] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1247.617939][T25736] CPU: 1 UID: 0 PID: 25736 Comm: syz.2.5680 Tainted: G L syzkaller #0 PREEMPT(full) [ 1247.617961][T25736] Tainted: [L]=SOFTLOCKUP [ 1247.617965][T25736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1247.617971][T25736] Call Trace: [ 1247.617975][T25736] [ 1247.617979][T25736] dump_stack_lvl+0x100/0x190 [ 1247.617994][T25736] should_fail_ex.cold+0x5/0xa [ 1247.618007][T25736] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 1247.618022][T25736] should_failslab+0xc2/0x120 [ 1247.618038][T25736] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1247.618052][T25736] ? __alloc_skb+0x140/0x710 [ 1247.618066][T25736] ? __alloc_skb+0x5b7/0x710 [ 1247.618081][T25736] __alloc_skb+0x140/0x710 [ 1247.618094][T25736] ? __alloc_skb+0x5b7/0x710 [ 1247.618107][T25736] ? __pfx___alloc_skb+0x10/0x10 [ 1247.618120][T25736] ? netlink_autobind.isra.0+0x160/0x370 [ 1247.618134][T25736] netlink_alloc_large_skb+0x69/0x150 [ 1247.618146][T25736] netlink_sendmsg+0x680/0xda0 [ 1247.618159][T25736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.618173][T25736] ____sys_sendmsg+0x9e1/0xb70 [ 1247.618183][T25736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.618196][T25736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.618208][T25736] ? kstrtouint_from_user+0x13c/0x1d0 [ 1247.618228][T25736] ___sys_sendmsg+0x190/0x1e0 [ 1247.618240][T25736] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.618252][T25736] ? get_pid_task+0x106/0x250 [ 1247.618267][T25736] ? rcu_is_watching+0x12/0xc0 [ 1247.618283][T25736] __sys_sendmsg+0x160/0x210 [ 1247.618298][T25736] ? __pfx___sys_sendmsg+0x10/0x10 [ 1247.618314][T25736] ? rcu_is_watching+0x12/0xc0 [ 1247.618327][T25736] do_syscall_64+0x115/0x870 [ 1247.618339][T25736] ? clear_bhb_loop+0x40/0x90 [ 1247.618358][T25736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.618375][T25736] RIP: 0033:0x7fd40119ce59 [ 1247.618389][T25736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.618405][T25736] RSP: 002b:00007fd402136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.618419][T25736] RAX: ffffffffffffffda RBX: 00007fd401415fa0 RCX: 00007fd40119ce59 [ 1247.618426][T25736] RDX: 0000000000000804 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1247.618433][T25736] RBP: 00007fd402136090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.618439][T25736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.618445][T25736] R13: 00007fd401416038 R14: 00007fd401415fa0 R15: 00007ffd7c5f7eb8 [ 1247.618455][T25736] [ 1247.882065][T17015] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1248.210404][T25740] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.5681: iget: checksum invalid [ 1248.222888][T25740] netdevsim netdevsim1: loading /lib/firmware/updates/syzkaller/./file0 failed with error -74 [ 1248.234512][T25740] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.5681: iget: checksum invalid [ 1248.250660][ T6061] usb 6-1: Using ep0 maxpacket: 16 [ 1248.259407][ T6061] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 1248.280754][ T6061] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.318656][T25740] netdevsim netdevsim1: loading /lib/firmware/updates/./file0 failed with error -74 [ 1248.321424][ T6061] usb 6-1: config 0 has no interface number 0 [ 1248.336899][ T6061] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1248.348239][T25740] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.5681: iget: checksum invalid [ 1248.583637][T25740] netdevsim netdevsim1: loading /lib/firmware/syzkaller/./file0 failed with error -74 [ 1248.593748][ T6061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.602623][ T6061] usb 6-1: Product: syz [ 1248.613838][T25740] netdevsim netdevsim1: loading /lib/firmware/./file0 failed with error -74 [ 1248.622698][T25740] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -74 [ 1248.622814][ T6061] usb 6-1: Manufacturer: syz [ 1248.637077][T25740] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1248.637185][ T6061] usb 6-1: SerialNumber: syz [ 1248.710468][ T6061] usb 6-1: config 0 descriptor?? [ 1248.734024][ T5718] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1248.754367][ T6061] hub 6-1:0.16: bad descriptor, ignoring hub [ 1248.801723][ T6061] hub 6-1:0.16: probe with driver hub failed with error -5 [ 1248.917765][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 1248.986296][ T6061] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1249.103631][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.140240][ T3776] usb 6-1: Failed to submit usb control message: -71 [ 1249.154389][ T3776] usb 6-1: unable to send the bmi data to the device: -71 [ 1249.164210][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.184663][ T3776] usb 6-1: unable to get target info from device [ 1249.204563][ T5718] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1249.214149][ T3776] usb 6-1: could not get target info (-71) [ 1249.221469][ T3776] usb 6-1: could not probe fw (-71) [ 1249.228601][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.244664][T25779] CIFS mount error: No usable UNC path provided in device string! [ 1249.244664][T25779] [ 1249.254876][T25779] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1249.269085][ T5718] usb 3-1: config 0 descriptor?? [ 1249.423728][T25788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1249.507776][ T6061] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1249.567676][ T5707] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1249.577046][T25793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5695'. [ 1249.647697][ T6061] usb 5-1: device descriptor read/64, error -71 [ 1249.717637][ T5707] usb 2-1: Using ep0 maxpacket: 16 [ 1249.723917][ T5707] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1249.736884][ T5707] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1249.743584][ T5707] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1249.752738][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.762237][ T5707] usb 2-1: config 0 descriptor?? [ 1249.885942][T25750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.894571][T25750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.911655][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1354.918625][ C0] rcu: (detected by 0, t=10502 jiffies, g=144137, q=244 ncpus=2) [ 1354.926412][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295072661-4295062159), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1354.939755][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g144137 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1354.951015][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1354.960963][ C0] rcu: RCU grace-period kthread stack dump: [ 1354.966832][ C0] task:rcu_preempt state:R running task stack:28576 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1354.980305][ C0] Call Trace: [ 1354.983569][ C0] [ 1354.986489][ C0] __schedule+0x125c/0x6730 [ 1354.990980][ C0] ? rcu_is_watching+0x12/0xc0 [ 1354.995733][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1355.001788][ C0] ? __pfx___schedule+0x10/0x10 [ 1355.006622][ C0] ? rcu_is_watching+0x12/0xc0 [ 1355.011375][ C0] ? schedule+0x2bf/0x390 [ 1355.015687][ C0] ? lock_release+0x24d/0x310 [ 1355.020346][ C0] schedule+0xdd/0x390 [ 1355.024397][ C0] schedule_timeout+0x127/0x280 [ 1355.029236][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1355.034597][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1355.040046][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1355.045321][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1355.051110][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1355.056561][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1355.061318][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1355.066594][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1355.071524][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1355.076712][ C0] ? rcu_is_watching+0x12/0xc0 [ 1355.081460][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1355.087514][ C0] rcu_gp_kthread+0x179/0x230 [ 1355.092183][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1355.097375][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1355.103425][ C0] ? __kthread_parkme+0x18c/0x230 [ 1355.108436][ C0] ? kthread+0x13a/0x450 [ 1355.112667][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1355.117855][ C0] kthread+0x370/0x450 [ 1355.121912][ C0] ? __pfx_kthread+0x10/0x10 [ 1355.126492][ C0] ret_from_fork+0x72b/0xd50 [ 1355.131068][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.136165][ C0] ? __switch_to+0x800/0x10f0 [ 1355.140835][ C0] ? __pfx_kthread+0x10/0x10 [ 1355.145415][ C0] ret_from_fork_asm+0x1a/0x30 [ 1355.150174][ C0] [ 1355.153174][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1355.159474][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1355.164660][ C1] NMI backtrace for cpu 1 [ 1355.164674][ C1] CPU: 1 UID: 0 PID: 25750 Comm: syz.2.5684 Tainted: G L syzkaller #0 PREEMPT(full) [ 1355.164693][ C1] Tainted: [L]=SOFTLOCKUP [ 1355.164698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1355.164705][ C1] RIP: 0010:advance_sched+0x27c/0xd20 [ 1355.164726][ C1] Code: e7 4c 89 ee e8 45 3c 6b f8 4d 39 ec 0f 84 d9 07 00 00 e8 17 42 6b f8 48 8b 44 24 08 48 8d 9d 10 01 00 00 48 8d b8 40 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f [ 1355.164738][ C1] RSP: 0018:ffffc90000a08de8 EFLAGS: 00000046 [ 1355.164750][ C1] RAX: ffff888075229800 RBX: ffff888075229d10 RCX: ffffffff899e02bb [ 1355.164759][ C1] RDX: ffff888027864a80 RSI: ffffffff899e02c9 RDI: ffff888075229940 [ 1355.164768][ C1] RBP: ffff888075229c00 R08: 0000000000000006 R09: 18b9dc9556a400c0 [ 1355.164777][ C1] R10: 0000000000000000 R11: ffffc90000a08ff8 R12: 18b9dc9556a400c0 [ 1355.164785][ C1] R13: 0000000000000000 R14: ffff8880b8528640 R15: ffff8880b8528690 [ 1355.164794][ C1] FS: 00007fd4021366c0(0000) GS:ffff88812445f000(0000) knlGS:0000000000000000 [ 1355.164809][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1355.164818][ C1] CR2: 0000001b34e03000 CR3: 0000000092d52000 CR4: 00000000003526f0 [ 1355.164827][ C1] DR0: ffffffffffffffff DR1: 00000000000001f7 DR2: 00000000ffffffff [ 1355.164835][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1355.164844][ C1] Call Trace: [ 1355.164849][ C1] [ 1355.164856][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1355.164871][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1355.164888][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1355.164907][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1355.164927][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1355.164945][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1355.164959][ C1] [ 1355.164963][ C1] [ 1355.164968][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1355.164983][ C1] RIP: 0010:smp_call_function_many_cond+0x657/0x16c0 [ 1355.165005][ C1] Code: 81 0c 00 44 89 e6 bf 08 00 00 00 e8 b3 7b 0c 00 41 83 fc 08 75 09 e8 f8 80 0c 00 90 0f 0b 90 41 be 08 00 00 00 e9 5b fc ff ff e4 80 0c 00 48 c7 c0 88 a8 d8 90 48 ba 00 00 00 00 00 fc ff df [ 1355.165017][ C1] RSP: 0018:ffffc90005e3fb40 EFLAGS: 00000246 [ 1355.165027][ C1] RAX: ffffc900121d5000 RBX: ffffffff90d92764 RCX: ffffffff81fcbf63 [ 1355.165036][ C1] RDX: 0000000000001168 RSI: 000000000000008b RDI: 0000000000400000 [ 1355.165045][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1355.165053][ C1] R10: 0000000000000000 R11: 0000000000000228 R12: 0000000000000001 [ 1355.165061][ C1] R13: 0000000000000000 R14: fcf86d2a995fd432 R15: 0000000000000001 [ 1355.165071][ C1] ? smp_call_function_many_cond+0x1c3/0x16c0 [ 1355.165094][ C1] ? __pfx_retrigger_next_event+0x10/0x10 [ 1355.165111][ C1] ? rcu_is_watching+0x12/0xc0 [ 1355.165126][ C1] ? clock_was_set+0x1c3/0x850 [ 1355.165142][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1355.165162][ C1] ? lock_release+0x24d/0x310 [ 1355.165174][ C1] ? clock_was_set+0x5cf/0x850 [ 1355.165189][ C1] ? rcu_is_watching+0x12/0xc0 [ 1355.165204][ C1] ? rcu_is_watching+0x12/0xc0 [ 1355.165218][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1355.165233][ C1] clock_was_set+0x61c/0x850 [ 1355.165250][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 1355.165266][ C1] ? rcu_is_watching+0x12/0xc0 [ 1355.165281][ C1] ? rcu_is_watching+0x12/0xc0 [ 1355.165296][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1355.165310][ C1] do_settimeofday64+0x330/0x4d0 [ 1355.165336][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 1355.165354][ C1] ? security_capable+0x80/0x260 [ 1355.165369][ C1] ? get_ts_clock+0x41/0x50 [ 1355.165387][ C1] ? capable+0xd3/0xf0 [ 1355.165400][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 1355.165414][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 1355.165433][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 1355.165449][ C1] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1355.165468][ C1] ? syscall_user_dispatch+0x76/0x130 [ 1355.165483][ C1] ? rcu_is_watching+0x12/0xc0 [ 1355.165498][ C1] do_syscall_64+0x115/0x870 [ 1355.165512][ C1] ? clear_bhb_loop+0x40/0x90 [ 1355.165527][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.165541][ C1] RIP: 0033:0x7fd40119ce59 [ 1355.165552][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.165564][ C1] RSP: 002b:00007fd402136028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 1355.165576][ C1] RAX: ffffffffffffffda RBX: 00007fd401415fa0 RCX: 00007fd40119ce59 [ 1355.165585][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 1355.165593][ C1] RBP: 00007fd401232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1355.165601][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.165609][ C1] R13: 00007fd401416038 R14: 00007fd401415fa0 R15: 00007ffd7c5f7eb8 [ 1355.165622][ C1]