last executing test programs: 7.494810581s ago: executing program 2 (id=1637): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000100008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) chdir(&(0x7f0000000540)='./cgroup\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000000)=@ceph_nfs_confh={0x3, 0x2, {0x1, 0xfffffffffffffff7}}, 0x513300) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x20, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 7.442106082s ago: executing program 1 (id=1638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000002cc0)={0x0, 0x0, @ioapic={0x1bbbc1000, 0xffffffff, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0xbc}, {}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {0x20}, {}, {0x0, 0x1}, {0x3, 0x6}, {0x2}, {0x0, 0x0, 0x0, '\x00', 0x5}, {}, {}, {}, {}, {0xff, 0x0, 0x40}]}}) syz_io_uring_setup(0x59ff, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2, 0x55}, &(0x7f0000000340)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1c, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000d00)=[{{0x0, 0xffffffffffffffb6, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000480)=@file={0xfd, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="a91399100000000100000001000000", @ANYRES32=r5], 0x10, 0x4010}}], 0x2, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xc0002009}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x21}, @ioring_restriction_sqe_op={0x1, 0x5}, @ioring_restriction_register_op={0x0, 0x5}], 0x3) r9 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040, 0x0, 0x3}) r10 = syz_open_procfs(0x0, &(0x7f0000000500)='wchan\x00') read$FUSE(r10, &(0x7f0000000c80)={0x2020}, 0x2020) preadv(r10, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/193, 0xc1}, {0x0}], 0x2, 0x74, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="9000d75600000000000000000000000000006115f13bdc4a6bbafad0cf47bdff79743aa8e56b625a7947e3c74232ec8cf3d47d52fa41973a0ce1ef9144059b27151b9c518e340ed42d496748cda6083ecbca1e5c4424c2180fa5917b49c9ac0574040c2081a7545dc2c4ed8054811cccbcae4658dd5ffcef140c1f0cc2236cfdfe7f20ed15edb9e7f54e4c91fc0324bd8118a75a5c29ac239196d237a3bf8142d0aeda3378530559ef990ea981826fb02a7a72772d48c467ff5e8ae86f67889285", @ANYRES32=r10, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r6], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x4}, 0x20) syz_open_dev$dri(0x0, 0xabd7, 0x6481c0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x10040815}, 0x2000c000) syz_usb_connect(0x6, 0x24, &(0x7f00000008c0)=ANY=[@ANYRES8=r9, @ANYBLOB="9c5d45bc16cad9eb6af3a2da3c1c0ec584cf80ba832899808d838ae309d8145b32cb29333b9d79a3f2fe429b9892555a3887133c4787df8b2a1cb09bd4dc3976a6aefd99df5eabf0484d402f8b2dbcaf5027e8599a2366474464753c2153fcee74957dc50d87638a698f1f5ce25b23254bffd706a7cf48588c951ef3d12d842fd30ee42dcfef9167bdb12ca3f74d6db1a48d6a38555caea85876469049eab2993e74e76743fa622ff24eb8d4256bfb30259286d848ec5dd86c247cb1f64bbf0eba5487e996ad00df0a9cbc695654255c3177867241192f16d2f5581f0f3f335938874201af320bd460648e5db548102c154c", @ANYRESDEC=r4], 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101301, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f00000002c0)) memfd_create(&(0x7f0000000a00)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Qz\x9f\x9f\xc92\xe2D\x03\x00P\xf0\x9d\xc5?\xaek%\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04\x00\x00\x00\x00\xb3\xa2\xc9&@\xca\xd4\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7Jjr\x10\xcb$\x01\x06~W\xda9VsA\xaf\xf3\xf8A\xf6\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xef\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38j\x92\xd4\x8a\x00b\xa7\xd5\x1b\x12\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x06\x00\x00\x00\x00\x00\x00\x00\x00{\xad\x89\x8f\x83\xbd!\xf8K\xfa\f\xf3\xb4g\xa5\xb0.S\xd4\a\x7f;\xd2&{\xab\xd3E\xed\xe3\x93\xeb`\x93\x13\xc2\x93\xaa0\x97\xfc\xc3\x02V\xd6\x18s\x9c5\xf8\xe2\xe6\xe2\xa5~\xf1\xbb\xb5F\f,plK\x12\'\x9aT\xda|\n\xea\x00\xe7\x10\x80\x84\xc5u\'s\xb5o\f\xffj\x97r\x8f\x94\xa1', 0x3) socket$kcm(0x10, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) 6.055036054s ago: executing program 1 (id=1643): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = openat$audio1(0xffffff9c, &(0x7f0000000240), 0x80100, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/unix\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r4, 0xfffffe4d}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4811}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000001008000100"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbd5bbbbbb00000000000008060001080006040001000000000000ac1414bbbbbbbb07bbbbac1414"], 0x0) 5.876502081s ago: executing program 2 (id=1644): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x5, 0x2, 0x8001, 0xffffffff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000049c0)=""/4098, 0x1002}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000034c0)="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", 0xd67}], 0x1}}], 0x1, 0x0) 5.069055014s ago: executing program 2 (id=1647): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) setxattr$incfs_id(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)={'0000000000000000000000000000000', 0x30}, 0xe, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000580)={0x6, 0x0, [{0x40000000, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0xbb69, 0x5, 0xffff}, {0xb, 0xf5f, 0x0, 0x7, 0x0, 0x6, 0x7ffffffd}, {0xd, 0x2bb, 0x1, 0xd, 0xffffffff, 0x62, 0x400}, {0x2, 0x1, 0x5, 0x9, 0x4, 0x4, 0x3}, {0x1, 0x8d3d, 0x6, 0x9, 0x3ff, 0x1, 0x3}]}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r8, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r6, &(0x7f0000000200)="001a338568da3602a8b76fde0f0c3b606e715f683d12e3f5c0953167091274afad6ed3a190afa7cf76924fa3fefb4fe1257346610cf9937efe721862bb9e3461132ee0cdc15198af7df302540b8777a87f1d530a10d1632b9b9b3afe607d9d", 0x5f, 0x4, &(0x7f0000000180)={0x11, 0x8100, r8, 0x1, 0xe9, 0x6, @local}, 0x14) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) stat64(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) unshare(0x22020600) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r11, 0x0) syz_usbip_server_init(0x3) write$USERIO_CMD_SET_PORT_TYPE(r10, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r10, &(0x7f00000000c0)={0x0, 0x10}, 0x2) 5.039815493s ago: executing program 1 (id=1648): r0 = eventfd2(0x5, 0x1) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000440)="b3b6d4631e94360507", 0x9, 0x5}]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x8401}, {0x9, 0x8, 0x8, 0x40}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.724251297s ago: executing program 2 (id=1649): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r2 = msgget$private(0x0, 0x328) msgrcv(r2, 0x0, 0x0, 0x2, 0x5800) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4024587b, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0xb2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) syz_emit_ethernet(0x350, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x0) rename(&(0x7f0000000580)='./file0\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) 4.692151842s ago: executing program 3 (id=1650): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000100)=0x7) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r3, &(0x7f0000000000), 0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x205031, 0xffffffffffffffff, 0xfc778000) r4 = fsopen(0x0, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x7613, 0x0, 0x4008, 0x1000}) fsmount(r4, 0x0, 0x3) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x12, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4004100}, 0x20044850) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 4.492484453s ago: executing program 3 (id=1652): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000084010500ff020000000000000000000000000001000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000feffffff00000000000000000000000000000000fe8000000000000000000000000000bb000000003300000000000000000000000000000000000000000000000000000050"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.361058878s ago: executing program 3 (id=1653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000002cc0)={0x0, 0x0, @ioapic={0x1bbbc1000, 0xffffffff, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0xbc}, {}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x4}, {}, {0x20}, {}, {0x0, 0x1}, {0x3, 0x6}, {0x2}, {0x0, 0x0, 0x0, '\x00', 0x5}, {}, {}, {}, {}, {0xff, 0x0, 0x40}]}}) syz_io_uring_setup(0x59ff, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2, 0x55}, &(0x7f0000000340)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1c, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000d00)=[{{0x0, 0xffffffffffffffb6, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000480)=@file={0xfd, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="a91399100000000100000001000000", @ANYRES32=r5], 0x10, 0x4010}}], 0x2, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xc0002009}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x21}, @ioring_restriction_sqe_op={0x1, 0x5}, @ioring_restriction_register_op={0x0, 0x5}], 0x3) r9 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040, 0x0, 0x3}) r10 = syz_open_procfs(0x0, &(0x7f0000000500)='wchan\x00') read$FUSE(r10, &(0x7f0000000c80)={0x2020}, 0x2020) preadv(r10, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/193, 0xc1}, {0x0}], 0x2, 0x74, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="9000d75600000000000000000000000000006115f13bdc4a6bbafad0cf47bdff79743aa8e56b625a7947e3c74232ec8cf3d47d52fa41973a0ce1ef9144059b27151b9c518e340ed42d496748cda6083ecbca1e5c4424c2180fa5917b49c9ac0574040c2081a7545dc2c4ed8054811cccbcae4658dd5ffcef140c1f0cc2236cfdfe7f20ed15edb9e7f54e4c91fc0324bd8118a75a5c29ac239196d237a3bf8142d0aeda3378530559ef990ea981826fb02a7a72772d48c467ff5e8ae86f67889285", @ANYRES32=r10, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r6], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r11, 0x0, 0x0, 0x4}, 0x20) syz_open_dev$dri(0x0, 0xabd7, 0x6481c0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x10040815}, 0x2000c000) syz_usb_connect(0x6, 0x24, &(0x7f00000008c0)=ANY=[@ANYRES8=r9, @ANYBLOB="9c5d45bc16cad9eb6af3a2da3c1c0ec584cf80ba832899808d838ae309d8145b32cb29333b9d79a3f2fe429b9892555a3887133c4787df8b2a1cb09bd4dc3976a6aefd99df5eabf0484d402f8b2dbcaf5027e8599a2366474464753c2153fcee74957dc50d87638a698f1f5ce25b23254bffd706a7cf48588c951ef3d12d842fd30ee42dcfef9167bdb12ca3f74d6db1a48d6a38555caea85876469049eab2993e74e76743fa622ff24eb8d4256bfb30259286d848ec5dd86c247cb1f64bbf0eba5487e996ad00df0a9cbc695654255c3177867241192f16d2f5581f0f3f335938874201af320bd460648e5db548102c154c", @ANYRESDEC=r4], 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101301, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f00000002c0)) memfd_create(&(0x7f0000000a00)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Qz\x9f\x9f\xc92\xe2D\x03\x00P\xf0\x9d\xc5?\xaek%\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04\x00\x00\x00\x00\xb3\xa2\xc9&@\xca\xd4\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7Jjr\x10\xcb$\x01\x06~W\xda9VsA\xaf\xf3\xf8A\xf6\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xef\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38j\x92\xd4\x8a\x00b\xa7\xd5\x1b\x12\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x06\x00\x00\x00\x00\x00\x00\x00\x00{\xad\x89\x8f\x83\xbd!\xf8K\xfa\f\xf3\xb4g\xa5\xb0.S\xd4\a\x7f;\xd2&{\xab\xd3E\xed\xe3\x93\xeb`\x93\x13\xc2\x93\xaa0\x97\xfc\xc3\x02V\xd6\x18s\x9c5\xf8\xe2\xe6\xe2\xa5~\xf1\xbb\xb5F\f,plK\x12\'\x9aT\xda|\n\xea\x00\xe7\x10\x80\x84\xc5u\'s\xb5o\f\xffj\x97r\x8f\x94\xa1', 0x3) socket$kcm(0x10, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) 3.702105667s ago: executing program 4 (id=1655): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = openat$audio1(0xffffff9c, &(0x7f0000000240), 0x80100, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/unix\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r4, 0xfffffe4d}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4811}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000001008000100"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbd5bbbbbb00000000000008060001080006040001000000000000ac1414bbbbbbbb07bbbbac1414"], 0x0) 3.579772482s ago: executing program 3 (id=1656): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x52, 0x1, 0x0, "3ad38eff230c00000000202900000004100000410000000000000300"}) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x1c3142, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x8020) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r5, 0x0, 0x2000fb) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r2]) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x2) 3.496358944s ago: executing program 1 (id=1657): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="071101", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x6602) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0xd0, 0x0, 0x0, 0x0}], 0x1}) syz_open_dev$sndpcmc(&(0x7f0000005280), 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) r4 = epoll_create1(0x80000) r5 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c040}, 0x85) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001400b595feffffff000000000a0046fe", @ANYRES32=r9, @ANYBLOB="1400020000000000002000000000ffff0000000014000100fc01000000000000010800090002000000"], 0x48}}, 0x0) r11 = fcntl$dupfd(r3, 0x406, r4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r11, &(0x7f0000000000)) r12 = getpid() r13 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000200)={0x2011}) unshare(0x20000400) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r6, @ANYBLOB="8ef490f168d4028beac85878029ee1b421d6c7cf586e3081979d27adf85c5a2f23bce75c932d390fa113909bf4370ebdb31777e4b17fa39fae94d96c604444", @ANYRES8=r9, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRESDEC=r10], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000b000000060000000900000000000000", @ANYRES32=r14, @ANYBLOB="0001000000000000000000a050675b41efb6d300ce855c4d18a3c56c9e76c49953efb2fee2632e6c9627ceedf3e795fc2a20267c1081369287d11e677c6308d7ca516c5144e5a3d77a3c6a2b40d47fd54bb9e96ad234aef1d3cb8c8bb326019bc87a5dffaaeeb735b2d1063890a2460c4cc0c3c94599d671d02697b805b3e1ceeb6f6ffe1725fc0334c45d7dc7351c111554ad38b306a10a3e927410a15b47214687d0e5228f6fd181", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) fsopen(&(0x7f0000000280)='proc\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r14}, 0x20) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f00000001c0)) kcmp$KCMP_EPOLL_TFD(r12, r13, 0x7, r11, &(0x7f0000000100)={r4, r11}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.130263495s ago: executing program 0 (id=1659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x4}, 0x18) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '3'}]}], {0x14}}, 0x6c}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)={0x8080000, 0xf000, 0x1}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0xfd, '\x00', 0x4}, {0x5, 0x3, 0xf4, '\x00', 0x6}, {0x7, 0x3, 0x12, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0xa, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x8}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0xa, 0x0, 0xd, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x1}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7e}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) 2.907632908s ago: executing program 0 (id=1660): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create(0xf) (fail_nth: 2) 2.649477023s ago: executing program 4 (id=1661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000680)="bad330fbbcb554491f88612250e1d006c0cabddc896a20455e546c91ebbb", 0x1e, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r2, 0x1, 0xd8, 0x6, @random="98caca7122df"}, 0x14) 2.461089804s ago: executing program 4 (id=1662): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000100)=0x7) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r3, &(0x7f0000000000), 0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x205031, 0xffffffffffffffff, 0xfc778000) r4 = fsopen(0x0, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x7613, 0x0, 0x4008, 0x1000}) fsmount(r4, 0x0, 0x3) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x12, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4004100}, 0x20044850) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 1.768832237s ago: executing program 0 (id=1663): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc00000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000084010500ff020000000000000000000000000001000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000feffffff00000000000000000000000000000000fe8000000000000000000000000000bb000000003300000000000000000000000000000000000000000000000000000050"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.716972677s ago: executing program 0 (id=1664): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0xfffffffeffffffff, 0x800, 0xfffffffffffffffd}, 0x200, 0x0, 0x0, 0x0, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) (fail_nth: 5) 1.378736529s ago: executing program 1 (id=1665): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x100) r1 = socket$inet(0xa, 0x5, 0x0) listen(r1, 0x1) listen(0xffffffffffffffff, 0x8) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000180)={0x1, 0x0, [{0x80000000, 0x7f, 0x4, 0xd1, 0x2, 0x39c, 0x2}]}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) 1.368208478s ago: executing program 4 (id=1666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r3, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x13010420}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x68, 0x5e}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008040}, 0x10) 1.293310717s ago: executing program 2 (id=1667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) pipe2$9p(0x0, 0x100) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x78, r1, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x101040) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x1b}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = socket$netlink(0x10, 0x3, 0xf) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3e, 0x0, &(0x7f0000000600)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x9}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x3}, {0x8, 0x1b, 0x0, 0x0, 0x4}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r6, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) 1.168835583s ago: executing program 0 (id=1668): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x407, 0x2) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3136564e, 0x2, @discrete={0x400009, 0x1}}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 1.043148816s ago: executing program 4 (id=1669): r0 = socket(0x10, 0x80002, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0119802a0102"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0x4810) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000001780)=""/4108) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 1.021730833s ago: executing program 1 (id=1670): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) close(0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) readv(r0, &(0x7f0000000ac0)=[{&(0x7f00000003c0)=""/211, 0xd3}, {&(0x7f0000000540)=""/175, 0xaf}, {&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000700)=""/124, 0x7c}, {&(0x7f0000000780)=""/133, 0x85}, {&(0x7f0000000840)=""/150, 0x96}, {&(0x7f0000000900)=""/74, 0x4a}, {&(0x7f0000000980)=""/59, 0x3b}, {&(0x7f00000009c0)=""/66, 0x42}, {&(0x7f0000000a40)=""/85, 0x55}], 0xa) r3 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400", @ANYRES8], 0x0) fcntl$lock(r5, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0xc2, 0x73e9}) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0)={0x0, 0xf8}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000040)={0x1, 0x99}, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007001100000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x4c040) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 942.710978ms ago: executing program 0 (id=1671): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000100)=0xe2, 0x4) syz_usb_connect$uac1(0x4, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xc, 0x0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3bf, 0x2, 0xf, 0x3, {0x7, 0x25, 0x1, 0x0, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0xe3, 0x0, {0x7, 0x25, 0x1, 0x0, 0xfc, 0x8000}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = openat$ppp(0xffffff9c, &(0x7f0000000080), 0x10b001, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0xdd, 0xfa00, {r4, 0x0, 0x30, 0x30, 0x0, @ib={0x1b, 0x3, 0x0, {"279bcff789c30f457a922a32aaed4515"}, 0x3, 0x2, 0x8000000000000001}, @ib={0x1b, 0x273, 0x0, {}, 0x7fffffffffffffff, 0x803ffffffc, 0x8}}}, 0x118) linkat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0xffffffffffffffff, 0x0, 0x1400) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd2a, 0x21dfdbf9, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10012}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 786.375928ms ago: executing program 4 (id=1672): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000680)="bad330fbbcb554491f88612250e1d006c0cabddc896a20455e546c91ebbb", 0x1e, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98caca7122df"}, 0x14) 776.569706ms ago: executing program 2 (id=1673): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x12c, 0x0) 379.918115ms ago: executing program 3 (id=1674): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc00000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000084010500ff020000000000000000000000000001000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000feffffff00000000000000000000000000000000fe8000000000000000000000000000bb000000003300000000000000000000000000000000000000000000000000000050"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 3 (id=1675): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @rand_addr=' \x01\x00', 0x40000004}, 0x1c) r4 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) r6 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) mkdirat$cgroup_root(0xffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) write$binfmt_script(r6, &(0x7f0000000900)={'#! ', './file0', [{0x20, '0|\xee\xdcCh\x1e\x88\nk\xa8\xdf\x89{\xaf\x12B\xfa\x1a:/Fi\x83\xb2\x95\xbb\x02&x!\xf0q\xaa\x02\xaf\x8c\xb4\x90\xf5\xd4\x9b\xfa\x83\x9f\xd5\xe66\xdc\xbb\n'}, {0x20, '\x00\x00\xff\x00F\x99z\xd4\x11\x8a\x0f\xe94\x87\xf8\x16\xaf\xbde\x15@\x00\x00'}, {0x20, ':,\x99\xbfcp,Pjf\xe1r\x9c\x03\xd9\x02\xc8\x18\x85\x10\xbb\xa1\x8a\x06\xcf\xe4\"\x92\xce\x899\x01@y\x1ev0t\xe7\x9f\x9db\xba\xad\xef=\xf0cU\xe2A|\xd2\x11\x7f_\xf2\xc27A\x83A\x95\x8a\v\x9a\x89\xd7\xde+\x80\xf9\x02\xa8\xb0\xcd\x13(\xcb9\x8a|\x90\xe6\xe8\x0eX\xe5\x8e'}, {0x20, '\x8b\xa6\x11\x00'}], 0xa, "3d2cd8067441ce05d480794eae4f10b2f791c1208cb8ecc4f0fcd9374f9e93ed7dfa508c4d568e1d0226a252d2f9385f8bfbf9b0e8d6f491e114bf15ecf7581e37c3e413874492b0167b81e96f093ee791173c08a9d3f75fe2fc67048f5e24c5ca210ba5c6041a00a04407d11dd73eccd62873330d5004e7722f00a10680fda6f506ca02f7834c2239d1b2704634"}, 0x144) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r8 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000id=\x00'/41, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000005c0)={0x50, 0x0, 0x10, {0x7, 0x2b, 0x7ff7ffff, 0x2188000a, 0x2, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x0, 0x102}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f000000a140)="970b180393e57da0084004606e0f7eb55b4379b678ec58dd5832867fc4741e325499108ee901f5ade42a10a2a5ca59b706328aca067422dcda816a63687f6b445fdf7c8c4c158921aab593be18f8f3e3a72a3c634c089c468f2afa55a47fcb36c8ec931a3b8e995ca8f9da378136eee8d00878a33e262e3718e8829586fb5a3bdd2143ea5a880a6322892369f494dd40593794a88b4f0e69dfc3d573117dc27d511cb0b7e7d1c13dac381d4472cb9eba0637c9611565d496c7a6936582144f524085bf34af3a90ac0a0db2f79a423fa8b797909b65b72ee23068ebf92a9ae53fdeca4a47ec6838e363039c63988cf6f4f393f907cff08e13520751cfa3bfeb452f120d8a5f462b040f8537f7add203eb2b2f5784376b4e0d85c027c4e0d5817ce1db986581a147a5c7e820212907992afff07f13a43b2a2c23e6f61d7bdafdea1d396e0fa1e79afd07195dfdab53cbe75d4b96971caef941b69525b87d59fcb99bfb348a12236968f9dacbfbdc4d9b0b01df755ba3b6c320a29e5bc23bd6b20f3b27dc3d63d2d2ef11865347c5ca1504ded5d549e17e1194d717c79bc330ebfc3929d079152f51f3ab9701a3241c7df4130027ca1a6d0e6b5f2f2c3b659cbea4cef19728b45f1325e04151af66111cabddafa17b90f193c52d1c4fb646f99fd42d77a3f16c05a491a775962a2a4ee9f9f6c1a5eaa68305a88add9d6f35815f37cadae92293a0db1613662f145991ba5fd632c4a170588f8265e11b3e1a4ff2b17f3664b98d9c6f54a356f19a9b72175e7eb46ff4330812993886cd7b42ffdc3767a4ac16dd21d76417b70cfe97ad6ad0ddea7284d0e3ecf0c6c6b57833f65963f3764e297c994e0181bbf693c8fc0e57fc15b2ad776a00c19a805a906ffa80efa4116d5f5c9863a74bb340008d958db841c5f1e3b286afac717ceabcc7310e75e45b61215f6ba0bb496bd5e094b6139326758c1d81b176e11da5eda522f05346e1a71a6358b4c9b7653a66ae7153858fac4695d64fe2962b0d62d6d8aac14cf9cd2199fb039b54b64f5085434b2339f90bc11f2ec07a6e84557de9a7a7edcc3b15a7798cbc68c1b1e1a822103bd43b656e933bfe886736a2bda6ccb228a8e4fae5956673db0105999017d8b68159f7a9480fd2ca70bb7e9fbc8f4f1c3581b1f528c8fb5b5d6beb769dd5e9650739f3cfcb61ab7b066c342a6c6886b0bd83f399e3eb74d2cafce7fc76febe624a37e185924afa8695caa7d3c1a97fd6684979ef33957a334fbf10c7a9bba18397082580df2425129a87c4868d41d1bcda8a7faaf1afd492cb4c83b7c5ce7a950f92186cc07bf27dcf58ac56506f2453399070ae8e5b009e40eb1970bbe8a1c9f3befb54255602bd191bd46c56c0fda2842462c0b68884f9a922d2a8b161aa9ca2c0c52bcfa26b7b7a152f2ccd16ec4974361f7322dc3b345e926e1a1b56200dc425e2e03c3d7194f9cbd321e10de387adf9790a5706bcf05d9b8c16e40e5633c44553c2aa8611f7656fc732b5dfce1eaf212d2521eb013fcf154d251553ba7a6a1f7ba8b7ceb3a1df621376543a451fe76671beaab4833f1be28247919c7cdf4177e2c9cca78ce52b5a7e4dde913dd8b13ce861bbf7048822041f4b29b3441b4880a8f7a4a289ad3c6258494e7736e48373408d248c3b033372ebdb3d9a406869445b5d956434a576b83d4a7e7b47ae8c69f50be20ea56f171e592e114602ed4f47e86dc34008770940adb4f0167811c474ada06693b55f567cc3201f97c08a3711dca486a86c367f59ce44259c1d71cdb135aa8630c4cae61ad07998a2f781ff87c946e8aef9bde6d4738bc009fc43fd176bc38756a0ca48c382395b48bc55da32892551ecdd0bd3f4c69a79bbe600f4103f21e443821492b92516833b231942e91a39e7401a42ba3e99a3a2fefa6167365b9050305b6f09a013f41e764a80f422cce051e5b30ba6528540ee5d4ea5872572c85f321b68e730f40f64b648be31a9e530718ec17443a1a4dcdb79cf799cfa75d0bfa0fde71828d8f51e38dc3d1d77430ceed007426f689d5843c34afdec5dde3e480a36ffa25db4b3483cde91e56eee8756dd953a3abff11bd7901d6b37c8371b023d7457361908576f92990f19e9f48dc58ca550e61a035161f1539b14b7bcce535b3a3783021094129f312c03e51df62579ae9423927021e8bcf530116f3658a1e94d39a800452f7461d2f001f86b911a8a14b9e61c2fd8f959ea40793df240aed5e5862ea59d78fb235788c1ba3c0ec44fbefc29c2e6f22d70849750625c3c15227579d42858b5fac30bbe86491697cec1c4543addc1f50202fdf77a6d2d23e70ed611a63368694e459012ebdbe71c4f702980d7ae63aaee33d5f8df5fce071c73cd918991c6ba2f95f33a9917a22c9e7342dd492c9e2c2f6457c3a48f35edc1720f2224f2af2ef4c0a38b75ce27aae5d5ef615920ab9245851590cdcdcfaa7e5a66b73f5a0a1bcf1bab66ecdfc0dcbd8cebb1b98f6256cea6761c835a761819018fd9c3d2f541eba25abde06f1551328800b1efc04d8e10594dbe95f9f10005cae8c5b27cc18268ebaa4578f9dcfa99aa61567a55b43545ec729764af99d224cfea6a36a93d4f70bae3225256e179e81a0c64dffce9c2141994253af664c33f881aa417fa3b7e9424f1841f1aa845ea0fe05c4e47b318bef60709d6f20c9eee6e8c0c18bd161d3dbe57d82903937e10c41aa9066dcee124354584232afdcb60d185bc39fcc5e7e5124d17e2f998b64836b587cf233469b92af65a70f4a8f35df9e24c7d5d21bda27ae44ce6706f86d3747db675aa329e8b43652bb1e89687dd003dd7924d300f498d444639b3fd413840cfa958e436e5959e95486161af807cbb7304d99284818eabe39493c66664e92143ff41602a3805369f461abeae5e5b6987a20fa47495cbeeeb322c848147dd9a052384a49898138557e10eb015df370d01977083ad24c7defc8c80583d5f5eca20d0853afb9f41c356f8da0e2435d423528f67f091fc614645980a57ed893ded1c3d37881b243b8a5503f45672492f3849895c9377277a91e7090241832629032872294896107628ffd1151c444153f54b484fa3e5ca057cbe073e6039c11b1eceaf7e20eef2576aa99e7a3f36aed9beb089af28d82e2dc5e97da4878b76b5224e1d293f5223c09f715fba13945695a98624eade1381e31c5651069805e6f707811586f5f81e431e8624a608ba1ab405d2593b1f9f667b89d82e60048e4ef3be98bd3078beb4e5e66e8823c8b427d6f84468f1f18f1ff8a8c11515426993334bcbe0c3ba37b91be07eb800fb2e00a24351457d8fc067b4bfec43c0ce8cd26b23bfbb27d3da7bca3efb7fe6f7715760eda4e3a27a7be7419b803667ef6057bdd5d44250b47fa156af04db91fc57f25425b3cfbaf90a840fe5cfcefcd1500cf4908ec4df10c8bc14ec284bb99b13a8f6136e5e1c669806cb5a4a5227f7952c5b605a2b443866fae399a1f8fea323784935c3e5a9ba9e831749efc9b8228421bdb91afed16341962535cebf6fb02679e5412f67db405c90e218789b634d92a41aaf528c92b8bf38b629a1797c036465b77dc3bb124bdddd309136681d3fbe0251698da27c6f89589171e4492209f7eb48d50a161a5135602fca3355f8934f879c54afb91224901b635ed372fdacc9469471225d2ef3c980466027b86cfe3d664071edaa29b47455064a074da56f4e098ddf27984dac546826aed38e464d5c5a79a3ece544cdb3801de0e29bf5164dbcc14578e3e6c44a4a9041e2315f1243358c5949377352911e0a67c6de7e11b0881af528fe478c34909a1178a8a4f7fb727317e4f3981706d9c9215224604c2d6a4faeefc21bd635c8412931ac4feb2c60666672fb6dc5deda0d6c4ce31f2b6cb45907427691488abb280c3fd001f3d7507c0db358af7151d3b8e2e98eb8a78ee69966f7a1307882c5b57530e0dab5c57f84852c42db013e3448da2fb0a754ed97c001f33cca549eb71d7aef88d1ae7fac0d96f334556d75f600a029ed698ce9e4302279999726a57337b9afda0b0292c14d1687a85326120d9fcd84cdc02718f26c12ca28cac81af0dede79685233be41c7269c57100c603a4f9536f757fa753353bd0cded7d4edab29dff6f7dd5faa81078c263c9d1d7e662a0ffae22d8d12e679de9ec6c634ba46ddf6aa86ac0be41cabd9b14fd12107ffce96915fa0154f5b6017fa866d14ff47754a58ba14c1a3eb3f23f040779a788b774604c3a8a7dd818619352cf47849eebfdd3b49b56f376044e7cb218759059fa85057f96c159ccd63ea6cd0bf47781c2d023411854dd3ea46f4913cda9672655e566d2e83fe2e0eb5476bd6fd7a84557e37a4e8d32c75ab51dbffc59f0cebc3edeb395f38f82765ed3cfdce75b2fd570e783c8c3afb31049383af0b51575e5c9dd9332bde6f684a3e11d199f43004439ed535a20c7f2a695cf9b547985421ac62c2289c71491f0617d23cb7a9466c8f0482eb2e8aa782118702761e0267ef500afc52f4a3a7a53ef22aea542f679dc5c751c766e06af453576689c87b3b89c091e5444ff6fb1472fbd271fffb268a2eada125d7acfc70c8ff4cfd3f5421941c2857e54ed0617d6430b806d605c2e508cd5a7764d6ecdc69dbd050a97f8696535585bbb95b66f751566ce612aebce9a0b021f9fbf067870fe447dd05e8c521413e7f27955db3b8239836b6ad120f5fb48e9003bd19b05f94752743d89bdc5492c2ca1bc3133fe0ceb29451900e2ac713cf2cbc3a531048a473a195ad40c685b539f806f434c9e2cb6a8a25df84d41c13d1ceb90de1a3efecd06a53ac9a32654d1ece86dcf6fa17ea6a4f367f9b360b3e26514bf94af1f52d9c0b0691241e3c6c302e7054bb738cb234019c0e45a7db270ab9d75df73568f25579d33e7b42743c924b1f888df85c6166228f5391962b689f0a4d9683b43ddc98982a820b5c60d9c4e3997cd2212fc3850b2bd41342ccbefc1e4ec2ad7ae285f156f4a4f383281018c73ca4f2e9d255487a9717dd39cd744a000c68c53f82a22a08bcb734b5bbb8364180991140c2e727dfce4b19e70c968c97393b56019ef84688772d488b9bd6fa9354ab64f731e6adab543851e5ca1470fd13d0334ba025b57db5d9ea13c970642726284fefddab8fdf7155f5b8e3b3b86d098c4207b428bffcc7ff76f6397b6a3efc3c0b0fb2a4343b4051271f87e384c2b659086ba668c66a15d68b87faf82a60b184f27256e36a9ada7c4422754be56dbbab50ed781f36e40ded65a30378003de5b5cd5f80a6042613c76e80851312c7ed2c07b762b85a1b6928a7b2428d2bc7a6bfdfa2ba55aed54fd3c878ec655caf1223245433b7c6fc2a2d3b0393d7ba4e12f26a53b9d5afdbab230b9148f061df2e1c0fe73c2abcd142125367fa5e598e500263d9b27e759c08b7debee4695a5b192d968108c134241f236cae0434ed71e5099cd466cfb04d5f7cef2e94683172f82a9841610cb6fe55d4bfe73920992bb76f362b9cf7919c906495d4b37a915d23168fd7ffc2f36de55a1b17fa2232df03663ffa2a4c5e76aad90fd5abc80b6dfc16ec6aa328cc7714dc2d7bb14aae9f86c999e93a59fd18fb2300539bca25e69b04943a16c985ff481a42c9d8af43eb61ef7432b8e3aa5bc391c181b7d546b94ac659bc4b501157d3adf9d4cda4e298a4e4271fa2cd08919b055eb30769df76c1f0b0d5cf5760b56774f105e51c93cc03ce97b00768b9620a6fd5162b9d9191ac0928d2460e4e821a276680cedb3b8167bc156b48a34d4c24d4a87fd09968a725d4b6a1b54b169f1e14143e97a84cf3d8eb4ec5458dcd5ff93365396c00533c3493847f595725a4f15300183eac306d16ea136b97a9864d16330d8c5b8321a6947caeb9cdc7ff4e53c419518ce9bc11f7355651be27a2c2b9ff4127ad86b96c1b5967def371d5d6a3f365abaca55c5f19600d1d5051d320b065c2f78f2147c170b9153a0eefd7b3f1e637cac3fff14b0eeaf472e6a6a9f7553ed3267c911d4d77a4f7285b77df725b3a88fbfd221343f656d60b61808b52a8facc81b8516698f2ac50cd8769371e67278c59ab1cc890fab36206b939f23b31ab976651ca8a4e7754bb10d03d4cc6506f13d98f2bda76477a69a8794a34614a88a7ec94e1a229ad6f747724a3bfb674cc87ea0dfb610f66057671f664206672e78c00a3f4585f17fc40827d0c8af88d3437f811274f662e9ee73d550833d0c8fde449089f8b5e8a25d25096537ac960699a07ebb51271a8f8556037436307063282febae745d53f8db65f13f24cc2e525ae465c9bf79f76b82dceada3bf34529321f913dd18548ab2a26f2a065028f46f4dfb18294dff30a7e5b131a08c671787baea45545d15629ec2f435d9138e517055cd48af7120b3b79f2275baed8a4b6a0f33c30890105ae2c07a332df79f2fd6767ecc66f1ed628c968a2685813342677a2823d10263958eee79d03e393a557475701694b5ec3dec8773f37b980f5812f1cbaed6e5253da037b5f88ba2070f445d74907679460dd48e16442d345abbd37f7853ec7123ff16db46c8571987db63ed711d36c05c2dafac47ea366f9467624b6296a2b9fb7056702d4ba38b4df72e7db3244421f31aa0911af3e3a09f9e08e96aa1545c37465f990bab4ee2821b1a701aa707db1dc18d52fcede15245f54a5f1a47b0d82c33fa378625d247b08753ac5fa5444b2e3f9d1d3918b154665b02fba87e39d0e27bdf60b27930eee02c31d847d40166544ab9ef801bd79bcc8d93980354021b8c7a1b9592934a90917db115bcd92068a970680011cb074da705f1cd06a0142862a777c6a47afd38721979323e27151c114e8901d41f79358e78289af10134e22d903415e2ebd2edf34ae10eefeec219db7b13ac983583dd4b02dcc615c6f70e6cf35ea216807c4b9c81482c2b941c7d6cd6621d9480ba924a3372ca3e3ca78438b0e9bf7c8436fcc0047b3bdb8d70190076d9feea778005d5d69f1b1194c76dce628e17b6beb299146b25f3f6660263c23dbcd08f70ccb45569a81a140eff66f2190110cf0977d9df7a2c437042961606ca1a378c8f59a310ad6c9cb4ff30a2d55411eeb38d927bb4d0f60ae75d90ab78dad14097f6dd38f512af2f932e1ad6a5e201180373689981f23bd9f59e4ca29244a8ea4236527fe2249eaa299af174f25b13d72b181c2f421652ece630ee1358098c29f84506654ffad3647792852a7faf107e36ae330886ffcef6e3a1725495e430568a9cd85d385e5a15d2f77ed274be3c8edfc52c230d21785b927bb8e470f989e8c89b01af8d04fc7050fc978013fbc5dcedd2baf5e8bfa8e2e1d3f193c224375db2f71d4655d2f647e9b1739657a0ad8ef6751a88151a3413ab870e0d7ba3f0a55ce3f30d55e8eb9e47e3d82563d9180399e7895490b8561a374acf5c94a1c648fa06780c4141c58ed913fb92865d3b4883301ba69b3f2b20c1f82024bd75e62ce2972d3219bdb961ab3bbac8f1d873ddece6d85f540f82c9d79b0937973335fe05e5c6ad8fcc525620a57678d58c7c2f0f157e030736d0fe4f6de520b390794cefdc6c828b4512fb6b2000d08e38693fa22834e69180d31b3978f9da75389f919a0d49ff961997d14ae6bdffcfb179c2ead52c69dae97416eef2602843dcbe4e5ae613d429feef7ffba6a31a8be8bf2e62c6d374c807363a986519a8cf9dfc99fc6607486e10599ae415b51e23f639194885e5119036e0e535accb4f126b4c45c47a53658af1e049daa2967b01d9450625d92f8f8e9d151633646044fcc5f6ad835479d48702839456decf070c7e6143cd31033810bd7da01c4a2cfb08605b25c00336f17d3b5a3db48866ef864b8d9cea9530429d3fb1afc7ae9e7d06aea9034db89b2ec8fc2a96d8d701fc51994305077dbea527bc0fc398b6bb7d42f0c408be69b98eb173d285fd8010ba75c57f2dd982582153814ff959fccc78aa5f7901357f6129f840af6649534f9ebc7750a20502a7cbf2d2f28c6f97884f43779bbbf93c550f8e79949db0e066538456b4e966761656eb7bebd5afe9b9fc241711b874682b226e9c6baecc1e909858e01b32472f6f8d483c073d3b576a4b03534dc4b620e21e6feb4bb2ddb37e3f0d4ff92c0af19e6087034c72c5928707748bc10ea22788bd938a0e6512cae4733fc1a2e47f3d4961932fe564684872922b44db143bea77580b0704675290e0839cb5ee529ada8b4c0bb14f05c5c396e29376f1ea80dea2852a88ddf8929fd402571fb242ead60d2be61f1662e1a833969e18e23e0b808900e7ed4be9d6944942da7d384739da1055cddc94937e1ea4cd305bf161c407b471df0ce3fb3413c5bd511d3c65e70edeb5397b0a8701538be7d2f1765688cbb0379744281231e60f5edcbfa6abd177405c455f77e30b95011ae4fda2a3c6d3f9a29bfe7656f6afba48358d57b4e1a84ebca241b7a427c6f806d1f771b540912f05a6df0d5223f85639fd7c163799e28abd08e4013aa43ddbc11ccc9d53131ec5c75f7682481968ad13ef34ba23d4759b51c4cac5a7ca2c73b3103c5b9e4b8686b872edcaca791d669589655e239920fc088eeced3a131ddff2eee9fab3cced40163eebfb29a85b3e97bbd97d17c3b06d3123409f115cf3e3d1c74dcc359664ab942e6ab36c41b1af4015ff5baf700eb99abd658e6833039051a235a2f84b70cb8d90271a481ce40e2a18bef8dcf7f54952b090bbaaaad391cb6cfa218a1e823ca7b16311e35e0350dd8016f67ed34771d7f3a607c1c9ed63524ea0c865148b05f1d017e475641b5076df632b7c261ef54c23eaf7cf52c22864a8ae8f8c3442d147fd52a801f87665b47e229a77b8e85c21d7996c7de9ac4899b098380f74eff119369c81b21b0b916017d0b604ca2a74b1424a4c3132d265d12a01ec2e8cff9809ed2f7891c55bc5cb932c6ea3cdba14cef47a2a0521e36869e9d62914447c3e6cf3da9ecaed915dec41e81605a46a4ec71a8b5ec0bc2f62b3237de7203e4b6d01bc32a5b2dc416623936a324b73e0c63ec414ce1bb4b344db85f014979ae866c4a2c2cce0f814862c0691883dd2d7bcd63fdf2ddf0cb2c6a1a10aa878ba997b74db8e894e4a7ed5e8ea1e3c0b602bae23c6c8c5f38b919aeef5625501fe5d4759c43e90de56122f3ecf87e8023f25e0d3ce64ab629409e881d2d1c5f083da90d45907e62ce3177f7982e514779a13f70bc207d9aa55835e37a5f4782242681ff46600ac9e63f90a245957440987b54b3678ae808c481d25755dba747cd7c3cc0fafb9a142e1ec1a9a5f81b5cdd6dbbc3a4ba5d49f58be6196c305e2af35fdbfbbae02cc4efe771d65e6000ec3f6cf394650f5144308c95279b9df3b29236a32ad3e9cd377296a4252e7dda1bb95d99c32cb81d970de4ff47760ee087dd2fa98392c8ede48391b49cd40e314adb896f0f5b08ffcdffdd70775160144552b13edfac23a09d53a4a4a827a1f216b2827cb9fb47a9fe6412d509d35b754d3700cc0dc8d7a3406a53bd1b0ee5112c50fb8f805be52a6c4e1e664d174727f33720bb371fbe9adc747a234013fcaadbce5cd2d416414b1900074e3ec73a36f32f9d7baa96ed4ea37aea560df4d9c724c69b440139a6dc1758bc74b59c521bc59958da71c4e5c23e4a8999305d989369a9bcd10f0faa789f4040950c349ef0ee910a822ba8df4a6cc16bd72dfb85d7c9a97911e96541a7fb6fb4711cdfe1e1083b2e8e870e2d2a7304f99296a496fe30553971b75f78ace054a8e3c6d54d40b2dbb2ee38a6244139fcba31b88a3ce91d637e7c88db35794002ca28533a46af85929f603e4cf4f5aea715ac4495d2c07e8bf79da078521fac5059dfe6dff61405fb6962987d15a2c7b27a851e3076803c7b4374a85f05b96e9bae91656a003e9acad767c9ac88b339fd868136b63fcb0520a2ee2f25128c8b97a0d43d60be7436756614108cfee63fb0fd65cce0bb0afcf5ea7fa817134c876c949945642a29d71aab10d05522b4b1788bb051ae1ad23fc7e75607580f9bfb7ed901a66d69e79ba742ba169f7e0d36d0c8482d3a85d66a9fc08b3e4c1669ffb4f74f418d4317fbf03b785859601b9e3af056b6a2543289738fe1e601e635ff04d750f8724bdebbbc920a7ca2f99cdaff265299bef09a2e20878682f2f37e46b5d2d3ade8d857ec6d3f7a2779080a5927749086b33b22def28633d53dae49362b4c4d47d2899562a52f22618a45998233048f0e54ba01dd53953c9f508abcb0acb1c1fb1d110e5d6c14d707713cea4cf0403b7573ab5b0a1439e6b2d29c46a3077e0dd296ca751db66f829a42c5afe0304c48fbef52c526c8f2100f6826fd4a5295f7492855f841fdb1f8487fba63b6db19af983a75468ad29a2b6cc58f9ef2dfeec8d798d60e1950731e65c5e2ec1065a22915a30845a5f87a26c067ea870d4e1ef71f67617906080b7b122b8ac9e4da1b05442b5477ee97343cb20f2587744abfa5f318ce29cbd24df1a6dbd42470789e17ae8115a588788d910a171b88dd1b94228728bfef3b28b2b32f523d603fa28d00cf23b0a201658f28ef7920f36a0da8917068a4435e0d710d320258114e2fcde2e1dec0c9faac26d671ea3735ee2b26cb644ba56ced9031cdd2b391c4b96aee7a4c38063e61dbd8ada24cea7ced0728a365bc2320eda9746823b7d83afdc8b3b293b56739011554000aec6272004a002328f20368c0902b8a8d251afebfb4d7b427cfa8927385626a474e3918ff557c8f19a8691011523a63c7e578b98c8951157f0763db3ebc4ea24388527e83b149ef89d4173ebb1c0c9aa3cf4e1a47faa3ebe7ca625e7ef077b38235781236797360696e552b9289a80491d4c3e70ff00b01540deb0de1b3385549b667cfa3598a34751868a14ccb22a420781452699563b16d0d0f1a7f0ba3f0ff45cc2d2536f1de9e024bbc923cede7725f84bf3e6a645f43c4ab3db6ddff671f283857262570b6652dbd8c869ca6a3896b870235047db08a54e5c39d7516c4b0d621d87a9c3e8c53249ff2ab9145f026ba4743a46197af56a0df022363ed59a5c2011e664a05fb952d5ad9ee2037c59a4075e4b504d91e87d303e0bc55cccaeb17e1cbab6176d2d148ce05fe986c79eb843886194f80e202c4f373244b38fd46643c1bc0fa8723ac498c71919e4ed8e5092832aec00a35ceeca94df7bd2c0c02dabc886cedf1fd044db2b45c30f8c0334c992eed40290baaeeb4d00e2cb504ca1173b6b6eec8d2aa3a1bf46e64c1ae1b3ca2882545729fe78d5e1e99c6f1f31c0b0f2190889c7318ce7605128a86c62c8a1fa107304c4609e28a2a43c6799ff6a7d70909ee10676801ee670004cf9632e34cb8cfb43d2f477ad335f5142da0baa4f4542dc93704e93a3420ec50284626fe36618b079d0db013d691583aba257947bdb1514d0318180ae43d0f94712f5c0de35f3e342ce7da65f755761506b9bfd186641fdbd03d5a2d4fe170fe23af8", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10) ioctl$KVM_SET_IRQCHIP(r10, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0x54000, 0x3, 0x7, 0x1, 0x0, [{0x9, 0x4, 0xe, '\x00', 0x3}, {0x1a, 0xf, 0x31, '\x00', 0xbc}, {0x40, 0x2, 0x8, '\x00', 0x9}, {0x4, 0x5, 0x1f, '\x00', 0x9}, {0x0, 0x4, 0x3, '\x00', 0x3}, {0x0, 0x0, 0x9, '\x00', 0xf}, {0x8d, 0x7, 0xfe, '\x00', 0x7}, {0x10, 0x2}, {0x9, 0x3, 0x40, '\x00', 0x40}, {0x9, 0x6, 0x7f, '\x00', 0x7}, {0x3, 0x4, 0x0, '\x00', 0xba}, {0x7, 0xe, 0x5, '\x00', 0x80}, {0x8, 0x2, 0x43, '\x00', 0x3}, {0x4, 0x9, 0x8, '\x00', 0x3}, {0x7, 0x55, 0x1, '\x00', 0x8}, {0x7, 0xfe, 0xd, '\x00', 0x6}, {0x0, 0x4, 0x6, '\x00', 0x9}, {0x8, 0xff, 0x4, '\x00', 0x4}, {0xff, 0x6, 0x2, '\x00', 0x5}, {0x8, 0x9, 0x9, '\x00', 0x45}, {0x2, 0x9, 0x8, '\x00', 0x9f}, {0x4, 0x8, 0xff, '\x00', 0x2}, {0xc5, 0xc, 0x7, '\x00', 0x3}, {0x0, 0x6, 0x3, '\x00', 0x5}]}}) syz_fuse_handle_req(r7, &(0x7f0000019380)="43290db1beb16d21792cbdc24d071e8f277ecf0a24c365addc891408860afde84523156db6506557cc24a9c18f4fda9cf6d0d1bdffa367ac18ed391c379e059c820defe74b58e6e3feac972b1bb0680f49973e19f63c1d5c9e82dc10d43830e86cb8e7427ac8bef084c374c15031c8de723dcfaec0553d0751c65211f847bfc67f4c0f668a951a569a327a76e124121d27d165548ff48e5a727f57c23ef8afdef4aaf7125b91eed467812c65137b64399ff54c0ca6badf884421e31bf5fc117765b424550665ec7d7c4f8ce751888b5f07447c39e3cd4cec2c94eb373ebe236be008782ded4ed3b10e0db3ae63ac8c701b641f478cc06a471fe85c6e0a69778298fccd27f8646223beef5798c4d25fa56eb063f8b3493548e0b0c88005dddc183ba871115707109cdced26b38aebdf9cd5236272d849580d27d89c0c7fdd20412df23e58c93c1213e6d42557fb92141e1f01604821305a1f38fc8de159d3b04456361f0ae8c90e169bfc7a570931eaf8e3b4381f6a422832fa027caea657b67fbe1b922e1b971a54395a54919a6bcebee8eec69b505fe02712f48c7a3890da80e69d9a3dc15236589d2fe5c7042d66f9817bb62a4b234486fa831a44ca26384d383dd970a4f44e31df91b2757db6f6ad39276e975e57a8b72dfd077a0eb7425a5f09674a52c4d7beeaa0227e672ad374477f6f1980dab51b126aad494679bd2e51afa839778684f538e665bbc1d3103f9034c3a84ede302958b307f2786899308f1467ce65d421f890e39a7ffd8233e56bf858d558384b4649a9460c9c3e17a0b0ad8138c420d655d49c9749dc5fddfdb8f3d665f4005b47206a849c2bd12a58472db21ffa8f52d34bf5bfdbe97862d7c2254043cd4e77eaa0af0400610719301cf821ee6fd09af556a4c40bfe80f3ad5090d892d18243334273768c2f9f0751cbd8d511f33643dfd3aa20a82ba09f231824b79079dfafd5da7a3fba003515d2b269be30f30914c84a6e456b759305aa8a07ec99c6e2fba0f832a3abbc3d7c76f9498ef92c78ad42eaa774e89f21d4692bc45df73fe01f4a3d426360771608c81f3e92cbaa6faf1d9c3fcfc0c5aab25c249dbb4ef4570ec8161b015bb7d24b75f4b58ac90d3a5bad78e49b597a04c7a1750c4d4a9cb2c14d8c7c1ad83e21ee13ede32545242ce95954fd58aab828ae3304cff50ef92e68f53e310aa2b353e275fa851acec9572319367803496f8b769908ab2665692fd832841476c5b8c6909e803337984bdeea53d8c7638fec40a4ee547e6bf937c8dec1cdf2b044e91ec1219f8fe8a2cee4962a0767ca721e43be27522c21f7414e557bdc618b797bdce4f65a372ea05a88f64bd154d149eceb2df887ea8828731c3c0ecbc61debc32c13c4c51d360831e13735fa4cc33d178bfb6564c0e4de580da0c0367622ac7979a1ba07c6011f497538bd7a2309678ede0f8a43d569ddefeef5a9a1b7839ae7fdf8ea9afd0e60434289ee59c9907f12ae80859d634ce821b6f189ab7f5fa910bd5e27aadc569f0f7470aceeaefb8102119635935cfda620da47fcc401479e24755700e2ad096d947d24a0dca4eccc76c39372aabd2e68adfa807ccd3e6a7bb109bc05ae707a8b3a8b2768151e947447ebabfb97d9098fd0962434fc1ed3ffcd04e1549cd6b7301a0d1eb25d653c8da3c61c791575f4dda22a2bb6948c04f543499c0655054c1c869321a1719b3d75f1deb4a71c9b7bfceed17297fad6553250051b49f1a8d8f8f90d1192b28fd21c6bb6d963549eaf088b7414a0967a08f2dd1fdcc73e3ad1d8159bec746a571e4e4c199dbadfbf577bfff94b1337b9de099da4b0c2f401055ce703b73f18e623f92deda883f28696d5433fe28120fd754dbc8f247ace2c5c7961cef8dc301f68fecae5268aec08d396802fbeaeee510f72980bd9b5742528a715cff8e33c93c20c48d6d27b9e9efcfdc4a3463bbcddffa49fc139872835873ba309a8f9606897e58079aa3111fbbb163dfcd9b3e430f6d29536ff98dfbd1e2ebcbaf0793254c98b287c37e62491e4b05e82035ce36807efe0853c16ff2f44be34c643612e97d57380bae2a5b17b6bb64b5fc6a5b5e760f53b827c34da5334c6dad8244a5e5d654173f5f46fc85da20fc0d7cede8563d3bb3a2dd879f33d407eec219f1ce172e3f7369b472ff3603113266a16c8d5f6d0992a310ff7f10e5fb103f5441c680803cbf4ca9c37ac7c2a78792312830536d1e62640b16da0298fc7b67a74dccee33a8cd9b8f4883bb20bb487018f2f5252cbe1776ca02e50ee271d0cb8ec39d2f8b99d50a8961c8bdd0218960a79999bbf2eaa0a41c16d78adff3f3f4d91a0044c5c11521f46d7ea751ea8f195925379bf12a8a2dea0550d689bca8baea8c862dfb2f9e32b6b92f5dc633e0803b7b47b79f2ed01807c1a932dff792e8323e001d0357db374f8e7d32d98f1b8b542119f9913877d3cc091152c06a54273c7dcc44a5ca8e1e77d130de4e3055dff0d2169315d3345544991467f8dbc1dde8a2c43c1f0778257a6edefe71ae2a817d733a8e5682740d2a19c34407cb8a6480b8864136cc278ded82b936d0a4e82768d3ff3bd3b54d010148ee0847423858ab6c413d7523d9dffa4060c50311a3ccaf31c4da7d518acb57f33c20c8b20507475f98670a117fa142680eda769261757cc23f2b1025642016a8a1e913aea1b4d4a9180beb95b97b2c4b4f40f82427e21cfb19d7a9a19a0769a150347ef8077ea71c272e2bddc8ec8698d5de1ff1bf94a5d971971524a04bde1dfb71d83790e01e7f3483e863bc4d3fb1bb88f2ac31c74bedfbd0074d43eedfc211c5b683cfa60afa27a377e9300276ed18cd04343a21c26ac0cba1cf1dee07f5cd12c129fbf4d783f7532bd86af7c3a6d232a30ec3f213b6e954ab1d1fcbe6da51d33a54ea9ec7906cb7e59e8e1237753179ff7c7176deec170c508a744f413b37fc734e427a6c1eb9d58feaf49c580ddeb829435fb54683b27e7938d6a757897434ccf1e3bdbe7d48e319e0bb3f3e47393f41fb18b673d4bf0570acb490a0c188e4d586d1c5c74342cf67cf721de3916074809b30d2ed150c752a5df9c492065de83d639bcf2fe9d95d80673d195ffd5c70efb76820619c3153dc335492ef7b97b85ff0bd4e6832f8fd30fa3f39bda6cbdba361a83879b82b376e8907d864074c8b7cf6a11ad14c22c1a12c7f485c4e7963b045ad18db328628cdf2072a17c7c3a289bcef24ae4898cbfb3001d4a727538346b1ba27702f4b86820be062c97ce9b22a35f6f62013d3ecac76545f5a541d3b6255e03ecfe199fdf05d625a1b48c7f1d45393bde49b20bcc6de98fc208219762cc91e334c72a1dfb8b44039257c65d793fb2148581acfd185e15e41162677f5d2f7736130f90baf758dede558f19b410acc6f997efa15e5c1982aa21359f85989bdbe4a99b67f1674a4d07366d199b7b6b8f3dc3f3e4281a9042de414f2cb60f9d1304af0f4c446af0b22951c9c2e2532f4ceaf800a034b755be4a6faee461e4ac1663a10976e0912951a45d25f8fdf7a45168cd191b406cd28042413a35834bfa4d8ce15fb13cc633b33d8e9ac82e85bb7b444250260b1f696de9db2eda5d394495184fe1fdfbdf0ab8bdff2a2a93bcad791c896b4a323ea4e4920247505ec6e5c0d32d41bf3eb39f06524116c29d3bf220bfb28e78501e7306fe9473415cc261e755618b566c28bd4cca0e1fd94daa018cdf5c733d5dda813bc13e007af18d657ed450f317f7afe95bd352b77f9b25acd864af1adb0e13e0390255a8a6b8abd8c333e7585f6667045e77bdd4b566ba7dc281a59539c0f01693128813599c30b166e4a6ff1bccbba7fab857d99378852ed9efeb839e7de376a3a50ec55db60204bab32744f0f73f829ec856883d31ba52c872d7d5356c5d884b30dd742c4007abb27f391ee16ee64b6fc962a718b85a84b6408a7ef48a433a05493d6462d72afc3d825e066563cf54b29ce095a95f5c45187b9c7f71d10b82fd53986be7e4c9d63100b80c1ec01bcf216ad37610082d30f76de8f06dd9507a938c1629adfea196c3ad72dbf104303ee5a77a10ad69f790533139eb18152028db963d84570eb8c6a403e1502ba67d988867580d9b9c95edd4e0d68d31e1bf142e5179948a35c183afc562c9baba14ea05dab7e127c4fde413a27d99642bd35193207fde6c17324b61f649cfb2344b351a266a4f70d2dbe2c5ec6553fc332ad08c0c1abf58f0a8fd64edfe7b3e95d5c254f83527796d62c8fd51a2c8a24c10c12cbffef60ed6cd9536720e3fc79db7aa90819ef70fa8ac97e876721e46fbfe282ab0198f5d28566d88654fd6c35f7af6645712ff46b50676e63582fe3b1cb98d9f224bc5f68e0b73a9b984125f02fa5c265a799069df881a3eff1ad34d8a929b1263a508fa5c027bbcd8cd992d340d04b72226df5733b91cda06fd99e6106e9e28c1d6546ee7ae8da9a31337e6f71fd8e6dac0671714bc32e32e6e2b836a4a622b8bafa86b618255c0022295cbe480c56670673c31c628e1426253db1ad82d1be89a4ef83ee925e439752dd4068de9201ca23f592c1719bf2bbd6a862d8cb687f75926e440fe375ab715df7c4aab1c86a4dec49a5a7d9d81611407d98a52750ec4aaa0dbe0244526fce5aa022f0a506e39ea94b35dc8548f17db0747ffb7b44abd1994f7943f59127c8f758dea01a2f9e0818aac07e2562f5d74e9ed53a7d61d9c731c6fb648bac0290e7972f57a9f5856f5ab89f6b1e1d4e6818fba7fbc8b468d04cea6d0718a3a9a781dfb4233d60165740bbec054e0b8bc4757c124706f134df58689b6812ff79f390d63fdb665213b085780b4cb2dc70845228408f1791d2c7e46a84be0ebed339b3a8cec9e3a6ccdfe02c0b0999179c3a8f2906f1c5e14527d99153ad25ceb8eb53e45e04a1613c363aafb62367a7916736045e926b6c5b659269768e5ddbdc20c0e962dab253eef4f66c280d5eb0c3a8da2115e09bf4bd71e724ed01c014d46c4ddc1949e3c7be97b8cc8a0dd0859c8797e0f2e035ce38fb9c800cb9014b58660abb97b4bedce71276804c96f221ffee2e372c115d22f05fb41e29db0dfbb1c5cef288329692b16d19b96dc1811b712ccd71cbe053bcc1755ecb95fc3471746f4c0565736671cc72bfcde4f7c0973b00d9663f6405b00b27e0368e717c2691e0b1e1b219e67d46b5ff4cd3fbcf8162d21374880b643044486cd4d0ebf3ed6808d588287034ea078a50fb087d4fa2aec4d6f88177f394cd07306fc1db2144e5290421fc57d201636785cf148f4ef37f28c4e24554ee93ed499b819e310c3241c2aab473c09ff9c9f77c03dab2417c0eb31389200780d50ca9ff8d123032aab0e5d236ef5dfcf26bb3f5ba415f8fd43af9a9ff799c1ba25153874cab2c6c242cef54d859c18237885ce12f517e44f3f73f0e7d84632d2e427970ba80301c9d934de5f2d1ddd9c770dc9959c603a3141cf2435797af8372ed5b7ad7bba223e0d9cbdcf06270e7475b6ac094982b3535ef34e3cc00e0c8124355c22901ea88f8603269b816599393c823c2b0b4b3e461fdd08f972c2f7bc034887cfaa16f97d2124a7932cc2200e9afaef0fc4fff09324581047d73e134adca4474ce022120f95a20a48b1bbed809ec0db32c751fd6bd096a952669035916e0cbd02137278ec8e70ffef4bdbbb6f24472b196ce410d7cc6a3faeb438b6272c1be61f0c1d97114a5c26be25303ae4da4fcc5fa96ab57ced5401ed938a54f421a45555967772e48cf9eddf7f42b0d57d89c033d7012d3fd9b62e3b37ab52dddad1ac657adaf5a2114c828615836c70c1348d598c7dee0e0467d6efbe37dd287496801865b862887706ace5ca18b77321aa61804d59c37b07871bccfd0983f2032e7facd4d99668d9bf9f08b80bfbdaf24b9d61ecff40c88e68e6985c9637c83e37c31fc9bb2bf9637bcd307c9b2b23d2d5e31dacc327b08feefcc35232feec26efe6a86f884607da1919669f0ea62f1107a0259b5c2c85c0a3396d3ff117ed331dc44319de136789dcb4c57304f709fcce018a41cf6b8f19b0a84870021ec0b3ab1579282c22e75859c3c136b887569fd12b97a7e118c1fe98cbaed5a46a86b54e55c97d5c7f04cf7d9721b310ab6b2a9a01479d8a67aad618471234ce2cefa91642d917e7c5525c0361767841abef7d5192e9119ef1b68e438514878d91bd3b612c5f7d8fa89a1d618a45e59e0704e4b3f1252d5eb5a63711a5a47f8cd2dd89591e2c32131c064afcd5a068152dfb78d24174c4b928d5dccaa7774eeadee0028a574664eec91afc6cc714b63a32afd608cd5f8004ed6dc988b147aa75d359f88a825ed8ce02354d4cbe02eb61a773a3d2f82f2b23dba4fb2855d975ab8fca646e2a314344ecb289e63fbbd3d82b54706f49d08f5825334591d627876bc0fa51839daba03a4d8db4c043d50a9010b9bba3bbd97918c0474068a09a00490263fbe61d0bb9b9f0ae6408e07d6ac325094790801d1a7ac7509a79d0fdb1e8a11a77e79d14ba1676f61bd60893edf03e5036d530aebd28bf91bc9bb216ae2e68d70b63719f07a9b03c12b401aa45c2726c0c07c0d6ca320c95ee1e4f1dcf3a9229a93a08879ca042429f25f025e72f615066498df52e6053f5bc79380d4cbbf307cd2437bc4fba5b3a225e51bcfbbb5ba01490e4e3c353fccd81d35c854b9363a74557213318e28c6473756d7b6061e9f4035a0ad0b89b4a09bd6919bb0c6e53aaa1237fcd09c18cb5649a310de47186811602cf1731840c7b1a6f7e9c520ba16a8b338f128cba5288ae12c153c2b38e93cf35a1496fc8ebdd7bb0849607097c37a8a14c2a61bf209a6059cf40a8a678136a9b0bb968e53fb0529e761f6f81b058270cd499fb2de2512c4f3e4302a8f19de87972dfe425a590a6c31e79950cb1f2fc4c4f59dbe01017ea7f5ce8ce358508a936fa1880206aaed4de63d64eaf4927ba62d13d334936db13853f032e7ba5bcc4aa81a612044a185be63725f4131f0b67a923a5ddf3b2aff81eefb04ff7aa70585f0e495a4170e97da772d8498d78960141ef61736bed192f0b1841245398485a367c4e91cd88c376191aed07333f724e22873de4d4a19406920a82d13969cc7ce39844863197687f0b127ff8c351880b6e483305fa9f08e7e28334d685ba777259930f1679271b11605a6cc8950c871d52947a1872fe392a39b26ff7af7c200aa1d1774d3d641bc3b63244eb3871dd8195cc4ffd5497c897915949f89ad520c870dd63f2206027e30276c5afc3a343218525131a31b25a50ea982809a6c56c95b726c8729b2750808b1a5c31d09880eec741b4d171cecfb6b55ccd9973b991b73a7febb8fa99d154e383f1ebcf951da461bf3bbd89fa65ee647a2516326356e09757e0cd9c856e4baa349ddfb7cfb6d4c9fe16f20b7d839e7e51b89bbbf9849ec218b9947f01dc377f29e77bb67c418263be18efd31027e9663f011d6883a6bcdc18b59d37c95e0d3ea0563dc44037f1b49fe7fee26cb9c6d0c70d3a53636618f0520c8601c820db4368cfc83a2cffce938dabf1a3dd9b917fdbbaceb18a10e228224c15627bbba343f5bedd4b5a1e43896eda38d9f2c8b6f4c317b571b987df51acfed409cfb238152dac54990561545783691e44a90f3aa55539783d577378c3cf94db060e2d0ad480a03286dd6e0ee1e28888923688a950cbc303a9e4031cfa80a9991121206e2dd5cc4f4acce09d8bd47a199b4cc52092278699dd6d7d961740a3606319a1290ddd1031c72460a230f132c1ddb46feea89202d365bf78eccfe27f365db9526202559f67e4e3b3e76f004b02ca5a156277825763217341ec040ad01c39ec6b0e218c33143c74ea4fdf81f5a94fe7c27dfdefef4ee8359996fffef9286fcbe96139a9109bb3e964a70851c578741af82cf3858c22618286364ae21e79796753b4ab6ce3ed0d24d93369650721b7f7814eadc5c7f84717d701dbcef40cd04172d3c874bbda07fac5f62785b1f87312b794bc4a04310f1078bbe8669ae24660ba6f94111ecf85c575c50c3de706d93f3867bd43784fafa6e70fdf592fc5ecaefa3edb95b6fb74866699e9497dfe31dab8b2c876cd66256b94517aefc69b79c32fc89757d6493d218e03bc2a5bd412bd698bc136e6b6f733ba17c8f963cee92d35fb0805c4d26ce5ae3f2e83b3f0052d7008bed0ef1321759aed665ab9469c9baef8e5686e26f83f17a3ab3fc85a179fdbcf8846a36578935482a7c04e912fbd336db19acfa71d9e09639516f105a6f26a67b2f144cc94388726bfc1e5447950527855db00429fa304eaf463d2f289a150baf3ad894c70b3e0b54b1f023feb1605c0ee03038b387e088ba0c3ccd6788908439ad6af0f3d6d12b548340cb3c193edfbfc8b133f5d0edf0b4893583dc0e1f1394b4fdfd05996a79de85952498295e37c5d7c20c3a9cdea717dba9109b8b564ef02f34b28b5fc66b746e71e87cde312cee074cb676c87c0ebd4e30d0b4489fed41ed0d014a1b19952d2500661e340c73e0c62686d9465419cf95081f60472d785c6cc086db76f01a8bfd71dc512259b9ddd8a1f39df021226c2e173549262bc41206c024b9476d62ee44ea02b73b8c8e8ac99786a8ad8358573da822c469facdb00b46e3467958bd845154c4ebef8546cbd525929af471ff6260ac4b09e8eb2cafbac3f22b5e18f09f5c5800cdff4b0714727c1c6c05b02c03740c95126ad9302b0de51ebc0d115088a9aeb3ba262eb41ecab7162f8a2151b070dac80ceb9c0e18089ae75c1e4442aee670dd2a414969da62e3cedf433c91002f07a0a4004e39042247468da81cfc63f71c7614b2a882d63becd52227af28e3cf7df91998577ce19e5a5da78e442a8526ec6536bfff893e63c9f55d91676a68fb957e0a01ca8858184b217147b7521f529166ea4feb0b21a7dc77df41d09ebf23dd54e9fcbd86414abf145a573538d15887ced18c22a5399f7b6406c227a92593f23b3e8dd448a1e934f709d44f0fe7ed6a86b5a7b9ab5e0c487da1a15d5b95bf905517c2f01133dac657a9e4a358651df51614c4d87983369d33861cd843a48bd1f98abbac439b7ea8c3a5915ddaa8185d2f80f5a1b449d7f856f8aca34aa1e7ba0922e0dca9d333178059b80c8d4ddec5125d0213115bd81cb4e18c6cf398ec1599673f4ce894b307bada1d5e91530052f652046c4d19445b0ace6e30c70890c4840eb546d230313cd0bc0352f3bc248aba0258780745a2d2403e957f08a3caaac86355d3843e2c60cf9ec81b35f00e203da7583980501a2485ce5feedf2dc8633ce2309edb3a566a57c795bd44fd210c5a331b19ab8d8e0125ecc655f28712293c07616974823690b57f106754ce35fa006f4b01c50ed8700e3d5dfe0e94fffcdacdd31016081e9323e4a1bbd959178be187718cdde9e5ce6457db171f767c534e3c3098fa80435b467ae37fc6888e9e9935074a370d2305417128f9a508403b21997bc351bf90bb4ec0515a279bf6ac95f8a837987f08c5a284dba77efdfa29df0b483eb2dc2fda3812fa7cfc4fe0fcd388b246616b10df63c08a4962056f9575613b34875afe630717efbeb970b7548eaa2d7955ace7576c6add55036486ec9795ae56901fd09a3e5e72e82dff1497d509acbfbde721eb3012cb692b64f7aec44de5814da2a750b23ddb4c52d64a3e87ef9ab37517173b8c8f76ce91147b2a25e29a880b49d7ebb8b420e0eb2973776ffc06fa97d85c3bfe56d68ad04053a3f41239c359ed59f9e145f4a00d513656d71ab8ee41cdd4966275b5306b0d266c75de34f7ce28a90a28cb9d13e8680e3b24ca5ee5c289fba76218a28c956a7ab9cd17195ffc10421a0f25c028d19272c6e0c94327116e080e6ce02dacefe72c5bc468e8c97b7335607f8728340c8ce3103ea3e3c1b1f969535044fb3e118821ea778f3505d1e003e475052e54e17a528f267b02ef8e6f43555bb3bb3a60912ab0876f86c74c88b467a114676aa2d239a949a9b8cfb2682c857bbacb66710a04bdff1456955460eeecb55d715cbc2bb7fe00d8aa329a81fda22f106ea254f39ace3d4d366cf3a643f7e78fd26a7ac5af253c8e5a91ddae1c181a4e232994a5d43beab5df8b38b4392bcab6621c7ade60914b4c5bba236411efc83114c3ddc5c4634917b98418a8283c5e08230a2d9c1970af80f7d0755c29dee6ef218f9b0a914a429623d368091ab116727ff75acb547b291828ee6ec48040576d23decdd19f4d94c3e9692f2ff12be30eac06f5f7731dd335e5b6b36131a9b84aae37ba78d0214c6f3cde51f554bfce33b4c1c69016bb2f8ed96c12f4e55555ae0ec36d21a58428923e54af1f1a8215ad0de2d6674dc0a93fa72f46555e66ec8ccbe658ad0c18a491d86b9bd23254a87637b7b661f6d846b15ac7f0653052ad3f96d3521bc13d5f3c1d318d98e504ba0edf28131c4829786ab68c19db0db052c4e4e5def1b236cadae4faa1ae385a769d265118b93da94587658d726aaf794e961f9d71728d34df30cd996ccac4c41d938d87aa18045c52d3db2eab3fd3a4bbd4c6c41e98b63f633a18f31a5d37d28317d00cb91e81f1364980bbabc4351917fcfd5037be7f589d52db82cbc8ce71964c1d313ff43876684db22b2703b663a1a84f17042c63e8ec083da3df5c7b6a65455e96afb8b404ebab450f684dacb6c870c05a2c3159e3d248ded58c551ef48b15c6e065efe8965d7bb94fc2a72d87624359fddb22b3122991f912928bb5cdfe14c0c8634bbd3abc98538a650535929993b4494fd85c7e677bb72ca80449b567cb94785db4aae7a8521b9b90c0ee30b875393fc93dcccf98ff220314de42aec4ca2f87c8189afbd073aa9762de33b40541f3a75b1d673cbd9c2cc9fe614764c6bfe2dbb939708e0d7963681b6a6ce3e48c35d27b34e641a98940ced4ff27cb349e4f4199bdcde2cdcddbe6a136755210b63174a28d4a6cb705c4b97fe4e00fdf8a09782ea84fca94e91cfef6dda886a2db1feaf6f467818e21d1cad34f40146bd4a26ca31dad1379d3e8b2f0093b524986d4f9913102f69b1f7ebd08830ec32948682b2570bc730bfb373daa1ca56651aef494b1f53d7d6a36d4e86fb3d300860e4a4ff54d1096580f58ac83d4257e089c5c7b41436cf9a9f966a58fb9b4f3d65e657ae966838bfd40e7da219d699f53669f0199f348c389d6b6bababb5303edc6680f97070e75ff301e686873353f3b80a08824c4214f8db8ef3679a522ec3a3cf9ba1951f5bdfe18541d2f3eb3f4a46d9344e77a66cfba1aaae101007f26e2b3a458eec35e6eac60155aa9d2af7a9019841e434bf488cda2b88d94e980fbef47075a2de0269ff42c9347142f6e2e95ff177afaabdd1efb628279c9bba1b62a3052ba030b50ba6559507d0ab6f40be93298b105595d005d82d6f30037dbbe6a29938e08133249301bdb2a814d9c16b02698afd9a4d949c5d78df2f6688e4ba27ed02498fa6ba5cb1c6", 0x2000, &(0x7f000001fec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001d600)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x3, 0xfffffffffffff6ec, 0x6, 0x96, 0x2, {0x6, 0x800, 0x8, 0x4, 0x5, 0x1, 0xff, 0x4, 0x400, 0x6000, 0x0, 0x0, 0x0, 0x3119, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', r8, &(0x7f0000000480)='./file0\x00', 0x4) kernel console output (not intermixed with test programs): _wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 425.872661][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 425.879275][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 425.885617][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 425.892242][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 425.898630][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 425.905252][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 425.911638][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 425.918280][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 425.924745][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 425.931352][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 425.938644][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 425.945301][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 425.951886][ T5780] usb 5-1: USB disconnect, device number 54 [ 425.957991][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 426.051549][T10132] usb 1-1: USB disconnect, device number 75 [ 426.143547][T10205] udevd[10205]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.171392][T10583] netlink: 'syz.2.1428': attribute type 2 has an invalid length. [ 426.495691][ T5780] usb 2-1: USB disconnect, device number 69 [ 426.631713][T10568] block device autoloading is deprecated and will be removed. [ 426.853744][T10588] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1429'. [ 427.613702][ T5642] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 427.783709][ T5642] usb 5-1: Using ep0 maxpacket: 16 [ 427.800516][ T5642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.826327][ T5642] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 427.851723][ T5642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.878088][ T5642] usb 5-1: config 0 descriptor?? [ 428.044211][ T5642] rc_core: IR keymap rc-xbox-dvd not found [ 428.063668][ T5642] Registered IR keymap rc-empty [ 428.095107][ T5642] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 428.159228][ T5642] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 428.204214][T10600] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 428.222920][ T5642] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 428.281288][ T5642] input: failed to attach handler kbd to device input31, error: -5 [ 428.326437][ T4984] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 428.405020][T10205] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 428.447055][ T4984] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 428.494312][ T4984] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 429.167165][ T5642] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 429.355836][ T5642] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 429.355861][ T5642] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 429.355876][ T5642] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 429.355913][ T5642] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 429.355933][ T5642] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 429.358964][ T5642] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 429.358990][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 429.359006][ T5642] usb 3-1: Product: syz [ 429.359018][ T5642] usb 3-1: Manufacturer: syz [ 429.372283][ T5642] cdc_wdm 3-1:1.0: skipping garbage [ 429.372311][ T5642] cdc_wdm 3-1:1.0: skipping garbage [ 429.402182][ T5642] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 429.402211][ T5642] cdc_wdm 3-1:1.0: Unknown control protocol [ 430.371247][T10132] usb 5-1: USB disconnect, device number 55 [ 430.530946][ T809] usb 3-1: USB disconnect, device number 63 [ 431.235327][T10653] FAULT_INJECTION: forcing a failure. [ 431.235327][T10653] name failslab, interval 1, probability 0, space 0, times 0 [ 431.266783][T10653] CPU: 0 UID: 0 PID: 10653 Comm: syz.2.1449 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.266819][T10653] Tainted: [L]=SOFTLOCKUP [ 431.266827][T10653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.266840][T10653] Call Trace: [ 431.266848][T10653] [ 431.266858][T10653] dump_stack_lvl+0xe8/0x150 [ 431.266887][T10653] should_fail_ex+0x412/0x560 [ 431.266916][T10653] should_failslab+0xa8/0x100 [ 431.266937][T10653] ? skb_clone+0x212/0x3a0 [ 431.266957][T10653] kmem_cache_alloc_noprof+0x87/0x650 [ 431.266986][T10653] ? __netlink_lookup+0xc6/0x8b0 [ 431.267013][T10653] skb_clone+0x212/0x3a0 [ 431.267040][T10653] __netlink_deliver_tap+0x404/0x850 [ 431.267083][T10653] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.267117][T10653] netlink_deliver_tap+0x19c/0x1b0 [ 431.267149][T10653] netlink_unicast+0x730/0x8e0 [ 431.267190][T10653] netlink_sendmsg+0x813/0xb40 [ 431.267233][T10653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.267270][T10653] ? aa_sock_msg_perm+0xf1/0x1b0 [ 431.267303][T10653] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.267335][T10653] ____sys_sendmsg+0x972/0x9f0 [ 431.267366][T10653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.267392][T10653] ? kstrtoull+0x12f/0x1d0 [ 431.267431][T10653] ___sys_sendmsg+0x2a5/0x360 [ 431.267450][T10653] ? __lock_acquire+0x6b5/0x2cf0 [ 431.267477][T10653] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.267501][T10653] ? get_pid_task+0x20/0x1f0 [ 431.267528][T10653] ? get_pid_task+0x20/0x1f0 [ 431.267553][T10653] ? get_pid_task+0x20/0x1f0 [ 431.267608][T10653] ? __fget_files+0x2a/0x420 [ 431.267633][T10653] ? __fget_files+0x3a0/0x420 [ 431.267680][T10653] __sys_sendmsg+0x183/0x260 [ 431.267705][T10653] ? __pfx___sys_sendmsg+0x10/0x10 [ 431.267750][T10653] __do_fast_syscall_32+0x23e/0x6f0 [ 431.267775][T10653] ? do_fast_syscall_32+0x33/0x70 [ 431.267796][T10653] ? lockdep_hardirqs_on+0x7a/0x110 [ 431.267817][T10653] ? asm_int80_emulation+0x1a/0x20 [ 431.267838][T10653] ? do_int80_emulation+0x29f/0x550 [ 431.267870][T10653] ? trace_irq_disable+0x3b/0x140 [ 431.267905][T10653] do_fast_syscall_32+0x33/0x70 [ 431.267928][T10653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.267952][T10653] RIP: 0023:0xf70af01c [ 431.267970][T10653] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 431.267988][T10653] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 431.268009][T10653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 431.268024][T10653] RDX: 00000000040084c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.268036][T10653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 431.268048][T10653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 431.268061][T10653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.268092][T10653] [ 432.356087][T10669] input: syz0 as /devices/virtual/input/input32 [ 432.951666][T10681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1454'. [ 433.444843][ T5717] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 433.629740][ T5717] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 433.667604][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.702220][ T5717] usb 1-1: Product: syz [ 433.719368][ T5717] usb 1-1: Manufacturer: syz [ 433.743517][ T5717] usb 1-1: SerialNumber: syz [ 433.793936][ T5717] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 433.813140][T10132] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.006717][ T9] usb 1-1: USB disconnect, device number 76 [ 435.213969][ T4949] Bluetooth: hci0: command 0x0406 tx timeout [ 435.244319][ T809] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 435.279656][ T809] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 435.390279][T10132] usb 1-1: Service connection timeout for: 257 [ 435.431483][T10132] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 435.463799][ T5780] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 435.475560][T10132] ath9k_htc: Failed to initialize the device [ 435.504981][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 435.696200][ T5780] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 435.722639][ T5780] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 435.772054][ T5780] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 435.811768][ T5780] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 435.858701][ T5780] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 435.899562][ T5780] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 435.928219][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 435.959544][ T5780] usb 3-1: Product: syz [ 435.981585][ T5780] usb 3-1: Manufacturer: syz [ 435.993113][T10728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1460'. [ 436.035668][ T5780] cdc_wdm 3-1:1.0: skipping garbage [ 436.055753][ T5780] cdc_wdm 3-1:1.0: skipping garbage [ 436.072742][T10730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.086968][ T5780] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 436.107032][ T5780] cdc_wdm 3-1:1.0: Unknown control protocol [ 436.834139][ T5780] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 436.903104][T10742] program syz.4.1463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.974328][T10132] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 437.016252][ T5780] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 437.036836][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.086996][ T5780] pwc: Logitech/Cisco VT Camera webcam detected. [ 437.155712][T10132] usb 2-1: Using ep0 maxpacket: 32 [ 437.183055][T10132] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 437.221188][T10132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.252356][T10132] usb 2-1: config 0 descriptor?? [ 437.282013][T10132] gspca_main: sq930x-2.14.0 probing 041e:403c [ 437.352422][ T9] usb 3-1: USB disconnect, device number 64 [ 437.562457][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1464'. [ 437.603740][ T4949] Bluetooth: hci1: command 0x0406 tx timeout [ 437.610546][ T809] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 437.634502][ T809] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 437.836427][T10132] gspca_sq930x: reg_r 001f failed -110 [ 437.851793][T10132] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 437.945620][T10758] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1465'. [ 438.207893][T10768] FAULT_INJECTION: forcing a failure. [ 438.207893][T10768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.253877][T10768] CPU: 1 UID: 0 PID: 10768 Comm: syz.2.1467 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.253913][T10768] Tainted: [L]=SOFTLOCKUP [ 438.253921][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 438.253935][T10768] Call Trace: [ 438.253944][T10768] [ 438.253952][T10768] dump_stack_lvl+0xe8/0x150 [ 438.253983][T10768] should_fail_ex+0x412/0x560 [ 438.254023][T10768] _copy_to_user+0x31/0xb0 [ 438.254053][T10768] simple_read_from_buffer+0xe1/0x170 [ 438.254087][T10768] proc_fail_nth_read+0x1bb/0x230 [ 438.254118][T10768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.254149][T10768] ? rw_verify_area+0x2a6/0x4d0 [ 438.254179][T10768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.254208][T10768] vfs_read+0x20c/0xa70 [ 438.254243][T10768] ? __pfx___mutex_lock+0x10/0x10 [ 438.254272][T10768] ? __pfx_vfs_read+0x10/0x10 [ 438.254303][T10768] ? __fget_files+0x2a/0x420 [ 438.254332][T10768] ? __fget_files+0x3a0/0x420 [ 438.254363][T10768] ? __fget_files+0x2a/0x420 [ 438.254397][T10768] ksys_read+0x150/0x270 [ 438.254430][T10768] ? __pfx_ksys_read+0x10/0x10 [ 438.254464][T10768] ? asm_int80_emulation+0x1a/0x20 [ 438.254492][T10768] do_int80_emulation+0x19a/0x550 [ 438.254515][T10768] ? trace_irq_disable+0x3b/0x140 [ 438.254544][T10768] ? asm_int80_emulation+0x1a/0x20 [ 438.254564][T10768] ? clear_bhb_loop+0x40/0x90 [ 438.254584][T10768] ? clear_bhb_loop+0x40/0x90 [ 438.254611][T10768] asm_int80_emulation+0x1a/0x20 [ 438.254632][T10768] RIP: 0023:0xf71e61ab [ 438.254651][T10768] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 438.254670][T10768] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 438.254692][T10768] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f549d5d0 [ 438.254708][T10768] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 438.254720][T10768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.254732][T10768] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 438.254745][T10768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.254777][T10768] [ 438.605809][T10723] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 438.824368][T10723] usb 4-1: Using ep0 maxpacket: 16 [ 438.856085][T10787] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1470'. [ 438.879785][T10723] usb 4-1: config 0 has no interfaces? [ 438.895572][T10723] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 438.912769][T10723] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 438.961251][T10723] usb 4-1: Manufacturer: syz [ 438.993290][T10723] usb 4-1: config 0 descriptor?? [ 439.187102][T10796] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1471'. [ 439.203273][T10796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.412668][T10764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.424558][T10764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.439384][T10801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1472'. [ 439.453980][T10764] misc userio: Can't change port type on an already running userio instance [ 439.592362][ T5780] pwc: Failed to set LED on/off time (-71) [ 439.622664][ T5780] pwc: send_video_command error -71 [ 439.642338][ T5780] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 439.667588][ T5780] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71 [ 439.698889][ T4949] Bluetooth: hci2: command 0x0406 tx timeout [ 439.707982][T10723] usb 4-1: USB disconnect, device number 65 [ 439.714088][ T809] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 439.724786][ T809] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 439.736621][ T5780] usb 1-1: USB disconnect, device number 77 [ 440.143729][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 440.168240][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.177596][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.263278][T10132] usb 2-1: USB disconnect, device number 70 [ 440.313704][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 440.356885][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 440.400993][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 440.449252][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.493485][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.540261][T10818] FAULT_INJECTION: forcing a failure. [ 440.540261][T10818] name failslab, interval 1, probability 0, space 0, times 0 [ 440.555192][T10818] CPU: 1 UID: 0 PID: 10818 Comm: syz.1.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.555226][T10818] Tainted: [L]=SOFTLOCKUP [ 440.555235][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 440.555248][T10818] Call Trace: [ 440.555257][T10818] [ 440.555266][T10818] dump_stack_lvl+0xe8/0x150 [ 440.555296][T10818] should_fail_ex+0x412/0x560 [ 440.555324][T10818] should_failslab+0xa8/0x100 [ 440.555348][T10818] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 440.555381][T10818] ? dup_task_struct+0x52/0x840 [ 440.555410][T10818] dup_task_struct+0x52/0x840 [ 440.555432][T10818] ? _raw_spin_unlock_irq+0x23/0x50 [ 440.555468][T10818] copy_process+0x89b/0x4440 [ 440.555492][T10818] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 440.555533][T10818] ? kasan_save_track+0x4f/0x80 [ 440.555561][T10818] ? kasan_save_track+0x3e/0x80 [ 440.555601][T10818] ? __kmalloc_cache_noprof+0x31c/0x660 [ 440.555627][T10818] ? create_io_worker+0xab/0x5c0 [ 440.555655][T10818] ? io_wq_enqueue+0x675/0x8a0 [ 440.555680][T10818] ? tctx_task_work_run+0x55/0x300 [ 440.555706][T10818] ? tctx_task_work+0x3f/0x90 [ 440.555731][T10818] ? task_work_run+0x1d9/0x270 [ 440.555757][T10818] ? io_run_task_work+0x3e4/0x560 [ 440.555787][T10818] ? do_fast_syscall_32+0x33/0x70 [ 440.555808][T10818] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.555847][T10818] ? __pfx_copy_process+0x10/0x10 [ 440.555875][T10818] ? __pfx_io_wq_worker+0x10/0x10 [ 440.555902][T10818] ? __pfx_io_wq_worker+0x10/0x10 [ 440.555929][T10818] create_io_thread+0xfc/0x170 [ 440.555955][T10818] ? __pfx_create_io_thread+0x10/0x10 [ 440.555984][T10818] ? __pfx_io_wq_worker+0x10/0x10 [ 440.556019][T10818] ? __raw_spin_lock_init+0x45/0x100 [ 440.556051][T10818] ? __init_swait_queue_head+0xa9/0x150 [ 440.556081][T10818] ? create_io_worker+0x27/0x5c0 [ 440.556109][T10818] create_io_worker+0x181/0x5c0 [ 440.556141][T10818] io_wq_enqueue+0x675/0x8a0 [ 440.556167][T10818] ? io_wq_enqueue+0x332/0x8a0 [ 440.556190][T10818] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 440.556218][T10818] ? __pfx_io_req_task_submit+0x10/0x10 [ 440.556242][T10818] io_handle_tw_list+0x3db/0x540 [ 440.556277][T10818] tctx_task_work_run+0x55/0x300 [ 440.556308][T10818] tctx_task_work+0x3f/0x90 [ 440.556336][T10818] task_work_run+0x1d9/0x270 [ 440.556385][T10818] ? __pfx_task_work_run+0x10/0x10 [ 440.556418][T10818] ? preempt_count_add+0x91/0x190 [ 440.556445][T10818] ? io_run_task_work+0x397/0x560 [ 440.556473][T10818] io_run_task_work+0x3e4/0x560 [ 440.556507][T10818] ? __pfx_io_run_task_work+0x10/0x10 [ 440.556539][T10818] ? task_work_add+0x3ee/0x440 [ 440.556575][T10818] io_cqring_wait+0x208/0x2080 [ 440.556606][T10818] ? __pfx_io_arm_apoll+0x10/0x10 [ 440.556632][T10818] ? __pfx_io_async_queue_proc+0x10/0x10 [ 440.556663][T10818] ? io_req_normal_work_add+0x279/0x400 [ 440.556696][T10818] ? __pfx_io_req_normal_work_add+0x10/0x10 [ 440.556725][T10818] ? io_arm_poll_handler+0x1d3/0x290 [ 440.556762][T10818] ? __pfx_io_cqring_wait+0x10/0x10 [ 440.556797][T10818] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 440.556834][T10818] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 440.556877][T10818] __se_sys_io_uring_enter+0x58c/0x1c40 [ 440.556909][T10818] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 440.556937][T10818] ? __fget_files+0x3a0/0x420 [ 440.556965][T10818] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 440.556995][T10818] ? fput+0xa0/0xd0 [ 440.557030][T10818] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 440.557059][T10818] __do_fast_syscall_32+0x23e/0x6f0 [ 440.557083][T10818] ? do_fast_syscall_32+0x33/0x70 [ 440.557105][T10818] ? lockdep_hardirqs_on+0x7a/0x110 [ 440.557126][T10818] ? asm_int80_emulation+0x1a/0x20 [ 440.557146][T10818] ? do_int80_emulation+0x29f/0x550 [ 440.557168][T10818] ? trace_irq_disable+0x3b/0x140 [ 440.557203][T10818] do_fast_syscall_32+0x33/0x70 [ 440.557228][T10818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.557254][T10818] RIP: 0023:0xf7f2401c [ 440.557274][T10818] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 440.557292][T10818] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 440.557315][T10818] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000001 [ 440.557330][T10818] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 440.557343][T10818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.557356][T10818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 440.557369][T10818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.557402][T10818] [ 440.579464][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.138639][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.305857][T10827] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1478'. [ 441.374602][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 441.396919][ T9] usbtmc 5-1:16.0: can't read capabilities [ 441.623745][T10132] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 441.734053][ T29] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 441.786461][T10132] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 441.814724][T10132] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 441.839502][T10132] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 441.854549][ T809] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 441.860791][ T4949] Bluetooth: hci3: command 0x0406 tx timeout [ 441.863910][T10132] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 441.879003][ T809] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 441.887286][T10840] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1481'. [ 441.903557][T10132] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 441.916296][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 441.937598][ T29] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 441.958527][T10132] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 441.968790][ T29] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 441.993659][T10132] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.010677][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 442.029272][T10132] usb 2-1: Product: syz [ 442.038237][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 442.042888][ T9] usb 5-1: USB disconnect, device number 56 [ 442.050962][T10132] usb 2-1: Manufacturer: syz [ 442.093703][ T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 442.118031][T10132] cdc_wdm 2-1:1.0: skipping garbage [ 442.135671][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 442.149189][T10132] cdc_wdm 2-1:1.0: skipping garbage [ 442.171682][T10132] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 442.183671][ T29] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 442.193486][T10132] cdc_wdm 2-1:1.0: Unknown control protocol [ 442.221624][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.262146][ T29] usb 1-1: config 0 descriptor?? [ 442.499704][ T29] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 78 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 442.584105][ T29] usb 1-1: USB disconnect, device number 78 [ 442.618957][ T29] usblp1: removed [ 442.675050][ T5780] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 442.858183][ T5780] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 442.873924][ T9] IPVS: starting estimator thread 0... [ 442.891672][ T5780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.919584][ T30] audit: type=1326 audit(1780033330.758:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.4.1484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 442.987242][ T5780] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 443.012714][ T30] audit: type=1326 audit(1780033330.758:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.4.1484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e61ab code=0x7ffc0000 [ 443.044148][T10862] IPVS: using max 27 ests per chain, 64800 per kthread [ 443.054164][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.056060][ T29] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 443.102154][ T5780] usb 4-1: Product: syz [ 443.115533][ T5780] usb 4-1: Manufacturer: syz [ 443.126136][ T5780] usb 4-1: SerialNumber: syz [ 443.133555][ T30] audit: type=1326 audit(1780033330.758:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.4.1484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 443.170717][T10132] usb 2-1: USB disconnect, device number 71 [ 443.211659][ T30] audit: type=1326 audit(1780033330.818:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.4.1484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 443.266257][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 443.307596][ T5780] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input34 [ 443.339371][ T29] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 443.385957][ T30] audit: type=1326 audit(1780033330.838:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.4.1484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 443.410788][ T29] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 443.433862][ T29] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 443.469938][ T29] usb 1-1: config 250 has no interface number 0 [ 443.486263][ T30] audit: type=1326 audit(1780033330.848:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.4.1484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 443.510927][ T29] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 443.533750][ T29] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 443.608362][ T29] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 443.632457][ T30] audit: type=1326 audit(1780033330.848:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.4.1484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 443.677635][ T29] usb 1-1: config 250 interface 228 has no altsetting 0 [ 443.699796][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 443.715584][ T29] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 443.726021][ T30] audit: type=1326 audit(1780033330.918:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.4.1484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 443.770682][ T29] usb 1-1: Product: syz [ 443.779303][ T29] usb 1-1: SerialNumber: syz [ 443.810504][ T29] hub 1-1:250.228: bad descriptor, ignoring hub [ 443.818613][ T30] audit: type=1326 audit(1780033330.928:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.4.1484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 443.862367][ T29] hub 1-1:250.228: probe with driver hub failed with error -5 [ 443.924791][ T4949] Bluetooth: hci4: command 0x0406 tx timeout [ 443.927111][ T30] audit: type=1326 audit(1780033330.928:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.4.1484" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 443.943350][ T809] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 443.973318][ T809] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 444.025638][ T29] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 79 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 444.143683][T10132] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 444.281889][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.318250][T10132] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 444.328569][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.350762][T10132] usb 3-1: config 6 has no interface number 0 [ 444.379150][T10132] usb 3-1: config 6 interface 2 altsetting 90 endpoint 0xB has invalid wMaxPacketSize 0 [ 444.390567][ C1] usblp0: nonzero read bulk status received: -71 [ 444.417392][ T29] usb 1-1: USB disconnect, device number 79 [ 444.448094][T10132] usb 3-1: config 6 interface 2 altsetting 90 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 444.522960][T10132] usb 3-1: config 6 interface 2 altsetting 90 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 444.539267][T10132] usb 3-1: config 6 interface 2 altsetting 90 endpoint 0x82 has invalid maxpacket 41750, setting to 64 [ 444.552261][T10132] usb 3-1: config 6 interface 2 has no altsetting 0 [ 444.569081][T10132] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 444.617900][T10132] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 444.647718][T10132] usb 3-1: Product: syz [ 444.658057][T10132] usb 3-1: Manufacturer: syz [ 444.677034][T10132] usb 3-1: SerialNumber: syz [ 444.702649][T10868] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 444.729633][T10132] hso 3-1:6.2: Failed to find BULK eps [ 444.907421][T10877] FAULT_INJECTION: forcing a failure. [ 444.907421][T10877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.947081][T10877] CPU: 0 UID: 0 PID: 10877 Comm: syz.4.1488 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.947117][T10877] Tainted: [L]=SOFTLOCKUP [ 444.947126][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.947139][T10877] Call Trace: [ 444.947148][T10877] [ 444.947158][T10877] dump_stack_lvl+0xe8/0x150 [ 444.947191][T10877] should_fail_ex+0x412/0x560 [ 444.947221][T10877] _copy_from_iter+0x1d3/0x1670 [ 444.947250][T10877] ? rcu_is_watching+0x15/0xb0 [ 444.947282][T10877] ? __pfx__copy_from_iter+0x10/0x10 [ 444.947316][T10877] ? netlink_sendmsg+0x650/0xb40 [ 444.947348][T10877] ? skb_put+0x11b/0x210 [ 444.947383][T10877] netlink_sendmsg+0x6c0/0xb40 [ 444.947425][T10877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.947461][T10877] ? aa_sock_msg_perm+0xf1/0x1b0 [ 444.947496][T10877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 444.947529][T10877] ____sys_sendmsg+0x972/0x9f0 [ 444.947567][T10877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.947598][T10877] ? kstrtoull+0x12f/0x1d0 [ 444.947649][T10877] ___sys_sendmsg+0x2a5/0x360 [ 444.947670][T10877] ? __lock_acquire+0x6b5/0x2cf0 [ 444.947697][T10877] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.947721][T10877] ? get_pid_task+0x20/0x1f0 [ 444.947749][T10877] ? get_pid_task+0x20/0x1f0 [ 444.947774][T10877] ? get_pid_task+0x20/0x1f0 [ 444.947828][T10877] ? __fget_files+0x2a/0x420 [ 444.947855][T10877] ? __fget_files+0x3a0/0x420 [ 444.947891][T10877] __sys_sendmsg+0x183/0x260 [ 444.947915][T10877] ? __pfx___sys_sendmsg+0x10/0x10 [ 444.947960][T10877] __do_fast_syscall_32+0x23e/0x6f0 [ 444.947984][T10877] ? do_fast_syscall_32+0x33/0x70 [ 444.948006][T10877] ? lockdep_hardirqs_on+0x7a/0x110 [ 444.948026][T10877] ? asm_int80_emulation+0x1a/0x20 [ 444.948046][T10877] ? do_int80_emulation+0x29f/0x550 [ 444.948073][T10877] do_fast_syscall_32+0x33/0x70 [ 444.948097][T10877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.948123][T10877] RIP: 0023:0xf7fe401c [ 444.948143][T10877] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 444.948159][T10877] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 444.948181][T10877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 444.948196][T10877] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.948209][T10877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.948222][T10877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 444.948235][T10877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.948266][T10877] [ 445.213236][ T29] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 445.311895][ T5780] bcm5974 4-1:1.0: could not read from device [ 445.332725][ T5780] input: failed to attach handler mousedev to device input34, error: -5 [ 445.346820][ T5780] usb 4-1: USB disconnect, device number 66 [ 445.358833][ T4984] bcm5974 4-1:1.0: could not read from device [ 445.373960][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 445.381708][ T29] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 445.381736][ T29] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 445.381755][ T29] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 445.381774][ T29] usb 1-1: config 250 has no interface number 0 [ 445.381808][ T29] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 445.381829][ T29] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 445.381852][ T29] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 445.381878][ T29] usb 1-1: config 250 interface 228 has no altsetting 0 [ 445.383637][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 445.383670][ T29] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 445.383692][ T29] usb 1-1: Product: syz [ 445.383710][ T29] usb 1-1: SerialNumber: syz [ 445.386976][ T4984] bcm5974 4-1:1.0: could not read from device [ 445.392870][ T29] hub 1-1:250.228: bad descriptor, ignoring hub [ 445.392901][ T29] hub 1-1:250.228: probe with driver hub failed with error -5 [ 445.469698][T10885] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1491'. [ 445.601418][T10830] usblp0: removed [ 445.641775][ T29] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 80 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 445.674917][ T29] usb 1-1: USB disconnect, device number 80 [ 445.681044][ T29] usblp0: removed [ 445.694082][T10132] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 445.843981][T10132] usb 5-1: Using ep0 maxpacket: 8 [ 445.851429][T10132] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 445.868128][T10132] usb 5-1: config 0 has no interface number 0 [ 445.881606][T10132] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 445.904418][T10132] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 445.914987][T10132] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 445.936702][T10132] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 445.959750][T10132] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.996583][T10132] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 446.006685][T10132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.015540][T10132] usb 5-1: Product: syz [ 446.020043][T10132] usb 5-1: Manufacturer: syz [ 446.021240][T10890] program syz.1.1493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.027271][T10132] usb 5-1: SerialNumber: syz [ 446.047975][T10132] usb 5-1: config 0 descriptor?? [ 446.270551][T10132] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 446.396435][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1495'. [ 446.521247][ T5703] usb 5-1: USB disconnect, device number 57 [ 446.577467][ T5780] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 446.744242][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 446.756564][ T5780] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 446.773969][ T5780] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 446.784702][ T5780] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.794878][ T5780] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.808127][ T5780] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.818868][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.888196][ T5703] usb 3-1: USB disconnect, device number 65 [ 446.944062][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 447.038096][ T5780] usb 2-1: GET_CAPABILITIES returned 0 [ 447.054578][ T5780] usbtmc 2-1:16.0: can't read capabilities [ 447.123190][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 447.143141][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 447.155920][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 447.165408][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 447.177451][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 447.198629][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 447.209174][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 447.219331][ T9] usb 1-1: Product: syz [ 447.223724][ T9] usb 1-1: Manufacturer: syz [ 447.239121][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 447.258908][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 447.276455][ T9] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 447.286697][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 447.573744][ T5703] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 447.648798][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 447.663500][T10902] usbtmc 2-1:16.0: Unable to send data, error -71 [ 447.683489][ T5780] usb 2-1: USB disconnect, device number 72 [ 447.741509][ T5703] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 447.781192][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.814655][ T5703] usb 5-1: Product: syz [ 447.832541][ T5703] usb 5-1: Manufacturer: syz [ 447.854199][ T5703] usb 5-1: SerialNumber: syz [ 447.891691][ T5703] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 447.924155][T10132] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 448.236554][T10917] netlink: 392 bytes leftover after parsing attributes in process `syz.1.1502'. [ 448.327696][ T29] usb 1-1: USB disconnect, device number 81 [ 448.389096][T10921] FAULT_INJECTION: forcing a failure. [ 448.389096][T10921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.412880][T10921] CPU: 0 UID: 0 PID: 10921 Comm: syz.1.1504 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.412916][T10921] Tainted: [L]=SOFTLOCKUP [ 448.412924][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 448.412937][T10921] Call Trace: [ 448.412946][T10921] [ 448.412954][T10921] dump_stack_lvl+0xe8/0x150 [ 448.412986][T10921] should_fail_ex+0x412/0x560 [ 448.413016][T10921] _copy_from_user+0x2d/0xb0 [ 448.413044][T10921] get_user_ifreq+0xa3/0x180 [ 448.413070][T10921] sock_ioctl+0x704/0x7f0 [ 448.413097][T10921] ? __pfx_sock_ioctl+0x10/0x10 [ 448.413136][T10921] compat_sock_ioctl+0x288/0xcb0 [ 448.413167][T10921] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 448.413195][T10921] ? __fget_files+0x3a0/0x420 [ 448.413221][T10921] ? __fget_files+0x2a/0x420 [ 448.413249][T10921] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 448.413284][T10921] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 448.413322][T10921] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 448.413360][T10921] ? __fget_files+0x3a0/0x420 [ 448.413392][T10921] ? fput+0xa0/0xd0 [ 448.413416][T10921] ? ksys_write+0x242/0x270 [ 448.413468][T10921] __do_fast_syscall_32+0x23e/0x6f0 [ 448.413492][T10921] ? do_fast_syscall_32+0x33/0x70 [ 448.413514][T10921] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.413533][T10921] ? asm_int80_emulation+0x1a/0x20 [ 448.413558][T10921] ? do_int80_emulation+0x29f/0x550 [ 448.413578][T10921] ? trace_irq_disable+0x3b/0x140 [ 448.413612][T10921] do_fast_syscall_32+0x33/0x70 [ 448.413635][T10921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.413662][T10921] RIP: 0023:0xf7f2401c [ 448.413681][T10921] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 448.413699][T10921] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 448.413721][T10921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f3 [ 448.413736][T10921] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.413748][T10921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.413761][T10921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 448.413772][T10921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.413802][T10921] [ 448.656077][ T3366] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 448.933279][ T5703] usb 5-1: USB disconnect, device number 58 [ 448.943717][ T9] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 449.095624][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 449.233682][ T9] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 449.403782][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 449.410467][ T9] usb usb4-port1: attempt power cycle [ 449.454580][T10132] usb 5-1: Service connection timeout for: 257 [ 449.482323][T10132] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 449.509445][T10132] ath9k_htc: Failed to initialize the device [ 449.539579][ T5703] usb 5-1: ath9k_htc: USB layer deinitialized [ 449.764096][ T9] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 449.794439][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 449.934192][ T9] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 449.976155][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 449.989741][ T9] usb usb4-port1: unable to enumerate USB device [ 450.022361][T10939] FAULT_INJECTION: forcing a failure. [ 450.022361][T10939] name failslab, interval 1, probability 0, space 0, times 0 [ 450.035975][T10939] CPU: 1 UID: 0 PID: 10939 Comm: syz.4.1510 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.036011][T10939] Tainted: [L]=SOFTLOCKUP [ 450.036020][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.036041][T10939] Call Trace: [ 450.036052][T10939] [ 450.036062][T10939] dump_stack_lvl+0xe8/0x150 [ 450.036092][T10939] should_fail_ex+0x412/0x560 [ 450.036121][T10939] should_failslab+0xa8/0x100 [ 450.036146][T10939] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 450.036183][T10939] ? ip6_default_advmss+0x80/0x3b0 [ 450.036208][T10939] ? __alloc_skb+0x1d0/0x7d0 [ 450.036244][T10939] __alloc_skb+0x1d0/0x7d0 [ 450.036286][T10939] tcp_stream_alloc_skb+0x3f/0x580 [ 450.036313][T10939] ? __asan_memset+0x22/0x50 [ 450.036343][T10939] tcp_connect+0x15a9/0x53a0 [ 450.036399][T10939] ? __pfx_tcp_connect+0x10/0x10 [ 450.036431][T10939] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 450.036465][T10939] ? lockdep_hardirqs_on+0x7a/0x110 [ 450.036486][T10939] ? ktime_get_with_offset+0x93/0x2d0 [ 450.036517][T10939] ? seqcount_lockdep_reader_access+0xea/0x100 [ 450.036560][T10939] ? __asan_memset+0x22/0x50 [ 450.036592][T10939] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 450.036634][T10939] ? inet6_hash_connect+0xeb/0x170 [ 450.036672][T10939] tcp_v6_connect+0x1295/0x1b10 [ 450.036697][T10939] ? __kmalloc_cache_noprof+0x31c/0x660 [ 450.036726][T10939] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 450.036751][T10939] ? tcp_sendmsg_locked+0x4a88/0x5360 [ 450.036792][T10939] ? __pfx_tcp_v6_connect+0x10/0x10 [ 450.036831][T10939] __inet_stream_connect+0x25a/0xdd0 [ 450.036877][T10939] ? __pfx___inet_stream_connect+0x10/0x10 [ 450.036903][T10939] ? __kasan_kmalloc+0x93/0xb0 [ 450.036936][T10939] ? __kmalloc_cache_noprof+0x31c/0x660 [ 450.036966][T10939] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 450.036991][T10939] ? __kmalloc_cache_noprof+0x15b/0x660 [ 450.037026][T10939] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 450.037068][T10939] tcp_sendmsg_locked+0x4a88/0x5360 [ 450.037101][T10939] ? tcp_sendmsg_locked+0x311/0x5360 [ 450.037128][T10939] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 450.037160][T10939] ? __lock_acquire+0x6b5/0x2cf0 [ 450.037198][T10939] ? __lock_acquire+0x6b5/0x2cf0 [ 450.037255][T10939] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 450.037292][T10939] ? tcp_sendmsg+0x21/0x50 [ 450.037322][T10939] ? __local_bh_enable_ip+0xd0/0x130 [ 450.037368][T10939] ? __pfx_inet6_sendmsg+0x10/0x10 [ 450.037397][T10939] tcp_sendmsg+0x2f/0x50 [ 450.037423][T10939] __sys_sendto+0x4a3/0x710 [ 450.037456][T10939] ? __pfx___sys_sendto+0x10/0x10 [ 450.037511][T10939] ? fput+0xa0/0xd0 [ 450.037544][T10939] ? ksys_write+0x242/0x270 [ 450.037581][T10939] __ia32_sys_sendto+0xdd/0x100 [ 450.037615][T10939] __do_fast_syscall_32+0x23e/0x6f0 [ 450.037637][T10939] ? do_fast_syscall_32+0x33/0x70 [ 450.037659][T10939] ? lockdep_hardirqs_on+0x7a/0x110 [ 450.037679][T10939] ? asm_int80_emulation+0x1a/0x20 [ 450.037699][T10939] ? do_int80_emulation+0x29f/0x550 [ 450.037720][T10939] ? trace_irq_disable+0x3b/0x140 [ 450.037763][T10939] do_fast_syscall_32+0x33/0x70 [ 450.037787][T10939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.037813][T10939] RIP: 0023:0xf7fe401c [ 450.037833][T10939] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 450.037852][T10939] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 450.037875][T10939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001b00 [ 450.037889][T10939] RDX: 0000000000000001 RSI: 0000000020000045 RDI: 0000000080000140 [ 450.037903][T10939] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 450.037916][T10939] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 450.037929][T10939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.037961][T10939] [ 450.097472][T10935] bridge1: entered promiscuous mode [ 450.599926][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'. [ 450.685621][ T5703] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 450.855745][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 450.872923][ T5703] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 450.897678][ T5703] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 450.924450][ T5703] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.948494][ T5703] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.976755][ T5703] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.999885][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.246680][ T5703] usb 1-1: GET_CAPABILITIES returned 0 [ 451.252569][ T5703] usbtmc 1-1:16.0: can't read capabilities [ 451.313692][ T29] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 451.475927][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 451.510340][ T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 451.536402][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 451.549165][ T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 451.559568][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 451.571176][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.582987][ T29] usb 3-1: config 0 descriptor?? [ 451.800512][ T29] hdpvr 3-1:0.0: firmware version 0x8 dated 5 [ 451.843732][T10132] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 451.896307][ T9] usb 1-1: USB disconnect, device number 82 [ 452.017441][T10132] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 452.031353][T10132] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 452.053055][T10132] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 452.074098][T10132] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 452.103711][T10132] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 452.114247][ T5780] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 452.129931][T10132] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 452.145304][T10132] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 452.163843][T10132] usb 5-1: Product: syz [ 452.173694][T10132] usb 5-1: Manufacturer: syz [ 452.193014][T10132] cdc_wdm 5-1:1.0: skipping garbage [ 452.200339][T10132] cdc_wdm 5-1:1.0: skipping garbage [ 452.216569][T10132] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 452.233727][T10132] cdc_wdm 5-1:1.0: Unknown control protocol [ 452.284405][ T5780] usb 4-1: Using ep0 maxpacket: 32 [ 452.306951][ T5780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.328438][ T5780] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.358902][ T5780] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 452.368581][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.377796][ T5780] usb 4-1: Product: syz [ 452.382338][ T5780] usb 4-1: Manufacturer: syz [ 452.388341][ T5780] usb 4-1: SerialNumber: syz [ 452.471615][ T29] hdpvr 3-1:0.0: Could not setup controls [ 452.493012][ T29] hdpvr 3-1:0.0: registering videodev failed [ 452.526888][ T29] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 452.557982][ T29] usb 3-1: USB disconnect, device number 66 [ 452.642011][T10968] FAULT_INJECTION: forcing a failure. [ 452.642011][T10968] name failslab, interval 1, probability 0, space 0, times 0 [ 452.646653][T10963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.685169][T10963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.703168][T10968] CPU: 1 UID: 0 PID: 10968 Comm: syz.0.1520 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.703204][T10968] Tainted: [L]=SOFTLOCKUP [ 452.703212][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 452.703225][T10968] Call Trace: [ 452.703233][T10968] [ 452.703243][T10968] dump_stack_lvl+0xe8/0x150 [ 452.703272][T10968] should_fail_ex+0x412/0x560 [ 452.703303][T10968] should_failslab+0xa8/0x100 [ 452.703337][T10968] __kmalloc_noprof+0xe8/0x760 [ 452.703366][T10968] ? tomoyo_encode+0x28b/0x550 [ 452.703390][T10968] tomoyo_encode+0x28b/0x550 [ 452.703415][T10968] tomoyo_realpath_from_path+0x58d/0x5d0 [ 452.703439][T10968] ? tomoyo_domain+0xd7/0x130 [ 452.703464][T10968] ? tomoyo_path_number_perm+0x219/0x630 [ 452.703492][T10968] tomoyo_path_number_perm+0x246/0x630 [ 452.703522][T10968] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 452.703551][T10968] ? __lock_acquire+0x6b5/0x2cf0 [ 452.703610][T10968] ? __fget_files+0x2a/0x420 [ 452.703641][T10968] ? __fget_files+0x3a0/0x420 [ 452.703664][T10968] ? __fget_files+0x2a/0x420 [ 452.703695][T10968] security_file_ioctl_compat+0xc3/0x2a0 [ 452.703723][T10968] __ia32_compat_sys_ioctl+0x139/0x950 [ 452.703760][T10968] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 452.703798][T10968] ? __fget_files+0x3a0/0x420 [ 452.703832][T10968] ? fput+0xa0/0xd0 [ 452.703857][T10968] ? ksys_write+0x242/0x270 [ 452.703902][T10968] __do_fast_syscall_32+0x23e/0x6f0 [ 452.703927][T10968] ? do_fast_syscall_32+0x33/0x70 [ 452.703949][T10968] ? lockdep_hardirqs_on+0x7a/0x110 [ 452.703970][T10968] ? asm_int80_emulation+0x1a/0x20 [ 452.703991][T10968] ? do_int80_emulation+0x29f/0x550 [ 452.704014][T10968] ? trace_irq_disable+0x3b/0x140 [ 452.704051][T10968] do_fast_syscall_32+0x33/0x70 [ 452.704075][T10968] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.704102][T10968] RIP: 0023:0xf7fb901c [ 452.704123][T10968] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 452.704141][T10968] RSP: 002b:00000000f545550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 452.704164][T10968] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c048aeca [ 452.704180][T10968] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.704194][T10968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.704207][T10968] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 452.704221][T10968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.704254][T10968] [ 453.105987][T10968] ERROR: Out of memory at tomoyo_realpath_from_path. [ 453.253376][ T9] usb 5-1: USB disconnect, device number 59 [ 453.773772][ T5642] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 453.873832][ T29] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 453.925391][ T5642] usb 3-1: Using ep0 maxpacket: 32 [ 453.938278][ T5642] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 453.947393][ T5642] usb 3-1: config 0 has no interface number 0 [ 453.957742][ T5642] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 453.967777][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.976960][ T5642] usb 3-1: Product: syz [ 453.983246][ T5642] usb 3-1: Manufacturer: syz [ 453.988693][ T5642] usb 3-1: SerialNumber: syz [ 453.996655][ T5642] usb 3-1: config 0 descriptor?? [ 454.009770][ T5642] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 454.067234][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.080560][ T29] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 454.091420][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.110620][ T29] usb 1-1: config 0 descriptor?? [ 454.128125][ T29] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 454.215038][ T5642] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 454.256386][ T5642] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 454.463498][T10995] bridge_slave_0: left allmulticast mode [ 454.469546][T10995] bridge_slave_0: left promiscuous mode [ 454.475690][T10995] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.488494][T10995] bridge_slave_1: left promiscuous mode [ 454.494866][T10995] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.517853][T10995] team0: Port device team_slave_0 removed [ 454.531200][T10995] team0: Port device team_slave_1 removed [ 454.540739][T10995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.550866][T10995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.565185][T10995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.572921][T10995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.584382][T10995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 454.617757][T10982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.643356][T10982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.692520][T10999] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 454.716969][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 454.727063][ T5642] usb 3-1: USB disconnect, device number 67 [ 454.765299][ T5642] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 454.815087][ T5642] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 454.855232][ T5642] quatech2 3-1:0.51: device disconnected [ 454.871421][T11001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1531'. [ 454.924590][ T5780] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.956061][T11001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.959884][ T5780] usb 4-1: MIDIStreaming interface descriptor not found [ 455.097114][T11007] FAULT_INJECTION: forcing a failure. [ 455.097114][T11007] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.141996][T11007] CPU: 0 UID: 0 PID: 11007 Comm: syz.3.1533 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.142033][T11007] Tainted: [L]=SOFTLOCKUP [ 455.142042][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.142056][T11007] Call Trace: [ 455.142064][T11007] [ 455.142073][T11007] dump_stack_lvl+0xe8/0x150 [ 455.142104][T11007] should_fail_ex+0x412/0x560 [ 455.142133][T11007] prepare_alloc_pages+0x22a/0x650 [ 455.142175][T11007] __alloc_frozen_pages_noprof+0x12f/0x380 [ 455.142213][T11007] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 455.142251][T11007] ? __pfx_policy_nodemask+0x10/0x10 [ 455.142270][T11007] ? kasan_save_track+0x4f/0x80 [ 455.142298][T11007] ? kasan_save_track+0x3e/0x80 [ 455.142326][T11007] ? __kasan_kmalloc+0x93/0xb0 [ 455.142354][T11007] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 455.142384][T11007] ? __get_vm_area_node+0x13f/0x300 [ 455.142411][T11007] ? __vmalloc_node_noprof+0xc2/0x100 [ 455.142438][T11007] ? dup_task_struct+0x298/0x840 [ 455.142460][T11007] ? copy_process+0x89b/0x4440 [ 455.142480][T11007] ? create_io_thread+0xfc/0x170 [ 455.142501][T11007] ? create_io_worker+0x181/0x5c0 [ 455.142527][T11007] ? io_wq_enqueue+0x675/0x8a0 [ 455.142555][T11007] alloc_pages_mpol+0x235/0x490 [ 455.142580][T11007] alloc_pages_noprof+0xac/0x2a0 [ 455.142604][T11007] get_free_pages_noprof+0xf/0x80 [ 455.142626][T11007] __kasan_populate_vmalloc+0x38/0x1d0 [ 455.142653][T11007] ? do_raw_spin_unlock+0xf5/0x210 [ 455.142698][T11007] alloc_vmap_area+0xd47/0x1480 [ 455.142740][T11007] ? __pfx_alloc_vmap_area+0x10/0x10 [ 455.142764][T11007] ? __kasan_kmalloc+0x93/0xb0 [ 455.142797][T11007] ? __get_vm_area_node+0x13f/0x300 [ 455.142822][T11007] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 455.142853][T11007] ? copy_process+0x89b/0x4440 [ 455.142875][T11007] __get_vm_area_node+0x1f8/0x300 [ 455.142909][T11007] __vmalloc_node_range_noprof+0x36a/0x1750 [ 455.142939][T11007] ? copy_process+0x89b/0x4440 [ 455.142984][T11007] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 455.143023][T11007] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 455.143054][T11007] ? rcu_is_watching+0x15/0xb0 [ 455.143082][T11007] ? memcpy_and_pad+0x48/0x80 [ 455.143118][T11007] __vmalloc_node_noprof+0xc2/0x100 [ 455.143147][T11007] ? copy_process+0x89b/0x4440 [ 455.143167][T11007] ? copy_process+0x89b/0x4440 [ 455.143191][T11007] dup_task_struct+0x298/0x840 [ 455.143219][T11007] copy_process+0x89b/0x4440 [ 455.143249][T11007] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.143281][T11007] ? kasan_save_track+0x4f/0x80 [ 455.143306][T11007] ? kasan_save_track+0x3e/0x80 [ 455.143334][T11007] ? __kmalloc_cache_noprof+0x31c/0x660 [ 455.143362][T11007] ? create_io_worker+0xab/0x5c0 [ 455.143387][T11007] ? io_wq_enqueue+0x675/0x8a0 [ 455.143411][T11007] ? __se_sys_io_uring_enter+0x341/0x1c40 [ 455.143434][T11007] ? __do_fast_syscall_32+0x23e/0x6f0 [ 455.143457][T11007] ? do_fast_syscall_32+0x33/0x70 [ 455.143478][T11007] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.143513][T11007] ? __pfx_copy_process+0x10/0x10 [ 455.143542][T11007] ? __pfx_io_wq_worker+0x10/0x10 [ 455.143569][T11007] ? __pfx_io_wq_worker+0x10/0x10 [ 455.143598][T11007] create_io_thread+0xfc/0x170 [ 455.143627][T11007] ? __pfx_create_io_thread+0x10/0x10 [ 455.143668][T11007] ? __pfx_io_wq_worker+0x10/0x10 [ 455.143702][T11007] ? __raw_spin_lock_init+0x45/0x100 [ 455.143735][T11007] ? __init_swait_queue_head+0xa9/0x150 [ 455.143764][T11007] ? create_io_worker+0x27/0x5c0 [ 455.143791][T11007] create_io_worker+0x181/0x5c0 [ 455.143823][T11007] io_wq_enqueue+0x675/0x8a0 [ 455.143848][T11007] ? io_wq_enqueue+0x332/0x8a0 [ 455.143871][T11007] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 455.143903][T11007] io_submit_sqes+0x1e66/0x22e0 [ 455.143955][T11007] __se_sys_io_uring_enter+0x341/0x1c40 [ 455.143988][T11007] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 455.144015][T11007] ? __fget_files+0x3a0/0x420 [ 455.144043][T11007] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 455.144072][T11007] ? fput+0xa0/0xd0 [ 455.144097][T11007] ? ksys_write+0x242/0x270 [ 455.144134][T11007] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 455.144161][T11007] __do_fast_syscall_32+0x23e/0x6f0 [ 455.144182][T11007] ? do_fast_syscall_32+0x33/0x70 [ 455.144204][T11007] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.144224][T11007] ? asm_int80_emulation+0x1a/0x20 [ 455.144244][T11007] ? do_int80_emulation+0x29f/0x550 [ 455.144265][T11007] ? trace_irq_disable+0x3b/0x140 [ 455.144300][T11007] do_fast_syscall_32+0x33/0x70 [ 455.144323][T11007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.144349][T11007] RIP: 0023:0xf7f7501c [ 455.144370][T11007] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 455.144388][T11007] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 455.144410][T11007] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000042be [ 455.144425][T11007] RDX: 000000000000afb2 RSI: 0000000000000008 RDI: 0000000000000000 [ 455.144437][T11007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.144449][T11007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 455.144461][T11007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.144493][T11007] [ 455.262894][T11011] program syz.2.1534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.365901][ T5780] usb 4-1: USB disconnect, device number 71 [ 455.736891][T11007] syz.3.1533: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 455.759419][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'. [ 455.785773][T11007] CPU: 1 UID: 0 PID: 11007 Comm: syz.3.1533 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.785809][T11007] Tainted: [L]=SOFTLOCKUP [ 455.785818][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.785831][T11007] Call Trace: [ 455.785840][T11007] [ 455.785849][T11007] dump_stack_lvl+0xe8/0x150 [ 455.785881][T11007] warn_alloc+0x249/0x340 [ 455.785913][T11007] ? kasan_quarantine_put+0xbb/0x1f0 [ 455.785946][T11007] ? __pfx_warn_alloc+0x10/0x10 [ 455.785978][T11007] ? __get_vm_area_node+0x211/0x300 [ 455.786004][T11007] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 455.786035][T11007] ? copy_process+0x89b/0x4440 [ 455.786059][T11007] ? __get_vm_area_node+0x211/0x300 [ 455.786093][T11007] __vmalloc_node_range_noprof+0x38f/0x1750 [ 455.786146][T11007] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 455.786191][T11007] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 455.786224][T11007] ? rcu_is_watching+0x15/0xb0 [ 455.786252][T11007] ? memcpy_and_pad+0x48/0x80 [ 455.786287][T11007] __vmalloc_node_noprof+0xc2/0x100 [ 455.786317][T11007] ? copy_process+0x89b/0x4440 [ 455.786337][T11007] ? copy_process+0x89b/0x4440 [ 455.786362][T11007] dup_task_struct+0x298/0x840 [ 455.786389][T11007] copy_process+0x89b/0x4440 [ 455.786420][T11007] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.786452][T11007] ? kasan_save_track+0x4f/0x80 [ 455.786483][T11007] ? kasan_save_track+0x3e/0x80 [ 455.786511][T11007] ? __kmalloc_cache_noprof+0x31c/0x660 [ 455.786540][T11007] ? create_io_worker+0xab/0x5c0 [ 455.786566][T11007] ? io_wq_enqueue+0x675/0x8a0 [ 455.786591][T11007] ? __se_sys_io_uring_enter+0x341/0x1c40 [ 455.786615][T11007] ? __do_fast_syscall_32+0x23e/0x6f0 [ 455.786639][T11007] ? do_fast_syscall_32+0x33/0x70 [ 455.786660][T11007] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.786695][T11007] ? __pfx_copy_process+0x10/0x10 [ 455.786725][T11007] ? __pfx_io_wq_worker+0x10/0x10 [ 455.786752][T11007] ? __pfx_io_wq_worker+0x10/0x10 [ 455.786782][T11007] create_io_thread+0xfc/0x170 [ 455.786810][T11007] ? __pfx_create_io_thread+0x10/0x10 [ 455.786843][T11007] ? __pfx_io_wq_worker+0x10/0x10 [ 455.786877][T11007] ? __raw_spin_lock_init+0x45/0x100 [ 455.786911][T11007] ? __init_swait_queue_head+0xa9/0x150 [ 455.786941][T11007] ? create_io_worker+0x27/0x5c0 [ 455.786969][T11007] create_io_worker+0x181/0x5c0 [ 455.787002][T11007] io_wq_enqueue+0x675/0x8a0 [ 455.787027][T11007] ? io_wq_enqueue+0x332/0x8a0 [ 455.787052][T11007] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 455.787085][T11007] io_submit_sqes+0x1e66/0x22e0 [ 455.787142][T11007] __se_sys_io_uring_enter+0x341/0x1c40 [ 455.787181][T11007] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 455.787210][T11007] ? __fget_files+0x3a0/0x420 [ 455.787237][T11007] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 455.787266][T11007] ? fput+0xa0/0xd0 [ 455.787292][T11007] ? ksys_write+0x242/0x270 [ 455.787328][T11007] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 455.787358][T11007] __do_fast_syscall_32+0x23e/0x6f0 [ 455.787381][T11007] ? do_fast_syscall_32+0x33/0x70 [ 455.787402][T11007] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.787423][T11007] ? asm_int80_emulation+0x1a/0x20 [ 455.787443][T11007] ? do_int80_emulation+0x29f/0x550 [ 455.787464][T11007] ? trace_irq_disable+0x3b/0x140 [ 455.787499][T11007] do_fast_syscall_32+0x33/0x70 [ 455.787523][T11007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.787549][T11007] RIP: 0023:0xf7f7501c [ 455.787568][T11007] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 455.787586][T11007] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 455.787609][T11007] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000042be [ 455.787623][T11007] RDX: 000000000000afb2 RSI: 0000000000000008 RDI: 0000000000000000 [ 455.787636][T11007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.787649][T11007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 455.787662][T11007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.787694][T11007] [ 455.792236][T11007] Mem-Info: [ 456.214362][T11019] FAULT_INJECTION: forcing a failure. [ 456.214362][T11019] name failslab, interval 1, probability 0, space 0, times 0 [ 456.227522][T11007] active_anon:7142 inactive_anon:0 isolated_anon:0 [ 456.227522][T11007] active_file:4410 inactive_file:40102 isolated_file:0 [ 456.227522][T11007] unevictable:768 dirty:508 writeback:0 [ 456.227522][T11007] slab_reclaimable:10070 slab_unreclaimable:100121 [ 456.227522][T11007] mapped:31019 shmem:2287 pagetables:1289 [ 456.227522][T11007] sec_pagetables:0 bounce:0 [ 456.227522][T11007] kernel_misc_reclaimable:0 [ 456.227522][T11007] free:1321456 free_pcp:9426 free_cma:0 [ 456.285562][T11019] CPU: 1 UID: 0 PID: 11019 Comm: syz.4.1538 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.285598][T11019] Tainted: [L]=SOFTLOCKUP [ 456.285607][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 456.285622][T11019] Call Trace: [ 456.285631][T11019] [ 456.285640][T11019] dump_stack_lvl+0xe8/0x150 [ 456.285671][T11019] should_fail_ex+0x412/0x560 [ 456.285700][T11019] should_failslab+0xa8/0x100 [ 456.285724][T11019] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 456.285754][T11019] ? __alloc_skb+0x186/0x7d0 [ 456.285783][T11019] ? __alloc_skb+0x1d0/0x7d0 [ 456.285810][T11019] ? __local_bh_enable_ip+0xd0/0x130 [ 456.285837][T11019] __alloc_skb+0x1d0/0x7d0 [ 456.285872][T11019] netlink_sendmsg+0x5d4/0xb40 [ 456.285914][T11019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.285949][T11019] ? aa_sock_msg_perm+0xf1/0x1b0 [ 456.285983][T11019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.286023][T11019] ____sys_sendmsg+0x972/0x9f0 [ 456.286054][T11019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.286081][T11019] ? kstrtoull+0x12f/0x1d0 [ 456.286121][T11019] ___sys_sendmsg+0x2a5/0x360 [ 456.286141][T11019] ? __lock_acquire+0x6b5/0x2cf0 [ 456.286169][T11019] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.286192][T11019] ? get_pid_task+0x20/0x1f0 [ 456.286218][T11019] ? get_pid_task+0x20/0x1f0 [ 456.286242][T11019] ? get_pid_task+0x20/0x1f0 [ 456.286296][T11019] ? __fget_files+0x2a/0x420 [ 456.286322][T11019] ? __fget_files+0x3a0/0x420 [ 456.286358][T11019] __sys_sendmsg+0x183/0x260 [ 456.286381][T11019] ? __pfx___sys_sendmsg+0x10/0x10 [ 456.286425][T11019] __do_fast_syscall_32+0x23e/0x6f0 [ 456.286449][T11019] ? do_fast_syscall_32+0x33/0x70 [ 456.286470][T11019] ? lockdep_hardirqs_on+0x7a/0x110 [ 456.286490][T11019] ? asm_int80_emulation+0x1a/0x20 [ 456.286510][T11019] ? do_int80_emulation+0x29f/0x550 [ 456.286536][T11019] do_fast_syscall_32+0x33/0x70 [ 456.286564][T11019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.286589][T11019] RIP: 0023:0xf7fe401c [ 456.286609][T11019] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 456.286627][T11019] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 456.286650][T11019] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 456.286665][T11019] RDX: 0000000004000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 456.286678][T11019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.286690][T11019] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 456.286703][T11019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.286734][T11019] [ 456.653788][T11007] Node 0 active_anon:28568kB inactive_anon:0kB active_file:17580kB inactive_file:160208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124016kB dirty:2032kB writeback:0kB shmem:7612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12716kB pagetables:5024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 456.737274][ T29] usb 1-1: USB disconnect, device number 83 [ 456.743707][T11007] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 456.776583][T11007] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.808021][T11007] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 456.817220][T11007] Node 0 DMA32 free:1316528kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28468kB inactive_anon:0kB active_file:17580kB inactive_file:160208kB unevictable:1536kB writepending:2032kB zspages:0kB present:3129332kB managed:2552800kB mlocked:0kB bounce:0kB free_pcp:38000kB local_pcp:21360kB free_cma:0kB [ 456.854092][T11007] lowmem_reserve[]: 0 0 0 0 0 [ 456.860748][T11007] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 456.935615][T11007] lowmem_reserve[]: 0 0 0 0 0 [ 456.956644][T11007] Node 1 Normal free:3954576kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 457.008271][T11022] FAULT_INJECTION: forcing a failure. [ 457.008271][T11022] name failslab, interval 1, probability 0, space 0, times 0 [ 457.079523][T11007] lowmem_reserve[]: 0 0 0 0 0 [ 457.082182][T11022] CPU: 0 UID: 0 PID: 11022 Comm: syz.4.1539 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.082262][T11022] Tainted: [L]=SOFTLOCKUP [ 457.082284][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.082325][T11022] Call Trace: [ 457.082348][T11022] [ 457.082371][T11022] dump_stack_lvl+0xe8/0x150 [ 457.082457][T11022] should_fail_ex+0x412/0x560 [ 457.082546][T11022] should_failslab+0xa8/0x100 [ 457.082630][T11022] __kmalloc_noprof+0xe8/0x760 [ 457.082707][T11022] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 457.082791][T11022] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 457.082883][T11022] genl_family_rcv_msg_doit+0xd9/0x330 [ 457.082961][T11022] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 457.083044][T11022] ? apparmor_capable+0x126/0x170 [ 457.083109][T11022] ? bpf_lsm_capable+0x9/0x20 [ 457.083167][T11022] ? security_capable+0x7e/0x2c0 [ 457.083263][T11022] genl_rcv_msg+0x61c/0x7a0 [ 457.083339][T11022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.083402][T11022] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 457.083485][T11022] ? __pfx_nl80211_set_station+0x10/0x10 [ 457.083553][T11022] ? __pfx_nl80211_post_doit+0x10/0x10 [ 457.083616][T11022] ? __pfx_ref_tracker_free+0x10/0x10 [ 457.083678][T11022] ? __asan_memcpy+0x40/0x70 [ 457.083744][T11022] ? __skb_clone+0x63/0x7a0 [ 457.083820][T11022] netlink_rcv_skb+0x232/0x4b0 [ 457.083906][T11022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.083983][T11022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.084103][T11022] ? down_read+0x270/0x2e0 [ 457.084166][T11022] ? genl_rcv+0xd/0x40 [ 457.084230][T11022] genl_rcv+0x28/0x40 [ 457.084291][T11022] netlink_unicast+0x75c/0x8e0 [ 457.084395][T11022] netlink_sendmsg+0x813/0xb40 [ 457.084499][T11022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.084594][T11022] ? aa_sock_msg_perm+0xf1/0x1b0 [ 457.084679][T11022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.084765][T11022] ____sys_sendmsg+0x972/0x9f0 [ 457.084852][T11022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.084876][T11022] ? kstrtoull+0x12f/0x1d0 [ 457.084914][T11022] ___sys_sendmsg+0x2a5/0x360 [ 457.084933][T11022] ? __lock_acquire+0x6b5/0x2cf0 [ 457.084960][T11022] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.084982][T11022] ? get_pid_task+0x20/0x1f0 [ 457.085007][T11022] ? get_pid_task+0x20/0x1f0 [ 457.085030][T11022] ? get_pid_task+0x20/0x1f0 [ 457.085085][T11022] ? __fget_files+0x2a/0x420 [ 457.085110][T11022] ? __fget_files+0x3a0/0x420 [ 457.085147][T11022] __sys_sendmsg+0x183/0x260 [ 457.085171][T11022] ? __pfx___sys_sendmsg+0x10/0x10 [ 457.085215][T11022] __do_fast_syscall_32+0x23e/0x6f0 [ 457.085239][T11022] ? do_fast_syscall_32+0x33/0x70 [ 457.085261][T11022] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.085282][T11022] ? asm_int80_emulation+0x1a/0x20 [ 457.085302][T11022] ? do_int80_emulation+0x29f/0x550 [ 457.085323][T11022] ? trace_irq_disable+0x3b/0x140 [ 457.085448][T11022] do_fast_syscall_32+0x33/0x70 [ 457.085531][T11022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.085598][T11022] RIP: 0023:0xf7fe401c [ 457.085650][T11022] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 457.085696][T11022] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 457.085761][T11022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 457.085801][T11022] RDX: 0000000000008038 RSI: 0000000000000000 RDI: 0000000000000000 [ 457.085835][T11022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.085866][T11022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 457.085899][T11022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.085969][T11022] [ 457.477963][T11007] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 457.490985][T11007] Node 0 DMA32: 4081*4kB (UME) 2487*8kB (UME) 1539*16kB (UME) 485*32kB (UME) 336*64kB (UM) 187*128kB (UME) 136*256kB (UME) 64*512kB (UME) 37*1024kB (UME) 4*2048kB (UME) 264*4096kB (UM) = 1316812kB [ 457.510957][T11007] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 457.522729][T11007] Node 1 Normal: 2*4kB (UM) 9*8kB (UM) 10*16kB (U) 1*32kB (M) 8*64kB (UM) 7*128kB (UM) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 962*4096kB (M) = 3954576kB [ 457.613762][T11007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.653810][T11007] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 457.698538][T11007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.749462][T11007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 457.773764][T11007] 46847 total pagecache pages [ 457.778530][T11007] 0 pages in swap cache [ 457.785609][T11007] Free swap = 124996kB [ 457.797446][T11007] Total swap = 124996kB [ 457.804963][T11042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1546'. [ 457.815400][T11007] 2097051 pages RAM [ 457.823735][T11007] 0 pages HighMem/MovableOnly [ 457.836831][T11007] 427066 pages reserved [ 457.845703][T11007] 0 pages cma reserved [ 457.865393][T11042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.941046][T11044] netlink: 'syz.2.1545': attribute type 2 has an invalid length. [ 458.172536][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 458.583981][ T809] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 458.759573][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.793261][ T809] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 458.823662][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.852031][ T809] usb 4-1: config 0 descriptor?? [ 458.887156][ T809] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 459.180698][T11059] program syz.0.1552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.451615][T11064] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 459.752073][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 459.752088][ T30] audit: type=1326 audit(1780033347.588:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.1.1555" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f2401c code=0x0 [ 459.855185][T11072] syzkaller0: entered promiscuous mode [ 459.860910][T11072] syzkaller0: entered allmulticast mode [ 460.103712][T10132] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 460.275446][T10132] usb 2-1: Using ep0 maxpacket: 32 [ 460.302286][T10132] usb 2-1: config 91 has an invalid interface number: 231 but max is 0 [ 460.336311][T10132] usb 2-1: config 91 has no interface number 0 [ 460.354759][T10132] usb 2-1: config 91 interface 231 has no altsetting 0 [ 460.378775][T10132] usb 2-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c [ 460.396123][T10132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.419244][T10132] usb 2-1: Product: syz [ 460.441501][T10132] usb 2-1: Manufacturer: syz [ 460.455395][T10132] usb 2-1: SerialNumber: syz [ 460.908037][ T809] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 461.079804][ T809] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 461.107076][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.126158][ T809] usb 1-1: Product: syz [ 461.140798][ T809] usb 1-1: Manufacturer: syz [ 461.151610][ T809] usb 1-1: SerialNumber: syz [ 461.174597][ T809] usb 1-1: config 0 descriptor?? [ 461.411833][ T809] usb 4-1: USB disconnect, device number 72 [ 461.467313][ T5642] usb 1-1: USB disconnect, device number 84 [ 461.966927][T11085] syzkaller0: entered promiscuous mode [ 461.993807][T11085] syzkaller0: entered allmulticast mode [ 462.207289][T11096] program syz.3.1564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.385894][T11103] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1565'. [ 462.410001][T11097] bond2: option min_links: invalid value (18446744073709551612) [ 462.425018][T11105] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 462.433148][T11097] bond2: option min_links: allowed values 0 - 2147483647 [ 462.450995][T11097] bond2 (unregistering): Released all slaves [ 462.637347][T11105] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.670751][T11113] sctp: [Deprecated]: syz.3.1568 (pid 11113) Use of int in max_burst socket option deprecated. [ 462.670751][T11113] Use struct sctp_assoc_value instead [ 462.713722][ T5642] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 462.765221][T11111] bond3: (slave ip6gretap1): making interface the new active one [ 462.787210][T11111] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 462.803202][T10132] ums-cypress 2-1:91.231: USB Mass Storage device detected [ 462.915300][T10132] usb 2-1: USB disconnect, device number 73 [ 462.926060][ T5642] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 462.941729][T10205] udevd[10205]: setting owner of /dev/bus/usb/002/073 to uid=0, gid=0 failed: No such file or directory [ 462.953186][ T5642] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 462.997161][ T5642] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 463.074601][ T5642] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 463.115307][T11124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1569'. [ 463.130280][ T5642] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 463.189000][ T5642] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 463.238063][ T5642] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 463.258935][ T5642] usb 5-1: Product: syz [ 463.275228][ T5642] usb 5-1: Manufacturer: syz [ 463.327121][ T5642] cdc_wdm 5-1:1.0: skipping garbage [ 463.343192][ T5642] cdc_wdm 5-1:1.0: skipping garbage [ 463.373835][ T5642] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 463.394970][ T5642] cdc_wdm 5-1:1.0: Unknown control protocol [ 463.453837][ T809] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 463.623756][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 463.634841][ T809] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 463.650899][ T809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 463.688585][ T809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.721155][ T809] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.762034][ T809] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 463.792877][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.049754][ T809] usb 2-1: GET_CAPABILITIES returned 0 [ 464.072070][ T809] usbtmc 2-1:16.0: can't read capabilities [ 464.448555][ C1] wdm_int_callback: 2 callbacks suppressed [ 464.448576][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 464.461095][ C1] wdm_int_callback: 2 callbacks suppressed [ 464.461113][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 464.473467][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 464.480102][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 464.486775][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 464.493437][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 464.500008][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 464.506636][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 464.513005][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 464.519619][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 464.525930][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 464.532543][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 464.538966][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 464.545580][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 464.551858][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 464.558471][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 464.564777][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 464.571387][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 464.577469][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 464.610230][ T5703] usb 5-1: USB disconnect, device number 60 [ 464.733716][ T5642] usb 2-1: USB disconnect, device number 74 [ 465.347785][T11143] bond2: option min_links: invalid value (18446744073709551612) [ 465.373755][T11143] bond2: option min_links: allowed values 0 - 2147483647 [ 465.417051][T11143] bond2 (unregistering): Released all slaves [ 465.424630][T11147] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1576'. [ 465.486935][T11151] netlink: 392 bytes leftover after parsing attributes in process `syz.4.1578'. [ 465.553933][T11154] syz_tun: entered allmulticast mode [ 465.570130][T11149] syz_tun: left allmulticast mode [ 466.153869][T10132] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 466.181447][T11175] sctp: [Deprecated]: syz.0.1581 (pid 11175) Use of int in max_burst socket option deprecated. [ 466.181447][T11175] Use struct sctp_assoc_value instead [ 466.324047][T10132] usb 4-1: Using ep0 maxpacket: 32 [ 466.330413][T10132] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.330455][T10132] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.332129][T10132] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 466.332173][T10132] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 466.332190][T10132] usb 4-1: Product: syz [ 466.332202][T10132] usb 4-1: Manufacturer: syz [ 466.351388][T10132] hub 4-1:4.0: USB hub found [ 466.571250][T10132] hub 4-1:4.0: 9 ports detected [ 466.572808][T10132] hub 4-1:4.0: insufficient power available to use all downstream ports [ 467.190361][T10132] usb 4-1: USB disconnect, device number 73 [ 468.105928][T10132] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 468.294623][T10132] usb 4-1: Using ep0 maxpacket: 8 [ 468.313997][T10132] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 468.350804][T10132] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 468.381527][T10132] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.422306][T10132] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.453685][T10132] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 468.493689][T10132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.614740][T11187] FAULT_INJECTION: forcing a failure. [ 468.614740][T11187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.734077][T11187] CPU: 1 UID: 0 PID: 11187 Comm: syz.0.1587 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.734113][T11187] Tainted: [L]=SOFTLOCKUP [ 468.734122][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.734140][T11187] Call Trace: [ 468.734149][T11187] [ 468.734160][T11187] dump_stack_lvl+0xe8/0x150 [ 468.734192][T11187] should_fail_ex+0x412/0x560 [ 468.734222][T11187] _copy_from_user+0x2d/0xb0 [ 468.734250][T11187] get_compat_msghdr+0xb3/0x4c0 [ 468.734285][T11187] ? _parse_integer_limit+0x1ae/0x1f0 [ 468.734320][T11187] ? __pfx_get_compat_msghdr+0x10/0x10 [ 468.734344][T11187] ? kstrtoull+0x12f/0x1d0 [ 468.734390][T11187] ___sys_sendmsg+0x201/0x360 [ 468.734411][T11187] ? __lock_acquire+0x6b5/0x2cf0 [ 468.734439][T11187] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.734464][T11187] ? get_pid_task+0x20/0x1f0 [ 468.734491][T11187] ? get_pid_task+0x20/0x1f0 [ 468.734515][T11187] ? get_pid_task+0x20/0x1f0 [ 468.734570][T11187] ? __fget_files+0x2a/0x420 [ 468.734595][T11187] ? __fget_files+0x3a0/0x420 [ 468.734633][T11187] __sys_sendmsg+0x183/0x260 [ 468.734657][T11187] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.734701][T11187] __do_fast_syscall_32+0x23e/0x6f0 [ 468.734726][T11187] ? do_fast_syscall_32+0x33/0x70 [ 468.734748][T11187] ? lockdep_hardirqs_on+0x7a/0x110 [ 468.734769][T11187] ? asm_int80_emulation+0x1a/0x20 [ 468.734789][T11187] ? do_int80_emulation+0x29f/0x550 [ 468.734812][T11187] ? trace_irq_disable+0x3b/0x140 [ 468.734846][T11187] do_fast_syscall_32+0x33/0x70 [ 468.734870][T11187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 468.734897][T11187] RIP: 0023:0xf7fb901c [ 468.734916][T11187] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 468.734935][T11187] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 468.734957][T11187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 468.734972][T11187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.734985][T11187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.734998][T11187] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 468.735011][T11187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.735042][T11187] [ 469.074643][T10132] usb 4-1: GET_CAPABILITIES returned 0 [ 469.083060][T10132] usbtmc 4-1:16.0: can't read capabilities [ 469.201899][T11192] netlink: 392 bytes leftover after parsing attributes in process `syz.2.1589'. [ 469.580258][T11203] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 2, id = 0 [ 469.731358][T10132] usb 4-1: USB disconnect, device number 74 [ 470.011437][T11211] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 470.180516][T11214] FAULT_INJECTION: forcing a failure. [ 470.180516][T11214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.203797][T10132] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 470.238898][T11214] CPU: 0 UID: 0 PID: 11214 Comm: syz.0.1595 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.238933][T11214] Tainted: [L]=SOFTLOCKUP [ 470.238941][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.238955][T11214] Call Trace: [ 470.238963][T11214] [ 470.238972][T11214] dump_stack_lvl+0xe8/0x150 [ 470.239001][T11214] should_fail_ex+0x412/0x560 [ 470.239028][T11214] _copy_from_user+0x2d/0xb0 [ 470.239054][T11214] get_compat_msghdr+0xb3/0x4c0 [ 470.239089][T11214] ? __pfx_get_compat_msghdr+0x10/0x10 [ 470.239114][T11214] ? __lock_acquire+0x6b5/0x2cf0 [ 470.239147][T11214] ___sys_recvmsg+0x1dd/0x590 [ 470.239168][T11214] ? __lock_acquire+0x6b5/0x2cf0 [ 470.239210][T11214] ? __pfx____sys_recvmsg+0x10/0x10 [ 470.239237][T11214] ? __fget_files+0x2a/0x420 [ 470.239278][T11214] ? __fget_files+0x3a0/0x420 [ 470.239313][T11214] do_recvmmsg+0x3a5/0x800 [ 470.239342][T11214] ? __pfx_do_recvmmsg+0x10/0x10 [ 470.239388][T11214] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 470.239416][T11214] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 470.239464][T11214] __sys_recvmmsg+0x1a5/0x290 [ 470.239488][T11214] ? __pfx___sys_recvmmsg+0x10/0x10 [ 470.239510][T11214] ? ksys_write+0x242/0x270 [ 470.239546][T11214] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 470.239572][T11214] __do_fast_syscall_32+0x23e/0x6f0 [ 470.239597][T11214] ? do_fast_syscall_32+0x33/0x70 [ 470.239617][T11214] ? lockdep_hardirqs_on+0x7a/0x110 [ 470.239639][T11214] ? asm_int80_emulation+0x1a/0x20 [ 470.239658][T11214] ? do_int80_emulation+0x29f/0x550 [ 470.239680][T11214] ? trace_irq_disable+0x3b/0x140 [ 470.239714][T11214] do_fast_syscall_32+0x33/0x70 [ 470.239737][T11214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 470.239760][T11214] RIP: 0023:0xf7fb901c [ 470.239780][T11214] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 470.239797][T11214] RSP: 002b:00000000f545550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 470.239817][T11214] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 470.239831][T11214] RDX: 0000000000000001 RSI: 0000000040000023 RDI: 0000000000000000 [ 470.239843][T11214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.239854][T11214] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 470.239865][T11214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.239892][T11214] [ 470.690603][T10132] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 470.702013][T10132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.765325][T10132] usb 4-1: Product: syz [ 470.788465][T10132] usb 4-1: Manufacturer: syz [ 470.802234][T10132] usb 4-1: SerialNumber: syz [ 470.825702][T11218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.838422][T10132] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 470.864329][ T5703] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 471.002089][T11224] FAULT_INJECTION: forcing a failure. [ 471.002089][T11224] name failslab, interval 1, probability 0, space 0, times 0 [ 471.019292][T11224] CPU: 1 UID: 0 PID: 11224 Comm: syz.4.1599 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.019328][T11224] Tainted: [L]=SOFTLOCKUP [ 471.019337][T11224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.019351][T11224] Call Trace: [ 471.019359][T11224] [ 471.019373][T11224] dump_stack_lvl+0xe8/0x150 [ 471.019404][T11224] should_fail_ex+0x412/0x560 [ 471.019434][T11224] should_failslab+0xa8/0x100 [ 471.019458][T11224] __kvmalloc_node_noprof+0x178/0x8a0 [ 471.019498][T11224] ? seq_read_iter+0xb7/0xe10 [ 471.019518][T11224] ? traverse+0xde/0x580 [ 471.019547][T11224] traverse+0xde/0x580 [ 471.019569][T11224] ? aa_file_perm+0x192/0x15e0 [ 471.019612][T11224] seq_read_iter+0xd08/0xe10 [ 471.019643][T11224] ? __asan_memset+0x22/0x50 [ 471.019676][T11224] seq_read+0x367/0x480 [ 471.019706][T11224] ? __pfx_seq_read+0x10/0x10 [ 471.019735][T11224] ? apparmor_file_permission+0x1f4/0x300 [ 471.019769][T11224] ? __pfx_seq_read+0x10/0x10 [ 471.019786][T11224] proc_reg_read+0x1e9/0x2e0 [ 471.019816][T11224] ? __pfx_proc_reg_read+0x10/0x10 [ 471.019849][T11224] vfs_read+0x20c/0xa70 [ 471.019890][T11224] ? __pfx_vfs_read+0x10/0x10 [ 471.019922][T11224] ? __fget_files+0x2a/0x420 [ 471.019951][T11224] ? __fget_files+0x2a/0x420 [ 471.019976][T11224] ? __fget_files+0x3a0/0x420 [ 471.020001][T11224] ? __fget_files+0x2a/0x420 [ 471.020036][T11224] ksys_pread64+0x126/0x1c0 [ 471.020071][T11224] ? __pfx_ksys_pread64+0x10/0x10 [ 471.020107][T11224] ? __ia32_sys_ia32_pread64+0x20/0xd0 [ 471.020133][T11224] __do_fast_syscall_32+0x23e/0x6f0 [ 471.020157][T11224] ? do_fast_syscall_32+0x33/0x70 [ 471.020177][T11224] ? lockdep_hardirqs_on+0x7a/0x110 [ 471.020198][T11224] ? asm_int80_emulation+0x1a/0x20 [ 471.020217][T11224] ? do_int80_emulation+0x29f/0x550 [ 471.020239][T11224] ? trace_irq_disable+0x3b/0x140 [ 471.020274][T11224] do_fast_syscall_32+0x33/0x70 [ 471.020298][T11224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 471.020324][T11224] RIP: 0023:0xf7fe401c [ 471.020343][T11224] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 471.020362][T11224] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 00000000000000b4 [ 471.020384][T11224] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 471.020400][T11224] RDX: 0000000000018fd4 RSI: 0000000000000079 RDI: 0000000000000000 [ 471.020413][T11224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.020426][T11224] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 471.020439][T11224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.020471][T11224] [ 471.364567][T11228] netlink: 392 bytes leftover after parsing attributes in process `syz.2.1600'. [ 471.647695][ T809] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 471.835179][ T809] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 471.862996][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.890619][ T809] usb 1-1: Product: syz [ 471.899580][ T809] usb 1-1: Manufacturer: syz [ 471.910756][ T809] usb 1-1: SerialNumber: syz [ 471.935898][ T809] usb 1-1: config 0 descriptor?? [ 472.330800][T11253] usb 1-1: USB disconnect, device number 85 [ 472.446630][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.455514][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.670290][T11240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.690681][T11240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.725762][ T5703] usb 4-1: Service connection timeout for: 257 [ 472.740289][ T5703] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 472.784414][ T5703] ath9k_htc: Failed to initialize the device [ 472.827200][ T5703] usb 4-1: ath9k_htc: USB layer deinitialized [ 472.947289][ T57] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.968067][ T57] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.981468][ T57] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.005765][ T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.017965][ T57] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.027504][T11250] usb 4-1: USB disconnect, device number 75 [ 473.037783][ T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.051428][ T57] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.062299][ T5726] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 473.072247][ T57] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.235106][ T5726] usb 5-1: Using ep0 maxpacket: 32 [ 473.246750][ T5726] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 473.265208][ T5726] usb 5-1: config 0 has no interface number 0 [ 473.276645][ T5726] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 473.289712][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.311173][ T5726] usb 5-1: Product: syz [ 473.319792][ T5726] usb 5-1: Manufacturer: syz [ 473.332982][ T5726] usb 5-1: SerialNumber: syz [ 473.350394][ T5726] usb 5-1: config 0 descriptor?? [ 473.367318][ T5726] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 473.599803][ T5726] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 473.629641][ T5726] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 473.776454][T11275] tipc: Enabling of bearer rejected, already enabled [ 473.819607][T11275] program syz.0.1612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.207409][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1607'. [ 474.547329][T11291] FAULT_INJECTION: forcing a failure. [ 474.547329][T11291] name failslab, interval 1, probability 0, space 0, times 0 [ 474.564840][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 474.582276][ T5694] usb 5-1: USB disconnect, device number 61 [ 474.630602][ T5694] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 474.650106][T11291] CPU: 1 UID: 0 PID: 11291 Comm: syz.2.1616 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.650132][T11291] Tainted: [L]=SOFTLOCKUP [ 474.650138][T11291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 474.650148][T11291] Call Trace: [ 474.650154][T11291] [ 474.650161][T11291] dump_stack_lvl+0xe8/0x150 [ 474.650184][T11291] should_fail_ex+0x412/0x560 [ 474.650204][T11291] should_failslab+0xa8/0x100 [ 474.650221][T11291] __kmalloc_noprof+0xe8/0x760 [ 474.650243][T11291] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 474.650273][T11291] tomoyo_realpath_from_path+0xe3/0x5d0 [ 474.650290][T11291] ? tomoyo_domain+0xd7/0x130 [ 474.650308][T11291] ? tomoyo_path_number_perm+0x219/0x630 [ 474.650332][T11291] tomoyo_path_number_perm+0x246/0x630 [ 474.650355][T11291] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 474.650376][T11291] ? __lock_acquire+0x6b5/0x2cf0 [ 474.650420][T11291] ? __fget_files+0x2a/0x420 [ 474.650442][T11291] ? __fget_files+0x3a0/0x420 [ 474.650460][T11291] ? __fget_files+0x2a/0x420 [ 474.650481][T11291] security_file_ioctl_compat+0xc3/0x2a0 [ 474.650503][T11291] __ia32_compat_sys_ioctl+0x139/0x950 [ 474.650531][T11291] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 474.650558][T11291] ? __fget_files+0x3a0/0x420 [ 474.650581][T11291] ? fput+0xa0/0xd0 [ 474.650599][T11291] ? ksys_write+0x242/0x270 [ 474.650638][T11291] __do_fast_syscall_32+0x23e/0x6f0 [ 474.650656][T11291] ? do_fast_syscall_32+0x33/0x70 [ 474.650671][T11291] ? lockdep_hardirqs_on+0x7a/0x110 [ 474.650686][T11291] ? asm_int80_emulation+0x1a/0x20 [ 474.650701][T11291] ? do_int80_emulation+0x29f/0x550 [ 474.650716][T11291] ? trace_irq_disable+0x3b/0x140 [ 474.650741][T11291] do_fast_syscall_32+0x33/0x70 [ 474.650758][T11291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.650777][T11291] RIP: 0023:0xf70af01c [ 474.650790][T11291] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 474.650804][T11291] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 474.650820][T11291] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008955 [ 474.650831][T11291] RDX: 0000000080001980 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.650840][T11291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.650849][T11291] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 474.650858][T11291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.650880][T11291] [ 474.650897][T11291] ERROR: Out of memory at tomoyo_realpath_from_path. [ 474.968101][ T5694] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 475.007674][ T5694] quatech2 5-1:0.51: device disconnected [ 475.186409][T11294] netlink: 'syz.2.1617': attribute type 1 has an invalid length. [ 475.288861][T11294] bond2: entered promiscuous mode [ 475.295694][T11294] bond2: entered allmulticast mode [ 475.308351][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 475.327585][T11294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.344536][T11298] netlink: 'syz.2.1617': attribute type 30 has an invalid length. [ 475.352720][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'. [ 475.437082][T11297] erspan1: entered allmulticast mode [ 475.463684][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'. [ 475.516250][T11297] bond2: (slave erspan1): making interface the new active one [ 475.593960][T11297] erspan1: entered promiscuous mode [ 475.626521][T11297] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 475.786554][T11301] syz_tun: entered allmulticast mode [ 475.840524][T11301] FAULT_INJECTION: forcing a failure. [ 475.840524][T11301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.876143][T11301] CPU: 1 UID: 0 PID: 11301 Comm: syz.4.1618 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.876169][T11301] Tainted: [L]=SOFTLOCKUP [ 475.876175][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.876220][T11301] Call Trace: [ 475.876229][T11301] [ 475.876238][T11301] dump_stack_lvl+0xe8/0x150 [ 475.876267][T11301] should_fail_ex+0x412/0x560 [ 475.876294][T11301] _copy_from_user+0x2d/0xb0 [ 475.876321][T11301] copy_from_sockptr+0x48/0x70 [ 475.876351][T11301] ip_mroute_setsockopt+0x839/0x10d0 [ 475.876391][T11301] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 475.876420][T11301] ? get_pid_task+0x20/0x1f0 [ 475.876455][T11301] ? get_pid_task+0x20/0x1f0 [ 475.876478][T11301] ? get_pid_task+0x20/0x1f0 [ 475.876510][T11301] ? __lock_acquire+0x6b5/0x2cf0 [ 475.876539][T11301] do_ip_setsockopt+0xf1e/0x2ea0 [ 475.876576][T11301] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 475.876607][T11301] ? aa_sk_perm+0x6d5/0x900 [ 475.876646][T11301] ? __pfx_aa_sk_perm+0x10/0x10 [ 475.876678][T11301] ? aa_sock_opt_perm+0xff/0x1a0 [ 475.876712][T11301] ip_setsockopt+0x66/0x110 [ 475.876741][T11301] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 475.876764][T11301] do_sock_setsockopt+0x17c/0x1b0 [ 475.876791][T11301] __ia32_sys_setsockopt+0x13d/0x1b0 [ 475.876819][T11301] __do_fast_syscall_32+0x23e/0x6f0 [ 475.876837][T11301] ? do_fast_syscall_32+0x33/0x70 [ 475.876853][T11301] ? lockdep_hardirqs_on+0x7a/0x110 [ 475.876875][T11301] ? asm_int80_emulation+0x1a/0x20 [ 475.876889][T11301] ? do_int80_emulation+0x29f/0x550 [ 475.876904][T11301] ? trace_irq_disable+0x3b/0x140 [ 475.876928][T11301] do_fast_syscall_32+0x33/0x70 [ 475.876945][T11301] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.876963][T11301] RIP: 0023:0xf7fe401c [ 475.876978][T11301] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 475.876990][T11301] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 475.877006][T11301] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 475.877017][T11301] RDX: 00000000000000d2 RSI: 0000000080000200 RDI: 000000000000003c [ 475.877026][T11301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.877035][T11301] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.877044][T11301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.877065][T11301] [ 476.171761][T11303] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 476.574555][ T5694] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 476.645337][ T5633] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 476.729342][ T5694] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 476.738585][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.746698][ T5694] usb 1-1: Product: syz [ 476.754722][ T5694] usb 1-1: Manufacturer: syz [ 476.766307][ T5694] usb 1-1: SerialNumber: syz [ 476.788825][ T5694] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 476.805880][T11245] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 476.816070][ T5633] usb 5-1: Using ep0 maxpacket: 16 [ 476.841223][ T5633] usb 5-1: config 0 has no interfaces? [ 476.860331][ T5633] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 476.884142][ T5633] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 476.904784][ T5633] usb 5-1: Manufacturer: syz [ 476.936880][ T5633] usb 5-1: config 0 descriptor?? [ 477.292227][T11322] tipc: Enabled bearer , priority 10 [ 477.305309][T11322] program syz.3.1625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.331662][T11311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.360438][T11311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.375217][T11325] sctp: [Deprecated]: syz.2.1626 (pid 11325) Use of int in max_burst socket option deprecated. [ 477.375217][T11325] Use struct sctp_assoc_value instead [ 477.406842][T11311] misc userio: Can't change port type on an already running userio instance [ 477.474357][ T5694] usb 1-1: USB disconnect, device number 86 [ 477.545792][ T5633] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 477.596597][T11330] tipc: Enabling of bearer rejected, already enabled [ 477.627540][T11330] program syz.3.1628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.728610][ T5633] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 477.748777][ T5633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.764771][ T5633] usb 2-1: Product: syz [ 477.773710][ T5633] usb 2-1: Manufacturer: syz [ 477.783629][ T5633] usb 2-1: SerialNumber: syz [ 477.799948][ T5633] usb 2-1: config 0 descriptor?? [ 478.030621][T11328] syzkaller0: entered promiscuous mode [ 478.037972][T11328] syzkaller0: entered allmulticast mode [ 478.047124][ T5633] usb 2-1: USB disconnect, device number 75 [ 478.333704][T11245] usb 1-1: Service connection timeout for: 257 [ 478.353655][T11245] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 478.366134][T11245] ath9k_htc: Failed to initialize the device [ 478.381495][ T5694] usb 1-1: ath9k_htc: USB layer deinitialized [ 479.355045][T11253] usb 5-1: USB disconnect, device number 62 [ 479.582639][T11245] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 479.642559][T11370] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1641'. [ 479.783845][T11245] usb 1-1: Using ep0 maxpacket: 16 [ 479.796984][T11245] usb 1-1: config 0 has no interfaces? [ 479.811694][T11245] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 479.834397][T11245] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 479.852692][T11245] usb 1-1: Manufacturer: syz [ 479.871049][T11245] usb 1-1: config 0 descriptor?? [ 480.291950][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.320484][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.359655][T11366] misc userio: Can't change port type on an already running userio instance [ 481.245950][T11393] bridge1: entered promiscuous mode [ 481.259405][T11393] bridge1: entered allmulticast mode [ 481.444429][T11250] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 481.618293][T11250] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 481.631296][T11250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.640882][T11250] usb 2-1: Product: syz [ 481.646111][T11250] usb 2-1: Manufacturer: syz [ 481.650806][T11250] usb 2-1: SerialNumber: syz [ 481.660737][T11250] usb 2-1: config 0 descriptor?? [ 481.696655][T11406] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1652'. [ 481.715276][T11253] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 481.877891][T11253] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 481.888006][ T5694] usb 2-1: USB disconnect, device number 76 [ 481.894068][T11253] usb 3-1: config 1 has no interface number 0 [ 481.894124][T11253] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.894155][T11253] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 481.894182][T11253] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 481.894242][T11253] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 481.947258][T11253] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 481.963375][T11253] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.975748][T11253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.985059][T11253] usb 3-1: Product: syz [ 481.989446][T11253] usb 3-1: Manufacturer: syz [ 481.994548][T11253] usb 3-1: SerialNumber: syz [ 482.006531][T11398] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 482.235000][T11398] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 482.297684][ T5726] usb 1-1: USB disconnect, device number 87 [ 482.490964][T11413] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1654'. [ 482.521235][T11410] bond4: option min_links: invalid value (18446744073709551612) [ 482.529688][T11410] bond4: option min_links: allowed values 0 - 2147483647 [ 482.552815][T11410] bond4 (unregistering): Released all slaves [ 482.954987][ T5726] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 482.983698][ T5694] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 483.114183][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 483.122437][ T5726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.135716][ T5726] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.152485][ T5726] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 483.162151][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.163803][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 483.173005][ T5726] usb 4-1: Product: syz [ 483.182397][ T5726] usb 4-1: Manufacturer: syz [ 483.187957][ T5726] usb 4-1: SerialNumber: syz [ 483.194380][ T5694] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 483.213696][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.233040][ T5694] usb 2-1: config 0 descriptor?? [ 483.423095][T11419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.444780][T11419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.474112][ T5694] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 483.501265][ T5694] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 483.544933][ T5694] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 483.582654][ T5694] usb 2-1: media controller created [ 483.619806][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.700644][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'. [ 484.009754][T11429] FAULT_INJECTION: forcing a failure. [ 484.009754][T11429] name failslab, interval 1, probability 0, space 0, times 0 [ 484.022956][T11429] CPU: 1 UID: 0 PID: 11429 Comm: syz.0.1660 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.022992][T11429] Tainted: [L]=SOFTLOCKUP [ 484.023001][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.023017][T11429] Call Trace: [ 484.023036][T11429] [ 484.023045][T11429] dump_stack_lvl+0xe8/0x150 [ 484.023077][T11429] should_fail_ex+0x412/0x560 [ 484.023104][T11429] ? __d_alloc+0x37/0x6f0 [ 484.023134][T11429] should_failslab+0xa8/0x100 [ 484.023157][T11429] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 484.023196][T11429] __d_alloc+0x37/0x6f0 [ 484.023229][T11429] d_alloc_pseudo+0x21/0xc0 [ 484.023258][T11429] alloc_file_pseudo+0xdd/0x240 [ 484.023288][T11429] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 484.023313][T11429] ? do_raw_spin_unlock+0xf5/0x210 [ 484.023347][T11429] ? _raw_spin_unlock+0x28/0x50 [ 484.023384][T11429] anon_inode_getfile+0xc5/0x1a0 [ 484.023410][T11429] do_epoll_create+0x286/0x3b0 [ 484.023446][T11429] __ia32_sys_epoll_create+0x4e/0x70 [ 484.023474][T11429] __do_fast_syscall_32+0x23e/0x6f0 [ 484.023498][T11429] ? do_fast_syscall_32+0x33/0x70 [ 484.023520][T11429] ? lockdep_hardirqs_on+0x7a/0x110 [ 484.023540][T11429] ? asm_int80_emulation+0x1a/0x20 [ 484.023560][T11429] ? do_int80_emulation+0x29f/0x550 [ 484.023587][T11429] do_fast_syscall_32+0x33/0x70 [ 484.023610][T11429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 484.023636][T11429] RIP: 0023:0xf7fb901c [ 484.023657][T11429] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 484.023675][T11429] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 00000000000000fe [ 484.023698][T11429] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000000000000 [ 484.023712][T11429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 484.023724][T11429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 484.023737][T11429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 484.023750][T11429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.023781][T11429] [ 484.378310][T11440] netlink: 392 bytes leftover after parsing attributes in process `syz.0.1663'. [ 484.471024][T11442] FAULT_INJECTION: forcing a failure. [ 484.471024][T11442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.486207][T11442] CPU: 1 UID: 0 PID: 11442 Comm: syz.0.1664 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.486242][T11442] Tainted: [L]=SOFTLOCKUP [ 484.486251][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.486264][T11442] Call Trace: [ 484.486274][T11442] [ 484.486284][T11442] dump_stack_lvl+0xe8/0x150 [ 484.486318][T11442] should_fail_ex+0x412/0x560 [ 484.486349][T11442] _copy_from_user+0x2d/0xb0 [ 484.486378][T11442] kstrtouint_from_user+0xd6/0x180 [ 484.486404][T11442] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 484.486445][T11442] proc_fail_nth_write+0x8e/0x210 [ 484.486472][T11442] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 484.486517][T11442] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 484.486549][T11442] vfs_write+0x29a/0xb90 [ 484.486590][T11442] ? __pfx_vfs_write+0x10/0x10 [ 484.486623][T11442] ? __fget_files+0x2a/0x420 [ 484.486656][T11442] ? __fget_files+0x3a0/0x420 [ 484.486681][T11442] ? __fget_files+0x2a/0x420 [ 484.486716][T11442] ksys_write+0x150/0x270 [ 484.486750][T11442] ? __pfx_ksys_write+0x10/0x10 [ 484.486786][T11442] ? asm_int80_emulation+0x1a/0x20 [ 484.486813][T11442] do_int80_emulation+0x19a/0x550 [ 484.486837][T11442] ? trace_irq_disable+0x3b/0x140 [ 484.486866][T11442] ? asm_int80_emulation+0x1a/0x20 [ 484.486886][T11442] ? clear_bhb_loop+0x40/0x90 [ 484.486908][T11442] ? clear_bhb_loop+0x40/0x90 [ 484.486935][T11442] asm_int80_emulation+0x1a/0x20 [ 484.486956][T11442] RIP: 0023:0xf71b61ab [ 484.486975][T11442] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 484.486993][T11442] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 484.487013][T11442] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 484.487029][T11442] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 484.487041][T11442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 484.487055][T11442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 484.487068][T11442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.487100][T11442] [ 484.792488][ T5694] az6027: usb out operation failed. (-71) [ 484.798851][ T5694] az6027: usb out operation failed. (-71) [ 484.808664][ T5694] stb0899_attach: Driver disabled by Kconfig [ 484.817532][ T5694] az6027: no front-end attached [ 484.817532][ T5694] [ 484.825155][ T5694] az6027: usb out operation failed. (-71) [ 484.847835][T11253] cdc_ncm 3-1:1.1: bind() failure [ 484.848068][ T5694] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 484.863249][ T5694] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 484.877595][ T5694] dvb-usb: schedule remote query interval to 400 msecs. [ 484.884929][ T5694] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 484.895960][ T5694] usb 2-1: USB disconnect, device number 77 [ 484.991234][T11253] usb 3-1: USB disconnect, device number 68 [ 485.110960][T11450] program syz.2.1667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.192046][ T5694] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 485.263283][T11453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.643754][T11245] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 485.653734][T11253] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 485.758721][ T5726] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.775395][ T5726] usb 4-1: MIDIStreaming interface descriptor not found [ 485.816055][T11253] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.835679][T11245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 485.866176][T11253] usb 2-1: config 0 interface 0 has no altsetting 0 [ 485.867803][T11245] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 485.890165][T11253] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 485.920176][T11253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.950744][T11245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 485.972359][T11471] netlink: 392 bytes leftover after parsing attributes in process `syz.3.1674'. [ 485.989068][T11245] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 486.000875][ T5726] usb 4-1: USB disconnect, device number 76 [ 486.009913][T11253] usb 2-1: config 0 descriptor?? [ 486.038350][T11245] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 486.066770][T11245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.139035][T11245] usb 1-1: config 0 descriptor?? [ 486.157712][ T57] [ 486.160100][ T57] ============================================ [ 486.166260][ T57] WARNING: possible recursive locking detected [ 486.172451][ T57] syzkaller #0 Tainted: G L [ 486.178430][ T57] -------------------------------------------- [ 486.184590][ T57] kworker/u8:4/57 is trying to acquire lock: [ 486.190596][ T57] ffff88807dcbad58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 486.200496][ T57] [ 486.200496][ T57] but task is already holding lock: [ 486.207866][ T57] ffff88802508d158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 486.217719][ T57] [ 486.217719][ T57] other info that might help us debug this: [ 486.225779][ T57] Possible unsafe locking scenario: [ 486.225779][ T57] [ 486.233228][ T57] CPU0 [ 486.236544][ T57] ---- [ 486.239847][ T57] lock(&qdisc_xmit_lock_key#4); [ 486.244886][ T57] lock(&qdisc_xmit_lock_key#4); [ 486.249920][ T57] [ 486.249920][ T57] *** DEADLOCK *** [ 486.249920][ T57] [ 486.258093][ T57] May be due to missing lock nesting notation [ 486.258093][ T57] [ 486.266413][ T57] 11 locks held by kworker/u8:4/57: [ 486.271609][ T57] #0: ffff888055c61140 ((wq_completion)bond2#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 486.282675][ T57] #1: ffffc900015e7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 486.295653][ T57] #2: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 486.305259][ T57] #3: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 486.315207][ T57] #4: ffff8880319c0228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 486.327839][ T57] #5: ffff88802508d158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 486.338125][ T57] #6: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 486.347012][ T57] #7: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 486.356766][ T57] #8: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 486.365580][ T57] #9: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 486.375511][ T57] #10: ffff88807b1ea228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 486.388270][ T57] [ 486.388270][ T57] stack backtrace: [ 486.394167][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.394188][ T57] Tainted: [L]=SOFTLOCKUP [ 486.394194][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 486.394205][ T57] Workqueue: bond2 bond_alb_monitor [ 486.394224][ T57] Call Trace: [ 486.394231][ T57] [ 486.394238][ T57] dump_stack_lvl+0xe8/0x150 [ 486.394255][ T57] print_deadlock_bug+0x279/0x290 [ 486.394276][ T57] __lock_acquire+0x253f/0x2cf0 [ 486.394295][ T57] ? unwind_next_frame+0xa6/0x2550 [ 486.394316][ T57] ? sch_direct_xmit+0x15f/0x4c0 [ 486.394335][ T57] lock_acquire+0x106/0x350 [ 486.394349][ T57] ? sch_direct_xmit+0x15f/0x4c0 [ 486.394377][ T57] _raw_spin_lock+0x2e/0x40 [ 486.394398][ T57] ? sch_direct_xmit+0x15f/0x4c0 [ 486.394417][ T57] sch_direct_xmit+0x15f/0x4c0 [ 486.394438][ T57] ? __pfx_sch_direct_xmit+0x10/0x10 [ 486.394461][ T57] ? arp_create+0x170/0x980 [ 486.394479][ T57] __dev_queue_xmit+0x180f/0x3950 [ 486.394497][ T57] ? __dev_queue_xmit+0x2b6/0x3950 [ 486.394514][ T57] ? arpt_do_table+0x256/0x1e30 [ 486.394536][ T57] ? __pfx___dev_queue_xmit+0x10/0x10 [ 486.394554][ T57] ? __pfx_arpt_do_table+0x10/0x10 [ 486.394575][ T57] ? trace_kmem_cache_alloc+0x29/0xe0 [ 486.394596][ T57] ? NF_HOOK+0xa2/0x3c0 [ 486.394609][ T57] ? lock_acquire+0x106/0x350 [ 486.394626][ T57] ? NF_HOOK+0xa2/0x3c0 [ 486.394641][ T57] NF_HOOK+0x33a/0x3c0 [ 486.394656][ T57] ? __pfx_arp_xmit_finish+0x10/0x10 [ 486.394670][ T57] ? NF_HOOK+0xa2/0x3c0 [ 486.394684][ T57] ? __pfx_NF_HOOK+0x10/0x10 [ 486.394697][ T57] ? lock_acquire+0x106/0x350 [ 486.394711][ T57] ? __pfx_arp_xmit_finish+0x10/0x10 [ 486.394726][ T57] ? inet_addr_type_dev_table+0x25/0x190 [ 486.394743][ T57] arp_xmit+0x16c/0x270 [ 486.394756][ T57] ? arp_xmit+0x23/0x270 [ 486.394770][ T57] arp_solicit+0xbe0/0xe40 [ 486.394787][ T57] ? arp_solicit+0x119/0xe40 [ 486.394803][ T57] ? __pfx_arp_solicit+0x10/0x10 [ 486.394821][ T57] ? __pfx_arp_solicit+0x10/0x10 [ 486.394836][ T57] __neigh_event_send+0xf05/0x14d0 [ 486.394860][ T57] neigh_resolve_output+0x198/0x750 [ 486.394880][ T57] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 486.394900][ T57] ? ip_finish_output2+0x3c2/0x1070 [ 486.394916][ T57] ip_finish_output2+0xca9/0x1070 [ 486.394932][ T57] ? ip_skb_dst_mtu+0x80b/0xa50 [ 486.394954][ T57] ? ip_finish_output+0x40e/0x530 [ 486.394970][ T57] ip_output+0x29f/0x450 [ 486.394985][ T57] ? ip_output+0x5b/0x450 [ 486.395000][ T57] iptunnel_xmit+0x621/0xd10 [ 486.395023][ T57] ip_tunnel_xmit+0x193a/0x1f20 [ 486.395046][ T57] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 486.395063][ T57] ? __pfx_gre_build_header+0x10/0x10 [ 486.395087][ T57] ? kfree+0x1c5/0x640 [ 486.395103][ T57] ? pskb_expand_head+0x458/0x1390 [ 486.395120][ T57] __gre_xmit+0x19e/0x240 [ 486.395142][ T57] ? __pfx___gre_xmit+0x10/0x10 [ 486.395167][ T57] erspan_xmit+0xa41/0x14d0 [ 486.395184][ T57] ? ret_from_fork_asm+0x1a/0x30 [ 486.395201][ T57] ? __pfx_erspan_xmit+0x10/0x10 [ 486.395238][ T57] dev_hard_start_xmit+0x2cd/0x830 [ 486.395272][ T57] sch_direct_xmit+0x251/0x4c0 [ 486.395295][ T57] ? __pfx_sch_direct_xmit+0x10/0x10 [ 486.395314][ T57] ? kthread+0x2b0/0x470 [ 486.395335][ T57] __dev_queue_xmit+0x180f/0x3950 [ 486.395353][ T57] ? __dev_queue_xmit+0x2b6/0x3950 [ 486.395372][ T57] ? __pfx___dev_queue_xmit+0x10/0x10 [ 486.395388][ T57] ? rcu_is_watching+0x15/0xb0 [ 486.395405][ T57] ? trace_kmem_cache_alloc+0x29/0xe0 [ 486.395425][ T57] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 486.395449][ T57] ? __alloc_skb+0x4e5/0x7d0 [ 486.395470][ T57] ? alb_send_lp_vid+0x14e/0x550 [ 486.395488][ T57] alb_send_lp_vid+0x348/0x550 [ 486.395505][ T57] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 486.395523][ T57] ? psi_group_change+0xab8/0x1050 [ 486.395544][ T57] alb_send_learning_packets+0x12c/0x300 [ 486.395560][ T57] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 486.395576][ T57] ? bond_alb_monitor+0xf8/0x17e0 [ 486.395592][ T57] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 486.395615][ T57] bond_alb_monitor+0x3d5/0x17e0 [ 486.395632][ T57] ? bond_alb_monitor+0xf8/0x17e0 [ 486.395653][ T57] ? __pfx_bond_alb_monitor+0x10/0x10 [ 486.395669][ T57] ? process_scheduled_works+0xa70/0x1860 [ 486.395683][ T57] ? process_scheduled_works+0xa70/0x1860 [ 486.395699][ T57] process_scheduled_works+0xb5d/0x1860 [ 486.395724][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 486.395741][ T57] ? assign_work+0x3d5/0x5e0 [ 486.395756][ T57] worker_thread+0xa53/0xfc0 [ 486.395780][ T57] kthread+0x389/0x470 [ 486.395798][ T57] ? __pfx_worker_thread+0x10/0x10 [ 486.395812][ T57] ? __pfx_kthread+0x10/0x10 [ 486.395830][ T57] ret_from_fork+0x514/0xb70 [ 486.395846][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 486.395860][ T57] ? __switch_to+0xc79/0x1410 [ 486.395882][ T57] ? __pfx_kthread+0x10/0x10 [ 486.395900][ T57] ret_from_fork_asm+0x1a/0x30 [ 486.395922][ T57] [ 487.092670][T11472] syzkaller0: entered promiscuous mode [ 487.098303][T11472] syzkaller0: entered allmulticast mode [ 487.128633][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.150264][T11456] misc userio: Can't change port type on an already running userio instance [ 487.162818][T11253] usb 2-1: selecting invalid altsetting 0 [ 487.318011][T11245] hdpvr 1-1:0.0: firmware version 0x8 dated 5 [ 487.405485][T11477] fuse: Bad value for 'fd' [ 487.528264][T11245] hdpvr 1-1:0.0: device init failed [ 487.533803][T11245] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 487.547010][T11245] usb 1-1: USB disconnect, device number 88 [ 488.427399][ T5780] usb 2-1: USB disconnect, device number 78