last executing test programs: 9m20.548350733s ago: executing program 2 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r3, 0xee01, r4) keyctl$setperm(0x5, r3, 0x30925) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, 0x2c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c0400000000004400128008000100677470003800028008000100", @ANYRES32=r6, @ANYBLOB="14000800fc0000000000000000000000000000010800ef1118ff53a72f44d5eb19d104ff01009b00080007000a01010208400200", @ANYRES32, @ANYBLOB], 0x64}}, 0x0) 9m17.740143008s ago: executing program 2 (id=97): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(0x0, &(0x7f0000000400)={'syz', 0x1}, 0x0, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r1, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r4, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x80000001}]}}]}, 0x150}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd2b, 0x25dfdbf9, {0x7, 0x0, 0x0, 0x0, 0x400, 0x102}}, 0x20}, 0x1, 0x0, 0x0, 0x24008006}, 0x4048844) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x58, r6, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5}]]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', 0x0) 9m15.729713272s ago: executing program 2 (id=103): mkdir(&(0x7f00000000c0)='./file0\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xf000200a}) chdir(&(0x7f0000000100)='./file0\x00') r2 = creat(&(0x7f0000000100)='./file0\x00', 0x59) write(r2, &(0x7f0000000240)="cd", 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt(r5, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r5, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, r6, 0x0, 0xa0028000}, 0x38) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x50) setsockopt(r5, 0x0, 0x488, &(0x7f0000000500)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) setsockopt(r5, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r4, 0x0, 0x0, 0x317, 0x0, 0x0) 9m14.439103269s ago: executing program 2 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f000047a000/0x4000)=nil, 0x4000, 0x5000003, 0x80010, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f00000000c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8) mount(0x0, &(0x7f0000000200)='./dev\x00', 0x0, 0x0, 0x0) write(r2, 0x0, 0x0) write(r1, &(0x7f00000004c0)='\n', 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x10002, 0x29) bind$inet6(r7, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) 9m13.446576048s ago: executing program 2 (id=108): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x40000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x20363159, 0x5, 0x8, [{0xffffffff}, {}, {0x0, 0xfffffffc}, {0x100004}, {0x0, 0x40}, {}, {0xffffffff}], 0xff}}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x2) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendto$packet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000002280)={0x11, 0xd, 0x0, 0x1, 0x9, 0x6, @random="4befe55656e4"}, 0x14) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000200)=0x8a79, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fef8ffff1971a4f0ff00000000b706000008ffffff9c6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000004c000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761051ce540c772e201b2de17dfdb5b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e015064716897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88801e80500180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08003f000502"], 0x48}}, 0x440088c4) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r5, @ANYRESHEX=r6], 0x14}}, 0x40800) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00006dbffc), 0x4) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 9m12.579613228s ago: executing program 2 (id=112): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000580)={'sit0\x00', &(0x7f00000005c0)={@empty, 0x0, 0x0, 0xffffffffffffff3e, 0x0, [{@initdev}, {@dev}, {@empty}, {@initdev}, {}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x0, &(0x7f0000000400)='rtdev=./loop0\x00') memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0), 0x4) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) faccessat(r4, &(0x7f0000000140)='./file0\x00', 0xa0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 9m11.732009774s ago: executing program 32 (id=112): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000580)={'sit0\x00', &(0x7f00000005c0)={@empty, 0x0, 0x0, 0xffffffffffffff3e, 0x0, [{@initdev}, {@dev}, {@empty}, {@initdev}, {}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x0, &(0x7f0000000400)='rtdev=./loop0\x00') memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0), 0x4) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) faccessat(r4, &(0x7f0000000140)='./file0\x00', 0xa0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 8m36.995175793s ago: executing program 4 (id=182): mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) mknod$loop(&(0x7f0000000040)='./pipefs/gssd/clntXX/gssd\x00', 0x100, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 8m35.801660161s ago: executing program 4 (id=183): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) futex(&(0x7f0000000000)=0x1, 0xc, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x1) keyctl$get_persistent(0x16, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x2) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000340)='rxrpc_s\x00', &(0x7f0000000380)={'syz', 0x3}, r4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 8m34.453250306s ago: executing program 4 (id=187): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000000, 0xcb7}) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r6, &(0x7f00000002c0)=""/10, 0x5b) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000a80)=[{&(0x7f0000000200)="6358e896ec8aa2c927", 0x9}], 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xfec08000, 0x40000, 0xb, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xc, 0x6}, {0xeeee0000, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x8080000, 0xc000, 0xf, 0xa7, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x3, 0x4b}, {0x60000, 0x3000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x94, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x45, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff}, {0x692daea2027b6777, 0x6}, {0x0, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14009e, 0x6, 0x0, 0xe000, [0x6, 0x50, 0x8, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x2, 0x0, '\x00', 0x26c}) 8m31.031841212s ago: executing program 4 (id=192): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102000000400c200b104000010203010902289f030103a0420904000000010100000a240102000a0002010209040100000102000009040101e2010200000905ba0710000206000725010c004000090502", @ANYRESDEC], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@ipv6_deladdrlabel={0x30, 0x48, 0x309, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0xff, 0x24, &(0x7f0000002d80)="f0c46000", 0x4) syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x30, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080), 0x800) syz_emit_ethernet(0xc2, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x2, 0x0, 0xb4, 0x65, 0x0, 0x72, 0x1, 0x0, @remote, @multicast1, {[@rr={0x7, 0xb, 0xc1, [@local, @multicast1]}, @noop, @end]}}, @redirect={0x5, 0xdab6c2ff501c069a, 0x0, @multicast1, {0x21, 0x4, 0x1, 0x27, 0xe, 0x67, 0x4, 0xc0, 0xc, 0x4, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2, {[@noop, @cipso={0x86, 0x38, 0x1, [{0x1, 0x9, "73934bd7e71e3f"}, {0x1, 0xd, "7486c61886fced939897e3"}, {0x0, 0x9, "da36f4b05854c2"}, {0x5, 0x3, "ae"}, {0x0, 0x10, "016586900360bff9429111e9e7f7"}]}, @ssrr={0x89, 0xf, 0x44, [@loopback, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x20, 0xa0, 0x0, 0x2, [0x1, 0x80000001, 0x1, 0x10, 0x1000, 0x1fb, 0x1]}, @end, @rr={0x7, 0x7, 0xaa, [@remote]}]}}, "729ace0f"}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex_waitv(&(0x7f0000000100)=[{0x1, 0xfffffffffffffffe, 0x82}], 0x1, 0x0, &(0x7f0000000180), 0x0) io_setup(0x6, &(0x7f0000000d80)=0x0) r3 = eventfd2(0x83, 0x80001) socket(0x6, 0x2, 0x3) io_submit(r2, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r3, 0x0, 0x0, 0xfbe, 0x0, 0x1, r3}]) close(r3) 8m27.060101004s ago: executing program 4 (id=199): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sg(0x0, 0xbe, 0x418001) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)}, 0x10) clock_settime(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) close(0x3) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x200, &(0x7f0000000180)="8b0f4e9d", 0x4, &(0x7f0000000280), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000001440)=[{0x0}, {&(0x7f0000001000)="f4", 0x1}], 0x2, 0x2004, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8m25.150771441s ago: executing program 4 (id=204): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$inet(0x2, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x6fa7782c, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x67, 0x0, 0x6, 0x2f, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x13, 0xad, [@rand_addr=0x64010101, @remote, @loopback, @local]}, @timestamp_prespec={0x44, 0x1c, 0xb0, 0x3, 0x0, [{@multicast1, 0x8000}, {@empty, 0xfffffffd}, {@multicast1, 0x4}]}, @cipso={0x86, 0x26, 0x2, [{0x0, 0x9, "0285b99d46a737"}, {0x7, 0x6, "ff1c93af"}, {0x7, 0x3, 'n'}, {0x1, 0xe, "ba9c13497a5061ee2a88659b"}]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x1, 0xa, "c928f241fd6e5f66"}, {0x2, 0x2}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x8000000000000000, r1, 'id1\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x8, '\x00', r3, r4, 0x3, 0x4, 0x3}, 0x50) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000780)={0x0, 0x0, "e310ee9861820e348184c6768c80f88783509ba523c08695fefb4c20d86b9e17487a6831aaa1eaab3e1f73b4529b072f9ccb11c74e94ebe1c6a607845e036618e207259455407ae8270e04777faff36798f9dcfae3496f9f24bfc478a9125c179d278f72d335ffc301d6ed3c6166142913e542705d68ab9d591beb0c2ac52b2da7a181d0ca77026dbfca69ac7c1e3a0dc05606a6672a06a66f1e8a76aab58d3a11cf92ee8b75b8333ccd50aa550384fae6036c3c88014428a3ef10d0f30e7fc0b32e47136b1528f00e45e7d0e9049ed6d1b28dc749e8c6828b2c7acb28117183859ec4b7abf0b6210c284a4be2c9c159527d09770b72d748d32b81b8267b8467", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001780)={r5, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 8m10.049363035s ago: executing program 33 (id=204): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$inet(0x2, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x6fa7782c, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x67, 0x0, 0x6, 0x2f, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x13, 0xad, [@rand_addr=0x64010101, @remote, @loopback, @local]}, @timestamp_prespec={0x44, 0x1c, 0xb0, 0x3, 0x0, [{@multicast1, 0x8000}, {@empty, 0xfffffffd}, {@multicast1, 0x4}]}, @cipso={0x86, 0x26, 0x2, [{0x0, 0x9, "0285b99d46a737"}, {0x7, 0x6, "ff1c93af"}, {0x7, 0x3, 'n'}, {0x1, 0xe, "ba9c13497a5061ee2a88659b"}]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x1, 0xa, "c928f241fd6e5f66"}, {0x2, 0x2}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x8000000000000000, r1, 'id1\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x8, '\x00', r3, r4, 0x3, 0x4, 0x3}, 0x50) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000780)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001780)={r5, 0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 17.759351644s ago: executing program 3 (id=1479): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000000, 0xcb7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0x5b) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xfec08000, 0x40000, 0xb, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xc, 0x6}, {0xeeee0000, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x8080000, 0xc000, 0xf, 0xa7, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x3, 0x4b}, {0x60000, 0x3000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x94, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x45, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff}, {0x692daea2027b6777, 0x6}, {0x0, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14009e, 0x6, 0x0, 0xe000, [0x6, 0x50, 0x8, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x2, 0x0, '\x00', 0x26c}) 13.780142908s ago: executing program 5 (id=1490): symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) (fail_nth: 2) 13.726037617s ago: executing program 5 (id=1491): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) signalfd4(r0, &(0x7f0000000100)={[0x1]}, 0x8, 0x800) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='5\n', 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f73"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x40, &(0x7f0000000e00)={0x77359400}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r3, 0x4}, 0x38) 13.634804302s ago: executing program 3 (id=1492): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000000, 0xcb7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r6, &(0x7f00000002c0)=""/10, 0x5b) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000200)="6358e896ec", 0x5}], 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xfec08000, 0x40000, 0xb, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xc, 0x6}, {0xeeee0000, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x8080000, 0xc000, 0xf, 0xa7, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x3, 0x4b}, {0x60000, 0x3000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x94, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x45, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff}, {0x692daea2027b6777, 0x6}, {0x0, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14009e, 0x6, 0x0, 0xe000, [0x6, 0x50, 0x8, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x2, 0x0, '\x00', 0x26c}) 13.616926657s ago: executing program 1 (id=1493): r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0002800500270000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) mlock(&(0x7f0000368000/0x4000)=nil, 0x4000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000480)) syz_usb_control_io(r8, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000240)={0x0, 0x31, 0x2d, {0x2d, 0x22, "9083fb356fdfa61e363f2d017c0a46d5ad4c85d13631d24fa85f7304da6dc24896f7f10a6cb38d2a7181bf"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}}, &(0x7f00000007c0)={0x34, &(0x7f00000005c0)={0x40, 0x17, 0xba, "063f3c3cdd4b6c2c221b31f2cb5dcb5179ff9d2129d1e280597f915af48051982a6de76b5e9300922650385b970a233e5ca3326713e05efcc0ab7b5fb350ad347d0fcea615d1ab364dc22ee0bdd3077212a8f90bd7e98799b55c93abffb7cb56430cfe8665b4bb10dda3b27c41932224034084703fa6917be20dda98d1cd465d7149b5173e5f1b1ea00cbde990c81ee1d97f1c755a7727f8962a72ba9bd1728b3634be39828db466ddb2b8284b1bdca2754c27be7214301d80e9"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000740)={0x40, 0xa0, 0x4, 0x100005}, &(0x7f0000000780)={0xc0, 0xa2, 0x2f, "974bb43707145b2184c71c7c62dd28363a5959a64d66d0a5d0023436b36a0c6223525b1dceca7b2ed5a2e8aee49e6c"}}) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) 11.548599876s ago: executing program 3 (id=1496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f00000003c0)) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) 11.028798832s ago: executing program 0 (id=1497): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x400c880}, 0x20004880) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x4, 0x0, 0xfffffffc}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x440) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'fo\x00', 0x33, 0x660f537e, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x84, @multicast2, 0x4f29, 0x3, 'sh\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10000, 0x1, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x7ff, "d65aa7b331a471c900cd8b000000000000fe62f800"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000440)={0x2, "418a814ada2b7b5ddf6df93463b735c8394113315b0708dddb36a3de0f0aa92a"}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x8, 0x7, 0x8}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/133, 0x85, 0x1, &(0x7f0000000480)=""/168, 0xa8}, &(0x7f0000000580)=0x40) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', '', [], 0xa, "50da3b48cc9dc863a6daa66a2c5dc196c5a3441b4a79e2dd685bac16b7d9950fcf3f46"}, 0x27) write$selinux_load(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757847c52df29f9670596d29b51764f0b86d14fdbc4a762b53b9995fd7ba3fc0b508381af0678d3828cc8ab068dc66e535608e13730c9dfb4cc4007be5525133cc118da0c879785af2efbe1b164df869be8697a84bfaa83cb5295e8f235e228db8521b2743f5eb369470f907780ba29f54599ef5728448caa695cfd01ebd79d159d9c3447f20d6fb15518b07403efd7ae1a4c1e98e4591a032d6539dcd618ebdc4000000000000"], 0xb5) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0x0) pread64(r6, 0x0, 0x0, 0x1) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) 10.939989381s ago: executing program 1 (id=1498): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x31, 0xcf, 0x56, 0x10, 0x12d6, 0x444, 0xfe9d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf9, 0x8, 0x0, 0x9, "", [{{0x9, 0x4, 0x3c, 0x0, 0x0, 0x9a, 0x53, 0xc3, 0x7}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)="010000000705810240000007", 0xc) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x10003, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 10.615698375s ago: executing program 3 (id=1499): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0}, 0x28) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="50010001000000000000000200000000000000d800", @ANYRESDEC=r4], 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) 9.789378346s ago: executing program 5 (id=1500): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10000050) (fail_nth: 2) 9.746418333s ago: executing program 0 (id=1501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) 8.703462749s ago: executing program 0 (id=1502): mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) mknod$loop(&(0x7f0000000040)='./pipefs/gssd/clntXX/gssd\x00', 0x100, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 8.670565349s ago: executing program 5 (id=1503): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000000, 0xcb7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0x5b) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xfec08000, 0x40000, 0xb, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xc, 0x6}, {0xeeee0000, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x8080000, 0xc000, 0xf, 0xa7, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x3, 0x4b}, {0x60000, 0x3000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x94, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x45, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff}, {0x692daea2027b6777, 0x6}, {0x0, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14009e, 0x6, 0x0, 0xe000, [0x6, 0x50, 0x8, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x2, 0x0, '\x00', 0x26c}) 8.668808725s ago: executing program 6 (id=1504): mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) mknod$loop(&(0x7f0000000040)='./pipefs/gssd/clntXX/gssd\x00', 0x100, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 7.867850199s ago: executing program 1 (id=1505): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0xfffffffffffffff2, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_NUM_TX_QUEUES={0x0, 0x1f, 0xffffffff}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a3100000000140007800500150000"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081001000080049b4003800000000a3069078ac1414bbac1414aa070f09e00000027f00000100000000004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mlockall(0x3) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="1214000300000020da0b144040000102030109026e000301021080080b0001012130090904000000010130000a2401060a0007000000090401000001023000090401010101023000090501092000fc7f8b0a25250104000000050009040200000102300009040201010102300009058209200006064f0a252500000000040800"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) 7.189630443s ago: executing program 6 (id=1506): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6.946858478s ago: executing program 3 (id=1507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x4, 0x2003) unshare(0x6a040000) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) sendmsg$inet6(r4, &(0x7f0000001280)={&(0x7f0000000140)={0xa, 0x4e20, 0x2, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="c8170fd41e569e3f", 0x8}, {&(0x7f0000000180)="2857a8e43f863212bbbcaa020c46768d5919d6aa21cd816a1b084f20a3413e8ee2440b78ecf06da1f4032892cdef4c86ed234395ed83a37b8d03ffd4c08137b7598019a549a1128ec176c95cff044e7c5189b738c48d12efa35c17692bc095d8cfe4970135f01a4f861736f8ff860fcdb7e69148d97b8aad28798f98ad672952dacf2326b36759", 0x87}, {&(0x7f00000003c0)="c83c8c32154d8134ea9f3af5f71a2c6c0663d8ec0ec17e32abe5dd1d6bc9f25f5fa527513efe31bab6c06700bf936659d0a9b40a2784e61ba3c1f2aece7707baa5209586d2780bcd3496017637b8fb9c9be11b20478028f7030764cd27de1d61fab8a114c55c29b84cf0f0a20a30285aede116a114c80798f03809ccf7f9883a8bfdbd65a270a0df361511e6dc75bb2c0935743c1a08bfdac749ef6ab568b432bad8fb632011db4734ba1213ed6d6ff1a4592f8582abbf8b", 0xb8}, {&(0x7f0000000480)="df36c418fc976df364384e467fa610391891e67adaa0e074ee", 0x19}], 0x4}, 0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x2, 0x819}, 0x14) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f65d02a3f2ffaa46c88bc00000000000000000000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28290a9423debbb86f29ba4a2d", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0xe0}], 0x1}, 0x40040) 5.209067463s ago: executing program 6 (id=1508): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000000, 0xcb7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r6, &(0x7f00000002c0)=""/10, 0x5b) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000200)="6358e896ec8aa2c9", 0x8}], 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xfec08000, 0x40000, 0xb, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xc, 0x6}, {0xeeee0000, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x8080000, 0xc000, 0xf, 0xa7, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x3, 0x4b}, {0x60000, 0x3000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x94, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x45, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff}, {0x692daea2027b6777, 0x6}, {0x0, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14009e, 0x6, 0x0, 0xe000, [0x6, 0x50, 0x8, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x2, 0x0, '\x00', 0x26c}) 4.954660855s ago: executing program 0 (id=1509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x4, 0x2003) unshare(0x6a040000) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) sendmsg$inet6(r5, &(0x7f0000001280)={&(0x7f0000000140)={0xa, 0x4e20, 0x2, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="c8170fd41e569e3f", 0x8}, {0x0}, {&(0x7f0000000480)="df36c418fc976df364384e467fa610391891e67adaa0e074ee", 0x19}], 0x3}, 0x80) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x2, 0x819}, 0x14) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f65d02a3f2ffaa46c88bc00000000000000000000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28290a9423debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acf13e730bc5baeb374a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d6810000000c00008008000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0xe0}], 0x1}, 0x40040) 4.834236411s ago: executing program 5 (id=1510): setns(0xc9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x5, 0x0, 0xa, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x20039}, 0x60) listen(0xffffffffffffffff, 0x10003) unshare(0x6a040000) syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902"], 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [0xa2, 0xb, 0x5, 0x8, 0x80000000, 0xd6], 0x1, 0x0, 0x0, [{}]}, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x1, 0x1, 0x10001, 0x9dd}) mprotect(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e27, @rand_addr=0x64010102}}, 0x24) socket$inet(0x2, 0x2, 0x0) shutdown(r2, 0x0) 3.924005807s ago: executing program 6 (id=1511): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xd, 0x200}, 0x1c) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x8c, 0x0) 3.7695698s ago: executing program 0 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd67da7120fe181101fc02000000000000000000000000000100000000000000000000fffff8ffffff4e234e210018907804000000b5080000ff070000000000003ca088da7f6b6a04e31b7bb7a6a6293c4fe52a3119e442bc2bb181319cabd1ab5df048c59cf0d645b03f9b464c7ac624030a1785b24a667061fa42fb3c6db7b2f62d07d1a97118e4fc82da3a589adfa7d357991f254f3cbbfd4776e72119"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) pipe(&(0x7f0000000280)) socket$inet_mptcp(0x2, 0x1, 0x106) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) 3.4831867s ago: executing program 3 (id=1513): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) (fail_nth: 2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xd, 0x200}, 0x1c) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x8c, 0x0) 3.41675784s ago: executing program 1 (id=1514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a0a01e6"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) 3.091856004s ago: executing program 1 (id=1515): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x31, 0xcf, 0x56, 0x10, 0x12d6, 0x444, 0xfe9d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf9, 0x8, 0x0, 0x9, "", [{{0x9, 0x4, 0x3c, 0x0, 0x0, 0x9a, 0x53, 0xc3, 0x7}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)="010000000705810240000007", 0xc) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x10003, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.739658746s ago: executing program 0 (id=1516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) write$tun(r2, &(0x7f0000000040)=ANY=[], 0x103) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000180)=0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000100)=0x1000, 0x4) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000000)=0x5) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x6, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6, 0xfff3}, {0x0, 0x7}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1.659771066s ago: executing program 6 (id=1517): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x77aab000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) close(0xffffffffffffffff) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000340)={0xe939, r7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r9}) read$rfkill(r9, &(0x7f0000000140), 0x8) 636.167768ms ago: executing program 5 (id=1518): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7.6905ms ago: executing program 1 (id=1519): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) 0s ago: executing program 6 (id=1520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd67da7120fe181101fc02000000000000000000000000000100000000000000000000fffff8ffffff4e234e210018907804000000b5080000ff070000000000003ca088da7f6b6a04e31b7bb7a6a6293c4fe52a3119e442bc2bb181319cabd1ab5df048c59cf0d645b03f9b464c7ac624030a1785b24a667061fa42fb3c6db7b2f62d07d1a97118e4fc82da3a589adfa7d357991f254f3cbbfd4776e72119"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) pipe(&(0x7f0000000280)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') timerfd_create(0x0, 0x0) pselect6(0x15, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x18c6, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') read$FUSE(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000200"/28], 0x50) kernel console output (not intermixed with test programs): eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 565.372665][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8308 instead [ 565.372676][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9196 instead [ 565.372764][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 565.372773][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 565.372783][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x8308 instead [ 565.372793][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9196 instead [ 565.372818][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 565.372827][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 565.372838][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x8308 instead [ 565.372849][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9196 instead [ 565.372872][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 565.372881][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 565.372901][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8308 instead [ 565.372913][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9196 instead [ 565.372936][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 565.374287][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 565.374300][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x8308 instead [ 565.374310][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9196 instead [ 565.374336][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 565.374346][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 565.374356][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x8308 instead [ 565.374366][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9196 instead [ 565.374404][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 565.374413][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 565.374423][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8308 instead [ 565.374433][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9196 instead [ 565.374457][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 565.374466][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 565.374475][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x8308 instead [ 565.374485][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9196 instead [ 565.374507][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 565.374515][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 565.374524][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x8308 instead [ 565.374546][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9196 instead [ 565.374570][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 565.374579][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 565.374588][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x8308 instead [ 565.374599][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9196 instead [ 565.374621][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 565.374630][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 565.374639][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8308 instead [ 565.374649][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9196 instead [ 565.374682][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 565.374691][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 565.374705][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x8308 instead [ 565.374715][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9196 instead [ 565.374739][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 565.374748][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 565.374758][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x8308 instead [ 565.374901][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9196 instead [ 565.374927][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 565.374936][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 565.374960][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8308 instead [ 565.374970][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9196 instead [ 565.374994][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 565.375004][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 565.375014][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8308 instead [ 565.375024][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9196 instead [ 565.375047][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 565.375056][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 565.375066][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x8308 instead [ 565.375076][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9196 instead [ 565.375112][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 565.375121][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 565.375130][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8308 instead [ 565.375140][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9196 instead [ 565.375163][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 565.375172][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 565.375181][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x8308 instead [ 565.375190][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9196 instead [ 565.375213][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 565.375232][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 565.375242][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x8308 instead [ 565.375252][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9196 instead [ 565.375275][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 565.375309][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 565.375320][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x8308 instead [ 565.375331][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9196 instead [ 565.375356][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 565.375376][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 565.375387][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8308 instead [ 565.375398][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9196 instead [ 565.375421][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 565.375430][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 565.375440][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x8308 instead [ 565.375450][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9196 instead [ 565.375478][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 565.375487][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 565.375508][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x8308 instead [ 565.375519][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9196 instead [ 565.375564][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 565.375573][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 565.375583][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x8308 instead [ 565.375594][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9196 instead [ 565.375618][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 565.375627][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 565.375650][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x8308 instead [ 565.375661][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9196 instead [ 565.375684][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 565.375693][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 565.375707][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x8308 instead [ 565.375718][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9196 instead [ 565.375742][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 565.375751][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 565.375761][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x8308 instead [ 565.375785][T10732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9196 instead [ 565.375804][T10732] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 565.375809][T10732] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 565.446982][ T2284] gspca_stk1135: reg_w 0x0 err -110 [ 565.469895][ T5699] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 565.481321][ T2284] gspca_stk1135: serial bus timeout: status=0x00 [ 565.481331][ T2284] gspca_stk1135: Sensor write failed [ 565.481350][ T2284] gspca_stk1135: serial bus timeout: status=0x00 [ 565.481355][ T2284] gspca_stk1135: Sensor write failed [ 565.481374][ T2284] gspca_stk1135: serial bus timeout: status=0x00 [ 565.481379][ T2284] gspca_stk1135: Sensor read failed [ 565.481398][ T2284] gspca_stk1135: serial bus timeout: status=0x00 [ 565.481403][ T2284] gspca_stk1135: Sensor read failed [ 565.481406][ T2284] gspca_stk1135: Detected sensor type unknown (0x0) [ 565.481427][ T2284] gspca_stk1135: serial bus timeout: status=0x00 [ 565.481433][ T2284] gspca_stk1135: Sensor read failed [ 565.481451][ T2284] gspca_stk1135: serial bus timeout: status=0x00 [ 565.481455][ T2284] gspca_stk1135: Sensor read failed [ 565.481473][ T2284] gspca_stk1135: serial bus timeout: status=0x00 [ 565.481477][ T2284] gspca_stk1135: Sensor write failed [ 565.481495][ T2284] gspca_stk1135: serial bus timeout: status=0x00 [ 565.481500][ T2284] gspca_stk1135: Sensor write failed [ 565.481539][ T2284] stk1135 7-1:0.0: probe with driver stk1135 failed with error -110 [ 565.794142][ T5699] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 566.002290][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.002308][ T5699] usb 1-1: Product: syz [ 566.002316][ T5699] usb 1-1: Manufacturer: syz [ 566.002324][ T5699] usb 1-1: SerialNumber: syz [ 566.091656][ T5699] usb 1-1: config 0 descriptor?? [ 566.276288][ T5699] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 566.276302][ T5699] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 566.276324][ T5699] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 566.840073][ T5699] usb 7-1: USB disconnect, device number 74 [ 567.278605][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1277'. [ 567.358970][ T5699] usb 1-1: USB disconnect, device number 88 [ 567.731118][ T5712] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 567.879647][ T5712] usb 7-1: Using ep0 maxpacket: 16 [ 567.881209][ T5712] usb 7-1: unable to get BOS descriptor or descriptor too short [ 567.881245][ T5712] usb 7-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 567.882020][ T5712] usb 7-1: config 249 has an invalid interface number: 60 but max is 0 [ 567.882034][ T5712] usb 7-1: config 249 has no interface number 0 [ 567.883605][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.883619][ T5712] usb 7-1: Product: syz [ 567.883627][ T5712] usb 7-1: Manufacturer: syz [ 567.883636][ T5712] usb 7-1: SerialNumber: syz [ 568.079747][ T5699] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 568.340164][ T5699] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 568.340956][ T5699] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.340979][ T5699] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 568.340991][ T5699] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 568.341004][ T5699] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.341024][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.779475][ T2284] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 568.799346][ T5713] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 568.929831][ T2284] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 568.930683][ T2284] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 568.930705][ T2284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 568.930720][ T2284] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.931515][ T2284] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 568.931535][ T2284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 568.931550][ T2284] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.932353][ T2284] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 568.932373][ T2284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 568.932387][ T2284] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.934652][ T2284] usb 1-1: string descriptor 0 read error: -22 [ 568.934708][ T2284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.957874][ T2284] adutux 1-1:168.0: interrupt endpoints not found [ 568.991951][ T5713] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 569.071865][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.071892][ T5713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 569.071904][ T5713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 569.071917][ T5713] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.071954][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.153004][ T2284] usb 1-1: USB disconnect, device number 89 [ 569.557267][T10745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10745 comm=syz.5.1282 [ 569.558474][ T5699] gud 6-1:1.0: HDMI-A-1: Failed to add properties (ret=-71) [ 569.558500][ T5699] gud 6-1:1.0: Failed to get connectors (error=-71) [ 569.558530][ T5699] gud 6-1:1.0: probe with driver gud failed with error -71 [ 569.612421][ T5699] usb 6-1: USB disconnect, device number 67 [ 569.659830][ T9] usb 40-1: device descriptor read/8, error -110 [ 570.052151][ T9] usb usb40-port1: attempt power cycle [ 570.199952][ T5699] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 570.534275][ T5712] ems_usb 7-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 570.618396][ T5699] usb 1-1: Using ep0 maxpacket: 8 [ 570.741516][ T5712] ems_usb 7-1:249.60: probe with driver ems_usb failed with error -22 [ 571.011637][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 571.011666][ T5699] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 571.041149][ T9] usb usb40-port1: unable to enumerate USB device [ 571.109604][ T5699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.109633][ T5699] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 571.278679][ T5712] usb 7-1: USB disconnect, device number 75 [ 571.295285][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.295303][ T5699] usb 1-1: Product: syz [ 571.295311][ T5699] usb 1-1: Manufacturer: syz [ 571.295333][ T5699] usb 1-1: SerialNumber: syz [ 571.335335][T10764] ptp ptp0: guarantee physical clock free running [ 571.365675][T10754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10754 comm=syz.3.1285 [ 571.368714][ T5713] gud 4-1:1.0: HDMI-A-1: Failed to add properties (ret=-71) [ 571.368741][ T5713] gud 4-1:1.0: Failed to get connectors (error=-71) [ 571.368784][ T5713] gud 4-1:1.0: probe with driver gud failed with error -71 [ 571.433903][T10768] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 571.433919][T10768] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 571.433984][T10768] vhci_hcd vhci_hcd.0: Device attached [ 571.467727][ T5713] usb 4-1: USB disconnect, device number 67 [ 571.481692][T10769] vhci_hcd: cannot find the pending unlink 67 [ 571.647570][ T30] audit: type=1400 audit(1790174457.108:1256): avc: denied { connect } for pid=10759 comm="syz.0.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 571.792185][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 571.807335][ T5699] usb 1-1: 0:1 : does not exist [ 571.807529][ T5699] usb 1-1: unit 5 not found! [ 571.807540][ T5699] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 571.807566][ T5699] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 571.859546][ T2284] usb 46-1: SetAddress Request (14) to port 0 [ 571.859579][ T2284] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 571.860819][ T5699] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 571.863331][ T5699] usb 1-1: USB disconnect, device number 90 [ 571.908375][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.939975][ T9] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 571.940831][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.944342][ T9] usb 6-1: config 0 descriptor?? [ 571.973716][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 571.985985][ T5712] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 572.139400][ T5712] usb 7-1: Using ep0 maxpacket: 32 [ 572.139887][ T5712] usb 7-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 572.140712][ T5712] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 78, changing to 7 [ 572.143220][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.143235][ T5712] usb 7-1: Product: 蹝樶֠晆듃㢿ƢJ [ 572.143244][ T5712] usb 7-1: Manufacturer: 촗翭낿ⱚᤝ᛻᠚搢樘䷅짉߈뽱鴎̑䰇뺟ಆ銗껐ཎꅅ俽즡⫟ꋺ甧഼郮㬺뛅⹐奵ᮞ秆栟鼵燕싲〮⡩눝玼膻ꄎ䎇鬧臯踕鄏쓊술犯翊튗わ驭⭒꼻鶌文粈ﰨ⳴䑭㢉遵蓮äꙆ鈨䕶잻쒂خ⫡ꡬ䭂뱛⍼扖ꩩ晔촞윟悚㍰鳦솎腫죌⦚ꥯᐴ舰ꋿ뼥伶䐋鞝⢮츔뎐ᕢ [ 572.143262][ T5712] usb 7-1: SerialNumber: syz [ 572.166200][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 572.178053][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 572.178065][ T9] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 572.264970][ T9] usb 6-1: USB disconnect, device number 68 [ 572.756058][T10769] vhci_hcd: connection reset by peer [ 572.788514][ T5823] vhci_hcd vhci_hcd.6: stop threads [ 572.788531][ T5823] vhci_hcd vhci_hcd.6: release socket [ 572.788560][ T5823] vhci_hcd vhci_hcd.6: disconnect device [ 572.883571][ T5712] usb 7-1: BAAD MICROPHONE c_chmask mismatch [ 573.305568][ T5712] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 573.320680][T10777] ptp ptp0: guarantee physical clock free running [ 573.344616][ T5712] usb 7-1: USB disconnect, device number 76 [ 573.484702][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.729754][ T5699] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 573.752806][T10786] ieee802154 phy0 wpan0: encryption failed: -126 [ 573.815123][ T30] audit: type=1400 audit(1790174459.278:1257): avc: denied { ioctl } for pid=10789 comm="syz.5.1297" path="socket:[51182]" dev="sockfs" ino=51182 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 573.949822][ T5699] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 573.950706][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.953524][ T5699] usb 4-1: config 0 descriptor?? [ 573.955206][ T5699] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 574.798301][T10791] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 574.847050][ T30] audit: type=1400 audit(1790174460.268:1258): avc: denied { write } for pid=10789 comm="syz.5.1297" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 574.967091][ T9] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 575.005669][ T5699] gspca_cpia1: usb_control_msg 05, error -71 [ 575.007424][ T5699] gspca_cpia1: usb_control_msg 01, error -71 [ 575.007446][ T5699] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 575.032293][ T5699] usb 4-1: USB disconnect, device number 68 [ 575.129460][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 575.365850][ T5712] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 575.520226][ T5712] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 575.521056][ T5712] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 575.521070][ T5712] usb 1-1: config 1 has no interface number 0 [ 575.522694][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.522706][ T5712] usb 1-1: Product: syz [ 575.522715][ T5712] usb 1-1: Manufacturer: syz [ 575.522723][ T5712] usb 1-1: SerialNumber: syz [ 575.578259][ T5712] usb 1-1: 3:1 : does not exist [ 575.578286][ T5712] usb 1-1: 3:2 : does not exist [ 575.737099][T10796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1298'. [ 576.901979][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 576.902005][ T9] usb 7-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 576.903340][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 576.903360][ T9] usb 7-1: can't read configurations, error -71 [ 576.944790][ T2284] usb 46-1: device descriptor read/8, error -110 [ 576.955680][T10812] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 576.955696][T10812] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 576.955773][T10812] vhci_hcd vhci_hcd.0: Device attached [ 576.999537][T10813] vhci_hcd: cannot find the pending unlink 67 [ 577.079741][ T30] audit: type=1400 audit(1790174462.538:1259): avc: denied { write } for pid=10815 comm="syz.3.1305" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 577.718146][T10818] binder: 10815:10818 ioctl c0306201 0 returned -14 [ 577.738640][T10820] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 577.738662][T10820] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 577.755027][T10820] vhci_hcd vhci_hcd.0: Device attached [ 577.756691][T10821] vhci_hcd: cannot find the pending unlink 67 [ 577.820314][ T5699] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 577.837079][ T5712] usb 44-1: SetAddress Request (10) to port 0 [ 577.837113][ T5712] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 577.960370][ T2284] usb 46-1: SetAddress Request (15) to port 0 [ 577.960407][ T2284] usb 46-1: new SuperSpeed USB device number 15 using vhci_hcd [ 577.984753][ T5699] usb 6-1: Using ep0 maxpacket: 32 [ 577.985395][ T5699] usb 6-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 578.002307][ T5699] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 78, changing to 7 [ 578.003795][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.003809][ T5699] usb 6-1: Product: 蹝樶֠晆듃㢿ƢJ䑪 [ 578.003818][ T5699] usb 6-1: Manufacturer: 촗翭낿ⱚᤝ᛻᠚搢樘䷅짉߈뽱鴎̑䰇뺟ಆ銗껐ཎꅅ俽즡⫟ꋺ甧഼郮㬺뛅⹐奵ᮞ秆栟鼵燕싲〮⡩눝玼膻ꄎ䎇鬧臯踕鄏쓊술犯翊튗わ驭⭒꼻鶌文粈ﰨ⳴䑭㢉遵蓮äꙆ鈨䕶잻쒂خ⫡ꡬ䭂뱛⍼扖ꩩ晔촞윟悚㍰鳦솎腫죌⦚ꥯᐴ舰ꋿ뼥伶䐋鞝⢮츔뎐ᕢ [ 578.003836][ T5699] usb 6-1: SerialNumber: syz [ 578.106394][ T5692] usb 1-1: USB disconnect, device number 91 [ 578.141985][ T9] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 578.228972][T10813] vhci_hcd: connection reset by peer [ 578.235600][ T50] vhci_hcd vhci_hcd.5: stop threads [ 578.235615][ T50] vhci_hcd vhci_hcd.5: release socket [ 578.235641][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 578.239094][ T5699] usb 6-1: BAAD MICROPHONE c_chmask mismatch [ 578.348123][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 578.354849][ T9] usb 7-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 578.355619][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 78, changing to 7 [ 578.359112][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.359126][ T9] usb 7-1: Product: 蹝樶֠晆듃㢿ƢJ [ 578.359135][ T9] usb 7-1: Manufacturer: 촗翭낿ⱚᤝ᛻᠚搢樘䷅짉߈뽱鴎̑䰇뺟ಆ銗껐ཎꅅ俽즡⫟ꋺ甧഼郮㬺뛅⹐奵ᮞ秆栟鼵燕싲〮⡩눝玼膻ꄎ䎇鬧臯踕鄏쓊술犯翊튗わ驭⭒꼻鶌文粈ﰨ⳴䑭㢉遵蓮äꙆ鈨䕶잻쒂خ⫡ꡬ䭂뱛⍼扖ꩩ晔촞윟悚㍰鳦솎腫죌⦚ꥯᐴ舰ꋿ뼥伶䐋鞝⢮츔뎐ᕢ [ 578.359154][ T9] usb 7-1: SerialNumber: syz [ 579.006617][T10821] vhci_hcd: connection reset by peer [ 579.145645][ T65] vhci_hcd vhci_hcd.6: stop threads [ 579.145660][ T65] vhci_hcd vhci_hcd.6: release socket [ 579.145690][ T65] vhci_hcd vhci_hcd.6: disconnect device [ 579.276598][ T9] usb 7-1: BAAD MICROPHONE c_chmask mismatch [ 579.277533][ T5699] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 579.318598][ T5699] usb 6-1: USB disconnect, device number 69 [ 579.403712][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.441545][ T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 579.506156][ T9] usb 7-1: USB disconnect, device number 78 [ 579.617756][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.769718][T10833] xt_hashlimit: size too large, truncated to 1048576 [ 579.939488][ T5699] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 580.090863][ T5699] usb 6-1: Using ep0 maxpacket: 32 [ 580.091421][ T5699] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 580.097385][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.097401][ T5699] usb 6-1: Product: syz [ 580.097409][ T5699] usb 6-1: Manufacturer: syz [ 580.097418][ T5699] usb 6-1: SerialNumber: syz [ 580.138544][ T5699] usb 6-1: config 0 descriptor?? [ 580.155001][ T5699] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 580.184223][T10842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1313'. [ 580.259243][T10841] block nbd3: shutting down sockets [ 580.290642][T10842] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 580.296193][T10842] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 580.646528][T10847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.646732][T10847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.447468][ T5699] gspca_stk1135: reg_w 0x0 err -110 [ 581.448498][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 581.448504][ T5699] gspca_stk1135: Sensor write failed [ 581.448523][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 581.448528][ T5699] gspca_stk1135: Sensor write failed [ 581.448547][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 581.448552][ T5699] gspca_stk1135: Sensor read failed [ 581.448570][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 581.448575][ T5699] gspca_stk1135: Sensor read failed [ 581.448579][ T5699] gspca_stk1135: Detected sensor type unknown (0x0) [ 581.448601][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 581.448606][ T5699] gspca_stk1135: Sensor read failed [ 581.448625][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 581.448630][ T5699] gspca_stk1135: Sensor read failed [ 581.448648][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 581.448653][ T5699] gspca_stk1135: Sensor write failed [ 581.448672][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 581.448677][ T5699] gspca_stk1135: Sensor write failed [ 581.448709][ T5699] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 582.581497][T10864] binder: 10863:10864 ioctl c0306201 0 returned -14 [ 582.682588][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 582.687031][ T5699] usb 6-1: USB disconnect, device number 70 [ 582.825624][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1320'. [ 582.869831][ T10] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 582.913843][ T10] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 582.913860][ T10] usb 4-1: config 1 has no interface number 0 [ 582.950214][ T5712] usb 44-1: device descriptor read/8, error -110 [ 583.059115][ T2284] usb 46-1: device descriptor read/8, error -110 [ 583.076383][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.076406][ T10] usb 4-1: Product: syz [ 583.076415][ T10] usb 4-1: Manufacturer: syz [ 583.076424][ T10] usb 4-1: SerialNumber: syz [ 583.194487][ T2284] usb usb46-port1: attempt power cycle [ 583.661112][ T5712] usb usb44-port1: attempt power cycle [ 583.748749][ T10] usb 4-1: 3:1 : does not exist [ 583.748765][ T10] usb 4-1: 3:2 : does not exist [ 583.795926][T10861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1318'. [ 584.074826][ T2284] usb usb46-port1: unable to enumerate USB device [ 584.350038][ T5712] usb usb44-port1: unable to enumerate USB device [ 584.419979][ T10] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 584.643900][T10873] binder: 10872:10873 ioctl c0306201 0 returned -14 [ 584.694060][ T10] usb 6-1: device descriptor read/64, error -71 [ 584.706654][ T30] audit: type=1400 audit(1790174470.168:1260): avc: denied { unmount } for pid=6968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 585.369325][ T10] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 585.466740][ T5712] usb 4-1: USB disconnect, device number 69 [ 585.501206][ T10] usb 6-1: device descriptor read/64, error -71 [ 585.588595][T10879] FAULT_INJECTION: forcing a failure. [ 585.588595][T10879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.588617][T10879] CPU: 0 UID: 0 PID: 10879 Comm: syz.3.1322 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.588633][T10879] Tainted: [L]=SOFTLOCKUP [ 585.588637][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 585.588644][T10879] Call Trace: [ 585.588648][T10879] [ 585.588653][T10879] dump_stack_lvl+0x100/0x190 [ 585.588673][T10879] should_fail_ex.cold+0x5/0xa [ 585.588689][T10879] _copy_from_user+0x2e/0xd0 [ 585.588703][T10879] do_replace+0x3f7/0x490 [ 585.588718][T10879] ? __pfx_do_replace+0x10/0x10 [ 585.588736][T10879] ? bpf_lsm_capable+0x9/0x10 [ 585.588753][T10879] ? security_capable+0x80/0x260 [ 585.588772][T10879] do_ebt_set_ctl+0x55a/0x670 [ 585.588788][T10879] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 585.588802][T10879] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 585.588817][T10879] ? nf_sockopt_find.isra.0+0x222/0x290 [ 585.588834][T10879] nf_setsockopt+0x8d/0xf0 [ 585.588851][T10879] ip_setsockopt+0xcb/0xf0 [ 585.588864][T10879] tcp_setsockopt+0xa7/0x100 [ 585.588876][T10879] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 585.588895][T10879] do_sock_setsockopt+0xf3/0x1d0 [ 585.588912][T10879] __sys_setsockopt+0x195/0x220 [ 585.588929][T10879] __x64_sys_setsockopt+0xbd/0x160 [ 585.588943][T10879] ? do_syscall_64+0xae/0x790 [ 585.588960][T10879] ? lockdep_hardirqs_on+0x7d/0x110 [ 585.588977][T10879] do_syscall_64+0x123/0x790 [ 585.588994][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.589006][T10879] RIP: 0033:0x7f0e1739e159 [ 585.589016][T10879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.589027][T10879] RSP: 002b:00007f0e182f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 585.589038][T10879] RAX: ffffffffffffffda RBX: 00007f0e17625fa0 RCX: 00007f0e1739e159 [ 585.589045][T10879] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 585.589052][T10879] RBP: 00007f0e182f7090 R08: 00000000000001c6 R09: 0000000000000000 [ 585.589058][T10879] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 585.589065][T10879] R13: 00007f0e17626038 R14: 00007f0e17625fa0 R15: 00007ffe0f5f5878 [ 585.589079][T10879] [ 585.618253][ T10] usb usb6-port1: attempt power cycle [ 585.999460][ T10] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 586.929184][T10881] ptp ptp0: guarantee physical clock free running [ 586.981223][T10884] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 586.981241][T10884] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 586.981287][T10884] vhci_hcd vhci_hcd.0: Device attached [ 586.983058][T10886] vhci_hcd: cannot find the pending unlink 67 [ 587.929829][ T5713] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 587.939365][ T5699] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 587.949463][ T2284] usb 40-1: SetAddress Request (10) to port 0 [ 587.949501][ T2284] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 588.089488][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 588.090083][ T5699] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 588.090258][ T5713] usb 4-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 588.091138][ T5713] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 78, changing to 7 [ 588.091800][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.096238][ T5699] usb 1-1: config 0 descriptor?? [ 588.099028][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.099042][ T5713] usb 4-1: Product: syz [ 588.099051][ T5713] usb 4-1: Manufacturer: 蹝樶֠晆듃㢿ƢJ䑪 [ 588.099060][ T5713] usb 4-1: SerialNumber: syz [ 588.165358][ T5699] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 588.300910][ T5699] gspca_cpia1: usb_control_msg 05, error -71 [ 588.301163][ T5699] gspca_cpia1: usb_control_msg 01, error -71 [ 588.301172][ T5699] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 588.308299][ T5699] usb 1-1: USB disconnect, device number 92 [ 588.361963][ T10] usb 6-1: device descriptor read/8, error -71 [ 588.386921][T10886] vhci_hcd: connection reset by peer [ 588.387826][ T149] vhci_hcd vhci_hcd.3: stop threads [ 588.387842][ T149] vhci_hcd vhci_hcd.3: release socket [ 588.387867][ T149] vhci_hcd vhci_hcd.3: disconnect device [ 588.433283][ T5713] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 588.502474][T10891] FAULT_INJECTION: forcing a failure. [ 588.502474][T10891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.502497][T10891] CPU: 0 UID: 0 PID: 10891 Comm: syz.5.1327 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.502513][T10891] Tainted: [L]=SOFTLOCKUP [ 588.502517][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 588.502524][T10891] Call Trace: [ 588.502528][T10891] [ 588.502533][T10891] dump_stack_lvl+0x100/0x190 [ 588.502553][T10891] should_fail_ex.cold+0x5/0xa [ 588.502569][T10891] strncpy_from_user+0x3b/0x2d0 [ 588.502591][T10891] __do_sys_add_key+0xd4/0x460 [ 588.502609][T10891] ? __pfx___do_sys_add_key+0x10/0x10 [ 588.502625][T10891] ? ksys_write+0x1ac/0x250 [ 588.502641][T10891] do_syscall_64+0x123/0x790 [ 588.502659][T10891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.502671][T10891] RIP: 0033:0x7f420fd9e159 [ 588.502681][T10891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.502691][T10891] RSP: 002b:00007f4210c14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 588.502703][T10891] RAX: ffffffffffffffda RBX: 00007f4210025fa0 RCX: 00007f420fd9e159 [ 588.502710][T10891] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000000 [ 588.502717][T10891] RBP: 00007f4210c14090 R08: fffffffffffffffe R09: 0000000000000000 [ 588.502724][T10891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.502730][T10891] R13: 00007f4210026038 R14: 00007f4210025fa0 R15: 00007ffd741081b8 [ 588.502744][T10891] [ 588.606805][ T5713] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 588.710581][ T5713] usb 4-1: USB disconnect, device number 70 [ 588.778159][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.207568][T10899] FAULT_INJECTION: forcing a failure. [ 590.207568][T10899] name failslab, interval 1, probability 0, space 0, times 0 [ 590.207590][T10899] CPU: 0 UID: 0 PID: 10899 Comm: syz.0.1329 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.207606][T10899] Tainted: [L]=SOFTLOCKUP [ 590.207610][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 590.207616][T10899] Call Trace: [ 590.207620][T10899] [ 590.207625][T10899] dump_stack_lvl+0x100/0x190 [ 590.207646][T10899] should_fail_ex.cold+0x5/0xa [ 590.207662][T10899] should_failslab+0xc2/0x120 [ 590.207677][T10899] __kmalloc_noprof+0xfc/0x840 [ 590.207690][T10899] ? io_cache_alloc_new+0x45/0xe0 [ 590.207710][T10899] io_cache_alloc_new+0x45/0xe0 [ 590.207727][T10899] __io_prep_rw+0x21d/0xfb0 [ 590.207739][T10899] ? __pfx___io_prep_rw+0x10/0x10 [ 590.207750][T10899] ? lock_acquire+0x1d1/0x380 [ 590.207761][T10899] ? rcu_lock_acquire.constprop.0+0x17/0x30 [ 590.207782][T10899] ? find_held_lock+0x2b/0x80 [ 590.207800][T10899] io_prep_rw+0x76/0x2c0 [ 590.207810][T10899] ? __pfx_io_prep_rw+0x10/0x10 [ 590.207822][T10899] ? __io_alloc_req_refill+0x2e1/0x330 [ 590.207836][T10899] io_prep_writev+0x7b/0x2e0 [ 590.207848][T10899] ? __pfx_io_prep_writev+0x10/0x10 [ 590.207864][T10899] io_submit_sqes+0xa03/0x2480 [ 590.207884][T10899] __do_sys_io_uring_enter+0xa88/0x1b10 [ 590.207900][T10899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 590.207918][T10899] ? __fget_files+0x21f/0x3d0 [ 590.207933][T10899] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 590.207949][T10899] ? fput+0x7c/0x100 [ 590.207964][T10899] ? ksys_write+0x1ac/0x250 [ 590.207975][T10899] ? __pfx_ksys_write+0x10/0x10 [ 590.207991][T10899] do_syscall_64+0x123/0x790 [ 590.208008][T10899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.208020][T10899] RIP: 0033:0x7fee6f39e159 [ 590.208030][T10899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.208041][T10899] RSP: 002b:00007fee70199028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 590.208053][T10899] RAX: ffffffffffffffda RBX: 00007fee6f625fa0 RCX: 00007fee6f39e159 [ 590.208060][T10899] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 590.208067][T10899] RBP: 00007fee70199090 R08: 0000000000000000 R09: 0000000000000000 [ 590.208073][T10899] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 590.208080][T10899] R13: 00007fee6f626038 R14: 00007fee6f625fa0 R15: 00007ffe517116d8 [ 590.208096][T10899] [ 593.021428][ T2284] usb 40-1: device descriptor read/8, error -110 [ 593.410951][ T2284] usb usb40-port1: attempt power cycle [ 593.998809][T10912] ubi: mtd0 is already attached to ubi0 [ 594.020342][ T2284] usb usb40-port1: unable to enumerate USB device [ 595.882746][T10928] ieee802154 phy0 wpan0: encryption failed: -126 [ 595.883919][T10928] ceph: No source [ 596.540307][T10930] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 598.088672][T10940] ptp ptp0: guarantee physical clock free running [ 598.959670][ T2284] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 599.110511][ T2284] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 599.111315][ T2284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.114157][ T2284] usb 4-1: config 0 descriptor?? [ 599.145178][ T2284] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 599.324576][ T2284] gspca_cpia1: usb_control_msg 05, error -71 [ 599.329021][ T2284] gspca_cpia1: usb_control_msg 01, error -71 [ 599.329034][ T2284] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 599.353008][ T2284] usb 4-1: USB disconnect, device number 71 [ 599.769933][T10954] ubi: mtd0 is already attached to ubi0 [ 599.771535][ T5606] Bluetooth: hci5: Malformed LE Event: 0x0d [ 599.839507][ T5699] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 600.652363][ T30] audit: type=1400 audit(1790174486.028:1261): avc: denied { connect } for pid=10956 comm="syz.1.1342" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 600.695107][ T5699] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 600.695815][ T5699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.695838][ T5699] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 600.695854][ T5699] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 600.695874][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.929985][ T30] audit: type=1400 audit(1790174486.398:1262): avc: denied { create } for pid=10950 comm="syz.0.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 601.133770][T10951] FAULT_INJECTION: forcing a failure. [ 601.133770][T10951] name failslab, interval 1, probability 0, space 0, times 0 [ 601.133792][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.0.1338 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.133807][T10951] Tainted: [L]=SOFTLOCKUP [ 601.133811][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 601.133818][T10951] Call Trace: [ 601.133822][T10951] [ 601.133827][T10951] dump_stack_lvl+0x100/0x190 [ 601.133848][T10951] should_fail_ex.cold+0x5/0xa [ 601.133864][T10951] should_failslab+0xc2/0x120 [ 601.133879][T10951] __kmalloc_noprof+0xfc/0x840 [ 601.133893][T10951] ? __pfx_dynamic_dname+0x10/0x10 [ 601.133905][T10951] ? tomoyo_encode2+0xfb/0x3c0 [ 601.133923][T10951] tomoyo_encode2+0xfb/0x3c0 [ 601.133938][T10951] tomoyo_encode+0x29/0x50 [ 601.133952][T10951] tomoyo_realpath_from_path+0x18c/0x690 [ 601.133970][T10951] tomoyo_path_number_perm+0x23c/0x580 [ 601.133981][T10951] ? tomoyo_path_number_perm+0x22e/0x580 [ 601.133994][T10951] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 601.134011][T10951] ? __lock_acquire+0x5c0/0x1f40 [ 601.134029][T10951] ? __fget_files+0x34/0x3d0 [ 601.134044][T10951] ? find_held_lock+0x2b/0x80 [ 601.134059][T10951] ? hook_file_ioctl_common+0x140/0x440 [ 601.134078][T10951] ? __fget_files+0x21f/0x3d0 [ 601.134095][T10951] security_file_ioctl+0xd3/0x230 [ 601.134109][T10951] __x64_sys_ioctl+0xb7/0x210 [ 601.134122][T10951] do_syscall_64+0x123/0x790 [ 601.134140][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.134152][T10951] RIP: 0033:0x7fee6f39e159 [ 601.134162][T10951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.134173][T10951] RSP: 002b:00007fee70199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.134185][T10951] RAX: ffffffffffffffda RBX: 00007fee6f625fa0 RCX: 00007fee6f39e159 [ 601.134192][T10951] RDX: 0000200000000000 RSI: 0000000040106183 RDI: 0000000000000004 [ 601.134199][T10951] RBP: 00007fee70199090 R08: 0000000000000000 R09: 0000000000000000 [ 601.134205][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.134212][T10951] R13: 00007fee6f626038 R14: 00007fee6f625fa0 R15: 00007ffe517116d8 [ 601.134226][T10951] [ 601.263875][T10951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 601.264011][ T30] audit: type=1400 audit(1790174486.738:1263): avc: denied { ioctl } for pid=10950 comm="syz.0.1338" path="socket:[52064]" dev="sockfs" ino=52064 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 601.546217][ T5699] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 601.546252][ T5699] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 601.546260][ T5699] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 601.675078][ T5699] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 601.743541][ T5699] usb 1-1: USB disconnect, device number 93 [ 601.959928][T10969] GUP no longer grows the stack in syz.5.1348 (10969): 200000004000-20000000a000 (200000002000) [ 601.959948][T10969] CPU: 0 UID: 0 PID: 10969 Comm: syz.5.1348 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.959964][T10969] Tainted: [L]=SOFTLOCKUP [ 601.959968][T10969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 601.959974][T10969] Call Trace: [ 601.959978][T10969] [ 601.959983][T10969] dump_stack_lvl+0x100/0x190 [ 601.960005][T10969] gup_vma_lookup.cold+0x83/0x96 [ 601.960022][T10969] __get_user_pages+0x252/0x2c30 [ 601.960039][T10969] ? lock_acquire+0x1d1/0x380 [ 601.960052][T10969] ? mtree_load+0xdc/0xb50 [ 601.960069][T10969] ? __pfx___get_user_pages+0x10/0x10 [ 601.960082][T10969] ? mtree_load+0x388/0xb50 [ 601.960099][T10969] ? mtree_load+0x388/0xb50 [ 601.960121][T10969] get_user_pages_remote+0x3d2/0xb10 [ 601.960135][T10969] ? mas_prev_setup.constprop.0+0x980/0x9e0 [ 601.960155][T10969] ? __pfx_get_user_pages_remote+0x10/0x10 [ 601.960174][T10969] __access_remote_vm+0x3bb/0x890 [ 601.960189][T10969] ? __pfx___access_remote_vm+0x10/0x10 [ 601.960201][T10969] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 601.960222][T10969] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 601.960236][T10969] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 601.960252][T10969] proc_pid_cmdline_read+0x552/0x9a0 [ 601.960268][T10969] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 601.960284][T10969] ? rw_verify_area+0xce/0x6d0 [ 601.960302][T10969] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 601.960317][T10969] vfs_readv+0x5d8/0x8d0 [ 601.960333][T10969] ? __pfx_vfs_readv+0x10/0x10 [ 601.960348][T10969] ? lock_acquire+0x1d1/0x380 [ 601.960360][T10969] ? __fget_files+0x34/0x3d0 [ 601.960379][T10969] ? __fget_files+0x21f/0x3d0 [ 601.960397][T10969] ? do_preadv+0x1ac/0x270 [ 601.960406][T10969] do_preadv+0x1ac/0x270 [ 601.960417][T10969] ? __pfx_do_preadv+0x10/0x10 [ 601.960431][T10969] do_syscall_64+0x123/0x790 [ 601.960458][T10969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.960471][T10969] RIP: 0033:0x7f420fd9e159 [ 601.960483][T10969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.960495][T10969] RSP: 002b:00007f4210c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 601.960507][T10969] RAX: ffffffffffffffda RBX: 00007f4210025fa0 RCX: 00007f420fd9e159 [ 601.960515][T10969] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 601.960523][T10969] RBP: 00007f420fe3506b R08: 00000000fffffff9 R09: 0000000000000000 [ 601.960531][T10969] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 601.960538][T10969] R13: 00007f4210026038 R14: 00007f4210025fa0 R15: 00007ffd741081b8 [ 601.960554][T10969] [ 603.473353][T10974] FAULT_INJECTION: forcing a failure. [ 603.473353][T10974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.473375][T10974] CPU: 0 UID: 0 PID: 10974 Comm: syz.6.1349 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.473390][T10974] Tainted: [L]=SOFTLOCKUP [ 603.473394][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 603.473401][T10974] Call Trace: [ 603.473406][T10974] [ 603.473410][T10974] dump_stack_lvl+0x100/0x190 [ 603.473431][T10974] should_fail_ex.cold+0x5/0xa [ 603.473447][T10974] strncpy_from_user+0x3b/0x2d0 [ 603.473463][T10974] do_getname+0x78/0x390 [ 603.473481][T10974] __x64_sys_linkat+0xd1/0x150 [ 603.473498][T10974] do_syscall_64+0x123/0x790 [ 603.473517][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.473529][T10974] RIP: 0033:0x7f573759e159 [ 603.473539][T10974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.473550][T10974] RSP: 002b:00007f5738385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 603.473562][T10974] RAX: ffffffffffffffda RBX: 00007f5737825fa0 RCX: 00007f573759e159 [ 603.473569][T10974] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 603.473576][T10974] RBP: 00007f5738385090 R08: 0000000000001000 R09: 0000000000000000 [ 603.473583][T10974] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 603.473590][T10974] R13: 00007f5737826038 R14: 00007f5737825fa0 R15: 00007ffcae77b2c8 [ 603.473603][T10974] [ 603.475515][ T30] audit: type=1400 audit(1790174488.928:1264): avc: denied { create } for pid=10970 comm="syz.6.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 604.484913][ T30] audit: type=1400 audit(1790174489.948:1265): avc: denied { setopt } for pid=10976 comm="syz.0.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 604.485192][ T30] audit: type=1400 audit(1790174489.948:1266): avc: denied { write } for pid=10976 comm="syz.0.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 605.705344][ T30] audit: type=1400 audit(1790174491.168:1267): avc: denied { read } for pid=10988 comm="syz.5.1350" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 606.555678][ T30] audit: type=1400 audit(1790174492.018:1268): avc: denied { mount } for pid=11001 comm="syz.0.1353" name="/" dev="autofs" ino=52432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 606.650829][ T30] audit: type=1400 audit(1790174492.118:1269): avc: denied { relabelfrom } for pid=11001 comm="syz.0.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 606.653392][ T30] audit: type=1400 audit(1790174492.118:1270): avc: denied { relabelto } for pid=11001 comm="syz.0.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 606.679682][ T5699] usb 6-1: new low-speed USB device number 75 using dummy_hcd [ 606.831200][ T5699] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 606.832402][ T5699] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 606.832431][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 606.832445][ T5699] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.832458][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 606.832473][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 606.833774][ T5699] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 606.833796][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 606.833810][ T5699] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.833823][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 606.833837][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 606.835895][ T5699] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 606.835917][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 606.835931][ T5699] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.835945][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 606.835959][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 606.867755][ T2284] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 607.051263][ T2284] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 607.054114][ T2284] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.054131][ T2284] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 607.054150][ T2284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.111408][ T2284] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 607.168450][T11008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1360'. [ 608.358129][T11020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.208980][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.225923][ T5699] usb 6-1: can't set config #168, error -71 [ 609.236514][ T5699] usb 6-1: USB disconnect, device number 75 [ 610.173586][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.173798][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.679382][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1368'. [ 610.679398][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 610.720078][ T30] audit: type=1400 audit(1790174496.178:1271): avc: denied { setattr } for pid=11031 comm="syz.1.1368" name="[io_uring]" dev="anon_inodefs" ino=52505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 612.176841][T11037] ptp ptp0: guarantee physical clock free running [ 612.275852][T11043] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1362'. [ 612.856745][ T5713] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 613.060947][ T5713] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 613.061761][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.063071][ T5713] usb 6-1: config 0 descriptor?? [ 613.066960][ T5713] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 613.269796][ T5713] gspca_cpia1: usb_control_msg 05, error -71 [ 613.271185][ T5713] gspca_cpia1: usb_control_msg 01, error -71 [ 613.271195][ T5713] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 613.277296][ T5713] usb 6-1: USB disconnect, device number 76 [ 613.419767][ T5699] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 613.570828][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 613.572399][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 613.572425][ T5699] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 613.573317][ T5699] usb 1-1: config 249 has an invalid interface number: 60 but max is 0 [ 613.573332][ T5699] usb 1-1: config 249 has no interface number 0 [ 613.574902][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.574915][ T5699] usb 1-1: Product: syz [ 613.574923][ T5699] usb 1-1: Manufacturer: syz [ 613.574930][ T5699] usb 1-1: SerialNumber: syz [ 613.950151][T11052] gadgetfs: bound to dummy_udc driver [ 614.309383][ T5713] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 614.309563][ C0] gadgetfs: connected [ 614.309663][ T5713] gadgetfs: disconnected [ 614.459800][ C0] gadgetfs: connected [ 614.460448][ T5713] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 614.460684][ T5713] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 614.460704][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.462264][ C0] gadgetfs: configuration #1 [ 615.293556][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1376'. [ 615.412859][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1376'. [ 615.412880][T11064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1376'. [ 615.449029][T11067] FAULT_INJECTION: forcing a failure. [ 615.449029][T11067] name failslab, interval 1, probability 0, space 0, times 0 [ 615.449052][T11067] CPU: 0 UID: 0 PID: 11067 Comm: syz.6.1377 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.449067][T11067] Tainted: [L]=SOFTLOCKUP [ 615.449071][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 615.449080][T11067] Call Trace: [ 615.449085][T11067] [ 615.449089][T11067] dump_stack_lvl+0x100/0x190 [ 615.449110][T11067] should_fail_ex.cold+0x5/0xa [ 615.449127][T11067] should_failslab+0xc2/0x120 [ 615.449142][T11067] __kmalloc_noprof+0xfc/0x840 [ 615.449155][T11067] ? tomoyo_encode2+0xfb/0x3c0 [ 615.449172][T11067] tomoyo_encode2+0xfb/0x3c0 [ 615.449188][T11067] tomoyo_encode+0x29/0x50 [ 615.449201][T11067] tomoyo_realpath_from_path+0x18c/0x690 [ 615.449225][T11067] tomoyo_path_number_perm+0x23c/0x580 [ 615.449237][T11067] ? tomoyo_path_number_perm+0x22e/0x580 [ 615.449250][T11067] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 615.449267][T11067] ? __lock_acquire+0x5c0/0x1f40 [ 615.449285][T11067] ? __fget_files+0x34/0x3d0 [ 615.449300][T11067] ? find_held_lock+0x2b/0x80 [ 615.449316][T11067] ? hook_file_ioctl_common+0x140/0x440 [ 615.449335][T11067] ? __fget_files+0x21f/0x3d0 [ 615.449351][T11067] security_file_ioctl+0xd3/0x230 [ 615.449365][T11067] __x64_sys_ioctl+0xb7/0x210 [ 615.449378][T11067] do_syscall_64+0x123/0x790 [ 615.449397][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.449409][T11067] RIP: 0033:0x7f573759e159 [ 615.449419][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.449430][T11067] RSP: 002b:00007f5738385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.449441][T11067] RAX: ffffffffffffffda RBX: 00007f5737825fa0 RCX: 00007f573759e159 [ 615.449449][T11067] RDX: 0000200000000140 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 615.449456][T11067] RBP: 00007f5738385090 R08: 0000000000000000 R09: 0000000000000000 [ 615.449463][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.449469][T11067] R13: 00007f5737826038 R14: 00007f5737825fa0 R15: 00007ffcae77b2c8 [ 615.449484][T11067] [ 615.550861][T11067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 616.302704][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.302932][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.349489][T11052] gadgetfs: suspended from state 3 [ 616.349522][T11052] gadgetfs: disconnected [ 616.393705][ T5713] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 616.414167][ T10] usb 2-1: USB disconnect, device number 27 [ 616.423881][ T5699] ems_usb 1-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 616.424024][ T5699] ems_usb 1-1:249.60: probe with driver ems_usb failed with error -22 [ 616.505716][ T5699] usb 1-1: USB disconnect, device number 94 [ 616.599421][ T5713] usb 7-1: Using ep0 maxpacket: 8 [ 616.601418][ T5713] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 616.619385][ T5713] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 616.619402][ T5713] usb 7-1: config 0 has no interface number 0 [ 616.657713][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.657730][ T5713] usb 7-1: Product: syz [ 616.657739][ T5713] usb 7-1: Manufacturer: syz [ 616.657762][ T5713] usb 7-1: SerialNumber: syz [ 616.698674][ T5713] usb 7-1: config 0 descriptor?? [ 617.113035][T11084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.114374][T11084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.142651][T11084] i2c i2c-0: Failed to register i2c client tcpci at 0x05 (-16) [ 617.261747][ T5699] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 617.449704][T11089] ubi: mtd0 is already attached to ubi0 [ 617.539618][ T5699] usb 6-1: Using ep0 maxpacket: 16 [ 617.544930][ T5699] usb 6-1: unable to get BOS descriptor or descriptor too short [ 617.544958][ T5699] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 617.545993][ T5699] usb 6-1: config 249 has an invalid interface number: 60 but max is 0 [ 617.546008][ T5699] usb 6-1: config 249 has no interface number 0 [ 617.547709][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.547723][ T5699] usb 6-1: Product: syz [ 617.547731][ T5699] usb 6-1: Manufacturer: syz [ 617.547740][ T5699] usb 6-1: SerialNumber: syz [ 617.622987][ T30] audit: type=1400 audit(1790174503.088:1272): avc: denied { connect } for pid=11083 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 617.667034][ T10] usb 4-1: USB disconnect, device number 72 [ 617.669515][ T10] idmouse 4-1:1.0: disconnected [ 618.782541][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.833734][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.268669][ T5713] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 619.268720][ T5713] uvcvideo 7-1:0.31: Entity type for entity Output 32774 was not initialized! [ 619.302455][ T5713] usb 7-1: USB disconnect, device number 79 [ 620.293060][ T5699] ems_usb 6-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 620.293181][ T5699] ems_usb 6-1:249.60: probe with driver ems_usb failed with error -22 [ 620.349593][ T5699] usb 6-1: USB disconnect, device number 77 [ 620.443474][T11112] FAULT_INJECTION: forcing a failure. [ 620.443474][T11112] name failslab, interval 1, probability 0, space 0, times 0 [ 620.443496][T11112] CPU: 0 UID: 0 PID: 11112 Comm: syz.5.1391 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.443511][T11112] Tainted: [L]=SOFTLOCKUP [ 620.443515][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 620.443522][T11112] Call Trace: [ 620.443526][T11112] [ 620.443531][T11112] dump_stack_lvl+0x100/0x190 [ 620.443551][T11112] should_fail_ex.cold+0x5/0xa [ 620.443567][T11112] should_failslab+0xc2/0x120 [ 620.443582][T11112] __kmalloc_noprof+0xfc/0x840 [ 620.443595][T11112] ? tomoyo_encode2+0xfb/0x3c0 [ 620.443612][T11112] tomoyo_encode2+0xfb/0x3c0 [ 620.443628][T11112] tomoyo_encode+0x29/0x50 [ 620.443642][T11112] tomoyo_realpath_from_path+0x18c/0x690 [ 620.443660][T11112] tomoyo_path_number_perm+0x23c/0x580 [ 620.443671][T11112] ? tomoyo_path_number_perm+0x22e/0x580 [ 620.443684][T11112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 620.443702][T11112] ? __lock_acquire+0x5c0/0x1f40 [ 620.443720][T11112] ? __fget_files+0x34/0x3d0 [ 620.443734][T11112] ? find_held_lock+0x2b/0x80 [ 620.443750][T11112] ? hook_file_ioctl_common+0x140/0x440 [ 620.443769][T11112] ? __fget_files+0x21f/0x3d0 [ 620.443785][T11112] security_file_ioctl+0xd3/0x230 [ 620.443799][T11112] __x64_sys_ioctl+0xb7/0x210 [ 620.443812][T11112] do_syscall_64+0x123/0x790 [ 620.443830][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.443842][T11112] RIP: 0033:0x7f420fd9e159 [ 620.443852][T11112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.443863][T11112] RSP: 002b:00007f4210c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.443875][T11112] RAX: ffffffffffffffda RBX: 00007f4210025fa0 RCX: 00007f420fd9e159 [ 620.443882][T11112] RDX: 0000200000000180 RSI: 0000000080685600 RDI: 0000000000000003 [ 620.443889][T11112] RBP: 00007f4210c14090 R08: 0000000000000000 R09: 0000000000000000 [ 620.443896][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.443902][T11112] R13: 00007f4210026038 R14: 00007f4210025fa0 R15: 00007ffd741081b8 [ 620.443916][T11112] [ 620.443926][T11112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 620.444998][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1390'. [ 620.817150][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1390'. [ 620.817173][T11110] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1390'. [ 621.154433][T11123] ubi: mtd0 is already attached to ubi0 [ 621.155770][ T5603] Bluetooth: hci3: Malformed LE Event: 0x0d [ 621.363520][T11127] xt_hashlimit: size too large, truncated to 1048576 [ 621.507531][T11132] 9p: Bad value for 'rfdno' [ 621.578814][T11132] syzkaller0: entered promiscuous mode [ 621.578829][T11132] syzkaller0: entered allmulticast mode [ 621.629442][ T9419] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 621.780282][ T9419] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 621.781888][ T9419] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.781906][ T9419] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 621.781924][ T9419] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.781938][ T9419] usb 4-1: config 0 interface 0 has no altsetting 0 [ 621.781954][ T9419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.784804][ T9419] usb 4-1: config 0 descriptor?? [ 621.785217][T11129] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 622.287833][T11137] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1399'. [ 622.293406][T11137] pim6reg: entered allmulticast mode [ 622.501048][T11140] FAULT_INJECTION: forcing a failure. [ 622.501048][T11140] name failslab, interval 1, probability 0, space 0, times 0 [ 622.501069][T11140] CPU: 0 UID: 0 PID: 11140 Comm: syz.6.1401 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.501084][T11140] Tainted: [L]=SOFTLOCKUP [ 622.501088][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 622.501095][T11140] Call Trace: [ 622.501099][T11140] [ 622.501104][T11140] dump_stack_lvl+0x100/0x190 [ 622.501126][T11140] should_fail_ex.cold+0x5/0xa [ 622.501143][T11140] should_failslab+0xc2/0x120 [ 622.501159][T11140] kmem_cache_alloc_noprof+0x92/0x6a0 [ 622.501172][T11140] ? dst_alloc+0x99/0x1a0 [ 622.501193][T11140] dst_alloc+0x99/0x1a0 [ 622.501205][T11140] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 622.501219][T11140] rt_dst_alloc+0x35/0x3a0 [ 622.501237][T11140] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 622.501253][T11140] ip_route_output_key_hash+0x118/0x2b0 [ 622.501266][T11140] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 622.501278][T11140] ? avc_has_perm_noaudit+0x11e/0x470 [ 622.501296][T11140] ? avc_has_perm_noaudit+0x11e/0x470 [ 622.501318][T11140] tcp_v4_connect+0x86b/0x1b40 [ 622.501334][T11140] ? __pfx_tcp_v4_connect+0x10/0x10 [ 622.501345][T11140] ? __lock_acquire+0x5c0/0x1f40 [ 622.501361][T11140] __inet_stream_connect+0x208/0xf90 [ 622.501380][T11140] ? lock_acquire+0x1d1/0x380 [ 622.501392][T11140] ? __pfx___inet_stream_connect+0x10/0x10 [ 622.501410][T11140] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 622.501428][T11140] ? __local_bh_enable_ip+0xa5/0x120 [ 622.501443][T11140] inet_stream_connect+0x57/0xa0 [ 622.501461][T11140] __sys_connect_file+0x146/0x1a0 [ 622.501476][T11140] __sys_connect+0x141/0x170 [ 622.501488][T11140] ? __pfx___sys_connect+0x10/0x10 [ 622.501500][T11140] ? __fget_files+0x21f/0x3d0 [ 622.501519][T11140] ? __pfx_ksys_write+0x10/0x10 [ 622.501534][T11140] __x64_sys_connect+0x72/0xb0 [ 622.501546][T11140] ? lockdep_hardirqs_on+0x7d/0x110 [ 622.501563][T11140] do_syscall_64+0x123/0x790 [ 622.501581][T11140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.501592][T11140] RIP: 0033:0x7f573759e159 [ 622.501602][T11140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.501612][T11140] RSP: 002b:00007f5738385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 622.501624][T11140] RAX: ffffffffffffffda RBX: 00007f5737825fa0 RCX: 00007f573759e159 [ 622.501631][T11140] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 622.501638][T11140] RBP: 00007f5738385090 R08: 0000000000000000 R09: 0000000000000000 [ 622.501644][T11140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.501651][T11140] R13: 00007f5737826038 R14: 00007f5737825fa0 R15: 00007ffcae77b2c8 [ 622.501665][T11140] [ 623.881774][ T5603] Bluetooth: hci5: unexpected event for opcode 0x080f [ 623.903677][ T30] audit: type=1400 audit(1790174509.368:1273): avc: denied { write } for pid=11147 comm="syz.6.1404" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 623.910765][T11150] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 623.910782][T11150] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 623.910822][T11150] vhci_hcd vhci_hcd.0: Device attached [ 624.139822][T11151] vhci_hcd: cannot find the pending unlink 67 [ 624.188019][T11153] ubi: mtd0 is already attached to ubi0 [ 624.208796][T11148] binder: 11147:11148 ioctl 80287010 200000000000 returned -22 [ 624.319458][ T5699] usb 44-1: SetAddress Request (14) to port 0 [ 624.319496][ T5699] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 624.430176][ T10] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 624.431198][ T9419] usbhid 4-1:0.0: can't add hid device: -71 [ 624.431254][ T9419] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 624.466321][ T9419] usb 4-1: USB disconnect, device number 73 [ 624.521086][T11160] FAULT_INJECTION: forcing a failure. [ 624.521086][T11160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.521108][T11160] CPU: 0 UID: 0 PID: 11160 Comm: syz.3.1406 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.521124][T11160] Tainted: [L]=SOFTLOCKUP [ 624.521128][T11160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 624.521134][T11160] Call Trace: [ 624.521138][T11160] [ 624.521143][T11160] dump_stack_lvl+0x100/0x190 [ 624.521170][T11160] should_fail_ex.cold+0x5/0xa [ 624.521186][T11160] strncpy_from_user+0x3b/0x2d0 [ 624.521202][T11160] do_getname+0x78/0x390 [ 624.521221][T11160] __x64_sys_chroot+0xaa/0x360 [ 624.521234][T11160] ? ksys_write+0x1ac/0x250 [ 624.521246][T11160] ? __pfx___x64_sys_chroot+0x10/0x10 [ 624.521264][T11160] do_syscall_64+0x123/0x790 [ 624.521281][T11160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.521296][T11160] RIP: 0033:0x7f0e1739e159 [ 624.521306][T11160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.521317][T11160] RSP: 002b:00007f0e182f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 624.521329][T11160] RAX: ffffffffffffffda RBX: 00007f0e17625fa0 RCX: 00007f0e1739e159 [ 624.521336][T11160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 624.521343][T11160] RBP: 00007f0e182f7090 R08: 0000000000000000 R09: 0000000000000000 [ 624.521350][T11160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.521357][T11160] R13: 00007f0e17626038 R14: 00007f0e17625fa0 R15: 00007ffe0f5f5878 [ 624.521371][T11160] [ 624.580963][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 624.591048][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 624.601649][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 78, changing to 7 [ 624.743888][ T10] usb 6-1: string descriptor 0 read error: -22 [ 624.743946][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.775615][ T10] usb 6-1: BAAD MICROPHONE c_chmask mismatch [ 624.868199][ T30] audit: type=1400 audit(1790174510.328:1274): avc: denied { read } for pid=11157 comm="syz.1.1393" lport=56234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 624.973593][T11151] vhci_hcd: connection reset by peer [ 624.973851][ T65] vhci_hcd vhci_hcd.5: stop threads [ 624.973866][ T65] vhci_hcd vhci_hcd.5: release socket [ 624.973888][ T65] vhci_hcd vhci_hcd.5: disconnect device [ 625.006108][T11168] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1408'. [ 625.028178][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 625.062493][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1408'. [ 625.062513][T11168] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1408'. [ 625.063704][ T10] usb 6-1: USB disconnect, device number 78 [ 625.411136][ T9419] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 625.561355][ T9419] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 625.563784][ T9419] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 625.563809][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 625.563823][ T9419] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.563837][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 625.563850][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 625.564803][ T9419] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 625.564824][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 625.564839][ T9419] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.564852][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 625.564866][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 625.565637][ T9419] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 625.565657][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 625.565672][ T9419] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.565685][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 625.565699][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 625.639359][ T5713] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 625.882591][ T5713] usb 7-1: device descriptor read/64, error -71 [ 626.244026][ T5713] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 626.549315][ T5713] usb 7-1: device descriptor read/64, error -71 [ 626.663598][ T5713] usb usb7-port1: attempt power cycle [ 626.885369][T11190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1414'. [ 627.049722][ T5713] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 627.074686][ T5713] usb 7-1: device descriptor read/8, error -71 [ 627.089440][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 627.315868][ T5713] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 627.387993][ T10] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 627.447446][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.447468][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 627.447482][ T10] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.447497][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 627.447514][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.676316][ T5713] usb 7-1: device descriptor read/8, error -71 [ 627.786937][ T10] usb 1-1: config 0 descriptor?? [ 627.787394][T11188] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 627.835631][ T5713] usb usb7-port1: unable to enumerate USB device [ 628.150895][T11197] ptp ptp0: guarantee physical clock free running [ 628.205571][ T9419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.218516][ T9419] usb 4-1: can't set config #168, error -71 [ 628.233974][ T9419] usb 4-1: USB disconnect, device number 74 [ 628.417909][ T9] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 629.340055][ T9] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 629.340999][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.344528][ T9] usb 6-1: config 0 descriptor?? [ 629.378675][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 629.419977][ T5699] usb 44-1: device descriptor read/8, error -110 [ 629.497694][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1419'. [ 629.517711][T11211] FAULT_INJECTION: forcing a failure. [ 629.517711][T11211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.517733][T11211] CPU: 0 UID: 0 PID: 11211 Comm: syz.6.1420 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.517748][T11211] Tainted: [L]=SOFTLOCKUP [ 629.517752][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 629.517759][T11211] Call Trace: [ 629.517763][T11211] [ 629.517768][T11211] dump_stack_lvl+0x100/0x190 [ 629.517790][T11211] should_fail_ex.cold+0x5/0xa [ 629.517806][T11211] _copy_from_iter+0x1f4/0x1690 [ 629.517823][T11211] ? __pfx__copy_from_iter+0x10/0x10 [ 629.517836][T11211] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 629.517853][T11211] ? lock_acquire+0x1d1/0x380 [ 629.517868][T11211] copy_page_from_iter+0x238/0x300 [ 629.517883][T11211] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 629.517902][T11211] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 629.517918][T11211] ? lock_acquire+0x1d1/0x380 [ 629.517930][T11211] ? avc_has_perm_noaudit+0x56/0x470 [ 629.517946][T11211] ? find_held_lock+0x2b/0x80 [ 629.517970][T11211] tun_get_user+0x1674/0x3cc0 [ 629.517989][T11211] ? __lock_acquire+0x5c0/0x1f40 [ 629.518001][T11211] ? __pfx_tun_get_user+0x10/0x10 [ 629.518015][T11211] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 629.518035][T11211] ? find_held_lock+0x2b/0x80 [ 629.518051][T11211] ? tun_get+0x191/0x370 [ 629.518062][T11211] ? tun_get+0x191/0x370 [ 629.518077][T11211] tun_chr_write_iter+0xdc/0x200 [ 629.518093][T11211] vfs_write+0x6af/0x1050 [ 629.518105][T11211] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 629.518120][T11211] ? __pfx_vfs_write+0x10/0x10 [ 629.518130][T11211] ? find_held_lock+0x2b/0x80 [ 629.518160][T11211] ksys_write+0x12a/0x250 [ 629.518172][T11211] ? __pfx_ksys_write+0x10/0x10 [ 629.518187][T11211] do_syscall_64+0x123/0x790 [ 629.518206][T11211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.518218][T11211] RIP: 0033:0x7f573755e98e [ 629.518227][T11211] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 629.518238][T11211] RSP: 002b:00007f5738384fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 629.518250][T11211] RAX: ffffffffffffffda RBX: 00007f57383856c0 RCX: 00007f573755e98e [ 629.518257][T11211] RDX: 000000000000003e RSI: 00002000000006c0 RDI: 00000000000000c8 [ 629.518264][T11211] RBP: 00007f5738385090 R08: 0000000000000000 R09: 0000000000000000 [ 629.518271][T11211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.518277][T11211] R13: 00007f5737826038 R14: 00007f5737825fa0 R15: 00007ffcae77b2c8 [ 629.518291][T11211] [ 629.642176][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 629.647063][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 629.647073][ T9] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 629.766320][ T9] usb 6-1: USB disconnect, device number 79 [ 629.846415][ T5699] usb usb44-port1: attempt power cycle [ 629.944765][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 629.944801][T11209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1419'. [ 630.312466][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 630.316187][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 630.316841][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 630.349505][ T10] usb 1-1: USB disconnect, device number 95 [ 630.411893][ T5699] usb usb44-port1: unable to enumerate USB device [ 630.461944][ T9] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 630.463129][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 630.463145][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 630.464550][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.464564][ T9] usb 4-1: Product: syz [ 630.464572][ T9] usb 4-1: Manufacturer: syz [ 630.464580][ T9] usb 4-1: SerialNumber: syz [ 630.468505][ T9] usb 4-1: config 0 descriptor?? [ 630.490156][T11216] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.490227][T11216] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.620574][T11223] FAULT_INJECTION: forcing a failure. [ 630.620574][T11223] name failslab, interval 1, probability 0, space 0, times 0 [ 630.620599][T11223] CPU: 0 UID: 0 PID: 11223 Comm: syz.5.1425 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.620615][T11223] Tainted: [L]=SOFTLOCKUP [ 630.620619][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 630.620626][T11223] Call Trace: [ 630.620630][T11223] [ 630.620635][T11223] dump_stack_lvl+0x100/0x190 [ 630.620655][T11223] should_fail_ex.cold+0x5/0xa [ 630.620673][T11223] should_failslab+0xc2/0x120 [ 630.620688][T11223] __kmalloc_noprof+0xfc/0x840 [ 630.620701][T11223] ? tomoyo_encode2+0xfb/0x3c0 [ 630.620718][T11223] tomoyo_encode2+0xfb/0x3c0 [ 630.620734][T11223] tomoyo_encode+0x29/0x50 [ 630.620747][T11223] tomoyo_realpath_from_path+0x18c/0x690 [ 630.620765][T11223] tomoyo_path_number_perm+0x23c/0x580 [ 630.620777][T11223] ? tomoyo_path_number_perm+0x22e/0x580 [ 630.620790][T11223] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 630.620807][T11223] ? __lock_acquire+0x5c0/0x1f40 [ 630.620826][T11223] ? __fget_files+0x34/0x3d0 [ 630.620841][T11223] ? find_held_lock+0x2b/0x80 [ 630.620856][T11223] ? hook_file_ioctl_common+0x140/0x440 [ 630.620875][T11223] ? __fget_files+0x21f/0x3d0 [ 630.620892][T11223] security_file_ioctl+0xd3/0x230 [ 630.620905][T11223] __x64_sys_ioctl+0xb7/0x210 [ 630.620918][T11223] do_syscall_64+0x123/0x790 [ 630.620936][T11223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.620948][T11223] RIP: 0033:0x7f420fd9e159 [ 630.620957][T11223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.620968][T11223] RSP: 002b:00007f4210c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.620980][T11223] RAX: ffffffffffffffda RBX: 00007f4210025fa0 RCX: 00007f420fd9e159 [ 630.620987][T11223] RDX: 0000200000000040 RSI: 0000000000002283 RDI: 0000000000000003 [ 630.620994][T11223] RBP: 00007f4210c14090 R08: 0000000000000000 R09: 0000000000000000 [ 630.621001][T11223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.621008][T11223] R13: 00007f4210026038 R14: 00007f4210025fa0 R15: 00007ffd741081b8 [ 630.621022][T11223] [ 630.621044][T11223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 630.740430][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 630.894543][T11216] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.894761][T11216] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.942740][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 630.945945][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 630.946737][ T10] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 630.946753][ T10] usb 1-1: config 0 has no interface number 0 [ 630.979911][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.979927][ T10] usb 1-1: Product: syz [ 630.979936][ T10] usb 1-1: Manufacturer: syz [ 630.979944][ T10] usb 1-1: SerialNumber: syz [ 631.012163][ T10] usb 1-1: config 0 descriptor?? [ 631.097896][ T30] audit: type=1400 audit(1790174516.558:1275): avc: denied { bind } for pid=11228 comm="syz.5.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 631.098734][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'. [ 631.389410][ T9] Error reading MAC address [ 632.200152][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.200424][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.241492][T11221] i2c i2c-0: Failed to register i2c client tcpci at 0x05 (-16) [ 632.255367][ T10] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 632.255403][ T10] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 632.283271][ T10] usb 1-1: USB disconnect, device number 96 [ 632.373599][T11239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1429'. [ 632.403592][T11240] FAULT_INJECTION: forcing a failure. [ 632.403592][T11240] name failslab, interval 1, probability 0, space 0, times 0 [ 632.403615][T11240] CPU: 0 UID: 0 PID: 11240 Comm: syz.6.1430 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.403630][T11240] Tainted: [L]=SOFTLOCKUP [ 632.403634][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 632.403640][T11240] Call Trace: [ 632.403645][T11240] [ 632.403649][T11240] dump_stack_lvl+0x100/0x190 [ 632.403670][T11240] should_fail_ex.cold+0x5/0xa [ 632.403686][T11240] should_failslab+0xc2/0x120 [ 632.403701][T11240] kmem_cache_alloc_noprof+0x92/0x6a0 [ 632.403714][T11240] ? jbd2__journal_start+0x194/0x6b0 [ 632.403730][T11240] jbd2__journal_start+0x194/0x6b0 [ 632.403745][T11240] __ext4_journal_start_sb+0x314/0x610 [ 632.403761][T11240] ? ext4_dirty_inode+0xa1/0x130 [ 632.403778][T11240] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 632.403798][T11240] ext4_dirty_inode+0xa1/0x130 [ 632.403814][T11240] ? rcu_is_watching+0x13/0xc0 [ 632.403830][T11240] __mark_inode_dirty+0x1f3/0x16e0 [ 632.403845][T11240] file_update_time_flags+0x49c/0x520 [ 632.403862][T11240] ? __pfx_down_write+0x10/0x10 [ 632.403875][T11240] kiocb_modified+0x79/0xa0 [ 632.403892][T11240] ext4_file_write_iter+0x13e7/0x1d90 [ 632.403911][T11240] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 632.403927][T11240] ? __lock_acquire+0x5c0/0x1f40 [ 632.403942][T11240] do_iter_readv_writev+0x6f7/0x930 [ 632.403961][T11240] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 632.403979][T11240] ? lock_acquire+0x1d1/0x380 [ 632.403997][T11240] vfs_writev+0x360/0xdd0 [ 632.404008][T11240] ? rcu_is_watching+0x13/0xc0 [ 632.404023][T11240] ? trace_contention_end+0x126/0x160 [ 632.404038][T11240] ? __pfx_vfs_writev+0x10/0x10 [ 632.404052][T11240] ? lock_acquire+0x1d1/0x380 [ 632.404063][T11240] ? __fget_files+0x34/0x3d0 [ 632.404083][T11240] ? __fget_files+0x21f/0x3d0 [ 632.404101][T11240] ? do_writev+0x13e/0x340 [ 632.404110][T11240] do_writev+0x13e/0x340 [ 632.404121][T11240] ? __pfx_do_writev+0x10/0x10 [ 632.404136][T11240] do_syscall_64+0x123/0x790 [ 632.404154][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.404165][T11240] RIP: 0033:0x7f573759e159 [ 632.404175][T11240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.404186][T11240] RSP: 002b:00007f57357f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 632.404197][T11240] RAX: ffffffffffffffda RBX: 00007f5737826090 RCX: 00007f573759e159 [ 632.404205][T11240] RDX: 0000000000000003 RSI: 0000200000000600 RDI: 0000000000000004 [ 632.404211][T11240] RBP: 00007f57357f6090 R08: 0000000000000000 R09: 0000000000000000 [ 632.404224][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.404231][T11240] R13: 00007f5737826128 R14: 00007f5737826090 R15: 00007ffcae77b2c8 [ 632.404245][T11240] [ 633.096277][ T30] audit: type=1400 audit(1790174518.558:1276): avc: denied { getopt } for pid=11245 comm="syz.5.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 633.127600][ T10] usb 4-1: USB disconnect, device number 75 [ 634.353993][ T5699] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 634.754952][ T5699] usb 7-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 634.812322][ T5699] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.812343][ T5699] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 634.812358][ T5699] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.812373][ T5699] usb 7-1: config 0 interface 0 has no altsetting 0 [ 634.812390][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.992956][ T5699] usb 7-1: config 0 descriptor?? [ 634.994642][T11256] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 635.100528][T11257] ptp ptp0: guarantee physical clock free running [ 635.212663][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1437'. [ 635.315154][ T30] audit: type=1800 audit(1790174520.778:1277): pid=11261 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1438" name="file1" dev="sda1" ino=2053 res=0 errno=0 [ 635.341656][ T9] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 636.340820][ T9] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 636.341730][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.345316][ T9] usb 6-1: config 0 descriptor?? [ 636.374703][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 636.448294][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 636.448316][T11263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1437'. [ 636.565423][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 636.565789][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 636.565798][ T9] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 636.593583][ T9] usb 6-1: USB disconnect, device number 80 [ 636.710839][T11270] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 636.710857][T11270] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 636.714422][T11270] vhci_hcd vhci_hcd.0: Device attached [ 636.748820][T11271] vhci_hcd: cannot find the pending unlink 67 [ 637.163048][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 637.197892][ T9419] usb 40-1: SetAddress Request (14) to port 0 [ 637.197944][ T9419] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 637.441190][ T5699] usbhid 7-1:0.0: can't add hid device: -71 [ 637.441259][ T5699] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 637.622278][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 637.679404][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 637.687262][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 78, changing to 7 [ 637.812046][ T5699] usb 7-1: USB disconnect, device number 84 [ 637.817468][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.817484][ T10] usb 4-1: Product: syz [ 637.817506][ T10] usb 4-1: Manufacturer: 蹝樶֠晆듃㢿ƢJ䑪 [ 637.817515][ T10] usb 4-1: SerialNumber: syz [ 637.874910][T11274] ptp ptp0: guarantee physical clock free running [ 637.916752][ T30] audit: type=1400 audit(1790174523.378:1278): avc: denied { write } for pid=11279 comm="syz.6.1441" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 637.945333][T11280] FAULT_INJECTION: forcing a failure. [ 637.945333][T11280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.945354][T11280] CPU: 0 UID: 0 PID: 11280 Comm: syz.6.1441 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.945370][T11280] Tainted: [L]=SOFTLOCKUP [ 637.945374][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 637.945382][T11280] Call Trace: [ 637.945386][T11280] [ 637.945391][T11280] dump_stack_lvl+0x100/0x190 [ 637.945411][T11280] should_fail_ex.cold+0x5/0xa [ 637.945427][T11280] _copy_from_user+0x2e/0xd0 [ 637.945440][T11280] memdup_user+0x6b/0xe0 [ 637.945452][T11280] strndup_user+0x78/0xe0 [ 637.945463][T11280] __x64_sys_mount+0x136/0x310 [ 637.945481][T11280] ? __pfx___x64_sys_mount+0x10/0x10 [ 637.945502][T11280] do_syscall_64+0x123/0x790 [ 637.945521][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.945533][T11280] RIP: 0033:0x7f573759e159 [ 637.945542][T11280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.945553][T11280] RSP: 002b:00007f5738385028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 637.945565][T11280] RAX: ffffffffffffffda RBX: 00007f5737825fa0 RCX: 00007f573759e159 [ 637.945572][T11280] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 637.945579][T11280] RBP: 00007f5738385090 R08: 0000200000000400 R09: 0000000000000000 [ 637.945586][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.945592][T11280] R13: 00007f5737826038 R14: 00007f5737825fa0 R15: 00007ffcae77b2c8 [ 637.945606][T11280] [ 638.129393][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 638.165590][T11271] vhci_hcd: connection reset by peer [ 638.180869][ T10] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 638.186371][ T42] vhci_hcd vhci_hcd.3: stop threads [ 638.186386][ T42] vhci_hcd vhci_hcd.3: release socket [ 638.186413][ T42] vhci_hcd vhci_hcd.3: disconnect device [ 638.286367][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 638.299978][ T9] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 638.301035][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.302270][ T9] usb 1-1: config 0 descriptor?? [ 638.303978][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 638.359791][ T10] usb 4-1: USB disconnect, device number 76 [ 639.047664][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 639.047918][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 639.047926][ T9] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 639.071632][ T9] usb 1-1: USB disconnect, device number 97 [ 639.163830][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.186069][ T5699] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 639.349293][ T5699] usb 6-1: Using ep0 maxpacket: 8 [ 639.349758][ T5699] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 639.350767][ T5699] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 639.350781][ T5699] usb 6-1: config 0 has no interface number 0 [ 639.429464][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.429482][ T5699] usb 6-1: Product: syz [ 639.429491][ T5699] usb 6-1: Manufacturer: syz [ 639.429500][ T5699] usb 6-1: SerialNumber: syz [ 639.432927][ T5699] usb 6-1: config 0 descriptor?? [ 640.629591][T11299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.629820][T11299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.632245][T11299] i2c i2c-0: Failed to register i2c client tcpci at 0x05 (-16) [ 640.790578][ T10] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 640.949448][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 640.949865][ T10] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 640.953428][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.953457][ T10] usb 1-1: Product: syz [ 640.953467][ T10] usb 1-1: Manufacturer: syz [ 640.953475][ T10] usb 1-1: SerialNumber: syz [ 640.954977][ T10] usb 1-1: config 0 descriptor?? [ 641.005595][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 641.616573][ T10] gspca_stk1135: reg_w 0x2 err -110 [ 641.617608][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 641.617614][ T10] gspca_stk1135: Sensor write failed [ 641.617633][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 641.617638][ T10] gspca_stk1135: Sensor write failed [ 641.617656][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 641.617662][ T10] gspca_stk1135: Sensor read failed [ 641.617681][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 641.617686][ T10] gspca_stk1135: Sensor read failed [ 641.617690][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 641.617712][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 641.617730][ T10] gspca_stk1135: Sensor read failed [ 641.617749][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 641.617754][ T10] gspca_stk1135: Sensor read failed [ 641.617772][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 641.617777][ T10] gspca_stk1135: Sensor write failed [ 641.617795][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 641.617799][ T10] gspca_stk1135: Sensor write failed [ 641.617835][ T10] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 642.717151][T11305] syz.1.1449 (11305) used greatest stack depth: 20232 bytes left [ 642.718313][ T9419] usb 40-1: device descriptor read/8, error -110 [ 643.087491][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.087717][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.131219][ T5699] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 643.131257][ T5699] uvcvideo 6-1:0.31: Entity type for entity Output 32774 was not initialized! [ 643.160344][ T5699] usb 6-1: USB disconnect, device number 81 [ 643.844413][ T9419] usb usb40-port1: attempt power cycle [ 643.859792][T11316] 9p: Bad value for 'rfdno' [ 644.134376][ T5699] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 644.333187][ T5699] usb 6-1: device descriptor read/64, error -71 [ 644.637226][ T5699] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 644.685847][ T9419] usb usb40-port1: unable to enumerate USB device [ 644.860935][ T5699] usb 6-1: device descriptor read/64, error -71 [ 644.863881][ T9419] usb 1-1: USB disconnect, device number 98 [ 644.971332][ T5699] usb usb6-port1: attempt power cycle [ 645.139597][ T9] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 645.290322][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 645.291168][ T9] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 645.291543][ T9] usb 7-1: config 0 has no interfaces? [ 645.293138][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.293152][ T9] usb 7-1: Product: syz [ 645.293160][ T9] usb 7-1: Manufacturer: syz [ 645.293168][ T9] usb 7-1: SerialNumber: syz [ 645.294618][ T9] usb 7-1: config 0 descriptor?? [ 645.314918][ T9419] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 645.314991][ T5699] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 645.335165][ T5699] usb 6-1: device descriptor read/8, error -71 [ 645.440661][ T9419] usb 1-1: device descriptor read/64, error -71 [ 645.514598][ T9] usb 7-1: USB disconnect, device number 85 [ 645.569411][ T5699] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 645.591913][ T5699] usb 6-1: device descriptor read/8, error -71 [ 645.701013][ T5699] usb usb6-port1: unable to enumerate USB device [ 645.892454][ T9419] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 646.019461][ T9419] usb 1-1: device descriptor read/64, error -71 [ 646.129721][ T9419] usb usb1-port1: attempt power cycle [ 646.179463][ T5713] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 646.330622][ T5713] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 646.340902][ T5713] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 646.340917][ T5713] usb 4-1: config 1 has no interface number 0 [ 646.357350][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.357366][ T5713] usb 4-1: Product: syz [ 646.357375][ T5713] usb 4-1: Manufacturer: syz [ 646.357383][ T5713] usb 4-1: SerialNumber: syz [ 646.397034][ T5713] usb 4-1: 3:1 : does not exist [ 646.397055][ T5713] usb 4-1: 3:2 : does not exist [ 646.476631][ T9419] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 646.490820][ T9419] usb 1-1: device descriptor read/8, error -71 [ 646.619451][ T5699] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 646.656868][T11338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1457'. [ 646.659110][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1460'. [ 647.319390][ T9419] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 647.340120][ T9419] usb 1-1: device descriptor read/8, error -71 [ 647.371221][ T30] audit: type=1400 audit(1790174532.838:1279): avc: denied { write } for pid=11345 comm="syz.5.1461" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 647.419496][ T5699] usb 7-1: Using ep0 maxpacket: 16 [ 647.424702][ T5699] usb 7-1: unable to get BOS descriptor or descriptor too short [ 647.424732][ T5699] usb 7-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 647.425552][ T5699] usb 7-1: config 249 has an invalid interface number: 60 but max is 0 [ 647.425565][ T5699] usb 7-1: config 249 has no interface number 0 [ 647.427147][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.427160][ T5699] usb 7-1: Product: syz [ 647.427167][ T5699] usb 7-1: Manufacturer: syz [ 647.427174][ T5699] usb 7-1: SerialNumber: syz [ 647.454518][ T9419] usb usb1-port1: unable to enumerate USB device [ 649.468245][ T5699] ems_usb 7-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 649.468369][ T5699] ems_usb 7-1:249.60: probe with driver ems_usb failed with error -22 [ 649.507043][ T5699] usb 7-1: USB disconnect, device number 86 [ 649.558707][ T5713] usb 4-1: USB disconnect, device number 77 [ 649.695657][ T30] audit: type=1400 audit(1790174535.158:1280): avc: denied { connect } for pid=11361 comm="syz.0.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 649.695927][ T30] audit: type=1400 audit(1790174535.158:1281): avc: denied { read } for pid=11372 comm="syz.3.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 649.696428][ T30] audit: type=1400 audit(1790174535.158:1282): avc: denied { write } for pid=11361 comm="syz.0.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 649.786723][ T30] audit: type=1400 audit(1790174535.248:1283): avc: denied { read } for pid=11361 comm="syz.0.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 649.787793][ T30] audit: type=1400 audit(1790174535.248:1284): avc: denied { listen } for pid=11361 comm="syz.0.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 650.391641][T11388] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1472'. [ 650.450990][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1472'. [ 650.451012][T11388] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1472'. [ 652.949501][ T9] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 652.969738][T11409] overlayfs: failed to clone upperpath [ 653.101330][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 653.102938][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 653.102962][ T9] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=fe.9d [ 653.104208][ T9] usb 6-1: config 249 has an invalid interface number: 60 but max is 0 [ 653.104222][ T9] usb 6-1: config 249 has no interface number 0 [ 653.106099][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.106113][ T9] usb 6-1: Product: syz [ 653.106122][ T9] usb 6-1: Manufacturer: syz [ 653.106130][ T9] usb 6-1: SerialNumber: syz [ 653.871754][ T30] audit: type=1400 audit(1790174539.328:1285): avc: denied { read write } for pid=11421 comm="syz.0.1477" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 653.872178][ T30] audit: type=1400 audit(1790174539.338:1286): avc: denied { open } for pid=11421 comm="syz.0.1477" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 653.878779][T11422] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1477'. [ 654.891788][T11427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.001108][ T5699] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 655.149362][ T9419] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 655.150258][ T5699] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 655.151002][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 655.151018][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 655.151036][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 655.152507][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.152519][ T5699] usb 1-1: Product: syz [ 655.152528][ T5699] usb 1-1: Manufacturer: syz [ 655.152549][ T5699] usb 1-1: SerialNumber: syz [ 655.156680][ T5699] usb 1-1: config 0 descriptor?? [ 655.319921][ T9419] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 655.320752][ T9419] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 655.320775][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 655.320788][ T9419] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 655.320801][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 655.320815][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 655.321625][ T9419] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 655.321649][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 655.321664][ T9419] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 655.321677][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 655.321691][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 655.322539][ T9419] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 655.322559][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 655.322572][ T9419] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 655.322587][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 655.322601][ T9419] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 655.327222][ T9419] usb 4-1: string descriptor 0 read error: -22 [ 655.327307][ T9419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.526280][ T9419] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 655.575810][ T5699] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 655.617496][ T5699] usb 4-1: USB disconnect, device number 78 [ 655.641617][T11430] fuse: Bad value for 'fd' [ 655.687849][ T9] ems_usb 6-1:249.60 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 655.687968][ T9] ems_usb 6-1:249.60: probe with driver ems_usb failed with error -22 [ 655.722491][ T9] usb 6-1: USB disconnect, device number 86 [ 655.821739][ T9419] usb 1-1: USB disconnect, device number 103 [ 655.975146][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1489'. [ 656.063030][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 656.063052][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1489'. [ 657.817653][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1493'. [ 658.189663][ T9] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 658.434129][ T9] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 658.434982][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.436327][ T9] usb 6-1: config 0 descriptor?? [ 658.468681][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 658.649017][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 658.655579][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 658.655591][ T9] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 658.674804][ T9] usb 6-1: USB disconnect, device number 87 [ 659.018697][ T30] audit: type=1400 audit(1790174544.478:1287): avc: denied { listen } for pid=11463 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 659.050962][ T149] IPVS: starting estimator thread 0... [ 659.075788][T11464] block2mtd: illegal erase size [ 659.087009][T11464] block2mtd: error: cannot open device | [ 659.106316][ T30] audit: type=1400 audit(1790174544.568:1288): avc: denied { read } for pid=11463 comm="syz.0.1497" name="usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 659.106350][ T30] audit: type=1400 audit(1790174544.568:1289): avc: denied { open } for pid=11463 comm="syz.0.1497" path="/dev/usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 659.160643][T11469] IPVS: using max 75 ests per chain, 180000 per kthread [ 660.147151][T11478] FAULT_INJECTION: forcing a failure. [ 660.147151][T11478] name failslab, interval 1, probability 0, space 0, times 0 [ 660.147173][T11478] CPU: 0 UID: 0 PID: 11478 Comm: syz.5.1500 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.147189][T11478] Tainted: [L]=SOFTLOCKUP [ 660.147193][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 660.147199][T11478] Call Trace: [ 660.147203][T11478] [ 660.147208][T11478] dump_stack_lvl+0x100/0x190 [ 660.147229][T11478] should_fail_ex.cold+0x5/0xa [ 660.147245][T11478] should_failslab+0xc2/0x120 [ 660.147260][T11478] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 660.147272][T11478] ? __alloc_skb+0x5b7/0x710 [ 660.147286][T11478] ? __alloc_skb+0x140/0x710 [ 660.147301][T11478] __alloc_skb+0x140/0x710 [ 660.147316][T11478] ? __alloc_skb+0x5b7/0x710 [ 660.147329][T11478] ? __pfx___alloc_skb+0x10/0x10 [ 660.147347][T11478] netlink_alloc_large_skb+0x69/0x150 [ 660.147362][T11478] netlink_sendmsg+0x680/0xda0 [ 660.147377][T11478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.147392][T11478] ? selinux_socket_sendmsg+0x198/0x2f0 [ 660.147407][T11478] ____sys_sendmsg+0xa4d/0xbe0 [ 660.147424][T11478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.147438][T11478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.147459][T11478] ? lock_acquire+0x1d1/0x380 [ 660.147471][T11478] ? get_pid_task+0x2a/0x250 [ 660.147488][T11478] ___sys_sendmsg+0x190/0x1e0 [ 660.147500][T11478] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.147511][T11478] ? get_pid_task+0x106/0x250 [ 660.147531][T11478] ? find_held_lock+0x2b/0x80 [ 660.147556][T11478] __sys_sendmsg+0x160/0x210 [ 660.147571][T11478] ? __pfx___sys_sendmsg+0x10/0x10 [ 660.147593][T11478] do_syscall_64+0x123/0x790 [ 660.147612][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.147623][T11478] RIP: 0033:0x7f420fd9e159 [ 660.147633][T11478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.147644][T11478] RSP: 002b:00007f4210c14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.147655][T11478] RAX: ffffffffffffffda RBX: 00007f4210025fa0 RCX: 00007f420fd9e159 [ 660.147663][T11478] RDX: 0000000010000050 RSI: 0000200000000140 RDI: 0000000000000003 [ 660.147669][T11478] RBP: 00007f4210c14090 R08: 0000000000000000 R09: 0000000000000000 [ 660.147676][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.147682][T11478] R13: 00007f4210026038 R14: 00007f4210025fa0 R15: 00007ffd741081b8 [ 660.147696][T11478] [ 661.079718][T11480] binder: 11479:11480 ioctl c0306201 0 returned -14 [ 662.307829][T11489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1505'. [ 662.629467][ T5699] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 662.780045][ T5699] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 662.780864][ T5699] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 662.780887][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 662.780901][ T5699] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.780914][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 662.780926][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 662.781720][ T5699] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 662.781740][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 662.781753][ T5699] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.781773][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 662.781785][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 662.782565][ T5699] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 662.782588][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 662.782603][ T5699] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.782615][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 662.782629][ T5699] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 662.785302][ T5699] usb 6-1: string descriptor 0 read error: -22 [ 662.785357][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.028896][ T5699] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 663.183387][ T5699] usb 6-1: USB disconnect, device number 88 [ 666.214733][ T30] audit: type=1400 audit(1790174551.678:1290): avc: denied { read } for pid=11512 comm="syz.6.1511" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 666.214767][ T30] audit: type=1400 audit(1790174551.678:1291): avc: denied { ioctl } for pid=11512 comm="syz.6.1511" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 666.345828][ T9419] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 666.499362][ T9419] usb 6-1: Using ep0 maxpacket: 8 [ 666.499903][ T9419] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 666.500280][ T9419] usb 6-1: config 0 has no interfaces? [ 666.508302][ T9419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.508325][ T9419] usb 6-1: Product: syz [ 666.508335][ T9419] usb 6-1: Manufacturer: syz [ 666.508343][ T9419] usb 6-1: SerialNumber: syz [ 666.556923][ T9419] usb 6-1: config 0 descriptor?? [ 666.648250][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1514'. [ 667.080966][ T9] usb 6-1: USB disconnect, device number 89 [ 669.680408][T11536] FAULT_INJECTION: forcing a failure. [ 669.680408][T11536] name failslab, interval 1, probability 0, space 0, times 0 [ 669.680431][T11536] CPU: 0 UID: 0 PID: 11536 Comm: syz.3.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.680447][T11536] Tainted: [L]=SOFTLOCKUP [ 669.680452][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 669.680458][T11536] Call Trace: [ 669.680463][T11536] [ 669.680467][T11536] dump_stack_lvl+0x100/0x190 [ 669.680487][T11536] should_fail_ex.cold+0x5/0xa [ 669.680504][T11536] should_failslab+0xc2/0x120 [ 669.680519][T11536] __kmalloc_noprof+0xfc/0x840 [ 669.680535][T11536] ? lock_acquire+0x1d1/0x380 [ 669.680547][T11536] ? lsm_blob_alloc+0x68/0x90 [ 669.680566][T11536] lsm_blob_alloc+0x68/0x90 [ 669.680582][T11536] security_perf_event_alloc+0x2a/0x2b0 [ 669.680596][T11536] perf_event_alloc+0x1bea/0x55f0 [ 669.680621][T11536] ? __pfx_perf_event_alloc+0x10/0x10 [ 669.680642][T11536] ? __pfx_ptrace_triggered+0x10/0x10 [ 669.680654][T11536] perf_event_create_kernel_counter+0x130/0x6b0 [ 669.680669][T11536] ? perf_event_create_kernel_counter+0x111/0x6b0 [ 669.680685][T11536] ptrace_register_breakpoint+0x1b5/0x1d0 [ 669.680706][T11536] ? __pfx_ptrace_register_breakpoint+0x10/0x10 [ 669.680720][T11536] ? do_raw_spin_lock+0x128/0x260 [ 669.680736][T11536] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 669.680755][T11536] ? wait_task_inactive+0x474/0x920 [ 669.680772][T11536] ? rcu_is_watching+0x13/0xc0 [ 669.680787][T11536] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 669.680803][T11536] ? lockdep_hardirqs_on+0x7d/0x110 [ 669.680821][T11536] ptrace_write_dr7+0x2b2/0x450 [ 669.680836][T11536] ? __pfx_ptrace_write_dr7+0x10/0x10 [ 669.680849][T11536] ? find_held_lock+0x2b/0x80 [ 669.680866][T11536] ? mark_held_locks+0x40/0x70 [ 669.680880][T11536] arch_ptrace+0x1aa/0x6a0 [ 669.680894][T11536] __x64_sys_ptrace+0x181/0x2a0 [ 669.680909][T11536] do_syscall_64+0x123/0x790 [ 669.680928][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.680940][T11536] RIP: 0033:0x7f0e1739e159 [ 669.680949][T11536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.680960][T11536] RSP: 002b:00007f0e182d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 669.680971][T11536] RAX: ffffffffffffffda RBX: 00007f0e17626090 RCX: 00007f0e1739e159 [ 669.680979][T11536] RDX: 0000000000000388 RSI: 00000000000003cf RDI: 0000000000000006 [ 669.680985][T11536] RBP: 00007f0e182d6090 R08: 0000000000000000 R09: 0000000000000000 [ 669.680992][T11536] R10: 0000000041d9fda7 R11: 0000000000000246 R12: 0000000000000001 [ 669.680999][T11536] R13: 00007f0e17626128 R14: 00007f0e17626090 R15: 00007ffe0f5f5878 [ 669.681013][T11536] [ 670.091512][T11536] ------------[ cut here ]------------ [ 670.091522][T11536] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 670.091528][T11536] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x6e4/0xb30, CPU#0: syz.3.1513/11536 [ 670.116571][T11536] Modules linked in: [ 670.120466][T11536] CPU: 0 UID: 0 PID: 11536 Comm: syz.3.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.131521][T11536] Tainted: [L]=SOFTLOCKUP [ 670.135817][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 670.146353][T11536] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 670.152253][T11536] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 670.171991][T11536] RSP: 0018:ffffc900035ffd80 EFLAGS: 00010206 [ 670.178047][T11536] RAX: 0000000000000003 RBX: ffffe8ffffc072c0 RCX: 0000000000000000 [ 670.186050][T11536] RDX: ffffe8ffffc07440 RSI: ffffffff81f6e0ff RDI: ffff8880387aa580 [ 670.194277][T11536] RBP: ffff8880275e9000 R08: 0000000000000005 R09: 00000000ffffffff [ 670.202252][T11536] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880275e02f0 [ 670.210224][T11536] R13: 0000000000000000 R14: ffffffff8e65a0b0 R15: ffff8880275e0330 [ 670.218172][T11536] FS: 00007f0e182d66c0(0000) GS:ffff888123b53000(0000) knlGS:0000000000000000 [ 670.227412][T11536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 670.234001][T11536] CR2: 0000000000000000 CR3: 0000000075db2000 CR4: 00000000003526f0 [ 670.242023][T11536] Call Trace: [ 670.245289][T11536] [ 670.248371][T11536] blk_mq_free_tag_set+0x354/0x550 [ 670.253523][T11536] loop_control_ioctl+0x504/0x620 [ 670.258537][T11536] ? __pfx_loop_control_ioctl+0x10/0x10 [ 670.264136][T11536] ? selinux_file_ioctl+0x13b/0x290 [ 670.269385][T11536] ? selinux_file_ioctl+0xb6/0x290 [ 670.274489][T11536] ? __pfx_loop_control_ioctl+0x10/0x10 [ 670.280110][T11536] __x64_sys_ioctl+0x18e/0x210 [ 670.284879][T11536] do_syscall_64+0x123/0x790 [ 670.289494][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.295374][T11536] RIP: 0033:0x7f0e1739e159 [ 670.299902][T11536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.319585][T11536] RSP: 002b:00007f0e182d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.327984][T11536] RAX: ffffffffffffffda RBX: 00007f0e17626090 RCX: 00007f0e1739e159 [ 670.335963][T11536] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000007 [ 670.343942][T11536] RBP: 00007f0e1743506b R08: 0000000000000000 R09: 0000000000000000 [ 670.352061][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.360030][T11536] R13: 00007f0e17626128 R14: 00007f0e17626090 R15: 00007ffe0f5f5878 [ 670.368009][T11536] [ 670.371093][T11536] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 670.378375][T11536] CPU: 0 UID: 0 PID: 11536 Comm: syz.3.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.389299][T11536] Tainted: [L]=SOFTLOCKUP [ 670.393601][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 670.403632][T11536] Call Trace: [ 670.406892][T11536] [ 670.409798][T11536] dump_stack_lvl+0x100/0x190 [ 670.414460][T11536] vpanic+0x553/0x970 [ 670.418416][T11536] ? __pfx_vpanic+0x10/0x10 [ 670.422897][T11536] panic+0xd1/0xe0 [ 670.426604][T11536] ? __pfx_panic+0x10/0x10 [ 670.430996][T11536] check_panic_on_warn.cold+0x19/0x34 [ 670.436339][T11536] ? cleanup_srcu_struct+0x6e4/0xb30 [ 670.441597][T11536] __warn.cold+0x191/0x318 [ 670.445997][T11536] __report_bug+0x30f/0x440 [ 670.450487][T11536] ? cleanup_srcu_struct+0x6e4/0xb30 [ 670.455756][T11536] ? __pfx___report_bug+0x10/0x10 [ 670.460757][T11536] ? __pfx_debug_object_deactivate+0x10/0x10 [ 670.466712][T11536] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 670.472062][T11536] ? _raw_spin_lock_irqsave+0x52/0x60 [ 670.477411][T11536] ? find_held_lock+0x2b/0x80 [ 670.482081][T11536] ? cleanup_srcu_struct+0x6e4/0xb30 [ 670.487342][T11536] report_bug+0xb3/0x220 [ 670.491568][T11536] ? cleanup_srcu_struct+0x6e4/0xb30 [ 670.496827][T11536] handle_bug+0x16a/0x2a0 [ 670.501132][T11536] exc_invalid_op+0x17/0x50 [ 670.505615][T11536] asm_exc_invalid_op+0x1a/0x20 [ 670.510450][T11536] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 670.516319][T11536] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 670.535897][T11536] RSP: 0018:ffffc900035ffd80 EFLAGS: 00010206 [ 670.541936][T11536] RAX: 0000000000000003 RBX: ffffe8ffffc072c0 RCX: 0000000000000000 [ 670.549881][T11536] RDX: ffffe8ffffc07440 RSI: ffffffff81f6e0ff RDI: ffff8880387aa580 [ 670.557834][T11536] RBP: ffff8880275e9000 R08: 0000000000000005 R09: 00000000ffffffff [ 670.565781][T11536] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880275e02f0 [ 670.573726][T11536] R13: 0000000000000000 R14: ffffffff8e65a0b0 R15: ffff8880275e0330 [ 670.581685][T11536] ? __timer_delete_sync+0x10f/0x1c0 [ 670.586949][T11536] blk_mq_free_tag_set+0x354/0x550 [ 670.592049][T11536] loop_control_ioctl+0x504/0x620 [ 670.597058][T11536] ? __pfx_loop_control_ioctl+0x10/0x10 [ 670.602578][T11536] ? selinux_file_ioctl+0x13b/0x290 [ 670.607758][T11536] ? selinux_file_ioctl+0xb6/0x290 [ 670.612846][T11536] ? __pfx_loop_control_ioctl+0x10/0x10 [ 670.618368][T11536] __x64_sys_ioctl+0x18e/0x210 [ 670.623113][T11536] do_syscall_64+0x123/0x790 [ 670.627684][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.633549][T11536] RIP: 0033:0x7f0e1739e159 [ 670.637937][T11536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.657524][T11536] RSP: 002b:00007f0e182d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.665931][T11536] RAX: ffffffffffffffda RBX: 00007f0e17626090 RCX: 00007f0e1739e159 [ 670.673888][T11536] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000007 [ 670.681848][T11536] RBP: 00007f0e1743506b R08: 0000000000000000 R09: 0000000000000000 [ 670.689818][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.697762][T11536] R13: 00007f0e17626128 R14: 00007f0e17626090 R15: 00007ffe0f5f5878 [ 670.705717][T11536] [ 670.708757][T11536] Kernel Offset: disabled [ 670.713065][T11536] Rebooting in 86400 seconds..