last executing test programs: 29m3.438487147s ago: executing program 4 (id=2229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x1, {0x2, 0xff, 0x4}, {0x2, 0xf0, 0x2}, 0xfe, 0x1}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004856}, 0x4008050) 29m3.084347611s ago: executing program 4 (id=2230): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r2, 0x8001}, 0x8) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 29m2.888312845s ago: executing program 4 (id=2231): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) bind$packet(r1, &(0x7f00000006c0)={0x11, 0x0, r3, 0x1, 0xb, 0x6, @remote}, 0x78) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0xa2, &(0x7f0000000140)=ANY=[], 0x0) 29m2.843216706s ago: executing program 4 (id=2232): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 29m2.757826972s ago: executing program 4 (id=2233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) fadvise64(r3, 0x3, 0x7, 0x5) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 29m2.624250128s ago: executing program 4 (id=2234): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r0, 0x100) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0x7, 0x101}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 29m2.453505507s ago: executing program 32 (id=2234): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r0, 0x100) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0x7, 0x101}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 12.423455163s ago: executing program 3 (id=7878): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000191004002140002"], 0x48}, 0x1, 0x0, 0x0, 0x24004894}, 0x4040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x2, 0x0) r2 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x8) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000100)={0x0, 0x2eec, 0x0, 0x0, 0x4, 0x36}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)=',\x00', &(0x7f0000000040)='msdos\x00', 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010040000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000009050c0300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0xfffa, 0x101, 0x4, 0xffff, 0x6, 0x6, 0x8, 0x3ff, 0x75, 0x2, 0x5, 0x800}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000580)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x5, 0x25d6}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000280)={r6, 0x7}, 0x8) 9.477363595s ago: executing program 3 (id=7890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) (fail_nth: 5) 8.936163788s ago: executing program 3 (id=7896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x4e4414, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) open_by_handle_at(r3, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000"], 0xfeffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x40000, 0x3, 0x80257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1, 0x2, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r13}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000002300)="dd577130195f57cdfe41a0ede5c80989d05a3a04443599fcb6b034266774eda0b5e026466467b92933f92c3f09fa2c91b1ce5cf0d6348b6ca58404382cfbe8487347339a15a8d93755bf413ab45817838be12aa4b134222a6e803b7816af", 0x5e) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) sched_setattr(r5, &(0x7f0000002200)={0x38, 0x7, 0x45, 0x6, 0x6, 0x7fffffffffffffff, 0x3, 0x5, 0x9, 0x1}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r14}, 0x8) fsopen(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) userfaultfd(0x1) 7.7667722s ago: executing program 0 (id=7907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x3f, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x4e4414, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) open_by_handle_at(r3, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000"], 0xfeffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x80257, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1, 0x2, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r12}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r13}, 0x8) fsopen(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x7, 0x0, 0x12, 0x7, 0x40, 0x4, 0x6a, 0x3, 0x7, 0x0, 0x7ffffffffffffffe}, {0x7ff, 0x1ff, 0x9, 0x8, 0xd, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xa3, 0xe, 0x9, 0xe, 0x6, 0x4}]}) userfaultfd(0x1) 7.432244778s ago: executing program 5 (id=7908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x4e4414, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) open_by_handle_at(r3, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000"], 0xfeffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x80257, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1, 0x2, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r12}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r13}, 0x8) fsopen(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x7, 0x0, 0x12, 0x7, 0x40, 0x4, 0x6a, 0x3, 0x7, 0x0, 0x7ffffffffffffffe}, {0x7ff, 0x1ff, 0x9, 0x8, 0xd, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xa3, 0xe, 0x9, 0xe, 0x6, 0x4}]}) userfaultfd(0x1) 6.560176826s ago: executing program 3 (id=7913): r0 = userfaultfd(0x81000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000043000701fefffffffcdbdf25047c000024000000280001"], 0x40}}, 0xc000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x8f, 0x420006, 0x3f15, 0x80046, 0x0, 0x1000094}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x7}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="01ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 6.308432733s ago: executing program 0 (id=7914): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000180)={"923e4f04", 0xcf26, 0x7f, 0x9, 0x7, 0x1, "3b891c293595126edc5c2616280973", "a5de06f9", "1c79f907", "8100", ["9f987a3c06b678a96ea1dd85", "201543299969d93e00c3f859", "09baa966bd305c11f2fd4e53", "af9dc80c2d9936809d486798"]}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r2, 0x1000, 0x1b}, &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'hmac(sha1-ce)\x00'}}, &(0x7f0000000a40)="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", &(0x7f0000001a40)=""/27) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) keyctl$negate(0xd, r2, 0x1, r2) landlock_restrict_self(r3, 0xe) 6.090555875s ago: executing program 5 (id=7915): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000500)={r6, 0x0, 0x400, 0x12, 0xa, 0x1}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) write$FUSE_STATFS(r7, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, r4, {{0xffffffffffffff6a, 0xb4e1, 0x6, 0x3, 0xb, 0x5, 0x400, 0x8000}}}, 0x60) io_submit(r8, 0x3, &(0x7f0000000980)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r7, &(0x7f00000000c0)='!', 0x1, 0x407f0b00}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000000340)="8661945a7ab4d8adcb49754bbb608a644c9ef6e0054b9eba0013c4a35f5f0ab7c3dbe8fb7f4db98efaabd2862d5350617567821126efa2c9d15501", 0x3b, 0x8000000000000001, 0x0, 0x1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0xf, r2, &(0x7f00000008c0), 0x0, 0x80000000, 0x0, 0x1}]) 5.831968441s ago: executing program 0 (id=7916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r3 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x204}}, 0x10) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r6, 0x0, 0x0) close(r6) recvmmsg(r4, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000140)=""/179, 0xb3}], 0x1}, 0xe99}], 0x1, 0x22, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) 4.897953994s ago: executing program 3 (id=7918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x4e4414, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) open_by_handle_at(r3, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000"], 0xfeffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000000001001c00000008000200ac1e0001"], 0x2c}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xffffffe6, 0x5, 0x40, 0x0, 0x0, 0xb49, 0x40000009, 0x2, 0x0, 0x3e}, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0xf0fa, 0x0, 0x3, 0x80257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1, 0x2, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0xffffffff, 0x367, 0x0, r13}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r14}, 0x8) fsopen(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x7, 0x0, 0x12, 0x7, 0x40, 0x4, 0x6a, 0x3, 0x7, 0x0, 0x7ffffffffffffffe}, {0x7ff, 0x1ff, 0x9, 0x8, 0xd, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xa3, 0xe, 0x9, 0xe, 0x6, 0x4}]}) 4.49126268s ago: executing program 0 (id=7919): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10) r2 = eventfd(0x5f0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x437b, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x0, 0x8}, @mss={0x2, 0x7e5c769a}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0xf}, @sack_perm], 0x8) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="9ad0", 0x2}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xd5d5d000, 0x3000, 0x8}) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xd5d5d000, 0x3000, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) (async) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) syz_usb_connect(0x1, 0x73, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xdddd1000, 0x1000, 0x8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100f3ff000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c4) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xffffffffffffff3f, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.055588482s ago: executing program 2 (id=7926): epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) mq_open(&(0x7f0000000100)='\x00', 0x800, 0x5f, &(0x7f0000000280)={0x2433, 0x90, 0x3, 0x6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d617371000000001400028008663f400000001708000140000000100900010073797a30000000000900020073797a32000000001400"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 2.945435149s ago: executing program 2 (id=7927): r0 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) waitid(0x2, r1, 0x0, 0x4, 0x0) syz_pidfd_open(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000240)=""/167) getresuid(&(0x7f0000003d80), &(0x7f0000003dc0), &(0x7f0000003e00)) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r0, 0x12) close(r4) 2.853595988s ago: executing program 3 (id=7928): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x5, 0x40019, 0x20000000, 0x4010005, 0x393a72d]}, &(0x7f0000000100)=0x54) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x4, 0x4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0}) 2.675298307s ago: executing program 5 (id=7929): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000002080)=[{0x7, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f0000000180)=""/254, 0xfe}]}, {0x9, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000480)=""/58, 0x3a}, {&(0x7f00000004c0)=""/116, 0x74}, {&(0x7f0000000540)=""/8, 0x8}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/215, 0xd7}, {&(0x7f0000000700)=""/201, 0xc9}, {&(0x7f0000000800)=""/253, 0xfd}]}, {0x1, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000009c0)=""/39, 0x27}, {&(0x7f0000000a00)=""/115, 0x73}, {&(0x7f0000000a80)=""/45, 0x2d}, {&(0x7f0000000ac0)=""/136, 0x88}, {&(0x7f0000000b80)=""/226, 0xe2}, {&(0x7f0000000c80)=""/22, 0x16}]}, {0x7fff, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000d40)=""/87, 0x57}, {&(0x7f0000000dc0)=""/249, 0xf9}]}, {0x9, 0x0, &(0x7f0000002040)=[{&(0x7f0000000f00)=""/209, 0xd1}, {&(0x7f0000001000)=""/28, 0x1c}, {&(0x7f0000001040)=""/4096, 0x1000}]}], 0x5) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0xb}}, @nested_amd_invlpga={0x17d, 0x20, {0x400000, 0x3}}, @uexit={0x0, 0x18, 0xface}], 0x70}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, 0x0, 0xface) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, 0x0, 0xffffffffffffffff) 2.318801033s ago: executing program 2 (id=7931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0x14, 0x0, 0x30, 0x19}, {0x1, 0x4000, 0x8, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x46}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x4a, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x54000, 0x41000, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0x231d7000, 0x42024, 0xb, 0x1, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x40000000000ff]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8, 0x100, 0x94, 0x7, 0x38b, 0x7f, 0x400, 0x4, 0x5, 0x800, 0x2, 0x9, 0x8000, 0x81, 0x3b], 0x100000, 0x20002}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) 1.968434235s ago: executing program 2 (id=7933): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000091}]}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x81}], 0x4, 0x12002, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.786214099s ago: executing program 5 (id=7934): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) (async) setrlimit(0x7, &(0x7f0000000400)) getrlimit(0x1, &(0x7f0000000000)) (async) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) (async) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5b2a4f9810fc5c81195554cdc"], 0xc8) dup3(r1, r0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xed3, 0x181000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) 1.652292182s ago: executing program 5 (id=7935): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8040) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000d0000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) fsopen(&(0x7f0000000000)='pstore\x00', 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 1.651798257s ago: executing program 1 (id=7936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000e00000000000000000a3c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021140000001000010000000000000000000084000a"], 0x64}}, 0x0) 1.574995196s ago: executing program 1 (id=7937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x8, 0x3, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x9, 0x5, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x6, 0x5, 0x2, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r5, r6], 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101900) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r11, 0xc01c64a3, &(0x7f0000000600)={0x3, r12, 0xfffffffa, 0x4, 0xb, 0x1fd}) ioctl$DRM_IOCTL_MODE_CURSOR(r11, 0xc01c64a3, &(0x7f0000001880)={0x3, r12, 0xfff, 0x3ff, 0x2, 0x944}) r13 = syz_open_dev$vbi(&(0x7f0000000a80), 0x3, 0x2) io_setup(0x6, &(0x7f0000000000)=0x0) r15 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/sync_on_suspend', 0x183281, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) io_submit(r14, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r15, &(0x7f0000000100)='9', 0x20000108}]) ioctl$VIDIOC_G_SLICED_VBI_CAP(r13, 0xc0745645, &(0x7f0000000ac0)={0x5, [0x8, 0x9, 0x7, 0x3, 0x3, 0x9, 0x8, 0x8, 0x9, 0x1ff, 0x8, 0xa34, 0x0, 0x5, 0x4, 0xaad, 0x8, 0xffff, 0x8, 0x43b8, 0x6, 0x1, 0x5, 0x9, 0x1698, 0x6, 0x8, 0x40, 0x3, 0xf7, 0x7, 0x0, 0x5, 0x81, 0x2, 0x8f, 0x7, 0xfce, 0xc, 0x3, 0x1, 0x2, 0x6ae5, 0x7c, 0x1ff, 0xfff8, 0xfff9, 0x4], 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000480)=[r1, r2, r3, r6, 0x0, 0x0, r8, r10], 0x8, r12, r16, 0x0, 0x1, 0x8, 0x182e2976, {0x3, 0x1, 0xf075, 0x4, 0x5, 0xfff, 0xff, 0x4, 0x9, 0x2, 0x8, 0x2, 0x6, 0xfffffff9, "3af9d373a79d70eb3d8bfde91096402d7a5db4e5954417da0161e974a3120de0"}}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000104010400000000000000000000000005000100de250000"], 0x1c}}, 0x0) r17 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r17, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) 1.468689266s ago: executing program 2 (id=7938): getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) waitid(0x2, r0, 0x0, 0x4, 0x0) syz_pidfd_open(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000240)=""/167) 1.332147672s ago: executing program 0 (id=7939): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x1000000000000000, 0x0, 0x20000000}, 0x800) r1 = syz_io_uring_setup(0x259a, &(0x7f0000000000)={0x0, 0xa550, 0x800, 0x1, 0x153}, &(0x7f0000000300), &(0x7f00000000c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f0000000080), 0x0, 0x400a3, 0x20000bfe) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r3, 0xffffffffffffffff, 0xe}, 0x14) connect$inet(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semop(r4, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r4, 0x2, 0xf, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) 1.161242828s ago: executing program 1 (id=7940): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) close_range(r0, 0xffffffffffffffff, 0x7d0) 908.614172ms ago: executing program 1 (id=7941): close(0x3) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000400)={0x100401, 0x0, 0x4, {0xa, @pix_mp={0x5, 0x1, 0x56595559, 0x3, 0xa, [{}, {0x32f, 0x20ae4}, {0x0, 0x3}, {0x9, 0x8}, {0x8fe, 0x8}, {0x5, 0xffffffff}, {0x4, 0x7a}, {0x1ff, 0x9}], 0x5, 0xfc, 0x7, 0x2, 0x1}}, 0x9}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x3, [0x2, 0x5, 0x6, 0xe9bb, 0x8, 0xfff8, 0xd045, 0x6, 0x3, 0x3, 0x2, 0x5268, 0x1, 0x1, 0x1, 0x10, 0x8, 0x4, 0x2, 0x7, 0xb6, 0x3, 0x2, 0x76, 0x3, 0x40, 0x800, 0x7ff, 0xc, 0xad53, 0x2, 0x6, 0x8, 0x81, 0x9, 0x800, 0x2, 0x80, 0xdc58, 0x67d1, 0x6, 0x1000, 0xfc01, 0xfffe, 0x1, 0x5, 0x101, 0xe], 0xc}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000640)={0x0, 0xc0, "d3e58d7b86c8e057477eadda8fd4c4609706f8e8327a8d3dc6a4a79bf350bd76977e575040f852eb63d8bcdc7e0544d331c02158a068ffd73f600ab9da099064612a04e70e3d34ce16de1c563c2121bd4014b7b20a30e322c2761c963365e7751f7dfa9a9496127e709621323e253ad969e1a668ac4c26ba891141ec735e629015f9535e0cea5276706eaaeb8ad4cfbafbd541c90533f52eb7e516060cd57bb6e87f51634abfd0c690feda49edb1eafd5a220ce931a87c3f8bdea50058b74402"}, &(0x7f0000000740)=0xc8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000980)={r3, 0xec, "dd92cf9ccf01f0a6fd1fb881a029b6949c7c9e36492a968f3fa678fd3c14a40b55ae9e7e426afdca2224bb960c5a49a13f47db3e869a378fcbeecd1b37bbf15f279d2a5bf61bc5cfe997959263c50be4243b35ef49472088cf5bcca77bad191e64e842ce4fd08099084d9dac8c6d88b98d1f4933b3b26ae4dec1103efcbe5379cc2983d874cc50f3ed99b4b914d93279dc7b4d1cd39d08c5df1608ef2c2c15000730738c056748402b2cc175ab70e4e41220ab7d91aa373740256e279d6f05ee0392de3267c28506566a20d8780720ab5cb450a5b4df0bfd233d5d3037f9fafe8e137f53b0aba7848912e4e1"}, &(0x7f0000000a80)=0xf4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x80000001, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0xa2040, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) ioctl$TIOCGPTPEER(r6, 0x5441, 0x2185) fcntl$setstatus(r7, 0x4, 0x102800) close_range(r5, r6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x207, 0x10, 0x0, 0xe, 0x7, 0x1}}, {0x6, 0x2, [0xb867]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008041}, 0x31c0fa0313db4b5b) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newtclass={0x48, 0x28, 0x400, 0x70bd27, 0x7, {0x0, 0x0, 0x0, r9, {0x8, 0xd}, {0xb, 0xa}, {0xd, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xa}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x48}}, 0x8000) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210fff000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd0000000c0001000d0c100000000000224e0000", 0xb7}], 0x1) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r11 = eventfd(0x6) io_cancel(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0xff, r7, &(0x7f0000000340)="8c9123b50eb1708c70dcff17910901f5e1c440d8dc1f41f4bae2c4b85a116012df6c247f88307f47ffda087b8c9627f233bdaeea06c1bdabdd5514f4318751b24bf380591b03a7483a8a6d0485ad882841687d6acd7db99e669744c2d2593b2e096cb078b38e173a2bdc75920fa5338d4477889e58060f152944bcefca4f0fdd", 0x80, 0x4, 0x0, 0x1, r11}, &(0x7f0000000540)) 799.917578ms ago: executing program 1 (id=7942): r0 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) waitid(0x2, r1, 0x0, 0x4, 0x0) syz_pidfd_open(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000240)=""/167) getresuid(&(0x7f0000003d80), &(0x7f0000003dc0), &(0x7f0000003e00)) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r0, 0x12) 591.782299ms ago: executing program 2 (id=7943): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r4 = syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r3], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close(0x5) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r6 = dup(r5) syz_usb_control_io$uac3(r4, &(0x7f0000000980)={0x14, &(0x7f0000000100)={0x0, 0xb, 0x61, {0x61, 0x6, "466914f5f607eae0c5c9553e6cf035ec0061f477d9e59bdd8266317a5c6e4ef26f9419775f5b13e654a42c9aa50506adc1f1801bdb801a4cf5c0f66227ce437e7eb55411133779dbf4b2ec3146d2a15a1e2878214577036d4032809139bd3c"}}, &(0x7f0000000880)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "6559f746c4e89a18d406334c068da801c37c2a5dc757c0f2c8156147fdaee845d7daefb1811267dccf4497252aeba4fa92e7448e22cff0336b8431c99974a17203d2e947c9a08bfa6e7d8651a118073a2f4611950107770db94dd6a4dd67e3e81503f36f02583fda4d05b777f8dbc95a28a5f3ee566fd1068bbc514f30c65af6cea254519d99b41abc3ec4de2dfb416f90e13c88e8125a9aa833c171fb4b6235a3ec5a30e38648952ab28881b156d0712693d138a6159ad7c5b5652c6d1d2d04df99abc60f13c46a6d4af5c1a7bd33b4fe7e6bfdb3969ce85e07bf96671a6178f71e00e37216dc340a71ec2658cecf9e4b3c621982c5ee1e"}}}, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x20, 0x17, 0x76, "52a0c4e6a69d9ffe4c22970a00cb0a744a6aa56fdf8ed179e39db2efe3a3e7e3095f3f635814a1ab56853155f65f4f02858dcddb7b977309ce262c2f8da4e25a270d60a44d15b605a4138f8d3a344ca1bd3abfae51e7c9afd7ec0e6e002b989e23dfc5bb3af9285e38b2ad2fac6606643ec6f5d2ff24"}, &(0x7f0000000a40)={0x0, 0xa, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000ac0)={0x20, 0x81, 0x2, "4f89"}, &(0x7f0000000b00)={0x20, 0x82, 0x3, "8bb43e"}, &(0x7f0000000b40)={0x20, 0x83, 0x3, "9a4186"}, &(0x7f0000000b80)={0x20, 0x84, 0x2, "c295"}, &(0x7f0000000bc0)={0x20, 0x85, 0x3, "b3d54a"}}) (async) fallocate(r6, 0x10, 0x0, 0x1062200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x1005, 0xffff2d37, 0xffffff01, 0x6, 0x10000003, 0x5, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xb, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0x1000, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x5, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2be, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x26, 0x3, 0xa7e, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000045, 0x5f31, 0x1000d, 0x4e0, 0x1, 0x4, 0x3, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0xe, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x80005, 0x8, 0x1ef, 0x22, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x2, 0x2, 0x3, 0x2000000b, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x6, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x4002, 0x3, 0x7fe, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x40000007, 0x20000b, 0x5, 0x938, 0xfffffbff, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x54, 0x5, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xfffe, 0xa620, 0x1, 0x78b, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0xfffffffd, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r7, 0x900000}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x80001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "c36a00", "569e7cd8d807df37423c01846e7740c1", "08a0cbda", "8dd69cc7be70a202"}, 0x28) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2800003, 0x12, 0xffffffffffffffff, 0x4000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "49bcc291f19eee45", "5c6495997b26a2da703d7be911a2a22f", "0016f4ff", "29bd01367eea4fc2"}, 0x28) 396.391868ms ago: executing program 0 (id=7944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x4e4414, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x4, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) open_by_handle_at(r3, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000"], 0xfeffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x80257, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1, 0x2, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r12}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f00000002c0)={0x20, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r13}, 0x8) fsopen(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x7, 0x0, 0x12, 0x7, 0x40, 0x4, 0x6a, 0x3, 0x7, 0x0, 0x7ffffffffffffffe}, {0x7ff, 0x1ff, 0x9, 0x8, 0xd, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xa3, 0xe, 0x9, 0xe, 0x6, 0x4}]}) userfaultfd(0x1) 16.682913ms ago: executing program 1 (id=7945): openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10d240, 0x0, 0x2}, 0x18) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x100b7c, 0x0, 0x0, 0x807, 0x0, 0x0, 0x0, 0x118, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0xffffffff, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x6000, 0x1, r3, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000180)=[0xee00, 0x0, 0xee01, 0xee01, 0x0, 0xee00]) r5 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)="47181f988989f25fff7f0000", 0xc, 0xffffffffffffffff) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3ffffffffffde, {0x0, 0x200000000, 0x8000001, 0x4, 0x6, 0x0, {0xfffffffffffffffc, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r9, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0xc0840, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@uid_eq={'uid', 0x3d, r6}}, {@obj_role={'obj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@euid_gt={'euid>', r9}}, {@smackfsfloor={'smackfsfloor', 0x3d, '{!'}}, {@obj_type={'obj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x1000}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@audit}]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003a00010027bd700004000000010040000800ec000841"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x24008094) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) inotify_init() lremovexattr(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') 0s ago: executing program 5 (id=7946): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x28101) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0xfdfdffff}) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c00000039930b0058dbf09108dbdf250f0000000800078004000280"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r2 = io_uring_setup(0xfe2, &(0x7f00000003c0)={0x0, 0xae4e, 0x1, 0x0, 0xa1}) r3 = io_uring_setup(0x654e, &(0x7f0000000200)={0x0, 0x46fc, 0x1, 0x3, 0x2f, 0x0, r2}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_required={0x3, 0xf}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x250, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r4 = syz_open_dev$vcsa(&(0x7f0000000340), 0x8ce5, 0x280) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x1f) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000880)={0x8, 0x0, &(0x7f0000000100)=[@release={0x40046306, 0xffffffff}], 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000380)=0x2) kernel console output (not intermixed with test programs): obability 0, space 0, times 0 [ 2358.394181][ T2360] CPU: 1 UID: 0 PID: 2360 Comm: syz.0.7682 Tainted: G L syzkaller #0 PREEMPT(full) [ 2358.394210][ T2360] Tainted: [L]=SOFTLOCKUP [ 2358.394216][ T2360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2358.394226][ T2360] Call Trace: [ 2358.394233][ T2360] [ 2358.394240][ T2360] dump_stack_lvl+0xe8/0x150 [ 2358.394269][ T2360] should_fail_ex+0x40c/0x560 [ 2358.394294][ T2360] _copy_to_user+0x31/0xb0 [ 2358.394320][ T2360] simple_read_from_buffer+0xe1/0x170 [ 2358.394368][ T2360] proc_fail_nth_read+0x1bb/0x230 [ 2358.394402][ T2360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2358.394427][ T2360] ? rw_verify_area+0x24a/0x4c0 [ 2358.394451][ T2360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2358.394472][ T2360] vfs_read+0x213/0xa80 [ 2358.394503][ T2360] ? __pfx___mutex_lock+0x10/0x10 [ 2358.394527][ T2360] ? __pfx_vfs_read+0x10/0x10 [ 2358.394551][ T2360] ? __fget_files+0x2a/0x420 [ 2358.394574][ T2360] ? __fget_files+0x3a2/0x420 [ 2358.394601][ T2360] ? __fget_files+0x2a/0x420 [ 2358.394629][ T2360] ksys_read+0x150/0x270 [ 2358.394655][ T2360] ? __pfx_ksys_read+0x10/0x10 [ 2358.394685][ T2360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2358.394704][ T2360] do_syscall_64+0x174/0x580 [ 2358.394725][ T2360] ? trace_irq_disable+0x3b/0x140 [ 2358.394745][ T2360] ? clear_bhb_loop+0x70/0xc0 [ 2358.394766][ T2360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2358.394783][ T2360] RIP: 0033:0x7fcd0835e90e [ 2358.394800][ T2360] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2358.394814][ T2360] RSP: 002b:00007fcd09192fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2358.394832][ T2360] RAX: ffffffffffffffda RBX: 00007fcd091936c0 RCX: 00007fcd0835e90e [ 2358.394844][ T2360] RDX: 000000000000000f RSI: 00007fcd091930a0 RDI: 0000000000000004 [ 2358.394855][ T2360] RBP: 00007fcd09193090 R08: 0000000000000000 R09: 0000000000000000 [ 2358.394866][ T2360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2358.394875][ T2360] R13: 00007fcd08626038 R14: 00007fcd08625fa0 R15: 00007fcd0874fa48 [ 2358.394904][ T2360] [ 2358.665382][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2358.680784][ T2362] Failed to initialize the IGMP6 autojoin socket (err -23) [ 2358.831602][ T2366] FAULT_INJECTION: forcing a failure. [ 2358.831602][ T2366] name failslab, interval 1, probability 0, space 0, times 0 [ 2358.845755][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2358.866705][ T2366] CPU: 0 UID: 0 PID: 2366 Comm: syz.1.7685 Tainted: G L syzkaller #0 PREEMPT(full) [ 2358.866731][ T2366] Tainted: [L]=SOFTLOCKUP [ 2358.866738][ T2366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2358.866747][ T2366] Call Trace: [ 2358.866754][ T2366] [ 2358.866762][ T2366] dump_stack_lvl+0xe8/0x150 [ 2358.866789][ T2366] should_fail_ex+0x40c/0x560 [ 2358.866814][ T2366] should_failslab+0xa8/0x100 [ 2358.866837][ T2366] __kmalloc_noprof+0xfe/0x720 [ 2358.866858][ T2366] ? tomoyo_encode+0x2ad/0x570 [ 2358.866874][ T2366] ? tomoyo_encode+0x2ad/0x570 [ 2358.866895][ T2366] tomoyo_encode+0x2ad/0x570 [ 2358.866916][ T2366] tomoyo_realpath_from_path+0x5fa/0x640 [ 2358.866942][ T2366] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2358.866965][ T2366] tomoyo_path_number_perm+0x246/0x5f0 [ 2358.866989][ T2366] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2358.867010][ T2366] ? __lock_acquire+0x683/0x2cf0 [ 2358.867036][ T2366] ? taprio_dequeue+0x26/0x540 [ 2358.867180][ T2366] ? hook_file_ioctl+0x1f0/0x5f0 [ 2358.867221][ T2366] ? __fget_files+0x2a/0x420 [ 2358.867244][ T2366] ? __fget_files+0x2a/0x420 [ 2358.867263][ T2366] ? __fget_files+0x3a2/0x420 [ 2358.867281][ T2366] ? __fget_files+0x2a/0x420 [ 2358.867304][ T2366] security_file_ioctl+0xc3/0x2a0 [ 2358.867328][ T2366] __se_sys_ioctl+0x47/0x170 [ 2358.867344][ T2366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2358.867362][ T2366] do_syscall_64+0x174/0x580 [ 2358.867385][ T2366] ? clear_bhb_loop+0x70/0xc0 [ 2358.867406][ T2366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2358.867422][ T2366] RIP: 0033:0x7fa89df9dd6b [ 2358.867439][ T2366] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 2358.867454][ T2366] RSP: 002b:00007fa89ee2a450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2358.867472][ T2366] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fa89df9dd6b [ 2358.867484][ T2366] RDX: 00007fa89ee2aa90 RSI: 000000008138ae83 RDI: 0000000000000005 [ 2358.867496][ T2366] RBP: ffffffffffffffff R08: 0000000000000001 R09: 000000000000000a [ 2358.867506][ T2366] R10: ffffffffffffffff R11: 0000000000000246 R12: 00000000fec00000 [ 2358.867518][ T2366] R13: 00007fa89ee2abd0 R14: 0000200000018000 R15: 0000000000000018 [ 2358.867545][ T2366] [ 2358.868647][ T2366] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2358.869675][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2359.061525][ T9] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 2359.184522][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2359.208334][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2359.241050][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.249923][ T9] usb 3-1: Product: syz [ 2359.258110][ T9] usb 3-1: Manufacturer: syz [ 2359.271188][ T9] usb 3-1: SerialNumber: syz [ 2359.362433][ T2376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2359.377470][ T2376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2359.818061][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2359.840552][ T9] usb 3-1: selecting invalid altsetting 1 [ 2359.849890][ T9] snd-usb-caiaq 3-1:1.0: can't set alt interface. [ 2359.868151][ T9] usb 3-1: unable to init card! (ret=-5) [ 2359.878779][ T9] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 2359.900121][ T9] usb 3-1: selecting invalid altsetting 1 [ 2359.906441][ T9] snd-usb-caiaq 3-1:1.1: can't set alt interface. [ 2359.917566][ T9] usb 3-1: unable to init card! (ret=-5) [ 2359.928366][ T9] snd-usb-caiaq 3-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 2359.967617][ T9] usb 3-1: USB disconnect, device number 22 [ 2360.014542][ T1744] udevd[1744]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2360.086868][ T2380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7690'. [ 2360.336861][ T30] audit: type=1326 audit(1786666281.469:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2381 comm="syz.1.7692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2360.400146][ T30] audit: type=1326 audit(1786666281.469:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2381 comm="syz.1.7692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2360.427662][ T30] audit: type=1326 audit(1786666281.469:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2381 comm="syz.1.7692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2360.454972][ T30] audit: type=1326 audit(1786666281.469:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2381 comm="syz.1.7692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2360.490663][ T30] audit: type=1326 audit(1786666281.469:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2381 comm="syz.1.7692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2360.515804][ T30] audit: type=1326 audit(1786666281.469:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2381 comm="syz.1.7692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2360.579920][ T30] audit: type=1326 audit(1786666281.469:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2381 comm="syz.1.7692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2360.615130][ T30] audit: type=1326 audit(1786666281.479:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2381 comm="syz.1.7692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2360.652512][ T30] audit: type=1326 audit(1786666281.479:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2381 comm="syz.1.7692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2361.014352][ T2399] fuse: Unknown parameter 'root000000G00040000' [ 2361.348013][ T9895] net_ratelimit: 11 callbacks suppressed [ 2361.348030][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2361.368407][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2361.979708][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2361.994125][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2362.513628][ T2414] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 2362.582879][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2362.597318][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2363.110502][ T2428] FAULT_INJECTION: forcing a failure. [ 2363.110502][ T2428] name failslab, interval 1, probability 0, space 0, times 0 [ 2363.135489][ T1839] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2363.150160][ T1839] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2363.186726][ T2428] CPU: 0 UID: 0 PID: 2428 Comm: syz.5.7701 Tainted: G L syzkaller #0 PREEMPT(full) [ 2363.186751][ T2428] Tainted: [L]=SOFTLOCKUP [ 2363.186757][ T2428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2363.186765][ T2428] Call Trace: [ 2363.186771][ T2428] [ 2363.186779][ T2428] dump_stack_lvl+0xe8/0x150 [ 2363.186806][ T2428] should_fail_ex+0x40c/0x560 [ 2363.186830][ T2428] should_failslab+0xa8/0x100 [ 2363.186853][ T2428] __kmalloc_noprof+0xfe/0x720 [ 2363.186874][ T2428] ? tomoyo_encode+0x2ad/0x570 [ 2363.186889][ T2428] ? tomoyo_encode+0x2ad/0x570 [ 2363.186911][ T2428] tomoyo_encode+0x2ad/0x570 [ 2363.186933][ T2428] tomoyo_realpath_from_path+0x5fa/0x640 [ 2363.186958][ T2428] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2363.186980][ T2428] tomoyo_path_number_perm+0x246/0x5f0 [ 2363.187004][ T2428] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2363.187024][ T2428] ? __lock_acquire+0x683/0x2cf0 [ 2363.187057][ T2428] ? hook_file_ioctl+0x1f0/0x5f0 [ 2363.187098][ T2428] ? __fget_files+0x2a/0x420 [ 2363.187119][ T2428] ? __fget_files+0x2a/0x420 [ 2363.187137][ T2428] ? __fget_files+0x3a2/0x420 [ 2363.187155][ T2428] ? __fget_files+0x2a/0x420 [ 2363.187177][ T2428] security_file_ioctl+0xc3/0x2a0 [ 2363.187199][ T2428] __se_sys_ioctl+0x47/0x170 [ 2363.187223][ T2428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2363.187241][ T2428] do_syscall_64+0x174/0x580 [ 2363.187264][ T2428] ? clear_bhb_loop+0x70/0xc0 [ 2363.187285][ T2428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2363.187301][ T2428] RIP: 0033:0x7fb30df9e0d9 [ 2363.187316][ T2428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2363.187328][ T2428] RSP: 002b:00007fb30ef05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2363.187346][ T2428] RAX: ffffffffffffffda RBX: 00007fb30e225fa0 RCX: 00007fb30df9e0d9 [ 2363.187358][ T2428] RDX: 0000200000000000 RSI: 000000004004af61 RDI: 0000000000000003 [ 2363.187368][ T2428] RBP: 00007fb30ef05090 R08: 0000000000000000 R09: 0000000000000000 [ 2363.187378][ T2428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2363.187387][ T2428] R13: 00007fb30e226038 R14: 00007fb30e225fa0 R15: 00007fb30e34fa48 [ 2363.187412][ T2428] [ 2363.189318][ T2428] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2363.681410][ T2432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2363.695466][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2363.709358][ T2432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2363.709840][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2363.750084][ T2432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2363.781882][ T2432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2364.516906][ T2468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2364.528318][ T2468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2364.536145][ T2467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2364.549170][ T2467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2364.913028][ T2480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2364.927058][ T2480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2364.940551][ T2480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2364.949362][ T2480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2365.130250][ T2484] dlm: Unknown command passed to DLM device : 3 [ 2365.130250][ T2484] [ 2365.977263][ T2503] netlink: 'syz.3.7719': attribute type 2 has an invalid length. [ 2366.055693][ T2503] netlink: 'syz.3.7719': attribute type 7 has an invalid length. [ 2366.332504][ T2503] Uý: entered promiscuous mode [ 2366.362975][ T9895] net_ratelimit: 8 callbacks suppressed [ 2366.362990][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2366.382953][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2366.522782][T29930] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2366.673622][T29930] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 2366.689168][ T2524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2366.701321][T29930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 2366.706789][ T2524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2366.726508][ T2526] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2366.733037][ T2526] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2366.740821][ T2524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2366.749949][T29930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2366.749997][T29930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.769175][T29930] usb 3-1: config 0 descriptor?? [ 2366.798894][ T2529] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 2366.803877][ T2524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2366.805415][ T2529] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2366.831758][ T2526] vhci_hcd vhci_hcd.0: Device attached [ 2366.852998][ T2532] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 2366.859522][ T2532] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2366.883002][ T2529] vhci_hcd vhci_hcd.0: Device attached [ 2366.891649][ T2532] vhci_hcd vhci_hcd.0: Device attached [ 2366.931227][ T2526] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(5) [ 2366.937775][ T2526] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2366.955513][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2366.969896][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2367.012277][ T2526] vhci_hcd vhci_hcd.0: Device attached [ 2367.020589][ T2529] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 2367.027199][ T2529] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2367.052895][ T2529] vhci_hcd vhci_hcd.0: Device attached [ 2367.073136][ T2526] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(11) [ 2367.079743][ T2526] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2367.102820][ T5701] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 2367.123225][ T2529] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(14) [ 2367.129838][ T2529] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2367.142221][ T2529] vhci_hcd vhci_hcd.0: Device attached [ 2367.151348][ T2526] vhci_hcd vhci_hcd.0: Device attached [ 2367.161710][ T2529] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(18) [ 2367.168325][ T2529] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2367.182910][ T2529] vhci_hcd vhci_hcd.0: Device attached [ 2367.198760][ T2526] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 2367.205366][ T2526] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2367.223837][ T2524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2367.235879][ T2524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2367.242771][ T2526] vhci_hcd vhci_hcd.0: Device attached [ 2367.266596][ T2529] fuse: fd is not a fuse device [ 2367.279972][T29930] hid (null): bogus close delimiter [ 2367.306548][T29930] hid_parser_main: 28 callbacks suppressed [ 2367.306631][T29930] megaworld 0003:07B5:0312.0035: unknown main item tag 0x0 [ 2367.329767][ T2523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2367.348422][T29930] megaworld 0003:07B5:0312.0035: unknown main item tag 0x0 [ 2367.376828][T29930] megaworld 0003:07B5:0312.0035: unknown main item tag 0x0 [ 2367.379257][ T2523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2367.399346][T29930] megaworld 0003:07B5:0312.0035: unknown main item tag 0x0 [ 2367.409997][T29930] megaworld 0003:07B5:0312.0035: unknown main item tag 0x0 [ 2367.421648][T29930] megaworld 0003:07B5:0312.0035: unknown main item tag 0x0 [ 2367.431050][T29930] megaworld 0003:07B5:0312.0035: unknown main item tag 0x0 [ 2367.443000][T29930] megaworld 0003:07B5:0312.0035: unknown main item tag 0x0 [ 2367.451716][T29930] megaworld 0003:07B5:0312.0035: unknown main item tag 0x0 [ 2367.463152][T29930] megaworld 0003:07B5:0312.0035: unknown main item tag 0x0 [ 2367.471458][ T2533] vhci_hcd: connection closed [ 2367.471472][ T2535] vhci_hcd: connection closed [ 2367.471990][ T2527] vhci_hcd: connection reset by peer [ 2367.477049][ T2530] vhci_hcd: connection closed [ 2367.481666][ T1013] vhci_hcd vhci_hcd.1: stop threads [ 2367.487062][ T2547] vhci_hcd: connection closed [ 2367.491566][ T1013] vhci_hcd vhci_hcd.1: release socket [ 2367.493166][ T2545] vhci_hcd: connection closed [ 2367.496992][ T2549] vhci_hcd: connection closed [ 2367.498234][ T2543] vhci_hcd: connection closed [ 2367.499613][ T2551] vhci_hcd: connection closed [ 2367.524276][ T2514] usb usb7: usbfs: process 2514 (syz.2.7722) did not claim interface 0 before use [ 2367.524398][ T1013] vhci_hcd vhci_hcd.1: disconnect device [ 2367.536186][T29930] megaworld 0003:07B5:0312.0035: bogus close delimiter [ 2367.564791][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2367.574288][T29930] megaworld 0003:07B5:0312.0035: item 0 2 2 10 parsing failed [ 2367.580906][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2367.595864][T29930] megaworld 0003:07B5:0312.0035: parse failed [ 2367.612177][ T1013] vhci_hcd vhci_hcd.1: stop threads [ 2367.617396][ T1013] vhci_hcd vhci_hcd.1: release socket [ 2367.623253][T29930] megaworld 0003:07B5:0312.0035: probe with driver megaworld failed with error -22 [ 2367.675352][ T1013] vhci_hcd vhci_hcd.1: disconnect device [ 2367.721005][T29930] usb 3-1: USB disconnect, device number 23 [ 2367.727593][ T1013] vhci_hcd vhci_hcd.1: stop threads [ 2367.748631][ T1013] vhci_hcd vhci_hcd.1: release socket [ 2367.761200][ T1013] vhci_hcd vhci_hcd.1: disconnect device [ 2367.783584][ T1013] vhci_hcd vhci_hcd.1: stop threads [ 2367.796669][ T1013] vhci_hcd vhci_hcd.1: release socket [ 2367.812430][ T1013] vhci_hcd vhci_hcd.1: disconnect device [ 2367.825865][ T1013] vhci_hcd vhci_hcd.1: stop threads [ 2367.842831][ T1013] vhci_hcd vhci_hcd.1: release socket [ 2367.856179][ T1013] vhci_hcd vhci_hcd.1: disconnect device [ 2367.862064][ T1013] vhci_hcd vhci_hcd.1: stop threads [ 2367.867284][ T1013] vhci_hcd vhci_hcd.1: release socket [ 2367.877936][ T1013] vhci_hcd vhci_hcd.1: disconnect device [ 2367.885242][ T1013] vhci_hcd vhci_hcd.1: stop threads [ 2367.893802][ T1013] vhci_hcd vhci_hcd.1: release socket [ 2367.901257][ T1013] vhci_hcd vhci_hcd.1: disconnect device [ 2367.907549][ T1013] vhci_hcd vhci_hcd.1: stop threads [ 2367.915413][ T1013] vhci_hcd vhci_hcd.1: release socket [ 2367.926460][ T1013] vhci_hcd vhci_hcd.1: disconnect device [ 2367.926774][ T2563] FAULT_INJECTION: forcing a failure. [ 2367.926774][ T2563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2367.945889][ T1013] vhci_hcd vhci_hcd.1: stop threads [ 2367.946090][ T2563] CPU: 1 UID: 0 PID: 2563 Comm: syz.3.7728 Tainted: G L syzkaller #0 PREEMPT(full) [ 2367.946114][ T2563] Tainted: [L]=SOFTLOCKUP [ 2367.946119][ T2563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2367.946129][ T2563] Call Trace: [ 2367.946136][ T2563] [ 2367.946142][ T2563] dump_stack_lvl+0xe8/0x150 [ 2367.946174][ T2563] should_fail_ex+0x40c/0x560 [ 2367.946199][ T2563] _copy_to_user+0x31/0xb0 [ 2367.946223][ T2563] simple_read_from_buffer+0xe1/0x170 [ 2367.946249][ T2563] proc_fail_nth_read+0x1bb/0x230 [ 2367.946274][ T2563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2367.946298][ T2563] ? rw_verify_area+0x24a/0x4c0 [ 2367.946322][ T2563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2367.946342][ T2563] vfs_read+0x213/0xa80 [ 2367.946367][ T2563] ? __pfx___mutex_lock+0x10/0x10 [ 2367.946391][ T2563] ? __pfx_vfs_read+0x10/0x10 [ 2367.946414][ T2563] ? __fget_files+0x2a/0x420 [ 2367.946438][ T2563] ? __fget_files+0x3a2/0x420 [ 2367.946455][ T2563] ? __fget_files+0x2a/0x420 [ 2367.946481][ T2563] ksys_read+0x150/0x270 [ 2367.946504][ T2563] ? __pfx_ksys_read+0x10/0x10 [ 2367.946533][ T2563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2367.946551][ T2563] do_syscall_64+0x174/0x580 [ 2367.946578][ T2563] ? trace_irq_disable+0x3b/0x140 [ 2367.946599][ T2563] ? clear_bhb_loop+0x70/0xc0 [ 2367.946623][ T2563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2367.946638][ T2563] RIP: 0033:0x7f1ed935e90e [ 2367.946655][ T2563] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2367.946668][ T2563] RSP: 002b:00007f1eda1e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2367.946686][ T2563] RAX: ffffffffffffffda RBX: 00007f1eda1e16c0 RCX: 00007f1ed935e90e [ 2367.946698][ T2563] RDX: 000000000000000f RSI: 00007f1eda1e10a0 RDI: 0000000000000004 [ 2367.946708][ T2563] RBP: 00007f1eda1e1090 R08: 0000000000000000 R09: 0000000000000000 [ 2367.946719][ T2563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2367.946729][ T2563] R13: 00007f1ed9626038 R14: 00007f1ed9625fa0 R15: 00007f1ed974fa48 [ 2367.946755][ T2563] [ 2368.180654][ T1013] vhci_hcd vhci_hcd.1: release socket [ 2368.187176][ T1013] vhci_hcd vhci_hcd.1: disconnect device [ 2368.187291][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2368.208021][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2368.756351][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2368.770813][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2368.969837][ T2591] FAULT_INJECTION: forcing a failure. [ 2368.969837][ T2591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2369.008037][ T2591] CPU: 1 UID: 0 PID: 2591 Comm: syz.5.7738 Tainted: G L syzkaller #0 PREEMPT(full) [ 2369.008068][ T2591] Tainted: [L]=SOFTLOCKUP [ 2369.008074][ T2591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2369.008084][ T2591] Call Trace: [ 2369.008091][ T2591] [ 2369.008099][ T2591] dump_stack_lvl+0xe8/0x150 [ 2369.008127][ T2591] should_fail_ex+0x40c/0x560 [ 2369.008152][ T2591] _copy_from_iter+0x3b0/0x1660 [ 2369.008185][ T2591] ? __pfx__copy_from_iter+0x10/0x10 [ 2369.008220][ T2591] bcm_sendmsg+0x157/0x7a0 [ 2369.008356][ T2591] ? __pfx_bcm_sendmsg+0x10/0x10 [ 2369.008382][ T2591] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2369.008405][ T2591] ? __pfx_bcm_sendmsg+0x10/0x10 [ 2369.008423][ T2591] sock_sendmsg_nosec+0x13a/0x180 [ 2369.008449][ T2591] ____sys_sendmsg+0x54e/0x850 [ 2369.008472][ T2591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2369.008499][ T2591] ? import_iovec+0x73/0xa0 [ 2369.008524][ T2591] ___sys_sendmsg+0x2a5/0x360 [ 2369.008541][ T2591] ? __lock_acquire+0x683/0x2cf0 [ 2369.008567][ T2591] ? __pfx____sys_sendmsg+0x10/0x10 [ 2369.008616][ T2591] ? __fget_files+0x2a/0x420 [ 2369.008636][ T2591] ? __fget_files+0x3a2/0x420 [ 2369.008665][ T2591] __x64_sys_sendmsg+0x1b1/0x290 [ 2369.008686][ T2591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2369.008720][ T2591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.008738][ T2591] do_syscall_64+0x174/0x580 [ 2369.008760][ T2591] ? trace_irq_disable+0x3b/0x140 [ 2369.008787][ T2591] ? clear_bhb_loop+0x70/0xc0 [ 2369.008808][ T2591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.008825][ T2591] RIP: 0033:0x7fb30df9e0d9 [ 2369.008841][ T2591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2369.008855][ T2591] RSP: 002b:00007fb30ef05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2369.008874][ T2591] RAX: ffffffffffffffda RBX: 00007fb30e225fa0 RCX: 00007fb30df9e0d9 [ 2369.008886][ T2591] RDX: 0000000000088801 RSI: 0000200000000240 RDI: 0000000000000003 [ 2369.008897][ T2591] RBP: 00007fb30ef05090 R08: 0000000000000000 R09: 0000000000000000 [ 2369.008907][ T2591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2369.008916][ T2591] R13: 00007fb30e226038 R14: 00007fb30e225fa0 R15: 00007fb30e34fa48 [ 2369.008941][ T2591] [ 2369.605518][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2369.619358][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2369.741513][ T2607] syz.1.7742 (2607): drop_caches: 2 [ 2369.766829][ T985] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2369.922735][ T985] usb 3-1: Using ep0 maxpacket: 32 [ 2369.929533][ T985] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 2369.940060][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2369.951136][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2369.967049][ T985] usb 3-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 2369.975665][ T985] usb 3-1: Manufacturer: syz [ 2369.983484][ T985] usb 3-1: config 0 descriptor?? [ 2370.192541][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2370.210858][ T2603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2370.230859][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2370.243525][ T2603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2370.254566][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2370.259775][ T2626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2370.272531][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2370.273588][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2370.284744][ T2626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2370.292204][ T2603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2370.311215][ T2603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2370.320647][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2370.334955][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2370.343891][T22179] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2370.352473][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2370.363374][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2370.373758][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2370.492762][T22179] usb 4-1: Using ep0 maxpacket: 32 [ 2370.499390][T22179] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 2370.530457][T22179] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2370.542366][T22179] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2370.554330][T22179] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2370.563429][ T2628] FAULT_INJECTION: forcing a failure. [ 2370.563429][ T2628] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.571055][T22179] usb 4-1: config 1 interface 2 has no altsetting 0 [ 2370.579201][ T2628] CPU: 1 UID: 0 PID: 2628 Comm: syz.1.7748 Tainted: G L syzkaller #0 PREEMPT(full) [ 2370.579225][ T2628] Tainted: [L]=SOFTLOCKUP [ 2370.579231][ T2628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2370.579241][ T2628] Call Trace: [ 2370.579249][ T2628] [ 2370.579258][ T2628] dump_stack_lvl+0xe8/0x150 [ 2370.579287][ T2628] should_fail_ex+0x40c/0x560 [ 2370.579310][ T2628] should_failslab+0xa8/0x100 [ 2370.579334][ T2628] __kmalloc_cache_noprof+0xa8/0x660 [ 2370.579357][ T2628] ? kvm_vcpu_ioctl+0x40e/0xfd0 [ 2370.579399][ T2628] ? kvm_vcpu_ioctl+0x40e/0xfd0 [ 2370.579420][ T2628] kvm_vcpu_ioctl+0x40e/0xfd0 [ 2370.579441][ T2628] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2370.579456][ T2628] ? hook_file_ioctl+0x1f0/0x5f0 [ 2370.579496][ T2628] ? __fget_files+0x2a/0x420 [ 2370.579519][ T2628] ? __fget_files+0x2a/0x420 [ 2370.579541][ T2628] ? __fget_files+0x3a2/0x420 [ 2370.579559][ T2628] ? __fget_files+0x2a/0x420 [ 2370.579580][ T2628] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2370.579609][ T2628] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2370.579625][ T2628] __se_sys_ioctl+0xfc/0x170 [ 2370.579641][ T2628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2370.579659][ T2628] do_syscall_64+0x174/0x580 [ 2370.579679][ T2628] ? trace_irq_disable+0x3b/0x140 [ 2370.579698][ T2628] ? clear_bhb_loop+0x70/0xc0 [ 2370.579718][ T2628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2370.579734][ T2628] RIP: 0033:0x7fa89df9dd6b [ 2370.579750][ T2628] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 2370.579764][ T2628] RSP: 002b:00007fa89ee2a450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2370.579780][ T2628] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fa89df9dd6b [ 2370.579792][ T2628] RDX: 00007fa89ee2aa90 RSI: 000000008138ae83 RDI: 0000000000000005 [ 2370.579802][ T2628] RBP: ffffffffffffffff R08: 0000000000000001 R09: 000000000000000a [ 2370.579818][ T2628] R10: ffffffffffffffff R11: 0000000000000246 R12: 00000000fec00000 [ 2370.579829][ T2628] R13: 00007fa89ee2abd0 R14: 0000200000018000 R15: 0000000000000018 [ 2370.579856][ T2628] [ 2370.661837][ T985] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0036/input/input73 [ 2370.667257][T22179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.769201][ T985] input: syz Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0036/input/input74 [ 2370.783387][ T985] uclogic 0003:5543:0042.0036: input,hidraw0: USB HID v7f.fd Mouse [syz] on usb-dummy_hcd.2-1/input0 [ 2370.788024][T22179] usb 4-1: Product: syz [ 2370.871417][ T985] usb 3-1: USB disconnect, device number 24 [ 2370.896144][T22179] usb 4-1: Manufacturer: syz [ 2370.904905][T22179] usb 4-1: SerialNumber: syz [ 2370.952796][T22179] snd-ua101 4-1:1.1: invalid format type [ 2370.964351][T22179] snd-ua101 4-1:1.0: invalid num_altsetting [ 2370.990556][T22179] usb 4-1: selecting invalid altsetting 0 [ 2371.006865][T22179] usb 4-1: selecting invalid altsetting 0 [ 2371.012580][T22179] usbtest 4-1:1.2: probe with driver usbtest failed with error -22 [ 2371.047303][T22179] usb 4-1: selecting invalid altsetting 0 [ 2371.057402][T22179] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 2371.095907][T22179] usb 4-1: selecting invalid altsetting 0 [ 2371.180048][T22179] snd-ua101 4-1:1.2: probe with driver snd-ua101 failed with error -22 [ 2371.300911][T22179] usb 4-1: USB disconnect, device number 37 [ 2371.503480][ T9890] net_ratelimit: 8 callbacks suppressed [ 2371.503497][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2371.523546][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2371.862111][ T2651] fido_id[2651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2372.252771][ T5701] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2372.283155][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2372.297508][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2372.415739][ T2659] FAULT_INJECTION: forcing a failure. [ 2372.415739][ T2659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2372.470522][ T2659] CPU: 1 UID: 0 PID: 2659 Comm: syz.0.7753 Tainted: G L syzkaller #0 PREEMPT(full) [ 2372.470550][ T2659] Tainted: [L]=SOFTLOCKUP [ 2372.470557][ T2659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2372.470566][ T2659] Call Trace: [ 2372.470574][ T2659] [ 2372.470582][ T2659] dump_stack_lvl+0xe8/0x150 [ 2372.470610][ T2659] should_fail_ex+0x40c/0x560 [ 2372.470634][ T2659] _copy_from_user+0x2d/0xb0 [ 2372.470657][ T2659] iommufd_fops_ioctl+0x416/0x600 [ 2372.470798][ T2659] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2372.470827][ T2659] ? __fget_files+0x2a/0x420 [ 2372.470852][ T2659] ? __fget_files+0x2a/0x420 [ 2372.470876][ T2659] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2372.470896][ T2659] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2372.470919][ T2659] __se_sys_ioctl+0xfc/0x170 [ 2372.470936][ T2659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2372.470954][ T2659] do_syscall_64+0x174/0x580 [ 2372.470975][ T2659] ? trace_irq_disable+0x3b/0x140 [ 2372.470995][ T2659] ? clear_bhb_loop+0x70/0xc0 [ 2372.471015][ T2659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2372.471032][ T2659] RIP: 0033:0x7fcd0839e0d9 [ 2372.471049][ T2659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2372.471064][ T2659] RSP: 002b:00007fcd09193028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2372.471082][ T2659] RAX: ffffffffffffffda RBX: 00007fcd08625fa0 RCX: 00007fcd0839e0d9 [ 2372.471094][ T2659] RDX: 0000200000000500 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 2372.471106][ T2659] RBP: 00007fcd09193090 R08: 0000000000000000 R09: 0000000000000000 [ 2372.471117][ T2659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2372.471127][ T2659] R13: 00007fcd08626038 R14: 00007fcd08625fa0 R15: 00007fcd0874fa48 [ 2372.471154][ T2659] [ 2372.952856][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2372.967324][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2373.542579][ T2675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2373.552004][ T1013] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2373.558272][ T2675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2373.567826][ T1013] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2373.744922][ T2678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2373.758357][ T2678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2373.781411][ T2678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2373.809695][ T2678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2373.815471][ T2685] FAULT_INJECTION: forcing a failure. [ 2373.815471][ T2685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2373.832390][ T2685] CPU: 0 UID: 0 PID: 2685 Comm: syz.3.7758 Tainted: G L syzkaller #0 PREEMPT(full) [ 2373.832424][ T2685] Tainted: [L]=SOFTLOCKUP [ 2373.832430][ T2685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2373.832438][ T2685] Call Trace: [ 2373.832446][ T2685] [ 2373.832453][ T2685] dump_stack_lvl+0xe8/0x150 [ 2373.832480][ T2685] should_fail_ex+0x40c/0x560 [ 2373.832504][ T2685] _copy_from_iter+0x1d3/0x1660 [ 2373.832524][ T2685] ? skb_set_owner_w+0x263/0x3d0 [ 2373.832551][ T2685] ? __pfx__copy_from_iter+0x10/0x10 [ 2373.832582][ T2685] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2373.832667][ T2685] skb_copy_datagram_from_iter+0xe6/0x720 [ 2373.832724][ T2685] ? dev_get_by_index+0x22/0x2d0 [ 2373.832773][ T2685] ? skb_put+0x112/0x210 [ 2373.832791][ T2685] packet_sendmsg+0x35e2/0x4f80 [ 2373.832889][ T2685] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2373.832926][ T2685] ? __lock_acquire+0x683/0x2cf0 [ 2373.832959][ T2685] ? __pfx_packet_sendmsg+0x10/0x10 [ 2373.832989][ T2685] ? __might_fault+0xaf/0x130 [ 2373.833006][ T2685] ? __pfx_aa_sk_perm+0x10/0x10 [ 2373.833031][ T2685] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2373.833052][ T2685] ? __pfx_packet_sendmsg+0x10/0x10 [ 2373.833072][ T2685] sock_sendmsg_nosec+0x13a/0x180 [ 2373.833096][ T2685] __sys_sendto+0x408/0x5a0 [ 2373.833112][ T2685] ? ksys_write+0x1e6/0x270 [ 2373.833137][ T2685] ? __pfx___sys_sendto+0x10/0x10 [ 2373.833151][ T2685] ? __mutex_unlock_slowpath+0x731/0x900 [ 2373.833183][ T2685] ? irqentry_exit+0x218/0x8f0 [ 2373.833213][ T2685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2373.833236][ T2685] __x64_sys_sendto+0xde/0x100 [ 2373.833253][ T2685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2373.833270][ T2685] do_syscall_64+0x174/0x580 [ 2373.833291][ T2685] ? clear_bhb_loop+0x70/0xc0 [ 2373.833311][ T2685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2373.833327][ T2685] RIP: 0033:0x7f1ed939e0d9 [ 2373.833343][ T2685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2373.833357][ T2685] RSP: 002b:00007f1eda1e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2373.833374][ T2685] RAX: ffffffffffffffda RBX: 00007f1ed9625fa0 RCX: 00007f1ed939e0d9 [ 2373.833384][ T2685] RDX: 0000000000000022 RSI: 0000200000000240 RDI: 0000000000000003 [ 2373.833395][ T2685] RBP: 00007f1eda1e1090 R08: 0000200000000300 R09: 0000000000000014 [ 2373.833414][ T2685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2373.833424][ T2685] R13: 00007f1ed9626038 R14: 00007f1ed9625fa0 R15: 00007f1ed974fa48 [ 2373.833450][ T2685] [ 2373.833843][ T2678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2373.870947][ T9] usb usb36-port1: attempt power cycle [ 2373.883274][ T2678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2374.123928][ T1013] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2374.138385][ T1013] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2374.216702][ T2678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2374.229953][ T2678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2374.266032][ T2678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2374.297510][ T2678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2374.336497][ T2678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2374.354270][ T2678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2374.676572][ T9] usb usb36-port1: unable to enumerate USB device [ 2375.273589][ T2720] FAULT_INJECTION: forcing a failure. [ 2375.273589][ T2720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2375.292871][ T2720] CPU: 0 UID: 0 PID: 2720 Comm: syz.5.7767 Tainted: G L syzkaller #0 PREEMPT(full) [ 2375.292899][ T2720] Tainted: [L]=SOFTLOCKUP [ 2375.292905][ T2720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2375.292914][ T2720] Call Trace: [ 2375.292922][ T2720] [ 2375.292929][ T2720] dump_stack_lvl+0xe8/0x150 [ 2375.292957][ T2720] should_fail_ex+0x40c/0x560 [ 2375.292981][ T2720] _copy_to_user+0x31/0xb0 [ 2375.293007][ T2720] simple_read_from_buffer+0xe1/0x170 [ 2375.293032][ T2720] proc_fail_nth_read+0x1bb/0x230 [ 2375.293057][ T2720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2375.293081][ T2720] ? rw_verify_area+0x24a/0x4c0 [ 2375.293105][ T2720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2375.293125][ T2720] vfs_read+0x213/0xa80 [ 2375.293152][ T2720] ? __pfx___mutex_lock+0x10/0x10 [ 2375.293174][ T2720] ? __pfx_vfs_read+0x10/0x10 [ 2375.293197][ T2720] ? __fget_files+0x2a/0x420 [ 2375.293221][ T2720] ? __fget_files+0x3a2/0x420 [ 2375.293239][ T2720] ? __fget_files+0x2a/0x420 [ 2375.293266][ T2720] ksys_read+0x150/0x270 [ 2375.293290][ T2720] ? __pfx_ksys_read+0x10/0x10 [ 2375.293315][ T2720] ? __x64_sys_read+0x70/0x90 [ 2375.293338][ T2720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2375.293357][ T2720] do_syscall_64+0x174/0x580 [ 2375.293379][ T2720] ? clear_bhb_loop+0x70/0xc0 [ 2375.293399][ T2720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2375.293415][ T2720] RIP: 0033:0x7fb30df5e90e [ 2375.293431][ T2720] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2375.293445][ T2720] RSP: 002b:00007fb30ef04fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2375.293462][ T2720] RAX: ffffffffffffffda RBX: 00007fb30ef056c0 RCX: 00007fb30df5e90e [ 2375.293473][ T2720] RDX: 000000000000000f RSI: 00007fb30ef050a0 RDI: 0000000000000007 [ 2375.293482][ T2720] RBP: 00007fb30ef05090 R08: 0000000000000000 R09: 0000000000000000 [ 2375.293492][ T2720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2375.293501][ T2720] R13: 00007fb30e226038 R14: 00007fb30e225fa0 R15: 00007fb30e34fa48 [ 2375.293527][ T2720] [ 2376.763230][ T9895] net_ratelimit: 8 callbacks suppressed [ 2376.763248][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2376.783213][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2377.158280][ T2754] program syz.2.7775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2377.437772][ T2759] __nla_validate_parse: 25 callbacks suppressed [ 2377.437846][ T2759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7776'. [ 2377.592834][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2377.614467][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2377.734968][ T2773] FAULT_INJECTION: forcing a failure. [ 2377.734968][ T2773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2377.749470][ T2773] CPU: 0 UID: 0 PID: 2773 Comm: syz.2.7780 Tainted: G L syzkaller #0 PREEMPT(full) [ 2377.749495][ T2773] Tainted: [L]=SOFTLOCKUP [ 2377.749501][ T2773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2377.749511][ T2773] Call Trace: [ 2377.749519][ T2773] [ 2377.749526][ T2773] dump_stack_lvl+0xe8/0x150 [ 2377.749555][ T2773] should_fail_ex+0x40c/0x560 [ 2377.749580][ T2773] _copy_from_user+0x2d/0xb0 [ 2377.749611][ T2773] ___sys_sendmsg+0x1c6/0x360 [ 2377.749630][ T2773] ? __lock_acquire+0x683/0x2cf0 [ 2377.749654][ T2773] ? __pfx____sys_sendmsg+0x10/0x10 [ 2377.749678][ T2773] ? kstrtouint+0x6e/0xe0 [ 2377.749719][ T2773] ? __fget_files+0x2a/0x420 [ 2377.749739][ T2773] ? __fget_files+0x3a2/0x420 [ 2377.749768][ T2773] __sys_sendmmsg+0x273/0x4d0 [ 2377.749791][ T2773] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2377.749818][ T2773] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2377.749853][ T2773] ? ksys_write+0x242/0x270 [ 2377.749878][ T2773] ? __pfx_ksys_write+0x10/0x10 [ 2377.749906][ T2773] __x64_sys_sendmmsg+0xa0/0xc0 [ 2377.749924][ T2773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2377.749942][ T2773] do_syscall_64+0x174/0x580 [ 2377.749963][ T2773] ? clear_bhb_loop+0x70/0xc0 [ 2377.749982][ T2773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2377.749998][ T2773] RIP: 0033:0x7f6912f9e0d9 [ 2377.750012][ T2773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2377.750025][ T2773] RSP: 002b:00007f6913f4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2377.750044][ T2773] RAX: ffffffffffffffda RBX: 00007f6913225fa0 RCX: 00007f6912f9e0d9 [ 2377.750057][ T2773] RDX: 17fd147c801ae9af RSI: 0000200000000ac0 RDI: 0000000000000003 [ 2377.750068][ T2773] RBP: 00007f6913f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 2377.750079][ T2773] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001 [ 2377.750089][ T2773] R13: 00007f6913226038 R14: 00007f6913225fa0 R15: 00007f691334fa48 [ 2377.750116][ T2773] [ 2378.185653][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2378.200888][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2378.753045][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2378.767537][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2379.302902][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2379.325057][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2379.391654][T22179] hid_parser_main: 170 callbacks suppressed [ 2379.391669][T22179] hid-generic 0000:0000:0004.0037: unknown main item tag 0x0 [ 2379.419326][T22179] hid-generic 0000:0000:0004.0037: unknown main item tag 0x0 [ 2379.433780][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2379.457471][T22179] hid-generic 0000:0000:0004.0037: unknown main item tag 0x0 [ 2379.473242][T22179] hid-generic 0000:0000:0004.0037: unknown main item tag 0x0 [ 2379.495300][T22179] hid-generic 0000:0000:0004.0037: unknown main item tag 0x0 [ 2379.522433][T22179] hid-generic 0000:0000:0004.0037: unknown main item tag 0x0 [ 2379.554836][T22179] hid-generic 0000:0000:0004.0037: unknown main item tag 0x0 [ 2379.575828][T22179] hid-generic 0000:0000:0004.0037: unknown main item tag 0x0 [ 2379.600497][T22179] hid-generic 0000:0000:0004.0037: unknown main item tag 0x0 [ 2379.613461][T22179] hid-generic 0000:0000:0004.0037: unknown main item tag 0x0 [ 2379.623914][T22179] hid-generic 0000:0000:0004.0037: hidraw0: HID v0.03 Device [syz1] on syz0 [ 2379.710635][ T2812] fido_id[2812]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2379.724741][ T2816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2379.734512][ T2816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2379.761030][ T2816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2379.800221][ T2816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2380.013143][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2380.025193][ T9] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 2380.040958][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.049973][ T9] usb 3-1: Product: syz [ 2380.054790][ T9] usb 3-1: Manufacturer: syz [ 2380.060718][ T9] usb 3-1: SerialNumber: syz [ 2380.069799][ T9] usb 3-1: config 0 descriptor?? [ 2380.079065][ T9] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 2380.290790][ T2826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2380.305317][ T2826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2380.374973][ T2800] veth3: entered allmulticast mode [ 2380.388940][ T5701] usb 3-1: USB disconnect, device number 25 [ 2381.570443][ T2860] fuse: Bad value for 'user_id' [ 2381.577404][ T2860] fuse: Bad value for 'user_id' [ 2381.942873][ T2842] net_ratelimit: 8 callbacks suppressed [ 2381.942905][ T2842] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2381.964141][ T2842] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2382.466431][ T2869] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 2382.472948][ T2869] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2382.557265][ T2869] vhci_hcd vhci_hcd.0: Device attached [ 2382.768749][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2382.783206][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2382.875409][ T2870] vhci_hcd: connection closed [ 2382.875954][T17457] vhci_hcd vhci_hcd.5: stop threads [ 2382.886075][ T985] usb 44-1: SetAddress Request (2) to port 0 [ 2382.894633][ T985] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2382.918269][T17457] vhci_hcd vhci_hcd.5: release socket [ 2382.940067][T17457] vhci_hcd vhci_hcd.5: disconnect device [ 2383.413342][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2383.429486][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2383.713366][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2383.834202][T22179] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2383.965499][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2383.979774][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2384.072764][ T2896] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 2384.170447][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2384.181986][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2384.195597][ T9] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 2384.407979][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2384.421223][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2384.436803][T22179] usb 4-1: Using ep0 maxpacket: 8 [ 2384.541586][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2384.567320][ T2903] netlink: 'syz.1.7806': attribute type 6 has an invalid length. [ 2384.575460][ T2903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7806'. [ 2384.651305][T22179] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2384.974733][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.986189][T22179] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2384.997500][ T9] usb 3-1: Product: syz [ 2385.002242][ T9] usb 3-1: Manufacturer: syz [ 2385.006864][ T9] usb 3-1: SerialNumber: syz [ 2385.112572][T22179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2385.121238][T22179] usb 4-1: Product: syz [ 2385.126284][T22179] usb 4-1: Manufacturer: syz [ 2385.131193][T22179] usb 4-1: SerialNumber: syz [ 2385.148534][T22179] usb 4-1: config 0 descriptor?? [ 2385.174477][T22179] cdc_phonet 4-1:0.0: skipping garbage [ 2385.192928][T22179] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2385.390659][T22179] usb 4-1: USB disconnect, device number 38 [ 2385.750104][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2385.759884][ T9] usb 3-1: selecting invalid altsetting 1 [ 2385.766968][ T9] snd-usb-caiaq 3-1:1.0: can't set alt interface. [ 2385.774995][ T9] usb 3-1: unable to init card! (ret=-5) [ 2385.783944][ T9] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 2385.814959][ T9] usb 3-1: selecting invalid altsetting 1 [ 2385.820705][ T9] snd-usb-caiaq 3-1:1.1: can't set alt interface. [ 2385.848647][ T9] usb 3-1: unable to init card! (ret=-5) [ 2385.856686][ T9] snd-usb-caiaq 3-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 2385.875209][ T9] usb 3-1: USB disconnect, device number 26 [ 2385.920045][ T1744] udevd[1744]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2386.200571][ T2928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7816'. [ 2386.229626][ T2928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2386.248744][ T2930] fuse: Bad value for 'rootmode' [ 2386.261033][ T2928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2386.285962][ T2928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7816'. [ 2386.331618][ T2932] FAULT_INJECTION: forcing a failure. [ 2386.331618][ T2932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2386.347917][ T2932] CPU: 1 UID: 0 PID: 2932 Comm: syz.2.7817 Tainted: G L syzkaller #0 PREEMPT(full) [ 2386.347938][ T2932] Tainted: [L]=SOFTLOCKUP [ 2386.347954][ T2932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2386.347960][ T2932] Call Trace: [ 2386.347966][ T2932] [ 2386.347970][ T2932] dump_stack_lvl+0xe8/0x150 [ 2386.347989][ T2932] should_fail_ex+0x40c/0x560 [ 2386.348004][ T2932] _copy_from_user+0x2d/0xb0 [ 2386.348024][ T2932] kstrtouint_from_user+0xd6/0x180 [ 2386.348037][ T2932] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2386.348057][ T2932] proc_fail_nth_write+0x8e/0x210 [ 2386.348071][ T2932] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2386.348087][ T2932] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2386.348100][ T2932] vfs_write+0x296/0xba0 [ 2386.348118][ T2932] ? __pfx_vfs_write+0x10/0x10 [ 2386.348132][ T2932] ? __fget_files+0x2a/0x420 [ 2386.348146][ T2932] ? __fget_files+0x3a2/0x420 [ 2386.348157][ T2932] ? __fget_files+0x2a/0x420 [ 2386.348172][ T2932] ksys_write+0x150/0x270 [ 2386.348187][ T2932] ? __pfx_ksys_write+0x10/0x10 [ 2386.348205][ T2932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.348215][ T2932] do_syscall_64+0x174/0x580 [ 2386.348228][ T2932] ? trace_irq_disable+0x3b/0x140 [ 2386.348240][ T2932] ? clear_bhb_loop+0x70/0xc0 [ 2386.348252][ T2932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.348262][ T2932] RIP: 0033:0x7f6912f5e90e [ 2386.348272][ T2932] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2386.348280][ T2932] RSP: 002b:00007f6913f4afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2386.348292][ T2932] RAX: ffffffffffffffda RBX: 00007f6913f4b6c0 RCX: 00007f6912f5e90e [ 2386.348299][ T2932] RDX: 0000000000000001 RSI: 00007f6913f4b0a0 RDI: 0000000000000004 [ 2386.348304][ T2932] RBP: 00007f6913f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 2386.348310][ T2932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2386.348316][ T2932] R13: 00007f6913226038 R14: 00007f6913225fa0 R15: 00007f691334fa48 [ 2386.348331][ T2932] [ 2386.987196][ T2946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2387.007948][ T2946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2387.013377][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2387.028732][ T2946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2387.042497][ T2946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2387.055954][ T2946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2387.065705][ T2946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2387.072166][ T2949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2387.106000][ T2949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2387.154652][ T9895] net_ratelimit: 9 callbacks suppressed [ 2387.154673][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2387.176435][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2387.213749][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2387.225497][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2387.245027][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2387.257547][ T9] usb 3-1: config 0 descriptor?? [ 2387.492421][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 2387.500495][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2387.513362][ T9] usb 3-1: USB disconnect, device number 27 [ 2387.733140][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2387.747548][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2388.031126][ T2959] syz.3.7827 (2959): drop_caches: 2 [ 2388.043463][ T985] usb 44-1: device descriptor read/8, error -110 [ 2388.113146][ T5701] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2388.276723][ T5701] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2388.288649][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2388.300887][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2388.313400][ T5701] usb 3-1: config 0 descriptor?? [ 2388.333377][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2388.347725][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2388.444265][ T985] usb usb44-port1: attempt power cycle [ 2388.740116][ T2976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7834'. [ 2388.781797][ T2937] netlink: 'syz.2.7819': attribute type 1 has an invalid length. [ 2388.800660][ T2978] FAULT_INJECTION: forcing a failure. [ 2388.800660][ T2978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2388.842719][ T2978] CPU: 1 UID: 0 PID: 2978 Comm: syz.0.7835 Tainted: G L syzkaller #0 PREEMPT(full) [ 2388.842745][ T2978] Tainted: [L]=SOFTLOCKUP [ 2388.842751][ T2978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2388.842760][ T2978] Call Trace: [ 2388.842767][ T2978] [ 2388.842781][ T2978] dump_stack_lvl+0xe8/0x150 [ 2388.842811][ T2978] should_fail_ex+0x40c/0x560 [ 2388.842835][ T2978] _copy_from_iter+0x1d3/0x1660 [ 2388.842854][ T2978] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 2388.842874][ T2978] ? rcu_is_watching+0x15/0xb0 [ 2388.842898][ T2978] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2388.842917][ T2978] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 2388.842936][ T2978] ? __pfx__copy_from_iter+0x10/0x10 [ 2388.842955][ T2978] ? __alloc_skb+0x276/0x7a0 [ 2388.842970][ T2978] ? __alloc_skb+0x276/0x7a0 [ 2388.842990][ T2978] ? netlink_sendmsg+0x650/0xb40 [ 2388.843077][ T2978] ? skb_put+0x112/0x210 [ 2388.843096][ T2978] netlink_sendmsg+0x6c0/0xb40 [ 2388.843122][ T2978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2388.843144][ T2978] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2388.843166][ T2978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2388.843183][ T2978] sock_sendmsg_nosec+0x13a/0x180 [ 2388.843207][ T2978] ____sys_sendmsg+0x54e/0x850 [ 2388.843230][ T2978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2388.843256][ T2978] ? import_iovec+0x73/0xa0 [ 2388.843280][ T2978] ___sys_sendmsg+0x2a5/0x360 [ 2388.843298][ T2978] ? __lock_acquire+0x683/0x2cf0 [ 2388.843321][ T2978] ? __pfx____sys_sendmsg+0x10/0x10 [ 2388.843370][ T2978] ? __fget_files+0x2a/0x420 [ 2388.843389][ T2978] ? __fget_files+0x3a2/0x420 [ 2388.843417][ T2978] __x64_sys_sendmsg+0x1b1/0x290 [ 2388.843438][ T2978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2388.843472][ T2978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2388.843490][ T2978] do_syscall_64+0x174/0x580 [ 2388.843510][ T2978] ? trace_irq_disable+0x3b/0x140 [ 2388.843530][ T2978] ? clear_bhb_loop+0x70/0xc0 [ 2388.843549][ T2978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2388.843566][ T2978] RIP: 0033:0x7fcd0839e0d9 [ 2388.843582][ T2978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2388.843596][ T2978] RSP: 002b:00007fcd09193028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2388.843614][ T2978] RAX: ffffffffffffffda RBX: 00007fcd08625fa0 RCX: 00007fcd0839e0d9 [ 2388.843626][ T2978] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 2388.843636][ T2978] RBP: 00007fcd09193090 R08: 0000000000000000 R09: 0000000000000000 [ 2388.843647][ T2978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2388.843656][ T2978] R13: 00007fcd08626038 R14: 00007fcd08625fa0 R15: 00007fcd0874fa48 [ 2388.843683][ T2978] [ 2389.224829][ T985] usb usb44-port1: unable to enumerate USB device [ 2389.254120][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2389.269530][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2389.500519][ T2966] syz.3.7830 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2389.513900][ T2966] CPU: 0 UID: 0 PID: 2966 Comm: syz.3.7830 Tainted: G L syzkaller #0 PREEMPT(full) [ 2389.513928][ T2966] Tainted: [L]=SOFTLOCKUP [ 2389.513935][ T2966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2389.513946][ T2966] Call Trace: [ 2389.513953][ T2966] [ 2389.513962][ T2966] dump_stack_lvl+0xe8/0x150 [ 2389.513992][ T2966] dump_header+0xd3/0x4b0 [ 2389.514040][ T2966] oom_kill_process+0x3ab/0x970 [ 2389.514074][ T2966] out_of_memory+0x1064/0x1480 [ 2389.514089][ T2966] ? try_charge_memcg+0xbca/0x1590 [ 2389.514124][ T2966] ? __pfx_out_of_memory+0x10/0x10 [ 2389.514146][ T2966] ? do_raw_spin_unlock+0xf5/0x210 [ 2389.514174][ T2966] try_charge_memcg+0xc74/0x1590 [ 2389.514210][ T2966] ? __pfx_try_charge_memcg+0x10/0x10 [ 2389.514237][ T2966] ? percpu_ref_tryget+0x15/0x180 [ 2389.514261][ T2966] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 2389.514288][ T2966] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 2389.514308][ T2966] ? __memcg_slab_post_alloc_hook+0x710/0xf10 [ 2389.514330][ T2966] __memcg_slab_post_alloc_hook+0x909/0xf10 [ 2389.514369][ T2966] kmem_cache_alloc_lru_noprof+0x358/0x5f0 [ 2389.514387][ T2966] ? do_raw_spin_lock+0x12b/0x2f0 [ 2389.514404][ T2966] ? kmem_cache_alloc_lru_noprof+0x150/0x5f0 [ 2389.514423][ T2966] ? sock_alloc_inode+0x2c/0x1a0 [ 2389.514444][ T2966] ? sock_alloc_inode+0x2c/0x1a0 [ 2389.514469][ T2966] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2389.514490][ T2966] sock_alloc_inode+0x2c/0x1a0 [ 2389.514511][ T2966] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2389.514531][ T2966] alloc_inode+0x6a/0x1b0 [ 2389.514553][ T2966] __sock_create+0x12d/0x9d0 [ 2389.514578][ T2966] ? __might_fault+0xaf/0x130 [ 2389.514600][ T2966] __sys_socketpair+0x1c4/0x560 [ 2389.514630][ T2966] __x64_sys_socketpair+0x9b/0xb0 [ 2389.514653][ T2966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2389.514671][ T2966] do_syscall_64+0x174/0x580 [ 2389.514694][ T2966] ? clear_bhb_loop+0x70/0xc0 [ 2389.514716][ T2966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2389.514732][ T2966] RIP: 0033:0x7f1ed939e0d9 [ 2389.514749][ T2966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2389.514763][ T2966] RSP: 002b:00007f1eda1e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2389.514782][ T2966] RAX: ffffffffffffffda RBX: 00007f1ed9625fa0 RCX: 00007f1ed939e0d9 [ 2389.514794][ T2966] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 2389.514804][ T2966] RBP: 00007f1ed9435024 R08: 0000000000000000 R09: 0000000000000000 [ 2389.514816][ T2966] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 2389.514834][ T2966] R13: 00007f1ed9626038 R14: 00007f1ed9625fa0 R15: 00007f1ed974fa48 [ 2389.514864][ T2966] [ 2389.514993][ T2966] memory: usage 8kB, limit 8kB, failcnt 95 [ 2389.665284][ T5701] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 2389.671098][ T2966] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 2389.676702][ T5701] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input76 [ 2389.680572][ T2966] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 2389.680589][ T2966] Memory cgroup stats for /syz3/test [ 2389.850979][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2389.854166][ T5701] usb 3-1: USB disconnect, device number 28 [ 2389.856286][ T9895] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2389.856328][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2389.897813][ T2966] : [ 2389.899062][ T2966] cache 0 [ 2389.904727][ T2966] rss 0 [ 2389.907495][ T2966] rss_huge 0 [ 2389.910690][ T2966] shmem 0 [ 2389.913622][ T2966] mapped_file 0 [ 2389.917077][ T2966] dirty 0 [ 2389.920013][ T2966] writeback 0 [ 2389.923297][ T2966] workingset_refault_anon 0 [ 2389.927801][ T2966] workingset_refault_file 0 [ 2389.932298][ T2966] swap 0 [ 2389.935140][ T2966] swapcached 0 [ 2389.938503][ T2966] pgpgin 0 [ 2389.941519][ T2966] pgpgout 0 [ 2389.945329][ T2966] pgfault 1 [ 2389.956732][ T2966] pgmajfault 0 [ 2389.960094][ T2966] inactive_anon 0 [ 2389.963700][ T2966] active_anon 0 [ 2389.967133][ T2966] inactive_file 0 [ 2389.970740][ T2966] active_file 0 [ 2389.974168][ T2966] unevictable 0 [ 2389.977605][ T2966] hierarchical_memory_limit 8192 [ 2389.982511][ T2966] hierarchical_memsw_limit 9223372036854771712 [ 2389.988631][ T2966] total_cache 0 [ 2389.992060][ T2966] total_rss 0 [ 2389.995322][ T2966] total_rss_huge 0 [ 2389.999025][ T2966] total_shmem 0 [ 2390.002455][ T2966] total_mapped_file 0 [ 2390.006405][ T2966] total_dirty 0 [ 2390.009835][ T2966] total_writeback 0 [ 2390.013677][ T2966] total_workingset_refault_anon 0 [ 2390.018691][ T2966] total_workingset_refault_file 0 [ 2390.023703][ T2966] total_swap 0 [ 2390.027069][ T2966] total_swapcached 0 [ 2390.030951][ T2966] total_pgpgin 0 [ 2390.034482][ T2966] total_pgpgout 0 [ 2390.038087][ T2966] total_pgfault 1 [ 2390.041693][ T2966] total_pgmajfault 0 [ 2390.045559][ T2966] total_inactive_anon 0 [ 2390.049686][ T2966] total_active_anon 0 [ 2390.053641][ T2966] total_inactive_file 0 [ 2390.066987][ T2966] total_active_file 0 [ 2390.070974][ T2966] total_unevictable 0 [ 2390.074966][ T2966] anon_cost 0 [ 2390.078246][ T2966] file_cost 0 [ 2390.081510][ T2966] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.7830,pid=2965,uid=0 [ 2390.101038][ T2966] Memory cgroup out of memory: Killed process 2965 (syz.3.7830) total-vm:102516kB, anon-rss:1436kB, file-rss:22932kB, shmem-rss:11480kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 2390.769840][ T2998] fuse: Bad value for 'user_id' [ 2390.777237][ T2998] fuse: Bad value for 'user_id' [ 2390.881819][ T3003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2390.892028][ T3003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2390.902404][ T30] kauditd_printk_skb: 4751 callbacks suppressed [ 2390.902418][ T30] audit: type=1326 audit(1786666311.999:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3001 comm="syz.2.7841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6912f9e0d9 code=0x7ffc0000 [ 2390.969135][ T30] audit: type=1326 audit(1786666311.999:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3001 comm="syz.2.7841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6912f9e0d9 code=0x7ffc0000 [ 2391.014701][ T30] audit: type=1326 audit(1786666312.049:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3001 comm="syz.2.7841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f6912f9e0d9 code=0x7ffc0000 [ 2391.043485][ T30] audit: type=1326 audit(1786666312.049:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3001 comm="syz.2.7841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6912f9e0d9 code=0x7ffc0000 [ 2391.124765][ T30] audit: type=1326 audit(1786666312.049:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3001 comm="syz.2.7841" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6912f9e0d9 code=0x7ffc0000 [ 2391.248040][ T2964] workqueue: Failed to create a rescuer kthread for wq "dio/fuse": -EINTR [ 2391.516462][ T3007] FAULT_INJECTION: forcing a failure. [ 2391.516462][ T3007] name failslab, interval 1, probability 0, space 0, times 0 [ 2391.538429][ T3007] CPU: 0 UID: 0 PID: 3007 Comm: syz.2.7842 Tainted: G L syzkaller #0 PREEMPT(full) [ 2391.538446][ T3007] Tainted: [L]=SOFTLOCKUP [ 2391.538450][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2391.538456][ T3007] Call Trace: [ 2391.538461][ T3007] [ 2391.538465][ T3007] dump_stack_lvl+0xe8/0x150 [ 2391.538485][ T3007] should_fail_ex+0x40c/0x560 [ 2391.538500][ T3007] should_failslab+0xa8/0x100 [ 2391.538515][ T3007] __kmalloc_noprof+0xfe/0x720 [ 2391.538528][ T3007] ? kobject_get_path+0xc5/0x2f0 [ 2391.538539][ T3007] ? kobject_get_path+0xc5/0x2f0 [ 2391.538551][ T3007] kobject_get_path+0xc5/0x2f0 [ 2391.538563][ T3007] kobject_uevent_env+0x29e/0x9e0 [ 2391.538589][ T3007] device_del+0x74d/0x8f0 [ 2391.538681][ T3007] ? _raw_spin_unlock+0x28/0x50 [ 2391.538697][ T3007] ? __pfx_device_del+0x10/0x10 [ 2391.538707][ T3007] ? do_raw_spin_unlock+0xf5/0x210 [ 2391.538721][ T3007] device_unregister+0x21/0xf0 [ 2391.538732][ T3007] bdi_unregister+0x43e/0x530 [ 2391.538752][ T3007] ? __pfx_bdi_unregister+0x10/0x10 [ 2391.538768][ T3007] ? kernfs_remove_by_name_ns+0x101/0x140 [ 2391.538792][ T3007] __del_gendisk+0x405/0x920 [ 2391.538831][ T3007] ? del_gendisk+0xdf/0x160 [ 2391.538844][ T3007] ? __pfx___del_gendisk+0x10/0x10 [ 2391.538854][ T3007] ? down_read+0x2be/0x330 [ 2391.538870][ T3007] del_gendisk+0xe7/0x160 [ 2391.538881][ T3007] loop_remove+0x42/0xc0 [ 2391.538922][ T3007] loop_control_ioctl+0x4a6/0x5a0 [ 2391.538935][ T3007] ? __pfx_loop_control_ioctl+0x10/0x10 [ 2391.538945][ T3007] ? __fget_files+0x2a/0x420 [ 2391.538959][ T3007] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2391.538970][ T3007] ? __pfx_loop_control_ioctl+0x10/0x10 [ 2391.538982][ T3007] __se_sys_ioctl+0xfc/0x170 [ 2391.538991][ T3007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2391.539001][ T3007] do_syscall_64+0x174/0x580 [ 2391.539015][ T3007] ? clear_bhb_loop+0x70/0xc0 [ 2391.539027][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2391.539036][ T3007] RIP: 0033:0x7f6912f9e0d9 [ 2391.539047][ T3007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2391.539055][ T3007] RSP: 002b:00007f6913f4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2391.539066][ T3007] RAX: ffffffffffffffda RBX: 00007f6913225fa0 RCX: 00007f6912f9e0d9 [ 2391.539073][ T3007] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 2391.539079][ T3007] RBP: 00007f6913f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 2391.539085][ T3007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2391.539091][ T3007] R13: 00007f6913226038 R14: 00007f6913225fa0 R15: 00007f691334fa48 [ 2391.539106][ T3007] [ 2391.545169][ T3014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7845'. [ 2391.834656][ T2976] syz.1.7834 (2976) used greatest stack depth: 18296 bytes left [ 2391.998800][ T3021] FAULT_INJECTION: forcing a failure. [ 2391.998800][ T3021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2392.031188][ T3021] CPU: 1 UID: 0 PID: 3021 Comm: syz.2.7848 Tainted: G L syzkaller #0 PREEMPT(full) [ 2392.031215][ T3021] Tainted: [L]=SOFTLOCKUP [ 2392.031222][ T3021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2392.031232][ T3021] Call Trace: [ 2392.031238][ T3021] [ 2392.031246][ T3021] dump_stack_lvl+0xe8/0x150 [ 2392.031274][ T3021] should_fail_ex+0x40c/0x560 [ 2392.031298][ T3021] _copy_from_iter+0x1d3/0x1660 [ 2392.031318][ T3021] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 2392.031338][ T3021] ? rcu_is_watching+0x15/0xb0 [ 2392.031362][ T3021] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2392.031383][ T3021] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 2392.031400][ T3021] ? __pfx__copy_from_iter+0x10/0x10 [ 2392.031419][ T3021] ? __alloc_skb+0x276/0x7a0 [ 2392.031434][ T3021] ? __alloc_skb+0x276/0x7a0 [ 2392.031454][ T3021] ? netlink_sendmsg+0x650/0xb40 [ 2392.031472][ T3021] ? skb_put+0x112/0x210 [ 2392.031491][ T3021] netlink_sendmsg+0x6c0/0xb40 [ 2392.031516][ T3021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2392.031537][ T3021] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2392.031558][ T3021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2392.031576][ T3021] sock_sendmsg_nosec+0x13a/0x180 [ 2392.031600][ T3021] ____sys_sendmsg+0x54e/0x850 [ 2392.031623][ T3021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2392.031649][ T3021] ? import_iovec+0x73/0xa0 [ 2392.031673][ T3021] ___sys_sendmsg+0x2a5/0x360 [ 2392.031690][ T3021] ? __lock_acquire+0x683/0x2cf0 [ 2392.031714][ T3021] ? __pfx____sys_sendmsg+0x10/0x10 [ 2392.031761][ T3021] ? __fget_files+0x2a/0x420 [ 2392.031780][ T3021] ? __fget_files+0x3a2/0x420 [ 2392.031808][ T3021] __x64_sys_sendmsg+0x1b1/0x290 [ 2392.031827][ T3021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2392.031859][ T3021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2392.031877][ T3021] do_syscall_64+0x174/0x580 [ 2392.031897][ T3021] ? trace_irq_disable+0x3b/0x140 [ 2392.031917][ T3021] ? clear_bhb_loop+0x70/0xc0 [ 2392.031937][ T3021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2392.031952][ T3021] RIP: 0033:0x7f6912f9e0d9 [ 2392.031968][ T3021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2392.031982][ T3021] RSP: 002b:00007f6913f4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2392.032000][ T3021] RAX: ffffffffffffffda RBX: 00007f6913225fa0 RCX: 00007f6912f9e0d9 [ 2392.032012][ T3021] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 2392.032023][ T3021] RBP: 00007f6913f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 2392.032040][ T3021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2392.032050][ T3021] R13: 00007f6913226038 R14: 00007f6913225fa0 R15: 00007f691334fa48 [ 2392.032077][ T3021] [ 2392.492840][ T9890] net_ratelimit: 9 callbacks suppressed [ 2392.492858][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2392.512783][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2392.591377][ T3028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2392.609622][ T3028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2392.973845][ T3030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2393.043406][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2393.059001][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2393.371415][ T9] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 2393.533040][T29930] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2393.587072][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2393.602256][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2393.732842][T29930] usb 4-1: Using ep0 maxpacket: 16 [ 2393.743188][T29930] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2393.766385][T29930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.783025][T29930] usb 4-1: Product: syz [ 2393.793640][T29930] usb 4-1: Manufacturer: syz [ 2393.794264][ T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 2393.802840][T29930] usb 4-1: SerialNumber: syz [ 2393.818811][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 2393.831679][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2393.855375][T29930] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2393.864800][T29930] r8152-cfgselector 4-1: config 0 descriptor?? [ 2393.873175][ T9] usb 3-1: config 0 has no interface number 0 [ 2393.879296][ T9] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2393.889965][ T9] usb 3-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2393.902726][ T9] usb 3-1: config 0 interface 2 has no altsetting 0 [ 2394.077990][T29930] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2394.084863][T29930] r8152-cfgselector 4-1: No union descriptors [ 2394.176185][ T9892] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2394.190447][ T9892] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2394.223356][ T3062] syz.1.7857 (3062): drop_caches: 2 [ 2394.281996][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.290950][ T9] usb 3-1: Product: syz [ 2394.296023][ T9] usb 3-1: Manufacturer: syz [ 2394.301687][ T9] usb 3-1: SerialNumber: syz [ 2394.313026][ T9] usb 3-1: config 0 descriptor?? [ 2394.320251][ T3030] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2394.338955][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2394.352352][ T9] usb 3-1: invalid MIDI in EP 0 [ 2394.367031][T29930] r8152-cfgselector 4-1: USB disconnect, device number 39 [ 2394.399909][ T30] audit: type=1326 audit(1786666315.529:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.1.7859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2394.459807][ T30] audit: type=1326 audit(1786666315.529:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.1.7859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2394.505114][ T30] audit: type=1326 audit(1786666315.529:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.1.7859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2394.534076][ T30] audit: type=1326 audit(1786666315.529:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.1.7859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2394.561127][ T30] audit: type=1326 audit(1786666315.529:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3063 comm="syz.1.7859" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa89df9e0d9 code=0x7ffc0000 [ 2394.591614][ T3071] FAULT_INJECTION: forcing a failure. [ 2394.591614][ T3071] name failslab, interval 1, probability 0, space 0, times 0 [ 2394.609906][ T3071] CPU: 1 UID: 0 PID: 3071 Comm: syz.5.7861 Tainted: G L syzkaller #0 PREEMPT(full) [ 2394.609932][ T3071] Tainted: [L]=SOFTLOCKUP [ 2394.609939][ T3071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2394.609949][ T3071] Call Trace: [ 2394.609956][ T3071] [ 2394.609964][ T3071] dump_stack_lvl+0xe8/0x150 [ 2394.609992][ T3071] should_fail_ex+0x40c/0x560 [ 2394.610017][ T3071] should_failslab+0xa8/0x100 [ 2394.610042][ T3071] __kmalloc_cache_node_noprof+0xaa/0x630 [ 2394.610066][ T3071] ? __get_vm_area_node+0x136/0x300 [ 2394.610082][ T3071] ? __get_vm_area_node+0x136/0x300 [ 2394.610106][ T3071] __get_vm_area_node+0x136/0x300 [ 2394.610129][ T3071] __vmalloc_node_range_noprof+0x358/0x1730 [ 2394.610148][ T3071] ? copy_process+0x820/0x4390 [ 2394.610215][ T3071] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2394.610233][ T3071] ? rcu_is_watching+0x15/0xb0 [ 2394.610254][ T3071] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 2394.610272][ T3071] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2394.610288][ T3071] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 2394.610307][ T3071] ? memcpy_and_pad+0x48/0x80 [ 2394.610328][ T3071] __vmalloc_node_noprof+0xc2/0x100 [ 2394.610344][ T3071] ? copy_process+0x820/0x4390 [ 2394.610359][ T3071] ? copy_process+0x820/0x4390 [ 2394.610378][ T3071] dup_task_struct+0x2a0/0x8e0 [ 2394.610399][ T3071] copy_process+0x820/0x4390 [ 2394.610443][ T3071] ? __pfx_copy_process+0x10/0x10 [ 2394.610466][ T3071] ? mutex_init_lockdep+0xdf/0x110 [ 2394.610493][ T3071] vhost_task_create+0x1f9/0x380 [ 2394.610523][ T3071] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2394.610552][ T3071] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2394.610577][ T3071] ? __pfx_vhost_task_create+0x10/0x10 [ 2394.610606][ T3071] ? __pfx_vhost_task_fn+0x10/0x10 [ 2394.610634][ T3071] ? __lock_acquire+0x683/0x2cf0 [ 2394.610656][ T3071] ? __kasan_slab_free+0x5c/0x80 [ 2394.610674][ T3071] ? kfree+0x1c5/0x640 [ 2394.610693][ T3071] kvm_mmu_post_init_vm+0x147/0x2b0 [ 2394.610714][ T3071] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 2394.610743][ T3071] ? look_up_lock_class+0x57/0x110 [ 2394.610765][ T3071] ? register_lock_class+0x31/0x2e0 [ 2394.610784][ T3071] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2394.610804][ T3071] ? __lock_acquire+0x683/0x2cf0 [ 2394.610829][ T3071] ? __mutex_lock+0x30d/0x1550 [ 2394.610859][ T3071] ? kasan_quarantine_put+0xbb/0x1f0 [ 2394.610890][ T3071] ? do_raw_write_lock+0x11d/0x260 [ 2394.610923][ T3071] kvm_vcpu_ioctl+0xa61/0xfd0 [ 2394.610946][ T3071] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2394.610960][ T3071] ? hook_file_ioctl+0x1f0/0x5f0 [ 2394.611002][ T3071] ? __fget_files+0x2a/0x420 [ 2394.611024][ T3071] ? __fget_files+0x2a/0x420 [ 2394.611042][ T3071] ? __fget_files+0x3a2/0x420 [ 2394.611060][ T3071] ? __fget_files+0x2a/0x420 [ 2394.611082][ T3071] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2394.611102][ T3071] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2394.611118][ T3071] __se_sys_ioctl+0xfc/0x170 [ 2394.611135][ T3071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2394.611153][ T3071] do_syscall_64+0x174/0x580 [ 2394.611172][ T3071] ? trace_irq_disable+0x3b/0x140 [ 2394.611191][ T3071] ? clear_bhb_loop+0x70/0xc0 [ 2394.611211][ T3071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2394.611227][ T3071] RIP: 0033:0x7fb30df9e0d9 [ 2394.611243][ T3071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2394.611257][ T3071] RSP: 002b:00007fb30eee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2394.611275][ T3071] RAX: ffffffffffffffda RBX: 00007fb30e226090 RCX: 00007fb30df9e0d9 [ 2394.611287][ T3071] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2394.611297][ T3071] RBP: 00007fb30eee4090 R08: 0000000000000000 R09: 0000000000000000 [ 2394.611308][ T3071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2394.611318][ T3071] R13: 00007fb30e226128 R14: 00007fb30e226090 R15: 00007fb30e34fa48 [ 2394.611350][ T3071] [ 2394.612094][ T3071] syz.5.7861: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2394.700059][ T9] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 2394.703398][ T3071] ,cpuset= [ 2394.732095][ T9] usb 3-1: USB disconnect, device number 30 [ 2394.746004][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2394.781633][ T2345] udevd[2345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2395.024798][ T3071] /,mems_allowed=0-1 [ 2395.071014][ T3071] CPU: 0 UID: 0 PID: 3071 Comm: syz.5.7861 Tainted: G L syzkaller #0 PREEMPT(full) [ 2395.071038][ T3071] Tainted: [L]=SOFTLOCKUP [ 2395.071044][ T3071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2395.071053][ T3071] Call Trace: [ 2395.071061][ T3071] [ 2395.071069][ T3071] dump_stack_lvl+0xe8/0x150 [ 2395.071097][ T3071] warn_alloc+0x24c/0x270 [ 2395.071119][ T3071] ? __kasan_kmalloc+0x22/0xb0 [ 2395.071143][ T3071] ? __pfx_warn_alloc+0x10/0x10 [ 2395.071173][ T3071] ? __get_vm_area_node+0x2af/0x300 [ 2395.071197][ T3071] __vmalloc_node_range_noprof+0x37d/0x1730 [ 2395.071246][ T3071] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2395.071263][ T3071] ? rcu_is_watching+0x15/0xb0 [ 2395.071285][ T3071] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 2395.071311][ T3071] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2395.071327][ T3071] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 2395.071348][ T3071] ? memcpy_and_pad+0x48/0x80 [ 2395.071370][ T3071] __vmalloc_node_noprof+0xc2/0x100 [ 2395.071389][ T3071] ? copy_process+0x820/0x4390 [ 2395.071406][ T3071] ? copy_process+0x820/0x4390 [ 2395.071426][ T3071] dup_task_struct+0x2a0/0x8e0 [ 2395.071449][ T3071] copy_process+0x820/0x4390 [ 2395.071497][ T3071] ? __pfx_copy_process+0x10/0x10 [ 2395.071523][ T3071] ? mutex_init_lockdep+0xdf/0x110 [ 2395.071549][ T3071] vhost_task_create+0x1f9/0x380 [ 2395.071571][ T3071] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2395.071595][ T3071] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2395.071619][ T3071] ? __pfx_vhost_task_create+0x10/0x10 [ 2395.071649][ T3071] ? __pfx_vhost_task_fn+0x10/0x10 [ 2395.071677][ T3071] ? __lock_acquire+0x683/0x2cf0 [ 2395.071699][ T3071] ? __kasan_slab_free+0x5c/0x80 [ 2395.071717][ T3071] ? kfree+0x1c5/0x640 [ 2395.071737][ T3071] kvm_mmu_post_init_vm+0x147/0x2b0 [ 2395.071758][ T3071] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 2395.071788][ T3071] ? look_up_lock_class+0x57/0x110 [ 2395.071810][ T3071] ? register_lock_class+0x31/0x2e0 [ 2395.071830][ T3071] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2395.071851][ T3071] ? __lock_acquire+0x683/0x2cf0 [ 2395.071877][ T3071] ? __mutex_lock+0x30d/0x1550 [ 2395.071901][ T3071] ? kasan_quarantine_put+0xbb/0x1f0 [ 2395.071933][ T3071] ? do_raw_write_lock+0x11d/0x260 [ 2395.071967][ T3071] kvm_vcpu_ioctl+0xa61/0xfd0 [ 2395.071990][ T3071] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2395.072005][ T3071] ? hook_file_ioctl+0x1f0/0x5f0 [ 2395.072048][ T3071] ? __fget_files+0x2a/0x420 [ 2395.072071][ T3071] ? __fget_files+0x2a/0x420 [ 2395.072089][ T3071] ? __fget_files+0x3a2/0x420 [ 2395.072108][ T3071] ? __fget_files+0x2a/0x420 [ 2395.072130][ T3071] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2395.072150][ T3071] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2395.072167][ T3071] __se_sys_ioctl+0xfc/0x170 [ 2395.072183][ T3071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2395.072201][ T3071] do_syscall_64+0x174/0x580 [ 2395.072222][ T3071] ? trace_irq_disable+0x3b/0x140 [ 2395.072241][ T3071] ? clear_bhb_loop+0x70/0xc0 [ 2395.072261][ T3071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2395.072278][ T3071] RIP: 0033:0x7fb30df9e0d9 [ 2395.072295][ T3071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2395.072314][ T3071] RSP: 002b:00007fb30eee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2395.072332][ T3071] RAX: ffffffffffffffda RBX: 00007fb30e226090 RCX: 00007fb30df9e0d9 [ 2395.072344][ T3071] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2395.072355][ T3071] RBP: 00007fb30eee4090 R08: 0000000000000000 R09: 0000000000000000 [ 2395.072366][ T3071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2395.072376][ T3071] R13: 00007fb30e226128 R14: 00007fb30e226090 R15: 00007fb30e34fa48 [ 2395.072406][ T3071] [ 2395.072423][ T3071] Mem-Info: [ 2395.579164][ T3071] active_anon:8092 inactive_anon:60 isolated_anon:0 [ 2395.579164][ T3071] active_file:6 inactive_file:44820 isolated_file:0 [ 2395.579164][ T3071] unevictable:0 dirty:66 writeback:0 [ 2395.579164][ T3071] slab_reclaimable:7119 slab_unreclaimable:106282 [ 2395.579164][ T3071] mapped:37709 shmem:1828 pagetables:2039 [ 2395.579164][ T3071] sec_pagetables:0 bounce:0 [ 2395.579164][ T3071] kernel_misc_reclaimable:0 [ 2395.579164][ T3071] free:1278743 free_pcp:11370 free_cma:0 [ 2395.692779][ T3071] Node 0 active_anon:27068kB inactive_anon:240kB active_file:24kB inactive_file:179052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145408kB dirty:364kB writeback:0kB shmem:2012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13512kB pagetables:8148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2395.752976][ T3071] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2395.793378][ T3071] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2395.935705][ T3071] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 2395.941465][ T3071] Node 0 DMA32 free:1157896kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27540kB inactive_anon:224kB active_file:24kB inactive_file:179052kB unevictable:0kB writepending:468kB zspages:1332kB present:3129332kB managed:2548632kB mlocked:0kB bounce:0kB free_pcp:45648kB local_pcp:20704kB free_cma:0kB [ 2396.007103][ T3071] lowmem_reserve[]: 0 0 0 0 0 [ 2396.049112][ T3071] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2396.098187][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2396.182992][T29930] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2396.219469][ T3071] lowmem_reserve[]: 0 0 0 0 0 [ 2396.235492][ T3071] Node 1 Normal free:3942168kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2396.283946][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 2396.314554][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2396.339094][ T3071] lowmem_reserve[]: 0 0 0 0 0 [ 2396.343821][ T3071] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2396.389612][ T3071] Node 0 DMA32: 884*4kB (UM) 695*8kB (UME) 750*16kB (UM) 1809*32kB (UME) 522*64kB (UME) 131*128kB (UME) 78*256kB (ME) 46*512kB (UME) 12*1024kB (UME) 3*2048kB (UME) 236*4096kB (UM) = 1157768kB [ 2396.437357][ T3071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2396.449171][T29930] usb 3-1: Using ep0 maxpacket: 16 [ 2396.484930][T29930] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2396.507035][T29930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.522714][ T3071] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 10*16kB (UM) 3*32kB (U) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 4*2048kB (UM) 959*4096kB (M) = 3942168kB [ 2396.548740][T29930] usb 3-1: config 0 descriptor?? [ 2396.591153][T29930] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2396.600760][ T9] usb 4-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 2396.612565][ T9] usb 4-1: Product: syz [ 2396.628015][ T3071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2396.637569][ T3071] Node 0 hugepages_total=8 hugepages_free=8 hugepages_surp=4 hugepages_size=2048kB [ 2396.646845][ T3071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2396.656383][ T3071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2396.665650][ T3071] 45371 total pagecache pages [ 2396.670323][ T3071] 58 pages in swap cache [ 2396.674587][ T9] usb 4-1: SerialNumber: syz [ 2396.712216][ T9] usb 4-1: config 0 descriptor?? [ 2396.732538][ T3071] Free swap = 122148kB [ 2396.736962][ T3071] Total swap = 124996kB [ 2396.741194][ T3071] 2097051 pages RAM [ 2396.745002][ T3071] 0 pages HighMem/MovableOnly [ 2396.749672][ T3071] 428213 pages reserved [ 2396.753821][ T3071] 0 pages cma reserved [ 2396.875149][T29930] gspca_sonixj: reg_w1 err -71 [ 2396.885845][T29930] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 2396.914096][T29930] usb 3-1: USB disconnect, device number 31 [ 2396.957943][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 2396.960237][ T3104] FAULT_INJECTION: forcing a failure. [ 2396.960237][ T3104] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.966992][ T9] usb 4-1: Detected SIO [ 2397.002540][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2397.023508][ T3104] CPU: 1 UID: 0 PID: 3104 Comm: syz.0.7870 Tainted: G L syzkaller #0 PREEMPT(full) [ 2397.023536][ T3104] Tainted: [L]=SOFTLOCKUP [ 2397.023542][ T3104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2397.023551][ T3104] Call Trace: [ 2397.023558][ T3104] [ 2397.023565][ T3104] dump_stack_lvl+0xe8/0x150 [ 2397.023594][ T3104] should_fail_ex+0x40c/0x560 [ 2397.023617][ T3104] should_failslab+0xa8/0x100 [ 2397.023641][ T3104] __kmalloc_cache_noprof+0xa8/0x660 [ 2397.023662][ T3104] ? iommufd_test+0x2258/0x6050 [ 2397.023687][ T3104] ? iommufd_test+0x2258/0x6050 [ 2397.023711][ T3104] iommufd_test+0x2258/0x6050 [ 2397.023737][ T3104] ? __lock_acquire+0x683/0x2cf0 [ 2397.023758][ T3104] ? __pfx_iommufd_test+0x10/0x10 [ 2397.023787][ T3104] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2397.023810][ T3104] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2397.023833][ T3104] ? __might_fault+0xaf/0x130 [ 2397.023852][ T3104] ? __might_fault+0xaf/0x130 [ 2397.023888][ T3104] iommufd_fops_ioctl+0x465/0x600 [ 2397.023917][ T3104] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2397.023943][ T3104] ? __fget_files+0x2a/0x420 [ 2397.023968][ T3104] ? __fget_files+0x2a/0x420 [ 2397.023989][ T3104] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2397.024008][ T3104] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2397.024029][ T3104] __se_sys_ioctl+0xfc/0x170 [ 2397.024043][ T3104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2397.024062][ T3104] do_syscall_64+0x174/0x580 [ 2397.024082][ T3104] ? trace_irq_disable+0x3b/0x140 [ 2397.024101][ T3104] ? clear_bhb_loop+0x70/0xc0 [ 2397.024121][ T3104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2397.024138][ T3104] RIP: 0033:0x7fcd0839e0d9 [ 2397.024154][ T3104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2397.024168][ T3104] RSP: 002b:00007fcd09193028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2397.024185][ T3104] RAX: ffffffffffffffda RBX: 00007fcd08625fa0 RCX: 00007fcd0839e0d9 [ 2397.024197][ T3104] RDX: 0000200000000500 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 2397.024208][ T3104] RBP: 00007fcd09193090 R08: 0000000000000000 R09: 0000000000000000 [ 2397.024218][ T3104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2397.024228][ T3104] R13: 00007fcd08626038 R14: 00007fcd08625fa0 R15: 00007fcd0874fa48 [ 2397.024253][ T3104] [ 2397.523762][ T9] usb 4-1: USB disconnect, device number 40 [ 2397.533556][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2397.543388][ T9] ftdi_sio 4-1:0.0: device disconnected [ 2397.849907][ T9892] net_ratelimit: 9 callbacks suppressed [ 2397.849923][ T9892] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2397.869730][ T9892] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2398.118475][ T3115] FAULT_INJECTION: forcing a failure. [ 2398.118475][ T3115] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.148997][ T3115] CPU: 1 UID: 0 PID: 3115 Comm: syz.5.7874 Tainted: G L syzkaller #0 PREEMPT(full) [ 2398.149024][ T3115] Tainted: [L]=SOFTLOCKUP [ 2398.149030][ T3115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2398.149039][ T3115] Call Trace: [ 2398.149046][ T3115] [ 2398.149054][ T3115] dump_stack_lvl+0xe8/0x150 [ 2398.149093][ T3115] should_fail_ex+0x40c/0x560 [ 2398.149114][ T3115] ? io_alloc_cache_init+0x42/0x140 [ 2398.149220][ T3115] should_failslab+0xa8/0x100 [ 2398.149245][ T3115] __kvmalloc_node_noprof+0x176/0x860 [ 2398.149269][ T3115] ? percpu_ref_init+0xc5/0x350 [ 2398.149287][ T3115] ? percpu_ref_init+0xc5/0x350 [ 2398.149305][ T3115] ? io_alloc_cache_init+0x42/0x140 [ 2398.149328][ T3115] io_alloc_cache_init+0x42/0x140 [ 2398.149349][ T3115] io_ring_ctx_alloc+0x4d0/0xc40 [ 2398.149380][ T3115] io_uring_create+0x50/0x990 [ 2398.149406][ T3115] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 2398.149482][ T3115] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2398.149506][ T3115] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 2398.149541][ T3115] ? __pfx_ksys_write+0x10/0x10 [ 2398.149572][ T3115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2398.149591][ T3115] do_syscall_64+0x174/0x580 [ 2398.149613][ T3115] ? clear_bhb_loop+0x70/0xc0 [ 2398.149633][ T3115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2398.149650][ T3115] RIP: 0033:0x7fb30df9e0d9 [ 2398.149666][ T3115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2398.149681][ T3115] RSP: 002b:00007fb30ef04fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2398.149698][ T3115] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fb30df9e0d9 [ 2398.149710][ T3115] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 000000000000001d [ 2398.149722][ T3115] RBP: 00007fb30ef05090 R08: 0000000000000000 R09: 0000000000000101 [ 2398.149732][ T3115] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000280 [ 2398.149743][ T3115] R13: 0000200000000140 R14: 0000200000000100 R15: 00007fb30e34fa48 [ 2398.149771][ T3115] [ 2398.382768][ T3121] FAULT_INJECTION: forcing a failure. [ 2398.382768][ T3121] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.392938][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2398.396410][ T3121] CPU: 1 UID: 0 PID: 3121 Comm: syz.2.7876 Tainted: G L syzkaller #0 PREEMPT(full) [ 2398.396436][ T3121] Tainted: [L]=SOFTLOCKUP [ 2398.396442][ T3121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2398.396451][ T3121] Call Trace: [ 2398.396458][ T3121] [ 2398.396466][ T3121] dump_stack_lvl+0xe8/0x150 [ 2398.396494][ T3121] should_fail_ex+0x40c/0x560 [ 2398.396518][ T3121] should_failslab+0xa8/0x100 [ 2398.396541][ T3121] __kmalloc_cache_noprof+0xa8/0x660 [ 2398.396561][ T3121] ? fsnotify_add_mark_locked+0x354/0x1230 [ 2398.396597][ T3121] ? fsnotify_add_mark_locked+0x354/0x1230 [ 2398.396620][ T3121] fsnotify_add_mark_locked+0x354/0x1230 [ 2398.396645][ T3121] ? __se_sys_inotify_add_watch+0x93a/0xf30 [ 2398.396667][ T3121] __se_sys_inotify_add_watch+0xa11/0xf30 [ 2398.396696][ T3121] ? __pfx___se_sys_inotify_add_watch+0x10/0x10 [ 2398.396724][ T3121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2398.396741][ T3121] do_syscall_64+0x174/0x580 [ 2398.396761][ T3121] ? trace_irq_disable+0x3b/0x140 [ 2398.396780][ T3121] ? clear_bhb_loop+0x70/0xc0 [ 2398.396800][ T3121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2398.396816][ T3121] RIP: 0033:0x7f6912f9e0d9 [ 2398.396831][ T3121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2398.396845][ T3121] RSP: 002b:00007f6913f4b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 2398.396862][ T3121] RAX: ffffffffffffffda RBX: 00007f6913225fa0 RCX: 00007f6912f9e0d9 [ 2398.396873][ T3121] RDX: 00000000000008c7 RSI: 0000200000000240 RDI: 0000000000000005 [ 2398.396884][ T3121] RBP: 00007f6913f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 2398.396894][ T3121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2398.396904][ T3121] R13: 00007f6913226038 R14: 00007f6913225fa0 R15: 00007f691334fa48 [ 2398.396930][ T3121] [ 2398.605446][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2398.652079][ T3123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2398.962850][ T2296] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2399.114149][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2399.123131][ T2296] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2399.135751][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2399.150225][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2399.241885][ T2296] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2399.256005][ T2296] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 2399.273468][ T2296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.282979][ T2296] usb 4-1: Product: syz [ 2399.287153][ T2296] usb 4-1: Manufacturer: syz [ 2399.292837][ T2296] usb 4-1: SerialNumber: syz [ 2399.404091][ T3140] syzkaller0: entered promiscuous mode [ 2399.409589][ T3140] syzkaller0: entered allmulticast mode [ 2399.515434][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2399.638359][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2399.654900][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2399.670933][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2399.686017][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2399.696637][ T9] usb 3-1: config 0 descriptor?? [ 2400.202482][ T1839] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2400.526668][ T9] ath6kl: Unsupported hardware version: 0x0 [ 2400.537076][ T9] ath6kl: Failed to init ath6kl core: -22 [ 2400.543293][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 2400.766312][ T9] usb 3-1: USB disconnect, device number 32 [ 2401.466108][ T2296] cdc_ncm 4-1:1.0: bind() failure [ 2401.481517][ T2296] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 2401.505726][ T3152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7888'. [ 2401.518733][ T2296] usb 4-1: USB disconnect, device number 41 [ 2401.536927][ T3154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7887'. [ 2401.649706][ T3158] FAULT_INJECTION: forcing a failure. [ 2401.649706][ T3158] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.662357][ T3158] CPU: 1 UID: 0 PID: 3158 Comm: syz.3.7890 Tainted: G L syzkaller #0 PREEMPT(full) [ 2401.662379][ T3158] Tainted: [L]=SOFTLOCKUP [ 2401.662385][ T3158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2401.662393][ T3158] Call Trace: [ 2401.662401][ T3158] [ 2401.662409][ T3158] dump_stack_lvl+0xe8/0x150 [ 2401.662437][ T3158] should_fail_ex+0x40c/0x560 [ 2401.662455][ T3158] should_failslab+0xa8/0x100 [ 2401.662470][ T3158] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2401.662482][ T3158] ? skb_clone+0x212/0x3a0 [ 2401.662493][ T3158] ? skb_clone+0x212/0x3a0 [ 2401.662506][ T3158] skb_clone+0x212/0x3a0 [ 2401.662518][ T3158] __netlink_deliver_tap+0x413/0x860 [ 2401.662535][ T3158] ? netlink_deliver_tap+0x2e/0x1b0 [ 2401.662546][ T3158] netlink_deliver_tap+0x19c/0x1b0 [ 2401.662557][ T3158] netlink_unicast+0x77f/0x940 [ 2401.662572][ T3158] netlink_sendmsg+0x813/0xb40 [ 2401.662588][ T3158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2401.662600][ T3158] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2401.662615][ T3158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2401.662625][ T3158] sock_sendmsg_nosec+0x13a/0x180 [ 2401.662640][ T3158] ____sys_sendmsg+0x54e/0x850 [ 2401.662653][ T3158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2401.662667][ T3158] ? import_iovec+0x73/0xa0 [ 2401.662683][ T3158] ___sys_sendmsg+0x2a5/0x360 [ 2401.662692][ T3158] ? __lock_acquire+0x683/0x2cf0 [ 2401.662707][ T3158] ? __pfx____sys_sendmsg+0x10/0x10 [ 2401.662734][ T3158] ? __fget_files+0x2a/0x420 [ 2401.662745][ T3158] ? __fget_files+0x3a2/0x420 [ 2401.662761][ T3158] __x64_sys_sendmsg+0x1b1/0x290 [ 2401.662773][ T3158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2401.662792][ T3158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2401.662802][ T3158] do_syscall_64+0x174/0x580 [ 2401.662818][ T3158] ? clear_bhb_loop+0x70/0xc0 [ 2401.662830][ T3158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2401.662839][ T3158] RIP: 0033:0x7f1ed939e0d9 [ 2401.662849][ T3158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2401.662857][ T3158] RSP: 002b:00007f1eda1e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2401.662873][ T3158] RAX: ffffffffffffffda RBX: 00007f1ed9625fa0 RCX: 00007f1ed939e0d9 [ 2401.662880][ T3158] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2401.662886][ T3158] RBP: 00007f1eda1e1090 R08: 0000000000000000 R09: 0000000000000000 [ 2401.662892][ T3158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2401.662898][ T3158] R13: 00007f1ed9626038 R14: 00007f1ed9625fa0 R15: 00007f1ed974fa48 [ 2401.662913][ T3158] [ 2402.110529][ T3168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2402.267019][ T3176] binder: 3174:3176 ioctl c0306201 2000000001c0 returned -14 [ 2402.278148][ T3176] binder: 3174:3176 ioctl 40806685 2000000007c0 returned -22 [ 2402.605552][ T3189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7899'. [ 2402.673720][ T3191] fuse: Bad value for 'user_id' [ 2402.678608][ T3191] fuse: Bad value for 'user_id' [ 2402.872800][T17457] net_ratelimit: 9 callbacks suppressed [ 2402.872817][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2402.892892][T17457] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2403.075748][ T3211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2403.085032][ T3211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2403.102787][ T985] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2403.273180][ T985] usb 3-1: Using ep0 maxpacket: 16 [ 2403.289751][ T985] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2403.300523][ T985] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 2403.343080][ T985] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2403.361860][ T985] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2403.382212][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.398142][ T985] usb 3-1: Product: syz [ 2403.402813][ T985] usb 3-1: Manufacturer: syz [ 2403.408362][ T985] usb 3-1: SerialNumber: syz [ 2403.465556][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2403.480326][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2403.999527][ T985] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2404.020906][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2404.035704][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2404.066283][ T985] usb 3-1: selecting invalid altsetting 1 [ 2404.083614][ T985] snd-usb-caiaq 3-1:1.0: can't set alt interface. [ 2404.099875][ T985] usb 3-1: unable to init card! (ret=-5) [ 2404.108785][ T985] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 2404.126348][ T985] usb 3-1: selecting invalid altsetting 1 [ 2404.132214][ T985] snd-usb-caiaq 3-1:1.1: can't set alt interface. [ 2404.139126][ T985] usb 3-1: unable to init card! (ret=-5) [ 2404.146294][ T985] snd-usb-caiaq 3-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 2404.170799][ T985] usb 3-1: USB disconnect, device number 33 [ 2404.265131][ T1744] udevd[1744]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2404.624840][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2404.639212][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2404.693044][ T3243] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7912'. [ 2404.858186][ T3245] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2404.877353][ T3245] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2404.951943][ T3245] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2404.970385][ T3245] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2404.999193][ T3245] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2405.019404][ T3245] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2405.045489][ T3245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2405.092181][ T3251] netlink: 'syz.3.7913': attribute type 1 has an invalid length. [ 2405.213018][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2405.227499][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2405.383052][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2405.746368][ T3260] netlink: 'syz.0.7916': attribute type 12 has an invalid length. [ 2405.756080][ T3260] netlink: 'syz.0.7916': attribute type 29 has an invalid length. [ 2405.772588][ T3260] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7916'. [ 2405.790673][ T3260] netlink: 'syz.0.7916': attribute type 1 has an invalid length. [ 2405.805705][ T3260] netlink: 'syz.0.7916': attribute type 2 has an invalid length. [ 2405.947286][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2405.954406][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.961355][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2405.971638][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.992297][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2406.009425][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2406.020544][ T9] usb 3-1: config 0 descriptor?? [ 2406.902808][ T3247] Bluetooth: hci1: command 0x0c1a tx timeout [ 2406.985974][ T3247] Bluetooth: hci2: command 0x2016 tx timeout [ 2406.986574][T13991] Bluetooth: hci3: command 0x0c1a tx timeout [ 2407.062804][ T3247] Bluetooth: hci4: command 0x0c1a tx timeout [ 2407.062812][T13991] Bluetooth: hci0: command 0x0406 tx timeout [ 2407.610326][ T3280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2407.621385][ T3280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2407.724760][ T3284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2407.737317][ T3284] FAULT_INJECTION: forcing a failure. [ 2407.737317][ T3284] name failslab, interval 1, probability 0, space 0, times 0 [ 2407.749994][ T3284] CPU: 1 UID: 0 PID: 3284 Comm: syz.2.7924 Tainted: G L syzkaller #0 PREEMPT(full) [ 2407.750016][ T3284] Tainted: [L]=SOFTLOCKUP [ 2407.750021][ T3284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2407.750030][ T3284] Call Trace: [ 2407.750037][ T3284] [ 2407.750044][ T3284] dump_stack_lvl+0xe8/0x150 [ 2407.750071][ T3284] should_fail_ex+0x40c/0x560 [ 2407.750095][ T3284] should_failslab+0xa8/0x100 [ 2407.750117][ T3284] __kmalloc_noprof+0xfe/0x720 [ 2407.750136][ T3284] ? _iommufd_object_alloc+0x28/0x210 [ 2407.750158][ T3284] ? _iommufd_object_alloc+0x28/0x210 [ 2407.750185][ T3284] _iommufd_object_alloc+0x28/0x210 [ 2407.750209][ T3284] iommufd_hwpt_nested_alloc+0x20c/0x4a0 [ 2407.750236][ T3284] iommufd_hwpt_alloc+0x526/0xc20 [ 2407.750259][ T3284] ? __pfx_iommufd_hwpt_alloc+0x10/0x10 [ 2407.750290][ T3284] iommufd_fops_ioctl+0x465/0x600 [ 2407.750319][ T3284] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2407.750346][ T3284] ? __fget_files+0x2a/0x420 [ 2407.750372][ T3284] ? __fget_files+0x2a/0x420 [ 2407.750394][ T3284] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2407.750413][ T3284] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2407.750435][ T3284] __se_sys_ioctl+0xfc/0x170 [ 2407.750451][ T3284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2407.750468][ T3284] do_syscall_64+0x174/0x580 [ 2407.750489][ T3284] ? trace_irq_disable+0x3b/0x140 [ 2407.750508][ T3284] ? clear_bhb_loop+0x70/0xc0 [ 2407.750529][ T3284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2407.750545][ T3284] RIP: 0033:0x7f6912f9e0d9 [ 2407.750561][ T3284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2407.750575][ T3284] RSP: 002b:00007f6913f4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2407.750592][ T3284] RAX: ffffffffffffffda RBX: 00007f6913225fa0 RCX: 00007f6912f9e0d9 [ 2407.750603][ T3284] RDX: 0000200000001000 RSI: 0000000000003b89 RDI: 0000000000000003 [ 2407.750613][ T3284] RBP: 00007f6913f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 2407.750623][ T3284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2407.750633][ T3284] R13: 00007f6913226038 R14: 00007f6913225fa0 R15: 00007f691334fa48 [ 2407.750659][ T3284] [ 2408.054254][ T2842] net_ratelimit: 8 callbacks suppressed [ 2408.054271][ T2842] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2408.074493][ T2842] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2408.091136][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 2408.105101][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2408.136724][ T3255] workqueue: Failed to create a rescuer kthread for wq "dio/fuse": -EINTR [ 2408.140521][ T9] usb 3-1: USB disconnect, device number 34 [ 2408.562901][T29930] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2408.593332][ T2842] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2408.608695][ T2842] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2408.722858][T29930] usb 4-1: Using ep0 maxpacket: 32 [ 2408.733593][T29930] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 2408.761078][T29930] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 2408.788976][T29930] usb 4-1: config 0 has no interface number 0 [ 2408.797354][T29930] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2408.807474][T29930] usb 4-1: config 0 interface 89 has no altsetting 0 [ 2408.819361][T29930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.827999][T29930] usb 4-1: Product: syz [ 2408.832197][T29930] usb 4-1: Manufacturer: syz [ 2408.837326][T29930] usb 4-1: SerialNumber: syz [ 2408.852522][T29930] usb 4-1: config 0 descriptor?? [ 2408.866947][T29930] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2408.879790][T29930] em28xx 4-1:0.89: Video interface 89 found: [ 2408.983609][T13991] Bluetooth: hci1: command 0x0c1a tx timeout [ 2409.071735][ T3308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2409.085855][ T3308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2409.139129][ T3308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2409.142863][T13991] Bluetooth: hci0: command 0x0406 tx timeout [ 2409.163078][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2409.177471][ T9890] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2409.193081][ T3308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2409.485420][T29930] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 2409.712887][ T1839] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2409.728866][ T1839] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2410.326221][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 2410.353535][T19854] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2410.849551][T29930] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2410.858660][ T985] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2410.880337][T29930] em28xx 4-1:0.89: board has no eeprom [ 2410.962839][T29930] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 2410.970732][T29930] em28xx 4-1:0.89: analog set to bulk mode. [ 2410.978613][ T5701] em28xx 4-1:0.89: Registering V4L2 extension [ 2411.015898][T29930] usb 4-1: USB disconnect, device number 42 [ 2411.064664][T29930] em28xx 4-1:0.89: Disconnecting em28xx [ 2411.112750][ T5701] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 2411.134670][ T985] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2411.153677][ T5701] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 2411.167827][ T985] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2411.185486][ T5701] em28xx 4-1:0.89: No AC97 audio processor [ 2411.222825][ T985] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2411.263520][ T985] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2411.274916][ T3359] fuse: Bad value for 'fd' [ 2411.305309][ T985] usb 3-1: Product: syz [ 2411.322565][ T5701] usb 4-1: Decoder not found [ 2411.397516][ T985] usb 3-1: Manufacturer: syz [ 2411.417575][ T5701] em28xx 4-1:0.89: failed to create media graph [ 2411.423909][ T985] usb 3-1: SerialNumber: syz [ 2411.447464][ T5701] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 2411.455749][ T985] usb 3-1: config 0 descriptor?? [ 2411.477222][ T3372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7948'. [ 2411.493063][ T3366] ================================================================== [ 2411.501181][ T3366] BUG: KASAN: slab-use-after-free in v4l2_open+0x397/0x3a0 [ 2411.508479][ T3366] Read of size 4 at addr ffff8880740b4860 by task v4l_id/3366 [ 2411.515950][ T3366] [ 2411.518285][ T3366] CPU: 0 UID: 0 PID: 3366 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 2411.518325][ T3366] Tainted: [L]=SOFTLOCKUP [ 2411.518329][ T3366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2411.518335][ T3366] Call Trace: [ 2411.518340][ T3366] [ 2411.518345][ T3366] dump_stack_lvl+0xe8/0x150 [ 2411.518361][ T3366] print_address_description+0x55/0x1e0 [ 2411.518374][ T3366] ? v4l2_open+0x397/0x3a0 [ 2411.518385][ T3366] print_report+0x58/0x70 [ 2411.518395][ T3366] kasan_report+0x117/0x150 [ 2411.518409][ T3366] ? v4l2_open+0x397/0x3a0 [ 2411.518419][ T3366] v4l2_open+0x397/0x3a0 [ 2411.518430][ T3366] chrdev_open+0x4d9/0x600 [ 2411.518441][ T3366] ? __pfx_chrdev_open+0x10/0x10 [ 2411.518450][ T3366] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 2411.518464][ T3366] ? __pfx_chrdev_open+0x10/0x10 [ 2411.518473][ T3366] do_dentry_open+0x816/0x1380 [ 2411.518486][ T3366] vfs_open+0x3b/0x340 [ 2411.518496][ T3366] ? path_openat+0x2e2d/0x3830 [ 2411.518509][ T3366] path_openat+0x2e44/0x3830 [ 2411.518522][ T3366] ? kasan_save_track+0x3e/0x80 [ 2411.518532][ T3366] ? do_sys_openat2+0xcc/0x200 [ 2411.518542][ T3366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2411.518556][ T3366] do_file_open+0x23e/0x4a0 [ 2411.518569][ T3366] ? __pfx_do_file_open+0x10/0x10 [ 2411.518586][ T3366] ? _raw_spin_unlock+0x28/0x50 [ 2411.518599][ T3366] ? alloc_fd+0x651/0x6c0 [ 2411.518611][ T3366] do_sys_openat2+0x115/0x200 [ 2411.518622][ T3366] ? __pfx_do_sys_openat2+0x10/0x10 [ 2411.518633][ T3366] ? exc_page_fault+0x6a/0xc0 [ 2411.518647][ T3366] ? do_user_addr_fault+0xc4a/0x1340 [ 2411.518659][ T3366] __x64_sys_openat+0x138/0x170 [ 2411.518670][ T3366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2411.518679][ T3366] do_syscall_64+0x174/0x580 [ 2411.518691][ T3366] ? trace_irq_disable+0x3b/0x140 [ 2411.518702][ T3366] ? clear_bhb_loop+0x70/0xc0 [ 2411.518713][ T3366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2411.518722][ T3366] RIP: 0033:0x7f17804a7407 [ 2411.518732][ T3366] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2411.518740][ T3366] RSP: 002b:00007fff46ac4830 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2411.518751][ T3366] RAX: ffffffffffffffda RBX: 00007f1780b84880 RCX: 00007f17804a7407 [ 2411.518758][ T3366] RDX: 0000000000000000 RSI: 00007fff46ac4f1b RDI: ffffffffffffff9c [ 2411.518765][ T3366] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2411.518771][ T3366] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2411.518776][ T3366] R13: 00007fff46ac4a80 R14: 00007f1780c89000 R15: 0000558ebe95d4d8 [ 2411.518786][ T3366] [ 2411.518790][ T3366] [ 2411.782034][ T3366] Allocated by task 5701: [ 2411.786410][ T3366] kasan_save_track+0x3e/0x80 [ 2411.791067][ T3366] __kasan_kmalloc+0x93/0xb0 [ 2411.795647][ T3366] __kmalloc_cache_noprof+0x32d/0x660 [ 2411.800994][ T3366] em28xx_v4l2_init+0x103/0x3300 [ 2411.805987][ T3366] em28xx_init_extension+0x120/0x1d0 [ 2411.811250][ T3366] process_scheduled_works+0xa8e/0x14e0 [ 2411.816788][ T3366] worker_thread+0xa47/0xfb0 [ 2411.821356][ T3366] kthread+0x388/0x470 [ 2411.825400][ T3366] ret_from_fork+0x514/0xb70 [ 2411.829964][ T3366] ret_from_fork_asm+0x1a/0x30 [ 2411.834705][ T3366] [ 2411.837005][ T3366] Freed by task 5701: [ 2411.840955][ T3366] kasan_save_track+0x3e/0x80 [ 2411.845607][ T3366] kasan_save_free_info+0x40/0x50 [ 2411.850602][ T3366] __kasan_slab_free+0x5c/0x80 [ 2411.855341][ T3366] kfree+0x1c5/0x640 [ 2411.859212][ T3366] em28xx_v4l2_init+0x1919/0x3300 [ 2411.864211][ T3366] em28xx_init_extension+0x120/0x1d0 [ 2411.869471][ T3366] process_scheduled_works+0xa8e/0x14e0 [ 2411.875005][ T3366] worker_thread+0xa47/0xfb0 [ 2411.879568][ T3366] kthread+0x388/0x470 [ 2411.883612][ T3366] ret_from_fork+0x514/0xb70 [ 2411.888177][ T3366] ret_from_fork_asm+0x1a/0x30 [ 2411.892917][ T3366] [ 2411.895216][ T3366] The buggy address belongs to the object at ffff8880740b4000 [ 2411.895216][ T3366] which belongs to the cache kmalloc-8k of size 8192 [ 2411.909245][ T3366] The buggy address is located 2144 bytes inside of [ 2411.909245][ T3366] freed 8192-byte region [ffff8880740b4000, ffff8880740b6000) [ 2411.923200][ T3366] [ 2411.925500][ T3366] The buggy address belongs to the physical page: [ 2411.931880][ T3366] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x740b0 [ 2411.940618][ T3366] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2411.949087][ T3366] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2411.956602][ T3366] page_type: f5(slab) [ 2411.960579][ T3366] raw: 00fff00000000040 ffff88801b005280 dead000000000100 dead000000000122 [ 2411.969138][ T3366] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2411.977695][ T3366] head: 00fff00000000040 ffff88801b005280 dead000000000100 dead000000000122 [ 2411.986335][ T3366] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 2411.994985][ T3366] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2412.003627][ T3366] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2412.012268][ T3366] page dumped because: kasan: bad access detected [ 2412.018657][ T3366] page_owner tracks the page as allocated [ 2412.024357][ T3366] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2282, tgid 2280 (syz.0.7659), ts 2354377015486, free_ts 2337274503280 [ 2412.045867][ T3366] post_alloc_hook+0x1f9/0x250 [ 2412.050634][ T3366] get_page_from_freelist+0x21fa/0x2270 [ 2412.056157][ T3366] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2412.061941][ T3366] allocate_slab+0x79/0x5e0 [ 2412.066415][ T3366] refill_objects+0x2d5/0x350 [ 2412.071062][ T3366] __pcs_replace_empty_main+0x2bf/0x6b0 [ 2412.076582][ T3366] __kmalloc_noprof+0x485/0x720 [ 2412.081407][ T3366] n_hdlc_alloc_buf+0x83/0x230 [ 2412.086231][ T3366] n_hdlc_tty_open+0x272/0x4a0 [ 2412.090977][ T3366] tty_ldisc_open+0xa1/0x100 [ 2412.095570][ T3366] tty_set_ldisc+0x365/0x540 [ 2412.100137][ T3366] tty_ioctl+0xc30/0xdd0 [ 2412.104385][ T3366] __se_sys_ioctl+0xfc/0x170 [ 2412.108951][ T3366] do_syscall_64+0x174/0x580 [ 2412.113517][ T3366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.119382][ T3366] page last free pid 2026 tgid 2022 stack trace: [ 2412.125676][ T3366] __free_frozen_pages+0xc1e/0xd10 [ 2412.130762][ T3366] __slab_free+0x274/0x2c0 [ 2412.135167][ T3366] qlist_free_all+0x99/0x100 [ 2412.139732][ T3366] kasan_quarantine_reduce+0x148/0x160 [ 2412.145162][ T3366] __kasan_slab_alloc+0x22/0x80 [ 2412.149997][ T3366] __kmalloc_cache_noprof+0x2ab/0x660 [ 2412.155369][ T3366] fuse_iomap_writeback_range+0xa9d/0x1930 [ 2412.161251][ T3366] iomap_writeback_folio+0x1526/0x2490 [ 2412.166683][ T3366] iomap_writepages+0x167/0x2e0 [ 2412.171510][ T3366] fuse_writepages+0x2f5/0x3d0 [ 2412.176253][ T3366] do_writepages+0x338/0x560 [ 2412.180819][ T3366] __writeback_single_inode+0x12e/0xf90 [ 2412.186340][ T3366] writeback_single_inode+0x4ef/0xe70 [ 2412.191685][ T3366] write_inode_now+0x1c2/0x290 [ 2412.196437][ T3366] fuse_flush+0x2ba/0x8b0 [ 2412.200746][ T3366] filp_flush+0xbd/0x190 [ 2412.204970][ T3366] [ 2412.207273][ T3366] Memory state around the buggy address: [ 2412.212897][ T3366] ffff8880740b4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2412.220947][ T3366] ffff8880740b4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2412.228983][ T3366] >ffff8880740b4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2412.237016][ T3366] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 2412.244242][ T3366] ffff8880740b4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2412.252278][ T3366] ffff8880740b4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2412.260311][ T3366] ================================================================== [ 2412.342048][ T985] usb 3-1: selecting invalid altsetting 0 [ 2412.358429][ T5701] em28xx 4-1:0.89: Registering snapshot button... [ 2412.410441][ T3366] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2412.417671][ T3366] CPU: 0 UID: 0 PID: 3366 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 2412.428159][ T3366] Tainted: [L]=SOFTLOCKUP [ 2412.432463][ T3366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2412.442496][ T3366] Call Trace: [ 2412.445773][ T3366] [ 2412.448697][ T3366] vpanic+0x56c/0xa60 [ 2412.452667][ T3366] ? __pfx_vpanic+0x10/0x10 [ 2412.457156][ T3366] panic+0xc5/0xd0 [ 2412.460862][ T3366] ? __pfx_panic+0x10/0x10 [ 2412.465264][ T3366] ? preempt_schedule_thunk+0x16/0x40 [ 2412.470620][ T3366] ? preempt_schedule_thunk+0x16/0x40 [ 2412.475967][ T3366] ? v4l2_open+0x397/0x3a0 [ 2412.480365][ T3366] check_panic_on_warn+0x89/0xb0 [ 2412.485284][ T3366] ? v4l2_open+0x397/0x3a0 [ 2412.489682][ T3366] end_report+0x73/0x170 [ 2412.493904][ T3366] ? v4l2_open+0x397/0x3a0 [ 2412.498298][ T3366] kasan_report+0x128/0x150 [ 2412.502783][ T3366] ? v4l2_open+0x397/0x3a0 [ 2412.507179][ T3366] v4l2_open+0x397/0x3a0 [ 2412.511403][ T3366] chrdev_open+0x4d9/0x600 [ 2412.515817][ T3366] ? __pfx_chrdev_open+0x10/0x10 [ 2412.520742][ T3366] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 2412.527055][ T3366] ? __pfx_chrdev_open+0x10/0x10 [ 2412.531974][ T3366] do_dentry_open+0x816/0x1380 [ 2412.536722][ T3366] vfs_open+0x3b/0x340 [ 2412.540770][ T3366] ? path_openat+0x2e2d/0x3830 [ 2412.545520][ T3366] path_openat+0x2e44/0x3830 [ 2412.550098][ T3366] ? kasan_save_track+0x3e/0x80 [ 2412.554934][ T3366] ? do_sys_openat2+0xcc/0x200 [ 2412.559679][ T3366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.565734][ T3366] do_file_open+0x23e/0x4a0 [ 2412.570227][ T3366] ? __pfx_do_file_open+0x10/0x10 [ 2412.575243][ T3366] ? _raw_spin_unlock+0x28/0x50 [ 2412.580076][ T3366] ? alloc_fd+0x651/0x6c0 [ 2412.584393][ T3366] do_sys_openat2+0x115/0x200 [ 2412.589054][ T3366] ? __pfx_do_sys_openat2+0x10/0x10 [ 2412.594232][ T3366] ? exc_page_fault+0x6a/0xc0 [ 2412.598895][ T3366] ? do_user_addr_fault+0xc4a/0x1340 [ 2412.604163][ T3366] __x64_sys_openat+0x138/0x170 [ 2412.608995][ T3366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.615045][ T3366] do_syscall_64+0x174/0x580 [ 2412.619618][ T3366] ? trace_irq_disable+0x3b/0x140 [ 2412.624642][ T3366] ? clear_bhb_loop+0x70/0xc0 [ 2412.629301][ T3366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.635199][ T3366] RIP: 0033:0x7f17804a7407 [ 2412.639596][ T3366] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2412.659182][ T3366] RSP: 002b:00007fff46ac4830 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2412.667580][ T3366] RAX: ffffffffffffffda RBX: 00007f1780b84880 RCX: 00007f17804a7407 [ 2412.675535][ T3366] RDX: 0000000000000000 RSI: 00007fff46ac4f1b RDI: ffffffffffffff9c [ 2412.683487][ T3366] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2412.691435][ T3366] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2412.699385][ T3366] R13: 00007fff46ac4a80 R14: 00007f1780c89000 R15: 0000558ebe95d4d8 [ 2412.707340][ T3366] [ 2412.710597][ T3366] Kernel Offset: disabled [ 2412.714899][ T3366] Rebooting in 86400 seconds..