last executing test programs: 8m36.411886507s ago: executing program 2 (id=3806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 8m34.342410383s ago: executing program 2 (id=3810): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, r5, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x59}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) 8m30.88410988s ago: executing program 2 (id=3819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc09"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 8m30.737914166s ago: executing program 2 (id=3823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 8m30.636541042s ago: executing program 2 (id=3825): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000700)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 8m29.998056403s ago: executing program 2 (id=3828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 8m14.948067186s ago: executing program 32 (id=3828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m13.983160977s ago: executing program 4 (id=5294): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f00000001c0)={@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) 3m12.893684389s ago: executing program 4 (id=5300): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xba03, 0x9}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 3m11.686847776s ago: executing program 4 (id=5303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x5}}]}) 3m10.846432319s ago: executing program 4 (id=5306): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x40000097}]}) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB=',gro', @ANYBLOB, @ANYRES8]) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c697479000000000000000000000000000000000000000000000000040000000d"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000002c0)=0x7) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3m6.833350254s ago: executing program 4 (id=5320): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000350000000801000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) setitimer(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, 0x0) openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) r5 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, 0x0, 0x1) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="02c9"], 0x11) 3m5.509024452s ago: executing program 4 (id=5324): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x9, 0xf65, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfffffffffffffffa, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@empty, 0x1, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xc, @loopback, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x8}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x9, 0x8, 0x8, 0x209, 0x3]}, &(0x7f0000000180)=0x54) 2m49.974889128s ago: executing program 33 (id=5324): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x9, 0xf65, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfffffffffffffffa, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@empty, 0x1, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xc, @loopback, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x8}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x9, 0x8, 0x8, 0x209, 0x3]}, &(0x7f0000000180)=0x54) 11.36865748s ago: executing program 1 (id=5871): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x400) writev(r2, &(0x7f0000000e00)=[{&(0x7f00000000c0)="9824b058311fe2", 0x7}, {&(0x7f0000000180)="bf2a411f39d06671b69f177a006e200dbb286217b38e2375c47a511b9dcc345348c43abc3fc0543611bac6a2bbdd8401e457bb8a", 0x34}, {&(0x7f00000008c0)="a9a86c5321e2ed56de41032190db71451dd7f87a66a55d4501bd44b0c920836a7eef63fa059d9986782093414a99beab2c48ff630a256a1862a9", 0x3a}, {&(0x7f0000000ac0)="efef14d368cbce60c7664f2acacb518f1a16348aa6c86a67eec1088175a51fc3b34f5d782bb82dc891c940de073700a4d26b80c9f9e53d71776efa8647a3dc62b989be10324f6e83868795e4be898cf3e29c83231dc36236afff9631828bba57e3af72835e4c0c97dad842a77883efcf68405b90e6a68ee250d082b2293969527ac0ca0c53029762ae3fbc5bf645b3a6dc531c1615748a3ba4d616ef71f4c532d80991f67d77", 0xa6}, {&(0x7f0000000b80)="a3acd58f7eba7555b734f17f3baefba100b06ed0bf22272b22390152b5f5fccdda2730ad2d6705dd1365bc911fed13d1130b050c97a69cb9620eceb81e241dfa6f1e7eefb8f5d73d3da8908a5d45df4f5889668d2b21797aaecbe6594d8d5b9e93ce39ac0c26adcac4303f031c1324ed50d20adfde37aaeba308b3bad7baaea2197b0652586f57", 0x87}, {&(0x7f0000000c40)="73fd749a62cda5d17527c9ee2c41022b2867d4682b664c45eab1f82a5078c767b0033351e02c75b6c6fe4d8aee35", 0x2e}, {&(0x7f0000000c80)="f464c7dca7a527c6eb4ab8", 0xb}, {&(0x7f0000000cc0)="7c41170c7c8e5173fd78e7638aa111b9018078c8d7ea51ac8c02c24542f9b577589bc54cd331fb4255aa4eb88787ec0e743a9c9341e421988795cf79c02f650b84b9cb648e6d47f9ffde55b97e9459d410839f1ba9d0604a497ee6433f1dd2b1bf418afa38b5bb168074c8d1ddbf36fcc0b01fd2e9ea00d0321ee4361476f7dc037849663d333f85f0a5580d513dacc834e28847434e21eadc52a57295177bff39a111c718dd542270bec6ed5086a2b541a5ae18f1da", 0xb6}], 0x8) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_getoverrun(r0) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r7, &(0x7f0000000d80)=[{{&(0x7f0000000240)=@generic, 0x80, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/53, 0x35}, {&(0x7f0000000340)=""/49, 0x31}], 0x2, &(0x7f00000003c0)=""/175, 0xaf}, 0xffffff81}, {{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000700)=""/57, 0x39}, {&(0x7f0000000880)=""/58, 0x3a}, {&(0x7f000001ca40)=""/4100, 0x1004}, {&(0x7f00000009c0)=""/71, 0x47}, {&(0x7f00000007c0)=""/177, 0xb1}], 0x6, &(0x7f0000000900)=""/140, 0x8c}, 0x81}], 0x2, 0x10000, 0x0) 9.626951504s ago: executing program 0 (id=5879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket(0x16, 0x4, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) inotify_init() utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmsg$nl_route(r4, 0x0, 0x48000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$inet(0x10, 0x800, 0xfffff030) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x74, 0x66, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xffe0, 0xfff1}, {0xffe0, 0x8}, {0xb, 0xfff3}}, [{0x8, 0xb, 0x401}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xba31}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8000}]}, 0x74}}, 0x8004) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'dvmrp1\x00'}) 8.870263422s ago: executing program 6 (id=5881): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaae0d392e43f6642531e0800450000250000e000041190780000000000000000ffff4e23001190786110000072c0ed933f"], 0x0) r2 = getpid() r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679d, 0x4, 0x204, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x48, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000740)}, 0x0, 0x4004800, 0x1}) io_uring_enter(r4, 0x3514, 0x9141, 0x63, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x680, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffc0000000000000, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) setpgid(r2, r7) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000004c0)={0x0, 0x5, 0x0, 0x0, 0x4}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000240)="ad91e17a535ff70a7a2f790bc0d1580a4ea68c488fa6b2157d817597f30eeb4e4d33f42bbf5f3b47bbf0950999669f981a6d4af0da96034534fcd02ae353d9c36b03cffa78f11a35f1513f7eeff4a631d6ed8f44", 0x54}, {&(0x7f0000000380)}], 0x2) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x24044000) r9 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r9, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r9, 0x8, 0x4) kcmp(r9, r7, 0x4, r0, r1) 8.816228773s ago: executing program 3 (id=5883): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000540)='Zh', 0x2}], 0x1, 0x0, 0x0, 0x48d5}, 0x8050) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}}, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="f68cfb8206ba", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x10, 0x0, 0xfd, @private2, @local, {[@hopopts={0x88, 0x0, '\x00', [@padn]}]}}}}}, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0xfffeffff, 0x58000, 0xe, 0x9, 0x7f, 0x80, 0xfb, 0x6, 0x0, 0xfa, 0xe, 0x3}, {0xd000, 0x10000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x7f, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x9, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x9, 0x1, 0x40, 0x2, 0x6, 0xfd, 0x29, 0x9, 0x9}, {0xffff1000, 0x7000, 0xe, 0x9, 0x5, 0x1, 0x3, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x3000, 0xffffffff, 0x8, 0x2, 0xad, 0x8, 0x5, 0x5, 0x1, 0xf, 0x6, 0xa}, {0x10000, 0xf000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x0, 0x6, 0xff, 0x6}, {0x9000, 0x6c881088738e8abb, 0xd, 0xe, 0x17, 0x3d, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0xeeef0000, 0xc800}, {0x80a0000, 0x4}, 0xe0000025, 0x0, 0x6000, 0x203, 0x5, 0xa800, 0xffff1000, 0x1, [0x6, 0x4, 0x3, 0x3]}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a32000000001400"], 0x7c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) 8.262270459s ago: executing program 6 (id=5884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x20000885) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xffffffffff7ffffb, 0x213f8603, 0x63, 0x8, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x5, 0x100000000], 0x3000, 0x280384}) r6 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000002200)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002340)=""/214, 0xd6}, {&(0x7f0000002440)=""/211, 0xd3}, {0x0}], 0x3, &(0x7f0000002600)=""/164, 0xa4}, 0xe}], 0x1, 0x2001, &(0x7f00000026c0)={0x0, 0x3938700}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000340)={0x0, r7, r7, 0x20000, 0x7fffffff, 0xff, 0xffffffff, 0x4, 0x2000005, 0xe, 0x9, 0x3}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) 7.928421803s ago: executing program 3 (id=5885): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000200)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x12100, 0x0, 0x0) (fail_nth: 1) 7.749986723s ago: executing program 0 (id=5887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4000}, 0x18) close(0x3) 7.469993042s ago: executing program 0 (id=5888): mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, &(0x7f0000001200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x62, 0x0, &(0x7f0000000280)) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) 7.308947512s ago: executing program 6 (id=5889): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@null) 7.001742161s ago: executing program 3 (id=5890): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000, 0x3}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x1303, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x30, 0x4, 0x1, 0x1, 0x12f5, 0x100, 0x0, 0xd4, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x6f, 0x3, 0x5, [{@rand_addr=0x64010102, 0x2}, {@remote, 0x4}]}, @timestamp_prespec={0x44, 0x1c, 0x35, 0x3, 0x1, [{@remote, 0x5}, {@remote}, {@local, 0x357a}]}, @timestamp={0x44, 0x24, 0x66, 0x0, 0x6, [0x8, 0x0, 0x5, 0x5, 0x2, 0x0, 0x2, 0x625e]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x800, 0x0, 0xd9, 0x9, 0x798, 0x0]}, @noop, @ssrr={0x89, 0x17, 0xd1, [@rand_addr=0x64010102, @multicast2, @rand_addr=0x64010102, @broadcast, @empty]}, @lsrr={0x83, 0x1f, 0x51, [@private=0xa010102, @remote, @empty, @loopback, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x3, 0x46}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1000, 0x0, [0x8, 0x1], "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"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x4, 0x0], "8562ed4d41af410950fd39a0e43d136687e7ec2788610ba8e2279db24b7dd50cac86660314c3899e6f46b00e0ab9ca949162ce08ce0a56a37265ae2e624c80a4c8d591756ed065f379f218c564889b9bf3fbb271906bda624b9fa94c36e8a1d58d57792807bc5ace6fece32d3f6de5ce78b413256271ccf8f74534d76bb8c165ebfeb0726869717e"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x139b], "2f5e632de849ce8678b76cf84e7082b25db44091f24083be32e68c93e8066bb6b2689cb04f06c0c1ab35d7e1203f15a57abc2ac6a9c6e347f2ad3926781542583c16e3b77b728f29b89551e72e1cf4fe805b237f2703fa4bf1f8ffe795ea40a4474a565b82e471869325d47498d08fa7264c8a6cc292270ebcf88abc06d23f6183239558a602a152208b9c4af91584"}, {0x8, 0x88be, 0x4, {{0xa, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x2, 0x2, 0x1, 0x1, 0x5, 0x1}, 0x2, {0xfffffffd, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "d8e4f740dbca43e75a3de9ef5976d80a531fa424e80d6be1cf7938ad913b7e3c7fe364f7530830b3b79770c1865b3cf1405b870432f8ae894b7c7b80c2b61407a113a0bea07cb6158f1d7801ee2fbb5c345ed628d7fd71f1872c9763b152b4d4f004a955f122defb2478dd7c51a62b1760cf7bdf0e6d245510e12510b61faefced4c0898e0222eb89bb4d544b12f84a674188d115d723013d808e749564bfe9736a1c477f202465737148b92753aa028ef7313281e420badc322e3b0ebcb82043cb05f8e9fe3a5c0d82a19dfb735af58"}}}}}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f00000006c0)='.\x00', 0xaa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x40020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x7f, {0x0, 0x5, 0x7, 0xbed8, 0x7, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, 0x0, 0x0, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006200)="277922c31d68964cc03e9e8592c222e18acc0f5ae6346cd023fcf98cd237b648447e00e281207a7038c3997e69161f989366d7738c6a807c2726adf695efe754229a48c802d694690baf032cd88751b51245ac2ae3cb87e2da3db338e806c84063ea8ee43acea049545630a1692335e4d9ad11c42dc95224386146bcbfa6e0e32934404b4254075accf64cfd5bbc23a190ca981970738abb255a1c05a7a7261f683d10f4794ae174671d216a657598331b469a73bd985469b03b8545b5f7d48a08205ae92d6abe68819fa23e161b654b2871e649b19bd2b7d79838f3d80fc506560b33c20a6cc20877bf2eefcdaab788d15ce7e9634c272973df277427cb913d08aa0b235b1a797617e798a18c4b555c5835e17114c49a57f23f0d8f0a22e3522e5a8e9e788bcdf48c08862177ce92e00a606211b9302639bb851867acdbd7920b47618e9994a6fec653c692d733d5f6fa1305bf9f2582a3ca12fb440550ee9614932fb67d04092a8171c800c6796b44bf78eaa7506cb5f09c3e63b0e80738e09c767438f60fb1a3cc3e8c57caa6c5058d5e1c64903f9b81a90bd0221bce6d209c8123dc4381412da223ec55d193a8e5b8cbe69503b6b3b6d44ce168e48d794f2c655486ae999750f123814a3ea830cc0e9c71ce5b260414a44ffbed56791bac519504f3745012cac2384507df2cd1ff1f0c693b0a0f7aab727e5b1856b2d9b7ec809a60b96a063967389f5ff96958226292eff653ad449bda3902c1683aafa81b0c689864f3bf3929abd9c567acdbd0af6154184f55aa5b86b94a035c98aa3565dcb3394fed13e64800d3917e69b8fb7a9affa2ab0ed3b6d21ee31826979efc6f1cd62327357143e268988d072732786223ed15eae9d42c267afd9b377cc2b0c3bf5b6bc8cbdceeb336bccdc708a0cc4773e900a2778bd8c97a342147b1fae79fd6271e3b25a9a630ad38a9aa6d84806549ac07a8ca631b6b565cd45b9ad30cd047af2063a4ff070c04ee4b8b1a7152fd3d29825000bed0b237df40f01e8b59014fe8b4236381d10bf04d57aa7a1aac76e9af7466fe0b3724df3decae064c3a3d3000e285ec83e1c893e9c08eefe5f4fd86f457f90ed4b675ec7d5457cef36043bd7c1c611115c63a7d7819dcce86d71a0255193436aa96d2619fb2d52db332dbe3245f84125e221ab5a918ad13217b914cc61685761686c56f74fa5c10a6c1a586bd5abc2585ea9d6ac070647cf3f631508debe7c28d6482f0f8a2afea7a61d2f0c166a1b7dd6135ac9c7469c95ccd1025d0149cee049873cb9d69a89e9bab13a80183944876522c8f0c0c551ca7f4faa495c643bec973b92bf13dfa9803981394ff290cb1f4e48d3356224ec7df9284baef008c19949c4570b4d753c4fa0dc97175209102a38a0f3e8fa9e6b52319b81db379f4bee52bdcdc136825179ab72d9ac6f3f5a72cae5b11340f8056eb050523c5049938a2572eaafbce4e073e115a520da2f1905ec6daf637bbfc879b02fdb58bd8426526b916366bce92f87ad76d1ef5ca6946006ccf17687fdfa62cd23e441e2f6effbdd0a175ce00ca86cb0dfc2cad7f818caf7dbf64ce6e63b5320954957c100701c06024a02c28ab13250f029ae8f2dea7fcb60f5cb65f4f8bba2ac3270811bb4c12641b7fb0f80d14ffc2a9c45f2001b0d54c98465d1cd2619a1546134bad9268ff48710fa833a3f3191711d1c7bdfcb502acdc51b9f9642c1066bb01a9e912e0de1b5f8acf8d9e1177a252df26b7cb690747d2023d7cdff3904281b37218981ddb6d044360d65be09dc2efdf3cef9f9d6416d81485bed6a997ff00daa26fbd59c39705b7e590a95362bc4cb54329a89840af5c1cf587e8c05a3b4f83d45ea2b06110fdb93627da88e09c51e669ae3bc43632aa638d1549ada4f1c11d935cc9757e254c0c0417852be06a023f27a41bf1e086648a365cefaf7bc994f083a68d5643256a3cb9263c571576c6d0b1dd221dc7fbdd9cb908f631eb3f1158b41d28893ece18af0f8b8c03bd960de7868d231a6e2d19c4975d0c2f8f910f6fdae49618379bbc0d41ba2c7922409b036d08d217529cb3317f0caf97e94b679fbcaf808a1a859cd4f468e4df8ee3567c684ba1f04213c7fbff3857fbde87c722f4c3a6cf027b13706ce61b7a9fa4eb823607600e7007fc114fb5f303d5986785a680ad68101d41ca518056da41ab94ff03ae20b23e50cb5cd9345788e6e7773bb5d0423c35861f10f3484be3ce23adc4a46560463a704f8c631dddfea199ba045f5d6c20ef130fbeccb32de365d28c88108904f523d936801b846e7130e68dc843c0ddbe490f305f5884642dc1d51ba2937537ec1c1d1ba1f8b5add859132b52a8f44349d7de31486a4c017109595d07231d6329f50de6802eee32b9d6fcdb2b16f58ce1ea0fa2e7c462e4d73c8cbdbdef5c714696f6ff8b7ca46f5f8277d5181475099377763cdf5a2b20d5a6ece550919b567d412ae2523444f49f09510a5f8d2397b4545d9377f40d4d57be884b2643f6737b1c9ac2708d3e48b590e5b7362fc86f5f56e116a544f3a80c1ae66a2e42a335b015ed6ffbc3b6ad6740fdad3ee9168effce9ddb9ae97845cf2a38c79df3813a4a8408895d8dd33bdb254fd620dd3c833cb33fb3af63befd7ac09178f6f4fefbd136c727957ca25cc4e365ac2ef7cee2c88d29901c11c5d8d12d7c9bd1f1eb591d6da52b26e64144bf691059f001352598fd1ad651c9d23d8e74aaf99400e4b87a7c8141be5eb3f9a563cb76f163ec93e24e4219ea98b3191223d93b02d032e66d674e9ad844b3115fa0d07c41637db3b46b0133b9b1b8fc85d5494787f63692d18f5512f6e8515c0c14b844996db924954c59d9f1dec047b235163891edb13d05e16e212bd5003cdce8cdf7260bd90fab16d8a8032ab9b86bf62be8253e02e0c2fc0a1396b1f48a9258818626dec32d5035b1c16463a7953b4a977915898b07d1129699dbd341742357f25bbb6099503dc59878f544a84eda8011d10d273e4af343b051036556c1d31327161f76a2670cef78917915d37d9e707865b0dc1881201958856a50694ebfb8a4b850a234278ea48db61f6e322512e317d5fd55627c60084da63a6ea6d0df272faf59f26d05a88d8b400d728b975e78ef53867a68e2b6bb85c3356f062449f8b1a17ec2adf0307c98aef35da9e0d235bc730fb79a6acfd187a32b6e5f915598009bf07b398069afc19e7d42e9c2666572bf68b7d1e21aa232da07df107a1eae11424f867a9228158456e58db9d87969a68ae7837c20a5a2166324a89a193be2cb43fc9a4896583839e96dc2d2c9317e3dd217c234406f7a1704f5a958469f8c55f7073920405b2ea60e8ee9209932aba2199eb1d4146cd7870805348c5ddebf374700d6969ea1d45a5695f70e63dbba7d5659c2ac527cf95f735530c23abd9c1db64ec66b174fbef5f26fe3963879f77f42abd1dd7eac962deb43f2aa0d4b61ba37b23ad99e30a0bcfd0af86c219170a025a357ed3e3b70b520bcb0cf507ac4241e4b545d306fdf4ca2d4fb48d751c6948392691ccb5dd5a8be9534a2684ae38fac7445dc3367e9a8d96cfdaced050092959cd434b4fcebf180fc313c8f2631dc6323544ab3315cbc1d72baf9239ef7ea1412816de7fa77b05c9a999e197949e5e8ee6536318ca7d5cf15dda41fee8429533a332c1a25ae4b2fd1bf1ededee9c3d740d1e6c98cc85309e3b6f10a7cb5c5e6e4b8772621ca50d1e38f25fd82ffa3c92578c0802b457f8b33bfecf75309a85d8603b7599aabe8f1078a81a0bb5d40a4341cf0fc882ebac3d7fdc6fd8455153340dacd3c2ae558d0c6b057b98f6b533ba245221a43440f222feb40848e5c33c75ef084cce1e1f1c06261ba4035b987c09b46bff92db4022e358f2d6dc0f229d4fa63d57d49c865b7f33e490790f67fe426c691aa6feb8bc72dc759b44b61b88c02d6c23d3bb590e24813ce8c1534afeb8709d9dd41872bfef287c89b07158463de8b37016fb71ff18d78de431c4f9869d6c0719d649325a3ba437a714f36bdf59f88cf0602134a003e746efab8ef201acf73b396c9e64cc971bb81844450a92b8f11b4006cbea25ae8f4300fb98df7146c5e4a9f3ca620355f9d679e66288a8b4da298662242a8a333cdd828d91f4da4f7ce991092d49455b3da53b31ff92f5866695d5f76a033af6d2f44658ad94c1c6c601a296bd0f3e6b9e64a89653285f2ed775a8ff2cb4d1557bc491f44c5a3349ef58e25a03c3787b770c596fab20fe08248993cf28c28575ff8caeb0adea9789b667b253c3ebbd49a8977c2ff0f382bb604453d419cd6cfbad7d5a41605996bc6db74f2ddf8b29bdbb4355ffdb65a53437548154df7a8e8aec1d7435f2b33d0b83bbca7e1bb59f4ecd5502f0ab0d32bd2f38bcf730d51bbd85cacc455dee2313b7cbc37efabecb7fdeb6273fa4a84bcee0427b081ba6649faae4aa8b521b4cc80dac5e65c28dc1514e218cf06a3a10a96da464517ec03bbcefdb7e1e84c1178f083d3240df711bd80d7edc7ad037387d824e9bfbedd036615d2b8329de3d1702a4c33e928caa916665e39c01a50c030d4e3873cf3bba2d675dfe3cc8909fcaa6aaef885d4725680d544b39d29ed232a37554e29d1882d3f12391181f33b5744fd7344216aad50005525f54e401f11e95268a2a50a940f8184f142062d524bdb70d91f898251bf06bafb5c630049cdf85c4ba756d4cfb814fc95f56a188476f699026e76ca4f26dd78dc2f983589002e348db9056f46734c3235dce0268995f9f2649dfbbbfed57e823211f7260e6be507fdb9f7ec808e34cacc7777a8a9350cc5c8e16938adb959d1c34951be3a849357b7db349d7c19698ef325341f9e0c78ca0777abd83c90bdff486f0617a541b001c089d63758f85032efd2a5b6cd1d42fb8bbab3a50ba775229756fd83460f6181de4d9fa8cb24920b966df24e12652d8f1f83c3e214f10174dd7e49f41494494c03151ac77d16894ead6c8dbd76921af9d065e1fd66dee01966ec317b2394bdad5ad3bbc19d5cbd2f998a80288c3c7d4a6d920e76fd7ac967ce7ba839b3443852ca681154cf6617c2041aa129a47e6beeeb7148920b577085c22bef1c2865f93e323e6103f3a685d542c73976df029b94afb3f5442a1a0dd5a9f8dbef5eb54cfe37a2df9891ce8f5658d728fcc07932c07cf097f09f1b69e9002b742e03fd78820ede2e60e095681aa906a97df20a3cce135fbdf0f770063ede222fe5f2cadf6b55d7eab829f86919ab0dc4e4fad77c2cbdf87981240ff63b9463ccf03b890c46233c3b6e0c54a1236c3f0c1e3812903b47c4aac784e0397423667396f01cfb07d6649ab0e5d0c0ff2bbe6795068d85cd1f282212d93b97613c75199130fe6a3ee28f24be01cdf4b2d2988a144c93be0ae043fb856bb4c21b695aa5d1e9bd1161d1a986c919d4efa84a9b04b1355dafe64a503d84ab4f3b5b76a1438e4cceb5c03d1442d1bf4a69a996431f2b736c626d8354a90e53f3fbaacb91075887c854043755bd8954ab9fff18b0262e3b3925251dc124305797888bb2bbd872c9b8d57d68d2c467a8b318ffde6a44f9a5f9967bf184a97d86be0e4449413c327d203fca8719ce046343a33c1bbe48b97becbc44095192e98da87a9b2ba234d250dfdf7ae6b5e5f91058dac2b20c0b7525484fd5278c74e8276625646dbdfd47a2cb6a48177b6226e1ee6e2c9a588512a269e6037e813cd741a2cf096f32d60cd7b68e4657f5607b0a296d8633e12be7ae72f9f6f895352f6676ef8b09d01bd024ae159c5780ecc6aafebf59895ca9b736164c30e5958b9aba1b49cc27949019467fa9b3fb6518ba9a359ee9c7035eba2066c786261e11a9b0a064cf96c8be43bf3119bc403e16476b112395354cba94950512c29646ccbb031d126e7ac1e9d972738bf08d2e15f3976e5a8ca653e57cf035a6c0eeb064cfbe1839da2bce876c5e9e37c9b952879c240c94510c82b71b3419b5ee7d7d5ef81f71194d34f6ada76ec8eaf4e6e9e924b71dffd273539ff44c82a05b6a7ea584157941daed273a0e739eca5db356ed547e9080ce6b163bef52df9a7ea7d56c5997e72d4c4fca3e77dc82d53cda693a66cfaabc7a163417d1e454e34c3ed177848b006501e900d16770bbb91d3234034284079a5bca16ee53e3b4e95c61014771a7e372e3bffdf399d4311d22957f46706b7b1a748b8e2a96a6cc4dc9db1e77f1f53196da5ee1948eb88aa5aa154add1376a453366820dd0bd77d3bfa003bc481fb2e2d8defda1da351a667e46b1c0fe58ff3c65d097f731f36225ad641cbb3c043d3cad02eeae1314ba5f6e4d53182241a28c2d01e4af9fad8c10bba1e6361db8f20b65fe214db3fe3891ded443a06b3a4be7132fd5a24e9e094ed08b50b1941bc40a9b18e4bc569ad22ff082e2ee54e382e791f443121df080a1abce25cd474128dd4ca10a749b80f91a9229875d9d09d3a24480a9883b96499c6df8d6d53c80f4a46e71d4b0767b1c3ceca0223cb87dc65c2180df575f7b0c090e1aaa61d2ba8aa6c0719c75d911e4dfc00d8c328295f150f0d3b450f9503bb359ca4d15788133a848aa7629b014d3413a4bf3b9a821b63b7cabc8ac84301b2819e3f4b7a4389652f5d0683f101b9ec1a937aec026e80bb88b6e9989253ba9dd64c79f7b7ca00d8c0edf29998ba9fe0d5563c59854df5e2bc92d38ca40298132b1c02e7da32c57ef85898dc8eb92cf17e4cf834aaccecb3b5ecac9da87044f64cb43310f50ad0b72debf3e733975c6c857b37cbfeb1b016cd4f0573c8b69e54e3eeb893fea4677109a4eecc9e7f7e3fd3d40e69f9f880a6dee14dc7c27ed2c57f269ff66ef841b787583fb83ff2814e8eacc877910be60e1db93bbc3f53e9511f3948a8a8e0011e40b03f4804e8967b1e443797fb9cbb2978d71e54b6af71b9cca3d6441dbf108c625ed779bcec18d9f70f06df382732d0b49bbebe347f563081527636c025828065a1ca8ef239febacfb3d2438efe4b23c1f973f5d7d4b5a3497b94c25ea951f29e48b3dd326685d8c06bccc06822451b4d4c7b1c2f3e86eda9b175b34b7b7e8cbc1b73681b5d8c3ebd4167dffa50d718b5607975e8653767eb7e87bcb6a6fb1940a4c6ca41f916acdab7d143f685fe9714366b66076abab743c646ea8c42847ae6fb3ae7a5145b9438b9203bb818cd294127efe7c776418afaf237704488193706c1f52807a608f0b2c361a6aa13b7b2e985b364a11f876f5644b7e2b84d4b90c0ab050126ec76e9594e682ef6e00f7a3e85e260280cf2b03700a00b0c0d2990f3897f670dc6401adb6419af14bafa35d56cf65b332086deb8857d59a7487179b7d2e6c525e54324fb837541be9d8b459872964086a3f98f9b795aef6e37a8b72bdbc1d087f622b2a4213fbcebbdbe6000da8dc3733522ba74653d23487c5dcaa5f4af161e7c73999168ed0f3566de365778a63cab1c100ddcfd8de12383b60676bce46a76a25251fb666b892b366183d02a3d591dfb97edf854af890ef65ebe8506d00420a64a900e7f20cc378224410cba88dee93e2787b13aa0fb6d7d97c582da047da1f367bfd6f226e13d303bce23b35e9d994c9d54a4e6d457b07bcae49edd6de6fcfe8b0ceb8d0fb693686319dfc61fceb7c5405ad812e266d35e51181e2c5180e0a64cc685466999048db40771405142e5e08cc0417a5b87a85672828d1425354db56f148b81fc0e648e578e33f38f26190f36635e432c1e21bfbbcbf5d8bb9b291d1e18d3d311558b2a60218f492f7880f8afee557a665d7cfc4a20bfd75449af8b0f19ca7b45764a7a4c116564b3e39674adf5eb079fad35b8e743d822079875aad7dfc1ae401bdf6ea77700e9b2bb3e2c459ccd8f28c9337c2900cb84076fc0a3d45858c51417ab5412ac0a00230043a793f44183326b47b60fe15c7f22a43c767ce5c8181a9a4c44964d26fc50ece3d85b533e5eafdd87384a7c73ea7da097b0f8770b7629caddaf12de1b0a447451b6b6ced331789bf917e24a1519aec5e2125a7913f84d9a7fa088933f0e1418f6223146b8bcb6ae221ec5bbc8666958e9edd03e83a320059b5f095b074078c755d524c6584363b55bb01e183a39f4b5138ff890b1c67222fe303af951d839e3a71cce561874df1e63b5ba53aa0fb13d3ec0138a526e297b1876311f8db632876a3669c79f47d4edbebcf403e44b29d8c8d999a87961485e4ac0fd7fb66f638d3b6f3973591b9eaf528726d352c2ba39b160deeabd0d4c1387f1dd29db58477aa5e25e48be96e95c93081eb7a1ba17417db741255d2f9368d226ed665a02bbcec14c8458e255f93d1e024b0c090a66c78f362956b9aae8db13e9bb1ba6b1439b9c2f9df0cbbbff37c03b6d97e5ec0f651b9c47c44df4fdaf1e1e58ee049df8970309990bb3b3f3bb1817660a6e438bb50b5ee10739df9df4df5eede96e270402a48641752558fad1806544a739742774c5e0e20f5468faf61dbfc9fede5a07ab7a54e9d0a2932d458050485925a2581a8af3e3539c820de4ab18bc2c94fb51961eca805405adf6d2d18af8be34b2eb803dda4af4499c56397b154b28f7737242e7ff3cf7eca57f6a1e068bf357710a8caa5a870c476b712ad9b2a9b51c823a3a32604f3464246ac90fd2129c012fa2f705b5fc28c3030c34d7df1a831c549dadb62bac2d2dfdddc821b96ac589619b3179982c45062270d9abc6794cf5bbc6a5f3d5d2f7e6e2741b573de9869fad21033e7088f6b6dfd2aa8bd3e7789809ec530caf908948806045652dffb56e2741340d7fef6223ce4e3f00ae648c07be306f8d67b22066e9bc252c2ada60d3ecc79cb29cfd4deb4e22d78092445fb27de9782b7cafb541cc04f30eff09de188c1fe9bed4cdfcc9f02eace508e488673abb4f3cbb399c0f5330300270d38492fd543a84ef0904f725b29131dae600ffac79415562a1a337ac51b1ea9a2d8561eb2885d2e08feebd5ec87e9b58ffdccb9155b2a978b0a0812789d4df930653c5cdc079fb45eba1a38e9f823f40f29f5234b70d2d6e7c9b7098f0caf0cbe3fecf452c66874fd3268f765b28881e382134eceed7a0b30c8661a4d1c361d299cc0eb0f57706d2bf900433f5fc0d3466c4dfe727c7e69cb8478c9f3c66b3a98b8932af4a6a0a4dd4eeb8dce9326c539459b82af5028192d7d1b81d0c6d424bba6e976e85c0a5b7bd6cca4ec4d00ee7458112178763cc4f8dc908ea86e313ee2a2a4cc1e204157240fdaa3f7c221166ee0d7c112422f357e081b0bdab46c34c1352ccf3efc7ae1ec3737bac470f8fef5942ac97fff8c1c6642e5cf2f733f776821f7527213f213772f60c31a26e71b4980cdf6896a3d9bcb13282eaa348cee4b2257f24abdfa58ccb4d238f0b34ec9bbf9a4f1764de447b9af04f9960700c38ff26523eb4f4e77863c538c6d26ce03bf4da7241881465c447c0cb0fe1792e141290923f79993228c053f1d2cfab750a87b64f48ea27d8550623b46ffc04ce1fd168f481de2d7ce2c57c4a98d31346ce2da7ddd05d0195b77b02eb95a50aecd6181dbb545b6f9badd7def429f7b833bc98b0295e13799577aea34e3f691b0df86ee42e331bc6d3554543a9db9512b6fb67c2333814efb4a6fb897e0a85e150111b5d34be4532a1e2ba044ffefdabf428d91b10fd627d2e613f295c38d274396a502d2e7334b295be14507d7fca78c53bd5359c5ea04cbbd1edb3c31025b06e7a93b198ff525478a6b87a22b1978951b26c19603a74e79bdf29daa153bf0ea5c0205298a352e9cd4d809115012b924bf338ffd3cc800a57891b9a728978bc060dc155c69ac65af5f4b3051e938d7cd22ef1de21e8f12311e3c8417b7ba7ae3f7c5d4d840fc2e56dc3f7a9b253f13b45c0bf249cab8e0b9bf97d36153b63c3df2acdfcec0a36e45069dd0a7947bd2e2925f74d0aaa2bfc22a8333883c6ec588acd89a6601fd61a4b5407b3d6443b765074bd4dcc56fa01638c9cd2e2e54249bc41849a727ea31f3d8994b365673df134e46bd3872ac1c7c479b472215c6b3ff7af96708996bd0735ebcd0a772008e05b7feb6344b6d6010222881d3b0462dd67f06522f77f63b5bffcce98f33f3337175d880fc2bd2145ac58286938cdf75bd56504390c500123065e53a487e9634ffefe03ccea989b13af327cdd840d342308ce12ad26f40ca242c97f28cc15f8e9709e19a0be5c3ea016a62735efc2dc5c6184547003cdc897afdd30ebd086af9449ff17ad64e9ee066107b3464313c4fe7344e6126351a07683ffbfb5fde7a743ffd3053f3e751e9ba89729a9195ac0ec423cb58a8c83435e24e2fb250b527162621284d8ef4b47ae6f5278bc22d248099622dcb1cfaa8376e32908e76bb6f88818e9e9616acf7f38d7b88b80490a7229c74d012627e3995c749b57a89b18149ffc8f60c0cf9c0f527fe48e1c49e13b15d8ca641a96607ca956486631f8d01618d9cfb2985b0c6e175bba854da27821834833babcce08efc328675c78673579ec83ae8015366ecd2f844587afdc595d9dba4f2c313f1f4a31d2c482fa5c4f86fa5ede03af0cc641c873307c4239f1c66764034fb29f10b1b746cf2149e7874b2e0ece9db4aa78b46377d9b7d13f8f9555546a51af50b6d3bc54e298c9486fa50ff1ac43b9dfe35bf7ff9f99313f76a3ad51c029cbda04cf13905b9c483ca6d7921a331ad7727ea65441ed2376a0b200b0dec05f09e8b231b47166fc2b0f140e8ec95646785d5db61f6f615f1d22cf7ad7b3e5e6d56ba0b3d0a2b4c205c707399c4ebe9b0cd053e0bc04a8d4da6f88719e6d8536c1dfa5b75ba78797656084588c8a951730709161df35f21a49163b1ad35a5d692517fe2baba0f06eebb5e0695668b40742e78fcfb33cdcd97ed4d375709c191e09abf376031a514ffecfe53ab81da5b270e816204d535ae1bdffbe2cedeac400fb2e707c01c442c86f816d28ddc4ec13116fc1555d0f6f385917dee220931307aa04ab9bbbc1ca7d3fbaa3df935457363c48ecc982efd0bf1dd77d92aede03596aaeeb859ec07fc866463860134c6b61e72719a4e6bab7918c0a190339176fa31ea43b15563171d9f3fd50474aaff66dc3f2d7b893bb25ad3f3ed41282d2b068aac9fed43a1e2e175d05ca1279abb824244a8a3c5c67cc5edc6088f37bd90449278f14b1059e00cde02ce0ead4b0f15d260d275326ad2043ba38a88eeeae6647e7daf30845083ed986ff0fc432bd43bfd4f4963702632c70b8f6270930a36adb2e2681eb444f93847597e8727100fcd9eea6bb46f5e7a96e98df0bfa128381bf48d164bf7695ba8bda8e15d706bc9d5d5b079d87d8bb4a8f6be7a3f171107fa9e11a5e847dc46ce7a08f90cb66ce14293d19d2db1f0048795a99184199e28089765b931d9b4771cb1c6c5d77f18de2b36631f0b3f9ce3dc201570c9fc4179c1d01f8d9d0ebb6db01781455471107b4234e96599e8c2fe943198393a59bb401a6be7ac5930c7554eff5", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x1100000001, {0x5, 0x1, 0x34, 0x8, 0x8, 0xffff672b, {0x4, 0x7, 0x101, 0xffff, 0xffffffffffffffff, 0x8, 0x7, 0xce90cbb, 0x80000000, 0xa000, 0x3, 0x0, 0x0, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r6, &(0x7f0000005340)={0x78, 0x0, r7, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r8, r9, 0xb, 0x8, 0x1000000}}}, 0x78) dup3(r1, r2, 0x0) 6.954344742s ago: executing program 6 (id=5891): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a", 0xdb}, {&(0x7f0000000540)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.650307249s ago: executing program 5 (id=5892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd06) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_io_uring_setup(0x26ad, &(0x7f0000000000)={0x0, 0x298c, 0x2000, 0x10005, 0x800002}, &(0x7f0000000400), &(0x7f0000000100)) exit(0x5) io_submit(r4, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00003f56bc4e85f091070004"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYBLOB="6349dbafa6f1133b8dd858d5fd13da695503db630550af64f480bfb28b9c41dd7640e466792deeb5ba2ad3f74d52c3c1fdf72f9dddcdd8b439cd39cb261100d00f1c3b7df5bb46f841dcd9a606608103ef9c689d6abb195a61c19e8f7916035bc9930402156fa18c65dad649bb254368602abbbd717bd778ccf787c0cc116a40238e72b76b9bd2", @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYBLOB="890095e4df5256f364f451df4f7d191a27fa99897349ee91185e7a7434e84c7fb476a9dce60882e460695a8dd77e394f91d813d59630df1063fcf96946e7bb446fedb5ae498ac284877689e1ce1b0063f405265c9278f9497881080bfddada6c0c67c6b286914c5d09d4be130ba7414395e79c62c8127dcbcd2af7a7d5795c233c690bd82e8d455a3cebcfdfe8794c511125450669", @ANYRES16=r2], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r0], 0x0, 0x58, 0x0, 0x4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT=r2, @ANYRES16, @ANYRESHEX=r4], &(0x7f0000000040)='GPL\x00', 0xe377, 0x0, 0xffffffffffffffff, 0x41000, 0x78, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x8, 0xfffffe01, 0x8, 0x0, 0xc06, r3}) getsockopt$sock_timeval(r1, 0x1, 0x43, 0x0, &(0x7f0000000200)) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = socket(0x10, 0x803, 0x800) sendmsg$nl_route(r6, 0x0, 0x0) socket$kcm(0x25, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000180), 0x6, 0x42) 6.452087963s ago: executing program 1 (id=5893): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x48804}, 0x801) (fail_nth: 1) 5.576787751s ago: executing program 3 (id=5894): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) (async, rerun: 64) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x2, r1, 0x0, &(0x7f0000947000/0x3000)=nil, 0x3000, 0x1}) (rerun: 64) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xfffffffffffffffe}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f00000001c0)=ANY=[@ANYRES8=r5, @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff1e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[], 0x0) 5.487761686s ago: executing program 5 (id=5895): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 5.486115084s ago: executing program 6 (id=5896): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x3}, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="1ca6aaadeb56a714c7c6aa391cbf895982cbf59a551a62cd6fc73d450abf3c3fb2d56973d950e6906c83d3fba85e3e1757e59d8a7e97493aa591d79c540ad8784dbd86d0db9441a35dc74b75ad186fb9b199244e8366d8014d8e583921cb3c70011f6a60332b92e177498c59b256bba63f330c26cc8f261749e124250ae3ef4a69b3bd3c5df245152a1b0923e6c057bb05d859c06a2bc8b3abaa1bc24c3b36"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000001080)={0x14, &(0x7f0000001000)={0x40, 0x2, 0x8, {0x8, 0x24, "1f429692681c"}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) 5.399041243s ago: executing program 5 (id=5897): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x14, 0x42, 0x601, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x13}]}, 0x14}], 0x1, 0x0, 0x0, 0x4080}, 0x800) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 5.238182815s ago: executing program 3 (id=5898): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e0000050000000020", @ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYRES32], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151", 0x31}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b101860", 0x56}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.377576164s ago: executing program 5 (id=5899): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x26020480) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000000040)) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 4.246558267s ago: executing program 0 (id=5900): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002400213807000000000000000000000006000400a8"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c045}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000340)='net/ipv6_route\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, 0x0, 0x0, 0x25, 0x0, "c43b9320585854378463e5d9ac44984ed4936350ca06b3a771e3ab05c927d207f7d21d934c9c5e61c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e700"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @private=0xa010102}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r7, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x1, 0x700, 0xd, 0x800, {{0x17, 0x4, 0x3, 0x8, 0x5c, 0x68, 0x0, 0x5, 0x4, 0x0, @broadcast, @private=0xa010100, {[@noop, @lsrr={0x83, 0x3, 0xd1}, @timestamp_prespec={0x44, 0x14, 0xc9, 0x3, 0x1, [{@empty, 0x7}, {@private=0xa010102, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x94, 0x1, 0x3, [{@broadcast, 0x3}, {@rand_addr=0x64010102}, {@private=0xa010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@local, 0x1ff}]}, @end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getqdisc={0x3c, 0x26, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff1, 0x4}, {0xffe0, 0xfff2}, {0xc, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x1, 0xbfe00004}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000300)={0x0, 'macsec0\x00', {}, 0x6}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x300) 3.224688527s ago: executing program 3 (id=5901): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x4, 0x2, 0x6f, 0x8, 0x5, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0xe, 0x7, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x0, 0x4, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/73, 0x49}], 0x2) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x140a, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8001) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000040)=@null) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000180)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xc, 0x800, 0xc, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r6, 0x5402) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x80) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmmsg$sock(r5, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000002}}], 0x18}}], 0x1, 0x8845) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) 3.084466999s ago: executing program 1 (id=5902): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0xc}, {0xa, 0x4e21, 0x800000d, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffffd}, r1, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r1, r0}}, 0x18) 2.939906377s ago: executing program 1 (id=5903): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4d", 0x2c}], 0x2}], 0x1, 0x40800) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2.589439689s ago: executing program 5 (id=5904): r0 = socket(0x40000000015, 0x5, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xb}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x34}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r1, &(0x7f0000000140)="0139fa9d7ba91453052b1347507060478a0a8b4fdf7e813cce60b932e209cda9a9295144dbe41f8d4553d0abdd", 0x2d, 0x4004, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000980)="d34b", 0x2}], 0x1, 0x0, 0x0, 0x840}, 0x8000) 2.094391063s ago: executing program 6 (id=5905): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) close(r1) 2.037397581s ago: executing program 5 (id=5906): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) (fail_nth: 1) close(r1) 1.772106165s ago: executing program 1 (id=5907): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xc, @loopback, 0x1}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x9, 0x8, 0x8, 0x209, 0x3]}, &(0x7f0000000180)=0x54) 1.705619107s ago: executing program 0 (id=5908): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/55, 0x0, 0xeeee8000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) 406.895544ms ago: executing program 0 (id=5909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0xff9) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0xfffffffc, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0xd070, 0x0, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0), &(0x7f0000000100)) 0s ago: executing program 1 (id=5910): socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) kernel console output (not intermixed with test programs): me is too long (len 12, expected len 4) [ 977.412218][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5710 ms [ 977.420277][ C0] lec:lec_tx_timeout: lec0 [ 979.343579][T23563] syzkaller0: entered promiscuous mode [ 979.364077][T23563] syzkaller0: entered allmulticast mode [ 979.432249][ T5873] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 979.562232][ T5873] usb 4-1: device descriptor read/64, error -71 [ 979.803575][ T5873] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 979.953004][T23573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5561'. [ 979.962087][ T5873] usb 4-1: device descriptor read/64, error -71 [ 980.085691][ T5873] usb usb4-port1: attempt power cycle [ 980.404002][T23581] openvswitch: netlink: Message has 4 unknown bytes. [ 980.421052][T23581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 980.442218][ T5873] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 980.473987][ T5873] usb 4-1: device descriptor read/8, error -71 [ 980.722193][ T5873] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 980.742755][ T5873] usb 4-1: device descriptor read/8, error -71 [ 980.852558][ T5873] usb usb4-port1: unable to enumerate USB device [ 982.397596][T23598] ./file0: Can't lookup blockdev [ 982.439251][T23600] openvswitch: netlink: Message has 4 unknown bytes. [ 982.464234][T23600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.274405][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5576'. [ 984.334182][T23624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5576'. [ 984.492302][ T1694] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 984.612418][T23632] syzkaller0: entered promiscuous mode [ 984.617908][T23632] syzkaller0: entered allmulticast mode [ 984.672210][ T1694] usb 4-1: Using ep0 maxpacket: 16 [ 984.678857][ T1694] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.696043][ T1694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 984.712354][T23634] openvswitch: netlink: Message has 4 unknown bytes. [ 984.726810][T23634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.743662][ T1694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 984.775364][ T1694] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 984.807188][ T1694] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.813328][T23634] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5578'. [ 984.821248][T23638] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5579'. [ 984.862834][ T1694] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 984.872495][T23638] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5579'. [ 984.881482][ T1694] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 984.899856][ T1694] usb 4-1: Manufacturer: syz [ 984.906517][T23640] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 984.926033][ T1694] usb 4-1: config 0 descriptor?? [ 984.956057][T23638] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5579'. [ 984.966049][T23638] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5579'. [ 984.992778][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 984.992813][ T29] audit: type=1326 audit(1774273027.172:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.6.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d18d9c799 code=0x7ffc0000 [ 985.089680][ T29] audit: type=1326 audit(1774273027.172:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.6.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f6d18d9c799 code=0x7ffc0000 [ 985.134011][T23638] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5579'. [ 985.145617][T23638] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5579'. [ 985.161227][ T29] audit: type=1326 audit(1774273027.172:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.6.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d18d9c799 code=0x7ffc0000 [ 985.197043][ T29] audit: type=1326 audit(1774273027.172:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.6.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f6d18d9c799 code=0x7ffc0000 [ 985.221741][ T29] audit: type=1326 audit(1774273027.172:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.6.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d18d9c799 code=0x7ffc0000 [ 985.246911][ T1694] rc_core: IR keymap rc-hauppauge not found [ 985.256395][ T1694] Registered IR keymap rc-empty [ 985.262430][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.269874][ T29] audit: type=1326 audit(1774273027.172:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.6.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f6d18d9c799 code=0x7ffc0000 [ 985.296845][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.306555][ T29] audit: type=1326 audit(1774273027.172:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.6.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d18d9c799 code=0x7ffc0000 [ 985.330878][ T1694] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 985.350657][ T1694] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43 [ 985.369221][ T29] audit: type=1326 audit(1774273027.172:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.6.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d18d9c799 code=0x7ffc0000 [ 985.393339][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.400660][ T29] audit: type=1326 audit(1774273027.172:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.6.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d18d9c799 code=0x7ffc0000 [ 985.424508][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.436988][ T29] audit: type=1326 audit(1774273027.172:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23626 comm="syz.6.5575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d18d9c799 code=0x7ffc0000 [ 985.461026][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.483004][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.502468][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.522539][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.543725][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 986.149841][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 986.182341][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 986.212929][ T1694] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 986.236940][ T1694] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 986.260183][ T1694] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 986.261360][T23653] ./file0: Can't lookup blockdev [ 986.324711][ T1694] usb 4-1: USB disconnect, device number 27 [ 987.655667][T23663] openvswitch: netlink: Message has 4 unknown bytes. [ 987.692172][T23663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.713477][T23683] ./file0: Can't lookup blockdev [ 990.822458][ T5809] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 991.008501][T22793] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 991.062238][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 991.069707][ T5809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.091162][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 991.146384][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 991.192221][T22793] usb 6-1: Using ep0 maxpacket: 16 [ 991.212209][ T5809] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 991.221863][ T5809] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.296466][T22793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.334144][T22793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 991.346157][T22793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 991.358094][ T5809] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 991.369400][ T5809] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 991.377928][ T5809] usb 1-1: Manufacturer: syz [ 991.407225][T22793] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 991.464157][ T5809] usb 1-1: config 0 descriptor?? [ 991.482867][T22793] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.647413][T22793] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 991.725470][T22793] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 991.790860][T22793] usb 6-1: Manufacturer: syz [ 991.901278][T22793] usb 6-1: config 0 descriptor?? [ 992.560826][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.570659][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.592956][ T1294] lec:lec_start_xmit: lec0:No lecd attached [ 992.853807][ T5809] rc_core: IR keymap rc-hauppauge not found [ 992.904717][ T5809] Registered IR keymap rc-empty [ 992.959528][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.092469][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.143187][ T5809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 993.163499][T22793] rc_core: IR keymap rc-hauppauge not found [ 993.199050][T22793] Registered IR keymap rc-empty [ 993.204331][T23724] ./file0: Can't lookup blockdev [ 993.230881][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 993.243206][ T5809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input44 [ 993.288281][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 993.306460][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.431022][T22793] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 993.464711][T22793] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input45 [ 993.480160][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.512472][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.532508][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.937361][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 994.099048][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 994.112230][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 994.122241][ T791] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 994.129939][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 994.138738][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 994.289686][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 994.372317][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 994.379936][ T791] usb 4-1: device descriptor read/64, error -71 [ 994.525330][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 994.642237][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 994.663451][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 994.673824][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 994.693119][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 994.703469][ T5809] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 994.722381][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 994.737289][ T5809] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 994.745671][T23748] syzkaller0: entered promiscuous mode [ 994.754740][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 994.754890][T23750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5607'. [ 994.766064][ T5809] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 994.781231][T23748] syzkaller0: entered allmulticast mode [ 994.797774][T23750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5607'. [ 994.839391][T22793] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 994.849060][ T791] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 994.873764][T22793] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 994.890852][ T5809] usb 1-1: USB disconnect, device number 25 [ 994.900602][T22793] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 994.982960][T23756] ./file0: Can't lookup blockdev [ 995.021812][T22793] usb 6-1: USB disconnect, device number 15 [ 995.032619][ T791] usb 4-1: device descriptor read/64, error -71 [ 995.212413][ T791] usb usb4-port1: attempt power cycle [ 995.622388][ T791] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 995.727495][ T791] usb 4-1: device descriptor read/8, error -71 [ 996.082410][ T791] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 996.150696][ T791] usb 4-1: device descriptor read/8, error -71 [ 996.354991][ T791] usb usb4-port1: unable to enumerate USB device [ 996.454316][T23769] ./file0: Can't lookup blockdev [ 997.584526][T23777] ./file0: Can't lookup blockdev [ 997.602241][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 997.610295][ C0] lec:lec_tx_timeout: lec0 [ 999.032437][T23768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5612'. [ 999.257765][T18312] lec:lec_start_xmit: lec0:No lecd attached [ 999.335009][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5619'. [ 999.349990][T23798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5619'. [ 999.399115][T23799] ubi: mtd0 is already attached to ubi31 [ 999.460438][T16287] Bluetooth: Frame is too long (len 12, expected len 4) [ 999.542310][ T791] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 999.572648][T22793] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 999.762175][T22793] usb 1-1: Using ep0 maxpacket: 16 [ 999.769844][T22793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.781298][ T791] usb 7-1: Using ep0 maxpacket: 16 [ 999.796564][ T791] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.807855][T22793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 999.818927][ T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 999.830843][T22793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 999.841462][ T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 999.852062][T22793] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 999.873820][ T791] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 999.885734][T22793] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 999.901895][ T791] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.005146][ T791] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1000.015248][ T791] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1000.023586][T22793] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1000.031791][T23808] ./file0: Can't lookup blockdev [ 1000.034897][T22793] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1000.046833][ T791] usb 7-1: Manufacturer: syz [ 1000.125376][ T791] usb 7-1: config 0 descriptor?? [ 1000.130820][T22793] usb 1-1: Manufacturer: syz [ 1000.146722][T22793] usb 1-1: config 0 descriptor?? [ 1000.182224][ T1694] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1000.332504][ T1694] usb 2-1: Using ep0 maxpacket: 8 [ 1000.340005][ T1694] usb 2-1: config 0 has no interfaces? [ 1000.355502][ T1694] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1000.388924][ T1694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.423126][ T1694] usb 2-1: Product: syz [ 1000.436713][ T1694] usb 2-1: Manufacturer: syz [ 1000.449336][ T1694] usb 2-1: SerialNumber: syz [ 1000.455807][ T791] rc_core: IR keymap rc-hauppauge not found [ 1000.478768][ T1694] usb 2-1: config 0 descriptor?? [ 1000.482201][ T791] Registered IR keymap rc-empty [ 1000.502439][T22793] rc_core: IR keymap rc-hauppauge not found [ 1000.510084][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.524177][T22793] Registered IR keymap rc-empty [ 1000.566147][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.575814][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.625816][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.642441][ T791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1000.690017][T22793] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1000.716003][ T791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input46 [ 1000.781777][T22793] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input47 [ 1000.801238][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.867642][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.907265][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.943048][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1000.973451][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.997711][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1001.042638][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.122717][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1001.140505][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.214007][ T5809] usb 2-1: USB disconnect, device number 28 [ 1001.252848][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.264331][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1001.346912][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.356536][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1001.454117][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1001.468614][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.562742][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1001.570173][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.644098][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.656961][ T791] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1001.702609][T22793] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1001.778317][ T791] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1001.838452][T22793] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1001.910973][ T791] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1002.011509][T22793] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1002.124760][ T791] usb 7-1: USB disconnect, device number 2 [ 1002.181154][T23826] ./file0: Can't lookup blockdev [ 1002.187911][T23822] ./file0: Can't lookup blockdev [ 1002.193279][T22793] usb 1-1: USB disconnect, device number 26 [ 1002.374094][T23828] ./file0: Can't lookup blockdev [ 1004.270797][T23842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5631'. [ 1004.462240][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 1004.470272][ C0] lec:lec_tx_timeout: lec0 [ 1005.171497][T23860] ./file0: Can't lookup blockdev [ 1005.465771][T22639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1005.476540][T22639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1005.484615][T22639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1005.492302][ T1694] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1005.501095][T22639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1005.518189][T22639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1005.713779][ T1694] usb 6-1: Using ep0 maxpacket: 16 [ 1006.074816][T23864] virt_wifi0 speed is unknown, defaulting to 1000 [ 1006.212951][T23864] vxcan1 speed is unknown, defaulting to 1000 [ 1006.238381][ T1694] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.262212][ T1694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1006.284302][ T1694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1006.312155][ T1694] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1006.321882][ T1694] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1006.351166][ T1694] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1006.372254][ T1694] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1006.380850][ T1694] usb 6-1: Manufacturer: syz [ 1006.384921][T23871] ./file0: Can't lookup blockdev [ 1006.454492][ T1694] usb 6-1: config 0 descriptor?? [ 1006.582192][ T791] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1006.592293][T23874] ./file0: Can't lookup blockdev [ 1006.742399][ T791] usb 2-1: Using ep0 maxpacket: 16 [ 1007.703264][T16287] Bluetooth: hci0: command tx timeout [ 1009.192657][ T791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.587078][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1009.790502][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1009.836152][T16287] Bluetooth: hci0: command tx timeout [ 1009.922204][ T1694] rc_core: IR keymap rc-hauppauge not found [ 1009.928151][ T1694] Registered IR keymap rc-empty [ 1009.933135][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1009.942759][ T791] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1010.409653][ T791] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.423149][ T791] usb 2-1: string descriptor 0 read error: -71 [ 1010.429350][ T791] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1010.440255][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1010.498010][ T791] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1010.507057][ T1694] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1010.540752][ T791] usb 2-1: config 0 descriptor?? [ 1010.572452][ T1694] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input48 [ 1010.587602][ T791] usb 2-1: can't set config #0, error -71 [ 1010.624819][ T791] usb 2-1: USB disconnect, device number 29 [ 1011.174741][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1011.192428][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1011.219435][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1011.375135][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1011.616761][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1011.670864][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1011.702491][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1011.742757][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1011.785153][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1011.832233][ T1694] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1011.868451][ T1694] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1011.892364][T16287] Bluetooth: hci0: command tx timeout [ 1011.914800][ T1694] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1011.980733][T23910] Bluetooth: MGMT ver 1.23 [ 1012.002393][ T1694] usb 6-1: USB disconnect, device number 16 [ 1012.165149][T23915] ./file0: Can't lookup blockdev [ 1013.270122][T23864] chnl_net:caif_netlink_parms(): no params data found [ 1013.282556][ T5873] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1013.322183][T23925] openvswitch: netlink: Message has 4 unknown bytes. [ 1013.328900][T23925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1013.386648][ T60] bridge_slave_1: left allmulticast mode [ 1013.400230][ T60] bridge_slave_1: left promiscuous mode [ 1013.414410][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.444414][ T60] bridge_slave_0: left allmulticast mode [ 1013.452272][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 1013.461648][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.493597][ T60] bridge_slave_0: left promiscuous mode [ 1013.499321][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.507563][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1013.529084][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1013.560160][ T5873] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1013.582880][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1013.627979][ T5873] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1013.647248][ T5873] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1013.672187][T23074] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1013.683501][ T5873] usb 6-1: Manufacturer: syz [ 1013.714469][ T5873] usb 6-1: config 0 descriptor?? [ 1013.791494][ T60] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1013.830097][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.851903][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.868689][T23074] usb 1-1: Using ep0 maxpacket: 16 [ 1013.877454][T23074] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.888461][ T60] bond0 (unregistering): Released all slaves [ 1013.894888][T23074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1013.911763][ T60] bond1 (unregistering): Released all slaves [ 1013.918136][T23074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1013.937740][ T60] bond2 (unregistering): Released all slaves [ 1013.947682][T23074] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1013.973391][T16287] Bluetooth: hci0: command tx timeout [ 1013.980012][ T60] bond3 (unregistering): Released all slaves [ 1013.987023][T23074] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1014.053694][T23074] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1014.082053][T23074] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1014.097880][T23074] usb 1-1: Manufacturer: syz [ 1014.122413][ T5873] rc_core: IR keymap rc-hauppauge not found [ 1014.128340][ T5873] Registered IR keymap rc-empty [ 1014.145269][T23074] usb 1-1: config 0 descriptor?? [ 1014.150344][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.198824][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.266235][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1014.274785][T23864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.286141][T23864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.325929][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input49 [ 1014.331573][T23864] bridge_slave_0: entered allmulticast mode [ 1014.402520][ T60] IPVS: stopping backup sync thread 13958 ... [ 1014.428940][T23864] bridge_slave_0: entered promiscuous mode [ 1014.447883][T23864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.456101][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.516810][T23864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.537677][T23074] rc_core: IR keymap rc-hauppauge not found [ 1014.545604][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.548164][T23864] bridge_slave_1: entered allmulticast mode [ 1014.561779][T23074] Registered IR keymap rc-empty [ 1014.581693][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1014.586280][T23864] bridge_slave_1: entered promiscuous mode [ 1014.603929][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.642290][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1014.652491][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.704126][T23074] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1014.716080][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.729645][T23074] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input50 [ 1014.752229][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.792222][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.805605][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1014.851242][T23864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.865508][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.873033][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1014.912381][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.916201][T23864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.934993][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1014.972308][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.992399][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1015.003510][ T5873] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1015.030906][ T5873] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1015.035212][T23864] team0: Port device team_slave_0 added [ 1015.054673][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1015.117837][T23864] team0: Port device team_slave_1 added [ 1015.172859][T22793] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1015.187065][T23864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.199762][ T5873] usb 6-1: USB disconnect, device number 17 [ 1015.222235][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1015.246840][T23864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.288641][T23864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.302287][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1015.324159][T23864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.350028][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1015.362288][T22793] usb 7-1: Using ep0 maxpacket: 16 [ 1015.374261][T23864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.408872][T23864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.410581][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1015.420473][T22793] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.459832][T22793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1015.472599][T23074] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1015.479697][T22793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1015.479731][T22793] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1015.479780][T22793] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.480700][T22793] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1015.543853][T23074] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1015.552330][T22793] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1015.569406][T22793] usb 7-1: Manufacturer: syz [ 1015.572139][T23074] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1015.635972][T22793] usb 7-1: config 0 descriptor?? [ 1015.642658][T23074] usb 1-1: USB disconnect, device number 27 [ 1015.684257][ T60] hsr_slave_0: left promiscuous mode [ 1015.699883][ T60] hsr_slave_1: left promiscuous mode [ 1015.723251][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.739468][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.989866][T23983] ./file0: Can't lookup blockdev [ 1015.992221][T22793] rc_core: IR keymap rc-hauppauge not found [ 1016.018321][T22793] Registered IR keymap rc-empty [ 1016.038177][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.098005][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.172729][T22793] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1016.250889][T23986] openvswitch: netlink: Message has 4 unknown bytes. [ 1016.258193][T22793] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input51 [ 1016.282524][T23986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.309894][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.342279][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.372357][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.402393][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.432237][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.462238][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.492408][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.507088][ T49] smc: removing ib device syz2 [ 1016.525945][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.573978][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.612667][T22793] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1016.683520][T22793] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1016.753351][T22793] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1016.812174][T22793] usb 7-1: USB disconnect, device number 3 [ 1017.046654][T23864] hsr_slave_0: entered promiscuous mode [ 1017.156447][T23864] hsr_slave_1: entered promiscuous mode [ 1017.207857][T23864] debugfs: 'hsr0' already exists in 'hsr' [ 1017.267104][T23864] Cannot create hsr debugfs directory [ 1017.610619][T24008] ./file0: Can't lookup blockdev [ 1019.513070][T24039] netlink: 'syz.6.5673': attribute type 4 has an invalid length. [ 1021.478525][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5678'. [ 1021.890602][T23864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1021.982449][T23864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1021.999844][T23864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1022.010702][T23864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1022.527991][T24100] ./file0: Can't lookup blockdev [ 1022.611144][T23864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.245810][T23864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.514301][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.521430][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.612082][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.619286][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.234070][T24122] FAULT_INJECTION: forcing a failure. [ 1025.234070][T24122] name failslab, interval 1, probability 0, space 0, times 1 [ 1025.246975][T24122] CPU: 1 UID: 0 PID: 24122 Comm: syz.1.5689 Not tainted syzkaller #0 PREEMPT(full) [ 1025.247000][T24122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1025.247010][T24122] Call Trace: [ 1025.247017][T24122] [ 1025.247023][T24122] dump_stack_lvl+0x100/0x190 [ 1025.247057][T24122] should_fail_ex.cold+0x5/0xa [ 1025.247080][T24122] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1025.247105][T24122] should_failslab+0xc2/0x120 [ 1025.247123][T24122] __kmalloc_noprof+0xe0/0x850 [ 1025.247155][T24122] tomoyo_realpath_from_path+0xb6/0x690 [ 1025.247186][T24122] tomoyo_path_number_perm+0x23c/0x580 [ 1025.247206][T24122] ? tomoyo_path_number_perm+0x22e/0x580 [ 1025.247229][T24122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1025.247273][T24122] ? find_held_lock+0x2b/0x80 [ 1025.247295][T24122] ? __fget_files+0x215/0x3d0 [ 1025.247313][T24122] ? hook_file_ioctl_common+0x146/0x410 [ 1025.247337][T24122] ? __fget_files+0x21f/0x3d0 [ 1025.247360][T24122] security_file_ioctl+0xd3/0x230 [ 1025.247384][T24122] __x64_sys_ioctl+0xb7/0x210 [ 1025.247412][T24122] do_syscall_64+0x106/0xf80 [ 1025.247436][T24122] ? clear_bhb_loop+0x40/0x90 [ 1025.247457][T24122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.247475][T24122] RIP: 0033:0x7f79ffd9c799 [ 1025.247490][T24122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.247506][T24122] RSP: 002b:00007f7a00c08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1025.247523][T24122] RAX: ffffffffffffffda RBX: 00007f7a00015fa0 RCX: 00007f79ffd9c799 [ 1025.247534][T24122] RDX: 0000200000000100 RSI: 00000000c0285700 RDI: 0000000000000003 [ 1025.247544][T24122] RBP: 00007f7a00c08090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.247554][T24122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.247564][T24122] R13: 00007f7a00016038 R14: 00007f7a00015fa0 R15: 00007ffe0e80bab8 [ 1025.247594][T24122] [ 1025.247601][T24122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1025.638203][T23864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.829469][T23864] veth0_vlan: entered promiscuous mode [ 1025.896926][T23864] veth1_vlan: entered promiscuous mode [ 1026.015344][T23864] veth0_macvtap: entered promiscuous mode [ 1026.046997][T23864] veth1_macvtap: entered promiscuous mode [ 1026.122279][T23864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.175996][T23864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.201948][T24147] ./file0: Can't lookup blockdev [ 1026.218381][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.235492][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.273391][ T5809] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1026.363555][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.375306][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.547135][ T5809] usb 6-1: Using ep0 maxpacket: 16 [ 1027.146954][ T5809] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.181101][ T5809] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.202281][ T5809] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1027.208929][ T5809] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1027.232256][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.264371][ T5809] usb 6-1: config 0 descriptor?? [ 1027.318146][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.347718][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.458877][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.499527][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.702267][T16287] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 1027.743975][T24142] netlink: 'syz.5.5692': attribute type 1 has an invalid length. [ 1027.763555][ T5809] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 1027.781237][ T5809] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 1027.795683][ T5809] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 1027.812213][ T5809] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 1027.812824][T23074] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1027.829857][ T5809] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 1027.871883][ T5809] nzxt-smart2 0003:1E71:2009.002D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1028.026025][T23074] usb 7-1: Using ep0 maxpacket: 8 [ 1028.053392][T23074] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.082245][T23074] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1028.149469][ T5809] usb 6-1: USB disconnect, device number 18 [ 1028.155948][T23074] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1028.199185][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1028.199203][ T29] audit: type=1400 audit(1774273070.442:1965): avc: denied { load_policy } for pid=24179 comm="syz.1.5698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1028.204061][T24181] SELinux: failed to load policy [ 1028.215705][T23074] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.682416][ T5809] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1028.697065][T23074] usb 7-1: Product: syz [ 1028.701306][T23074] usb 7-1: Manufacturer: syz [ 1028.706033][T23074] usb 7-1: SerialNumber: syz [ 1028.714192][T23074] usb 7-1: config 0 descriptor?? [ 1028.918337][ T5809] usb 2-1: device descriptor read/64, error -71 [ 1029.009608][T22793] usb 7-1: USB disconnect, device number 4 [ 1029.144486][T24197] FAULT_INJECTION: forcing a failure. [ 1029.144486][T24197] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1029.157639][T24197] CPU: 0 UID: 0 PID: 24197 Comm: syz.5.5699 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.157666][T24197] Tainted: [L]=SOFTLOCKUP [ 1029.157672][T24197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1029.157682][T24197] Call Trace: [ 1029.157689][T24197] [ 1029.157696][T24197] dump_stack_lvl+0x100/0x190 [ 1029.157729][T24197] should_fail_ex.cold+0x5/0xa [ 1029.157753][T24197] _copy_from_user+0x2e/0xd0 [ 1029.157773][T24197] copy_msghdr_from_user+0x9f/0x4f0 [ 1029.157792][T24197] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1029.157821][T24197] ___sys_sendmsg+0x106/0x1e0 [ 1029.157840][T24197] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.157856][T24197] ? find_held_lock+0x2b/0x80 [ 1029.157878][T24197] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 1029.157917][T24197] ? __rcu_read_unlock+0x26a/0x5e0 [ 1029.157950][T24197] __sys_sendmsg+0x170/0x220 [ 1029.157972][T24197] ? __pfx___sys_sendmsg+0x10/0x10 [ 1029.158010][T24197] do_syscall_64+0x106/0xf80 [ 1029.158033][T24197] ? clear_bhb_loop+0x40/0x90 [ 1029.158055][T24197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.158072][T24197] RIP: 0033:0x7f7b4879c799 [ 1029.158087][T24197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.158103][T24197] RSP: 002b:00007f7b495a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.158121][T24197] RAX: ffffffffffffffda RBX: 00007f7b48a16180 RCX: 00007f7b4879c799 [ 1029.158132][T24197] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1029.158142][T24197] RBP: 00007f7b495a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.158152][T24197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.158162][T24197] R13: 00007f7b48a16218 R14: 00007f7b48a16180 R15: 00007ffde5a8fd78 [ 1029.158186][T24197] [ 1029.488699][ T5809] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1029.606445][T24201] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.5700'. [ 1029.615960][T24201] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.5700'. [ 1029.812282][ T5809] usb 2-1: device descriptor read/64, error -71 [ 1029.938235][ T5809] usb usb2-port1: attempt power cycle [ 1030.116011][T24204] tmpfs: Unknown parameter 'e½Çg3¯' [ 1030.182276][ T29] audit: type=1326 audit(1774273072.412:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.3.5703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f843739c799 code=0x0 [ 1030.335279][ T5809] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1030.390855][T24218] netlink: 5052 bytes leftover after parsing attributes in process `syz.6.5702'. [ 1030.400382][T24218] netlink: 5052 bytes leftover after parsing attributes in process `syz.6.5702'. [ 1030.417195][ T5809] usb 2-1: device descriptor read/8, error -71 [ 1030.612268][ T29] audit: type=1400 audit(1774273072.772:1967): avc: denied { write } for pid=24206 comm="syz.6.5702" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1030.877969][T24224] FAULT_INJECTION: forcing a failure. [ 1030.877969][T24224] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.882192][ T5809] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1030.899214][T24224] CPU: 0 UID: 0 PID: 24224 Comm: syz.5.5704 Tainted: G L syzkaller #0 PREEMPT(full) [ 1030.899240][T24224] Tainted: [L]=SOFTLOCKUP [ 1030.899246][T24224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1030.899256][T24224] Call Trace: [ 1030.899261][T24224] [ 1030.899267][T24224] dump_stack_lvl+0x100/0x190 [ 1030.899296][T24224] should_fail_ex.cold+0x5/0xa [ 1030.899317][T24224] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1030.899340][T24224] should_failslab+0xc2/0x120 [ 1030.899356][T24224] __kmalloc_noprof+0xe0/0x850 [ 1030.899383][T24224] tomoyo_realpath_from_path+0xb6/0x690 [ 1030.899410][T24224] tomoyo_path_number_perm+0x23c/0x580 [ 1030.899430][T24224] ? tomoyo_path_number_perm+0x22e/0x580 [ 1030.899453][T24224] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1030.899480][T24224] ? irqentry_exit+0x180/0x670 [ 1030.899502][T24224] ? lockdep_hardirqs_on+0x78/0x100 [ 1030.899536][T24224] ? hook_file_ioctl_common+0x36/0x410 [ 1030.899559][T24224] ? hook_file_ioctl_common+0x66/0x410 [ 1030.899574][T24224] ? hook_file_ioctl_common+0x146/0x410 [ 1030.899596][T24224] ? __fget_files+0x21f/0x3d0 [ 1030.899618][T24224] security_file_ioctl+0xd3/0x230 [ 1030.899641][T24224] __x64_sys_ioctl+0xb7/0x210 [ 1030.899668][T24224] do_syscall_64+0x106/0xf80 [ 1030.899688][T24224] ? clear_bhb_loop+0x40/0x90 [ 1030.899707][T24224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.899722][T24224] RIP: 0033:0x7f7b4879c799 [ 1030.899737][T24224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.899752][T24224] RSP: 002b:00007f7b495c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.899767][T24224] RAX: ffffffffffffffda RBX: 00007f7b48a16090 RCX: 00007f7b4879c799 [ 1030.899777][T24224] RDX: 0000200000000040 RSI: 00000000c04064a0 RDI: 0000000000000005 [ 1030.899786][T24224] RBP: 00007f7b495c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.899795][T24224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.899804][T24224] R13: 00007f7b48a16128 R14: 00007f7b48a16090 R15: 00007ffde5a8fd78 [ 1030.899825][T24224] [ 1030.899921][T24224] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1031.190833][ T5809] usb 2-1: device descriptor read/8, error -71 [ 1031.317940][ T5809] usb usb2-port1: unable to enumerate USB device [ 1032.175002][T24231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5705'. [ 1032.201642][T24246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5709'. [ 1032.373282][T24255] FAULT_INJECTION: forcing a failure. [ 1032.373282][T24255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.422082][T24255] CPU: 1 UID: 0 PID: 24255 Comm: syz.6.5711 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.422114][T24255] Tainted: [L]=SOFTLOCKUP [ 1032.422119][T24255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1032.422130][T24255] Call Trace: [ 1032.422135][T24255] [ 1032.422142][T24255] dump_stack_lvl+0x100/0x190 [ 1032.422177][T24255] should_fail_ex.cold+0x5/0xa [ 1032.422199][T24255] _copy_from_user+0x2e/0xd0 [ 1032.422219][T24255] copy_msghdr_from_user+0x9f/0x4f0 [ 1032.422238][T24255] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1032.422266][T24255] ___sys_sendmsg+0x106/0x1e0 [ 1032.422284][T24255] ? __pfx____sys_sendmsg+0x10/0x10 [ 1032.422328][T24255] __sys_sendmsg+0x170/0x220 [ 1032.422352][T24255] ? __pfx___sys_sendmsg+0x10/0x10 [ 1032.422385][T24255] do_syscall_64+0x106/0xf80 [ 1032.422408][T24255] ? clear_bhb_loop+0x40/0x90 [ 1032.422430][T24255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.422447][T24255] RIP: 0033:0x7f6d18d9c799 [ 1032.422463][T24255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.422478][T24255] RSP: 002b:00007f6d19d24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1032.422495][T24255] RAX: ffffffffffffffda RBX: 00007f6d19015fa0 RCX: 00007f6d18d9c799 [ 1032.422506][T24255] RDX: 0000000000080084 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1032.422517][T24255] RBP: 00007f6d19d24090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.422527][T24255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.422535][T24255] R13: 00007f6d19016038 R14: 00007f6d19015fa0 R15: 00007ffcdf6ceda8 [ 1032.422557][T24255] [ 1032.604664][T24262] FAULT_INJECTION: forcing a failure. [ 1032.604664][T24262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.618172][T24262] CPU: 0 UID: 0 PID: 24262 Comm: syz.0.5714 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.618199][T24262] Tainted: [L]=SOFTLOCKUP [ 1032.618205][T24262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1032.618215][T24262] Call Trace: [ 1032.618220][T24262] [ 1032.618227][T24262] dump_stack_lvl+0x100/0x190 [ 1032.618259][T24262] should_fail_ex.cold+0x5/0xa [ 1032.618282][T24262] _copy_to_user+0x32/0xd0 [ 1032.618302][T24262] simple_read_from_buffer+0xcb/0x170 [ 1032.618321][T24262] proc_fail_nth_read+0x1af/0x230 [ 1032.618346][T24262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1032.618371][T24262] ? rw_verify_area+0xce/0x6d0 [ 1032.618394][T24262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1032.618417][T24262] vfs_read+0x1e4/0xb30 [ 1032.618446][T24262] ? __pfx_vfs_read+0x10/0x10 [ 1032.618471][T24262] ? __fget_files+0x215/0x3d0 [ 1032.618495][T24262] ? __fget_files+0x21f/0x3d0 [ 1032.618519][T24262] ksys_read+0x12a/0x250 [ 1032.618535][T24262] ? __pfx_ksys_read+0x10/0x10 [ 1032.618563][T24262] do_syscall_64+0x106/0xf80 [ 1032.618586][T24262] ? clear_bhb_loop+0x40/0x90 [ 1032.618607][T24262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.618625][T24262] RIP: 0033:0x7f33c215cfce [ 1032.618639][T24262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1032.618655][T24262] RSP: 002b:00007f33c2ff8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1032.618671][T24262] RAX: ffffffffffffffda RBX: 00007f33c2ff96c0 RCX: 00007f33c215cfce [ 1032.618682][T24262] RDX: 000000000000000f RSI: 00007f33c2ff90a0 RDI: 0000000000000004 [ 1032.618692][T24262] RBP: 00007f33c2ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.618701][T24262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.618710][T24262] R13: 00007f33c2416038 R14: 00007f33c2415fa0 R15: 00007ffc55ad6fc8 [ 1032.618734][T24262] [ 1033.087397][T24271] FAULT_INJECTION: forcing a failure. [ 1033.087397][T24271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.169660][T24271] CPU: 1 UID: 0 PID: 24271 Comm: syz.0.5716 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.169690][T24271] Tainted: [L]=SOFTLOCKUP [ 1033.169696][T24271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1033.169705][T24271] Call Trace: [ 1033.169710][T24271] [ 1033.169716][T24271] dump_stack_lvl+0x100/0x190 [ 1033.169748][T24271] should_fail_ex.cold+0x5/0xa [ 1033.169772][T24271] _copy_from_user+0x2e/0xd0 [ 1033.169791][T24271] __sys_bpf+0x243/0x4b90 [ 1033.169821][T24271] ? __pfx___sys_bpf+0x10/0x10 [ 1033.169837][T24271] ? proc_fail_nth_write+0x9f/0x220 [ 1033.169860][T24271] ? find_held_lock+0x2b/0x80 [ 1033.169888][T24271] ? find_held_lock+0x2b/0x80 [ 1033.169908][T24271] ? ksys_write+0x190/0x250 [ 1033.169929][T24271] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1033.169953][T24271] ? __fget_files+0x215/0x3d0 [ 1033.169982][T24271] ? fput+0x79/0x100 [ 1033.170001][T24271] ? ksys_write+0x1ac/0x250 [ 1033.170016][T24271] ? __pfx_ksys_write+0x10/0x10 [ 1033.170036][T24271] __x64_sys_bpf+0x7b/0xc0 [ 1033.170054][T24271] ? lockdep_hardirqs_on+0x78/0x100 [ 1033.170076][T24271] do_syscall_64+0x106/0xf80 [ 1033.170098][T24271] ? clear_bhb_loop+0x40/0x90 [ 1033.170120][T24271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.170138][T24271] RIP: 0033:0x7f33c219c799 [ 1033.170151][T24271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.170166][T24271] RSP: 002b:00007f33c2ff9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1033.170183][T24271] RAX: ffffffffffffffda RBX: 00007f33c2415fa0 RCX: 00007f33c219c799 [ 1033.170194][T24271] RDX: 000000000000001c RSI: 0000200000000100 RDI: 000000000000001c [ 1033.170205][T24271] RBP: 00007f33c2ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.170215][T24271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.170224][T24271] R13: 00007f33c2416038 R14: 00007f33c2415fa0 R15: 00007ffc55ad6fc8 [ 1033.170248][T24271] [ 1033.487901][T24273] netlink: 'syz.3.5718': attribute type 1 has an invalid length. [ 1033.783229][T23074] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1033.807598][T23074] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1033.862194][T23741] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1034.056509][T23741] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1034.065959][T23741] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1034.093694][T23741] usb 6-1: Product: syz [ 1034.112185][T23741] usb 6-1: Manufacturer: syz [ 1034.131707][T23741] usb 6-1: SerialNumber: syz [ 1034.174512][T23741] usb 6-1: config 0 descriptor?? [ 1034.206057][ T29] audit: type=1400 audit(1774273076.432:1968): avc: denied { name_bind } for pid=24297 comm="syz.1.5724" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1034.239569][T23741] ch341 6-1:0.0: ch341-uart converter detected [ 1034.464472][T23741] usb 6-1: failed to receive control message: -121 [ 1034.471046][T23741] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1034.526072][T24302] comedi comedi2: comedi_parport: I/O port conflict (0xafff,3) [ 1034.639711][ T5873] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1034.802188][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 1034.910243][ T5873] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 1034.914735][T24306] FAULT_INJECTION: forcing a failure. [ 1034.914735][T24306] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.918821][ T5873] usb 1-1: config 2 has no interface number 0 [ 1034.985227][ T5873] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1034.996167][ T5873] usb 1-1: config 2 interface 88 has no altsetting 0 [ 1035.012498][T24306] CPU: 0 UID: 0 PID: 24306 Comm: syz.6.5727 Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.012525][T24306] Tainted: [L]=SOFTLOCKUP [ 1035.012531][T24306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1035.012541][T24306] Call Trace: [ 1035.012548][T24306] [ 1035.012555][T24306] dump_stack_lvl+0x100/0x190 [ 1035.012594][T24306] should_fail_ex.cold+0x5/0xa [ 1035.012617][T24306] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1035.012643][T24306] should_failslab+0xc2/0x120 [ 1035.012661][T24306] __kmalloc_noprof+0xe0/0x850 [ 1035.012692][T24306] tomoyo_realpath_from_path+0xb6/0x690 [ 1035.012724][T24306] tomoyo_path_number_perm+0x23c/0x580 [ 1035.012745][T24306] ? tomoyo_path_number_perm+0x22e/0x580 [ 1035.012768][T24306] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1035.012814][T24306] ? find_held_lock+0x2b/0x80 [ 1035.012836][T24306] ? __fget_files+0x215/0x3d0 [ 1035.012853][T24306] ? hook_file_ioctl_common+0x146/0x410 [ 1035.012876][T24306] ? __fget_files+0x21f/0x3d0 [ 1035.012899][T24306] security_file_ioctl+0xd3/0x230 [ 1035.012924][T24306] __x64_sys_ioctl+0xb7/0x210 [ 1035.012952][T24306] do_syscall_64+0x106/0xf80 [ 1035.012975][T24306] ? clear_bhb_loop+0x40/0x90 [ 1035.012997][T24306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.013015][T24306] RIP: 0033:0x7f6d18d9c799 [ 1035.013031][T24306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.013047][T24306] RSP: 002b:00007f6d19d24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.013063][T24306] RAX: ffffffffffffffda RBX: 00007f6d19015fa0 RCX: 00007f6d18d9c799 [ 1035.013074][T24306] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000004 [ 1035.013084][T24306] RBP: 00007f6d19d24090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.013094][T24306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.013104][T24306] R13: 00007f6d19016038 R14: 00007f6d19015fa0 R15: 00007ffcdf6ceda8 [ 1035.013128][T24306] [ 1035.013136][T24306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1035.237953][ T5873] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1035.250367][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.268788][ T5873] usb 1-1: Product: syz [ 1035.273223][ T5873] usb 1-1: Manufacturer: syz [ 1035.277864][ T5873] usb 1-1: SerialNumber: syz [ 1035.336738][T24300] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1035.571091][T24300] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1035.714797][ T29] audit: type=1400 audit(1774273077.892:1969): avc: denied { setopt } for pid=24309 comm="syz.6.5728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1035.762216][T22793] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1035.931660][T22793] usb 2-1: Using ep0 maxpacket: 16 [ 1035.938265][T22793] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.958030][T22793] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.968854][T22793] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1035.978629][T22793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.565192][ T5809] usb 6-1: USB disconnect, device number 19 [ 1036.575488][ T5809] ch341 6-1:0.0: device disconnected [ 1036.912462][T23741] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1037.032448][T22793] mcp2221 0003:04D8:00DD.002F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1037.421785][T23741] usb 4-1: Using ep0 maxpacket: 32 [ 1037.474483][T23741] usb 4-1: config 0 has an invalid interface number: 90 but max is 0 [ 1037.652259][T23741] usb 4-1: config 0 has no interface number 0 [ 1037.658387][T23741] usb 4-1: config 0 interface 90 altsetting 6 endpoint 0x3 has an invalid bInterval 67, changing to 10 [ 1037.670239][T22793] usb 2-1: USB disconnect, device number 34 [ 1037.708052][T24330] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5733'. [ 1037.720910][T23741] usb 4-1: config 0 interface 90 has no altsetting 0 [ 1037.759042][T23741] usb 4-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=4f.2b [ 1037.837564][T23741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.907384][T23741] usb 4-1: Product: syz [ 1037.951135][T23741] usb 4-1: Manufacturer: syz [ 1038.014919][T23741] usb 4-1: SerialNumber: syz [ 1038.111651][T23741] usb 4-1: config 0 descriptor?? [ 1038.586598][T23741] HFC-S_USB 4-1:0.90: probe with driver HFC-S_USB failed with error -5 [ 1038.653384][T23741] usb 4-1: USB disconnect, device number 32 [ 1038.907107][ T5873] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1038.919404][ T5873] asix 1-1:2.88: probe with driver asix failed with error -71 [ 1039.415488][T24346] netlink: 'syz.6.5737': attribute type 4 has an invalid length. [ 1039.744827][ T5873] usb 1-1: USB disconnect, device number 28 [ 1040.106294][ T29] audit: type=1400 audit(1774273082.352:1970): avc: denied { bind } for pid=24348 comm="syz.0.5739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1040.121029][T24353] overlay: ./file0 is not a directory [ 1041.130769][T24365] openvswitch: netlink: Message has 4 unknown bytes. [ 1041.140731][T24365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1041.384137][T24374] FAULT_INJECTION: forcing a failure. [ 1041.384137][T24374] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.399225][T24374] CPU: 1 UID: 0 PID: 24374 Comm: syz.6.5746 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.399252][T24374] Tainted: [L]=SOFTLOCKUP [ 1041.399258][T24374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1041.399268][T24374] Call Trace: [ 1041.399274][T24374] [ 1041.399280][T24374] dump_stack_lvl+0x100/0x190 [ 1041.399313][T24374] should_fail_ex.cold+0x5/0xa [ 1041.399336][T24374] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1041.399361][T24374] should_failslab+0xc2/0x120 [ 1041.399378][T24374] __kmalloc_noprof+0xe0/0x850 [ 1041.399408][T24374] tomoyo_realpath_from_path+0xb6/0x690 [ 1041.399439][T24374] tomoyo_path_number_perm+0x23c/0x580 [ 1041.399459][T24374] ? tomoyo_path_number_perm+0x22e/0x580 [ 1041.399481][T24374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1041.399527][T24374] ? find_held_lock+0x2b/0x80 [ 1041.399549][T24374] ? __fget_files+0x215/0x3d0 [ 1041.399566][T24374] ? hook_file_ioctl_common+0x146/0x410 [ 1041.399589][T24374] ? __fget_files+0x21f/0x3d0 [ 1041.399612][T24374] security_file_ioctl+0xd3/0x230 [ 1041.399636][T24374] __x64_sys_ioctl+0xb7/0x210 [ 1041.399669][T24374] do_syscall_64+0x106/0xf80 [ 1041.399692][T24374] ? clear_bhb_loop+0x40/0x90 [ 1041.399712][T24374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.399729][T24374] RIP: 0033:0x7f6d18d9c799 [ 1041.399743][T24374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.399759][T24374] RSP: 002b:00007f6d19d24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1041.399776][T24374] RAX: ffffffffffffffda RBX: 00007f6d19015fa0 RCX: 00007f6d18d9c799 [ 1041.399787][T24374] RDX: 00002000000000c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1041.399797][T24374] RBP: 00007f6d19d24090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.399806][T24374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.399816][T24374] R13: 00007f6d19016038 R14: 00007f6d19015fa0 R15: 00007ffcdf6ceda8 [ 1041.399840][T24374] [ 1041.399846][T24374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1041.435111][ T5873] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1042.252333][ T29] audit: type=1400 audit(1774273084.462:1971): avc: denied { connect } for pid=24381 comm="syz.6.5749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1042.283247][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 1042.312436][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1042.338924][ T5873] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1042.348730][ T29] audit: type=1400 audit(1774273084.492:1972): avc: denied { bind } for pid=24381 comm="syz.6.5749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1042.368578][ T29] audit: type=1400 audit(1774273084.502:1973): avc: denied { listen } for pid=24381 comm="syz.6.5749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1042.389573][ T29] audit: type=1400 audit(1774273084.532:1974): avc: denied { accept } for pid=24381 comm="syz.6.5749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1042.422239][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.443198][ T5873] usb 4-1: config 0 descriptor?? [ 1042.881584][ T5873] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0 [ 1042.898627][ T5873] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0 [ 1042.908589][ T5873] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0 [ 1042.924080][ T5873] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0 [ 1042.947496][ T5873] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0 [ 1042.956287][ T5873] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0 [ 1042.984365][ T5873] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0 [ 1043.019354][T24404] netlink: 5052 bytes leftover after parsing attributes in process `syz.1.5755'. [ 1043.028908][T24404] netlink: 5052 bytes leftover after parsing attributes in process `syz.1.5755'. [ 1043.140227][ T29] audit: type=1400 audit(1774273085.352:1975): avc: denied { read } for pid=24400 comm="syz.1.5755" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1043.206503][ T5873] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0 [ 1043.320396][ T5873] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0 [ 1043.379734][ T5873] kone 0003:1E7D:2CED.0030: unknown main item tag 0x0 [ 1043.393147][ T29] audit: type=1400 audit(1774273085.352:1976): avc: denied { open } for pid=24400 comm="syz.1.5755" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1043.423003][ T5873] kone 0003:1E7D:2CED.0030: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 1043.584186][T22793] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1043.592380][ T5873] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1043.719196][T23741] usb 4-1: USB disconnect, device number 33 [ 1043.772655][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 1043.782178][T22793] usb 1-1: Using ep0 maxpacket: 8 [ 1043.794917][T22793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.798207][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.806983][T22793] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1043.833853][T22793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.841953][T22793] usb 1-1: Product: syz [ 1043.846987][T22793] usb 1-1: Manufacturer: syz [ 1043.858198][ T5873] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1043.862980][T22793] usb 1-1: SerialNumber: syz [ 1043.880904][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.912180][ T5873] usb 6-1: Product: syz [ 1043.932348][ T5873] usb 6-1: Manufacturer: syz [ 1043.938104][T22793] usb 1-1: config 0 descriptor?? [ 1043.949270][ T5873] usb 6-1: SerialNumber: syz [ 1043.985635][ T5873] usb 6-1: config 0 descriptor?? [ 1044.205004][T23741] usb 6-1: USB disconnect, device number 20 [ 1044.229850][ T5873] usb 1-1: USB disconnect, device number 29 [ 1044.320917][ T29] audit: type=1400 audit(1774273086.572:1977): avc: denied { create } for pid=24433 comm="syz.1.5765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1044.392608][T24434] overlayfs: failed to resolve './file1': -2 [ 1045.812205][T22639] Bluetooth: hci2: command 0x0406 tx timeout [ 1045.919298][ T29] audit: type=1400 audit(1774273088.052:1978): avc: denied { create } for pid=24441 comm="syz.3.5768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1046.510619][ T5873] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1046.607129][ T29] audit: type=1400 audit(1774273088.802:1979): avc: denied { setopt } for pid=24441 comm="syz.3.5768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1046.638680][T24453] CUSE: info not properly terminated [ 1046.842393][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 1046.964612][ T5873] usb 6-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1047.024987][ T29] audit: type=1400 audit(1774273088.892:1980): avc: denied { shutdown } for pid=24451 comm="syz.0.5771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1047.123269][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1047.127063][T24456] FAULT_INJECTION: forcing a failure. [ 1047.127063][T24456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1047.147483][T24456] CPU: 1 UID: 0 PID: 24456 Comm: syz.6.5772 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.147510][T24456] Tainted: [L]=SOFTLOCKUP [ 1047.147516][T24456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1047.147526][T24456] Call Trace: [ 1047.147532][T24456] [ 1047.147538][T24456] dump_stack_lvl+0x100/0x190 [ 1047.147570][T24456] should_fail_ex.cold+0x5/0xa [ 1047.147599][T24456] _copy_from_user+0x2e/0xd0 [ 1047.147617][T24456] copy_msghdr_from_user+0x9f/0x4f0 [ 1047.147636][T24456] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1047.147664][T24456] ___sys_sendmsg+0x106/0x1e0 [ 1047.147683][T24456] ? __pfx____sys_sendmsg+0x10/0x10 [ 1047.147727][T24456] __sys_sendmsg+0x170/0x220 [ 1047.147749][T24456] ? __pfx___sys_sendmsg+0x10/0x10 [ 1047.147784][T24456] do_syscall_64+0x106/0xf80 [ 1047.147806][T24456] ? clear_bhb_loop+0x40/0x90 [ 1047.147827][T24456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.147843][T24456] RIP: 0033:0x7f6d18d9c799 [ 1047.147858][T24456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.147873][T24456] RSP: 002b:00007f6d19d24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1047.147889][T24456] RAX: ffffffffffffffda RBX: 00007f6d19015fa0 RCX: 00007f6d18d9c799 [ 1047.147900][T24456] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000004 [ 1047.147910][T24456] RBP: 00007f6d19d24090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.147920][T24456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.147929][T24456] R13: 00007f6d19016038 R14: 00007f6d19015fa0 R15: 00007ffcdf6ceda8 [ 1047.147951][T24456] [ 1047.162133][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1047.532186][ T5873] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1047.541921][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.542612][T24458] ./file0: Can't lookup blockdev [ 1047.556445][ T5873] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1047.569046][ T5873] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1047.578024][ T5873] usb 6-1: Manufacturer: syz [ 1047.597729][ T5873] usb 6-1: config 0 descriptor?? [ 1047.614797][T24442] netlink: 'syz.3.5768': attribute type 12 has an invalid length. [ 1048.414033][T24463] 9p: Bad value for 'wfdno' [ 1048.883682][ T29] audit: type=1400 audit(1774273091.132:1981): avc: denied { name_bind 0x1000000 } for pid=24465 comm="syz.3.5776" path="socket:[91501]" dev="sockfs" ino=91501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1049.511209][ T5873] rc_core: IR keymap rc-hauppauge not found [ 1049.522253][ T5873] Registered IR keymap rc-empty [ 1049.552236][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1049.572233][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1049.602559][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1049.624401][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input52 [ 1049.712250][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1049.762218][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1049.792933][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1049.822316][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1049.903023][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1049.952715][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1049.988127][T24472] netlink: 'syz.6.5777': attribute type 4 has an invalid length. [ 1050.010475][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1050.024020][T22639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1050.051530][T22639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1050.060518][T22639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1050.079582][T22639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1050.087556][T22639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1050.102350][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1050.144286][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1050.172677][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1050.200855][T24483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5780'. [ 1050.215836][ T5873] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1050.246116][ T5873] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1050.293705][ T5873] usb 6-1: USB disconnect, device number 21 [ 1050.692644][T24490] FAULT_INJECTION: forcing a failure. [ 1050.692644][T24490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.815549][T24490] CPU: 1 UID: 0 PID: 24490 Comm: syz.0.5781 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.815583][T24490] Tainted: [L]=SOFTLOCKUP [ 1050.815589][T24490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1050.815598][T24490] Call Trace: [ 1050.815603][T24490] [ 1050.815609][T24490] dump_stack_lvl+0x100/0x190 [ 1050.815639][T24490] should_fail_ex.cold+0x5/0xa [ 1050.815660][T24490] _copy_to_user+0x32/0xd0 [ 1050.815678][T24490] simple_read_from_buffer+0xcb/0x170 [ 1050.815696][T24490] proc_fail_nth_read+0x1af/0x230 [ 1050.815719][T24490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1050.815743][T24490] ? rw_verify_area+0xce/0x6d0 [ 1050.815765][T24490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1050.815786][T24490] vfs_read+0x1e4/0xb30 [ 1050.815812][T24490] ? __pfx_vfs_read+0x10/0x10 [ 1050.815834][T24490] ? __fget_files+0x215/0x3d0 [ 1050.815856][T24490] ? __fget_files+0x21f/0x3d0 [ 1050.815879][T24490] ksys_read+0x12a/0x250 [ 1050.815893][T24490] ? __pfx_ksys_read+0x10/0x10 [ 1050.815913][T24490] do_syscall_64+0x106/0xf80 [ 1050.815934][T24490] ? clear_bhb_loop+0x40/0x90 [ 1050.815954][T24490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.815970][T24490] RIP: 0033:0x7f33c215cfce [ 1050.815984][T24490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1050.815998][T24490] RSP: 002b:00007f33c2fb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1050.816014][T24490] RAX: ffffffffffffffda RBX: 00007f33c2fb76c0 RCX: 00007f33c215cfce [ 1050.816024][T24490] RDX: 000000000000000f RSI: 00007f33c2fb70a0 RDI: 0000000000000005 [ 1050.816033][T24490] RBP: 00007f33c2fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.816042][T24490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.816051][T24490] R13: 00007f33c2416218 R14: 00007f33c2416180 R15: 00007ffc55ad6fc8 [ 1050.816073][T24490] [ 1051.221575][T24436] syz_tun (unregistering): left allmulticast mode [ 1051.268005][T24436] syz_tun (unregistering): left promiscuous mode [ 1051.302961][T24436] bridge0: port 3(syz_tun) entered disabled state [ 1051.368147][T24479] chnl_net:caif_netlink_parms(): no params data found [ 1051.855925][T24502] FAULT_INJECTION: forcing a failure. [ 1051.855925][T24502] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.948515][T24502] CPU: 1 UID: 0 PID: 24502 Comm: syz.6.5783 Tainted: G L syzkaller #0 PREEMPT(full) [ 1051.948544][T24502] Tainted: [L]=SOFTLOCKUP [ 1051.948549][T24502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1051.948560][T24502] Call Trace: [ 1051.948566][T24502] [ 1051.948572][T24502] dump_stack_lvl+0x100/0x190 [ 1051.948604][T24502] should_fail_ex.cold+0x5/0xa [ 1051.948627][T24502] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1051.948652][T24502] should_failslab+0xc2/0x120 [ 1051.948670][T24502] __kmalloc_noprof+0xe0/0x850 [ 1051.948700][T24502] tomoyo_realpath_from_path+0xb6/0x690 [ 1051.948730][T24502] tomoyo_path_number_perm+0x23c/0x580 [ 1051.948751][T24502] ? tomoyo_path_number_perm+0x22e/0x580 [ 1051.948773][T24502] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1051.948819][T24502] ? find_held_lock+0x2b/0x80 [ 1051.948841][T24502] ? __fget_files+0x215/0x3d0 [ 1051.948858][T24502] ? hook_file_ioctl_common+0x146/0x410 [ 1051.948881][T24502] ? __fget_files+0x21f/0x3d0 [ 1051.948903][T24502] security_file_ioctl+0xd3/0x230 [ 1051.948928][T24502] __x64_sys_ioctl+0xb7/0x210 [ 1051.948955][T24502] do_syscall_64+0x106/0xf80 [ 1051.948977][T24502] ? clear_bhb_loop+0x40/0x90 [ 1051.948999][T24502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.949016][T24502] RIP: 0033:0x7f6d18d9c799 [ 1051.949031][T24502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.949047][T24502] RSP: 002b:00007f6d19d24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.949064][T24502] RAX: ffffffffffffffda RBX: 00007f6d19015fa0 RCX: 00007f6d18d9c799 [ 1051.949075][T24502] RDX: 0000200000000040 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 1051.949085][T24502] RBP: 00007f6d19d24090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.949095][T24502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.949105][T24502] R13: 00007f6d19016038 R14: 00007f6d19015fa0 R15: 00007ffcdf6ceda8 [ 1051.949129][T24502] [ 1051.949135][T24502] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1051.953231][T24506] FAULT_INJECTION: forcing a failure. [ 1051.953231][T24506] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.172197][T22793] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1052.182962][T24506] CPU: 0 UID: 0 PID: 24506 Comm: syz.5.5785 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.182991][T24506] Tainted: [L]=SOFTLOCKUP [ 1052.182997][T24506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1052.183012][T24506] Call Trace: [ 1052.183018][T24506] [ 1052.183025][T24506] dump_stack_lvl+0x100/0x190 [ 1052.183057][T24506] should_fail_ex.cold+0x5/0xa [ 1052.183092][T24506] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1052.183117][T24506] should_failslab+0xc2/0x120 [ 1052.183135][T24506] __kmalloc_noprof+0xe0/0x850 [ 1052.183166][T24506] tomoyo_realpath_from_path+0xb6/0x690 [ 1052.183198][T24506] tomoyo_path_number_perm+0x23c/0x580 [ 1052.183219][T24506] ? tomoyo_path_number_perm+0x22e/0x580 [ 1052.183242][T24506] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1052.183290][T24506] ? find_held_lock+0x2b/0x80 [ 1052.183312][T24506] ? __fget_files+0x215/0x3d0 [ 1052.183328][T24506] ? hook_file_ioctl_common+0x146/0x410 [ 1052.183349][T24506] ? __fget_files+0x21f/0x3d0 [ 1052.183370][T24506] security_file_ioctl+0xd3/0x230 [ 1052.183395][T24506] __x64_sys_ioctl+0xb7/0x210 [ 1052.183422][T24506] do_syscall_64+0x106/0xf80 [ 1052.183443][T24506] ? clear_bhb_loop+0x40/0x90 [ 1052.183464][T24506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.183486][T24506] RIP: 0033:0x7f7b4879c799 [ 1052.183500][T24506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.183515][T24506] RSP: 002b:00007f7b495e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1052.183531][T24506] RAX: ffffffffffffffda RBX: 00007f7b48a15fa0 RCX: 00007f7b4879c799 [ 1052.183541][T24506] RDX: 0000200000000100 RSI: 0000000040103d0b RDI: 0000000000000003 [ 1052.183551][T24506] RBP: 00007f7b495e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.183560][T24506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.183569][T24506] R13: 00007f7b48a16038 R14: 00007f7b48a15fa0 R15: 00007ffde5a8fd78 [ 1052.183599][T24506] [ 1052.184273][T24506] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1052.272239][T16287] Bluetooth: hci5: command tx timeout [ 1052.412240][T22793] usb 4-1: Using ep0 maxpacket: 16 [ 1052.419298][T22793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.442254][T22793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1052.447829][T24479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.461041][T22793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1052.472526][T22793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1052.492376][T22793] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1052.501200][T24479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.513466][T22793] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1052.523578][T22793] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1052.531578][T22793] usb 4-1: Manufacturer: syz [ 1052.555762][T22793] usb 4-1: config 0 descriptor?? [ 1052.611661][T24479] bridge_slave_0: entered allmulticast mode [ 1052.659787][T24479] bridge_slave_0: entered promiscuous mode [ 1052.725412][T24479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.748067][T24479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.760979][T24479] bridge_slave_1: entered allmulticast mode [ 1052.775636][T24479] bridge_slave_1: entered promiscuous mode [ 1052.834446][T22793] rc_core: IR keymap rc-hauppauge not found [ 1052.841743][T22793] Registered IR keymap rc-empty [ 1052.850658][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1052.862577][ T5873] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1052.902443][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1052.939352][T22793] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1052.966593][T22793] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input53 [ 1052.972673][T24479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.022774][T24479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.053182][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 1053.058536][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.068170][ T5873] usb 6-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 1053.092511][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.109772][ T3489] bridge_slave_1: left allmulticast mode [ 1053.115551][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1053.115582][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1053.115603][ T5873] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1053.115625][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1053.116607][ T5873] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1053.142694][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.177158][ T5873] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1053.193364][ T3489] bridge_slave_1: left promiscuous mode [ 1053.199358][ T5873] usb 6-1: Manufacturer: syz [ 1053.200843][ T3489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.225272][ T5873] usb 6-1: config 0 descriptor?? [ 1053.244890][ T3489] bridge_slave_0: left allmulticast mode [ 1053.250605][ T3489] bridge_slave_0: left promiscuous mode [ 1053.274784][ T3489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.284325][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.310578][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.373019][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.417242][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.472279][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.522272][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.542536][T22793] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1053.549846][ T5873] rc_core: IR keymap rc-hauppauge not found [ 1053.556117][ T3489] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1053.564998][ T5873] Registered IR keymap rc-empty [ 1053.569947][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.583859][T22793] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1053.597265][T22793] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1053.612313][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.622332][T22793] usb 4-1: USB disconnect, device number 34 [ 1053.664675][ T5873] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 1053.685637][ T3489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.736810][ T3489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.749786][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input54 [ 1053.784059][ T3489] bond0 (unregistering): Released all slaves [ 1053.799119][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.824705][ T3489] bond1 (unregistering): Released all slaves [ 1053.862921][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.892245][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.906932][T24479] team0: Port device team_slave_0 added [ 1053.932576][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.954341][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1053.997453][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.008159][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1054.015544][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.028347][ T1294] lec:lec_start_xmit: lec0:No lecd attached [ 1054.044452][T24479] team0: Port device team_slave_1 added [ 1054.072299][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1054.108273][T24479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.115540][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1054.150914][T24479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.182278][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1054.212301][ T5873] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1054.223973][T24479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.248491][ T5873] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1054.262403][T24479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.269355][T24479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.272223][T23741] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1054.302145][ T5873] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1054.326210][ T5873] usb 6-1: USB disconnect, device number 22 [ 1054.369105][T24479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.370782][T24560] binder: 24558:24560 ioctl 400c620e 200000000080 returned -22 [ 1054.387507][ T3489] tipc: Left network mode [ 1054.442188][T22793] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 1054.452542][T16287] Bluetooth: hci5: command tx timeout [ 1054.493501][T23741] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1054.501865][T23741] usb 4-1: config 0 has no interface number 0 [ 1054.510434][T23741] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1054.528100][ T3489] IPVS: stopping master sync thread 16898 ... [ 1054.540299][T23741] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1054.582267][T23741] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1054.621843][T22793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.633402][T23741] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1054.652208][T23741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.660288][T22793] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1054.679422][T23741] usb 4-1: Product: syz [ 1054.683911][T22793] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 1054.702585][T23741] usb 4-1: Manufacturer: syz [ 1054.722955][T23741] usb 4-1: SerialNumber: syz [ 1054.732234][T22793] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1054.753482][T23741] usb 4-1: config 0 descriptor?? [ 1054.780972][T24479] hsr_slave_0: entered promiscuous mode [ 1054.781463][ C1] usb 4-1: NFC: Urb failure (status -71) [ 1054.794460][T22793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.805578][T24479] hsr_slave_1: entered promiscuous mode [ 1054.812582][T23741] usb 4-1: NFC: Unable to get FW version [ 1054.825749][T24554] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1054.843702][T22793] hub 1-1:1.0: bad descriptor, ignoring hub [ 1054.849627][T22793] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1054.858329][T23741] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 1054.902892][T24479] debugfs: 'hsr0' already exists in 'hsr' [ 1054.908636][T24479] Cannot create hsr debugfs directory [ 1054.935568][T22793] cdc_wdm 1-1:1.0: skipping garbage [ 1054.940791][T22793] cdc_wdm 1-1:1.0: skipping garbage [ 1055.027873][T23741] usb 4-1: USB disconnect, device number 35 [ 1055.059663][T22793] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1055.090946][T22793] cdc_wdm 1-1:1.0: Unknown control protocol [ 1055.112974][T22793] usb 1-1: USB disconnect, device number 30 [ 1055.632245][ T5873] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1055.645775][ T3489] hsr_slave_0: left promiscuous mode [ 1055.661926][ T3489] hsr_slave_1: left promiscuous mode [ 1055.771264][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.823057][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.829435][ T5873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.860611][ T5873] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1055.904370][ T5873] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 64 [ 1055.942161][ T5873] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1055.964798][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.005188][T24554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1056.073371][ T5873] hub 1-1:1.0: bad descriptor, ignoring hub [ 1056.099240][ T5873] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1056.157795][ T5873] cdc_wdm 1-1:1.0: skipping garbage [ 1056.182330][ T5873] cdc_wdm 1-1:1.0: skipping garbage [ 1056.197984][ T5873] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1056.224344][ T5873] cdc_wdm 1-1:1.0: Unknown control protocol [ 1056.323143][ T5873] usb 1-1: USB disconnect, device number 31 [ 1056.552378][T16287] Bluetooth: hci5: command tx timeout [ 1056.888332][T24599] ./file0: Can't lookup blockdev [ 1058.640183][T16287] Bluetooth: hci5: command tx timeout [ 1058.652224][T22793] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1058.802350][T22793] usb 6-1: Using ep0 maxpacket: 8 [ 1059.412208][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5380 ms [ 1059.420255][ C0] lec:lec_tx_timeout: lec0 [ 1059.587121][T22793] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1059.602437][T22793] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1059.611699][T22793] usb 6-1: string descriptor 0 read error: -22 [ 1059.618113][T22793] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1059.629500][T22793] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1059.692963][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5804'. [ 1059.706719][T22793] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1059.733894][T22793] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1059.746277][T22793] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1059.755161][T22793] usb 6-1: media controller created [ 1059.779387][T22793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1060.464636][T24636] FAULT_INJECTION: forcing a failure. [ 1060.464636][T24636] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.514647][T24636] CPU: 1 UID: 0 PID: 24636 Comm: syz.3.5809 Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.514683][T24636] Tainted: [L]=SOFTLOCKUP [ 1060.514690][T24636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1060.514700][T24636] Call Trace: [ 1060.514706][T24636] [ 1060.514714][T24636] dump_stack_lvl+0x100/0x190 [ 1060.514749][T24636] should_fail_ex.cold+0x5/0xa [ 1060.514774][T24636] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1060.514800][T24636] should_failslab+0xc2/0x120 [ 1060.514821][T24636] __kmalloc_noprof+0xe0/0x850 [ 1060.514852][T24636] tomoyo_realpath_from_path+0xb6/0x690 [ 1060.514885][T24636] tomoyo_path_number_perm+0x23c/0x580 [ 1060.514906][T24636] ? tomoyo_path_number_perm+0x22e/0x580 [ 1060.514928][T24636] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1060.514976][T24636] ? find_held_lock+0x2b/0x80 [ 1060.514999][T24636] ? __fget_files+0x215/0x3d0 [ 1060.515018][T24636] ? hook_file_ioctl_common+0x146/0x410 [ 1060.515042][T24636] ? __fget_files+0x21f/0x3d0 [ 1060.515065][T24636] security_file_ioctl+0xd3/0x230 [ 1060.515091][T24636] __x64_sys_ioctl+0xb7/0x210 [ 1060.515120][T24636] do_syscall_64+0x106/0xf80 [ 1060.515145][T24636] ? clear_bhb_loop+0x40/0x90 [ 1060.515168][T24636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.515186][T24636] RIP: 0033:0x7f843739c799 [ 1060.515202][T24636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.515218][T24636] RSP: 002b:00007f84382c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.515236][T24636] RAX: ffffffffffffffda RBX: 00007f8437615fa0 RCX: 00007f843739c799 [ 1060.515247][T24636] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1060.515257][T24636] RBP: 00007f84382c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.515266][T24636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.515276][T24636] R13: 00007f8437616038 R14: 00007f8437615fa0 R15: 00007ffc2bfe0cd8 [ 1060.515300][T24636] [ 1060.515421][T24636] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1061.217252][ T3489] IPVS: stop unused estimator thread 0... [ 1061.378999][T24655] ./file0: Can't lookup blockdev [ 1061.503331][T23074] usb 6-1: USB disconnect, device number 23 [ 1061.697435][T24479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1061.748521][T24479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1061.780845][T24479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1061.803156][T24479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1062.103400][T24479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.163488][T24479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.194473][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.201614][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.283891][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.291019][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.340626][T24479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1063.180275][T24479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.623943][T24715] ./file0: Can't lookup blockdev [ 1063.770693][T24479] veth0_vlan: entered promiscuous mode [ 1063.801381][T24479] veth1_vlan: entered promiscuous mode [ 1063.890855][T24479] veth0_macvtap: entered promiscuous mode [ 1063.952971][T24479] veth1_macvtap: entered promiscuous mode [ 1063.975939][T24479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.992352][T24479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.257139][ T3556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.312918][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.441519][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.485254][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.486225][T24733] FAULT_INJECTION: forcing a failure. [ 1064.486225][T24733] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.570792][T24733] CPU: 1 UID: 0 PID: 24733 Comm: syz.5.5827 Tainted: G L syzkaller #0 PREEMPT(full) [ 1064.570821][T24733] Tainted: [L]=SOFTLOCKUP [ 1064.570828][T24733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1064.570838][T24733] Call Trace: [ 1064.570843][T24733] [ 1064.570850][T24733] dump_stack_lvl+0x100/0x190 [ 1064.570882][T24733] should_fail_ex.cold+0x5/0xa [ 1064.570904][T24733] should_failslab+0xc2/0x120 [ 1064.570922][T24733] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1064.570947][T24733] ? do_getname+0x35/0x390 [ 1064.570969][T24733] ? find_held_lock+0x2b/0x80 [ 1064.570996][T24733] do_getname+0x35/0x390 [ 1064.571037][T24733] do_sys_openat2+0xc5/0x1e0 [ 1064.571060][T24733] ? __pfx_do_sys_openat2+0x10/0x10 [ 1064.571080][T24733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1064.571109][T24733] ? __fget_files+0x21f/0x3d0 [ 1064.571133][T24733] __x64_sys_openat+0x12d/0x210 [ 1064.571155][T24733] ? __pfx___x64_sys_openat+0x10/0x10 [ 1064.571176][T24733] ? ksys_write+0x1ac/0x250 [ 1064.571201][T24733] do_syscall_64+0x106/0xf80 [ 1064.571224][T24733] ? clear_bhb_loop+0x40/0x90 [ 1064.571246][T24733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.571264][T24733] RIP: 0033:0x7f7b4879c799 [ 1064.571279][T24733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.571296][T24733] RSP: 002b:00007f7b495e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1064.571314][T24733] RAX: ffffffffffffffda RBX: 00007f7b48a15fa0 RCX: 00007f7b4879c799 [ 1064.571326][T24733] RDX: 0000000000121542 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1064.571338][T24733] RBP: 00007f7b495e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.571348][T24733] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 1064.571359][T24733] R13: 00007f7b48a16038 R14: 00007f7b48a15fa0 R15: 00007ffde5a8fd78 [ 1064.571383][T24733] [ 1064.722919][T24737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5830'. [ 1064.755034][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.782172][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.812427][T18312] lec:lec_start_xmit: lec0:No lecd attached [ 1064.815521][T24742] ./file0: Can't lookup blockdev [ 1065.615524][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.623771][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.127889][T24788] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1068.243007][T24788] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1068.366752][T24794] ./file0: Can't lookup blockdev [ 1068.948380][T24801] netlink: 'syz.0.5839': attribute type 1 has an invalid length. [ 1069.640576][T24801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1069.728615][T24810] bond2: (slave geneve2): making interface the new active one [ 1069.743975][ T29] audit: type=1400 audit(1774273112.002:1982): avc: denied { accept } for pid=24800 comm="syz.0.5839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1069.744780][T24810] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1069.775720][T24801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5839'. [ 1070.360795][T24812] bond2: entered promiscuous mode [ 1070.390557][T24812] geneve2: entered promiscuous mode [ 1070.403907][ T3489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.419956][ T3489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.452129][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5640 ms [ 1070.460149][ C0] lec:lec_tx_timeout: lec0 [ 1070.481912][ T3489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.498585][ T3489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.565174][T24821] FAULT_INJECTION: forcing a failure. [ 1070.565174][T24821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.579517][T24821] CPU: 0 UID: 0 PID: 24821 Comm: syz.3.5846 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.579547][T24821] Tainted: [L]=SOFTLOCKUP [ 1070.579554][T24821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1070.579564][T24821] Call Trace: [ 1070.579571][T24821] [ 1070.579578][T24821] dump_stack_lvl+0x100/0x190 [ 1070.579611][T24821] should_fail_ex.cold+0x5/0xa [ 1070.579635][T24821] _copy_from_user+0x2e/0xd0 [ 1070.579654][T24821] __sys_bpf+0x243/0x4b90 [ 1070.579677][T24821] ? __pfx___sys_bpf+0x10/0x10 [ 1070.579694][T24821] ? proc_fail_nth_write+0x9f/0x220 [ 1070.579719][T24821] ? find_held_lock+0x2b/0x80 [ 1070.579746][T24821] ? find_held_lock+0x2b/0x80 [ 1070.579766][T24821] ? ksys_write+0x190/0x250 [ 1070.579789][T24821] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1070.579815][T24821] ? __fget_files+0x215/0x3d0 [ 1070.579847][T24821] ? fput+0x79/0x100 [ 1070.579868][T24821] ? ksys_write+0x1ac/0x250 [ 1070.579884][T24821] ? __pfx_ksys_write+0x10/0x10 [ 1070.579905][T24821] __x64_sys_bpf+0x7b/0xc0 [ 1070.579924][T24821] ? lockdep_hardirqs_on+0x78/0x100 [ 1070.579948][T24821] do_syscall_64+0x106/0xf80 [ 1070.579971][T24821] ? clear_bhb_loop+0x40/0x90 [ 1070.579993][T24821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.580011][T24821] RIP: 0033:0x7f843739c799 [ 1070.580027][T24821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.580044][T24821] RSP: 002b:00007f84382c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1070.580061][T24821] RAX: ffffffffffffffda RBX: 00007f8437615fa0 RCX: 00007f843739c799 [ 1070.580073][T24821] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1070.580083][T24821] RBP: 00007f84382c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.580099][T24821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.580110][T24821] R13: 00007f8437616038 R14: 00007f8437615fa0 R15: 00007ffc2bfe0cd8 [ 1070.580134][T24821] [ 1070.888832][T24825] kAFS: unable to lookup cell '.' [ 1071.090140][T24835] ./file0: Can't lookup blockdev [ 1071.242565][T22793] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1071.332698][ T5809] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1071.457786][T22793] usb 4-1: Using ep0 maxpacket: 8 [ 1071.492333][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 1071.505394][T22793] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1071.544432][ T5809] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1071.610672][T22793] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1071.632238][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.753767][ T5809] usb 2-1: config 0 has no interface number 0 [ 1071.800582][T22793] usb 4-1: string descriptor 0 read error: -22 [ 1071.850979][ T5809] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1071.876381][T22793] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1071.980888][T22793] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1071.994406][ T5809] usb 2-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1072.101113][ T5809] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1072.200715][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.280078][T22793] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1072.361189][ T5809] usb 2-1: config 0 descriptor?? [ 1072.520995][T22793] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1072.541994][ T5809] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1072.679276][T22793] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1072.758993][T22793] usb 4-1: media controller created [ 1072.968544][T22793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1073.047454][T22793] zl10353_read_register: readreg error (reg=127, ret==0) [ 1073.272578][T22793] usb 2-1: USB disconnect, device number 35 [ 1075.348263][T22793] usb 4-1: USB disconnect, device number 36 [ 1075.579162][ T29] audit: type=1400 audit(1774273117.832:1983): avc: denied { bind } for pid=24887 comm="syz.0.5863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1075.706618][T23074] IPVS: starting estimator thread 0... [ 1075.742482][ T29] audit: type=1400 audit(1774273117.952:1984): avc: denied { create } for pid=24870 comm="syz.5.5857" name="#31" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1075.902316][T22793] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1075.936910][ T29] audit: type=1400 audit(1774273117.952:1985): avc: denied { link } for pid=24870 comm="syz.5.5857" name="#31" dev="tmpfs" ino=1891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1076.018593][T24891] IPVS: using max 58 ests per chain, 139200 per kthread [ 1076.035822][ T29] audit: type=1400 audit(1774273117.962:1986): avc: denied { rename } for pid=24870 comm="syz.5.5857" name="#32" dev="tmpfs" ino=1891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1076.120125][T22793] usb 4-1: Using ep0 maxpacket: 8 [ 1076.135109][T22793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1076.167624][T22793] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1076.223064][T22793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.253244][T22793] usb 4-1: config 0 descriptor?? [ 1076.320328][T24902] FAULT_INJECTION: forcing a failure. [ 1076.320328][T24902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.399286][T24902] CPU: 0 UID: 0 PID: 24902 Comm: syz.1.5865 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.399317][T24902] Tainted: [L]=SOFTLOCKUP [ 1076.399324][T24902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1076.399334][T24902] Call Trace: [ 1076.399340][T24902] [ 1076.399347][T24902] dump_stack_lvl+0x100/0x190 [ 1076.399380][T24902] should_fail_ex.cold+0x5/0xa [ 1076.399405][T24902] _copy_to_user+0x32/0xd0 [ 1076.399432][T24902] simple_read_from_buffer+0xcb/0x170 [ 1076.399458][T24902] proc_fail_nth_read+0x1af/0x230 [ 1076.399485][T24902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.399510][T24902] ? rw_verify_area+0xce/0x6d0 [ 1076.399538][T24902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.399563][T24902] vfs_read+0x1e4/0xb30 [ 1076.399594][T24902] ? __pfx_vfs_read+0x10/0x10 [ 1076.399620][T24902] ? __fget_files+0x215/0x3d0 [ 1076.399644][T24902] ? __fget_files+0x21f/0x3d0 [ 1076.399670][T24902] ksys_read+0x12a/0x250 [ 1076.399686][T24902] ? __pfx_ksys_read+0x10/0x10 [ 1076.399710][T24902] do_syscall_64+0x106/0xf80 [ 1076.399734][T24902] ? clear_bhb_loop+0x40/0x90 [ 1076.399757][T24902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.399776][T24902] RIP: 0033:0x7fbcefd5cfce [ 1076.399790][T24902] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1076.399807][T24902] RSP: 002b:00007fbcf0c0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1076.399826][T24902] RAX: ffffffffffffffda RBX: 00007fbcf0c0c6c0 RCX: 00007fbcefd5cfce [ 1076.399837][T24902] RDX: 000000000000000f RSI: 00007fbcf0c0c0a0 RDI: 0000000000000005 [ 1076.399848][T24902] RBP: 00007fbcf0c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.399858][T24902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.399868][T24902] R13: 00007fbcf0016038 R14: 00007fbcf0015fa0 R15: 00007ffd12b11468 [ 1076.399894][T24902] [ 1076.722417][T22793] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1076.859383][T24908] ./file0: Can't lookup blockdev [ 1077.073442][T24912] kvm: kvm [24911]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000085) = 0x1 [ 1077.289752][T24886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1077.552341][T15441] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1077.608306][T22793] usb 4-1: USB disconnect, device number 37 [ 1077.742296][T15441] usb 2-1: Using ep0 maxpacket: 8 [ 1077.757177][T15441] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1077.923483][T15441] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1077.936104][T15441] usb 2-1: string descriptor 0 read error: -22 [ 1077.948924][T15441] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1077.997272][T15441] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1078.479641][T15441] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1078.516425][T15441] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1078.571132][T15441] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1078.692625][T15441] usb 2-1: media controller created [ 1078.716673][T15441] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1078.813404][T24936] FAULT_INJECTION: forcing a failure. [ 1078.813404][T24936] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.857069][T24936] CPU: 1 UID: 0 PID: 24936 Comm: syz.5.5876 Tainted: G L syzkaller #0 PREEMPT(full) [ 1078.857098][T24936] Tainted: [L]=SOFTLOCKUP [ 1078.857104][T24936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1078.857113][T24936] Call Trace: [ 1078.857119][T24936] [ 1078.857126][T24936] dump_stack_lvl+0x100/0x190 [ 1078.857161][T24936] should_fail_ex.cold+0x5/0xa [ 1078.857185][T24936] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1078.857219][T24936] should_failslab+0xc2/0x120 [ 1078.857237][T24936] __kmalloc_noprof+0xe0/0x850 [ 1078.857266][T24936] tomoyo_realpath_from_path+0xb6/0x690 [ 1078.857294][T24936] tomoyo_path_number_perm+0x23c/0x580 [ 1078.857315][T24936] ? tomoyo_path_number_perm+0x22e/0x580 [ 1078.857339][T24936] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1078.857388][T24936] ? find_held_lock+0x2b/0x80 [ 1078.857411][T24936] ? __fget_files+0x215/0x3d0 [ 1078.857429][T24936] ? hook_file_ioctl_common+0x146/0x410 [ 1078.857453][T24936] ? __fget_files+0x21f/0x3d0 [ 1078.857477][T24936] security_file_ioctl+0xd3/0x230 [ 1078.857504][T24936] __x64_sys_ioctl+0xb7/0x210 [ 1078.857533][T24936] do_syscall_64+0x106/0xf80 [ 1078.857558][T24936] ? clear_bhb_loop+0x40/0x90 [ 1078.857581][T24936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.857600][T24936] RIP: 0033:0x7f7b4879c799 [ 1078.857616][T24936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.857633][T24936] RSP: 002b:00007f7b495e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1078.857651][T24936] RAX: ffffffffffffffda RBX: 00007f7b48a15fa0 RCX: 00007f7b4879c799 [ 1078.857663][T24936] RDX: 0000200000000005 RSI: 0000000040140921 RDI: 0000000000000004 [ 1078.857674][T24936] RBP: 00007f7b495e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.857684][T24936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.857695][T24936] R13: 00007f7b48a16038 R14: 00007f7b48a15fa0 R15: 00007ffde5a8fd78 [ 1078.857720][T24936] [ 1078.857728][T24936] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1079.112365][ T29] audit: type=1400 audit(1774273121.342:1987): avc: denied { ioctl } for pid=24933 comm="syz.5.5876" path="/359/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1079.546669][T24936] md: could not open device unknown-block(0,0). [ 1079.561985][T24949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5879'. [ 1079.595209][T24936] md: md_import_device returned -6 [ 1079.614771][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5879'. [ 1079.715877][T24952] netlink: 'syz.0.5879': attribute type 4 has an invalid length. [ 1079.751334][ T29] audit: type=1400 audit(1774273121.992:1988): avc: denied { create } for pid=24956 comm="syz.6.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1079.774627][T24952] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5879'. [ 1079.937705][T24952] .`: renamed from bond0 [ 1080.671606][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5884'. [ 1080.867853][T24976] netlink: 'syz.0.5887': attribute type 13 has an invalid length. [ 1081.695263][ T5873] usb 2-1: USB disconnect, device number 36 [ 1081.897264][T24979] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1082.295151][T24987] CUSE: info not properly terminated [ 1082.842151][ T29] audit: type=1400 audit(1774273124.632:1989): avc: denied { create } for pid=24992 comm="syz.5.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1083.716978][T25015] ubi: mtd0 is already attached to ubi31 [ 1084.337695][T24999] FAULT_INJECTION: forcing a failure. [ 1084.337695][T24999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.406824][T24999] CPU: 1 UID: 0 PID: 24999 Comm: syz.1.5893 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.406854][T24999] Tainted: [L]=SOFTLOCKUP [ 1084.406860][T24999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1084.406870][T24999] Call Trace: [ 1084.406876][T24999] [ 1084.406883][T24999] dump_stack_lvl+0x100/0x190 [ 1084.406915][T24999] should_fail_ex.cold+0x5/0xa [ 1084.406938][T24999] _copy_to_user+0x32/0xd0 [ 1084.406958][T24999] simple_read_from_buffer+0xcb/0x170 [ 1084.406977][T24999] proc_fail_nth_read+0x1af/0x230 [ 1084.407001][T24999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1084.407026][T24999] ? rw_verify_area+0xce/0x6d0 [ 1084.407049][T24999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1084.407072][T24999] vfs_read+0x1e4/0xb30 [ 1084.407100][T24999] ? __pfx_vfs_read+0x10/0x10 [ 1084.407125][T24999] ? __fget_files+0x215/0x3d0 [ 1084.407149][T24999] ? __fget_files+0x21f/0x3d0 [ 1084.407174][T24999] ksys_read+0x12a/0x250 [ 1084.407188][T24999] ? __pfx_ksys_read+0x10/0x10 [ 1084.407211][T24999] do_syscall_64+0x106/0xf80 [ 1084.407233][T24999] ? clear_bhb_loop+0x40/0x90 [ 1084.407259][T24999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.407276][T24999] RIP: 0033:0x7fbcefd5cfce [ 1084.407290][T24999] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1084.407306][T24999] RSP: 002b:00007fbcf0c0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1084.407323][T24999] RAX: ffffffffffffffda RBX: 00007fbcf0c0c6c0 RCX: 00007fbcefd5cfce [ 1084.407334][T24999] RDX: 000000000000000f RSI: 00007fbcf0c0c0a0 RDI: 0000000000000004 [ 1084.407344][T24999] RBP: 00007fbcf0c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.407354][T24999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.407364][T24999] R13: 00007fbcf0016038 R14: 00007fbcf0015fa0 R15: 00007ffd12b11468 [ 1084.407388][T24999] [ 1085.500152][T25030] input: syz1 as /devices/virtual/input/input55 [ 1085.630397][ T29] audit: type=1400 audit(1774273127.882:1990): avc: denied { create } for pid=25029 comm="syz.3.5901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1085.680962][T25035] ./file0: Can't lookup blockdev [ 1085.922409][T23074] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1086.115092][T23074] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.357500][T23074] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1086.419970][T23074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.552752][T23074] usb 4-1: config 0 descriptor?? [ 1086.599671][T23074] pwc: Askey VC010 type 2 USB webcam detected. [ 1087.002755][T23074] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1087.064631][T23074] pwc: recv_control_msg error -32 req 02 val 2700 [ 1087.091876][T23074] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1088.084911][T23074] pwc: recv_control_msg error -32 req 04 val 1000 [ 1088.526993][T23074] pwc: recv_control_msg error -32 req 04 val 1300 [ 1088.543555][ T29] audit: type=1400 audit(1774273130.802:1991): avc: denied { setopt } for pid=25029 comm="syz.3.5901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1088.603051][ T29] audit: type=1400 audit(1774273130.802:1992): avc: denied { write } for pid=25058 comm="syz.0.5909" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1088.668627][T25046] FAULT_INJECTION: forcing a failure. [ 1088.668627][T25046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.678987][ T29] audit: type=1400 audit(1774273130.802:1993): avc: denied { open } for pid=25058 comm="syz.0.5909" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1088.783838][T25046] CPU: 0 UID: 0 PID: 25046 Comm: syz.5.5906 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.783868][T25046] Tainted: [L]=SOFTLOCKUP [ 1088.783877][T25046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1088.783889][T25046] Call Trace: [ 1088.783894][T25046] [ 1088.783901][T25046] dump_stack_lvl+0x100/0x190 [ 1088.783935][T25046] should_fail_ex.cold+0x5/0xa [ 1088.783958][T25046] _copy_from_user+0x2e/0xd0 [ 1088.783978][T25046] copy_msghdr_from_user+0x9f/0x4f0 [ 1088.783998][T25046] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1088.784027][T25046] ___sys_sendmsg+0x106/0x1e0 [ 1088.784046][T25046] ? __pfx____sys_sendmsg+0x10/0x10 [ 1088.784092][T25046] __sys_sendmsg+0x170/0x220 [ 1088.784115][T25046] ? __pfx___sys_sendmsg+0x10/0x10 [ 1088.784150][T25046] do_syscall_64+0x106/0xf80 [ 1088.784174][T25046] ? clear_bhb_loop+0x40/0x90 [ 1088.784202][T25046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.784219][T25046] RIP: 0033:0x7f7b4879c799 [ 1088.784234][T25046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.784250][T25046] RSP: 002b:00007f7b495c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.784269][T25046] RAX: ffffffffffffffda RBX: 00007f7b48a16090 RCX: 00007f7b4879c799 [ 1088.784280][T25046] RDX: 0000000000008040 RSI: 00002000000003c0 RDI: 0000000000000007 [ 1088.784290][T25046] RBP: 00007f7b495c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.784301][T25046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.784311][T25046] R13: 00007f7b48a16128 R14: 00007f7b48a16090 R15: 00007ffde5a8fd78 [ 1088.784334][T25046] [ 1088.882104][T25040] ------------[ cut here ]------------ [ 1088.966020][T25040] ODEBUG: init active (active state 0) object: ffff888052c84f38 object type: timer_list hint: lec_arp_check_expire+0x0/0x9e0 [ 1088.979372][T25040] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.6.5905/25040 [ 1088.989680][T25040] Modules linked in: [ 1088.993971][T25040] CPU: 1 UID: 0 PID: 25040 Comm: syz.6.5905 Tainted: G L syzkaller #0 PREEMPT(full) [ 1089.004993][T25040] Tainted: [L]=SOFTLOCKUP [ 1089.009503][T25040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1089.019672][T25040] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1089.025573][T25040] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 46 e5 0b 41 56 48 8b 14 dd e0 23 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac 04 db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1089.045283][T25040] RSP: 0018:ffffc90004fbf848 EFLAGS: 00010246 [ 1089.051380][T25040] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1089.059650][T25040] RDX: ffffffff8c1b2320 RSI: ffffffff8c1b1f00 RDI: ffffffff90e42250 [ 1089.062111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1089.067803][T25040] RBP: 0000000000000001 R08: ffff888052c84f38 R09: ffffffff8bb2ba00 [ 1089.084044][T25040] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b1f00 [ 1089.092033][T25040] R13: ffffffff8bb2ba40 R14: ffffffff8abffd60 R15: ffffc90004fbf908 [ 1089.100051][T25040] FS: 00007f6d19d246c0(0000) GS:ffff88812443f000(0000) knlGS:0000000000000000 [ 1089.102106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 1089.109056][T25040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1089.123807][T25040] CR2: 0000001b320f2000 CR3: 0000000028287000 CR4: 00000000003526f0 [ 1089.131807][T25040] Call Trace: [ 1089.135091][T25040] [ 1089.138022][T25040] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1089.143827][T25040] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1089.149681][T25040] __debug_object_init+0x229/0x3d0 [ 1089.154867][T25040] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1089.160695][T25040] ? __pfx___debug_object_init+0x10/0x10 [ 1089.166366][T25040] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1089.172654][T25040] timer_init_key+0x35/0x340 [ 1089.177454][T25040] lane_ioctl+0x8f8/0x2600 [ 1089.181933][T25040] ? __pfx_br2684_ioctl+0x10/0x10 [ 1089.187020][T25040] ? __pfx_clip_ioctl+0x10/0x10 [ 1089.191874][T25040] ? __pfx_lane_ioctl+0x10/0x10 [ 1089.196762][T25040] ? atmtcp_ioctl+0x251/0xdb0 [ 1089.201452][T25040] ? __pfx_atmtcp_ioctl+0x10/0x10 [ 1089.206576][T25040] ? do_vcc_ioctl+0x53/0x890 [ 1089.211173][T25040] do_vcc_ioctl+0x493/0x890 [ 1089.215706][T25040] svc_ioctl+0x335/0x730 [ 1089.219950][T25040] ? __pfx_svc_ioctl+0x10/0x10 [ 1089.224839][T25040] ? find_held_lock+0x2b/0x80 [ 1089.229527][T25040] ? futex_wait+0x125/0x380 [ 1089.234060][T25040] sock_do_ioctl+0x118/0x280 [ 1089.238677][T25040] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1089.243832][T25040] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1089.248885][T25040] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1089.252257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 1089.255834][T25040] sock_ioctl+0x599/0x6b0 [ 1089.268387][T25040] ? __pfx_sock_ioctl+0x10/0x10 [ 1089.273252][T25040] ? hook_file_ioctl_common+0x146/0x410 [ 1089.278830][T25040] ? selinux_file_ioctl+0x139/0x290 [ 1089.284067][T25040] ? selinux_file_ioctl+0xb4/0x290 [ 1089.289197][T25040] ? __pfx_sock_ioctl+0x10/0x10 [ 1089.294069][T25040] __x64_sys_ioctl+0x18e/0x210 [ 1089.298849][T25040] do_syscall_64+0x106/0xf80 [ 1089.303480][T25040] ? clear_bhb_loop+0x40/0x90 [ 1089.308158][T25040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.314086][T25040] RIP: 0033:0x7f6d18d9c799 [ 1089.318515][T25040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.338195][T25040] RSP: 002b:00007f6d19d24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1089.346650][T25040] RAX: ffffffffffffffda RBX: 00007f6d19015fa0 RCX: 00007f6d18d9c799 [ 1089.354693][T25040] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000007 [ 1089.362720][T25040] RBP: 00007f6d18e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1089.370697][T25040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.378737][T25040] R13: 00007f6d19016038 R14: 00007f6d19015fa0 R15: 00007ffcdf6ceda8 [ 1089.386747][T25040] [ 1089.389783][T25040] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1089.397043][T25040] CPU: 1 UID: 0 PID: 25040 Comm: syz.6.5905 Tainted: G L syzkaller #0 PREEMPT(full) [ 1089.407969][T25040] Tainted: [L]=SOFTLOCKUP [ 1089.412272][T25040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1089.422304][T25040] Call Trace: [ 1089.425560][T25040] [ 1089.428473][T25040] dump_stack_lvl+0x100/0x190 [ 1089.433146][T25040] vpanic+0x552/0x970 [ 1089.437114][T25040] ? __pfx_vpanic+0x10/0x10 [ 1089.441605][T25040] panic+0xd1/0xe0 [ 1089.445318][T25040] ? __pfx_panic+0x10/0x10 [ 1089.449733][T25040] ? check_panic_on_warn+0x1f/0x90 [ 1089.454838][T25040] check_panic_on_warn.cold+0x19/0x34 [ 1089.460199][T25040] ? debug_print_object+0x18e/0x2a0 [ 1089.465384][T25040] __warn.cold+0x191/0x348 [ 1089.469812][T25040] __report_bug+0x296/0x3d0 [ 1089.474304][T25040] ? debug_print_object+0x18e/0x2a0 [ 1089.479495][T25040] ? __pfx___report_bug+0x10/0x10 [ 1089.484499][T25040] ? irqentry_exit+0x180/0x670 [ 1089.489264][T25040] ? lockdep_hardirqs_on+0x78/0x100 [ 1089.494452][T25040] ? debug_print_object+0x19b/0x2a0 [ 1089.499647][T25040] report_bug_entry+0xe1/0x290 [ 1089.504390][T25040] ? debug_print_object+0x19b/0x2a0 [ 1089.509581][T25040] handle_bug+0x1cd/0x2a0 [ 1089.513895][T25040] exc_invalid_op+0x17/0x50 [ 1089.518397][T25040] asm_exc_invalid_op+0x1a/0x20 [ 1089.523227][T25040] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1089.529032][T25040] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 46 e5 0b 41 56 48 8b 14 dd e0 23 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac 04 db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1089.548615][T25040] RSP: 0018:ffffc90004fbf848 EFLAGS: 00010246 [ 1089.554679][T25040] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1089.562628][T25040] RDX: ffffffff8c1b2320 RSI: ffffffff8c1b1f00 RDI: ffffffff90e42250 [ 1089.570584][T25040] RBP: 0000000000000001 R08: ffff888052c84f38 R09: ffffffff8bb2ba00 [ 1089.578539][T25040] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b1f00 [ 1089.586496][T25040] R13: ffffffff8bb2ba40 R14: ffffffff8abffd60 R15: ffffc90004fbf908 [ 1089.594457][T25040] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1089.600171][T25040] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 1089.605869][T25040] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1089.611657][T25040] __debug_object_init+0x229/0x3d0 [ 1089.616752][T25040] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1089.622544][T25040] ? __pfx___debug_object_init+0x10/0x10 [ 1089.628175][T25040] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1089.633969][T25040] timer_init_key+0x35/0x340 [ 1089.638554][T25040] lane_ioctl+0x8f8/0x2600 [ 1089.642965][T25040] ? __pfx_br2684_ioctl+0x10/0x10 [ 1089.647987][T25040] ? __pfx_clip_ioctl+0x10/0x10 [ 1089.652825][T25040] ? __pfx_lane_ioctl+0x10/0x10 [ 1089.657676][T25040] ? atmtcp_ioctl+0x251/0xdb0 [ 1089.662348][T25040] ? __pfx_atmtcp_ioctl+0x10/0x10 [ 1089.667358][T25040] ? do_vcc_ioctl+0x53/0x890 [ 1089.671951][T25040] do_vcc_ioctl+0x493/0x890 [ 1089.676443][T25040] svc_ioctl+0x335/0x730 [ 1089.680680][T25040] ? __pfx_svc_ioctl+0x10/0x10 [ 1089.685437][T25040] ? find_held_lock+0x2b/0x80 [ 1089.690099][T25040] ? futex_wait+0x125/0x380 [ 1089.694583][T25040] sock_do_ioctl+0x118/0x280 [ 1089.699198][T25040] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1089.704352][T25040] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1089.709393][T25040] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1089.716233][T25040] sock_ioctl+0x599/0x6b0 [ 1089.720558][T25040] ? __pfx_sock_ioctl+0x10/0x10 [ 1089.725383][T25040] ? hook_file_ioctl_common+0x146/0x410 [ 1089.730919][T25040] ? selinux_file_ioctl+0x139/0x290 [ 1089.736111][T25040] ? selinux_file_ioctl+0xb4/0x290 [ 1089.741218][T25040] ? __pfx_sock_ioctl+0x10/0x10 [ 1089.746043][T25040] __x64_sys_ioctl+0x18e/0x210 [ 1089.750809][T25040] do_syscall_64+0x106/0xf80 [ 1089.755380][T25040] ? clear_bhb_loop+0x40/0x90 [ 1089.760047][T25040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.765916][T25040] RIP: 0033:0x7f6d18d9c799 [ 1089.770306][T25040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.789901][T25040] RSP: 002b:00007f6d19d24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1089.798290][T25040] RAX: ffffffffffffffda RBX: 00007f6d19015fa0 RCX: 00007f6d18d9c799 [ 1089.806239][T25040] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000007 [ 1089.814188][T25040] RBP: 00007f6d18e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1089.822141][T25040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.830096][T25040] R13: 00007f6d19016038 R14: 00007f6d19015fa0 R15: 00007ffcdf6ceda8 [ 1089.838053][T25040] [ 1089.841363][T25040] Kernel Offset: disabled [ 1089.845674][T25040] Rebooting in 86400 seconds..