last executing test programs: 22m58.382227117s ago: executing program 2 (id=1274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 22m57.884587833s ago: executing program 2 (id=1277): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)=@multiplanar_mmap={0x9, 0xa, 0x4, 0x10, 0xfc, {}, {0x1, 0x8, 0x8, 0x6a, 0x2, 0x4, "3b7a1286"}, 0x6, 0x1, {&(0x7f00000000c0)=[{0x8, 0x6, {0x4}, 0x8}, {0xffffffff, 0x39, {0x4}, 0xfff}]}, 0x7}) 22m57.604915691s ago: executing program 2 (id=1278): r0 = io_uring_setup(0x5111, &(0x7f0000000100)={0x0, 0x9c54, 0x10, 0x2, 0x1f6}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0), 0x0) (fail_nth: 1) 22m56.718865474s ago: executing program 2 (id=1285): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) (fail_nth: 1) 22m56.119495672s ago: executing program 2 (id=1289): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x160, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_IE={0x12f, 0x2a, [@random={0x7f, 0xf8, "e922f767c32cf803c755780f31eeeb5202a9d0c59c9aac59d9cd14eb211edb5d441ced8e734fcdcaca6d178e844d74675e81edca5b6469eea8d920677216face201cefeb97d028630cc603f68dbb219341cd81226c1a7708a01602ddaeb2b9a856e11a75c1cf14bc7cb89b4bb4a84648660286c7b19adfde0261731c4b9a1986b2f97d0f0b14f1f5665ffde661cf4aafb7f96a17d05884cc27d90e9bde306e132f3fe83ea5057dfba597728597292ca3892452c1547d430ab11534e44ecbe018382ea44ad07499ba7a983cbcbfeb0cf60f7ed08e4b1dd4081fbe1f14dbd316cb623efa4b6b087527446fd0ffc3dcfc9f7b80b907c6fde53c"}, @ssid={0x0, 0x6, @default_ap_ssid}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @link_id={0x65, 0x12, {@random="5372bf2d7509"}}, @mic={0x8c, 0x10, {0x907, "41be47e7923a", @short="a01b73353162bc6d"}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x94}, 0x840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x0, r6}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) 22m52.08242008s ago: executing program 2 (id=1302): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = memfd_secret(0x0) ftruncate(r2, 0x581) ftruncate(r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c93010000c00020000000800b70b0200090400ff"], 0x15) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x0, 0x0}) write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x102, 0xa, 0x0, 0x80, 0x2e}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) 22m36.691931382s ago: executing program 32 (id=1302): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = memfd_secret(0x0) ftruncate(r2, 0x581) ftruncate(r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c93010000c00020000000800b70b0200090400ff"], 0x15) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x0, 0x0}) write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x102, 0xa, 0x0, 0x80, 0x2e}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) 14.128425197s ago: executing program 5 (id=5616): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000800009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20001, 0xcb) io_setup(0x4fe, &(0x7f0000000100)=0x0) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x3c, r3, &(0x7f0000000200)='p', 0x48187de59b3cb4d9, 0x10000000005971, 0x0, 0x1, r5}]) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, 0xfffffffffffffffe) setitimer(0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000200)={0x6, 0x6, 0x1}) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB="17a43fee634e142393d9150ead2f0ad121b52971cdc21cd38ca44b5bd7f8bba927140f1b39b6b4b96104f376bd6034a5fa46bceab15576bd90bf120b41c4e07c52aa23281748e2d2986e1809f3849994e38e77e3fd7e857cbfb1bc0bf6b9369af891288f4fec4d1ca931539dd7241551613418678242d4d809ccc90f1bbefba4225560f527d7b885de563fdc076ffc6bd8883fa3cbea1c289cb45e48b566060f0299ccb1a12b763c9a054f805be2210c8824b7aed302e74e", @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='m']) read$FUSE(r9, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r9, &(0x7f0000000180)={0x50, 0x0, r10, {0x7, 0x2b, 0xffffffde, 0x3000400c, 0x0, 0xfffe, 0x2, 0xfffffffe, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa80, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r13, 0x4004ae86, &(0x7f0000000000)=0x965) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, r1, 0x0) 13.59470318s ago: executing program 4 (id=5619): r0 = syz_io_uring_setup(0x7d35, &(0x7f0000000340)={0x0, 0x9f79, 0x800, 0x3, 0x55}, &(0x7f0000000080), &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') preadv(r2, 0x0, 0x0, 0x515e, 0xfffffffc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfc) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x5, 0xc, 0x8009, 0x0, 0x9}) socket(0x23, 0x5, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x2400, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000d00a9c2ce54"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000000c0), 0xffffffffffffffec) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @dev, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@local}, {@empty}, {@dev}, {@broadcast}, {@dev}]}, @end]}}}}}}}, 0x0) 12.813574179s ago: executing program 5 (id=5621): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000080)) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="2b7eeb962285"}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40880, &(0x7f0000000000)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100005800c00038008"], 0x34}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r6, 0x25, 0x19, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='xprtrdma_op_set_cto\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000000000000000000000000000400000000000000007182b362476617c440e898dd37c236f6a3b8a45ea2ffb11738eefe7cb84b002d1904bce160dfe65469fcdf7a2d39d64c6beb76c58f29e127b5d5432040117b476f4ec77e8e8da93ded07bfd4f1e3b9e6f66de19abf666e962309beb41cd1005195bd13ed09035016e204176e0695454b331a24abf1d1e4590c5b9b9354009149e8b0688c8052a7158454f500000000000000000000bcfe9f3db1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 12.609683058s ago: executing program 4 (id=5622): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) 11.318255054s ago: executing program 4 (id=5625): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x430601, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x67, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x9, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0xa, 0x0, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "be211a2ee1"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7fff, 0x9, 0x46}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x8, 0x81, 0x1}, @obex={0x5, 0x24, 0x15, 0x8001}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x9, 0xb}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9c, 0xc8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x61, 0x1, 0x40}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x10, 0x5, 0x4, 0xff, 0x6}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) syz_usb_control_io(r0, 0x0, 0x0) pipe2(&(0x7f0000003e80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) preadv(r3, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/12, 0xc}], 0x1, 0x7ff, 0x4f) setuid(0xee01) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) fcntl$setstatus(r2, 0x4, 0x40000) syz_usb_control_io$printer(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000380), 0x0, &(0x7f0000000500)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) rt_sigqueueinfo(0x0, 0x3f, &(0x7f00000002c0)={0x3b, 0xf901, 0x4b97}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f0000001880)="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", 0xff5) syz_usb_connect$cdc_ecm(0x4, 0x59, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x90, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x10, {{0x8, 0x24, 0x6, 0x0, 0x0, "adf5dc"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0xfb}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x81, 0x9, 0x27}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x8, 0x9, 0x4, 0xff, 0xa6}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x4, [{0x5f, &(0x7f0000000480)=@string={0x5f, 0x3, "43b8ca3aa04a72b756b825e7a12267584f017544e617f3161ef50b1434d7ff1468322a64124efb1821f3e085374f0ad56771fb4559a7264fb1f2977c41fabd618af8241fa18de311a03b8d6a3e8d4d2633108230ed6dad381f288b600c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x407}}, {0xc0, &(0x7f00000005c0)=@string={0xc0, 0x3, "0085e9f45dc264db5c4c2436c8b1e783a0e2f7fe56a0de625acf100a60a42a746fc617fc606d23e125f8890ea843a6c5b18b70d45972b65e7a3cb14c951bc1f9df0bc2a5fd9ec8a3030a60effb28f8489233a00e9679bf4a282cfffb203aef5f29626389bb57c3d6aebe119b3afc36f214cfc69c8a846ae81643e07fc3e4a4ecb083aaca945be381ff147e75f326a2a22a66e1d7c61302d07d644a04c98469c7b674fe652277501903fcc8851e09eb6e85a6e0cc11fc8fa4339ba52fd747"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x405}}]}) 10.497896561s ago: executing program 3 (id=5627): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (fail_nth: 2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r6, 0xffffffffffffffff}) close_range(r3, r4, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 9.875687727s ago: executing program 1 (id=5628): bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) io_uring_setup(0x10004, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$binder(0x0, 0x0, 0x0, 0x80000, &(0x7f00000003c0)=ANY=[@ANYBLOB]) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sctp\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xecf86c37d53049cc) lsetxattr$security_ima(0x0, &(0x7f0000000100), 0x0, 0xa, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000300)=""/227, 0x9}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 9.247664714s ago: executing program 3 (id=5629): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_targets\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a3200000000080041007278650014003300767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000050000000000000002000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) 9.231302184s ago: executing program 5 (id=5630): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000c00)={@loopback, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002c80)=@delqdisc={0x114, 0x25, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0x10, 0x3}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x4c, 0xd8}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x6, 0x91b8, 0x3, 0x1, 0x0, 0x3, 0x3}}, {0xa, 0x2, [0x8, 0x1ff, 0xfff9]}}, {{0x1c, 0x1, {0x90, 0xe, 0x563, 0x4, 0x0, 0xa, 0x0, 0x5}}, {0xe, 0x2, [0x6, 0x6, 0xfff7, 0x8, 0xe94]}}, {{0x1c, 0x1, {0xab, 0x3, 0x2, 0x7, 0x2, 0x6, 0xc, 0x3}}, {0xa, 0x2, [0x0, 0x7ff, 0x7]}}, {{0x1c, 0x1, {0xff, 0x2, 0x13, 0x5, 0x0, 0x5, 0xfffffff9, 0x5}}, {0xe, 0x2, [0x3, 0x9, 0x4c94, 0x6, 0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_RATE={0x6, 0x5, {0x9}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xff59, 0xff}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={0x0, 0xffff, 0xe2}, 0x8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) ioctl$TCSETS2(r5, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) r6 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f00000001c0)) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000002b00)=[{0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/210, 0xd2}, {&(0x7f0000000140)=""/101, 0x65}], &(0x7f0000000240)=[0x3, 0xff]}, {0x2, 0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000300)=""/63, 0x3f}], &(0x7f0000000380)=[0x6, 0x5f0, 0x6, 0x0]}, {0x1, 0x1, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000003c0)=""/58, 0x3a}], &(0x7f0000000440)=[0x3]}, {0x3, 0x1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/248, 0xf8}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000001880)=""/4096, 0x1000}], &(0x7f0000000640)=[0x1, 0x9]}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000000c80)=[0x400]}, {0x4, 0x1, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001740)=""/110, 0x6e}, {&(0x7f0000002940)=""/205, 0xcd}, {&(0x7f0000000cc0)=""/29, 0x1d}, {&(0x7f0000002a40)=""/33, 0x21}], &(0x7f0000002ac0)=[0x5, 0x8000000000000001, 0x100000000]}], 0x6) ioctl$KDGKBDIACR(r0, 0x4b4a, 0xffffffffffffffff) 8.271805751s ago: executing program 5 (id=5631): socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) close(0x3) 8.261688393s ago: executing program 3 (id=5632): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r6, 0xffffffffffffffff}) close_range(r3, r4, 0x0) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 8.212103874s ago: executing program 1 (id=5633): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x44) 8.133831066s ago: executing program 4 (id=5634): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x6, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 64) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000000)={0xbbf, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.822209177s ago: executing program 1 (id=5635): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = syz_open_procfs(0x0, 0x0) getdents64(r8, 0xffffffffffffffff, 0x43) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 7.712667507s ago: executing program 3 (id=5636): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) syz_usb_connect(0x4, 0x1e9, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xa3, 0x71, 0x66, 0x8, 0x403, 0xf0e9, 0x7adf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d7, 0x3, 0x5, 0xe9, 0x0, 0x9, [{{0x9, 0x4, 0xfd, 0x9, 0xe, 0x67, 0xc5, 0x2a, 0x6, [], [{{0x9, 0x5, 0x4, 0x8, 0x20, 0x9, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0x1, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x9, 0x2}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x6, 0x0, 0x2}}, {{0x9, 0x5, 0x5, 0x2, 0x280e20f417e3644, 0x7, 0x1, 0x81}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xc4, 0x1, 0x1}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x1, 0x2, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x5, 0x95, 0x6}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x0, 0x1c, 0x1}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0xa0, 0x80, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xf001}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x1, 0x8, 0xe, [@generic={0x2, 0x2}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x2, 0x5, 0x7d}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x5, 0x2}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x8, 0x5, 0x5}}]}}, {{0x9, 0x4, 0xc1, 0x1, 0x3, 0x92, 0xff, 0x9c, 0x7, [], [{{0x9, 0x5, 0x0, 0x2, 0x200, 0xdb, 0x8, 0x6, [@generic={0xc, 0x1, "59b344b5c162d682660d"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0xc, 0x7, 0x9, [@generic={0x97, 0x11, "530494c51e6c1ea82ec3890a56f1a0339672fdd3b3d5193c42d61479dc717a1f5555fd60be310c9c3b34aae5845ef0e86c38e6a2940b8bc4354ba87bf2de8cf749eac4399881e0035d60f10ed1e07dbe29b9ae02973773addfba9ff7a55df8c7c6fc1090670d156ab8478de745f30fa506011addfc2d07c56f5070d404c475f2c41b03e6ac1d678e2edc8dd7b6ec76bf21633aefc5"}]}}, {{0x9, 0x5, 0x8, 0x12, 0x20, 0x3, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x13}]}}]}}, {{0x9, 0x4, 0xe4, 0x8, 0x0, 0xff, 0xff, 0xff, 0x3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '8g'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xdf62, 0x8, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x2, 0xd}, @mdlm={0x15, 0x24, 0x12, 0x4}, @country_functional={0xc, 0x24, 0x7, 0xa, 0x401, [0x3, 0x9, 0x8000]}, @obex={0x5, 0x24, 0x15, 0x200}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "86bacb"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x80, 0xffff, 0x9}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x4, 0x48, 0x48, 0x10, 0x7}, 0xf6, &(0x7f0000000340)={0x5, 0xf, 0xf6, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x81, 0x0, 0x8, [0x3fc8, 0x8130, 0xffc030, 0x0]}, @generic={0xd5, 0x10, 0xa, "0b1c0a403396c68e239c9def4479ade51bdf1b3a93e78bd44450217009b7f668912ab0abb13e061a1a3b5c94de92b9864a25d78f1e9a00a29f793058d5e59add0b72e50bbe08fec9e78dcb6414c8dd4f0276574ea2096d4ae884a30d09a44126f2af5b6a734e396769bb54427ba0097242c100f04b56c350acfa20a3d6cebd07a2af4ef55092f60afe56e640c05ab6b17569042ddc9e4f4ce48f526bdc0f77aae4fa054ae0b81972f58d25576ec42f18ea24a4ab451a22b6dbddf88ecb150585e925903c743cce6019ca2710499e9534628e"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2001}}]}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70023000000090507", @ANYRES32=r2], 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001300)=""/102400, 0x19000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x28c81, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003140)=""/4099, 0x1003}], 0x1}, 0x40000020) 7.142315066s ago: executing program 1 (id=5637): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) socket$tipc(0x1e, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000c00)={@loopback, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002c80)=@delqdisc={0x114, 0x25, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0x10, 0x3}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x4c, 0xd8}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x6, 0x91b8, 0x3, 0x1, 0x0, 0x3, 0x3}}, {0xa, 0x2, [0x8, 0x1ff, 0xfff9]}}, {{0x1c, 0x1, {0x90, 0xe, 0x563, 0x4, 0x0, 0xa, 0x0, 0x5}}, {0xe, 0x2, [0x6, 0x6, 0xfff7, 0x8, 0xe94]}}, {{0x1c, 0x1, {0xab, 0x3, 0x2, 0x7, 0x2, 0x6, 0xc, 0x3}}, {0xa, 0x2, [0x0, 0x7ff, 0x7]}}, {{0x1c, 0x1, {0xff, 0x2, 0x13, 0x5, 0x0, 0x5, 0xfffffff9, 0x5}}, {0xe, 0x2, [0x3, 0x9, 0x4c94, 0x6, 0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_RATE={0x6, 0x5, {0x9}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xff59, 0xff}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={0x0, 0xffff, 0xe2}, 0x8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) ioctl$TCSETS2(r5, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) r6 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f00000001c0)) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000002b00)=[{0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/210, 0xd2}, {&(0x7f0000000140)=""/101, 0x65}], &(0x7f0000000240)=[0x3, 0xff]}, {0x2, 0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000300)=""/63, 0x3f}], &(0x7f0000000380)=[0x6, 0x5f0, 0x6, 0x0]}, {0x1, 0x1, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000003c0)=""/58, 0x3a}], &(0x7f0000000440)=[0x3]}, {0x3, 0x1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/248, 0xf8}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000001880)=""/4096, 0x1000}], &(0x7f0000000640)=[0x1, 0x9]}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000000c80)=[0x400]}, {0x4, 0x1, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001740)=""/110, 0x6e}, {&(0x7f0000002940)=""/205, 0xcd}, {&(0x7f0000000cc0)=""/29, 0x1d}, {&(0x7f0000002a40)=""/33, 0x21}], &(0x7f0000002ac0)=[0x5, 0x8000000000000001, 0x100000000]}], 0x6) ioctl$KDGKBDIACR(r0, 0x4b4a, 0xffffffffffffffff) 6.631366317s ago: executing program 0 (id=5638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000001000/0x2000)=nil, 0x2000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000003080), 0x2, 0x0) write$selinux_user(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 5.743173944s ago: executing program 1 (id=5639): socket(0x2a, 0x2, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0x6, &(0x7f0000000040)={0x61, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = open_tree(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000019300), 0x8100, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f000001b8c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x25bc}, 0x1, 0x0, 0x0, 0x4840}, 0x4008841) fanotify_init(0x3f, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xc, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0d, &(0x7f0000000040)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) close_range(r3, r4, 0x0) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 5.685515849s ago: executing program 3 (id=5640): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000080)) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="2b7eeb962285"}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40880, &(0x7f0000000000)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100005800c00038008"], 0x34}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r6, 0x25, 0x19, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='xprtrdma_op_set_cto\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000000000000000000000000000400000000000000007182b362476617c440e898dd37c236f6a3b8a45ea2ffb11738eefe7cb84b002d1904bce160dfe65469fcdf7a2d39d64c6beb76c58f29e127b5d5432040117b476f4ec77e8e8da93ded07bfd4f1e3b9e6f66de19abf666e962309beb41cd1005195bd13ed09035016e204176e0695454b331a24abf1d1e4590c5b9b9354009149e8b0688c8052a7158454f500000000000000000000bcfe9f3db1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 5.207417602s ago: executing program 0 (id=5641): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000c00)={@loopback, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002c80)=@delqdisc={0x114, 0x25, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0x10, 0x3}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x4c, 0xd8}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x6, 0x91b8, 0x3, 0x1, 0x0, 0x3, 0x3}}, {0xa, 0x2, [0x8, 0x1ff, 0xfff9]}}, {{0x1c, 0x1, {0x90, 0xe, 0x563, 0x4, 0x0, 0xa, 0x0, 0x5}}, {0xe, 0x2, [0x6, 0x6, 0xfff7, 0x8, 0xe94]}}, {{0x1c, 0x1, {0xab, 0x3, 0x2, 0x7, 0x2, 0x6, 0xc, 0x3}}, {0xa, 0x2, [0x0, 0x7ff, 0x7]}}, {{0x1c, 0x1, {0xff, 0x2, 0x13, 0x5, 0x0, 0x5, 0xfffffff9, 0x5}}, {0xe, 0x2, [0x3, 0x9, 0x4c94, 0x6, 0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_RATE={0x6, 0x5, {0x9}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xff59, 0xff}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={0x0, 0xffff, 0xe2}, 0x8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) ioctl$TCSETS2(r5, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) r6 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f00000001c0)) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000002b00)=[{0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/210, 0xd2}, {&(0x7f0000000140)=""/101, 0x65}], &(0x7f0000000240)=[0x3, 0xff]}, {0x2, 0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000300)=""/63, 0x3f}], &(0x7f0000000380)=[0x6, 0x5f0, 0x6, 0x0]}, {0x1, 0x1, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000003c0)=""/58, 0x3a}], &(0x7f0000000440)=[0x3]}, {0x3, 0x1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/248, 0xf8}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000001880)=""/4096, 0x1000}], &(0x7f0000000640)=[0x1, 0x9]}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000000c80)=[0x400]}, {0x4, 0x1, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001740)=""/110, 0x6e}, {&(0x7f0000002940)=""/205, 0xcd}, {&(0x7f0000000cc0)=""/29, 0x1d}, {&(0x7f0000002a40)=""/33, 0x21}], &(0x7f0000002ac0)=[0x5, 0x8000000000000001, 0x100000000]}], 0x6) ioctl$KDGKBDIACR(r0, 0x4b4a, 0xffffffffffffffff) 4.338978169s ago: executing program 0 (id=5642): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000000)={0x7fff, 0x95d3}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000200)}, {&(0x7f0000001340)=""/138, 0x8a}], 0x4, 0x35f, 0x401) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x1000088}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x8000) socket$unix(0x1, 0x1, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1, 0x7, 0xffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) 4.142312148s ago: executing program 0 (id=5643): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_targets\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a3200000000080041007278650014003300767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000050000000000000002000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) 3.833871695s ago: executing program 5 (id=5644): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x430601, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x67, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x9, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0xa, 0x0, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "be211a2ee1"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7fff, 0x9, 0x46}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x8, 0x81, 0x1}, @obex={0x5, 0x24, 0x15, 0x8001}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x9, 0xb}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9c, 0xc8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x61, 0x1, 0x40}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x10, 0x5, 0x4, 0xff, 0x6}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) syz_usb_control_io(r0, 0x0, 0x0) pipe2(&(0x7f0000003e80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) preadv(r3, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/12, 0xc}], 0x1, 0x7ff, 0x4f) setuid(0xee01) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) fcntl$setstatus(r2, 0x4, 0x40000) syz_usb_control_io$printer(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000380), 0x0, &(0x7f0000000500)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) rt_sigqueueinfo(0x0, 0x3f, &(0x7f00000002c0)={0x3b, 0xf901, 0x4b97}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f0000001880)="f105f2a1d6bbeb79d8e32a2b6d241adcad11586978094f014763a89386175790b61860d1ede581a2a959c3373d01f61865105c0e3c08b79e6e1fe9ffd0173da35ce671b63b38630d02927200423bc46a07786bb7a6b230cd99e37ce1fa7bf33d564616bd8399985b529ad9141b0ad348c7ee669ed015ff113b93bd2c62e6d76200f77c98eba85cd31a114d348af883f73a3e226f060b8765535cd82105bd450c31a61bb2c76fd22c4f5c194a7f458f9484125b65349c548efc3cda3f32105531538612a9dda352430ed1f377b9a61efbb77a9c214a38052f553f183aec0d1754bb97ca7f9a809093c984250991f6a727b2e842169cd57082b4d0081b98305132ea11dc8c429672f857898225eb7b92af44e0faec96a64e58268657cdfe80466a0615deeb0b2e2c735d3d5a4c20f0f9c43e46fe3bd3e2435ad39f4ed4f7c7561d19b4004d3bb4edf6c1f012c834b423bb6258f1692c985ba9b64bb029bf1523283ea8369b55eb621bd0a8b5b18a017ece4054dc168892d26a2c2bc803a12a7536d5ef8cd68b7b498d40e7a0867a1f599de32caf9b68af87e0b342065b3fd2e9d24df7982f7bc09f24cde45bc3ae1ac2310065864c590991d920c602173cd9bbc957ba0613a59f4645ebc1b89bd498110b5ddc81888f936991c8c10774db1b0cf1193c7f036921d7a704da28b397a7da2dafe82f054c910974bf6d498f5d8da31cc080d58080c4a165def5c197908424a7c54fd921b37a0fbe6e233fa5eb6f662c7d2d8c24fe5faa5775a1e2f98a5526ba7b06f8b3cdf9db2d5799ac10e593358df3016f20cc99e00f2f6b56dff1d40d5f1f00c8b8fe0acd4af8359c82a95ac115c154fac7251711348ce1761d4edaf2d13a9712aea4a5edaa7e783b3bc8e29135e6a126cafc09347bc3f06306059743da4731fdc9de4319b7ad2ae7709eb8c3b58354e2ead4cbbd897226424897033df14bb9af3ee2ac8d39084ac6563fa1571877172209e5f164e473fadb1d21102183b8bd58d628a5b181d8a9ee1b82acfb1203d9756d30ec6783a215f5926c5e13472f3bac850ff1872a03dcfc2e71dcb30cd3cb9af6741fbd59d1d9b8c8d5ec21272e1ce6091dd4529da1b935f3a7e5b6782dd8f9b6c506bd1d8f619bf94c096b1ea6194fd75c048fff978edbcf06a1a9e151458692345e8ca4b17ca23d078dbae77536180cf53c1c94df3886ef0f4206f771fb8d0b4f710324d47a5a88fe3c0906f6bb40916d746f37bbe4ae759e9545f8e619821dddd1184be7d8c55b2cc1a6d07be5ddf9ac4064081b12c45acd5bb55d8f477f397dcc3adba7bff21c24c273250e74be0e83307574d5234f025ebb2c7c9a8254042a44c75de1bdfb5157be70986d532eab9bb75b910f3cfd7d489746f6724594e4517232f2697830683bdc4ade3eb275dd1db7cd1bc6a87134645631613ec76a2845af16550f5fa0aa48330eb4715917f40006f8de1fd3f0f4a191b679e2342f8ba9631a3e5f5a550a8cb9f11354af60894a2e9785df97d5761558fb845b261db8f934ab93d9bf417277e1ce59c9814bd3233ed24c11fa0cffcaaba97b684ab698d097a2fb8aa1cf177333eacc474a1d41855f2f7148142045f76468873483e03ef117cbe5d99ede38cac44fc0ffdfcc5016b8fe6fe493e9aaee624f9ad1eb06a9938d4f947471f1b62edabad55e58ff7e434b17321044429c76e6d83479083be426956401554b409edd508d6713ac31f9a918ef45d61cf9c333e8f35639931e2ab4d0331f81724202148b728d28700e73286b2ae01c50e9ce21fe91cd32219c49a9da41404109f10938a2477d1aed064cd4d3e81e9fd6b6df4c9f4c86cb9463fde565eb6bd8fbf11205c2146e363b0a58305ae5f2e74d75d7b687cbf4edc91d9075b1b2399bd52942d5299f2ac007ab2caa805faf6fd5eeb24f2aeea2256478c0f3e197a425cac3e1ececd3d7974e54d46d233543b4bf9477fc2aab18a44001e347427cbfd3e30e6c4f62820fa0835a3d4380176373b46de5da74a5a006867200aea35db0ec86d1f138a94ac5d0e9f7fbe6af212fccfb6001f935d22bd1ec634fef4770ebac6bcd40d880eccef0ba9aa95896cc20e603c1df332249738096ca0ecbc163d61e9b772585dab86e3c178dca6a18d84e3146cd0f5ecae801d5a8a98c3f6246d29f0e6c0d919423a042f1301f7a1e4e1663900b4fc5641ee1ff6ef231919b31c9dc9a270d9ebc38b9daf93ffeb541f6faa7d67839a94cb987b4ca1f5cca634c4e6b17b6b0b401660aa663a73a4843cd78e10d098e98078adef22b2ff1dbc0d56e0f108036e65ddf60fc3c5978c6ecbfb77716bf6472a265b50cc6dafd378762949d09c92130ed3d00c704c94b11dec85c56a95923c54ae7dd35be3c5371ee13f123b527e4c7a9ce6f225159963e81ef6fabf8869b9ce124b2108782c89388aaacd09c12d434e3011976ef2de8ae1fb9b8ffcdb0c4a441082051d0f98bc1247ca6bec43c8ca382e248534ce6e0c7ca31476a07466588d5748a5a42c02058baad4cc022fcfcea18a04759d526edd756945716e1aae3f369c99da97ed557b4df20a362a42fe99f52cb328d30689b4980e108e5d55e5af69113724cf823f4cee860786dead88dc51cdae1f7c23d48c7f443689e54e6d7ae45ce992b43ad50148a830e81d2174230df84a4ccf97803c5c3de7444c5f0ccd632e3aaf45f3a3fddb25898b26929c42787119cf0171f0b571d7a4ae213e180a8fbe22bcae5953ffdc41863317feb2f4c6475a7e5e1eae6d4d19d83c61168770fb54cf3d49a114d77d62515396eda72886fb8bb01645befecc8cb5f6b65130efee0fba65a77d2752b2bde8c9b0e3900272750a9a4ac0d3c0cd987ef5b2ca916004923e8cec54d9583257a1dce3cf87e0fd29a4574523ea7d079ea79482123f531bc447133bd241634474241c2e3228363e038ba5743282eed81ff06a72383620be9c64bc8573f335dac57ffa35dfbe434af004f89d9c28e0da73791bf3af93758ae1daf8aa14e7daa0ec6e3770a62786bd2e6118a5c63276f63a0e79f8d22dda64fc18413be2a099ff78dbb0f6cd28e880febbda4345eef80d4acff6e2ba2d310e00ec6661073e96ea46be66298c395820e06888e711fde83ca3cfa713b0e8336d74367d215d3c6a7aa40ac9447484ed5ee1548302d13d839378d9d2bf8d34d15ed24c582db6193774e5c6969358643fc3ce0c3aa23c3e454f3873535f532ff4a0f058567e0007f2a1fcaaaa5831170c0cfb94639285b8c167394261654d795603385aacdf61ad12f7b26bb165af658d933d6ba6060a6d335ee00420e73a8c7c46c018a8a50cfea526928bdcbe3b027e5ed311997ae3807fd8ef4c207eac383b9a9395a914afa1a48baf4f7b4bc36e44ff8f57784b08e26d43e65ddc522ed56e235708f8f5fb318068f07038bce76c22f71814fb57b59738a80ff72906dc6c91f9b8138b5c8292cd8e14c1aea47b967efeac20688a4583bdeb20d0a3b486f72db51a732cc3bc2346807d8becd887d3e63bb7b0f604a19988a851e847284131e80b8990aa86a6cf08a91d0400654bdfbd4278a14dca1e6b9b0f1983e7c4bb62f3fde68aba84063c0a86c57b9b521257f64bfb6eb6652c7d450c8a391bc0dfa20260cc28ee04b75d3623c88ce95f0c6600419ef860e29e60799fbda92202969f438d4d9303132d6d2fe147a9b504873d0ee1415a536988cdbc3da5983e975fab07109d600dee443bc2c78acc2fe0069d25554eeaeaccff1ca9432343c19d8b268a1936a2834a8c6c36d177f28c1e7a551361aefc7d3b78da19a0696ae270f3081abf6bc49a7f5afb620e280a2d08b52fb7820ea0a12785636d30f730b55e47e12150c9a4ca8d722024aa59584159dc1db45c262328e2f63319809ee784cef65238d25408ecd8a54b88f17412ef144139b2d6c763e3f0659edc437913e6ba928cddbe3edf1244f8b555e1cd7fad740e1383e4567f71dc81ee68be566c8f4c3a55b56a727890039186e7e907537d8045bcf0f3c55f2bcf323af0befdab4c7683edb4e28de716270bc5d55f66543c7a76d653119978454f4172ac68649b0918347bedff49a7c863617b7fb8d85fe06fbe6ba802a4f10293a705a30c19fc316d695c905dafebba4c7a12045baed4a960f308b9c784dca89da7cfcb16e598e9b6aae69be38a57a18a2a1e00ac2c46191d736166fdd1054f8dffcad4514a5878d930e0ba4b27a7c550c939ef0c70727c78cc8ce0a0b831efd36fdf740af835aa703f3a411b551f192424869c19f0c7a46c2b195950e74f50a27fedf398e8ad19bb80d3237afa42c06683331ce11517b85251117b89ee975957c8b69076b26124346b2bd89e6773332dffc86ee64a3335172020917d1b687d41ad2a3f49d15e7bceb23dc88a946fd5c29e4ad40db2fe10984631202d83dba12492a6d4fee35e18f7ed7ac4499c53fc4b8b5bf971d3fffd2b602ab7d96e000ce4d0b687f9e1e410c011c0cc642b9305b9f0dd296b88f34b4dd3799e2f5610de48bce3a1c204c0e730004695f75a87ffd5fad7a102c09aad70e3a9d7dd3dddb13a47d65bb6445aed78c88a71f45ddef393b9c2925f2d7a388f665645f9360274c47d728d1250420ff79f46a627433b8c7c4fa6b0ec0d744424c542abe007c25a920e3e270574d348977445d8b51581beab9dd1ec1b9315a5dedb3865222b9b7a45c9e0641421ca75f0437272352eb914db87ed50f9df03bb00521f77feb18066396119490dcdcef23b696902e5760841229d362ba35cb062ccf875049fee78604b617a9e4d1199b8a31523ff5f0c9620a9e9e888a27e90c2270b615f2ab90e207e29f40a4fde634c277125853a520e13ae7bb8af9f4d6f74668d02b491b3475247e4e18c2706c569cf2b985c2c066c37ea1e92430816414b5e0653583f7f9fd73148a730159dd9b2d1fcd1992174f63122b5b79f240634ca9bd4608d26e560729a996cceac4b5ee7a1dbf6b3e5e4f04efed681de2be6f9a30300590e2af3fbc9343c0acd9684f73aef1b51262637b94c74b00eea434b9df0bbf8db43a9ba550fbe76623336641beed6bf95838cd9e0fc437fb8fce4869e43328d24232a771e9c84aafbf8592f8973ea4a933add1ddaa48ac00d2349d5622b2d44c2b9fa24c6bab11090cf0450667be3a02bf00ed2aedee37e7e5bb364d9fc09b480bdedf655fde9508a6f4b13a2c52d42d40fb69dfc3c104698da4483138a7c580292a0a2df5fb0d8aaf280edc92e2694459d59019919f082c8ff4f15275db0004bc5d007b790ca80f38126563f3928c8da9cf4836bdb628d421904159af522fcb4ab072181eb11e93db1811826f4dc5ca0d4a8b9fb1a6367c2c857af869cbb1b7a2609f6c3490bd28843d2fcde39b349964068a2f3d1b40bed0d9e3122782e98e33e6403f8e3945b0bb52eae2916b9367acfa188ade8c97108c150a0ac9b552cf59eb98f5eb569b60ccb4d269695e289234b7656038adc3b6be805dd63be493cf683329f687ca2b8e702a81d1df99f731d77cf7bd3724892fcac6229f645572c055e1b9a5cf4a8d3e2828d8deaca3f8c36b5dca71b2185d6b1744e4edeb3274ccac2c146f435ad399f96a803854ef3d55ae808b8e3f1ece6f45e5f41508626aba8d58bc161d47b6b211610d8ddca62d3ffaac27628517ab319960fc71856349a27f55602a3ea05569791f77761b2764881eefd05353066ca88cd0ee08c8d71ef113297f01c32ff54f3f9d", 0xff5) syz_usb_connect$cdc_ecm(0x4, 0x59, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x90, 0x10, 0x40, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x10, {{0x8, 0x24, 0x6, 0x0, 0x0, "adf5dc"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0xfb}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x81, 0x9, 0x27}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x8, 0x5}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x8, 0x9, 0x4, 0xff, 0xa6}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x4, [{0x5f, &(0x7f0000000480)=@string={0x5f, 0x3, "43b8ca3aa04a72b756b825e7a12267584f017544e617f3161ef50b1434d7ff1468322a64124efb1821f3e085374f0ad56771fb4559a7264fb1f2977c41fabd618af8241fa18de311a03b8d6a3e8d4d2633108230ed6dad381f288b600c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x407}}, {0xc0, &(0x7f00000005c0)=@string={0xc0, 0x3, "0085e9f45dc264db5c4c2436c8b1e783a0e2f7fe56a0de625acf100a60a42a746fc617fc606d23e125f8890ea843a6c5b18b70d45972b65e7a3cb14c951bc1f9df0bc2a5fd9ec8a3030a60effb28f8489233a00e9679bf4a282cfffb203aef5f29626389bb57c3d6aebe119b3afc36f214cfc69c8a846ae81643e07fc3e4a4ecb083aaca945be381ff147e75f326a2a22a66e1d7c61302d07d644a04c98469c7b674fe652277501903fcc8851e09eb6e85a6e0cc11fc8fa4339ba52fd747"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x405}}]}) 3.813499344s ago: executing program 0 (id=5645): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x44) 3.702461773s ago: executing program 0 (id=5646): ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000005c0)={0xfffffffe, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xbff], 0x0}) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xcaff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x7], 0xeeee0000, 0x28344}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000000700)={{r4}, r9, 0x10, @inherit={0x50, 0x0}, @name="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"}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 1.773958777s ago: executing program 4 (id=5647): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1]) 1.772329927s ago: executing program 3 (id=5648): socket(0x18, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) (fail_nth: 2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 1.572766772s ago: executing program 4 (id=5649): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x23, @string={0x23, 0x3, "4207bfea5f1bab263a388eb4f005ebade6b789022c25f39cf365a0f60ec8719ccb"}}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 1.062393818s ago: executing program 1 (id=5650): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="dc160000", @ANYRES16=r1, @ANYBLOB="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"/5846], 0x16dc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) close(0xffffffffffffffff) r2 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) r3 = syz_io_uring_setup(0x1eab, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x1}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r3, 0x26c3, 0xdffffffb, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) 0s ago: executing program 5 (id=5651): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000500)="1fd4787488b1f24058b8199d33a8178ba1174e104ae1b3abb3faffaeb1a08aaeb8993c5fefff92daa06a331e595157761f72d282866c198c75e5f4c1f114555440e2c923df89b8a29cf82b51cddfc9f6855b9358722868848277b2ffaa380219e2103ad94a5c527d277624d6e0957baa3bbba59334916fb41475e5e891320186c1ee0e2a48e51a93311a4d776025dafd266c7cff569c60e008e76b2c734411ad8c57d274", 0xa4}, {&(0x7f00000005c0)="a2e1f75a5acb51fba68f72d473a1438b2fa6aee9bc10efc70b7f16e654f340c9fd9b40fcd7c2f55583cf7a2ca7be4c18b181cd1ccf007f5650ff7e01c64ccd85f8d4ed226e4ca0399034a0a45619339ff79f9c8ced0dfced5782fa0ce482417b8e9343ed19679dda57256a0078754e47388b9b107af79c32c54fc29793a2d05dd1f732e60edeb9", 0x87}, {&(0x7f0000000780)="395b7b9931074d3e26deed94dab0ab3d30a80a8806029d7a7f1e0367db29c9eac20789979cad7071d6bf4e4f222296281cfaf2c95f85adcf76cf8be4345a9bf66ad6baac6c502e0894d518279c8c310b355c34da938cdab36a66f17bfa8986708fb9fc296c5a48e8ed5f67758de22b2ae9c2f6bdb5fe832560470db8c522cfccf093eff1eb8f12ee44ac52a236b3cc2c068f94fd39e24151f6f3ee9cb32efb2c80d5fd9605e2a823c084", 0xaa}, {&(0x7f0000001040)="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", 0x3af}], 0x4, &(0x7f0000000840)=[@ip_retopts={{0x38, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x24, 0xdf, 0x1, 0x8, [{@rand_addr=0x64010102, 0x3}, {@local, 0x9}, {@local, 0xfffffff8}, {@remote, 0x7}]}]}}}], 0x38}}], 0x1, 0x0) kernel console output (not intermixed with test programs): b 1-1: config 151 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.481015][ T30] audit: type=1400 audit(1768086418.248:1958): avc: denied { append } for pid=25966 comm="syz.4.5341" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1721.731804][ T30] audit: type=1400 audit(1768086418.258:1959): avc: denied { open } for pid=25966 comm="syz.4.5341" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1721.750430][ T5874] usb 5-1: USB disconnect, device number 59 [ 1722.115031][T16991] usb 1-1: config 151 has 0 interfaces, different from the descriptor's value: 1 [ 1722.141206][T16991] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1722.197634][T16991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.365456][T25992] FAULT_INJECTION: forcing a failure. [ 1722.365456][T25992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1722.408655][T25992] CPU: 0 UID: 0 PID: 25992 Comm: syz.3.5354 Tainted: G L syzkaller #0 PREEMPT(full) [ 1722.408691][T25992] Tainted: [L]=SOFTLOCKUP [ 1722.408699][T25992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1722.408712][T25992] Call Trace: [ 1722.408719][T25992] [ 1722.408728][T25992] dump_stack_lvl+0x16c/0x1f0 [ 1722.408765][T25992] should_fail_ex+0x512/0x640 [ 1722.408800][T25992] _copy_from_iter+0x2a4/0x16c0 [ 1722.408839][T25992] ? __pfx__copy_from_iter+0x10/0x10 [ 1722.408868][T25992] ? __lock_acquire+0x436/0x2890 [ 1722.408890][T25992] ? _parse_integer_limit+0x17f/0x1d0 [ 1722.408917][T25992] ? _kstrtoull+0x145/0x200 [ 1722.408945][T25992] tun_get_user+0x26d/0x3cc0 [ 1722.408982][T25992] ? __lock_acquire+0x436/0x2890 [ 1722.409013][T25992] ? __pfx_tun_get_user+0x10/0x10 [ 1722.409046][T25992] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1722.409078][T25992] ? find_held_lock+0x2b/0x80 [ 1722.409109][T25992] ? tun_get+0x191/0x370 [ 1722.409146][T25992] tun_chr_write_iter+0xdc/0x210 [ 1722.409180][T25992] vfs_write+0x7d3/0x11d0 [ 1722.409207][T25992] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1722.409242][T25992] ? __pfx_vfs_write+0x10/0x10 [ 1722.409267][T25992] ? find_held_lock+0x2b/0x80 [ 1722.409314][T25992] ksys_write+0x12a/0x250 [ 1722.409342][T25992] ? __pfx_ksys_write+0x10/0x10 [ 1722.409377][T25992] do_syscall_64+0xcd/0xf80 [ 1722.409409][T25992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.409432][T25992] RIP: 0033:0x7ff5ed58f749 [ 1722.409450][T25992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1722.409471][T25992] RSP: 002b:00007ff5ee48a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1722.409493][T25992] RAX: ffffffffffffffda RBX: 00007ff5ed7e5fa0 RCX: 00007ff5ed58f749 [ 1722.409508][T25992] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 1722.409522][T25992] RBP: 00007ff5ee48a090 R08: 0000000000000000 R09: 0000000000000000 [ 1722.409535][T25992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1722.409548][T25992] R13: 00007ff5ed7e6038 R14: 00007ff5ed7e5fa0 R15: 00007fff6726e258 [ 1722.409579][T25992] [ 1723.039621][ T5924] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1723.172799][T19218] usbhid 6-1:0.0: can't add hid device: -71 [ 1723.184810][T19218] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1723.196269][ T30] audit: type=1400 audit(1768086420.069:1960): avc: denied { sqpoll } for pid=25995 comm="syz.4.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1723.219831][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 1723.222800][T19218] usb 6-1: USB disconnect, device number 121 [ 1723.240972][ T5924] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1723.277732][ T5924] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1723.336648][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1723.363376][ T5924] usb 2-1: Product: syz [ 1723.399929][ T5924] usb 2-1: Manufacturer: syz [ 1723.424264][ T5924] usb 2-1: SerialNumber: syz [ 1723.445516][ T5924] usb 2-1: config 0 descriptor?? [ 1723.462987][T25994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1723.504912][T26006] mkiss: ax0: crc mode is auto. [ 1723.522154][T16991] usb 1-1: string descriptor 0 read error: -71 [ 1723.541277][T16991] usb 1-1: USB disconnect, device number 17 [ 1723.600390][ T5874] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1723.698150][T26008] netlink: 'syz.5.5359': attribute type 1 has an invalid length. [ 1723.749251][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 1723.759549][T26011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5359'. [ 1723.769565][T26008] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1723.785446][ T5874] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1723.798052][T26011] bond4: entered promiscuous mode [ 1723.808833][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.816929][T26011] bond4: entered allmulticast mode [ 1723.854419][ T5874] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1723.873053][ T5874] pvrusb2: ********** [ 1723.879154][ T5874] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1723.902841][T26008] bond4: (slave dummy0): making interface the new active one [ 1723.919121][ T5874] pvrusb2: Important functionality might not be entirely working. [ 1723.927210][T26008] dummy0: entered promiscuous mode [ 1723.936999][ T5874] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1723.954988][T26008] dummy0: entered allmulticast mode [ 1723.962405][T26008] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1723.971053][ T5874] pvrusb2: ********** [ 1724.105854][T19218] usb 2-1: USB disconnect, device number 45 [ 1724.155929][ T2340] pvrusb2: Invalid write control endpoint [ 1724.246321][ T2340] pvrusb2: Invalid write control endpoint [ 1724.253621][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1724.273085][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1724.303691][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1724.314987][ T2340] pvrusb2: Device being rendered inoperable [ 1724.331444][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1724.365615][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1724.373398][T16991] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1724.397087][T26002] pvrusb2: Attempted to execute control transfer when device not ok [ 1724.406195][ T2340] pvrusb2: Attached sub-driver cx25840 [ 1724.419536][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1724.456060][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1724.499358][ T5874] usb 4-1: USB disconnect, device number 40 [ 1724.513557][T26011] bond4 (unregistering): (slave dummy0): Releasing active interface [ 1724.532419][T26011] dummy0: left promiscuous mode [ 1724.538345][T26011] dummy0: left allmulticast mode [ 1724.543380][T16991] usb 5-1: Using ep0 maxpacket: 8 [ 1724.561083][T16991] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1724.572595][T26011] bond4 (unregistering): Released all slaves [ 1724.579334][T16991] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1724.618825][T16991] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1724.639548][T16991] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1724.653735][T16991] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1724.666935][T16991] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1724.710017][T16991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.357295][T26036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.380955][T26036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.398028][T16991] usb 5-1: usb_control_msg returned -32 [ 1725.420876][T16991] usbtmc 5-1:16.0: can't read capabilities [ 1725.468612][T26042] FAULT_INJECTION: forcing a failure. [ 1725.468612][T26042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.483375][T26042] CPU: 1 UID: 0 PID: 26042 Comm: syz.1.5368 Tainted: G L syzkaller #0 PREEMPT(full) [ 1725.483412][T26042] Tainted: [L]=SOFTLOCKUP [ 1725.483420][T26042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1725.483433][T26042] Call Trace: [ 1725.483441][T26042] [ 1725.483450][T26042] dump_stack_lvl+0x16c/0x1f0 [ 1725.483484][T26042] should_fail_ex+0x512/0x640 [ 1725.483520][T26042] _copy_from_user+0x2e/0xd0 [ 1725.483552][T26042] __sys_bpf+0x248/0x4980 [ 1725.483587][T26042] ? __pfx___sys_bpf+0x10/0x10 [ 1725.483616][T26042] ? find_held_lock+0x2b/0x80 [ 1725.483660][T26042] ? find_held_lock+0x2b/0x80 [ 1725.483698][T26042] ? __mutex_unlock_slowpath+0x161/0x790 [ 1725.483747][T26042] ? fput+0x70/0xf0 [ 1725.483766][T26042] ? ksys_write+0x1ac/0x250 [ 1725.483792][T26042] ? __pfx_ksys_write+0x10/0x10 [ 1725.483824][T26042] __x64_sys_bpf+0x78/0xc0 [ 1725.483853][T26042] ? lockdep_hardirqs_on+0x7c/0x110 [ 1725.483881][T26042] do_syscall_64+0xcd/0xf80 [ 1725.483912][T26042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.483936][T26042] RIP: 0033:0x7fdca478f749 [ 1725.483954][T26042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1725.483976][T26042] RSP: 002b:00007fdca5658038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1725.483996][T26042] RAX: ffffffffffffffda RBX: 00007fdca49e5fa0 RCX: 00007fdca478f749 [ 1725.484011][T26042] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000002 [ 1725.484025][T26042] RBP: 00007fdca5658090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.484042][T26042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.484056][T26042] R13: 00007fdca49e6038 R14: 00007fdca49e5fa0 R15: 00007ffde9993d08 [ 1725.484087][T26042] [ 1725.628320][T19218] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1725.742416][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5367'. [ 1725.782098][ T30] audit: type=1400 audit(1768086422.651:1961): avc: denied { mount } for pid=26015 comm="syz.4.5360" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1726.090201][T19218] usb 4-1: config 2 has an invalid interface number: 220 but max is 0 [ 1726.098461][T19218] usb 4-1: config 2 has no interface number 0 [ 1726.105133][T19218] usb 4-1: config 2 interface 220 has no altsetting 0 [ 1726.570974][T19218] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=94.f4 [ 1726.600567][T19218] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1726.634948][T19218] usb 4-1: Product: syz [ 1726.649669][T19218] usb 4-1: Manufacturer: syz [ 1726.664291][T19218] usb 4-1: SerialNumber: syz [ 1726.891216][T26038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.916986][T26054] FAULT_INJECTION: forcing a failure. [ 1726.916986][T26054] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.930105][T26038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.940195][T26054] CPU: 0 UID: 0 PID: 26054 Comm: syz.0.5370 Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.940227][T26054] Tainted: [L]=SOFTLOCKUP [ 1726.940234][T26054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1726.940245][T26054] Call Trace: [ 1726.940252][T26054] [ 1726.940260][T26054] dump_stack_lvl+0x16c/0x1f0 [ 1726.940290][T26054] should_fail_ex+0x512/0x640 [ 1726.940318][T26054] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1726.940357][T26054] should_failslab+0xc2/0x120 [ 1726.940381][T26054] __kmalloc_cache_noprof+0x80/0x800 [ 1726.940410][T26054] ? __do_sys_memfd_create+0x18e/0xba0 [ 1726.940432][T26054] ? __do_sys_memfd_create+0x18e/0xba0 [ 1726.940449][T26054] __do_sys_memfd_create+0x18e/0xba0 [ 1726.940472][T26054] do_syscall_64+0xcd/0xf80 [ 1726.940499][T26054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.940519][T26054] RIP: 0033:0x7fc75918f749 [ 1726.940535][T26054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1726.940553][T26054] RSP: 002b:00007fc759f62038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1726.940572][T26054] RAX: ffffffffffffffda RBX: 00007fc7593e6090 RCX: 00007fc75918f749 [ 1726.940584][T26054] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0 [ 1726.940595][T26054] RBP: 00007fc759f62090 R08: 0000000000000000 R09: 0000000000000000 [ 1726.940606][T26054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.940618][T26054] R13: 00007fc7593e6128 R14: 00007fc7593e6090 R15: 00007ffcbe7af6c8 [ 1726.940643][T26054] [ 1726.946314][T26057] SELinux: policydb string does not match my string SE Linux [ 1727.250987][T26060] random: crng reseeded on system resumption [ 1727.456734][T26057] SELinux: failed to load policy [ 1727.489702][T16991] usb 4-1: USB disconnect, device number 41 [ 1727.516938][ T30] audit: type=1400 audit(1768086424.391:1962): avc: denied { execute_no_trans } for pid=26043 comm="syz.1.5369" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1727.548024][T19218] usb 5-1: USB disconnect, device number 60 [ 1727.710202][T26063] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1727.777428][T26063] SELinux: failed to load policy [ 1727.912411][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1728.968429][T26075] ./cgroup: Can't lookup blockdev [ 1729.339250][T26075] overlayfs: missing 'lowerdir' [ 1729.835243][T16991] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1730.672542][T16991] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1730.680313][ T5924] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1730.749323][T16991] usb 4-1: config 4 has an invalid interface number: 140 but max is 0 [ 1730.764560][T16991] usb 4-1: config 4 has no interface number 0 [ 1730.775774][T16991] usb 4-1: config 4 interface 140 has no altsetting 0 [ 1730.792932][T16991] usb 4-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=43.95 [ 1730.820960][T16991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.873212][T16991] usb 4-1: Product: syz [ 1730.882252][T16991] usb 4-1: Manufacturer: syz [ 1730.905218][T16991] usb 4-1: SerialNumber: syz [ 1730.915655][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 1730.985665][ T5924] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1731.013909][T26111] netlink: 'syz.4.5388': attribute type 1 has an invalid length. [ 1731.024370][ T5924] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1731.065814][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1731.076350][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1731.093622][T26113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5388'. [ 1731.112707][ T5924] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1731.125833][ T5924] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1731.135855][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.171123][T26111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1731.196962][ T30] audit: type=1400 audit(1768086428.083:1963): avc: denied { connect } for pid=26085 comm="syz.3.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1731.304538][T26114] bond3: (slave dummy0): Releasing backup interface [ 1731.437201][T26114] bond4: (slave dummy0): making interface the new active one [ 1731.518647][T26114] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1731.661640][T26113] bond4: entered promiscuous mode [ 1731.681412][T26113] dummy0: entered promiscuous mode [ 1731.737517][T26113] bond4: entered allmulticast mode [ 1731.755424][T26113] dummy0: entered allmulticast mode [ 1731.974633][T26120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.998038][T26120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.490018][ T5924] usb 1-1: usb_control_msg returned -32 [ 1732.495660][ T5924] usbtmc 1-1:16.0: can't read capabilities [ 1732.501499][ T30] audit: type=1400 audit(1768086428.103:1964): avc: denied { write } for pid=26085 comm="syz.3.5380" path="socket:[112953]" dev="sockfs" ino=112953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1732.529457][ T30] audit: type=1400 audit(1768086428.103:1965): avc: denied { open } for pid=26085 comm="syz.3.5380" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1732.960704][T26111] bond4 (unregistering): (slave dummy0): Releasing active interface [ 1733.138256][T26111] dummy0: left promiscuous mode [ 1733.158860][T26111] dummy0: left allmulticast mode [ 1733.699801][T26111] bond4 (unregistering): Released all slaves [ 1733.827074][T26126] netdevsim netdevsim5: Direct firmware load for lookup_extent_enter failed with error -2 [ 1733.840848][T26126] netdevsim netdevsim5: Falling back to sysfs fallback for: lookup_extent_enter [ 1733.854527][ T30] audit: type=1400 audit(1768086430.725:1966): avc: denied { firmware_load } for pid=26122 comm="syz.5.5389" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1735.175818][T16991] uvcvideo 4-1:4.140: Found UVC 0.00 device syz (0408:4033) [ 1735.183255][T18272] usb 1-1: USB disconnect, device number 18 [ 1735.203565][T16991] uvcvideo 4-1:4.140: Forcing UVC version to 1.0a [ 1735.210114][T16991] uvcvideo 4-1:4.140: No valid video chain found. [ 1735.239318][T16991] usb 4-1: USB disconnect, device number 42 [ 1735.387719][T26148] ./cgroup: Can't lookup blockdev [ 1735.554468][T26148] overlayfs: missing 'lowerdir' [ 1735.723330][T16991] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1735.731575][T18272] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1735.833340][T19215] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1735.899593][T16991] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1735.922265][T16991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.944641][T16991] usb 4-1: config 0 descriptor?? [ 1735.950064][T18272] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.964982][T18272] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1735.999555][T18272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1736.003164][T19215] usb 5-1: Using ep0 maxpacket: 32 [ 1736.023125][T18272] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1736.024974][T19215] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1736.056209][T19215] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1736.063895][T18272] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1736.066916][T19215] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1736.083121][T18272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.085691][T19215] usb 5-1: Product: syz [ 1736.100023][T18272] usb 1-1: Product: syz [ 1736.110228][T18272] usb 1-1: Manufacturer: syz [ 1736.113017][T19215] usb 5-1: Manufacturer: syz [ 1736.114992][T18272] usb 1-1: SerialNumber: syz [ 1736.126933][T18272] usb 1-1: config 0 descriptor?? [ 1736.133067][T19215] usb 5-1: SerialNumber: syz [ 1736.134601][T18272] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 1736.168624][T19215] usb 5-1: config 0 descriptor?? [ 1736.185971][T26153] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1736.213452][ T30] audit: type=1400 audit(1768086433.096:1967): avc: denied { write } for pid=26155 comm="syz.1.5399" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1736.238627][T18272] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1736.249040][ T5924] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1736.263387][T18272] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1736.554860][T26158] lo speed is unknown, defaulting to 1000 [ 1736.560689][T26158] lo speed is unknown, defaulting to 1000 [ 1736.567262][T26158] lo speed is unknown, defaulting to 1000 [ 1736.820713][T26158] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1737.201034][ T5924] usb 6-1: device descriptor read/64, error -71 [ 1737.423010][T16991] [drm:udl_init] *ERROR* Selecting channel failed [ 1737.514434][T26158] lo speed is unknown, defaulting to 1000 [ 1737.521671][T26158] lo speed is unknown, defaulting to 1000 [ 1737.528943][T26158] lo speed is unknown, defaulting to 1000 [ 1737.536206][T26158] lo speed is unknown, defaulting to 1000 [ 1737.543458][T26158] lo speed is unknown, defaulting to 1000 [ 1737.633216][T16991] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1737.640171][T16991] [drm] Initialized udl on minor 2 [ 1737.659072][T16991] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1737.689798][T16991] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1737.719423][ T5874] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1737.732342][ T5924] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1737.742339][ T5874] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1737.754833][T16991] usb 4-1: USB disconnect, device number 43 [ 1737.786506][ T5874] usb 5-1: USB disconnect, device number 61 [ 1737.902782][ T5924] usb 6-1: device descriptor read/64, error -71 [ 1738.023292][ T5924] usb usb6-port1: attempt power cycle [ 1738.394793][ T5924] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1738.464688][T19215] usb 1-1: USB disconnect, device number 19 [ 1738.482804][T26176] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1738.502266][T19215] garmin_gps 1-1:0.0: device disconnected [ 1738.536759][T26176] SELinux: failed to load policy [ 1738.982448][T26183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5406'. [ 1739.132391][T26187] FAULT_INJECTION: forcing a failure. [ 1739.132391][T26187] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.145196][T26187] CPU: 0 UID: 0 PID: 26187 Comm: syz.4.5407 Tainted: G L syzkaller #0 PREEMPT(full) [ 1739.145233][T26187] Tainted: [L]=SOFTLOCKUP [ 1739.145240][T26187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1739.145254][T26187] Call Trace: [ 1739.145263][T26187] [ 1739.145271][T26187] dump_stack_lvl+0x16c/0x1f0 [ 1739.145305][T26187] should_fail_ex+0x512/0x640 [ 1739.145327][T26187] ? __kmalloc_noprof+0xca/0x910 [ 1739.145347][T26187] should_failslab+0xc2/0x120 [ 1739.145363][T26187] __kmalloc_noprof+0xeb/0x910 [ 1739.145386][T26187] ? __do_sys_futex_waitv+0x221/0x2c0 [ 1739.145424][T26187] ? __do_sys_futex_waitv+0x221/0x2c0 [ 1739.145453][T26187] __do_sys_futex_waitv+0x221/0x2c0 [ 1739.145473][T26187] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 1739.145498][T26187] do_syscall_64+0xcd/0xf80 [ 1739.145515][T26187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.145536][T26187] RIP: 0033:0x7f81c3b8f749 [ 1739.145555][T26187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1739.145576][T26187] RSP: 002b:00007f81c1df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 1739.145597][T26187] RAX: ffffffffffffffda RBX: 00007f81c3de6180 RCX: 00007f81c3b8f749 [ 1739.145607][T26187] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 1739.145614][T26187] RBP: 00007f81c1df6090 R08: 0000000000000001 R09: 0000000000000000 [ 1739.145621][T26187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.145628][T26187] R13: 00007f81c3de6218 R14: 00007f81c3de6180 R15: 00007ffc97f536c8 [ 1739.145644][T26187] [ 1739.556021][ T30] audit: type=1400 audit(1768086436.437:1968): avc: denied { bind } for pid=26188 comm="syz.3.5408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1739.656491][T26189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1740.062212][T26193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5410'. [ 1740.309025][T26203] SELinux: policydb string does not match my string SE Linux [ 1740.346609][T26203] SELinux: failed to load policy [ 1740.499582][ T5924] usb 6-1: device descriptor read/8, error -71 [ 1740.668153][ T30] audit: type=1400 audit(1768086437.548:1969): avc: denied { mount } for pid=26211 comm="syz.4.5415" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1740.990995][ T5924] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1741.074946][ T5924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.085170][ T30] audit: type=1400 audit(1768086437.958:1970): avc: denied { create } for pid=26216 comm="syz.1.5418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1741.126752][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1741.141433][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1741.160746][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1741.203174][ T5924] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1741.218612][T26219] input input94: cannot allocate more than FF_MAX_EFFECTS effects [ 1741.220743][ T30] audit: type=1400 audit(1768086438.098:1971): avc: denied { ioctl } for pid=26216 comm="syz.1.5418" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1741.234540][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.261821][ T5924] usb 6-1: Product: syz [ 1741.266471][ T5924] usb 6-1: Manufacturer: syz [ 1741.303096][ T5924] usb 6-1: SerialNumber: syz [ 1741.335755][ T5924] usb 6-1: config 0 descriptor?? [ 1741.352800][ T5924] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1741.377149][ T5924] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1741.391589][ T5924] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1742.220012][ T5924] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1742.234611][T26229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5421'. [ 1742.244733][T26230] ./cgroup: Can't lookup blockdev [ 1742.253660][T26230] overlayfs: missing 'lowerdir' [ 1742.397959][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 1742.484205][ T5924] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1742.754274][ T5924] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1742.766050][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1742.774290][ T5924] usb 5-1: Product: syz [ 1742.778808][ T5924] usb 5-1: Manufacturer: syz [ 1742.792412][ T5924] usb 5-1: SerialNumber: syz [ 1742.799232][ T5924] usb 5-1: config 0 descriptor?? [ 1742.926399][T26238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1743.747795][T19218] usb 6-1: USB disconnect, device number 125 [ 1743.826079][T19218] garmin_gps 6-1:0.0: device disconnected [ 1744.166334][T26255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.188692][T26255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.863361][ T30] audit: type=1400 audit(1768086441.750:1972): avc: denied { setopt } for pid=26246 comm="syz.3.5427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1745.148564][ T30] audit: type=1400 audit(1768086442.030:1973): avc: denied { ioctl } for pid=26264 comm="syz.0.5431" path="socket:[114142]" dev="sockfs" ino=114142 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1745.298148][T26268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1745.356975][T26273] netlink: 'syz.1.5434': attribute type 1 has an invalid length. [ 1745.417622][T26276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1745.442628][T26273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1745.462273][T26276] bond4: entered promiscuous mode [ 1745.476687][T26276] bond4: entered allmulticast mode [ 1745.517315][T26273] bond4: (slave dummy0): making interface the new active one [ 1745.525536][T26273] dummy0: entered promiscuous mode [ 1745.532919][T26273] dummy0: entered allmulticast mode [ 1745.570795][T26273] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1745.608436][T19218] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1745.780882][T26276] bond4 (unregistering): (slave dummy0): Releasing active interface [ 1745.789320][T26276] dummy0: left promiscuous mode [ 1745.798954][T26276] dummy0: left allmulticast mode [ 1745.812356][T19218] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1745.821983][T26276] bond4 (unregistering): Released all slaves [ 1745.850368][T19218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1745.902530][T19218] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1745.976624][T19218] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1745.990656][T19218] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1746.000283][T19215] usb 5-1: USB disconnect, device number 62 [ 1746.018915][T19218] usb 4-1: Manufacturer: syz [ 1746.027604][T19218] usb 4-1: config 0 descriptor?? [ 1746.209096][T26285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5437'. [ 1746.590884][T19218] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1746.643528][T26298] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1746.794473][T19218] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1746.806516][T19218] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1746.816567][T19218] usb 2-1: config 150 has no interface number 0 [ 1746.823297][T19218] usb 2-1: too many endpoints for config 150 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 1746.835527][T19218] usb 2-1: config 150 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1746.849344][T22895] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1746.873356][T19218] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1746.881396][T19218] usb 2-1: config 150 interface 1 has no altsetting 0 [ 1746.895014][T19218] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1746.906326][T19218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.915093][T19218] usb 2-1: Product: syz [ 1746.919967][T19218] usb 2-1: Manufacturer: syz [ 1746.924730][T19218] usb 2-1: SerialNumber: syz [ 1747.022360][T22895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.037475][T22895] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1747.049612][T22895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1747.061135][T22895] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1747.091097][T22895] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1747.100974][T22895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.110983][T22895] usb 6-1: Product: syz [ 1747.115328][T22895] usb 6-1: Manufacturer: syz [ 1747.120206][T22895] usb 6-1: SerialNumber: syz [ 1747.136347][T22895] usb 6-1: config 0 descriptor?? [ 1747.151972][T22895] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1747.165273][T22895] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1747.176941][T22895] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1747.214914][T19218] xr_serial 2-1:150.204: skipping garbage [ 1747.225924][T19218] xr_serial 2-1:150.204: xr_serial converter detected [ 1748.421335][T26309] netlink: 'syz.0.5443': attribute type 1 has an invalid length. [ 1748.492113][T26311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5443'. [ 1748.515112][T26309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1748.529441][T26311] bond2: entered promiscuous mode [ 1748.534779][T26311] bond2: entered allmulticast mode [ 1748.549179][ T6114] usb 4-1: USB disconnect, device number 44 [ 1748.617906][T26309] bond2: (slave dummy0): making interface the new active one [ 1748.625746][T26309] dummy0: entered promiscuous mode [ 1748.634673][T26309] dummy0: entered allmulticast mode [ 1748.644120][T26309] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1748.761380][T19218] xr_serial ttyUSB1: Failed to set reg 0x0c: -71 [ 1748.791529][T19218] xr_serial ttyUSB1: probe with driver xr_serial failed with error -71 [ 1748.877874][T19218] usb 2-1: USB disconnect, device number 46 [ 1749.004185][T19218] xr_serial 2-1:150.204: device disconnected [ 1749.275871][T26309] bond2 (unregistering): (slave dummy0): Releasing active interface [ 1749.283938][T26309] dummy0: left promiscuous mode [ 1749.289172][T26309] dummy0: left allmulticast mode [ 1749.303736][T26309] bond2 (unregistering): Released all slaves [ 1749.475487][T26331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5450'. [ 1749.518259][T26331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5450'. [ 1749.636359][ T5924] usb 6-1: USB disconnect, device number 126 [ 1749.660022][ T5924] garmin_gps 6-1:0.0: device disconnected [ 1749.934248][T26341] Invalid source name [ 1750.308703][T26346] ./cgroup: Can't lookup blockdev [ 1750.350816][T26346] overlayfs: missing 'lowerdir' [ 1750.404154][T26348] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1750.671000][ T30] audit: type=1400 audit(1768086447.563:1974): avc: denied { ioctl } for pid=26351 comm="syz.5.5455" path="socket:[113330]" dev="sockfs" ino=113330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1750.718305][T26352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5455'. [ 1750.748449][ T30] audit: type=1400 audit(1768086447.603:1975): avc: denied { bind } for pid=26351 comm="syz.5.5455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1750.969840][ T30] audit: type=1400 audit(1768086447.603:1976): avc: denied { setopt } for pid=26351 comm="syz.5.5455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1751.023004][ T30] audit: type=1400 audit(1768086447.603:1977): avc: denied { write } for pid=26351 comm="syz.5.5455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1751.368129][T26364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5459'. [ 1751.435553][T19215] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1751.621131][T19215] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1751.630892][T19215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.639156][T19215] usb 6-1: Product: syz [ 1751.643699][T19215] usb 6-1: Manufacturer: syz [ 1751.648429][T19215] usb 6-1: SerialNumber: syz [ 1751.674726][T19215] usb 6-1: config 0 descriptor?? [ 1751.692213][T19215] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1752.849125][T26374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5463'. [ 1752.865174][T26374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5463'. [ 1752.869220][T26378] FAULT_INJECTION: forcing a failure. [ 1752.869220][T26378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1752.890927][T26378] CPU: 1 UID: 0 PID: 26378 Comm: syz.1.5465 Tainted: G L syzkaller #0 PREEMPT(full) [ 1752.890962][T26378] Tainted: [L]=SOFTLOCKUP [ 1752.890969][T26378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1752.890982][T26378] Call Trace: [ 1752.890990][T26378] [ 1752.890998][T26378] dump_stack_lvl+0x16c/0x1f0 [ 1752.891031][T26378] should_fail_ex+0x512/0x640 [ 1752.891067][T26378] _copy_from_user+0x2e/0xd0 [ 1752.891099][T26378] copy_msghdr_from_user+0x98/0x160 [ 1752.891123][T26378] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1752.891160][T26378] ___sys_sendmsg+0xfe/0x1d0 [ 1752.891185][T26378] ? __pfx____sys_sendmsg+0x10/0x10 [ 1752.891242][T26378] __sys_sendmsg+0x16d/0x220 [ 1752.891267][T26378] ? __pfx___sys_sendmsg+0x10/0x10 [ 1752.891308][T26378] do_syscall_64+0xcd/0xf80 [ 1752.891338][T26378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.891360][T26378] RIP: 0033:0x7fdca478f749 [ 1752.891378][T26378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1752.891399][T26378] RSP: 002b:00007fdca5658038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1752.891420][T26378] RAX: ffffffffffffffda RBX: 00007fdca49e5fa0 RCX: 00007fdca478f749 [ 1752.891435][T26378] RDX: 0000000020004844 RSI: 0000200000000000 RDI: 0000000000000003 [ 1752.891449][T26378] RBP: 00007fdca5658090 R08: 0000000000000000 R09: 0000000000000000 [ 1752.891462][T26378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.891475][T26378] R13: 00007fdca49e6038 R14: 00007fdca49e5fa0 R15: 00007ffde9993d08 [ 1752.891504][T26378] [ 1753.128952][T26385] SELinux: policydb string does not match my string SE Linux [ 1753.139616][T26385] SELinux: failed to load policy [ 1753.224687][T16991] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1753.375006][ T5924] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1753.398625][T16991] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1753.422109][T16991] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1753.442411][T16991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1753.454035][T16991] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1753.474010][T16991] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1753.485417][T16991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.493543][T16991] usb 5-1: Product: syz [ 1753.499973][T16991] usb 5-1: Manufacturer: syz [ 1753.507589][T16991] usb 5-1: SerialNumber: syz [ 1753.529648][T16991] usb 5-1: config 0 descriptor?? [ 1753.542526][T16991] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 1753.550544][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 1753.561374][ T5924] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1753.570588][ T5924] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1753.584548][T16991] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1753.595453][ T5924] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1753.606268][ T5924] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1753.606512][T16991] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1753.630108][ T5924] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1753.644857][ T5924] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1753.663124][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.482550][T26359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.530067][T26393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.554821][T19215] gspca_stk1135: reg_w 0x203 err -110 [ 1754.566515][T26359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1754.592028][T19215] gspca_stk1135: serial bus timeout: status=0x00 [ 1754.608051][T26393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1754.625500][T19215] gspca_stk1135: Sensor write failed [ 1754.782607][T19215] gspca_stk1135: serial bus timeout: status=0x00 [ 1754.783021][ T5924] usb 4-1: usb_control_msg returned -32 [ 1754.849133][ T5924] usbtmc 4-1:16.0: can't read capabilities [ 1755.070195][T19215] gspca_stk1135: Sensor write failed [ 1755.075731][T19215] gspca_stk1135: serial bus timeout: status=0x00 [ 1755.082130][T19215] gspca_stk1135: Sensor read failed [ 1755.087475][T19215] gspca_stk1135: serial bus timeout: status=0x00 [ 1755.094068][T19215] gspca_stk1135: Sensor read failed [ 1755.099321][T19215] gspca_stk1135: Detected sensor type unknown (0x0) [ 1755.106148][T19215] gspca_stk1135: serial bus timeout: status=0x00 [ 1755.112522][T19215] gspca_stk1135: Sensor read failed [ 1755.118038][T19215] gspca_stk1135: serial bus timeout: status=0x00 [ 1755.124481][T19215] gspca_stk1135: Sensor read failed [ 1755.129754][T19215] gspca_stk1135: serial bus timeout: status=0x00 [ 1755.136259][T19215] gspca_stk1135: Sensor write failed [ 1755.141637][T19215] gspca_stk1135: serial bus timeout: status=0x00 [ 1755.148161][T19215] gspca_stk1135: Sensor write failed [ 1755.154616][T19215] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 1755.176166][T26397] SELinux: failed to load policy [ 1755.664143][ T5924] usb 5-1: USB disconnect, device number 63 [ 1755.678504][ T5924] garmin_gps 5-1:0.0: device disconnected [ 1756.285642][T26414] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1756.312419][T26414] CIFS mount error: No usable UNC path provided in device string! [ 1756.312419][T26414] [ 1756.323361][T26414] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1756.708482][T23185] usb 4-1: USB disconnect, device number 45 [ 1756.803074][ T5924] usb 6-1: USB disconnect, device number 127 [ 1756.942285][T26421] mkiss: ax0: crc mode is auto. [ 1757.015564][T26423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5477'. [ 1757.027921][T26423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5477'. [ 1757.163251][ T30] audit: type=1400 audit(1768086454.056:1978): avc: denied { map } for pid=26427 comm="syz.0.5480" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1757.211845][ T30] audit: type=1400 audit(1768086454.056:1979): avc: denied { execute } for pid=26427 comm="syz.0.5480" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1757.241960][T26429] binder: 26410:26429 ioctl 400c620e 200000000080 returned -22 [ 1757.251634][T26411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5473'. [ 1757.265547][T26429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5473'. [ 1757.381499][T26434] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5482'. [ 1757.390672][T26434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1758.075191][ T30] audit: type=1400 audit(1768086454.797:1980): avc: denied { connect } for pid=26426 comm="syz.5.5478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1758.731848][ T5924] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1758.996378][ T6114] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1759.440108][T26459] FAULT_INJECTION: forcing a failure. [ 1759.440108][T26459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1759.453545][T26459] CPU: 0 UID: 0 PID: 26459 Comm: syz.0.5487 Tainted: G L syzkaller #0 PREEMPT(full) [ 1759.453579][T26459] Tainted: [L]=SOFTLOCKUP [ 1759.453585][T26459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1759.453598][T26459] Call Trace: [ 1759.453605][T26459] [ 1759.453614][T26459] dump_stack_lvl+0x16c/0x1f0 [ 1759.453646][T26459] should_fail_ex+0x512/0x640 [ 1759.453672][T26459] _copy_from_user+0x2e/0xd0 [ 1759.453690][T26459] do_ipv6_setsockopt+0x91b/0x4680 [ 1759.453709][T26459] ? update_irq_load_avg+0xb5/0xdc0 [ 1759.453725][T26459] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1759.453742][T26459] ? __schedule+0x3bbb/0x6150 [ 1759.453757][T26459] ? rcu_is_watching+0x12/0xc0 [ 1759.453769][T26459] ? trace_sched_exit_tp+0xd1/0x110 [ 1759.453781][T26459] ? __schedule+0x114c/0x6150 [ 1759.453803][T26459] ? __pfx___schedule+0x10/0x10 [ 1759.453820][T26459] ? rcu_is_watching+0x12/0xc0 [ 1759.453830][T26459] ? irqentry_exit+0x1dd/0x8c0 [ 1759.453845][T26459] ? lockdep_hardirqs_on+0x7c/0x110 [ 1759.453860][T26459] ? irqentry_exit+0x1dd/0x8c0 [ 1759.453877][T26459] ? ipv6_setsockopt+0xcb/0x170 [ 1759.453893][T26459] ipv6_setsockopt+0xcb/0x170 [ 1759.453911][T26459] udpv6_setsockopt+0x7d/0xd0 [ 1759.453924][T26459] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1759.453941][T26459] do_sock_setsockopt+0xf3/0x1d0 [ 1759.453958][T26459] __sys_setsockopt+0x1a0/0x230 [ 1759.453972][T26459] __x64_sys_setsockopt+0xbd/0x160 [ 1759.453983][T26459] ? do_syscall_64+0x91/0xf80 [ 1759.453998][T26459] ? lockdep_hardirqs_on+0x7c/0x110 [ 1759.454013][T26459] do_syscall_64+0xcd/0xf80 [ 1759.454029][T26459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.454042][T26459] RIP: 0033:0x7fc75918f749 [ 1759.454052][T26459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1759.454064][T26459] RSP: 002b:00007fc759f62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1759.454076][T26459] RAX: ffffffffffffffda RBX: 00007fc7593e6090 RCX: 00007fc75918f749 [ 1759.454084][T26459] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a [ 1759.454090][T26459] RBP: 00007fc759f62090 R08: 0000000000000540 R09: 0000000000000000 [ 1759.454098][T26459] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1759.454105][T26459] R13: 00007fc7593e6128 R14: 00007fc7593e6090 R15: 00007ffcbe7af6c8 [ 1759.454120][T26459] [ 1759.861160][ T6114] usb 5-1: Using ep0 maxpacket: 8 [ 1759.967296][ T6114] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1759.979096][ T5924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.989801][ T6114] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1760.026238][T18272] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1760.034038][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1760.047556][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1760.057481][ T6114] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1760.058917][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1760.068535][ T6114] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1760.091692][ T6114] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1760.105473][ T6114] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1760.114746][ T6114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.123816][ T5924] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1760.136187][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.145158][ T5924] usb 6-1: Product: syz [ 1760.149493][ T5924] usb 6-1: Manufacturer: syz [ 1760.154570][ T5924] usb 6-1: SerialNumber: syz [ 1760.206572][T18272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.219274][T18272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.230577][T18272] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1760.239824][T18272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.301378][T18272] usb 4-1: config 0 descriptor?? [ 1760.307116][ T5924] usb 6-1: config 0 descriptor?? [ 1760.318488][ T5924] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1760.329076][ T5924] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1760.339673][ T5924] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1760.770250][T26465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.828634][T18272] magicmouse 0003:05AC:0324.0018: unknown main item tag 0x0 [ 1760.842539][T26465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.913291][ T30] audit: type=1400 audit(1768086457.808:1981): avc: denied { getopt } for pid=26451 comm="syz.3.5486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1760.969310][ T6114] usb 5-1: usb_control_msg returned -32 [ 1760.976581][T18272] magicmouse 0003:05AC:0324.0018: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 1761.038966][ T6114] usbtmc 5-1:16.0: can't read capabilities [ 1761.933978][T26478] mkiss: ax0: crc mode is auto. [ 1762.018310][ T6114] usb 4-1: USB disconnect, device number 46 [ 1762.075979][T26480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1762.310008][T19218] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1762.439942][T19218] usb 1-1: device descriptor read/64, error -71 [ 1762.634006][T26487] FAULT_INJECTION: forcing a failure. [ 1762.634006][T26487] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.646713][T26487] CPU: 1 UID: 0 PID: 26487 Comm: syz.1.5493 Tainted: G L syzkaller #0 PREEMPT(full) [ 1762.646747][T26487] Tainted: [L]=SOFTLOCKUP [ 1762.646755][T26487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1762.646768][T26487] Call Trace: [ 1762.646777][T26487] [ 1762.646786][T26487] dump_stack_lvl+0x16c/0x1f0 [ 1762.646820][T26487] should_fail_ex+0x512/0x640 [ 1762.646852][T26487] ? __kvmalloc_node_noprof+0x129/0xa40 [ 1762.646882][T26487] should_failslab+0xc2/0x120 [ 1762.646911][T26487] __kvmalloc_node_noprof+0x14a/0xa40 [ 1762.646937][T26487] ? seq_read_iter+0x830/0x12d0 [ 1762.646970][T26487] ? seq_read_iter+0x830/0x12d0 [ 1762.646994][T26487] seq_read_iter+0x830/0x12d0 [ 1762.647017][T26487] ? find_held_lock+0x2b/0x80 [ 1762.647046][T26487] ? register_lock_class+0x41/0x4b0 [ 1762.647078][T26487] seq_read+0x3a3/0x570 [ 1762.647103][T26487] ? __pfx_seq_read+0x10/0x10 [ 1762.647133][T26487] ? lock_acquire+0x179/0x330 [ 1762.647159][T26487] ? avc_policy_seqno+0x9/0x20 [ 1762.647182][T26487] ? __pfx_seq_read+0x10/0x10 [ 1762.647206][T26487] proc_reg_read+0x240/0x330 [ 1762.647232][T26487] ? __pfx_proc_reg_read+0x10/0x10 [ 1762.647258][T26487] vfs_read+0x1e4/0xcf0 [ 1762.647284][T26487] ? __pfx___mutex_lock+0x10/0x10 [ 1762.647313][T26487] ? __pfx_vfs_read+0x10/0x10 [ 1762.647348][T26487] ? __fget_files+0x20e/0x3c0 [ 1762.647383][T26487] ksys_read+0x12a/0x250 [ 1762.647406][T26487] ? __pfx_ksys_read+0x10/0x10 [ 1762.647438][T26487] do_syscall_64+0xcd/0xf80 [ 1762.647465][T26487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.647486][T26487] RIP: 0033:0x7fdca478f749 [ 1762.647502][T26487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1762.647521][T26487] RSP: 002b:00007fdca5616038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1762.647541][T26487] RAX: ffffffffffffffda RBX: 00007fdca49e6180 RCX: 00007fdca478f749 [ 1762.647555][T26487] RDX: 0000000000001000 RSI: 0000200000001180 RDI: 0000000000000006 [ 1762.647567][T26487] RBP: 00007fdca5616090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.647580][T26487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.647591][T26487] R13: 00007fdca49e6218 R14: 00007fdca49e6180 R15: 00007ffde9993d08 [ 1762.647620][T26487] [ 1762.985189][T19218] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1763.406464][ T6114] usb 6-1: USB disconnect, device number 2 [ 1763.431240][ T6114] garmin_gps 6-1:0.0: device disconnected [ 1763.459739][T19218] usb 1-1: device descriptor read/64, error -71 [ 1763.498424][T19215] usb 5-1: USB disconnect, device number 64 [ 1763.640220][T26492] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1763.647700][T18272] IPVS: starting estimator thread 0... [ 1763.666430][T26492] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1763.691717][T19218] usb usb1-port1: attempt power cycle [ 1763.749257][T26494] IPVS: using max 35 ests per chain, 84000 per kthread [ 1763.767878][ T30] audit: type=1400 audit(1768086460.660:1982): avc: denied { create } for pid=26495 comm="syz.3.5497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1764.104834][T19218] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1764.143982][ T30] audit: type=1400 audit(1768086460.680:1983): avc: denied { getopt } for pid=26495 comm="syz.3.5497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1764.209535][T19218] usb 1-1: device descriptor read/8, error -71 [ 1764.365087][T26506] SELinux: policydb string does not match my string SE Linux [ 1764.382234][T26507] FAULT_INJECTION: forcing a failure. [ 1764.382234][T26507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1764.395874][T26506] SELinux: failed to load policy [ 1764.403329][T26507] CPU: 1 UID: 0 PID: 26507 Comm: syz.1.5498 Tainted: G L syzkaller #0 PREEMPT(full) [ 1764.403365][T26507] Tainted: [L]=SOFTLOCKUP [ 1764.403372][T26507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1764.403385][T26507] Call Trace: [ 1764.403392][T26507] [ 1764.403401][T26507] dump_stack_lvl+0x16c/0x1f0 [ 1764.403435][T26507] should_fail_ex+0x512/0x640 [ 1764.403471][T26507] _copy_to_user+0x32/0xd0 [ 1764.403505][T26507] simple_read_from_buffer+0xcb/0x170 [ 1764.403536][T26507] proc_fail_nth_read+0x197/0x240 [ 1764.403564][T26507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1764.403588][T26507] ? rw_verify_area+0xcf/0x6c0 [ 1764.403612][T26507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1764.403635][T26507] vfs_read+0x1e4/0xcf0 [ 1764.403662][T26507] ? __pfx___mutex_lock+0x10/0x10 [ 1764.403695][T26507] ? __pfx_vfs_read+0x10/0x10 [ 1764.403729][T26507] ? __fget_files+0x20e/0x3c0 [ 1764.403767][T26507] ksys_read+0x12a/0x250 [ 1764.403793][T26507] ? __pfx_ksys_read+0x10/0x10 [ 1764.403828][T26507] do_syscall_64+0xcd/0xf80 [ 1764.403858][T26507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.403881][T26507] RIP: 0033:0x7fdca478e15c [ 1764.403899][T26507] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1764.403919][T26507] RSP: 002b:00007fdca5658030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1764.403940][T26507] RAX: ffffffffffffffda RBX: 00007fdca49e5fa0 RCX: 00007fdca478e15c [ 1764.403955][T26507] RDX: 000000000000000f RSI: 00007fdca56580a0 RDI: 0000000000000004 [ 1764.403968][T26507] RBP: 00007fdca5658090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.403981][T26507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.403995][T26507] R13: 00007fdca49e6038 R14: 00007fdca49e5fa0 R15: 00007ffde9993d08 [ 1764.404026][T26507] [ 1764.594543][T19218] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1764.629409][T19218] usb 1-1: device descriptor read/8, error -71 [ 1764.745405][T19218] usb usb1-port1: unable to enumerate USB device [ 1765.094345][T26521] No source specified [ 1765.228823][T19215] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1765.308489][T22895] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1765.405974][T19215] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1765.427285][T19215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.458571][T22895] usb 4-1: Using ep0 maxpacket: 32 [ 1765.544254][T26526] vxfs: WRONG superblock magic 00000000 at 1 [ 1765.552342][T26526] vxfs: WRONG superblock magic 00000000 at 8 [ 1765.558646][T26526] vxfs: can't find superblock. [ 1765.805699][T19215] usb 5-1: config 0 descriptor?? [ 1765.822879][T22895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1765.852090][T22895] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1765.907859][T22895] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1765.941347][T22895] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1765.966104][T22895] usb 4-1: Product: syz [ 1765.981274][T22895] usb 4-1: Manufacturer: syz [ 1765.997122][T22895] usb 4-1: SerialNumber: syz [ 1766.016903][T22895] usb 4-1: config 0 descriptor?? [ 1766.252024][T19215] [drm:udl_init] *ERROR* Selecting channel failed [ 1766.282409][T26520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.296372][T19215] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1766.315240][T26520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.325172][T19215] [drm] Initialized udl on minor 2 [ 1766.340002][T19215] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1766.361761][T19215] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1766.377705][T22895] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1766.390250][T19215] usb 5-1: USB disconnect, device number 65 [ 1766.408062][T22895] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1767.570326][ T5922] usb 4-1: USB disconnect, device number 47 [ 1768.147371][T26548] FAULT_INJECTION: forcing a failure. [ 1768.147371][T26548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.167775][T26548] CPU: 1 UID: 0 PID: 26548 Comm: syz.4.5509 Tainted: G L syzkaller #0 PREEMPT(full) [ 1768.167800][T26548] Tainted: [L]=SOFTLOCKUP [ 1768.167805][T26548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1768.167812][T26548] Call Trace: [ 1768.167816][T26548] [ 1768.167822][T26548] dump_stack_lvl+0x16c/0x1f0 [ 1768.167843][T26548] should_fail_ex+0x512/0x640 [ 1768.167864][T26548] _copy_to_user+0x32/0xd0 [ 1768.167884][T26548] simple_read_from_buffer+0xcb/0x170 [ 1768.167901][T26548] proc_fail_nth_read+0x197/0x240 [ 1768.167915][T26548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.167928][T26548] ? rw_verify_area+0xcf/0x6c0 [ 1768.167942][T26548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.167954][T26548] vfs_read+0x1e4/0xcf0 [ 1768.167969][T26548] ? __pfx___mutex_lock+0x10/0x10 [ 1768.167987][T26548] ? __pfx_vfs_read+0x10/0x10 [ 1768.168005][T26548] ? __fget_files+0x20e/0x3c0 [ 1768.168047][T26548] ksys_read+0x12a/0x250 [ 1768.168062][T26548] ? __pfx_ksys_read+0x10/0x10 [ 1768.168080][T26548] do_syscall_64+0xcd/0xf80 [ 1768.168097][T26548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.168111][T26548] RIP: 0033:0x7f81c3b8e15c [ 1768.168121][T26548] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1768.168133][T26548] RSP: 002b:00007f81c4941030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1768.168144][T26548] RAX: ffffffffffffffda RBX: 00007f81c3de6090 RCX: 00007f81c3b8e15c [ 1768.168152][T26548] RDX: 000000000000000f RSI: 00007f81c49410a0 RDI: 0000000000000008 [ 1768.168159][T26548] RBP: 00007f81c4941090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.168166][T26548] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000001 [ 1768.168173][T26548] R13: 00007f81c3de6128 R14: 00007f81c3de6090 R15: 00007ffc97f536c8 [ 1768.168189][T26548] [ 1768.683887][T26554] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5511'. [ 1769.045036][T26554] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5511'. [ 1769.114452][T26550] FAULT_INJECTION: forcing a failure. [ 1769.114452][T26550] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.506683][T26567] netlink: 'syz.5.5515': attribute type 1 has an invalid length. [ 1769.514414][T26567] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5515'. [ 1769.938336][T16991] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1769.981395][T26550] CPU: 0 UID: 0 PID: 26550 Comm: syz.0.5507 Tainted: G L syzkaller #0 PREEMPT(full) [ 1769.981432][T26550] Tainted: [L]=SOFTLOCKUP [ 1769.981440][T26550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1769.981452][T26550] Call Trace: [ 1769.981460][T26550] [ 1769.981469][T26550] dump_stack_lvl+0x16c/0x1f0 [ 1769.981503][T26550] should_fail_ex+0x512/0x640 [ 1769.981534][T26550] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1769.981559][T26550] should_failslab+0xc2/0x120 [ 1769.981588][T26550] kmem_cache_alloc_noprof+0x83/0x770 [ 1769.981611][T26550] ? vm_area_dup+0x27/0x8d0 [ 1769.981647][T26550] ? vm_area_dup+0x27/0x8d0 [ 1769.981676][T26550] vm_area_dup+0x27/0x8d0 [ 1769.981709][T26550] __split_vma+0x18e/0x1050 [ 1769.981734][T26550] ? __pfx___split_vma+0x10/0x10 [ 1769.981771][T26550] vms_gather_munmap_vmas+0x1cb/0x1340 [ 1769.981798][T26550] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1769.981825][T26550] ? mas_walk+0x6f5/0x980 [ 1769.981861][T26550] __mmap_region+0x47c/0x2a00 [ 1769.981886][T26550] ? __lock_acquire+0x436/0x2890 [ 1769.981920][T26550] ? __pfx___mmap_region+0x10/0x10 [ 1769.981955][T26550] ? find_held_lock+0x2b/0x80 [ 1769.981988][T26550] ? is_bpf_text_address+0x8a/0x1a0 [ 1769.982013][T26550] ? bpf_ksym_find+0x127/0x1c0 [ 1769.982041][T26550] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1769.982066][T26550] ? is_bpf_text_address+0x94/0x1a0 [ 1769.982157][T26550] mmap_region+0x1ab/0x3f0 [ 1769.982179][T26550] ? __get_unmapped_area+0x267/0x3f0 [ 1769.982210][T26550] do_mmap+0xa3e/0x1210 [ 1769.982242][T26550] ? __pfx_do_mmap+0x10/0x10 [ 1769.982269][T26550] ? __pfx_down_write_killable+0x10/0x10 [ 1769.982308][T26550] vm_mmap_pgoff+0x29e/0x470 [ 1769.982341][T26550] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1769.982368][T26550] ? rcu_is_watching+0x12/0xc0 [ 1769.982388][T26550] ? irqentry_exit+0x1dd/0x8c0 [ 1769.982415][T26550] ? lockdep_hardirqs_on+0x7c/0x110 [ 1769.982443][T26550] ? irqentry_exit+0x1dd/0x8c0 [ 1769.982476][T26550] ksys_mmap_pgoff+0x7d/0x5c0 [ 1769.982509][T26550] __x64_sys_mmap+0x125/0x190 [ 1769.982537][T26550] do_syscall_64+0xcd/0xf80 [ 1769.982567][T26550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.982591][T26550] RIP: 0033:0x7fc75918f749 [ 1769.982608][T26550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1769.982629][T26550] RSP: 002b:00007fc759f62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1769.982650][T26550] RAX: ffffffffffffffda RBX: 00007fc7593e6090 RCX: 00007fc75918f749 [ 1769.982665][T26550] RDX: 0000000001000005 RSI: 000000000000c000 RDI: 0000200000ff4000 [ 1769.982679][T26550] RBP: 00007fc759f62090 R08: ffffffffffffffff R09: 00000000b9ddd000 [ 1769.982694][T26550] R10: 0000000000020031 R11: 0000000000000246 R12: 0000000000000001 [ 1769.982707][T26550] R13: 00007fc7593e6128 R14: 00007fc7593e6090 R15: 00007ffcbe7af6c8 [ 1769.982738][T26550] [ 1770.225394][T26566] syz.4.5514 (26566): drop_caches: 2 [ 1770.686059][T16991] usb 4-1: Using ep0 maxpacket: 32 [ 1770.776618][T16991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1770.796002][T16991] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1770.830552][T16991] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1770.841607][T16991] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1770.849971][T16991] usb 4-1: Product: syz [ 1770.854256][T16991] usb 4-1: Manufacturer: syz [ 1771.000253][T16991] usb 4-1: SerialNumber: syz [ 1771.464174][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5516'. [ 1771.983954][T16991] usb 4-1: config 0 descriptor?? [ 1771.995050][T16991] usb 4-1: can't set config #0, error -71 [ 1772.069861][T16991] usb 4-1: USB disconnect, device number 48 [ 1772.236584][T23185] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1772.375291][T18623] wlan0: Trigger new scan to find an IBSS to join [ 1772.400908][T26583] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55663 sclass=netlink_xfrm_socket pid=26583 comm=syz.1.5521 [ 1772.403407][T23185] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.464406][T23185] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1772.482940][T23185] usb 5-1: New USB device found, idVendor=0582, idProduct=4814, bcdDevice=bb.c4 [ 1772.512474][T23185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.661480][T26588] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5520'. [ 1772.804052][ T30] audit: type=1400 audit(1768086469.704:1984): avc: denied { append } for pid=26578 comm="syz.4.5518" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1772.930349][ T30] audit: type=1400 audit(1768086469.824:1985): avc: denied { block_suspend } for pid=26585 comm="syz.3.5523" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1773.334705][T23185] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 1773.564559][T23185] usb 6-1: device descriptor read/64, error -71 [ 1773.879054][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5525'. [ 1773.915385][T26604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5525'. [ 1773.926279][T23185] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 1774.094327][T23185] usb 6-1: device descriptor read/64, error -71 [ 1774.877228][T26611] netlink: 'syz.3.5526': attribute type 1 has an invalid length. [ 1774.885260][T26611] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5526'. [ 1775.626120][T20839] Bluetooth: hci3: command 0x0406 tx timeout [ 1775.690566][T22895] usb 5-1: USB disconnect, device number 66 [ 1775.763527][T23185] usb usb6-port1: attempt power cycle [ 1775.810189][T26616] overlayfs: missing 'lowerdir' [ 1776.062140][T19215] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1776.187299][ T30] audit: type=1400 audit(1768086473.086:1986): avc: denied { write } for pid=26617 comm="syz.5.5530" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1776.364621][ T30] audit: type=1400 audit(1768086473.116:1987): avc: denied { open } for pid=26617 comm="syz.5.5530" path="/202/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1776.388090][T18606] wlan0: Trigger new scan to find an IBSS to join [ 1776.439419][T26626] cgroup: none used incorrectly [ 1776.484627][T19215] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1776.572826][ T30] audit: type=1400 audit(1768086473.116:1988): avc: denied { ioctl } for pid=26617 comm="syz.5.5530" path="/202/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1776.618233][T19215] usb 2-1: config 0 has no interface number 0 [ 1776.628703][T19215] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1776.660446][T19215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.689609][T19215] usb 2-1: Product: syz [ 1776.712187][T19215] usb 2-1: Manufacturer: syz [ 1776.725743][T19215] usb 2-1: SerialNumber: syz [ 1776.742063][T19215] usb 2-1: config 0 descriptor?? [ 1776.756013][T19215] hub 2-1:0.132: bad descriptor, ignoring hub [ 1776.772311][T19215] hub 2-1:0.132: probe with driver hub failed with error -5 [ 1776.802651][T19215] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input95 [ 1776.992799][T23185] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1777.005915][T26637] netlink: 'syz.3.5528': attribute type 1 has an invalid length. [ 1777.027874][T26637] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1777.039211][T26637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5528'. [ 1777.083374][ T30] audit: type=1400 audit(1768086473.986:1989): avc: denied { bind } for pid=26639 comm="syz.3.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1777.103102][ T30] audit: type=1400 audit(1768086473.986:1990): avc: denied { write } for pid=26639 comm="syz.3.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1777.137851][ T30] audit: type=1400 audit(1768086474.036:1991): avc: denied { create } for pid=26639 comm="syz.3.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1777.142571][T19215] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1777.168668][ T30] audit: type=1400 audit(1768086474.066:1992): avc: denied { write } for pid=26639 comm="syz.3.5535" path="socket:[115115]" dev="sockfs" ino=115115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1777.194476][T23185] usb 1-1: Using ep0 maxpacket: 16 [ 1777.202717][ T30] audit: type=1400 audit(1768086474.066:1993): avc: denied { read } for pid=26639 comm="syz.3.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1777.223189][T23185] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.233572][T23185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1777.244724][T23185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1777.254402][T23185] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1777.264329][T23185] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1777.278365][T23185] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1777.287469][T23185] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1777.295469][T23185] usb 1-1: Manufacturer: syz [ 1777.301509][T23185] usb 1-1: config 0 descriptor?? [ 1777.314116][T19215] usb 6-1: config 151 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.324998][T22895] usb 2-1: USB disconnect, device number 47 [ 1777.331918][T19215] usb 6-1: config 151 has 0 interfaces, different from the descriptor's value: 1 [ 1777.342266][T19215] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1777.351781][T19215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.534944][T18606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.562291][T23185] rc_core: IR keymap rc-hauppauge not found [ 1777.568277][T23185] Registered IR keymap rc-empty [ 1777.592806][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1777.612387][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1777.630180][T26644] FAULT_INJECTION: forcing a failure. [ 1777.630180][T26644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1777.644260][T23185] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1777.655967][T26644] CPU: 1 UID: 0 PID: 26644 Comm: syz.4.5536 Tainted: G L syzkaller #0 PREEMPT(full) [ 1777.655998][T26644] Tainted: [L]=SOFTLOCKUP [ 1777.656006][T26644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1777.656019][T26644] Call Trace: [ 1777.656027][T26644] [ 1777.656036][T26644] dump_stack_lvl+0x16c/0x1f0 [ 1777.656070][T26644] should_fail_ex+0x512/0x640 [ 1777.656092][T26644] _copy_from_user+0x2e/0xd0 [ 1777.656111][T26644] copy_msghdr_from_user+0x98/0x160 [ 1777.656125][T26644] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1777.656155][T26644] ___sys_sendmsg+0xfe/0x1d0 [ 1777.656179][T26644] ? __pfx____sys_sendmsg+0x10/0x10 [ 1777.656236][T26644] __sys_sendmsg+0x16d/0x220 [ 1777.656259][T26644] ? __pfx___sys_sendmsg+0x10/0x10 [ 1777.656281][T26644] do_syscall_64+0xcd/0xf80 [ 1777.656307][T26644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.656330][T26644] RIP: 0033:0x7f81c3b8f749 [ 1777.656349][T26644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1777.656370][T26644] RSP: 002b:00007f81c4962038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1777.656383][T26644] RAX: ffffffffffffffda RBX: 00007f81c3de5fa0 RCX: 00007f81c3b8f749 [ 1777.656391][T26644] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 1777.656398][T26644] RBP: 00007f81c4962090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.656406][T26644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.656412][T26644] R13: 00007f81c3de6038 R14: 00007f81c3de5fa0 R15: 00007ffc97f536c8 [ 1777.656428][T26644] [ 1777.825337][T23185] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input96 [ 1777.839962][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1777.872289][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1777.892671][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1777.919645][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1777.936057][T19215] usb 6-1: string descriptor 0 read error: -71 [ 1777.948348][T19215] usb 6-1: USB disconnect, device number 6 [ 1777.962616][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1777.996356][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1778.177016][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1778.202121][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1778.222028][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1779.053838][T23185] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1779.107181][T23185] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1779.159473][T23185] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1779.323841][T23185] usb 1-1: USB disconnect, device number 24 [ 1779.634973][T26670] netlink: 'syz.0.5545': attribute type 1 has an invalid length. [ 1779.925463][T26672] vxcan1 speed is unknown, defaulting to 1000 [ 1780.114965][T19215] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1780.190291][T26672] virt_wifi0 speed is unknown, defaulting to 1000 [ 1780.198744][T26672] lo speed is unknown, defaulting to 1000 [ 1780.265272][T26674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5545'. [ 1780.311590][T26670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1780.460908][T19215] usb 6-1: Using ep0 maxpacket: 32 [ 1780.476881][T19215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1780.500051][T19215] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1780.532173][T19215] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1780.532206][T19215] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1780.532230][T19215] usb 6-1: Product: syz [ 1780.532247][T19215] usb 6-1: Manufacturer: syz [ 1780.532265][T19215] usb 6-1: SerialNumber: syz [ 1780.536795][T19215] usb 6-1: config 0 descriptor?? [ 1780.611875][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1780.611892][ T30] audit: type=1400 audit(1768086477.518:1995): avc: denied { connect } for pid=26686 comm="syz.1.5546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1780.644881][T26691] pimreg: entered allmulticast mode [ 1780.756448][T26696] SELinux: policydb string does not match my string SE Linux [ 1780.756513][T26696] SELinux: failed to load policy [ 1780.780175][T26662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.784225][T26662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.787461][T26698] ieee802154 phy1 wpan1: encryption failed: -22 [ 1781.202860][T26691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1781.472343][T19218] lo speed is unknown, defaulting to 1000 [ 1781.478103][T19218] syz0: Port: 1 Link DOWN [ 1781.490911][T18606] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.503069][T19197] usb 6-1: USB disconnect, device number 7 [ 1781.570664][T18606] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.579766][T18606] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.614760][T18606] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.820389][T26708] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1782.017060][T26708] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1782.044815][T26708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.118142][T26708] usb 4-1: config 0 descriptor?? [ 1782.800983][T26708] [drm:udl_init] *ERROR* Selecting channel failed [ 1782.809918][T22893] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1782.824767][T26708] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1782.862107][T26708] [drm] Initialized udl on minor 2 [ 1782.883073][T26708] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1782.900627][T26708] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1782.922518][T26714] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1782.932426][T26708] usb 4-1: USB disconnect, device number 49 [ 1782.949896][T26714] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1782.965529][T22893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.992393][T22893] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1783.006671][T22893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1783.019754][T22893] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1783.119635][T26714] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1783.134326][T22893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1783.172314][T22893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.198860][T22893] usb 2-1: Product: syz [ 1783.212554][T22893] usb 2-1: Manufacturer: syz [ 1783.266837][T22893] usb 2-1: SerialNumber: syz [ 1783.316948][T26714] usb 1-1: Using ep0 maxpacket: 8 [ 1784.119541][T22893] usb 2-1: config 0 descriptor?? [ 1784.126853][T26714] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1784.136667][T22893] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 1784.149265][T26714] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1784.167312][T22893] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1784.186627][T26714] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1784.217340][T22893] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1784.247337][T26714] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1784.296627][T26714] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1784.372294][T26714] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1784.382589][T26714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.687993][ T30] audit: type=1400 audit(1768086482.591:1996): avc: denied { listen } for pid=26743 comm="syz.4.5559" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1785.689179][T26748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1785.774714][T26748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1785.804965][T26751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1785.815470][T26714] usb 1-1: usb_control_msg returned -32 [ 1785.834467][T26714] usbtmc 1-1:16.0: can't read capabilities [ 1786.208621][T26714] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1786.369573][T26714] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1786.384562][T26714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1786.395934][T26714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1786.453454][T26714] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1786.581131][T26714] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1786.688222][T26714] usb 4-1: Manufacturer: syz [ 1786.719580][T26714] usb 4-1: config 0 descriptor?? [ 1786.833010][ T5922] usb 2-1: USB disconnect, device number 48 [ 1786.840066][ T5922] garmin_gps 2-1:0.0: device disconnected [ 1786.876345][T26764] 9p: Bad value for 'rfdno' [ 1787.349137][ T30] audit: type=1400 audit(1768086484.151:1997): avc: denied { append } for pid=26771 comm="syz.1.5567" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1787.677039][ T5924] usb 1-1: USB disconnect, device number 25 [ 1787.703101][T26780] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1787.813165][ T30] audit: type=1400 audit(1768086484.722:1998): avc: denied { create } for pid=26786 comm="syz.5.5570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1787.888349][T26787] FAULT_INJECTION: forcing a failure. [ 1787.888349][T26787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1787.907047][T26787] CPU: 0 UID: 0 PID: 26787 Comm: syz.5.5570 Tainted: G L syzkaller #0 PREEMPT(full) [ 1787.907083][T26787] Tainted: [L]=SOFTLOCKUP [ 1787.907091][T26787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1787.907102][T26787] Call Trace: [ 1787.907110][T26787] [ 1787.907118][T26787] dump_stack_lvl+0x16c/0x1f0 [ 1787.907153][T26787] should_fail_ex+0x512/0x640 [ 1787.907196][T26787] _copy_to_user+0x32/0xd0 [ 1787.907231][T26787] simple_read_from_buffer+0xcb/0x170 [ 1787.907264][T26787] proc_fail_nth_read+0x197/0x240 [ 1787.907289][T26787] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1787.907315][T26787] ? rw_verify_area+0xcf/0x6c0 [ 1787.907338][T26787] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1787.907361][T26787] vfs_read+0x1e4/0xcf0 [ 1787.907388][T26787] ? __pfx___mutex_lock+0x10/0x10 [ 1787.907421][T26787] ? __pfx_vfs_read+0x10/0x10 [ 1787.907455][T26787] ? __fget_files+0x20e/0x3c0 [ 1787.907494][T26787] ksys_read+0x12a/0x250 [ 1787.907519][T26787] ? __pfx_ksys_read+0x10/0x10 [ 1787.907554][T26787] do_syscall_64+0xcd/0xf80 [ 1787.907585][T26787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.907608][T26787] RIP: 0033:0x7f497098e15c [ 1787.907625][T26787] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1787.907646][T26787] RSP: 002b:00007f4971807030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1787.907667][T26787] RAX: ffffffffffffffda RBX: 00007f4970be5fa0 RCX: 00007f497098e15c [ 1787.907682][T26787] RDX: 000000000000000f RSI: 00007f49718070a0 RDI: 0000000000000004 [ 1787.907696][T26787] RBP: 00007f4971807090 R08: 0000000000000000 R09: 0000000000000000 [ 1787.907709][T26787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1787.907723][T26787] R13: 00007f4970be6038 R14: 00007f4970be5fa0 R15: 00007ffd7cec3c58 [ 1787.907754][T26787] [ 1788.174267][T26790] overlayfs: missing 'lowerdir' [ 1789.030505][T26801] mkiss: ax0: crc mode is auto. [ 1789.063586][ T5922] usb 4-1: USB disconnect, device number 50 [ 1789.134419][T26803] 9p: Bad value for 'rfdno' [ 1789.148520][T26714] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1789.249139][ T30] audit: type=1400 audit(1768086486.162:1999): avc: denied { read } for pid=26808 comm="syz.0.5579" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1789.250110][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1789.298331][ T30] audit: type=1400 audit(1768086486.182:2000): avc: denied { open } for pid=26808 comm="syz.0.5579" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1789.331743][T26714] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1789.344752][T26714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1789.356587][T26714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1789.365178][ T30] audit: type=1400 audit(1768086486.182:2001): avc: denied { ioctl } for pid=26808 comm="syz.0.5579" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1789.371199][T26714] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1789.404460][T26714] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1789.422339][T26714] usb 5-1: Manufacturer: syz [ 1789.429397][T26714] usb 5-1: config 0 descriptor?? [ 1789.656499][T26714] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1789.706297][ T5922] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1789.714035][T26795] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1789.720212][T26795] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1789.731652][T26795] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1789.737639][T26795] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1789.750229][T26795] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1789.756359][T26795] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1789.764730][T26795] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1789.773221][T26795] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1789.806224][T26714] usb 1-1: Using ep0 maxpacket: 8 [ 1789.812823][T26714] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1789.826230][T23185] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1789.833987][T26714] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1789.847105][T26714] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1789.858462][T26714] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1789.869354][T26714] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1789.883612][T26714] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1789.893154][T26714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.907067][ T5922] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1789.916191][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.927628][ T5922] usb 4-1: config 0 descriptor?? [ 1789.956855][T26819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.964178][T26819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.972743][T26819] bridge0: entered allmulticast mode [ 1789.985968][T26819] bridge_slave_1: left allmulticast mode [ 1789.991829][T26819] bridge_slave_1: left promiscuous mode [ 1789.996125][T23185] usb 2-1: Using ep0 maxpacket: 32 [ 1790.002831][T26819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.028710][T26820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1790.044484][T23185] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1790.061140][T23185] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1790.070564][T23185] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1790.074133][T26819] bridge_slave_0: left allmulticast mode [ 1790.084732][T23185] usb 2-1: Product: syz [ 1790.089406][T23185] usb 2-1: Manufacturer: syz [ 1790.094120][T23185] usb 2-1: SerialNumber: syz [ 1790.101437][T23185] usb 2-1: config 0 descriptor?? [ 1790.106500][T26819] bridge_slave_0: left promiscuous mode [ 1790.112859][T26819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.113140][T26816] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1790.203766][T26823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1790.212948][T26823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.221864][T26714] usb 1-1: usb_control_msg returned -32 [ 1790.227789][T26714] usbtmc 1-1:16.0: can't read capabilities [ 1790.289281][ T30] audit: type=1400 audit(1768086487.203:2002): avc: denied { create } for pid=26824 comm="syz.5.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1790.320066][T26825] sctp: [Deprecated]: syz.5.5584 (pid 26825) Use of int in max_burst socket option deprecated. [ 1790.320066][T26825] Use struct sctp_assoc_value instead [ 1790.337786][ T30] audit: type=1400 audit(1768086487.253:2003): avc: denied { write } for pid=26824 comm="syz.5.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1790.354082][ T5922] [drm:udl_init] *ERROR* Selecting channel failed [ 1790.379028][ T5922] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1790.386025][ T5922] [drm] Initialized udl on minor 2 [ 1790.392493][ T5922] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1790.401438][ T5922] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1790.409317][T26714] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1790.419737][ T5922] usb 4-1: USB disconnect, device number 51 [ 1790.426479][T26714] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1790.553596][T26714] usb 2-1: USB disconnect, device number 49 [ 1790.615840][ T5924] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1790.779204][ T5924] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.20 [ 1790.788488][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.796564][ T5924] usb 6-1: Product: syz [ 1790.800818][ T5924] usb 6-1: Manufacturer: syz [ 1790.805392][ T5924] usb 6-1: SerialNumber: syz [ 1790.811778][ T5924] usb 6-1: config 0 descriptor?? [ 1791.024495][T26825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1791.034858][T26825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1791.050115][T26825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1791.060753][T26825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1791.080130][ T5924] usb 6-1: USB disconnect, device number 8 [ 1791.445491][ T5924] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1791.623160][ T5924] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1791.633236][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.658496][ T5924] usb 2-1: config 0 descriptor?? [ 1791.883610][T26837] mkiss: ax0: crc mode is auto. [ 1791.901032][T23185] usb 5-1: USB disconnect, device number 67 [ 1792.039851][T26844] 9p: Bad value for 'rfdno' [ 1792.086400][ T5924] [drm:udl_init] *ERROR* Selecting channel failed [ 1792.114918][ T5924] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1792.128994][ T5924] [drm] Initialized udl on minor 2 [ 1792.136564][ T5924] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1792.147577][ T5924] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1792.156292][T19197] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1792.164285][T19197] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1792.175914][ T5924] usb 2-1: USB disconnect, device number 50 [ 1792.199955][T26850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5592'. [ 1792.209150][T26851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5592'. [ 1792.245014][T16991] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1792.426831][T16991] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.450870][T16991] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1792.473513][T16991] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1792.495626][T16991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1792.511421][T16991] usb 4-1: SerialNumber: syz [ 1792.562951][ T5922] usb 1-1: USB disconnect, device number 26 [ 1792.662392][T26860] No such timeout policy "syz0" [ 1792.672754][ T30] audit: type=1400 audit(1768086489.564:2004): avc: denied { create } for pid=26856 comm="syz.4.5594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1792.911459][ T30] audit: type=1400 audit(1768086489.564:2005): avc: denied { setopt } for pid=26856 comm="syz.4.5594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1792.976410][T16991] usb 4-1: 0:2 : does not exist [ 1793.018004][T16991] usb 4-1: USB disconnect, device number 52 [ 1793.026492][T26863] FAULT_INJECTION: forcing a failure. [ 1793.026492][T26863] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.043382][T26863] CPU: 1 UID: 0 PID: 26863 Comm: syz.1.5596 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.043418][T26863] Tainted: [L]=SOFTLOCKUP [ 1793.043426][T26863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1793.043439][T26863] Call Trace: [ 1793.043447][T26863] [ 1793.043456][T26863] dump_stack_lvl+0x16c/0x1f0 [ 1793.043491][T26863] should_fail_ex+0x512/0x640 [ 1793.043522][T26863] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1793.043549][T26863] should_failslab+0xc2/0x120 [ 1793.043576][T26863] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1793.043599][T26863] ? __alloc_skb+0x156/0x410 [ 1793.043625][T26863] ? __alloc_skb+0x156/0x410 [ 1793.043650][T26863] __alloc_skb+0x156/0x410 [ 1793.043668][T26863] ? __alloc_skb+0x35d/0x410 [ 1793.043687][T26863] ? __pfx___alloc_skb+0x10/0x10 [ 1793.043718][T26863] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1793.043747][T26863] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1793.043782][T26863] netlink_alloc_large_skb+0x69/0x140 [ 1793.043813][T26863] netlink_sendmsg+0x698/0xdd0 [ 1793.043845][T26863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1793.043883][T26863] ____sys_sendmsg+0xa5d/0xc30 [ 1793.043913][T26863] ? copy_msghdr_from_user+0x10a/0x160 [ 1793.043936][T26863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1793.043976][T26863] ___sys_sendmsg+0x134/0x1d0 [ 1793.044002][T26863] ? __pfx____sys_sendmsg+0x10/0x10 [ 1793.044059][T26863] __sys_sendmsg+0x16d/0x220 [ 1793.044082][T26863] ? __pfx___sys_sendmsg+0x10/0x10 [ 1793.044124][T26863] do_syscall_64+0xcd/0xf80 [ 1793.044154][T26863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.044174][T26863] RIP: 0033:0x7fdca478f749 [ 1793.044190][T26863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1793.044209][T26863] RSP: 002b:00007fdca5658038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1793.044230][T26863] RAX: ffffffffffffffda RBX: 00007fdca49e5fa0 RCX: 00007fdca478f749 [ 1793.044245][T26863] RDX: 0000000000000008 RSI: 0000200000000580 RDI: 0000000000000003 [ 1793.044259][T26863] RBP: 00007fdca5658090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.044273][T26863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.044287][T26863] R13: 00007fdca49e6038 R14: 00007fdca49e5fa0 R15: 00007ffde9993d08 [ 1793.044315][T26863] [ 1793.494446][ T5922] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1793.529284][T26866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1793.654463][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 1793.661350][ T5922] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1793.671940][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1793.698965][ T5922] usb 1-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 1793.718510][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.743311][ T5922] usb 1-1: config 0 descriptor?? [ 1793.766949][ T5922] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1793.830621][T26871] FAULT_INJECTION: forcing a failure. [ 1793.830621][T26871] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.870313][T26871] CPU: 1 UID: 0 PID: 26871 Comm: syz.3.5599 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.870349][T26871] Tainted: [L]=SOFTLOCKUP [ 1793.870357][T26871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1793.870370][T26871] Call Trace: [ 1793.870377][T26871] [ 1793.870385][T26871] dump_stack_lvl+0x16c/0x1f0 [ 1793.870419][T26871] should_fail_ex+0x512/0x640 [ 1793.870451][T26871] ? fs_reclaim_acquire+0xae/0x150 [ 1793.870482][T26871] should_failslab+0xc2/0x120 [ 1793.870511][T26871] kmem_cache_alloc_noprof+0x83/0x770 [ 1793.870534][T26871] ? __pfx_map_id_range_down+0x10/0x10 [ 1793.870557][T26871] ? security_inode_alloc+0x3b/0x2b0 [ 1793.870588][T26871] ? security_inode_alloc+0x3b/0x2b0 [ 1793.870620][T26871] security_inode_alloc+0x3b/0x2b0 [ 1793.870646][T26871] inode_init_always_gfp+0xced/0x1040 [ 1793.870681][T26871] alloc_inode+0x86/0x240 [ 1793.870702][T26871] sock_alloc+0x40/0x280 [ 1793.870727][T26871] __sock_create+0xc2/0x8a0 [ 1793.870758][T26871] __sys_socket+0x14d/0x260 [ 1793.870785][T26871] ? fput+0x70/0xf0 [ 1793.870802][T26871] ? __pfx___sys_socket+0x10/0x10 [ 1793.870830][T26871] ? ksys_write+0x1ac/0x250 [ 1793.870854][T26871] ? __pfx_ksys_write+0x10/0x10 [ 1793.870878][T26871] ? rcu_is_watching+0x12/0xc0 [ 1793.870903][T26871] __x64_sys_socket+0x72/0xb0 [ 1793.870928][T26871] ? lockdep_hardirqs_on+0x7c/0x110 [ 1793.870955][T26871] do_syscall_64+0xcd/0xf80 [ 1793.870984][T26871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.871003][T26871] RIP: 0033:0x7ff5ed58f749 [ 1793.871020][T26871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1793.871039][T26871] RSP: 002b:00007ff5ee48a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1793.871060][T26871] RAX: ffffffffffffffda RBX: 00007ff5ed7e5fa0 RCX: 00007ff5ed58f749 [ 1793.871075][T26871] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000011 [ 1793.871088][T26871] RBP: 00007ff5ee48a090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.871099][T26871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.871110][T26871] R13: 00007ff5ed7e6038 R14: 00007ff5ed7e5fa0 R15: 00007fff6726e258 [ 1793.871136][T26871] [ 1794.089093][T26871] socket: no more sockets [ 1794.593949][ T5922] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1794.748557][ T5922] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1794.759453][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1794.771519][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1794.787573][ T5922] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1794.802945][ T5922] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1794.812431][ T5922] usb 4-1: Manufacturer: syz [ 1794.823918][ T5922] usb 4-1: config 0 descriptor?? [ 1794.941344][T26882] mkiss: ax0: crc mode is auto. [ 1795.659829][T26890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5603'. [ 1795.702035][T26887] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1795.832181][T23185] usb 1-1: USB disconnect, device number 27 [ 1796.006467][T26895] vxcan1 speed is unknown, defaulting to 1000 [ 1796.251382][T26895] virt_wifi0 speed is unknown, defaulting to 1000 [ 1796.259460][T26895] lo speed is unknown, defaulting to 1000 [ 1796.273590][ T5922] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1796.283204][T23185] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1796.383083][T19197] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1796.426100][ T5922] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1796.435582][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.443676][ T5922] usb 5-1: Product: syz [ 1796.447881][ T5922] usb 5-1: Manufacturer: syz [ 1796.452466][ T5922] usb 5-1: SerialNumber: syz [ 1796.452857][T23185] usb 1-1: Using ep0 maxpacket: 8 [ 1796.465289][T23185] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1796.466050][ T5922] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1796.473722][T23185] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1796.492502][T23185] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1796.495180][T26708] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1796.502482][T23185] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1796.521473][T23185] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1796.535115][T23185] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1796.544406][T23185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.572862][T19197] usb 2-1: Using ep0 maxpacket: 32 [ 1796.582091][T19197] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1796.591204][T19197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.599270][T19197] usb 2-1: Product: syz [ 1796.603815][T19197] usb 2-1: Manufacturer: syz [ 1796.608438][T19197] usb 2-1: SerialNumber: syz [ 1796.613157][ T5924] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1796.623481][T19197] usb 2-1: config 0 descriptor?? [ 1796.631502][T19197] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1796.715830][T26902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.725420][T26902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1796.749605][T18272] usb 5-1: USB disconnect, device number 68 [ 1796.784586][ T5924] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1796.796207][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.824224][ T5924] usb 6-1: config 0 descriptor?? [ 1796.830562][T26906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.843853][T26906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1796.866006][T23185] usb 1-1: usb_control_msg returned -32 [ 1796.871640][T23185] usbtmc 1-1:16.0: can't read capabilities [ 1797.113497][T26908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1797.369011][ T5924] [drm:udl_init] *ERROR* Selecting channel failed [ 1797.512970][ T5924] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1797.529066][ T5924] [drm] Initialized udl on minor 2 [ 1797.552916][ T5924] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1797.562475][ T5924] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1797.570805][T26708] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1797.571406][T23185] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1797.587901][T26708] ath9k_htc: Failed to initialize the device [ 1797.590335][ T5924] usb 6-1: USB disconnect, device number 9 [ 1797.601306][T18272] usb 5-1: ath9k_htc: USB layer deinitialized [ 1797.610781][T23185] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1797.619981][ T5922] usb 4-1: USB disconnect, device number 53 [ 1798.136151][T26917] Invalid source name [ 1798.140255][T26917] UBIFS error (pid: 26917): cannot open "./file0", error -22 [ 1798.146881][T26917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5610'. [ 1798.192174][ T30] audit: type=1400 audit(1768086495.037:2006): avc: denied { create } for pid=26912 comm="syz.4.5610" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1798.236668][ T30] audit: type=1400 audit(1768086495.047:2007): avc: denied { mounton } for pid=26912 comm="syz.4.5610" path="/523/file0" dev="tmpfs" ino=2816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1798.329330][T19197] gspca_topro: reg_r err -71 [ 1798.340295][T19197] gspca_topro: Sensor soi763a [ 1798.356359][T19197] usb 2-1: USB disconnect, device number 51 [ 1799.103196][T19197] usb 1-1: USB disconnect, device number 28 [ 1799.224457][T26932] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1799.232788][T26932] vxfs: WRONG superblock magic 00000000 at 1 [ 1799.238933][T26932] vxfs: WRONG superblock magic 00000000 at 8 [ 1799.244961][T26932] vxfs: can't find superblock. [ 1799.510198][T26939] FAULT_INJECTION: forcing a failure. [ 1799.510198][T26939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1799.532799][T26939] CPU: 0 UID: 0 PID: 26939 Comm: syz.4.5617 Tainted: G L syzkaller #0 PREEMPT(full) [ 1799.532834][T26939] Tainted: [L]=SOFTLOCKUP [ 1799.532843][T26939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1799.532857][T26939] Call Trace: [ 1799.532864][T26939] [ 1799.532873][T26939] dump_stack_lvl+0x16c/0x1f0 [ 1799.532902][T26939] should_fail_ex+0x512/0x640 [ 1799.532923][T26939] should_fail_alloc_page+0xe7/0x130 [ 1799.532940][T26939] prepare_alloc_pages+0x401/0x670 [ 1799.532956][T26939] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1799.532972][T26939] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1799.532988][T26939] ? lock_acquire+0x179/0x330 [ 1799.533005][T26939] ? do_raw_spin_lock+0x12c/0x2b0 [ 1799.533021][T26939] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1799.533032][T26939] ? find_held_lock+0x2b/0x80 [ 1799.533055][T26939] ? debug_check_no_obj_freed+0x31f/0x600 [ 1799.533073][T26939] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1799.533088][T26939] ? policy_nodemask+0xea/0x4e0 [ 1799.533105][T26939] alloc_pages_mpol+0x1fb/0x550 [ 1799.533121][T26939] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1799.533137][T26939] ? _raw_spin_unlock+0x28/0x50 [ 1799.533150][T26939] ? __free_frozen_pages+0x817/0x1170 [ 1799.533179][T26939] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1799.533209][T26939] alloc_migration_target_by_mpol+0x246/0x500 [ 1799.533243][T26939] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1799.533281][T26939] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 1799.533313][T26939] ? __pfx___might_resched+0x10/0x10 [ 1799.533334][T26939] ? folio_unlock+0x7d/0xd0 [ 1799.533372][T26939] migrate_pages_batch+0x3bc/0x3bb0 [ 1799.533407][T26939] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1799.533452][T26939] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1799.533489][T26939] ? __pfx_walk_pgd_range+0x10/0x10 [ 1799.533516][T26939] migrate_pages_sync+0x12d/0x8a0 [ 1799.533549][T26939] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1799.533588][T26939] ? queue_pages_test_walk+0x279/0x410 [ 1799.533618][T26939] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1799.533651][T26939] ? walk_page_test+0x9b/0x180 [ 1799.533684][T26939] migrate_pages+0x1b0b/0x2350 [ 1799.533719][T26939] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1799.533761][T26939] ? __pfx_migrate_pages+0x10/0x10 [ 1799.533793][T26939] ? mas_next_slot+0x12d3/0x1cb0 [ 1799.533824][T26939] ? find_held_lock+0x2b/0x80 [ 1799.533878][T26939] ? up_write+0x282/0x4e0 [ 1799.533909][T26939] do_mbind+0x6e2/0xf20 [ 1799.533949][T26939] ? __pfx_do_mbind+0x10/0x10 [ 1799.533979][T26939] ? find_held_lock+0x2b/0x80 [ 1799.534025][T26939] ? __pfx_get_nodes+0x10/0x10 [ 1799.534051][T26939] ? __fget_files+0x20e/0x3c0 [ 1799.534086][T26939] kernel_mbind+0x1e3/0x1f0 [ 1799.534120][T26939] ? __pfx_kernel_mbind+0x10/0x10 [ 1799.534161][T26939] do_syscall_64+0xcd/0xf80 [ 1799.534191][T26939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.534214][T26939] RIP: 0033:0x7f81c3b8f749 [ 1799.534231][T26939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1799.534251][T26939] RSP: 002b:00007f81c4962038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1799.534276][T26939] RAX: ffffffffffffffda RBX: 00007f81c3de5fa0 RCX: 00007f81c3b8f749 [ 1799.534292][T26939] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 1799.534305][T26939] RBP: 00007f81c4962090 R08: 0000000000000000 R09: 0000000000000002 [ 1799.534318][T26939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.534331][T26939] R13: 00007f81c3de6038 R14: 00007f81c3de5fa0 R15: 00007ffc97f536c8 [ 1799.534362][T26939] [ 1800.059760][ T30] audit: type=1326 audit(1768086496.968:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26931 comm="syz.0.5615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc75918f749 code=0x0 [ 1800.276509][T26959] pimreg: entered allmulticast mode [ 1801.940581][ T5924] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1802.126919][ T5924] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1802.150650][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.186168][ T5924] usb 6-1: config 0 descriptor?? [ 1802.365807][ T30] audit: type=1400 audit(1768086499.279:2009): avc: denied { getopt } for pid=26977 comm="syz.1.5626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1802.981671][T19216] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1803.014425][ T5924] [drm:udl_init] *ERROR* Selecting channel failed [ 1803.038583][ T5924] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1803.048520][ T5924] [drm] Initialized udl on minor 2 [ 1803.056909][ T5924] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1803.070115][ T5924] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1803.078861][T19197] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1803.099227][T19197] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1803.108332][ T5924] usb 6-1: USB disconnect, device number 10 [ 1803.127284][ T30] audit: type=1400 audit(1768086500.039:2010): avc: denied { create } for pid=26983 comm="syz.3.5627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1803.128252][T26984] FAULT_INJECTION: forcing a failure. [ 1803.128252][T26984] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.160110][T26984] CPU: 0 UID: 0 PID: 26984 Comm: syz.3.5627 Tainted: G L syzkaller #0 PREEMPT(full) [ 1803.160145][T26984] Tainted: [L]=SOFTLOCKUP [ 1803.160154][T26984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1803.160167][T26984] Call Trace: [ 1803.160174][T26984] [ 1803.160182][T26984] dump_stack_lvl+0x16c/0x1f0 [ 1803.160215][T26984] should_fail_ex+0x512/0x640 [ 1803.160246][T26984] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1803.160272][T26984] should_failslab+0xc2/0x120 [ 1803.160300][T26984] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1803.160318][T26984] ? selinux_socket_create+0xf0/0x540 [ 1803.160346][T26984] ? sock_alloc_inode+0x25/0x1c0 [ 1803.160377][T26984] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1803.160402][T26984] ? sock_alloc_inode+0x25/0x1c0 [ 1803.160427][T26984] sock_alloc_inode+0x25/0x1c0 [ 1803.160461][T26984] alloc_inode+0x64/0x240 [ 1803.160486][T26984] sock_alloc+0x40/0x280 [ 1803.160510][T26984] __sock_create+0xc2/0x8a0 [ 1803.160545][T26984] __sys_socket+0x14d/0x260 [ 1803.160571][T26984] ? __pfx___sys_socket+0x10/0x10 [ 1803.160600][T26984] ? do_user_addr_fault+0x843/0x1370 [ 1803.160632][T26984] __x64_sys_socket+0x72/0xb0 [ 1803.160659][T26984] ? lockdep_hardirqs_on+0x7c/0x110 [ 1803.160687][T26984] do_syscall_64+0xcd/0xf80 [ 1803.160713][T26984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.160736][T26984] RIP: 0033:0x7ff5ed591667 [ 1803.160753][T26984] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1803.160772][T26984] RSP: 002b:00007ff5ee488fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1803.160791][T26984] RAX: ffffffffffffffda RBX: 00007ff5ed7e5fa0 RCX: 00007ff5ed591667 [ 1803.160804][T26984] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1803.160816][T26984] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1803.160828][T26984] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000001 [ 1803.160842][T26984] R13: 00007ff5ed7e6038 R14: 00007ff5ed7e5fa0 R15: 00007fff6726e258 [ 1803.160872][T26984] [ 1803.367943][T26984] socket: no more sockets [ 1803.919614][T19216] usb 5-1: Using ep0 maxpacket: 8 [ 1804.300062][T19216] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1804.330529][T19216] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1804.348971][T19216] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1804.369535][T19216] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1804.387362][T19216] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1804.401656][T19216] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1804.411408][T19216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.584911][T26990] vxfs: WRONG superblock magic 00000000 at 1 [ 1804.591085][T26990] vxfs: WRONG superblock magic 00000000 at 8 [ 1804.597079][T26990] vxfs: can't find superblock. [ 1805.375646][T19216] usb 5-1: usb_control_msg returned -71 [ 1805.609607][T19216] usbtmc 5-1:16.0: can't read capabilities [ 1805.758238][T16991] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1805.758588][T19216] usb 5-1: USB disconnect, device number 69 [ 1805.885425][T27008] syzkaller0: entered promiscuous mode [ 1805.892053][T27008] syzkaller0: entered allmulticast mode [ 1805.906201][T27007] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5635'. [ 1805.931928][T16991] usb 6-1: Using ep0 maxpacket: 32 [ 1805.955739][T16991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1805.988370][T16991] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1806.262706][T16991] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1806.262726][T16991] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1806.262739][T16991] usb 6-1: Product: syz [ 1806.262748][T16991] usb 6-1: Manufacturer: syz [ 1806.262757][T16991] usb 6-1: SerialNumber: syz [ 1806.264213][T16991] usb 6-1: config 0 descriptor?? [ 1806.478347][T16991] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1806.667488][T16991] usb 4-1: Using ep0 maxpacket: 32 [ 1806.712242][T16991] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1806.751970][T16991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1806.789618][T16991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 1806.856497][T16991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1806.892401][T16991] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1806.933190][T16991] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1806.971887][T16991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.009572][T16991] usb 4-1: Product: syz [ 1807.020388][T16991] usb 4-1: Manufacturer: syz [ 1807.048741][T16991] usb 4-1: SerialNumber: syz [ 1807.095413][T16991] usb 4-1: config 0 descriptor?? [ 1807.111020][T26998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.172104][T26998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.532579][T27023] random: crng reseeded on system resumption [ 1807.862890][ T5924] usb 4-1: USB disconnect, device number 54 [ 1808.192237][T19197] usb 6-1: USB disconnect, device number 11 [ 1808.307044][T16991] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1808.347027][ T5924] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1808.467045][T16991] usb 2-1: Using ep0 maxpacket: 8 [ 1808.489497][T16991] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1808.501238][T16991] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1808.536278][ T5924] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1808.551923][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.560174][T16991] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1808.593986][T16991] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1808.631459][T16991] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1808.647113][T16991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.721497][ T5924] usb 4-1: config 0 descriptor?? [ 1808.951209][T16991] usb 2-1: usb_control_msg returned -32 [ 1809.116724][T16991] usbtmc 2-1:16.0: can't read capabilities [ 1809.359705][ T30] audit: type=1400 audit(1768086506.282:2011): avc: denied { connect } for pid=27027 comm="syz.1.5639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1809.657033][T27041] vxfs: WRONG superblock magic 00000000 at 1 [ 1809.663147][T27041] vxfs: WRONG superblock magic 00000000 at 8 [ 1809.669160][T27041] vxfs: can't find superblock. [ 1810.019831][T19216] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1810.170097][ T5922] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1810.177807][T19216] usb 6-1: Using ep0 maxpacket: 8 [ 1810.186619][T19216] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1810.195051][T19216] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1810.214698][T19216] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1810.238694][T19216] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1810.258151][T19216] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1810.288365][T19216] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1810.305579][T19216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.354641][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.375175][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1810.386819][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1810.407640][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1810.455052][ T5922] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1810.472765][ T5922] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1810.490278][ T5922] usb 1-1: Manufacturer: syz [ 1810.497796][ T5922] usb 1-1: config 0 descriptor?? [ 1810.609628][T27049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.627597][T27049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.646099][T19216] usb 6-1: usb_control_msg returned -32 [ 1810.651833][T19216] usbtmc 6-1:16.0: can't read capabilities [ 1810.821950][ T5922] rc_core: IR keymap rc-hauppauge not found [ 1810.828126][ T5922] Registered IR keymap rc-empty [ 1810.834276][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1810.867213][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1810.898025][ T5922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1810.921446][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input97 [ 1810.954005][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1810.988243][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1811.016028][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1811.058986][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1811.091988][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1811.128511][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1811.161455][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1811.197852][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1811.222588][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1811.255914][ T5922] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1811.283495][ T5922] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1811.302728][ T5922] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1811.762569][ T5924] [drm:udl_init] *ERROR* Selecting channel failed [ 1811.822155][T27055] 9pnet_fd: Insufficient options for proto=fd [ 1811.831438][ T5922] usb 1-1: USB disconnect, device number 29 [ 1811.852402][ T5924] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1811.863685][ T5924] [drm] Initialized udl on minor 2 [ 1811.986852][ T5924] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1812.008806][ T5924] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1812.445597][T23185] usb 2-1: USB disconnect, device number 52 [ 1812.455769][T19197] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1812.472531][ T5924] usb 4-1: USB disconnect, device number 55 [ 1812.479266][T19197] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1813.544667][ T5922] usb 6-1: USB disconnect, device number 12 [ 1813.594354][T19216] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1918.591726][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1918.598691][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22639/1:b..l [ 1918.607141][ C0] rcu: (detected by 0, t=10502 jiffies, g=151293, q=233 ncpus=2) [ 1918.614918][ C0] task:syz-executor state:R running task stack:24056 pid:22639 tgid:22639 ppid:22636 task_flags:0x400140 flags:0x00080000 [ 1918.629351][ C0] Call Trace: [ 1918.632615][ C0] [ 1918.635523][ C0] ? __schedule+0x10b9/0x6150 [ 1918.640177][ C0] __schedule+0x1139/0x6150 [ 1918.644663][ C0] ? __pfx___schedule+0x10/0x10 [ 1918.649494][ C0] ? mark_held_locks+0x49/0x80 [ 1918.654233][ C0] preempt_schedule_irq+0x51/0x90 [ 1918.659232][ C0] irqentry_exit+0x1d8/0x8c0 [ 1918.663797][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1918.669750][ C0] RIP: 0010:unwind_next_frame+0xbce/0x20b0 [ 1918.675549][ C0] Code: 03 4c 8b 44 24 28 80 3c 16 00 0f 85 e4 10 00 00 48 8b 14 24 49 89 45 48 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 a2 10 00 00 4c 89 e2 4d 89 75 38 48 b8 00 00 00 00 00 fc ff [ 1918.695130][ C0] RSP: 0018:ffffc900038bf990 EFLAGS: 00000246 [ 1918.701185][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff912fc6d0 [ 1918.709129][ C0] RDX: 1ffff92000717f47 RSI: 1ffff92000717f49 RDI: ffffc900038bfd78 [ 1918.717075][ C0] RBP: ffffc900038bfa48 R08: ffffffff912fc6d4 R09: 000000003a20f2d2 [ 1918.725019][ C0] R10: 0000000000000002 R11: 000000000001288e R12: ffffc900038bfa50 [ 1918.732962][ C0] R13: ffffc900038bfa00 R14: ffffc900038bfd80 R15: ffffc900038bfa34 [ 1918.740916][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 1918.745920][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1918.752049][ C0] arch_stack_walk+0x94/0x100 [ 1918.756703][ C0] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1918.762308][ C0] stack_trace_save+0x8e/0xc0 [ 1918.766959][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1918.772302][ C0] ? __lock_acquire+0x436/0x2890 [ 1918.777212][ C0] ? __lock_acquire+0x436/0x2890 [ 1918.782121][ C0] save_stack+0x160/0x1f0 [ 1918.786424][ C0] ? __pfx_save_stack+0x10/0x10 [ 1918.791251][ C0] ? __free_frozen_pages+0x7df/0x1170 [ 1918.796600][ C0] ? qlist_free_all+0x4c/0xf0 [ 1918.801248][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 1918.806869][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 1918.811878][ C0] ? page_ext_put+0x3e/0xd0 [ 1918.816364][ C0] __reset_page_owner+0x84/0x1a0 [ 1918.821279][ C0] __free_frozen_pages+0x7df/0x1170 [ 1918.826459][ C0] qlist_free_all+0x4c/0xf0 [ 1918.830952][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 1918.836384][ C0] __kasan_slab_alloc+0x69/0x90 [ 1918.841213][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 1918.846644][ C0] ? getname_flags.part.0+0x4c/0x550 [ 1918.851912][ C0] ? getname_flags.part.0+0x4c/0x550 [ 1918.857167][ C0] getname_flags.part.0+0x4c/0x550 [ 1918.862251][ C0] getname_flags+0x93/0xf0 [ 1918.866639][ C0] user_path_at+0x24/0x60 [ 1918.870942][ C0] __x64_sys_umount+0x10a/0x1a0 [ 1918.875772][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 1918.881118][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 1918.886462][ C0] ? rcu_is_watching+0x12/0xc0 [ 1918.891198][ C0] do_syscall_64+0xcd/0xf80 [ 1918.895693][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.901560][ C0] RIP: 0033:0x7f4970990a77 [ 1918.905959][ C0] RSP: 002b:00007ffd7cec2ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1918.914342][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4970990a77 [ 1918.922298][ C0] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7cec2fa0 [ 1918.930244][ C0] RBP: 00007ffd7cec2fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1918.938194][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7cec4030 [ 1918.946146][ C0] R13: 00007f4970a13d7d R14: 00000000001bab5c R15: 00007ffd7cec4070 [ 1918.954110][ C0] [ 1918.957106][ C0] rcu: rcu_preempt kthread starved for 10537 jiffies! g151293 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1918.968359][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1918.978302][ C0] rcu: RCU grace-period kthread stack dump: [ 1918.984160][ C0] task:rcu_preempt state:R running task stack:28360 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1918.997616][ C0] Call Trace: [ 1919.000870][ C0] [ 1919.003778][ C0] ? __schedule+0x10b9/0x6150 [ 1919.008432][ C0] __schedule+0x1139/0x6150 [ 1919.012911][ C0] ? __lock_acquire+0x436/0x2890 [ 1919.017826][ C0] ? __mod_timer+0x8f2/0xd30 [ 1919.022396][ C0] ? __pfx___schedule+0x10/0x10 [ 1919.027220][ C0] ? find_held_lock+0x2b/0x80 [ 1919.031877][ C0] ? schedule+0x2d7/0x3a0 [ 1919.036194][ C0] schedule+0xe7/0x3a0 [ 1919.040256][ C0] schedule_timeout+0x123/0x290 [ 1919.045091][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1919.050447][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1919.055711][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1919.061496][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1919.066943][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1919.071687][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1919.076946][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1919.082130][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1919.087055][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1919.091895][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1919.097687][ C0] rcu_gp_kthread+0x26d/0x380 [ 1919.102345][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1919.107517][ C0] ? rcu_is_watching+0x12/0xc0 [ 1919.112252][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1919.117435][ C0] ? __kthread_parkme+0x19e/0x250 [ 1919.122433][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1919.127608][ C0] kthread+0x3c5/0x780 [ 1919.131652][ C0] ? __pfx_kthread+0x10/0x10 [ 1919.136225][ C0] ? rcu_is_watching+0x12/0xc0 [ 1919.140959][ C0] ? __pfx_kthread+0x10/0x10 [ 1919.145523][ C0] ret_from_fork+0x983/0xb10 [ 1919.150088][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1919.155173][ C0] ? __switch_to+0x7af/0x10d0 [ 1919.159826][ C0] ? __pfx_kthread+0x10/0x10 [ 1919.164390][ C0] ret_from_fork_asm+0x1a/0x30 [ 1919.169138][ C0] [ 1919.172151][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1919.178471][ C0] CPU: 0 UID: 0 PID: 27064 Comm: iou-sqp-27063 Tainted: G L syzkaller #0 PREEMPT(full) [ 1919.189735][ C0] Tainted: [L]=SOFTLOCKUP [ 1919.194045][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1919.204082][ C0] RIP: 0010:io_sq_thread+0x804/0x1e30 [ 1919.209453][ C0] Code: 00 00 c6 44 24 08 01 bb 01 00 00 00 e8 45 1f 1a fd 49 8d be d8 04 00 00 48 89 f8 48 c1 e8 03 42 80 3c 38 00 0f 85 f3 11 00 00 <49> 8b 86 d8 04 00 00 4c 8d b0 28 fb ff ff 48 39 44 24 10 0f 84 a4 [ 1919.229033][ C0] RSP: 0018:ffffc9000431fca0 EFLAGS: 00000246 [ 1919.235072][ C0] RAX: 1ffff1100a39f89b RBX: 0000000000000000 RCX: ffffffff84a4caf4 [ 1919.243016][ C0] RDX: ffff88807e270000 RSI: ffffffff84a4c9ab RDI: ffff888051cfc4d8 [ 1919.250970][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1919.258921][ C0] R10: 0000000000000000 R11: ffff88807e270b30 R12: 0000000000000000 [ 1919.266870][ C0] R13: ffff88807db16000 R14: ffff888051cfc000 R15: dffffc0000000000 [ 1919.274822][ C0] FS: 00007fdca56586c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1919.283735][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1919.290306][ C0] CR2: fffffffffffffe70 CR3: 0000000036b40000 CR4: 00000000003526f0 [ 1919.298259][ C0] Call Trace: [ 1919.301521][ C0] [ 1919.304436][ C0] ? __pfx_io_sq_thread+0x10/0x10 [ 1919.309444][ C0] ? find_lock_lowest_rq+0x4d/0x760 [ 1919.314623][ C0] ? lock_acquire+0x179/0x330 [ 1919.319278][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1919.325318][ C0] ? find_held_lock+0x2b/0x80 [ 1919.329976][ C0] ? rcu_is_watching+0x12/0xc0 [ 1919.334710][ C0] ? __pfx_io_sq_thread+0x10/0x10 [ 1919.339710][ C0] ret_from_fork+0x983/0xb10 [ 1919.344275][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1919.349370][ C0] ? __switch_to+0x7af/0x10d0 [ 1919.354032][ C0] ? __pfx_io_sq_thread+0x10/0x10 [ 1919.359039][ C0] ret_from_fork_asm+0x1a/0x30 [ 1919.363801][ C0]