last executing test programs: 2m5.890921292s ago: executing program 2 (id=240): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0xeeef0000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x40]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x1e) 2m3.703668064s ago: executing program 2 (id=250): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) ioctl$FIONCLEX(r1, 0x5450) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 2m3.541700327s ago: executing program 2 (id=251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2m2.456080715s ago: executing program 2 (id=257): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000181100", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) 2m1.411724009s ago: executing program 2 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m1.227006933s ago: executing program 2 (id=264): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 1m45.998125807s ago: executing program 32 (id=264): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 1m15.525708424s ago: executing program 0 (id=524): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c30)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '+f'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 1m15.341562318s ago: executing program 0 (id=526): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0xf, 0x7fff8001}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x9, 0x88fd, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0x8, 0x97, 0xf, 0x4, 0x9, 0x2, 0x1, 0x2000000000008], 0xeeee7ffb, 0x514}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 1m14.851222711s ago: executing program 0 (id=533): sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a9d40454a67f8010000004bd295", 0x21, 0x800, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x9f, 0x4, 0x4, 0x804, 0x7, 0x5, 0x120000, 0x5, 0x66, 0x8, 0x2, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0xff, 0xd, 0x0, 0x0, 0x5, 0x6, 0x4, 0x8, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x6, 0xf7, 0x3, 0x0, 0x0, '\x00', 0x4, 0x4000}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.529397523s ago: executing program 0 (id=537): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m14.285149089s ago: executing program 0 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m14.028620405s ago: executing program 0 (id=554): timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0642, 0x0) tkill(r2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000180)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) 58.946162216s ago: executing program 33 (id=554): timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0642, 0x0) tkill(r2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000180)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) 13.863672382s ago: executing program 4 (id=872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) read(0xffffffffffffffff, &(0x7f00000001c0)=""/69, 0x45) close(r1) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x20008030) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000480)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x2, 0x8, 0x1e3, 0x2, "0ebd5444eafcabdbe87b2bee4f9ee9b73b230d35fb8c3b8910b33851ba5d3fd4a166118a0f9f3047d56a23f53bfe85cc65686109de2aaff29f068d9739b43bcf858329d4690b8656a10f339745c2934006f8c9484f51f0a80346649852eaa891f2619d6a5543b4ff5ba6e566f561b2d9e7ad953ce041108e2d6aca89e054acd9"}) 13.601660294s ago: executing program 4 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 13.301224591s ago: executing program 4 (id=877): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) read(r0, 0x0, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000f01000/0x3000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x3000}) 13.111946984s ago: executing program 4 (id=880): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r2) 12.939206097s ago: executing program 4 (id=882): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 11.922039674s ago: executing program 4 (id=891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="002000000102"}) 6.213034268s ago: executing program 5 (id=920): setuid(0xee01) timer_create(0x2, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mount(0x0, 0x0, 0x0, 0x8410, 0x0) unshare(0x2040400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400df0325010ebc000000000000008000f0fffeffe809035300fff5dd0000001000020008000140040000006da2898e", 0x58}], 0x1) mount$nfs4(&(0x7f0000000000)='devtmpfs\x00', &(0x7f0000000180)='./dev/sda1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x2000000, [{0xfffffff9, 0x1000}, {0xd2d5, 0x3}]}, 0x14, 0x2) 6.17632051s ago: executing program 5 (id=921): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a00000000000000000000000000000000000000000008000000000000000000080012"], 0xa0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) syz_open_dev$evdev(0x0, 0x0, 0x822b01) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231306e53f770c0000002a9000070916be0083000000000b09007a15b3fff4f8cbfd5b728f512111af48dd8c77d9fc4eff85fb61699e761b30fd4d1c354119799f9c2f07e51877d83698e65688902d2b5428732676c82ec0db7f9ed33eba0f2915745ab2428b"], 0x0}, 0x0) 4.54648802s ago: executing program 3 (id=929): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.353155715s ago: executing program 1 (id=930): r0 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) gettid() ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x7, &(0x7f0000000000)={@mcast2}, 0x14) 4.203060165s ago: executing program 5 (id=931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xc7, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x10000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xc, 0x87, '\x00', 0x8}, {0x80, 0x18, 0x40, '\x00', 0xb}, {0x6, 0x83, 0x9, '\x00', 0x64}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x5, 0x54, '\x00', 0xbc}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x4, 0x82, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xee, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x10, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc6}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7b}, {0x10, 0x6, 0x3, '\x00', 0x90}, {0x5, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x3, 0x4, '\x00', 0x1}]}}) 4.115800385s ago: executing program 1 (id=932): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 3.553294156s ago: executing program 5 (id=935): r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x92}], 0x1, 0x2) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) 3.438242129s ago: executing program 3 (id=936): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x200000000000020) 2.506983549s ago: executing program 1 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) 2.234566081s ago: executing program 6 (id=939): syz_open_pts(0xffffffffffffffff, 0x81) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xf0c, 0x0, 0x0, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.481571693s ago: executing program 6 (id=940): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r0, &(0x7f0000001640)="8b", 0x1) 1.48119749s ago: executing program 3 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1.31371918s ago: executing program 1 (id=942): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x1001, 0x1}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1040}], 0x0, 0x0, 0x0}) 1.312135986s ago: executing program 5 (id=943): r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x22020400) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.066073558s ago: executing program 3 (id=944): open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 1.051967299s ago: executing program 1 (id=945): r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) munlock(&(0x7f0000280000/0x8000)=nil, 0x8000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 914.24048ms ago: executing program 3 (id=946): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdb", 0x84}, {&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f9", 0x56}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 796.158009ms ago: executing program 6 (id=947): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x6, 0x2}, 0x8) 695.600028ms ago: executing program 5 (id=948): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 564.077067ms ago: executing program 6 (id=949): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002340)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 353.944923ms ago: executing program 6 (id=950): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x3, 0x3, 0x2000, 0x0, 0xfffffffd, 0x4, {0x2, 0x8, 0x8, 0x1, 0x10000, 0x4, 0x5, 0x0, 0x819, 0x1000, 0x0, r2, r3, 0x0, 0xa1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5ad6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90c00000000cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde0caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1c83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db1085df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bee1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ecf8e26206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362371a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4671f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76b060000000000000095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc06127a450ed0dfa1410cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f01d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865638b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72093b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x7, {0x3, 0x8000000000000, 0x3, 0x8, 0x9, 0xfffffffe, {0x0, 0x4, 0x9, 0x6, 0x2000000002, 0xffffffff80000011, 0x2, 0x0, 0x4, 0x6000, 0x2, r2, 0x0, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000006280)="2538ffe2177ed9953a94e72d6f1122bfa202290214ef1ed0b586bca92b5071d9482b5d1f0919537b03645a8aba74bae6f7f9d3eb4c1b608b6e73b895a4e4b5b312650ba463b3815954fabdb6f98e0f3e67797c71d4da3dd44571e75ab21f0b05e24dfe2198577345f0e2c24afe261f8098655f279a89d023310faac811dc9a7c972cae275a4dc7d1a0e95fd8b690a5397eb6a5c38942b8c883b96feb07deef9500502b1671b18f9cdf96926b903c1f31216dd379473d42483a71f18253763ad48b4519b088b1ddd79ee5936d64ccf78680decd1937c51c1b01651a5128452d29152d76e1e84be42341fbf0bafb3bdd83476c12364fe4c4d79b9e37128f0950adcceacba16faa30a64a6bc1323e7f2a02d15aa4e1d44ab680bb1fe8e6881bef5427be38936efabb574ca9c5916dfc9d186d1ea3becac692066a6bac644f73a542ad5e81d7f321e8d02b54e1b208a2a0f18b81e2575eea09285198917f77b1ed1af1d32409a3765faa14141c2f6a929a64e9238c016a9485ede93daca6c9abed13158f761190c989e65f3f8d96f73211e9f650fe35d4ccd62ca18db24f75a3912b6a2a14fffeb4fa93f318465bc48c7a9b967f41f50b3a06298b1b7e43f1834b7072f42b629129a1a28f3d2f7964cef34a0ee916a82eb4bc3ffadb7600d2adb05ea315f52f725b962ed8f1f1f8addaf62f19edc40b9b51bcb457c2e70c395ac3ef2d0ed56d9d8317d5ab9dbc3dbaa242ee705bfbef1694005e7468e1c79f009ccdd7901a036477cbdc4e445f4e047bd0bf234030960c7de5fe1424b93953cb382ce959d9957bb56cdd93d0ae376702b4480292936ebbe7ee92f7a8f27f4912e1c5298a64fad637804403000000000000001d1bd639f9c2461430d0be4880dc6be38f4643951bbe0f895244c7661b8491e40de97ac22cf055f85a17d4317aade5244e02f561e955252b275e43abde85e1f9a5e79be9da3b883f04da73f97bd0915de894a0d94c7e7ff70c4d657c6a1003e3d5d11bc5eb614dd2b139064156fe4b8a76bc1171f6f5855c2959b42c9178e62f1449d97e722a231ae747dcf9d79d70f67f440436bd2aed9b4ae92e7848588be55d00881caae0cc51469c1f10b3f476ce338a0b84a1f36b9f4307d6469396871caca4aa52c88193cc416896879331a4e6ec9a2119e1f0a127f905deb575314f7f99fb8f29793f8d087ccbe23d40b7b08032cd340218eb8d39feb9da31ff7314b21fce6b38458db83c63a5204f1c7fee984d55af4533b41992bef5612b451ef4d90233040e5cadc479f4fea817d9c0c73f438ec06de414c0804d3bcaddd31a9f70a63159534cf27e77c3b8ddbb5ccb9fd3cdcaf03f5f39e69d54210ade8b16347b8075960b6dd26c6834b8f42f28582419724be3ac8e7448ac113fd0fe7367e841db75f2e53dcc2126eadba92ad022a351592848d7326dbd16322da3a18652380676c0390f70c35479b7c82d1ffb94c9fdd9886219464c835b8f761684dfa63f85b74a333a385d33657bb908a8f444f42a32a2d41cad5faf6bbe336144618a60bdd4b1a5bd6a9da4f8e9e111180f39207c8e6f682dac911539a539089de083a521db2ebd4a96194902a1df8079329c41ec433ad1d0b011690781c2f324caec3f11d87eebbbc219b32eb7782fb5f77d4ade32dbc87fc3c88b584aa3360f1a8d09c9d2d6fc7c55d3a7b82840bb13efb5dfc9fb0a2b308bcd363bb18ab96e55cd5bbdefa303e901a54e166e136a8abaf7fac3c1c30ab1c97d5bbeacfc1e10b4ba3d3102ed0e109ce36da2c4e6704aac598c3744d0d6db3b63f749852e8788afb21c4938f4112313bbadc2f1a6271e7118af219b179a868eefbb60c71c45982fff779fcff54d4d7b941e349596b76c832a31b541c8bc292fbeba5cbf30e69920db7309730b204747d07996b39a2d38e1d281df02d8e762e85838efe2185959719b1e7e7c168c130e78e35bd5c549bb925651d9abe7b25e3e02b88d0977261410b9b9ee90ee8c9a5144ddab6f184987556ed22cacfa97ccab6440ad34962da5e646fde4d9c20441bf50d008232ce077c7ca0e3b9706d91567e30da5710371bb870468ff97674270bd44099ae1d1d9d5ee4366a9129ee8379e1b380c0cd03eafa9afd0fcf7c6d1665f8df750bd5513f8d17bf980bfc35af3245d63bade8ec344654bca32689d2423ceb9dbbb0163eae3544f86e9132933705df95801e3fb84b234a5932f9631220759fb57ef19bb4c6ef05418eaeab2a1dcc2c340307465942bd46c6c0c2b34aef9f651e5a538695ab7bcc42ccc31bce353b404e7acc4563cb38a1ad8f7a03ce858263cd1efb80f3754ee3b98f806df30d35f91d473d2ec4a2861d1db0824de21eabc7167344712201a5905e3eb90650b39f901af9cded15cab12b62ca7de51b70269505c2a8e45af3dde07c28b5342efb1d3d48976412bcac1fa6cecea695451702fb1e5ae85f27da357c9f0ab396837f381264b8b5dd5f5a3c12d553f27fd5aab50514aef843b85362df38d02d8bf45952feae541f3f3652e86da44cb57bc3fb0c7cc168cfa99a2b3f94515c63c94ceaff005f48c45bad140b1af0d758d17133516ab10c7154d863eaa2f6954f3a0e3eb85b4b904ec37cc00282e851bd7f9c23dbf2f650516e4b0408561a3b0dd020fe95dee9a6ad4bff10a69d80e65c143dff60f61c6d852eb74adcb3a3b730e3ac27647e19d980cfea7675365da68ed542dab677ec56a098959cd5392871dd1e00851a877ce26642eab40f5cd0e56f7b1ac520a729863360b0a3e7d93962f7fc6b39f5aa2403e42e89f21d9fd853fa2df56fd2ab6305f3b8be75c174b4697d21bb38f72e83fef26ab068d5c10b7819ac50389375fd2bba3a65c4b12945a0139bfca050f90ff7e86b2e06c7c2bd867c5dc0105e6fff2086ed46a2cf89516dbd231d2a793d471888f6c5529b76144ac2d7f058bf4fa9fd55d1f8fbf8418581f14754eb1504eb81c9754fd2fee7a2b611bc50742787c05775900309e7b22ae45de32ede79b23ea4394da29158c4f930c4e0125dea338a99ccdbea3455aefc1218ff5b43cf06863a9d3d79ea9535f69d1a530421c729fd1b654586c98bb6c50c51a8e30ef6fa8ae39cf9eb42e39bf9fb2517fdafea38d1c078fbfe56705229a4013da056156f11f5cb972bf9558568a366b681ed9dc2c92f84d7a3c8d5c72f58c1ed2b3b58eff2a024c85b4482df3546a76f4066f01d91c860146c660923ffc48e7a5fffc8be7fbb08c00526e023f3c3853f1c134566bba8ec335f0bf743fb62ba9b48ed5da7076343438956599e47f803023a101597982f67a0c0facf2a80d7e15657287b23f85fcaa53c351edd957801d6e219e039a3e3d581c8a2a237b7d0320605b362c5ebef86bbe2eb679bfee06021ee3b4b3b1b0e4dd368d235aa115d0a01cb115e398c4ef569ffe55f567654e39a22acae8002f78f75a1648d9bdb45d71881cc7d02ba3bdee215895c6418728bfddccf01fd5adc51e80df398fdd6f7cb4616937ec3df8f0c781ca4e4014885b83f2d114c21dca72482e208bcf93ca98712ede65bb79c49ff6f5e190f336dae2e04b7e1a335469338ba55307dbb411254b7e45afe6cf0081b4ac87bb2da196f3f993f8096f234a32bc963ed002996ebbff07911cd796aafd766257cabcfa7e590b00b1b98b0ad0b1bf1b95adb0df7c519be3b314ea9868a9a2819a6cbdaa29a84418efaae784fa28a3079fd6e648db903fe874302f0319c4f039890655fbe242e0226642361f672dcdd6eb274b8f9bc037d4c57688253a4051326045859f4d434fa6a8a510836e220fe65f826d4e8779c487537b18a11dc6ccf48904c3041ecf2278cb9444d6a3fdbe1ebfd4b77586665bacc467130919419f48956b8923eabe7ed93f0d7096d9c5af6ac7253e01351751372fc17d26c79d49e6d874ea396470c9b34a51048c3019f7628d9dfd43fcf470103bedc2e28e38d240d38dc67a6762a5257ce83c03d6904099148ddec7e1a9cdfef54efb8e7f03a57c2c97278cd0da231de06d48698ef777b3efb33cb2869d2bbeb540b8b60c1d367364c2a1044af245a252b4ee061f69ef68e12dacb9f2104e43147a91e3358728f676a21522802e81001ccb9cea91dcfae0f8fd450c278cf76ef740b2ac539b66623b840ccb0fcbe4d9d61fef0b1bb44d60df53ed931d63a8c22d5ae595801976d2384d5cc4cea4e8e526571657de75e3571ead7f40083f307daff8f303cf0ebcecd53893a67b89843e607819c4eef6782d6cf00c9ff38ada30ef23a534853065adc0bc8da3506fb97c0118c2ac9fbef85f2fb1319f96d6f9e57b1b7ca84a1e3a50f854de846cbbd23c005ac270a7adb8b17a636a36f71bc40f5d692634f49d110be854a16622649c9e13b76cc500c732c607fb2af125410802839ce70d0885ed5944e3ea169466e9a9d9e99421e998c28a7a3f77b22a96718b513984ee87d31677230fce43adeba4464d839ddb15f21e67c7783b84de8035131df36146e7073f51abb5f8c465338ca927834a835d13b7fb10eb64881cabae97edc0b757b5bd36e7cd9dfd173b627c976d14dfe0bd242115a81f9537550e8c5d16565a2f1bceae6d5d74a86283e86196c0e5185a309ce4a71421c82e66b35e4ab5e99d53043f29d873f18f5ae2433182d5ffa713579516c4302d0b141d15f60df71ab9e0736cb38163f2b6506eb94fc47ac0f120a6083df924b0c965ebc76796a41463dbb246f64e1c048654f476f5041ccdff00faa408d8302656d77d749ccc6090de33634aae0a3af2348f61eff552538828172600e87bf64126e60b057624979ccb2359bbd9961741bade15cfbcee738d3d5a7ec86d2a0402d6afec7aea999548121cdfbb6e4afeee050b5e029d1680655df03e5fbb2f05e7677e6191f242e9df3957a094861bbeb1f0ae7b624d004cdbc7d7c1a42618157957f02789a69111fef71567e61a98b7be421666d70fa928b340eb0c16afa76ba381d0ef7a5759d772916bf596ff202c20edd7fa4b8c3469a4f5b90851a0092b6084adbe8b065eddbb94272dcd674f118cf2d9b906fb1d640e72985557c3d22ee333be8f9f37febc6dc3c02e62f51332b85645ee6f05c80fbed851d22a74623e29a379dfcfa6e427c10285306052c895bdc9a74636f09ee5233d7df25ba9ddbb6c92cb665ad5706dd03073366051e0cfd5c693a2dd41777f590c72d0126d54f98178b2fad9df19579ac231f890d4557fa568f9148919fd51010e13e41181764529e02a4c660520b3687265762cb8ff12f0fdfbe44b3acb2c7e0023f0631e015b35631a45eced9e3ad0ca4faad71c4a27e3bc04dccccff314afda0d07854de111f24221969cea2c9c8afa28f34b685a5c6367e6037c237fdc22f6ef7fac920f0b90a90982a8e27af521fcaa763f396da62977c0103a237373bd9b524c4ee20f6fa7c447e746631173be3d8e6704c42146d745b6a7f136f7e3d4c7f45d130a0934fae7bdf94cbabab1ac11dd91fb03e754ce8486bd10527ce4ced5591a472582f6a0d2e7bc3c43e8b99e03b1e9a5dd0dcf71bc0184b51f4f315ff0d77c735a7590993ab15a0974e68be335bfb9c660895880d66d28efddfbe7569abdd60168047bd57de56db0567a8e2f35715d921bbb697ab8421941b959a9db8098665ea7ae4139d709005b6fd168f8a15adfcafa3543151479ea01da612c772a48171802204cfd93a97fc665653c27ccb9c875d04cd016fda02334b36b91f97b3987af7b6d42c3e1c978f6bf0d5f1679968305c850c0fc3f246cd0a92e56bdf8bd4f9d574ee7fd199f4ab6cb34716ad2033966e69aceb1bd2b1ff6ef8cc5b4aa4aa417ab2fc4c7a83531fe4a0d697540bd8b5c33362a22d1e1088681245fa7651a2f31042f47d97c4211c36f2f3779f603278196370fe9798bedb75aa8f62b375908ac770cf002304ca0bbb3dcbdf41f1f3971868c2ee7df292160d283a4643407ea2d299fb3fcf9b63cced305bde9dbca1e28cafdc2457dc31c5d4f3b9dcbac27cd0670d727fb451f9deeb2262ad94fb6f9b73f778407cc79e642d2ee2b746a726d4c1ef4b7bbc70e53c91a32fbeea923d9eb6e81c6b4f6a83398c4b6664a3ab0cb4aec1575b0414a07285466d3045ff16540ae8d5e40bfc514b3c2eb8b60396afaa207238624178411596ee3fe200ca3956be77e32a301f66b1aa9e0e44c78d9898748f78c10d253c709228c17bfdc9e950c7108932caeabb1557e272f6064bf6a1d6c3fc6d32b5489ea0077455c51dc59699eab59bf998c7d3436e3edd3cb4251099105ded33061d151c9cd6734b99e5dcdcdbee436b9d73dd7b297b185e97c32447bbb8615a4d876dc1a8330b642c503ed157d6e3782b7c78f4ab8d39343f61143aac19d952c39005f4508daa07d95ccaa133f49e4fccad4bc3ee3861ab1cb29532dd011beb926825b285dd260342438cdd577748e28f0fd31c5018895ac7f2541f0ea5743996459891252e69bbc9743e70555902ef25a8bc082fe42539dc6500deeefc63549c02184852ae32dbb1834f4d84a399b9e0285ecba9a5b296923bb978b337cc54d81bcd07fe607b006414f59d3180e8ab1f5877a74b48592f9644d117ab4cb74f627a27062dd3da9f7e8c5326e2c3b06f79824331956343e1aa079b0b885a8725ee3434869a84ebfd605a838a35fb79bfe4f58c0dd8f81127e5db509fd92868c6bebd588e41c0cf14374d9667aa5dd58f6ac5ef7007a2b95d071f7081d5d56eb79937a37be8231c9966a77a87ab9aa17201af15a083c3311f9854244b7034279309d858798fcd8a53aeb3cb0df5bb7f0e8da8654deccc206681e52616d88736e4465bed13682eb6460caa7ef3fb32fd406b6c1a8c5b01e92c3899eb3be2d50d64d8f493ee7acd89109967e8f8473f792ae3002f373b09f4e9f286453e88f0501a9f1cca01eb689054d420f2a1952e8736e811a8087e5314261d18b3c6f49c94fd4b91edce047b8e5835ea4fc9ed8f48b3a0ada645cee3e7713f18acc56f551538a09f19217187641e1ab0b612fea29aa68cafeec294df4c6995f8cf130307089eec6597b4df44f5eb0146a271190be3538284054b0147c70b1ad9245a5417809ad80965f6f45d67c7229da95b3761cef78f6c8b01aac55fc0ce87409ae588ddb79f26bbb286f70ecb0575310029b39fc506e74371e4981c1226d2fb86c66715bc85eb7a1d80e8204cc6c0c67dfdcc0f5250cf409890a152f5a720e52b0dd485c0e061507b09f509b289034b1f308114ca0214c88216ec7895c33e9ac5f9531b0b9318b2b514511d372d8f63aca5c1d2ef1a72291a2a64c35847283ff14709582d7c70a2cd36e81edd9a4b89191ff77bbaa607aa0da229b55acd36b93eb650d3d4c5b8f5f8e3f1bf98f48e662178f90ef5510f5ac2d7241df6406009794acb0762c259a7dd330fdfa07e9b9600a3fbb227f7641cd2fd28648c3fe25e5dbdd04b45cda8da231eebd745976e00172e14870a1d1b4b0b5a483f01decda921b5ce97bd3bb3f3158686b2c02b520186966f38c2bd1b3484baa81ee4a656050a28827a5e726f658542b3bc436fbd3aa5d49be68072756b71c03a45375c37429c535c739899f43b38bbad4ac99d21a880c5af5687600611e43e4b14a206bd4ebb5368142e926a9e484fa13017499e4c90816861a8b40866af8134c7af1c53a63c33dcb6293b07858148e0bac002c62c3b344459c38996fd0ddf1004477785876bee1d5c54bf39e624cb2b4a5ec2a63f006e3f8bc6e4e4e02102d8dba21f39bcff21c913ae121b11463b6778f2274c760ea7c1f1ef846a6226304735fcb922528a9d48e8fdb9e522115e8b80aa767fac4bdcf693fbf363ee9907065d165e44336f6c334d3799364cbc82ce565a0284d0a7d44075245d2a7687f4c2e058c8ea65149d9efe252844d003d9a083103b58d72e061bd5fc2287ba66dd19bec72c84179ecd5536be99e86c5fcf280177c5059289fe1253f30514f5d5fe0b7e0940edbc9e199366e5ae2bc898db3d161a1737bd686ef32d2b05e5ec82e06bb366fa351502f79724e7842e25e797b1719e6fe2d193f8333f06e87b902622abd651e0e7e12a0fba053a34da020702d8c29d4ab2a4c7fd02e76e7977bc0d0133b11d8d5d6c3863893b1edfa6a9f4821000092182e652c104b82e103b353bbafecfc01a574dbd180fef6e502737990e4f14d048424b727219038f0553f2d44b03e64de13fbe629cb0db59a4f95cc29ac69f4194c465bc687b38ae36f40923e0a0c4a02e7c0e2b62dbb3377e04f7b997d4736ee45eeb19004fb6f5894527dd3c4e2cc30289a684fe515193a4fcbad942b45f56352c9b35b3446f53d9d4e3c6a80e39d0357e37485895df9fa6f83a8c5ca0cb995b526452fd52561400e2a07330ea21bc702c41d5fae951af9a6b7b2f369cbf132434eaf9aeee17a76cef9fe621ece8ddd5b27f24e07bdbc90b13a44bc37d6573739978a6d95641754056be4042178ac95a996df820013189c917c00bae415b0aabd9fdeda0c521ef2736473b3949cf2c5cd7bf1a3f772de325a5bc7e1c65bec2964692720161c369055d3506a912968c55cfbe398fde6db2c8eb78be0f9552b8f420301c921877b04e952a5fab6668be8b51b397757c194ac9483a348b6992ebeca48aa5ed54cb37a1e03b37f0cdc12c9146d98851f93d70dabb667658bce8a332aec5738b824d55078395c1df9fcaad9a789c0779007c088a26817684fe583c6506160b88ddba3cba2d802f4f4d099483c066f1e1fb778e58d0e68a13c40a5d05574a47e1d0d5742744d24838f563dba73bc3a85ed59ca18fd94f6f1e3354bde3684c7d47446ee0edf0f992474176a6513027824a304bff9108ef998d5831a2010801dcfb4d3c376fa59aa06761a8454fc0dce584c5bcb61d4d2deeecaad82f0f3e6bb75d6e7e165eb5cbef19f2b79fba8760923c06ac0843075437ef6bbfe14efa97ab3c774ce73a84f879f1c0a2e0166058a3a5cd375757e889ac7fbb7f9a3161b4749c3d9a2975fe83f5334b29bd433a61a2b5dcc32b6ed979498715ae096edcb94b91458832c4cd8fa18a4f0ad9d2e111623456dbe25e645620887ee16f620024f472a1aeb2fc934a621749ae86b8732178e74c153831a1d71803b2abfde37ed97731a8e100c380be12c840870ce6bbec489943748a70d21e24fc884b9908426186ecbe296686739fe77d48138a3c1ab0950316d415e9188d464312eac208b58324d4a0545cd2417c2073bf14b1ce42edfcb64cecd6a2dac4d14d2684dc7a2aca7bc3ac6d19a5bd235fdbd588bdd18e535c232927793a03019f6c7f663b39232e49f87d8bfc5f0157a65f6a350a7aacf2b7ac7e0105fefa90a6bb5ccb5eba045df968c7bc5e8daf23c2e63ed7dc61f08be3ebca10cfdf327ca05ae21dcff3d5bc63147945c87893d0125c1d91f3d91d06492a0f18412e4d8b9f46ecf7fefa130da38abc171a8778c3f196e12d6cc12597aa608bfc780b36d7c5cbba359b3b33291eddb273b7186ce9d7e5c4ef3d34bcf73b607f19bbcc29f716dfb0e3c9bbbc3f67cae6a87c0e0693fdc4c735e6119459ea8768b6b39d17ea24e5d584789042264972cd438e336947dc934ca76e826fb775105c3ebd3db8db9ff48e0c2a09189adfcd9bc1041b75230dc6a0f22c084dc31951605dfcf2e51c319320936c162dfb9a90921a057a23a558d0d325b77b50a5788a446d2cf54eaad50e810c46127c79fe04e8a560bb899af80863a20b1f96e9d2bf158dd99bbb9e107dce6de70acdb7d94269e07f859b2186931281c8476467e879b08198dfdcdbcf8e1bfed0fe60b842c066e642d616c78d5fe9cd0e6f42b6a370b2037f03111533ad168b6ede759a33d80ab572668f2c0b10f57778c59ce5defba0dde29081a660ed83de5e19fe088880e8b1ee795bdb7155da9ab6badd1e63cea6d906d054371c6ca636a7e63688cc8c361bb356d77a017e845c3cfbc1cb1d8587f585301a814b9f3f4a9add6be6f91df16cf23debdb93d08b9af2d5e5512413321631e639aa1f861249fa7e79c4afc78ad6d46082dc8989a6bacf86d6b30eb164a7f32df779f86bbba52e7cfe858a18de913f7e716f2e841342da98f069203af1bf484b805ad82e8d302c25da12bd8f2c3f2386cf0b69e5f67c4f755e29eb0269e31a82872a9e05f94dbaeb75ae605605bcd0aa37832b29b316798de11864b0c17cd53d66cd72da1b388712bd4c1f7b3d10811e26d40b7284e2ed5f5a59760de8da84b4d33f86ed3eb56b4e720ffa583179568660a4028e8f87a77b10372297a939e02c04eb125e5dd984c9b870991fe5b1507f9455de0d9a12f7cd8de0f95888ae16fa2ead45bba41f977014e0a8d0094f0df219e267007e7c7f47d497576837bd292c34f2ab54c44556af055d2c1acbbe14487a377ee6cbf85b9ec8544c088e4e63ec5ab7b26f0e2f5b11bd1025cbf4e2eb5c65c40d45132a379e247395e6479bdef84a1153ac903d5be323c036bc0c05dacd7e8e218910b94869e8f3641ddd19220892f09e9a8962926d70f8ba7d1c7f5d4e27dffb613bb0c91b90ee38b4b322b21f451c81bc360928e607df2d4d5632286ed86ec5e67c16581dfc900b24f906ac3cac3741d9d07bedbb07339bdfee68502fe669c2997ef6fcdfb65a79bad9da59335220322e8d6076083362f7997dec0006e3823b0c2b6c38d7806bf15b1354b46194d7f2e488f8e16d57b1b8f41dfb04a62629be4b231cd52455f3dc49bdebdf9fa87acffadedc867d506d28402a26368507a65885ef8b0023bd692bc2e3c28e788f8694151d63de921794e0822441953b665c2636bb3b1b1cdcdaa5bdc18a12f5edb1534c8fae0793851d91974349c9bac3edf1df378303314457e378c23dec04778e1433c31b27b23e98cafef4b189a4d52c8a455558f969107faa1f250f9d54b8104bb7165a2dc7912af71755f291238e639094ff0092295f281a1f0cae8da8c9b08d4326a84c3220ba1f27542c8d7b48162d48562fe14be4f23605c308eae74a746fbbe729e2628e16a07f67aa7480b67d59f534f6ee57209813c906431976c4665c4644a27ef6239fe73e6ba472eb35a05a87c776584bb6ddbfa1cea2bfe7d5ad16ed009e5b5724404c1dc304624043ab095f728647a6a472f4c18a0a423b602a04a65f7454b8a456890184344222ce5d942e3805216c7300ed69204b3bb3d8bc07ca4642bb3ffd85aaaefcdf7c3ce854c1d1c8fef5dc3adc85c9447c75febd7f32b6249e32189e6062af26e686563be664d02c2ea9e0168aa1493d58add45c878b8864a06ab689464baf02006c0328c5556ed14df8523b37014ea324faeb44e20030d24af3b5e985e41614d77bfc36eb39ae0c6f02252594d7ec408625207be6a0a6aaf88d52449f6f5285104702b745d59b7ca0458350b6db63a219c9c99d48298ffe6ddce6364de579fb2eb1f1d58a5cd86cacc07b862ec4e03507e12f12878a3af3b5316f8f52bdae0a2ec29651a84685e40d6e01a1adfb15e81c47c46075d", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x6, 0x21, 0x200, 0xfffffffd, 0x0, 0x0, 0xa000, 0x1, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280)="01d9bd747db6ed5fe9f9059f787566419f91d8fd78724849848a7e4a1a459fec0b4a3069cd75e15842507ac4ae6e8bf0fa837d91f84cf0466f3acc71dd5d7967234f1181d4688760639ae355157ccbbc1a5bc59697b87b1c09077b4b9c480ce87c1cb58bb6ac722f0f61210f72b8ae1bbb3f606bb58fb4f735bbc00def5fc46c9649e336ccb3a83948ec44bea55d74fa4b56c31a58c3bf68334b3092add8d5073ab8736f3da6d91389d1c71146bdfd9775b05463ca1c87219b3dc9051b87795ad2da4f6d16f6ebedea5a3474e5bcb5aaf4f82bef66127f0e86886cc566e248b876338160e4a417ee5054365328fbc5c70ec1f89685fb00befb9c808b9187af4801be13365f3a85e54c4d5cd55a3333a26940f405c0d8233f2ad923ce66032e90f14774ebd91cfaa07a57840fcc9a875da1af500d54a74c0b85383d8570444cf4f4a22e54922c43c6a1f88d30bd00e7f16395d1a096977e1b8dd453b096100cff6bf7fb15aebbf0fd5bcf90080ca8829978d616aaae6842d3bd8a9c62f2841a4cbb8185b1b77f0c67ad6a308129ccb7d2e630ad22f55f3a27728d5047c08a6ce533f15d8ad0b26e96287c9ce8ca5c55361c6c4758537baaffccdf8c9c61c26ed438969fe62010c4dffdac0ad554205aac3c87f277f9cf900b24c51df10f0b9b748a722dd3fee80d34909cc88011a7c9ea9da85bb5133ffeb0914d8f5718830f45b5470206e456b2bf4682c8317000b8c1b72f50d75b4b5193340b9ebba71599439cdcb4677c52cd8e3fa7065e6da5c4017967e7a671f538a9d05320b0bbee2300d095f71d29b071fec6d348a4d4d6a9dd81bf6cefc5738a8cff25ec4a92e0e9ca20094e5784f668159373cc26fc51ac9143f57387f6057587da1aaa4dac958ee3a840e31f8fc08424384f4ad17e7514d039127dfea7c57ca179dc0edea233db22f7b2828a7cbf9ec255e366c48b468641f987f4424cce789da4c73931d645d152d2f8fd05c6abba60eeeeff540fdd2a1498025576d408f99bbdb9f935198df1f620bebe2aa109d9f76884c24e8406e6cb4e8c8596be504080c12e7558e7af03a31118985bed538881585ed514151a85f609aacd236b774efd0f88e3b9e95a8a9c069d66cd46383ced698083775cbf8d3bc8cc1a94e68bd956fa050de8a7261cf882da4c8cbe60458cdf237c1c7682fde5f8661af31de8ac0d7e5165cf541dd867f0b81fa674abc0d8e8d47f1f7d35492abf26c9277ac420413862dacf558d43f3052fce8f81977fcc0ce9e645d50a373e34b6948b6c9b46bd61bebf8f1e726ab6fe8ea5aa426d66752fa9990ec6949671f498491909974d7216067976d08bb17d3d0e35b0334929472dadd4e2b46fbda7697ca66548996844fc50e1846e5c99ab9949b9d4833bb564cb3fe2c6edeb7322a442b31e65c97b6748b0444dba6a3ad829d85d37055579bc1daaf8d2ae1dcc70ea6a6c1406ec20670df5c09782e9521c95f0cbdde74b75fa08e5dc04149696128e7d96365e525c010b5b908f13d14aff699bcb03a11b1b751e7a17b4b191c3c55338ed8c8a6ef1921c363cff2cbb3844e8ff4a70a5dd2e2ed5b0c1658716d407b8c7136af807dfcb76a47c94b9c1d226de418d467a485260e93fc047751a8ebc5becd54085ba40501f2c9aa233f90a07d32cd3bd3bdd990d91a9639366c84feb766b7d6b1dcdf9659a1bf32beeb05eb77b43efcd1071ace1e5e22d75c77d1df472b0952cb5a9d10461d8fa8077425366e74d9c3626cdbda19447225ff9832cd3be17486099ffdd2e40d91e85f9c80e6bd526cd2fdd038bd14aae74d09441ac335f1e1ba9067df31d8456dbcf187f709e69e86f32bfc14c0e560d49cf75adfdeb1eeb669fe6e1e633b4011af592068cb6d04da83740374ac486ceaa1595fa9d988cef328a54e29bdda394d3fe63b534d5deec94dae012ef4af1f14a5119b1b242efb522b6e8f4db3db6b969abbf11b3dba51f955aa235f5494cf91bd85446fd9af3f9d574d2539e4c66f628676d92121197a87894a0cb4720739b49102531df036eed1ff1a5e8ea185ef678b8b03e2f40a39512f216dda5e23a193b716138da1ede456a6a9131b3e543c0b282030a702223414017c33575ddee481dd08aaf80881c7cd809d16d8a1f6053d740d2633a2b6163c18ace00740cd8d9e8e519903902041e40d6c72b75a1d8c424455c46bfe94194ce4ff32fc521ca58388f3fd527da1b104eb8cc2806495f3791b82c0e589734d7bfe9db9b45b27297c707e1062830f9846b0e00bc9e9275ca1c657fcfd2c671ea2637dfcd9fb9879c67811c30251f404a009ac7007afd3fb189cd3b6ccd4833ba9309015eeee32293bd7e42562442593b55f3acff3701a4dc882faa9e466636bffc778fedc8bdc77dabd9f93157654985340302925e6356b09a75cc5d76c702b95ec5ced416c0c8205b00ce8546e708b6000bfaf6a81b86b6aef432335fb85f6b8ce4b2e4929c250408289c92c7cc0ff981c5d20485940a88ea51c995b654b4ef3914e76b7a1cc8c3e73e08224fb097decede57c8660f28cc05d7957848b445f4ec5147740d5b840539ecc2793a329ad7c184f8c53426f9c5d9b0d1923c0f27b846748589c99a9181978b3b59e117ae7d3859e9b8ca858b911cc1d0ef72fe57c6b449118c8de941e99bb0a62c0331e48d932cb4d2eb2310626b7f018dce8e07b07dc05c130fd00b8981fe7a3957eb339a5a79eae891a3e53d885084ce0df58f0273962af7c4bdcf4ef11e294737d355684950592bcb6b519a7c0f8f2e073652de5f1516f2dc4f55a101b4267ea0657d256f46b9aa12cd7932cc1b128161eb079d10a340f03ff514a28f033b2fce53b135df5e375030f8924d6c75baaea35f74888d21901924f93054990f82a8982541d3e1dffcd283d812417b987c3862f246a9d1e5bbfcaba129633d66106f9626faaf5e7e82fa5a511c36873df7329b5e73daef85b96ea2226f1795635f521b588b00c218e110a829ee69c26aef7684437b7007075a5ec5a35e747636510af1761c979c7b75872e66ad652ef7f6661544c6b2dd875c79f3b57b49f1aa552867ea9f556849e8625d6e089c41ae0dd3d08cc2f28435142f9a043aac446a56adfe0679fb107452c9893987ebb471eefb0ea9bd7ca0281ef8e45207b81c983fb44d47805378271590f01c01de6f3d21f4c6d320102e71a5a88d346037b00e7136c4ba275c91bda277f1e4d19dd13aa182960412aeac6f4cff0df7763e2765a71214ede4a98c90b3ee7c7ba9cbc9656df96f9bde9f99b0b413924cf96e41491ec2206ba946b4cbdb64173257d85870996f28f6928693106214967f55245e24cfbefeab58f59fc1893e03adab5a685ff916a6cf48c514a9845b2c71edd5a7cb8c3e261b224a4f5fcfc06ded6f634b0cae99bf366b09e8e4f082e2b26be752f0703198af1c8737d64c91a0ec7b54f9c33d91378ea2e5caedd3b2fdeef0a0277d07efeb7f09fb4c6deedfb42696576e1559c8ab55cc2d452101e0b3cb22229b5a9df12df23651a955fb091cf4b573371d260e4354f8fd13d53a2560fba582ddea7679dff96d7a89195a364c7271e98734dd7e2b53bd9af3bcb46634c033c3bcfa82d956eb6d5bff069a176b5f92f24db693af4866cb44bea283903ed11dab80f0e30d5eedc04ee6535ac6e00c7ec68953cb7fae2708bae9f5bb1a592cd4e7db93a067c3da2b72e4cb61930d29ccc29919d3731e7334e61630daae383301446aeb07923ce8a329a4107b07343eb2686e2304ef316cc5f32f0b5b7b619750adca5b7b45c0b9e6ca876bde4ad3fee9f32449230c900c890b0cf044efb4100410b8591658e9c38f64feabfd7cdceb57b30a16f38c3266f01102a6cbb382139a0c8ebf1f4b3fc8ed69a9baa82f466030511a92c0b236f3a513d906ceeebf973da71d8c458df8e2a96046fb3798946997e731eabd4605a2ebf1b09e49f43b871fb653dee1db85a44fcd0f45853e9fbcace734aaf6908213670e841dff7e6a7317ae8b8d6be1f6c8b9446bd43373ac3fb08de8a1e4a9e17efdefc08bfce8fa41432fd5fa8a8f3ad5849a778c6dadff2bc9a6227c16366cd588d7e130ca6f8b8367f427412be861021cc077ca1f572ae1ffcbaad7e4772d1a873cd959230e542eacf3b28ce6245adab37abf0a6f73adb96fa91d63cba33b523f7adaea8075ca29224818f40822b7e90129cd962f479d606a6c6fb270bd273288a30e820729edc9c1fe7e96541aa854b03f70d26639a0f177e5193d59de82abd1d64d993d8be1b24783428ac35962527bdcea26976fdb3aec376a5b1e7d1c9bc8744e19ae35868409bf6538d9a8c60f9d375f9e7dfe1bd1df8dcbada68d3151d294ef10263909c2df4842d19b2383b86411637f261b731fe64fcbb19bae35eec6cd19a6f9936e52c28d775e1ac4a34ef986091ac2485b6c2bcb64b279b6e3f77077562cf2a16d32ef86a0a4566c21da3187dd7b4736cf1d76b5aabbf0734e2c46db63fa5b5d28478c7fbc8de54364ee696e90341f041ad3f435477e0b944c63949c707a25c99f82a14a3cbdcb8e7d67c423453c7d8d9f97ebbc61eb672696eccf185aa844677a9fa4d5587744aca6cb5b2db4898a3c689f312f22828585866e47e04acc4dc8d0f19e414194821997687558412ce4118acba56ccc65965465ec5e88cd2e164c80df4aa59181b30740abffc71f4b968a20de3713d559c50b0fb6219fdd2b510011b5de6d4debf8e6551ebb7b4f983f6d993a13f9da0284d21728cc3e17326ee5b2b1c604dc113f9391df4f0dc9513e8dfd063af37735a420668f40a925520ffdd07b237fa9468dfe5b33c57fbddc6a925e1a1923309734d88089e8b6a4dcfab2a9e6cb0242159ce73c0871b2b0966d079dd9d57521a137c7c262de2afa8c1c19465e02c930d10e4569d0fd0c29dd2724f56928c3c753f33764063fa5530fac0810078b13fe8cd3c828b2ac47e379ff6e497a6a4fad3def72c72e073586d798de6a1593e4bb08a7e06039e806eaba3ffb813f9abca40d38be6bd6e25043c1a2ae3aac13bd61d4884e3d67152b1efc75b3acea4cba57013fdb39c84e0e4a27758353e1dcb6aa2a736d60c0f591714464f1f1889bf7aaa7c97b9126f509158c23211fe1bd55839e5ce6249305b664afa1491f9fe9315ffa8e5b2f5a539d267786c41206c59f2c51de6b3004c79f48a3512bcfaf08ef2c50d3bf4f2dc7b48fe41574543d625cf5ccbab790e49a4b36cbf86ed1903697b3dec4d2d602d68b58a92adc5a60664cd33c65db16bbe9e745bcd578867129667ba987f13dd94853381b7f9557e4efc9671dc01512968d1d219b467b2587bc35cfee0022f56f8e0f413ed728b6d6f927dc92805360309c986aa5dcb2b25f4bdb62c69cf343f5d658811083df7d228ad779709bb62530fa288cc04f4246266974a9c8fb1e3a0c7f6fd36364f05251bfa4329bade5a695f50297d463de238510ff392fb0fadca7a03f5dbf0c35e290c9dd8c2dc161e4067f3635f99dadecc54e8abb1af2c2d2821bd2e57afb21296a447ab31302ce062f2273e9bd01a7a34a199bf9f15ced2151a3a4cb99a362e0ad1c56da253728de0ba8174ccf51aeae68373d5e7a9ed1e05d23b27da4b0ab1f989412a8f37156b2250f9fdc963727e39453dd82785ccc6a56650e3a55baa5f3aaf0d3ac09a7e22402580630a2aeddaf710820609bf5409ffb4d32fa1b4def62f189ff4b6cd63c2b66213ea6af4675018b4b1bc8145a42b53e5b962487bf2211b5287bad700c06c44101ff36a9357949a6e6512a6ca800bc64d54d3839c86049d13a68007c9124d1e65363e9d3d2ae6abda06ce2210d7513aecb7cda30b3cef3b769cc07e0101034c4ae8bf99dbb8e757c4c6eeac4eb2c38c756c2f8d8a8d85aff83af5e44682f29e8ae3acf5a2da70c75259b7cf2ee3c96553d6c9b5f4055888001c3c56d5fbdad17e215e92f8b94eb7ca5c7fea4a1c84fd314bda36ff071906cbebadbbb61c264e51487611feed04a09caf40c364ea0b105c33617635b4a2da8337f2f60e38cd031f6adb18b808a54fc991d2480c8f710ecb7e8eb4517031b12cdfeec1a5386253a4683fdf28a1f8098893ddd0f3eac3f01f27ae8d08ca0d567d81e572def70fe9e26a053faff45933a1ba42535624adf0d95391bb53f8c5d386f4d6fea82ba974a81f6e97eb4eee706070956009f87935ff695a1c1fb888464e47dff62756ea6af463621b7e2652d3e92cc93a4d453060b1d309b7d7d38b1ff54c5de867a105c32efe383481aeeffc4732c785a62a23ca958819d344a80f9cc1a57372ad795d18c58d541ff3d64da997f3af375673b644e5640d5f6656e25b55931f4bf0585cfcf0a49b7411ddc37def67ad4cd7d344580b8f9015d41173b8e837d070e0554cfd379acf3190bfe9447432d708b4e04dd74d6c14654ee6037715274425ba9a703b90303b73cf4c66b524f2c788aec33e448ecc428ae9daab714ab31304f66f1d14ea1cf111ff76f3428455a97b4f959c763ad60f50e9ff2ef840ec8aecd18874d3814c5dcca93effd6658cfe9642a21b5e47c7b12376e16e0700553762d3dcaeeb59d9c45e736fc13d07fac9159a52bad01466bbde0d9f41a56ba403da0aa9995070b54dad0f6c6df97517e32868737753280271c4ba863c0392c74a90a7e3489900c41546fe2b53d9939fc78449feb439d083305f4cd311b4465861b03869c0013d950de9084dbeb712443f5dfeb3d4c269203225f1977dcba8e55be3dfda61cf4ba88542f054e8c602a006ff54a9caa0d3f140b346e937e950b099ad049fc1bc08abff1d2e9dadcdd385118e324f87a1777a773a7ae84322a0d2ae7d94d5119f8cf4de4167fe7b38208b8687ef017f79485b8326c6a251768a874ba7a41ca8abe105feb7599f4ee89a13249740420ff0bf4cdae01cb6445ea3ceb4f5bfc687a6d9d56eeaf69ade363b5d97ccce02f866cd1870b64ebeed7da81caa3cad3a19a65bc266d2e36fadf75a0ea8aa62a412709195d54ff4ee5c069b5411e81f72969a5d13a8f69c8438275499112937f25ad0350f866192216395eeeb3459a8ad32aeae85afb6fae11f82af0578ca71e4474ce5bc936db3f3703c970f0486f3b09154b3c4d183b50e706af21df394f757558bc9eaffe1aa6b8612a478a1c2802e280144998492dfed0fe7f020bad4a72015fb657400f8f360e2c101d69f3c784612ee89184e56329a4e2f8650e93d2d2f2d0ab252dba7637ff10c76dd3c0ea704179d13d6bfe6c5b951900097f1f3e618057b4dad6d06541fde48ef21ec8e17808d83cffba390151f7ddcfd770cf9747c190280b470e025a9ade33c9a6abcb6daf40a56440bb34aa46868bd4db9107773496a905af16f23dffa8ac8d2838c2bbf01ef19d095aba581ece2594d6f703fd723ca013e81a006f1bb9b0b31380c7311c6a94394d0c3799cfa89204196046e1f5910ac4dc755129ee4f99d589ed94b3721e45c521a8ce2cbd6a8950a8667bf0632661f3a00e5267c591112d5568c95cb7cac89e54ed9854a330a6c932ceba3135e775037ab38e9384eb02069e0cc123c3dff03b322b81b479040bfc5bb51a5988838d020861a0f27e621ff60b2a878c5a46ffb074ba1ba1376f0512097dcd2a854dad40d1ea94776530e949059bdfc92071299eb4b2ae9d9216c8b2ea98df581f7c80ea84ec630f7cdfb71d2989c86795a5a7a8f2fa900b12035c23e09d405126e2ad0f8a5824dc1e0100cc9e664f18d6200c42f99e9f946f481f71b59c3ce3bafb12bf4b0b261f9d090b10e332f36c77e0d9f7029783ae537e6e8930e060f7b7893b1c45b1f72570a92a5da8e334e87c5b4e30310bac4c0963ef835f3017d6da7b38a21920f7b3ed271fcb6f295da45909f89b8309d695ea3bdaa23fe9e8ee09ba1bc0056d0faf8d021e590fcd588e5b1fcfcfdde962a08cafdc5a93462a0598923ab9710d6ab8b74375fc45cbf1246fd3c0db1a44b188f82d84ff2f5b9ffde516e5afae8e61d30361b7902e3280afaa9a964689ffe86476e432f5f7500ee029d7c969ad44e9bcc9a33431a6b21d4187070d04d0e81507f17444c5b0fb5bba3841cbd4626932901bda7030e4cb0e81caf720190ef6b3baf61f0a80ecddc7cf6f8bfae2135ee09d78fd3b3e39971445bcf6faccf84d5c1dfc6de07be07b7ab4fca0eb200604f21e8c86471435fb4d10385dee7cd87a5c3dacfc7d05eeaf5a687e2560fd462348acf5b5f018bb22eb07f4cc1841fcd478158212bbf6c27226d0e0fa1de0b68379f14e9beeee23071b05599ef468cc3c07de57200638ba55af4e1f66e4ab452e1350ef2584654727f99c24dd575c623f3a282341941d62c0bb544ad0c760ea6dac7719095bd968f8b756c7adb5399c46e20404a92ae95fe963b597207c10fa18926d5079ead101b873d1c01912fb952ef862c0d49f8fe7c00ca5c41409166670da936a116a50ef3888b50137f13f8f7d0b690021ec79aeb2f594ce7838f204a36e19eadf69101bcba7e8419929ae95c1fb72b341b025d619ef34c13ce17fb95b5cd8fdb38a0905a8e31059a348de1b96100521e9aa28b2754d74f3e66d78d4fc577b3facc91c6b3ec731888a68599ce6b7b8f51527a6b4f805a502078b644c23f3151e8d239f28b5df9eb0baf21f783931cd6fbd241ece83ffd28e95ba391ac4627788817dae1bee3d2ba96d9715b7f27b1cb4dfa9e4965efed4175c7f707d59f2274f420c0346bf64145d436b4a6ac00297b2f3ac9ac251e7c111e36dbaa7acf56f0623033ab7b777bfd567f059fa5cb81f1d2cd37d182bbe0b63fbd38308ffe7afa635d1e45ad9e47b7984f0245a18f8d3c1ee119aac8f356dcce6e79fcef0510ecab7b21aac2e62a02e65bec2f1ed07e5fd1cd5606029acd0bf0a03d6f27e7ec516e77356d8f45a773bce41b167ce634e4c41783b0460631b512578ab484e272cdf92198ff4c1f7186c13ff7b6e88b64d9a492cb5fa320e37bc836d7bb87c8330b63053613dc93ec29cfdd383b2a941ef83ff08031aa26adb3f9cdaf8246b58bd54b7d2591a1c9437307c1193b476020e7305876c5d7556bc510a6bde39ff9e70d2a4f765068166f2a0309e7c44f56f743a0a38ce766d8f450f7a2421cde3b25132a0e1cfa2dd56415f054b3af7ae8b4d900d5bbe8f66059725b91235880dada844a2921aa512c7e2e8bb5836c242270af03a5233a4162d2f4b40e5da91078f12dc1cc7799363e6fd1a812084e6b1f555b8f5a111040fe4f9c1aa75b9da845a585ee8eed619d4fb6de9d1059805eae13e9ab5775a16e49a1f8b45e4a7224162cd60b79268748c1664534264072953b7274ecb0cc741ea55c691a405041edda1a12d03594881a11a4fd0e531023cb4ef377266562a7a2dfdfffe7d7c8cdf0e813ea30e090dabfeb2c47f877af68f34717aa6ffe085cf6790871e9df4e6900bf141bb3d22f2aa25a7df47b96307c4f1b89386f94aac5e0c2769f92b95eb9f380b8e025da96184550c40ff019a9c5bfeb1210f57bfb053a1b0e4d61a3f65fe592613cf0dbb76accd92af04bccfca27032a6188ed862879a3e6df3f672bd58fb56a774cfc3d99f2082b8b72b78b4f9b949f410589b78aca7b25f7e0883cc730dc21fb78bc2f58c97bcfba60b1036f1593a3778532660602d8e05e68bd540e98ec9a87746b9ad233fa6013a47c6a3fbf1b1424bb71523ef8a9fae34b3ae232f87a6182de01e6b8f6a38b832b4f66f7f126c39fbd0264ba712e71d95ad4bc2480bb79051fe5bc2e1ed5a439ce3f2ee45b425dce801b490d6e0f1903e9f833c344b661500cc08ed546c680fc9b1e19636e46598c8ae7f21c24b95c6462b4341c8348226ec4d95b88769ccec366cdaf4794e0278f8d0a61c404ee314bdcdaf9be08b4bc05d9e1b1d9cce8d9e061e8adf3dc01689a19567919ec038ae3b9709a09c9c674fc0580528daae0968710dde370cbff2aa48185cbb406814d3a0696d858324de5d2e2e7595a6821bc84fd2bc320ede05b4edab2c7bfbfcf13f57473e78c7dc23be71a174c0b19c9bac81ac1f31751c0f68ac2c79e3ee86129ac548957fc474e2df14182ebe5a2dfa615646bbec8e4edcf19787f13ebc7db9d4c2da108407c4b7f2187acd97d8f6c9b5bab606dc10f61f913ba9640d313b8f4307fb3e65125be10be861284bd9a84736c464d005c16fcdeb01c1888d0bf9b8d11a0a122384110e7868fe43073bd3f082d4994b771d0728094d51a03d5b5749bcc41e35a8f56151eca9d96180dc2b6b3b1d357d089f2792e6304ba6680415d6ff77e55ce3dffce4223d73b48243e93e3d29c1c775ffb825afaf6502cb199d14990b2a5c883a8d78d2c022be7500912c14d3ca0333457e36ff429a198acfb1805939f3c91c28d9ccff9bec44a268d517e17b1443d0f90a723c3d5a040c6afffa8fa30459683cdbb374387ff61904713ed9b63dfd8f290e690337bf80db660c7d6879da132eea405e948d6a8d8dc669795fdfe31101ed41fc30453edb3db556fcb0418ff6f05ada9e96e7e546874cd74cc99adeaf2a66c3ae3cb2fd8507c679568bea62880f9d7777fbcb103d07e734b1eb8610798135f04afa589f49fa1a12e19630106b9372c49789f7a924821ab5aae6a0c6fc7b6d2b4e39fe6e7a4871cdcba9ca9061a153f54ca3b23928fac47c2590a1597b93d84585acd0bc9576ddd9bf84587d139fba81df01ed451d9a34d6895b05e62ec5d63d0661b3763efeb3f3a5e9e27365e3ce814e849d6da7b6494d5f9677c4d306ec3f536e94f37de362a173537884c4d07d504a42943282eeaa64686b8d714b66183f760b9c952b36712954df4323b370b4075b8731bd45375d71d4cd4b361d5a9abceb6f31c506898ab7a8c0971e5be8ee11007de1ca0f9cca41038e5c50c17c0c5a433ab361c9350d6f720202204e63af59a2c244e1bbdf25b0eaacd2965f064e6a791f73cc4ee985911974c5a6a48145fde26365262722e0e3c8ac4c36fc7c899265c3235ba655cdaa08a2e1df3c0ed75e2726ab16aa53f0c8f4800eaaa6330121d04e754ab624f48d4d3faac38d0fb4d6cdfeab23b3d15ade6c841da3e43096e28b2c638d7278f18e835d694b8f24372829a03b25070b2a1f2eb31f5f8bf51b51777ed033d5bbdc204cc77bd4b8b2f3c05190d24985c1dca0dead25400ac48892fff9b7a70d9c7bcf0d7395ea0985f38112363e4b0a3bd7ad4e28a9566708feeaf6ae214b3804e8eddb1eb10452363457ac774b76677f5ea29923e4daef44e3504d4dc7f5c67a9cb4d0a692b5b8fe47cfde7baab97adda63c39383fffbf7762185cda71d5bd11eb93295486e5c54956ad0ef679f15a15530ef0f957e6b881c3423e37924053ec79dd941a2c4327475718295db879e2e33d0a639371810992d2858ada14201e70cd4744eef286ba33aa891dab6ea2529d69a678d3401454b2ffffd1269de51ddde43c649ca4893757053e6c72c5881f9d2e9c65241465b6fc4f7562181eb57d78c8e5c8e00", 0x2000, &(0x7f0000000200)={&(0x7f0000000180)={0xfffffffffffffe47, 0x0, 0x0, {0x7, 0x29, 0x5, 0x1400040}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 39.576523ms ago: executing program 6 (id=951): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)="99", 0x1}], 0x1, 0xfffffc01, 0x81, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) close(r1) 720.877µs ago: executing program 1 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 0s ago: executing program 3 (id=953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 8021q: adding VLAN 0 to HW filter on device team0 [ 146.879467][ T52] Bluetooth: hci5: command tx timeout [ 146.896148][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.896233][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.911448][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.911534][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.366941][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 147.366958][ T31] audit: type=1400 audit(1789168449.248:511): avc: denied { write } for pid=7050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.516970][ T31] audit: type=1400 audit(1789168449.398:512): avc: denied { write } for pid=7070 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.591505][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 147.805886][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.052984][ T6875] veth0_vlan: entered promiscuous mode [ 148.057900][ T6875] veth1_vlan: entered promiscuous mode [ 148.075236][ T6875] veth0_macvtap: entered promiscuous mode [ 148.077511][ T6875] veth1_macvtap: entered promiscuous mode [ 148.082578][ T25] usb 4-1: USB disconnect, device number 5 [ 148.113586][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.128296][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.141565][ T102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.142516][ T102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.144039][ T102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.144216][ T102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.226171][ T121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.226190][ T121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.252728][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.252748][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.274618][ T31] audit: type=1400 audit(1789168450.148:513): avc: denied { mounton } for pid=6875 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 148.416964][ T7094] xt_CT: No such helper "syz1" [ 148.599370][ T25] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 148.749850][ T25] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.750738][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 148.750775][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.750799][ T25] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.750820][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.750840][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.751631][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 148.751666][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.751688][ T25] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.751710][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.751724][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.752472][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 148.752505][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.752529][ T25] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.752549][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 148.752570][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 148.754810][ T25] usb 2-1: string descriptor 0 read error: -22 [ 148.754918][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.781359][ T25] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 150.135757][ T43] IPVS: starting estimator thread 0... [ 150.139196][ T7104] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 150.219363][ T7107] IPVS: using max 48 ests per chain, 115200 per kthread [ 151.096789][ T31] audit: type=1400 audit(1789168452.978:514): avc: denied { listen } for pid=7119 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.122432][ T5726] usb 2-1: USB disconnect, device number 6 [ 151.363088][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 151.692373][ T31] audit: type=1400 audit(1789168453.578:515): avc: denied { write } for pid=7134 comm="syz.3.401" name="event2" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.692677][ T31] audit: type=1400 audit(1789168453.578:516): avc: denied { open } for pid=7134 comm="syz.3.401" path="/dev/input/event2" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.818202][ T31] audit: type=1400 audit(1789168453.698:517): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 151.849506][ T5820] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 152.001036][ T5820] usb 6-1: Using ep0 maxpacket: 16 [ 152.001713][ T5820] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 152.003655][ T5820] usb 6-1: config index 0 descriptor too short (expected 18640, got 18) [ 152.003678][ T5820] usb 6-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 152.003719][ T5820] usb 6-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 152.003737][ T5820] usb 6-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 152.006280][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.006301][ T5820] usb 6-1: Product: syz [ 152.006316][ T5820] usb 6-1: Manufacturer: syz [ 152.006329][ T5820] usb 6-1: SerialNumber: syz [ 152.139322][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.290124][ T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 152.292933][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.292995][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.296457][ T25] usb 2-1: config 0 descriptor?? [ 152.356657][ T5820] usb 6-1: USB disconnect, device number 2 [ 152.547298][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 152.547382][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 152.570183][ T25] usb 2-1: USB disconnect, device number 7 [ 152.978164][ T7154] FAULT_INJECTION: forcing a failure. [ 152.978164][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 152.978196][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.3.409 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.978222][ T7154] Tainted: [L]=SOFTLOCKUP [ 152.978228][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 152.978239][ T7154] Call Trace: [ 152.978245][ T7154] [ 152.978253][ T7154] dump_stack_lvl+0x100/0x190 [ 152.978284][ T7154] should_fail_ex.cold+0x5/0xa [ 152.978309][ T7154] should_failslab+0xc2/0x120 [ 152.978329][ T7154] __kmalloc_cache_noprof+0x91/0x6d0 [ 152.978356][ T7154] ? __might_fault+0xc5/0x140 [ 152.978382][ T7154] ? alloc_bprm+0x86/0x9e0 [ 152.978405][ T7154] alloc_bprm+0x86/0x9e0 [ 152.978427][ T7154] do_execveat_common.isra.0+0x19c/0x580 [ 152.978449][ T7154] ? do_getname+0x191/0x390 [ 152.978477][ T7154] __x64_sys_execveat+0xdf/0x130 [ 152.978500][ T7154] do_syscall_64+0x123/0x790 [ 152.978527][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.978548][ T7154] RIP: 0033:0x7f201879e159 [ 152.978564][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.978582][ T7154] RSP: 002b:00007f2019725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 152.978601][ T7154] RAX: ffffffffffffffda RBX: 00007f2018a25fa0 RCX: 00007f201879e159 [ 152.978613][ T7154] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 152.978624][ T7154] RBP: 00007f201883503b R08: 0000000000001000 R09: 0000000000000000 [ 152.978635][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.978646][ T7154] R13: 00007f2018a26038 R14: 00007f2018a25fa0 R15: 00007ffddc5ee708 [ 152.978671][ T7154] [ 153.000740][ T5726] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 153.010185][ T31] audit: type=1400 audit(1789168454.898:518): avc: denied { read } for pid=7150 comm="syz.0.417" name="sg0" dev="devtmpfs" ino=878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 153.172115][ T5726] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 153.173482][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 153.173516][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.219275][ T5726] usb 2-1: config 0 descriptor?? [ 153.642250][ T5726] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 153.642280][ T5726] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 153.642302][ T5726] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 153.642321][ T5726] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 153.642339][ T5726] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 153.642358][ T5726] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 153.642406][ T5726] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 153.642426][ T5726] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 153.642446][ T5726] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 153.642465][ T5726] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 153.676552][ T5726] logitech-djreceiver 0003:046D:C71F.0003: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 154.032845][ T25] usb 2-1: USB disconnect, device number 8 [ 154.259337][ T5820] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 154.409731][ T5820] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 154.410595][ T5820] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 154.410630][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.410653][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.410673][ T5820] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.411508][ T5820] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 154.411540][ T5820] usb 6-1: Manufacturer: syz [ 154.417353][ T5820] usb 6-1: config 0 descriptor?? [ 154.713153][ T31] audit: type=1400 audit(1789168456.598:519): avc: denied { write } for pid=7187 comm="syz.1.422" name="functions" dev="configfs" ino=7048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.713425][ T31] audit: type=1400 audit(1789168456.598:520): avc: denied { create } for pid=7187 comm="syz.1.422" name="uvc.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 154.720766][ T31] audit: type=1400 audit(1789168456.608:521): avc: denied { write } for pid=7187 comm="syz.1.422" name="mjpeg" dev="configfs" ino=16932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.721498][ T31] audit: type=1400 audit(1789168456.608:522): avc: denied { read } for pid=7187 comm="syz.1.422" name="bmaControls" dev="configfs" ino=16941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 154.833934][ T5820] appleir 0003:05AC:8243.0004: item fetching failed at offset 0/1 [ 154.834407][ T5820] appleir 0003:05AC:8243.0004: parse failed [ 154.834483][ T5820] appleir 0003:05AC:8243.0004: probe with driver appleir failed with error -22 [ 154.931981][ T31] audit: type=1400 audit(1789168456.818:523): avc: denied { sqpoll } for pid=7195 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.037169][ T10] usb 6-1: USB disconnect, device number 3 [ 155.125473][ T7202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7202 comm=syz.3.427 [ 155.126426][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 155.168241][ T7202] vlan2: entered allmulticast mode [ 155.168261][ T7202] bond2: entered allmulticast mode [ 155.399906][ T31] audit: type=1400 audit(1789168457.288:524): avc: denied { mount } for pid=7207 comm="syz.1.429" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 155.519487][ T5820] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.599841][ T31] audit: type=1400 audit(1789168457.478:525): avc: denied { rename } for pid=7212 comm="syz.5.431" name="file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 155.670788][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 155.672894][ T5820] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 155.674143][ T5820] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 155.674183][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.674208][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 212, changing to 11 [ 155.674232][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58557, setting to 1024 [ 155.674255][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.674291][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.676379][ T5820] usb 4-1: config 0 descriptor?? [ 155.729313][ T5820] rc_core: IR keymap rc-hauppauge not found [ 155.729343][ T5820] Registered IR keymap rc-empty [ 155.730276][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 155.756808][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 155.771462][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 155.774285][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 155.819367][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 155.840475][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 155.859554][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 155.879551][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 155.901286][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 155.920132][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 155.939766][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 155.962051][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 155.979466][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 156.001896][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 156.022819][ T5820] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 156.022834][ T5820] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 156.147589][ T31] audit: type=1400 audit(1789168458.028:526): avc: denied { call } for pid=7233 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 156.434755][ T5726] usb 4-1: USB disconnect, device number 6 [ 157.355900][ T7259] FAULT_INJECTION: forcing a failure. [ 157.355900][ T7259] name failslab, interval 1, probability 0, space 0, times 0 [ 157.355933][ T7259] CPU: 1 UID: 0 PID: 7259 Comm: syz.3.446 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.355959][ T7259] Tainted: [L]=SOFTLOCKUP [ 157.355966][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 157.355978][ T7259] Call Trace: [ 157.355985][ T7259] [ 157.355993][ T7259] dump_stack_lvl+0x100/0x190 [ 157.356026][ T7259] should_fail_ex.cold+0x5/0xa [ 157.356055][ T7259] should_failslab+0xc2/0x120 [ 157.356082][ T7259] __kvmalloc_node_noprof+0x113/0x9b0 [ 157.356104][ T7259] ? __might_fault+0xc5/0x140 [ 157.356133][ T7259] ? xt_alloc_table_info+0x44/0xa0 [ 157.356163][ T7259] xt_alloc_table_info+0x44/0xa0 [ 157.356188][ T7259] do_ipt_set_ctl+0x611/0xcf0 [ 157.356215][ T7259] ? nf_sockopt_find.isra.0+0x222/0x290 [ 157.356239][ T7259] ? nf_sockopt_find.isra.0+0x222/0x290 [ 157.356266][ T7259] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 157.356293][ T7259] ? __mutex_unlock_slowpath+0x35d/0x930 [ 157.356321][ T7259] ? sockopt_release_sock+0x5c/0x70 [ 157.356345][ T7259] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.356381][ T7259] ? nf_sockopt_find.isra.0+0x222/0x290 [ 157.356414][ T7259] nf_setsockopt+0x8d/0xf0 [ 157.356440][ T7259] ip_setsockopt+0xcb/0xf0 [ 157.356472][ T7259] udp_setsockopt+0x64/0xb0 [ 157.356498][ T7259] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 157.356529][ T7259] do_sock_setsockopt+0xf3/0x1d0 [ 157.356559][ T7259] __sys_setsockopt+0x195/0x220 [ 157.356587][ T7259] __x64_sys_setsockopt+0xbd/0x160 [ 157.356608][ T7259] ? do_syscall_64+0xae/0x790 [ 157.356632][ T7259] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.356656][ T7259] do_syscall_64+0x123/0x790 [ 157.356683][ T7259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.356703][ T7259] RIP: 0033:0x7f201879e159 [ 157.356720][ T7259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.356739][ T7259] RSP: 002b:00007f2019725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.356758][ T7259] RAX: ffffffffffffffda RBX: 00007f2018a25fa0 RCX: 00007f201879e159 [ 157.356771][ T7259] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 157.356783][ T7259] RBP: 00007f201883503b R08: 0000000000000408 R09: 0000000000000000 [ 157.356794][ T7259] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000000 [ 157.356806][ T7259] R13: 00007f2018a26038 R14: 00007f2018a25fa0 R15: 00007ffddc5ee708 [ 157.356832][ T7259] [ 157.419105][ T31] audit: type=1400 audit(1789168459.288:527): avc: denied { write } for pid=7257 comm="syz.4.445" name="video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 157.456218][ T7260] netlink: 'syz.4.445': attribute type 2 has an invalid length. [ 157.611421][ T7260] : entered promiscuous mode [ 158.053403][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 158.061541][ T7274] FAULT_INJECTION: forcing a failure. [ 158.061541][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 158.061571][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.3.450 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.061595][ T7274] Tainted: [L]=SOFTLOCKUP [ 158.061602][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 158.061613][ T7274] Call Trace: [ 158.061620][ T7274] [ 158.061626][ T7274] dump_stack_lvl+0x100/0x190 [ 158.061655][ T7274] should_fail_ex.cold+0x5/0xa [ 158.061680][ T7274] should_failslab+0xc2/0x120 [ 158.061702][ T7274] __kmalloc_noprof+0xfc/0x840 [ 158.061722][ T7274] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 158.061745][ T7274] apply_wqattrs_prepare+0xfe/0xbb0 [ 158.061762][ T7274] ? __alloc_workqueue+0x8ca/0x1950 [ 158.061789][ T7274] apply_workqueue_attrs_locked+0x64/0xe0 [ 158.061809][ T7274] __alloc_workqueue+0x9a7/0x1950 [ 158.061837][ T7274] alloc_workqueue_noprof+0xc7/0x130 [ 158.061858][ T7274] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 158.061881][ T7274] ? bond_init+0xc0/0xb80 [ 158.061904][ T7274] ? find_held_lock+0x2b/0x80 [ 158.061931][ T7274] ? bond_init+0x187/0xb80 [ 158.061953][ T7274] ? bond_init+0x187/0xb80 [ 158.061981][ T7274] bond_init+0x1b8/0xb80 [ 158.062004][ T7274] ? kasan_save_track+0x14/0x30 [ 158.062022][ T7274] ? __kasan_kmalloc+0xaa/0xb0 [ 158.062040][ T7274] ? __pfx_bond_init+0x10/0x10 [ 158.062061][ T7274] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 158.062086][ T7274] ? register_netdevice+0x50c/0x25a0 [ 158.062111][ T7274] ? __pfx_bond_init+0x10/0x10 [ 158.062132][ T7274] register_netdevice+0x685/0x25a0 [ 158.062155][ T7274] ? __pfx_validate_linkmsg+0x10/0x10 [ 158.062175][ T7274] ? __pfx_register_netdevice+0x10/0x10 [ 158.062202][ T7274] bond_newlink+0x6a/0x100 [ 158.062220][ T7274] ? __pfx_bond_newlink+0x10/0x10 [ 158.062237][ T7274] rtnl_newlink+0x1697/0x2620 [ 158.062266][ T7274] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.062284][ T7274] ? avc_has_perm_noaudit+0x56/0x3b0 [ 158.062307][ T7274] ? find_held_lock+0x2b/0x80 [ 158.062328][ T7274] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 158.062348][ T7274] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 158.062393][ T7274] ? lock_acquire+0x1d1/0x380 [ 158.062409][ T7274] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 158.062430][ T7274] ? find_held_lock+0x2b/0x80 [ 158.062451][ T7274] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 158.062470][ T7274] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 158.062491][ T7274] ? __pfx_rtnl_newlink+0x10/0x10 [ 158.062512][ T7274] rtnetlink_rcv_msg+0x95e/0xe90 [ 158.062534][ T7274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.062561][ T7274] ? ref_tracker_free+0x37e/0x6c0 [ 158.062584][ T7274] netlink_rcv_skb+0x159/0x420 [ 158.062602][ T7274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 158.062624][ T7274] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.062650][ T7274] ? netlink_deliver_tap+0x1ae/0xcc0 [ 158.062683][ T7274] netlink_unicast+0x585/0x850 [ 158.062704][ T7274] ? __pfx_netlink_unicast+0x10/0x10 [ 158.062728][ T7274] netlink_sendmsg+0x8b0/0xda0 [ 158.062750][ T7274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.062770][ T7274] ? selinux_socket_sendmsg+0x198/0x2f0 [ 158.062800][ T7274] ____sys_sendmsg+0xa4d/0xbe0 [ 158.062822][ T7274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.062841][ T7274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.062875][ T7274] ___sys_sendmsg+0x190/0x1e0 [ 158.062900][ T7274] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.062929][ T7274] ? futex_wait+0x11e/0x370 [ 158.062954][ T7274] ? find_held_lock+0x2b/0x80 [ 158.062991][ T7274] __sys_sendmsg+0x160/0x210 [ 158.063011][ T7274] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.063045][ T7274] do_syscall_64+0x123/0x790 [ 158.063070][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.063088][ T7274] RIP: 0033:0x7f201879e159 [ 158.063103][ T7274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.063119][ T7274] RSP: 002b:00007f2019725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.063137][ T7274] RAX: ffffffffffffffda RBX: 00007f2018a25fa0 RCX: 00007f201879e159 [ 158.063149][ T7274] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 158.063159][ T7274] RBP: 00007f201883503b R08: 0000000000000000 R09: 0000000000000000 [ 158.063168][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.063179][ T7274] R13: 00007f2018a26038 R14: 00007f2018a25fa0 R15: 00007ffddc5ee708 [ 158.063205][ T7274] [ 158.464979][ T7277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.497516][ T7281] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 159.030056][ T31] audit: type=1400 audit(1789168460.918:528): avc: denied { write } for pid=7276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.235919][ T31] audit: type=1400 audit(1789168461.118:529): avc: denied { write } for pid=7304 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.399372][ T987] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 159.563240][ T987] usb 2-1: not running at top speed; connect to a high speed hub [ 159.563279][ T987] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 159.565648][ T987] usb 2-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 159.565688][ T987] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 3840, setting to 64 [ 159.565712][ T987] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 159.565745][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.569770][ T7302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.575221][ T987] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 159.586208][ T31] audit: type=1400 audit(1789168461.458:530): avc: denied { write } for pid=7312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.597230][ T987] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 159.607065][ T987] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 159.607124][ T987] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 159.622132][ T987] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 159.756481][ T31] audit: type=1400 audit(1789168461.638:531): avc: denied { write } for pid=7324 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.059003][ T5820] usb 2-1: USB disconnect, device number 9 [ 160.087040][ T5820] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 160.107649][ T5820] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 160.108425][ T5820] keyspan 2-1:1.0: device disconnected [ 160.136027][ T31] audit: type=1400 audit(1789168462.018:532): avc: denied { write } for pid=7327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.282671][ T31] audit: type=1400 audit(1789168462.168:533): avc: denied { write } for pid=7342 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.536450][ T7371] macvlan2: entered promiscuous mode [ 161.536472][ T7371] macvlan2: entered allmulticast mode [ 161.857349][ T7379] netlink: 14544 bytes leftover after parsing attributes in process `syz.5.471'. [ 162.000357][ T31] audit: type=1400 audit(1789168463.888:534): avc: denied { write } for pid=7355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.147280][ T31] audit: type=1400 audit(1789168464.028:535): avc: denied { write } for pid=7386 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.332696][ T102] IPVS: starting estimator thread 0... [ 162.420410][ T7392] IPVS: using max 53 ests per chain, 127200 per kthread [ 162.488846][ T31] audit: type=1400 audit(1789168464.368:536): avc: denied { connect } for pid=7397 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.509520][ T31] audit: type=1400 audit(1789168464.388:537): avc: denied { setopt } for pid=7397 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.934919][ T7416] input: syz0 as /devices/virtual/input/input10 [ 163.666332][ T7433] smpboot: CPU 1 is now offline [ 163.785965][ T7434] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 163.894276][ T7444] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.929572][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 164.090527][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 164.091026][ T10] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 164.091881][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.091903][ T10] usb 4-1: config 0 has no interfaces? [ 164.093866][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.093887][ T10] usb 4-1: Product: syz [ 164.093901][ T10] usb 4-1: Manufacturer: syz [ 164.093914][ T10] usb 4-1: SerialNumber: syz [ 164.096114][ T10] usb 4-1: config 0 descriptor?? [ 164.156366][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 164.156380][ T31] audit: type=1400 audit(1789168466.038:544): avc: denied { getopt } for pid=7446 comm="syz.5.489" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.330764][ T10] usb 4-1: USB disconnect, device number 7 [ 164.442467][ T7456] futex_wake_op: syz.0.493 tries to shift op by 144; fix this program [ 164.442652][ T7456] futex_wake_op: syz.0.493 tries to shift op by 144; fix this program [ 164.873357][ T31] audit: type=1400 audit(1789168466.758:545): avc: denied { create } for pid=7470 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.875663][ T31] audit: type=1400 audit(1789168466.758:546): avc: denied { setopt } for pid=7470 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.891286][ T31] audit: type=1400 audit(1789168466.758:547): avc: denied { read } for pid=5264 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 164.898963][ T7471] netlink: 'syz.1.498': attribute type 13 has an invalid length. [ 165.264493][ T7489] openvswitch: netlink: IP tunnel dst address not specified [ 165.265759][ T31] audit: type=1400 audit(1789168467.148:548): avc: denied { write } for pid=7486 comm="syz.5.502" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 165.313307][ T7489] usb usb8: usbfs: process 7489 (syz.5.502) did not claim interface 0 before use [ 165.528880][ T31] audit: type=1400 audit(1789168467.408:549): avc: denied { connect } for pid=7494 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.573016][ T31] audit: type=1400 audit(1789168467.458:550): avc: denied { create } for pid=7496 comm="syz.5.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 165.593932][ T31] audit: type=1400 audit(1789168467.468:551): avc: denied { write } for pid=7476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.900453][ T31] audit: type=1400 audit(1789168467.788:552): avc: denied { write } for pid=7504 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.171656][ T7515] Illegal XDP return value 4294967274 on prog (id 39) dev syzkaller1, expect packet loss! [ 166.279334][ T31] audit: type=1400 audit(1789168468.048:553): avc: denied { getopt } for pid=7508 comm="syz.5.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.772083][ T7529] FAULT_INJECTION: forcing a failure. [ 166.772083][ T7529] name failslab, interval 1, probability 0, space 0, times 0 [ 166.772116][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz.3.509 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.772141][ T7529] Tainted: [L]=SOFTLOCKUP [ 166.772149][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 166.772161][ T7529] Call Trace: [ 166.772168][ T7529] [ 166.772176][ T7529] dump_stack_lvl+0x100/0x190 [ 166.772208][ T7529] should_fail_ex.cold+0x5/0xa [ 166.772236][ T7529] should_failslab+0xc2/0x120 [ 166.772262][ T7529] __kmalloc_noprof+0xfc/0x840 [ 166.772281][ T7529] ? kasan_save_track+0x14/0x30 [ 166.772303][ T7529] ? lsm_blob_alloc+0x68/0x90 [ 166.772330][ T7529] lsm_blob_alloc+0x68/0x90 [ 166.772355][ T7529] security_bpf_prog_load+0x5b/0x2f0 [ 166.772379][ T7529] bpf_check+0x16d5/0xa980 [ 166.772405][ T7529] ? __css_rstat_updated+0x1ce/0x590 [ 166.772427][ T7529] ? __lock_acquire+0x5c0/0x1f40 [ 166.772447][ T7529] ? __pfx___css_rstat_updated+0x10/0x10 [ 166.772477][ T7529] ? __lock_acquire+0x5c0/0x1f40 [ 166.772512][ T7529] ? __pfx_bpf_check+0x10/0x10 [ 166.772539][ T7529] ? lock_acquire+0x1d1/0x380 [ 166.772558][ T7529] ? bpf_prog_load+0x1a09/0x2a80 [ 166.772585][ T7529] ? find_held_lock+0x2b/0x80 [ 166.772618][ T7529] ? bpf_prog_load+0x1a09/0x2a80 [ 166.772647][ T7529] ? __asan_memset+0x23/0x50 [ 166.772670][ T7529] ? bpf_prog_load+0x1ac3/0x2a80 [ 166.772700][ T7529] bpf_prog_load+0x1ac3/0x2a80 [ 166.772731][ T7529] ? __pfx_bpf_prog_load+0x10/0x10 [ 166.772779][ T7529] __sys_bpf+0x1f46/0x4a30 [ 166.772805][ T7529] ? __pfx___sys_bpf+0x10/0x10 [ 166.772822][ T7529] ? __pfx_futex_hash+0x10/0x10 [ 166.772867][ T7529] ? security_capable+0xbd/0x260 [ 166.772928][ T7529] ? __x64_sys_futex+0x34f/0x4d0 [ 166.772954][ T7529] ? __x64_sys_futex+0x358/0x4d0 [ 166.772983][ T7529] ? xfd_validate_state+0x129/0x190 [ 166.773012][ T7529] ? __x64_sys_bpf+0xce/0x140 [ 166.773029][ T7529] __x64_sys_bpf+0xce/0x140 [ 166.773047][ T7529] ? do_syscall_64+0xae/0x790 [ 166.773073][ T7529] do_syscall_64+0x123/0x790 [ 166.773100][ T7529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.773119][ T7529] RIP: 0033:0x7f201879e159 [ 166.773136][ T7529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.773154][ T7529] RSP: 002b:00007f2019725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.773174][ T7529] RAX: ffffffffffffffda RBX: 00007f2018a25fa0 RCX: 00007f201879e159 [ 166.773187][ T7529] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 166.773198][ T7529] RBP: 00007f201883503b R08: 0000000000000000 R09: 0000000000000000 [ 166.773210][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.773221][ T7529] R13: 00007f2018a26038 R14: 00007f2018a25fa0 R15: 00007ffddc5ee708 [ 166.773248][ T7529] [ 167.366850][ T7545] kvm: pic: non byte write [ 167.439852][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 167.589293][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 167.590001][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 167.590919][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 167.590949][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 167.590985][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 167.591010][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.591032][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.591054][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.591078][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 167.591103][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 167.592984][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 167.593012][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 167.593044][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 167.593068][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.593091][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.593115][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.593136][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 167.593158][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 167.593979][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 167.594006][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 167.594035][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 167.594059][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.594080][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.594101][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.594122][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 167.594143][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 167.597734][ T9] usb 6-1: string descriptor 0 read error: -22 [ 167.597879][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.891182][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 168.197394][ T9] usb 6-1: USB disconnect, device number 4 [ 168.198224][ T7540] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 168.747665][ T7568] netlink: 'syz.3.519': attribute type 1 has an invalid length. [ 168.844745][ T7568] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.982430][ T7573] bond3: (slave veth3): Enslaving as an active interface with a down link [ 168.999916][ T7568] veth0_virt_wifi: entered promiscuous mode [ 169.030600][ T7568] bond3: (slave veth0_virt_wifi): making interface the new active one [ 169.032807][ T7568] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 169.075457][ T7568] bond3: (slave veth0_virt_wifi): Releasing active interface [ 169.937737][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.538'. [ 169.937761][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.538'. [ 171.095971][ T7643] Set syz1 is full, maxelem 2076 reached [ 171.396731][ T7648] FAULT_INJECTION: forcing a failure. [ 171.396731][ T7648] name failslab, interval 1, probability 0, space 0, times 0 [ 171.396763][ T7648] CPU: 0 UID: 0 PID: 7648 Comm: syz.4.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.396791][ T7648] Tainted: [L]=SOFTLOCKUP [ 171.396798][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 171.396810][ T7648] Call Trace: [ 171.396816][ T7648] [ 171.396824][ T7648] dump_stack_lvl+0x100/0x190 [ 171.396855][ T7648] should_fail_ex.cold+0x5/0xa [ 171.396882][ T7648] should_failslab+0xc2/0x120 [ 171.396906][ T7648] __kmalloc_cache_noprof+0x91/0x6d0 [ 171.396934][ T7648] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 171.396967][ T7648] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 171.396994][ T7648] ? rcu_is_watching+0x13/0xc0 [ 171.397020][ T7648] ? trace_contention_end+0x126/0x160 [ 171.397043][ T7648] ? __mutex_lock+0x26c/0x1bd0 [ 171.397071][ T7648] ? snd_pcm_oss_sync+0x243/0x840 [ 171.397098][ T7648] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 171.397127][ T7648] ? __pfx___mutex_lock+0x10/0x10 [ 171.397157][ T7648] ? __fsnotify_parent+0x2b4/0xd00 [ 171.397194][ T7648] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 171.397221][ T7648] snd_pcm_oss_sync+0x265/0x840 [ 171.397251][ T7648] snd_pcm_oss_release+0x238/0x300 [ 171.397277][ T7648] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 171.397302][ T7648] __fput+0x3ff/0xb50 [ 171.397331][ T7648] task_work_run+0x150/0x240 [ 171.397360][ T7648] ? __pfx_task_work_run+0x10/0x10 [ 171.397386][ T7648] ? __x64_sys_openat+0x12d/0x210 [ 171.397418][ T7648] exit_to_user_mode_loop+0x1d8/0x700 [ 171.397442][ T7648] ? rcu_is_watching+0x13/0xc0 [ 171.397468][ T7648] do_syscall_64+0x661/0x790 [ 171.397495][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.397516][ T7648] RIP: 0033:0x7f2fab59e159 [ 171.397538][ T7648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.397558][ T7648] RSP: 002b:00007f2fac522028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.397579][ T7648] RAX: ffffffffffffffea RBX: 00007f2fab825fa0 RCX: 00007f2fab59e159 [ 171.397592][ T7648] RDX: 00000000000a6f81 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 171.397606][ T7648] RBP: 00007f2fab63503b R08: 0000000000000000 R09: 0000000000000000 [ 171.397618][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.397631][ T7648] R13: 00007f2fab826038 R14: 00007f2fab825fa0 R15: 00007ffca15d4598 [ 171.397658][ T7648] [ 171.693712][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 172.037707][ T7666] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 172.451444][ T7677] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.653421][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 172.653439][ T31] audit: type=1400 audit(1789168474.538:560): avc: denied { setopt } for pid=7681 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.658403][ T7682] netlink: 32 bytes leftover after parsing attributes in process `syz.3.561'. [ 173.009278][ T31] audit: type=1400 audit(1789168474.888:561): avc: denied { ioctl } for pid=7684 comm="syz.1.564" path="/dev/video7" dev="devtmpfs" ino=948 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 175.119539][ T5726] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 175.219298][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 175.269332][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 175.269990][ T5726] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 175.285932][ T5726] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 175.285957][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.285972][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 212, changing to 11 [ 175.285986][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58557, setting to 1024 [ 175.285999][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.286020][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.287707][ T5726] usb 2-1: config 0 descriptor?? [ 175.349316][ T5726] rc_core: IR keymap rc-hauppauge not found [ 175.349331][ T5726] Registered IR keymap rc-empty [ 175.349645][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.369723][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.379914][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 175.380746][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.380778][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.385855][ T10] usb 6-1: config 0 descriptor?? [ 175.391024][ T5726] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 175.433891][ T5726] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 175.437136][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.449569][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.470574][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.490368][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.509601][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.529608][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.549566][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.569536][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.589403][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.595988][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 175.596088][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 175.598465][ T10] usb 6-1: USB disconnect, device number 5 [ 175.609428][ T5726] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 175.635986][ T5726] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 175.636007][ T5726] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 176.039874][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 176.043854][ T5726] usb 2-1: USB disconnect, device number 10 [ 176.189811][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 176.190643][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 176.190681][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.193015][ T10] usb 6-1: config 0 descriptor?? [ 176.624418][ T10] hid_parser_main: 457 callbacks suppressed [ 176.624441][ T10] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 176.624464][ T10] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 176.624485][ T10] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 176.624504][ T10] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 176.624525][ T10] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 176.624544][ T10] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 176.624593][ T10] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 176.624614][ T10] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 176.624633][ T10] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 176.624669][ T10] logitech-djreceiver 0003:046D:C71F.0005: unknown main item tag 0x0 [ 176.731031][ T10] logitech-djreceiver 0003:046D:C71F.0005: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 177.077944][ T5820] usb 6-1: USB disconnect, device number 6 [ 179.148610][ T7765] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 180.441048][ T31] audit: type=1400 audit(1789168482.328:562): avc: denied { write } for pid=7772 comm="syz.1.595" name="functions" dev="configfs" ino=7048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 180.679314][ T987] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.830548][ T987] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.831466][ T987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.831504][ T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.833747][ T987] usb 4-1: config 0 descriptor?? [ 181.056505][ T987] usbhid 4-1:0.0: can't add hid device: -71 [ 181.056596][ T987] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 181.071607][ T987] usb 4-1: USB disconnect, device number 8 [ 181.499349][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 181.651217][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 181.653347][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 181.653403][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.693816][ T10] usb 4-1: config 0 descriptor?? [ 181.837714][ T7792] syz_tun: entered allmulticast mode [ 181.857822][ T7792] dvmrp6: entered allmulticast mode [ 181.870538][ T7791] syz_tun: left allmulticast mode [ 182.146061][ T10] hid_parser_main: 457 callbacks suppressed [ 182.146084][ T10] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 182.146109][ T10] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 182.146130][ T10] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 182.146152][ T10] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 182.146172][ T10] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 182.146193][ T10] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 182.146244][ T10] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 182.146264][ T10] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 182.146283][ T10] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 182.146303][ T10] logitech-djreceiver 0003:046D:C71F.0006: unknown main item tag 0x0 [ 182.161123][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 182.190073][ T10] logitech-djreceiver 0003:046D:C71F.0006: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 182.310047][ T9] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 182.311092][ T9] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.312740][ T9] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.315730][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.315752][ T9] usb 2-1: Product: syz [ 182.315766][ T9] usb 2-1: Manufacturer: syz [ 182.315780][ T9] usb 2-1: SerialNumber: syz [ 182.329655][ T9] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 182.351225][ T9] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 182.362534][ T9] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 182.601441][ T9] usb 4-1: USB disconnect, device number 9 [ 184.480484][ T7794] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 184.484373][ T987] usb 2-1: USB disconnect, device number 11 [ 184.506453][ T987] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 184.509311][ T987] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 184.509942][ T987] ti_usb_3410_5052 2-1:2.0: device disconnected [ 185.084522][ T7804] Set syz1 is full, maxelem 2076 reached [ 185.285921][ T7815] smpboot: CPU 1 is now offline [ 185.350291][ T7816] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 185.476864][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.489123][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.497508][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.506444][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.514634][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.619394][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 185.769719][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 185.770273][ T9] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 185.771174][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.771193][ T9] usb 6-1: config 0 has no interfaces? [ 185.772911][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.772933][ T9] usb 6-1: Product: syz [ 185.772948][ T9] usb 6-1: Manufacturer: syz [ 185.772962][ T9] usb 6-1: SerialNumber: syz [ 185.776317][ T9] usb 6-1: config 0 descriptor?? [ 186.040728][ T9] usb 6-1: USB disconnect, device number 7 [ 186.317620][ T7818] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.319046][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.319150][ T7818] bridge_slave_0: entered allmulticast mode [ 186.342767][ T7818] bridge_slave_0: entered promiscuous mode [ 186.362314][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.363952][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.364058][ T7818] bridge_slave_1: entered allmulticast mode [ 186.368060][ T7818] bridge_slave_1: entered promiscuous mode [ 186.434811][ T7818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.437006][ T7818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.494635][ T7818] team0: Port device team_slave_0 added [ 186.496923][ T7818] team0: Port device team_slave_1 added [ 186.516867][ T7818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.516883][ T7818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.516905][ T7818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.518431][ T7818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.518442][ T7818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.518463][ T7818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.547852][ T7818] hsr_slave_0: entered promiscuous mode [ 186.548507][ T7818] hsr_slave_1: entered promiscuous mode [ 186.548959][ T7818] debugfs: 'hsr0' already exists in 'hsr' [ 186.548973][ T7818] Cannot create hsr debugfs directory [ 186.687771][ T7850] FAULT_INJECTION: forcing a failure. [ 186.687771][ T7850] name failslab, interval 1, probability 0, space 0, times 0 [ 186.687805][ T7850] CPU: 0 UID: 0 PID: 7850 Comm: syz.5.619 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.687833][ T7850] Tainted: [L]=SOFTLOCKUP [ 186.687840][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 186.687852][ T7850] Call Trace: [ 186.687858][ T7850] [ 186.687866][ T7850] dump_stack_lvl+0x100/0x190 [ 186.687898][ T7850] should_fail_ex.cold+0x5/0xa [ 186.687925][ T7850] should_failslab+0xc2/0x120 [ 186.687951][ T7850] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 186.687974][ T7850] ? xas_create+0x1f4/0x14e0 [ 186.687999][ T7850] ? kvasprintf_const+0x66/0x1a0 [ 186.688025][ T7850] kvasprintf+0xbc/0x150 [ 186.688045][ T7850] ? __pfx_kvasprintf+0x10/0x10 [ 186.688068][ T7850] ? find_held_lock+0x2b/0x80 [ 186.688094][ T7850] ? ida_alloc_range+0x70d/0x830 [ 186.688119][ T7850] ? rcu_is_watching+0x13/0xc0 [ 186.688144][ T7850] ? ida_alloc_range+0x70d/0x830 [ 186.688173][ T7850] kvasprintf_const+0x66/0x1a0 [ 186.688195][ T7850] kobject_set_name_vargs+0x5a/0x140 [ 186.688215][ T7850] kobject_init_and_add+0xe7/0x180 [ 186.688235][ T7850] ? __pfx_kobject_init_and_add+0x10/0x10 [ 186.688259][ T7850] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 186.688289][ T7850] ? lockdep_init_map_type+0x5c/0x250 [ 186.688315][ T7850] swnode_register+0x5c9/0x750 [ 186.688339][ T7850] fwnode_create_software_node+0x1c8/0x3f0 [ 186.688362][ T7850] device_create_managed_software_node+0x103/0x270 [ 186.688388][ T7850] iommufd_test+0x3007/0x6600 [ 186.688412][ T7850] ? __lock_acquire+0x5c0/0x1f40 [ 186.688433][ T7850] ? __lock_acquire+0x5c0/0x1f40 [ 186.688456][ T7850] ? __pfx_iommufd_test+0x10/0x10 [ 186.688475][ T7850] ? tomoyo_path_number_perm+0x188/0x580 [ 186.688517][ T7850] ? lock_acquire+0x1d1/0x380 [ 186.688534][ T7850] ? __might_fault+0xc5/0x140 [ 186.688559][ T7850] ? find_held_lock+0x2b/0x80 [ 186.688582][ T7850] ? __might_fault+0xc5/0x140 [ 186.688618][ T7850] iommufd_fops_ioctl+0x358/0x520 [ 186.688642][ T7850] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 186.688663][ T7850] ? __fget_files+0x34/0x3d0 [ 186.688694][ T7850] ? selinux_file_ioctl+0x13b/0x290 [ 186.688712][ T7850] ? selinux_file_ioctl+0xb6/0x290 [ 186.688732][ T7850] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 186.688756][ T7850] __x64_sys_ioctl+0x18e/0x210 [ 186.688776][ T7850] do_syscall_64+0x123/0x790 [ 186.688803][ T7850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.688822][ T7850] RIP: 0033:0x7f261159e159 [ 186.688839][ T7850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.688858][ T7850] RSP: 002b:00007f2612525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.688877][ T7850] RAX: ffffffffffffffda RBX: 00007f2611825fa0 RCX: 00007f261159e159 [ 186.688888][ T7850] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 186.688898][ T7850] RBP: 00007f261163503b R08: 0000000000000000 R09: 0000000000000000 [ 186.688909][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.688919][ T7850] R13: 00007f2611826038 R14: 00007f2611825fa0 R15: 00007ffe1ca13a58 [ 186.688943][ T7850] [ 186.689001][ T7850] kobject: can not set name properly! [ 186.689053][ T7850] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 186.696268][ T7849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.618'. [ 186.718822][ T7849] netlink: 'syz.1.618': attribute type 10 has an invalid length. [ 186.752715][ T7849] syz_tun: entered promiscuous mode [ 186.783242][ T7849] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 187.182223][ T7818] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 187.187722][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.203900][ T7818] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 187.209291][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.224636][ T7818] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 187.226510][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.227047][ T7818] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 187.240569][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 187.244096][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.344697][ T7818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.385607][ T7818] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.389331][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 187.390010][ T25] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=4c.1d [ 187.390969][ T25] usb 6-1: config 11 has an invalid interface number: 207 but max is 2 [ 187.390987][ T25] usb 6-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 187.391001][ T25] usb 6-1: config 11 has an invalid interface number: 127 but max is 2 [ 187.391016][ T25] usb 6-1: config 11 has an invalid interface number: 5 but max is 2 [ 187.391033][ T25] usb 6-1: config 11 has no interface number 0 [ 187.391046][ T25] usb 6-1: config 11 has no interface number 1 [ 187.391058][ T25] usb 6-1: config 11 has no interface number 2 [ 187.391099][ T25] usb 6-1: config 11 interface 207 altsetting 7 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 187.391121][ T25] usb 6-1: config 11 interface 207 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 187.391140][ T25] usb 6-1: config 11 interface 207 altsetting 7 bulk endpoint 0xF has invalid maxpacket 64 [ 187.391157][ T25] usb 6-1: config 11 interface 207 altsetting 7 endpoint 0x6 has an invalid bInterval 225, changing to 7 [ 187.391176][ T25] usb 6-1: config 11 interface 207 altsetting 7 endpoint 0x7 has invalid wMaxPacketSize 0 [ 187.391192][ T25] usb 6-1: config 11 interface 207 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 187.391209][ T25] usb 6-1: config 11 interface 207 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 187.391228][ T25] usb 6-1: config 11 interface 207 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 187.391244][ T25] usb 6-1: config 11 interface 207 altsetting 7 endpoint 0x4 has invalid maxpacket 1975, setting to 1024 [ 187.391274][ T25] usb 6-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 187.391290][ T25] usb 6-1: config 11 interface 127 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 187.391305][ T25] usb 6-1: config 11 interface 127 altsetting 5 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 187.391323][ T25] usb 6-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x8E, skipping [ 187.391340][ T25] usb 6-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 187.391356][ T25] usb 6-1: config 11 interface 127 altsetting 5 has an endpoint descriptor with address 0x11, changing to 0x1 [ 187.391373][ T25] usb 6-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 187.391390][ T25] usb 6-1: config 11 interface 127 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 187.391409][ T25] usb 6-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 187.391425][ T25] usb 6-1: config 11 interface 127 altsetting 5 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 187.391445][ T25] usb 6-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 187.391460][ T25] usb 6-1: config 11 interface 127 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 187.391475][ T25] usb 6-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 187.391490][ T25] usb 6-1: config 11 interface 127 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 187.391513][ T25] usb 6-1: config 11 interface 5 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 187.391530][ T25] usb 6-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 187.391546][ T25] usb 6-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 187.391562][ T25] usb 6-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 187.391577][ T25] usb 6-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 187.391594][ T25] usb 6-1: config 11 interface 5 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 187.391612][ T25] usb 6-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 187.391628][ T25] usb 6-1: config 11 interface 207 has no altsetting 0 [ 187.391642][ T25] usb 6-1: config 11 interface 127 has no altsetting 0 [ 187.391655][ T25] usb 6-1: config 11 interface 5 has no altsetting 0 [ 187.395027][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.395045][ T25] usb 6-1: Product: syz [ 187.395056][ T25] usb 6-1: Manufacturer: syz [ 187.395068][ T25] usb 6-1: SerialNumber: syz [ 187.402633][ T7855] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 187.403128][ T7855] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 187.425257][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.425332][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.441117][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.441191][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.448819][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.449544][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.603243][ T5602] Bluetooth: hci2: command tx timeout [ 187.837867][ T25] flexcop_usb: set interface failed. [ 187.838903][ T25] b2c2_flexcop_usb 6-1:11.207: probe with driver b2c2_flexcop_usb failed with error -22 [ 187.869864][ T25] flexcop_usb: set interface failed. [ 187.869914][ T25] b2c2_flexcop_usb 6-1:11.127: probe with driver b2c2_flexcop_usb failed with error -22 [ 187.878804][ T25] flexcop_usb: set interface failed. [ 187.878853][ T25] b2c2_flexcop_usb 6-1:11.5: probe with driver b2c2_flexcop_usb failed with error -22 [ 187.897775][ T25] usb 6-1: USB disconnect, device number 8 [ 188.102295][ T7818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.239619][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 188.239699][ T5602] Bluetooth: hci4: command 0x0406 tx timeout [ 188.481477][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.622'. [ 188.513148][ T7818] veth0_vlan: entered promiscuous mode [ 188.531759][ T7818] veth1_vlan: entered promiscuous mode [ 188.536352][ T7887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7887 comm=syz.1.622 [ 188.564210][ T102] Bluetooth: hci1: Frame reassembly failed (-84) [ 188.577527][ T7887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.622'. [ 188.606543][ T7818] veth0_macvtap: entered promiscuous mode [ 188.628179][ T7818] veth1_macvtap: entered promiscuous mode [ 188.664893][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.683948][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.728228][ T67] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.739523][ T67] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.739548][ T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.745618][ T7890] CUSE: unknown device info "" [ 188.745631][ T7890] CUSE: unknown device info "Ö" [ 188.745637][ T7890] CUSE: unknown device info "" [ 188.745643][ T7890] CUSE: unknown device info "" [ 188.745649][ T7890] CUSE: unknown device info "" [ 188.745655][ T7890] CUSE: unknown device info "" [ 188.745661][ T7890] CUSE: unknown device info "ðÿÿÿ" [ 188.745668][ T7890] CUSE: unknown device info "" [ 188.745673][ T7890] CUSE: unknown device info "" [ 188.745679][ T7890] CUSE: unknown device info "" [ 188.745685][ T7890] CUSE: unknown device info "" [ 188.745691][ T7890] CUSE: unknown device info "r" [ 188.745697][ T7890] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 188.745704][ T7890] CUSE: unknown device info "ÿÿÿÿ" [ 188.745710][ T7890] CUSE: unknown device info "" [ 188.745715][ T7890] CUSE: unknown device info "€" [ 188.745722][ T7890] CUSE: DEVNAME unspecified [ 188.750131][ T102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.904796][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.904810][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.038683][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.038703][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.246497][ T7896] CUSE: unknown device info "" [ 189.246512][ T7896] CUSE: unknown device info "Ö" [ 189.246521][ T7896] CUSE: unknown device info "" [ 189.246528][ T7896] CUSE: unknown device info "" [ 189.246535][ T7896] CUSE: unknown device info "" [ 189.246542][ T7896] CUSE: unknown device info "" [ 189.246549][ T7896] CUSE: unknown device info "ðÿÿÿ" [ 189.246557][ T7896] CUSE: unknown device info "" [ 189.246564][ T7896] CUSE: unknown device info "" [ 189.246571][ T7896] CUSE: unknown device info "" [ 189.246578][ T7896] CUSE: unknown device info "" [ 189.246585][ T7896] CUSE: unknown device info "r" [ 189.246593][ T7896] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 189.246600][ T7896] CUSE: unknown device info "ÿÿÿÿ" [ 189.246607][ T7896] CUSE: unknown device info "" [ 189.246615][ T7896] CUSE: unknown device info "€" [ 189.246623][ T7896] CUSE: DEVNAME unspecified [ 189.680129][ T52] Bluetooth: hci2: command tx timeout [ 190.389415][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 190.550288][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 190.553229][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.553276][ T10] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 190.555528][ T10] usb 2-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 190.555550][ T10] usb 2-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 190.558573][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.558597][ T10] usb 2-1: Product: syz [ 190.558612][ T10] usb 2-1: Manufacturer: syz [ 190.558627][ T10] usb 2-1: SerialNumber: syz [ 190.560667][ T52] Bluetooth: hci1: command 0xfc11 tx timeout [ 190.560750][ T4917] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 191.509562][ T10] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 191.591937][ T31] audit: type=1400 audit(1789168493.478:563): avc: denied { write } for pid=7942 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.698853][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.708960][ T10] usb 2-1: device firmware changed [ 191.709752][ T10] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 191.709803][ T10] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 191.730275][ T10] usb 2-1: USB disconnect, device number 12 [ 191.759288][ T4917] Bluetooth: hci2: command tx timeout [ 192.484688][ T7955] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.718231][ T31] audit: type=1400 audit(1789168494.598:564): avc: denied { mount } for pid=7957 comm="syz.1.647" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 192.843897][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 192.875571][ T7961] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.064364][ T31] audit: type=1400 audit(1789168494.948:565): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 193.839483][ T4917] Bluetooth: hci2: command tx timeout [ 193.869873][ T6625] usb 2-1: [UEAGLE-ATM] firmware is not available [ 193.960261][ T4930] usb 5-1: [UEAGLE-ATM] firmware is not available [ 194.378728][ T31] audit: type=1400 audit(1789168496.258:566): avc: denied { watch watch_reads } for pid=7995 comm="syz.6.659" path="pipe:[21595]" dev="pipefs" ino=21595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 194.634318][ T8002] futex_wake_op: syz.1.661 tries to shift op by -1; fix this program [ 194.634470][ T8002] futex_wake_op: syz.1.661 tries to shift op by -1; fix this program [ 194.637444][ T8002] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 195.335474][ T8015] binder: 8014:8015 unknown command 0 [ 195.335494][ T8015] binder: 8014:8015 ioctl c0306201 200000000180 returned -22 [ 195.502859][ T8017] netlink: 'syz.6.667': attribute type 1 has an invalid length. [ 195.548087][ T8019] ip_tables: iptables: counters copy to user failed while replacing table [ 195.657374][ T8017] netlink: 'syz.6.667': attribute type 10 has an invalid length. [ 195.657416][ T8017] netlink: 40 bytes leftover after parsing attributes in process `syz.6.667'. [ 195.660642][ T8017] dummy0: entered promiscuous mode [ 196.789411][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 197.001990][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 197.033642][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.046546][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 197.113697][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.114892][ T10] usb 6-1: Product: syz [ 197.114918][ T10] usb 6-1: Manufacturer: syz [ 197.115214][ T10] usb 6-1: SerialNumber: syz [ 197.473234][ T10] usb 6-1: config 0 descriptor?? [ 197.751505][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 197.751537][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 198.529546][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 199.089003][ T31] audit: type=1400 audit(1789168500.968:567): avc: denied { setopt } for pid=8057 comm="syz.6.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.281422][ T31] audit: type=1326 audit(1789168501.168:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.3.684" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f201879e159 code=0x0 [ 199.394208][ T10] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 199.394260][ T10] em28xx 6-1:0.0: board has no eeprom [ 199.469405][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 199.469469][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 199.473028][ T194] em28xx 6-1:0.0: Binding DVB extension [ 199.508495][ T10] usb 6-1: USB disconnect, device number 9 [ 199.532064][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 200.564900][ T194] em28xx 6-1:0.0: Registering input extension [ 200.565726][ T10] em28xx 6-1:0.0: Closing input extension [ 200.786325][ T10] em28xx: Freeing device [ 200.874712][ T8078] picdev_read: 4 callbacks suppressed [ 200.874731][ T8078] kvm: pic: non byte read [ 200.874899][ T8078] kvm: pic: non byte read [ 200.875060][ T8078] kvm: pic: non byte read [ 200.875217][ T8078] kvm: pic: non byte read [ 200.875385][ T8078] kvm: pic: non byte read [ 200.875549][ T8078] kvm: pic: non byte read [ 200.877443][ T8078] kvm: pic: non byte read [ 200.877614][ T8078] kvm: pic: non byte read [ 200.877776][ T8078] kvm: pic: non byte read [ 200.878081][ T8078] kvm: pic: non byte read [ 200.934629][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.692'. [ 202.485158][ T8121] input: syz0 as /devices/virtual/input/input14 [ 204.099282][ T31] audit: type=1400 audit(1789168505.978:569): avc: denied { bind } for pid=8138 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.461084][ T987] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 204.631053][ T987] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice= 0.02 [ 204.632543][ T987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.632580][ T987] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 204.634314][ T987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.634376][ T987] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 204.638606][ T987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.638645][ T987] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 204.638682][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.729695][ T987] usb 2-1: config 0 descriptor?? [ 204.739369][ T987] rndis_host 2-1:0.0: rndis: master #0/ffff88802bfe4000 slave #1/0000000000000000 [ 204.944957][ T987] usb 2-1: USB disconnect, device number 13 [ 207.983983][ T8188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8188 comm=syz.1.724 [ 207.986424][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 208.158645][ T8191] vlan2: entered allmulticast mode [ 208.158668][ T8191] bond1: entered allmulticast mode [ 208.617796][ T31] audit: type=1400 audit(1789168510.498:570): avc: denied { mount } for pid=8201 comm="syz.1.729" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 208.810205][ T987] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 208.972445][ T987] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 208.973638][ T987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 208.973664][ T987] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 208.973686][ T987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 208.973706][ T987] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 208.978435][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.978462][ T987] usb 4-1: Product: syz [ 208.978477][ T987] usb 4-1: Manufacturer: syz [ 208.978491][ T987] usb 4-1: SerialNumber: syz [ 209.065004][ T987] usb 4-1: config 0 descriptor?? [ 209.079130][ T987] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 210.934656][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.742'. [ 211.499392][ T8254] FAULT_INJECTION: forcing a failure. [ 211.499392][ T8254] name failslab, interval 1, probability 0, space 0, times 0 [ 211.499427][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.4.744 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.499458][ T8254] Tainted: [L]=SOFTLOCKUP [ 211.499466][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 211.499486][ T8254] Call Trace: [ 211.499494][ T8254] [ 211.499502][ T8254] dump_stack_lvl+0x100/0x190 [ 211.499538][ T8254] should_fail_ex.cold+0x5/0xa [ 211.499567][ T8254] should_failslab+0xc2/0x120 [ 211.499593][ T8254] kmem_cache_alloc_noprof+0x92/0x6a0 [ 211.499614][ T8254] ? security_file_alloc+0x34/0x2c0 [ 211.499642][ T8254] security_file_alloc+0x34/0x2c0 [ 211.499666][ T8254] init_file+0x95/0x480 [ 211.499692][ T8254] alloc_empty_file+0x79/0x1c0 [ 211.499719][ T8254] alloc_file_pseudo+0x183/0x290 [ 211.499747][ T8254] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 211.499775][ T8254] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 211.499806][ T8254] sock_alloc_file+0x50/0x210 [ 211.499830][ T8254] __sys_socketpair+0x353/0x5b0 [ 211.499861][ T8254] ? __pfx___sys_socketpair+0x10/0x10 [ 211.499892][ T8254] ? xfd_validate_state+0x129/0x190 [ 211.499925][ T8254] __x64_sys_socketpair+0x96/0x100 [ 211.499955][ T8254] ? lockdep_hardirqs_on+0x7d/0x110 [ 211.499982][ T8254] do_syscall_64+0x123/0x790 [ 211.500012][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.500033][ T8254] RIP: 0033:0x7f2fab59e159 [ 211.500050][ T8254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.500069][ T8254] RSP: 002b:00007f2fac501028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 211.500090][ T8254] RAX: ffffffffffffffda RBX: 00007f2fab826090 RCX: 00007f2fab59e159 [ 211.500103][ T8254] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 211.500114][ T8254] RBP: 00007f2fab63503b R08: 0000000000000000 R09: 0000000000000000 [ 211.500126][ T8254] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 211.500138][ T8254] R13: 00007f2fab826128 R14: 00007f2fab826090 R15: 00007ffca15d4598 [ 211.500163][ T8254] [ 211.768046][ T987] scsi host1: usb-storage 4-1:0.0 [ 211.799796][ T987] usb 4-1: USB disconnect, device number 10 [ 211.866483][ T8259] netlink: 20 bytes leftover after parsing attributes in process `syz.6.746'. [ 212.232240][ T31] audit: type=1800 audit(1789168514.118:571): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.749" name="/" dev="fuse" ino=1 res=0 errno=0 [ 214.000164][ T31] audit: type=1400 audit(1789168515.888:572): avc: denied { remount } for pid=8303 comm="syz.3.761" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 214.078006][ T8311] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 214.123240][ T31] audit: type=1400 audit(1789168516.008:573): avc: denied { watch } for pid=8314 comm="syz.1.765" path="/174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 214.123484][ T31] audit: type=1400 audit(1789168516.008:574): avc: denied { watch_sb watch_reads } for pid=8314 comm="syz.1.765" path="/174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.234011][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.764'. [ 214.313377][ T8321] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 504 (only 8 groups) [ 214.482521][ T31] audit: type=1400 audit(1789168516.368:575): avc: denied { read } for pid=8324 comm="syz.3.768" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.482569][ T31] audit: type=1400 audit(1789168516.368:576): avc: denied { open } for pid=8324 comm="syz.3.768" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.485381][ T8325] FAULT_INJECTION: forcing a failure. [ 214.485381][ T8325] name failslab, interval 1, probability 0, space 0, times 0 [ 214.485413][ T8325] CPU: 0 UID: 0 PID: 8325 Comm: syz.3.768 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.485439][ T8325] Tainted: [L]=SOFTLOCKUP [ 214.485446][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 214.485457][ T8325] Call Trace: [ 214.485464][ T8325] [ 214.485471][ T8325] dump_stack_lvl+0x100/0x190 [ 214.485502][ T8325] should_fail_ex.cold+0x5/0xa [ 214.485529][ T8325] should_failslab+0xc2/0x120 [ 214.485553][ T8325] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 214.485575][ T8325] ? __d_alloc+0x35/0xa50 [ 214.485605][ T8325] __d_alloc+0x35/0xa50 [ 214.485632][ T8325] d_alloc_pseudo+0x1c/0xc0 [ 214.485651][ T8325] alloc_file_pseudo+0x118/0x290 [ 214.485679][ T8325] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 214.485705][ T8325] ? alloc_fd+0x471/0x7a0 [ 214.485731][ T8325] sock_alloc_file+0x50/0x210 [ 214.485754][ T8325] __sys_socket+0x1c0/0x260 [ 214.485782][ T8325] ? __pfx___sys_socket+0x10/0x10 [ 214.485816][ T8325] __x64_sys_socket+0x72/0xb0 [ 214.485843][ T8325] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.485866][ T8325] do_syscall_64+0x123/0x790 [ 214.485893][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.485912][ T8325] RIP: 0033:0x7f201879e159 [ 214.485928][ T8325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.485945][ T8325] RSP: 002b:00007f2019725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 214.485964][ T8325] RAX: ffffffffffffffda RBX: 00007f2018a25fa0 RCX: 00007f201879e159 [ 214.485976][ T8325] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 214.485987][ T8325] RBP: 00007f201883503b R08: 0000000000000000 R09: 0000000000000000 [ 214.485998][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.486009][ T8325] R13: 00007f2018a26038 R14: 00007f2018a25fa0 R15: 00007ffddc5ee708 [ 214.486034][ T8325] [ 214.487155][ T31] audit: type=1400 audit(1789168516.368:577): avc: denied { ioctl } for pid=8324 comm="syz.3.768" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 214.777156][ T987] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 214.954452][ T987] usb 7-1: Using ep0 maxpacket: 16 [ 214.986753][ T987] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 215.012044][ T987] usb 7-1: config index 0 descriptor too short (expected 18640, got 18) [ 215.012102][ T987] usb 7-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 215.012129][ T987] usb 7-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 215.012155][ T987] usb 7-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 215.095933][ T987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.095989][ T987] usb 7-1: Product: syz [ 215.096027][ T987] usb 7-1: Manufacturer: syz [ 215.096041][ T987] usb 7-1: SerialNumber: syz [ 216.004465][ T987] usb 7-1: USB disconnect, device number 2 [ 216.197176][ T8351] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.777'. [ 216.197191][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'. [ 216.259205][ T8353] batman_adv: batadv0: Adding interface: veth0 [ 216.259519][ T8353] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.259549][ T8353] batman_adv: batadv0: Interface activated: veth0 [ 216.264314][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.264327][ T8353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.264952][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.264998][ T8353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.265450][ T8353] batman_adv: batadv0: Interface deactivated: veth0 [ 216.265464][ T8353] batman_adv: batadv0: Removing interface: veth0 [ 216.704130][ T31] audit: type=1400 audit(1789168518.588:578): avc: denied { kexec_image_load } for pid=8355 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 216.704239][ T8356] FAULT_INJECTION: forcing a failure. [ 216.704239][ T8356] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 216.704267][ T8356] CPU: 0 UID: 0 PID: 8356 Comm: syz.4.789 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.704293][ T8356] Tainted: [L]=SOFTLOCKUP [ 216.704301][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 216.704313][ T8356] Call Trace: [ 216.704318][ T8356] [ 216.704326][ T8356] dump_stack_lvl+0x100/0x190 [ 216.704364][ T8356] should_fail_ex.cold+0x5/0xa [ 216.704386][ T8356] ? prepare_alloc_pages+0x16d/0x5b0 [ 216.704412][ T8356] should_fail_alloc_page+0xeb/0x140 [ 216.704436][ T8356] prepare_alloc_pages+0x1f0/0x5b0 [ 216.704461][ T8356] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 216.704492][ T8356] ? rcu_is_watching+0x13/0xc0 [ 216.704514][ T8356] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 216.704544][ T8356] ? __pfx_get_page_from_freelist+0x10/0x10 [ 216.704569][ T8356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 216.704599][ T8356] ? rcu_is_watching+0x13/0xc0 [ 216.704620][ T8356] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 216.704646][ T8356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 216.704685][ T8356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 216.704711][ T8356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.704733][ T8356] ? policy_nodemask+0xed/0x4f0 [ 216.704757][ T8356] alloc_pages_mpol+0x201/0x550 [ 216.704782][ T8356] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 216.704802][ T8356] ? policy_nodemask+0xed/0x4f0 [ 216.704828][ T8356] ? __pfx_alloc_pgt_page+0x10/0x10 [ 216.704844][ T8356] alloc_pages_noprof+0x1a/0x160 [ 216.704868][ T8356] kimage_alloc_pages+0x72/0x380 [ 216.704885][ T8356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.704905][ T8356] ? __pfx_alloc_pgt_page+0x10/0x10 [ 216.704921][ T8356] kimage_alloc_control_pages+0x157/0xa20 [ 216.704939][ T8356] ? alloc_pages_noprof+0xf9/0x160 [ 216.704967][ T8356] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 216.704985][ T8356] ? kimage_alloc_control_pages+0x3f7/0xa20 [ 216.705009][ T8356] ? __pfx_alloc_pgt_page+0x10/0x10 [ 216.705024][ T8356] alloc_pgt_page+0xc/0xa0 [ 216.705039][ T8356] ident_pud_init+0x203/0x3d0 [ 216.705063][ T8356] ident_p4d_init+0xd8/0x330 [ 216.705086][ T8356] kernel_ident_mapping_init+0x334/0x4c0 [ 216.705110][ T8356] machine_kexec_prepare+0x2f5/0x1270 [ 216.705128][ T8356] ? kimage_free_page_list+0x185/0x240 [ 216.705150][ T8356] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 216.705170][ T8356] ? __pfx_alloc_pgt_page+0x10/0x10 [ 216.705196][ T8356] do_kexec_load+0x32c/0x810 [ 216.705218][ T8356] ? __pfx_do_kexec_load+0x10/0x10 [ 216.705239][ T8356] ? _copy_from_user+0x59/0xd0 [ 216.705260][ T8356] __x64_sys_kexec_load+0x1bf/0x230 [ 216.705282][ T8356] do_syscall_64+0x123/0x790 [ 216.705305][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.705323][ T8356] RIP: 0033:0x7f2fab59e159 [ 216.705344][ T8356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.705362][ T8356] RSP: 002b:00007f2fac522028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 216.705382][ T8356] RAX: ffffffffffffffda RBX: 00007f2fab825fa0 RCX: 00007f2fab59e159 [ 216.705394][ T8356] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 216.705405][ T8356] RBP: 00007f2fab63503b R08: 0000000000000000 R09: 0000000000000000 [ 216.705416][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.705426][ T8356] R13: 00007f2fab826038 R14: 00007f2fab825fa0 R15: 00007ffca15d4598 [ 216.705452][ T8356] [ 218.419917][ T31] audit: type=1400 audit(1789168520.308:579): avc: denied { create } for pid=8381 comm="syz.6.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.420512][ T31] audit: type=1400 audit(1789168520.308:580): avc: denied { bind } for pid=8381 comm="syz.6.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.422436][ T31] audit: type=1400 audit(1789168520.308:581): avc: denied { listen } for pid=8381 comm="syz.6.787" laddr=172.20.0.1 lport=12816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.486713][ T8384] binder: 8383:8384 unknown command 0 [ 218.486729][ T8384] binder: 8383:8384 ioctl c0306201 2000000004c0 returned -22 [ 218.969412][ T5733] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 219.130109][ T5733] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 219.134078][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.134103][ T5733] usb 4-1: Product: syz [ 219.134116][ T5733] usb 4-1: Manufacturer: syz [ 219.134130][ T5733] usb 4-1: SerialNumber: syz [ 219.553803][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 219.553856][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 219.557584][ T8412] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 219.602299][ T8412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.669703][ T8412] bond2: (slave geneve3): making interface the new active one [ 219.671336][ T8412] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 220.109401][ T987] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 220.269339][ T987] usb 7-1: Using ep0 maxpacket: 32 [ 220.269816][ T987] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 220.275671][ T987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.275693][ T987] usb 7-1: Product: syz [ 220.275706][ T987] usb 7-1: Manufacturer: syz [ 220.275718][ T987] usb 7-1: SerialNumber: syz [ 220.280127][ T987] usb 7-1: config 0 descriptor?? [ 220.288070][ T987] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 220.757838][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 220.759627][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 220.760568][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 220.760605][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 220.761705][ T5733] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 220.773800][ T5733] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 220.781048][ T5733] usb 4-1: USB disconnect, device number 11 [ 220.881107][ T4917] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 221.801518][ T987] gspca_topro: reg_r err -71 [ 221.801567][ T987] gspca_topro: Sensor soi763a [ 221.976669][ T8419] kvm: pic: level sensitive irq not supported [ 221.988015][ T8419] picdev_read: 4 callbacks suppressed [ 221.988064][ T8419] kvm: pic: non byte read [ 222.057117][ T8419] kvm: pic: level sensitive irq not supported [ 222.064674][ T8419] kvm: pic: non byte read [ 222.325945][ T987] usb 7-1: USB disconnect, device number 3 [ 222.441321][ T1116] IPVS: starting estimator thread 0... [ 222.470699][ T8430] IPVS: rr: TCP [fe80::aa]:80 - no destination available [ 222.553625][ T8431] IPVS: using max 42 ests per chain, 100800 per kthread [ 222.643468][ T8436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.687022][ T8436] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 222.869375][ T5613] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 222.946482][ T31] audit: type=1800 audit(1789168780.826:582): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.821" name="/" dev="fuse" ino=1 res=0 errno=0 [ 223.019419][ T5613] usb 4-1: Using ep0 maxpacket: 8 [ 223.019858][ T5613] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.020645][ T5613] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 223.020670][ T5613] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.020682][ T5613] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.020699][ T5613] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.020738][ T5613] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.020759][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.234387][ T5613] usb 4-1: GET_CAPABILITIES returned 0 [ 223.234412][ T5613] usbtmc 4-1:16.0: can't read capabilities [ 223.419301][ T987] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 223.599325][ T987] usb 7-1: Using ep0 maxpacket: 32 [ 223.600151][ T987] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 223.601049][ T987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.601074][ T987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.601105][ T987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.608968][ T987] usb 7-1: config 0 descriptor?? [ 223.629653][ T5613] usb 4-1: USB disconnect, device number 12 [ 224.084792][ T987] hid_parser_main: 457 callbacks suppressed [ 224.084817][ T987] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 224.084894][ T987] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 224.277350][ T987] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 224.478758][ T987] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 224.680559][ T987] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 224.956327][ T8457] ft260 0003:0403:6030.0007: ft260_i2c_read: failed with -38 [ 224.957456][ T987] usb 7-1: USB disconnect, device number 4 [ 225.050081][ T31] audit: type=1400 audit(1789168782.936:583): avc: denied { create } for pid=8478 comm="syz.5.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.057043][ T31] audit: type=1400 audit(1789168782.936:584): avc: denied { setopt } for pid=8478 comm="syz.5.822" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.265154][ T8491] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 226.265185][ T8491] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 226.368996][ T31] audit: type=1400 audit(1789168784.246:585): avc: denied { bind } for pid=8499 comm="syz.6.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.417915][ T8500] tipc: Failed to remove unknown binding: 66,0,0/0:1104757934/1104757935 [ 226.418883][ T8500] tipc: Failed to remove unknown binding: 66,0,0/0:1104757934/1104757935 [ 226.663041][ T8505] syzkaller0: entered promiscuous mode [ 226.663061][ T8505] syzkaller0: entered allmulticast mode [ 226.684028][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 226.700492][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 226.718489][ T31] audit: type=1400 audit(1789168784.596:586): avc: denied { write } for pid=8511 comm="syz.3.834" name="cgroup.subtree_control" dev="cgroup2" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.745185][ T31] audit: type=1400 audit(1789168784.606:587): avc: denied { open } for pid=8511 comm="syz.3.834" path="" dev="cgroup2" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.793232][ T31] audit: type=1400 audit(1789168784.676:588): avc: denied { ioctl } for pid=8511 comm="syz.3.834" path="" dev="cgroup2" ino=323 ioctlcmd=0x54d2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.825240][ T31] audit: type=1326 audit(1789168784.706:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.4.835" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fab59e159 code=0x0 [ 226.967801][ T5613] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 227.035778][ T31] audit: type=1400 audit(1789168784.916:590): avc: denied { write } for pid=8526 comm="syz.5.837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 227.099875][ T31] audit: type=1400 audit(1789168784.986:591): avc: denied { write } for pid=8528 comm="syz.5.839" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 227.100183][ T31] audit: type=1400 audit(1789168784.986:592): avc: denied { open } for pid=8528 comm="syz.5.839" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 227.100391][ T8529] random: crng reseeded on system resumption [ 227.438027][ T8509] ceph: No mds server is up or the cluster is laggy [ 227.472839][ T5613] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 227.714792][ T8557] netlink: 'syz.5.849': attribute type 1 has an invalid length. [ 227.714812][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.849'. [ 228.148941][ T8577] netlink: 32 bytes leftover after parsing attributes in process `syz.6.855'. [ 228.384531][ T8581] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 228.388580][ T8581] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 228.402914][ T8581] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 228.409355][ T5613] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 228.415059][ T8581] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 228.421744][ T8581] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 228.421932][ T8581] kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 228.559734][ T5613] usb 6-1: Using ep0 maxpacket: 32 [ 228.560271][ T5613] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 228.562726][ T5613] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 228.562751][ T5613] usb 6-1: config 0 has no interface number 0 [ 228.562786][ T5613] usb 6-1: config 0 interface 184 has no altsetting 0 [ 228.566355][ T5613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.566378][ T5613] usb 6-1: Product: syz [ 228.566392][ T5613] usb 6-1: Manufacturer: syz [ 228.566406][ T5613] usb 6-1: SerialNumber: syz [ 228.570522][ T5613] usb 6-1: config 0 descriptor?? [ 228.628251][ T8594] FAULT_INJECTION: forcing a failure. [ 228.628251][ T8594] name fail_futex, interval 1, probability 0, space 0, times 1 [ 228.628280][ T8594] CPU: 0 UID: 0 PID: 8594 Comm: syz.6.860 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.628305][ T8594] Tainted: [L]=SOFTLOCKUP [ 228.628312][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 228.628324][ T8594] Call Trace: [ 228.628330][ T8594] [ 228.628337][ T8594] dump_stack_lvl+0x100/0x190 [ 228.628366][ T8594] should_fail_ex.cold+0x5/0xa [ 228.628389][ T8594] get_futex_key+0x1d0/0x14f0 [ 228.628414][ T8594] ? __pfx_get_futex_key+0x10/0x10 [ 228.628444][ T8594] futex_wake+0xf4/0x5e0 [ 228.628471][ T8594] ? __pfx_futex_wake+0x10/0x10 [ 228.628493][ T8594] ? kasan_quarantine_put+0x104/0x240 [ 228.628517][ T8594] ? putname+0xb1/0x110 [ 228.628536][ T8594] ? kmem_cache_free+0x127/0x6c0 [ 228.628565][ T8594] do_futex+0x2b2/0x440 [ 228.628587][ T8594] ? __pfx_do_futex+0x10/0x10 [ 228.628607][ T8594] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.628630][ T8594] ? __fget_files+0x21f/0x3d0 [ 228.628657][ T8594] __x64_sys_futex+0x34f/0x4d0 [ 228.628680][ T8594] ? __x64_sys_openat+0x12d/0x210 [ 228.628702][ T8594] ? __pfx___x64_sys_futex+0x10/0x10 [ 228.628732][ T8594] do_syscall_64+0x123/0x790 [ 228.628758][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.628776][ T8594] RIP: 0033:0x7fc769f9e159 [ 228.628791][ T8594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.628808][ T8594] RSP: 002b:00007fc76aec90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.628824][ T8594] RAX: ffffffffffffffda RBX: 00007fc76a225fa8 RCX: 00007fc769f9e159 [ 228.628834][ T8594] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc76a225fac [ 228.628844][ T8594] RBP: 00007fc76a225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 228.628854][ T8594] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 228.628863][ T8594] R13: 00007fc76a226038 R14: 00007ffe4d173850 R15: 00007ffe4d173938 [ 228.628885][ T8594] [ 229.212267][ T5613] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 229.212306][ T5613] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 229.560015][ T8617] kAFS: unable to lookup cell 'syz0' [ 230.439988][ T5613] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 230.440018][ T5613] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 230.440037][ T5613] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 230.440215][ T5613] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 230.451048][ T5613] usb 6-1: USB disconnect, device number 10 [ 230.614800][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 230.614818][ T31] audit: type=1400 audit(1789168788.496:607): avc: denied { execmod } for pid=8653 comm="syz.4.872" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 230.614975][ T31] audit: type=1400 audit(1789168788.496:608): avc: denied { execute } for pid=8653 comm="syz.4.872" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 231.022190][ T31] audit: type=1400 audit(1789168788.906:609): avc: denied { kexec_image_load } for pid=8664 comm="syz.6.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 231.096604][ T31] audit: type=1400 audit(1789168788.976:610): avc: denied { setopt } for pid=8666 comm="syz.1.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.369395][ T6625] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 231.520830][ T6625] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 231.521722][ T6625] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.521749][ T6625] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.524601][ T6625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 231.524624][ T6625] usb 6-1: Product: syz [ 231.524638][ T6625] usb 6-1: Manufacturer: syz [ 231.574492][ T6625] mos7840 6-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 231.854663][ T8680] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 232.021372][ T31] audit: type=1400 audit(1789168789.906:611): avc: denied { read write } for pid=8682 comm="syz.6.886" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 232.021510][ T31] audit: type=1400 audit(1789168789.906:612): avc: denied { create } for pid=8686 comm="syz.1.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.023645][ T31] audit: type=1400 audit(1789168789.906:613): avc: denied { open } for pid=8682 comm="syz.6.886" path="/61/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 232.023887][ T31] audit: type=1400 audit(1789168789.906:614): avc: denied { setopt } for pid=8686 comm="syz.1.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.024934][ T31] audit: type=1400 audit(1789168789.906:615): avc: denied { bind } for pid=8686 comm="syz.1.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.025156][ T31] audit: type=1400 audit(1789168789.906:616): avc: denied { write } for pid=8686 comm="syz.1.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.027500][ T8683] ***************************************************** [ 232.027510][ T8683] ORANGEFS Device Error: You cannot open the device file [ 232.027516][ T8683] [ 232.027516][ T8683] /dev/pvfs2-req more than once. Please make sure that [ 232.027516][ T8683] there are no [ 232.027526][ T8683] instances of a program using this device [ 232.027526][ T8683] currently running. (You must verify this!) [ 232.027534][ T8683] For example, you can use the lsof program as follows: [ 232.027541][ T8683] 'lsof | grep pvfs2-req' (run this as root) [ 232.027548][ T8683] open_access_count = 1 [ 232.027573][ T8683] ***************************************************** [ 232.456487][ T8699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 232.509453][ T5733] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 232.653721][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.1.896'. [ 232.670044][ T5733] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 232.674523][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.674545][ T5733] usb 4-1: Product: syz [ 232.674557][ T5733] usb 4-1: Manufacturer: syz [ 232.674570][ T5733] usb 4-1: SerialNumber: syz [ 232.678843][ T5733] usb 4-1: config 0 descriptor?? [ 232.896430][ T5733] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 233.613798][ T6625] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 233.634482][ T6625] usb 6-1: USB disconnect, device number 11 [ 233.644484][ T6625] mos7840 6-1:1.0: device disconnected [ 234.182847][ T987] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 234.321800][ T5733] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 234.339778][ T5733] usb 4-1: USB disconnect, device number 13 [ 234.360041][ T987] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 234.361467][ T987] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 234.361490][ T987] usb 2-1: config 0 has no interface number 0 [ 234.361522][ T987] usb 2-1: config 0 interface 41 has no altsetting 0 [ 234.364805][ T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.364827][ T987] usb 2-1: Product: syz [ 234.364841][ T987] usb 2-1: Manufacturer: syz [ 234.364855][ T987] usb 2-1: SerialNumber: syz [ 234.387651][ T987] usb 2-1: config 0 descriptor?? [ 234.390201][ T4917] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 234.390221][ T4917] CPU: 0 UID: 0 PID: 4917 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.390246][ T4917] Tainted: [L]=SOFTLOCKUP [ 234.390252][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 234.390264][ T4917] Workqueue: hci2 hci_rx_work [ 234.390286][ T4917] Call Trace: [ 234.390292][ T4917] [ 234.390300][ T4917] dump_stack_lvl+0x100/0x190 [ 234.390326][ T4917] sysfs_warn_dup.cold+0x1c/0x28 [ 234.390351][ T4917] sysfs_create_dir_ns+0x24b/0x2b0 [ 234.390374][ T4917] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 234.390396][ T4917] ? find_held_lock+0x2b/0x80 [ 234.390418][ T4917] ? kobject_add_internal+0x25f/0x930 [ 234.390443][ T4917] ? kobject_add_internal+0x25f/0x930 [ 234.390470][ T4917] ? do_raw_spin_unlock+0x145/0x1e0 [ 234.390492][ T4917] kobject_add_internal+0x2c8/0x930 [ 234.390521][ T4917] kobject_add+0x16a/0x1e0 [ 234.390536][ T4917] ? __pfx_kobject_add+0x10/0x10 [ 234.390550][ T4917] ? class_to_subsys+0x10f/0x150 [ 234.390576][ T4917] ? kobject_put+0xb9/0x640 [ 234.390597][ T4917] ? _raw_spin_unlock+0x28/0x50 [ 234.390621][ T4917] device_add+0x294/0x1970 [ 234.390649][ T4917] ? __pfx_dev_set_name+0x10/0x10 [ 234.390672][ T4917] ? __pfx_device_add+0x10/0x10 [ 234.390694][ T4917] ? mgmt_send_event_skb+0x2fb/0x460 [ 234.390721][ T4917] hci_conn_add_sysfs+0x1a3/0x260 [ 234.390745][ T4917] le_conn_complete_evt+0x122f/0x2130 [ 234.390772][ T4917] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 234.390794][ T4917] ? hci_event_packet+0x186/0xcd0 [ 234.390820][ T4917] hci_le_conn_complete_evt+0x23c/0x3a0 [ 234.390840][ T4917] ? skb_pull_data+0x15f/0x1e0 [ 234.390866][ T4917] hci_le_meta_evt+0x34a/0x5f0 [ 234.390885][ T4917] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 234.390907][ T4917] hci_event_packet+0x51c/0xcd0 [ 234.390926][ T4917] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 234.390946][ T4917] ? __pfx_hci_event_packet+0x10/0x10 [ 234.390969][ T4917] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.390994][ T4917] hci_rx_work+0x451/0xfc0 [ 234.391015][ T4917] process_one_work+0xac7/0x1b10 [ 234.391050][ T4917] ? __pfx_process_one_work+0x10/0x10 [ 234.391074][ T4917] ? lock_acquire+0x1d1/0x380 [ 234.391098][ T4917] ? __pfx_hci_rx_work+0x10/0x10 [ 234.391118][ T4917] worker_thread+0x5ef/0xe50 [ 234.391148][ T4917] ? __pfx_worker_thread+0x10/0x10 [ 234.391173][ T4917] ? kthread+0x13a/0x450 [ 234.391193][ T4917] ? __pfx_worker_thread+0x10/0x10 [ 234.391216][ T4917] kthread+0x373/0x450 [ 234.391237][ T4917] ? __pfx_kthread+0x10/0x10 [ 234.391260][ T4917] ret_from_fork+0x730/0xd60 [ 234.391280][ T4917] ? __pfx_ret_from_fork+0x10/0x10 [ 234.391299][ T4917] ? __switch_to+0x800/0x10f0 [ 234.391322][ T4917] ? __pfx_kthread+0x10/0x10 [ 234.391345][ T4917] ret_from_fork_asm+0x1a/0x30 [ 234.391374][ T4917] [ 234.392247][ T4917] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 234.392278][ T4917] Bluetooth: hci2: failed to register connection device [ 234.423118][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802239d400: rx timeout, send abort [ 234.891904][ T8732] bond1: entered allmulticast mode [ 234.893358][ T8731] bond1: left allmulticast mode [ 234.921709][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802239d800: rx timeout, send abort [ 234.924642][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802239d400: abort rx timeout. Force session deactivation [ 235.265431][ T987] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 235.289863][ T5733] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 235.421751][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802239d800: abort rx timeout. Force session deactivation [ 235.429375][ T5733] usb 6-1: device descriptor read/64, error -71 [ 235.679379][ T5733] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 235.820175][ T5733] usb 6-1: device descriptor read/64, error -71 [ 235.933245][ T5733] usb usb6-port1: attempt power cycle [ 236.279294][ T5733] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 236.299793][ T5733] usb 6-1: device descriptor read/8, error -71 [ 236.500978][ T987] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 236.501306][ T987] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 236.501466][ T987] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 236.508468][ T987] usb 2-1: USB disconnect, device number 14 [ 236.569961][ T5733] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 236.599783][ T5733] usb 6-1: device descriptor read/8, error -71 [ 236.709817][ T5733] usb usb6-port1: unable to enumerate USB device [ 236.792342][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 236.792359][ T31] audit: type=1400 audit(1789168794.676:628): avc: denied { name_bind } for pid=8751 comm="syz.3.914" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 236.908081][ T8755] netlink: 'syz.3.915': attribute type 13 has an invalid length. [ 237.143446][ T31] audit: type=1400 audit(1789168795.026:629): avc: denied { write } for pid=8756 comm="syz.1.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.288862][ T8762] serio: Serial port ptm0 [ 237.513327][ T987] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 237.539151][ T987] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 238.469694][ T987] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 238.639838][ T987] usb 6-1: Using ep0 maxpacket: 16 [ 238.640330][ T987] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.641312][ T987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.641341][ T987] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.641377][ T987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.696369][ T987] usb 6-1: config 0 descriptor?? [ 238.788872][ T8784] FAULT_INJECTION: forcing a failure. [ 238.788872][ T8784] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.788906][ T8784] CPU: 0 UID: 0 PID: 8784 Comm: syz.1.925 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.788933][ T8784] Tainted: [L]=SOFTLOCKUP [ 238.788939][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 238.788950][ T8784] Call Trace: [ 238.788956][ T8784] [ 238.788964][ T8784] dump_stack_lvl+0x100/0x190 [ 238.788996][ T8784] should_fail_ex.cold+0x5/0xa [ 238.789021][ T8784] ? prepare_alloc_pages+0x16d/0x5b0 [ 238.789049][ T8784] should_fail_alloc_page+0xeb/0x140 [ 238.789075][ T8784] prepare_alloc_pages+0x1f0/0x5b0 [ 238.789102][ T8784] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 238.789136][ T8784] ? stack_trace_save+0x8e/0xc0 [ 238.789166][ T8784] ? __pfx_stack_trace_save+0x10/0x10 [ 238.789199][ T8784] ? stack_depot_save_flags+0x27/0x9f0 [ 238.789220][ T8784] ? stack_depot_save_flags+0x27/0x9f0 [ 238.789248][ T8784] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 238.789279][ T8784] ? __kasan_kmalloc+0xaa/0xb0 [ 238.789300][ T8784] ? rds_cong_from_addr+0x50/0x540 [ 238.789324][ T8784] ? __rds_conn_create+0xa7e/0x25a0 [ 238.789349][ T8784] ? rds_conn_create_outgoing+0x44/0x60 [ 238.789373][ T8784] ? rds_sendmsg+0x10da/0x34d0 [ 238.789390][ T8784] ? ____sys_sendmsg+0xa4d/0xbe0 [ 238.789419][ T8784] ? ___sys_sendmsg+0x190/0x1e0 [ 238.789453][ T8784] ? __sys_sendmsg+0x160/0x210 [ 238.789474][ T8784] ? do_syscall_64+0x123/0x790 [ 238.789500][ T8784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.789536][ T8784] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 238.789560][ T8784] ? policy_nodemask+0xed/0x4f0 [ 238.789586][ T8784] alloc_pages_mpol+0x201/0x550 [ 238.789611][ T8784] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 238.789635][ T8784] ? lockdep_init_map_type+0x5c/0x250 [ 238.789659][ T8784] alloc_pages_noprof+0x1a/0x160 [ 238.789686][ T8784] get_zeroed_page_noprof+0x18/0xb0 [ 238.789709][ T8784] rds_cong_from_addr+0x15b/0x540 [ 238.789735][ T8784] rds_cong_get_maps+0x49/0xe0 [ 238.789756][ T8784] ? __ipv6_addr_type+0xe8/0x2e0 [ 238.789778][ T8784] __rds_conn_create+0xa7e/0x25a0 [ 238.789813][ T8784] ? __pfx___rds_conn_create+0x10/0x10 [ 238.789836][ T8784] ? trace_kmalloc+0xeb/0x110 [ 238.789858][ T8784] ? __kasan_kmalloc+0xaa/0xb0 [ 238.789878][ T8784] ? lockdep_init_map_type+0x5c/0x250 [ 238.789902][ T8784] rds_conn_create_outgoing+0x44/0x60 [ 238.789930][ T8784] rds_sendmsg+0x10da/0x34d0 [ 238.789959][ T8784] ? __pfx_rds_sendmsg+0x10/0x10 [ 238.789991][ T8784] ? selinux_socket_sendmsg+0x198/0x2f0 [ 238.790026][ T8784] ? ____sys_sendmsg+0xa4d/0xbe0 [ 238.790050][ T8784] ____sys_sendmsg+0xa4d/0xbe0 [ 238.790074][ T8784] ? __pfx_rds_sendmsg+0x10/0x10 [ 238.790094][ T8784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.790130][ T8784] ___sys_sendmsg+0x190/0x1e0 [ 238.790158][ T8784] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.790186][ T8784] ? futex_wait+0x11e/0x370 [ 238.790211][ T8784] ? find_held_lock+0x2b/0x80 [ 238.790253][ T8784] __sys_sendmsg+0x160/0x210 [ 238.790276][ T8784] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.790311][ T8784] do_syscall_64+0x123/0x790 [ 238.790337][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.790357][ T8784] RIP: 0033:0x7ffb0a99e159 [ 238.790373][ T8784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.790391][ T8784] RSP: 002b:00007ffb0b8f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.790411][ T8784] RAX: ffffffffffffffda RBX: 00007ffb0ac25fa0 RCX: 00007ffb0a99e159 [ 238.790424][ T8784] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 238.790435][ T8784] RBP: 00007ffb0aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 238.790454][ T8784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.790466][ T8784] R13: 00007ffb0ac26038 R14: 00007ffb0ac25fa0 R15: 00007ffd6e6b6c58 [ 238.790490][ T8784] [ 239.195707][ T987] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input15 [ 239.219895][ T987] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 239.456259][ T10] usb 6-1: USB disconnect, device number 16 [ 240.067007][ T31] audit: type=1400 audit(1789168797.946:630): avc: denied { setopt } for pid=8823 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.473597][ T31] audit: type=1400 audit(1789168798.356:631): avc: denied { read write } for pid=8843 comm="syz.6.933" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 240.476656][ T31] audit: type=1400 audit(1789168798.356:632): avc: denied { open } for pid=8843 comm="syz.6.933" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 242.191251][ T31] audit: type=1400 audit(1789168800.076:633): avc: denied { read } for pid=8861 comm="syz.6.939" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 242.715253][ T31] audit: type=1400 audit(1789168800.076:634): avc: denied { open } for pid=8861 comm="syz.6.939" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 242.899342][ T31] audit: type=1400 audit(1789168800.746:635): avc: denied { mount } for pid=8865 comm="syz.3.941" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 242.953221][ T31] audit: type=1400 audit(1789168800.836:636): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 243.026147][ T31] audit: type=1400 audit(1789168800.906:637): avc: denied { read write } for pid=8872 comm="syz.1.942" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 243.028811][ T31] audit: type=1400 audit(1789168800.906:638): avc: denied { open } for pid=8872 comm="syz.1.942" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 243.063490][ T31] audit: type=1400 audit(1789168800.946:639): avc: denied { ioctl } for pid=8872 comm="syz.1.942" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 243.082402][ T8873] binder: 8872:8873 ioctl c0306201 200000000080 returned -14 [ 243.110705][ T31] audit: type=1400 audit(1789168800.996:640): avc: denied { map } for pid=8872 comm="syz.1.942" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 243.118744][ T8873] binder: 8872:8873 ioctl c0306201 2000000003c0 returned -14 [ 243.561695][ T31] audit: type=1400 audit(1789168801.446:641): avc: denied { connect } for pid=8883 comm="syz.6.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.578317][ T31] audit: type=1400 audit(1789168801.456:642): avc: denied { accept } for pid=8883 comm="syz.6.947" lport=48543 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.727599][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.949'. [ 244.400101][ T32] INFO: task kworker/1:3:5711 blocked for more than 143 seconds. [ 244.400139][ T32] Tainted: G L syzkaller #0 [ 244.400149][ ** replaying previous printk message ** [ 244.400149][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.400170][ T32] task:kworker/1:3 state:D stack:25960 pid:5711 tgid:5711 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 244.400236][ T32] Workqueue: events_freezable mmc_rescan [ 244.400280][ T32] Call Trace: [ 244.400286][ T32] [ 244.400297][ T32] __schedule+0x1259/0x6920 [ 244.400338][ T32] ? mark_held_locks+0x40/0x70 [ 244.400371][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.400397][ T32] ? __pfx___schedule+0x10/0x10 [ 244.400426][ T32] ? find_held_lock+0x2b/0x80 [ 244.400452][ T32] ? schedule+0x225/0x2c0 [ 244.400486][ T32] schedule+0xdd/0x2c0 [ 244.400519][ T32] schedule_timeout+0x1b2/0x280 [ 244.400538][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 244.400577][ T32] ? mark_held_locks+0x40/0x70 [ 244.400600][ T32] __wait_for_common+0x2e7/0x4c0 [ 244.400633][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 244.400655][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 244.400691][ T32] ? led_trigger_event+0x61/0x270 [ 244.400729][ T32] mmc_wait_for_req_done+0xcd/0x3d0 [ 244.400775][ T32] mmc_wait_for_req+0x207/0x2c0 [ 244.400802][ T32] mmc_wait_for_cmd+0x154/0x200 [ 244.400839][ T32] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 244.400899][ T32] ? __pfx_mmc_wait_done+0x10/0x10 [ 244.400940][ T32] ? __pfx_usleep_range_state+0x10/0x10 [ 244.400962][ T32] ? vub300_mmc_set_ios+0x1b0/0x8d0 [ 244.400995][ T32] mmc_go_idle+0xe7/0x250 [ 244.401035][ T32] ? __pfx_mmc_go_idle+0x10/0x10 [ 244.401070][ T32] ? __mmc_claim_host+0x8/0x5f0 [ 244.401111][ T32] ? mmc_attach_sd_uhs2+0x2d0/0x590 [ 244.401149][ T32] mmc_rescan+0x877/0x11c0 [ 244.401221][ T32] process_one_work+0xac7/0x1b10 [ 244.401281][ T32] ? __pfx_process_one_work+0x10/0x10 [ 244.401342][ T32] ? lock_acquire+0x1d1/0x380 [ 244.401391][ T32] ? __pfx_mmc_rescan+0x10/0x10 [ 244.401432][ T32] worker_thread+0x5ef/0xe50 [ 244.401489][ T32] ? __pfx_worker_thread+0x10/0x10 [ 244.401527][ T32] ? kthread+0x13a/0x450 [ 244.401561][ T32] ? __pfx_worker_thread+0x10/0x10 [ 244.401596][ T32] kthread+0x373/0x450 [ 244.401630][ T32] ? __pfx_kthread+0x10/0x10 [ 244.401665][ T32] ret_from_fork+0x730/0xd60 [ 244.401686][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 244.401706][ T32] ? __switch_to+0x800/0x10f0 [ 244.401728][ T32] ? __pfx_kthread+0x10/0x10 [ 244.401754][ T32] ret_from_fork_asm+0x1a/0x30 [ 244.401786][ T32] [ 244.401799][ T32] INFO: task kworker/1:6:5821 blocked for more than 143 seconds. [ 244.401814][ T32] Tainted: G L syzkaller #0 [ 244.401824][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.401831][ T32] task:kworker/1:6 state:D stack:26192 pid:5821 tgid:5821 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 244.401941][ T32] Workqueue: usb_hub_wq hub_event [ 244.401985][ T32] Call Trace: [ 244.402003][ T32] [ 244.402044][ T32] __schedule+0x1259/0x6920 [ 244.402093][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 244.402146][ T32] ? __pfx___schedule+0x10/0x10 [ 244.407480][ T32] ? find_held_lock+0x2b/0x80 [ 244.407523][ T32] ? schedule+0x225/0x2c0 [ 244.407559][ T32] schedule+0xdd/0x2c0 [ 244.407590][ T32] schedule_timeout+0x1b2/0x280 [ 244.407611][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 244.407650][ T32] ? mark_held_locks+0x40/0x70 [ 244.407686][ T32] __wait_for_common+0x2e7/0x4c0 [ 244.407725][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 244.407759][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 244.407793][ T32] ? __flush_work+0x4ca/0xcb0 [ 244.407822][ T32] ? find_held_lock+0x2b/0x80 [ 244.407859][ T32] ? __flush_work+0x928/0xcb0 [ 244.407897][ T32] ? __flush_work+0x928/0xcb0 [ 244.407928][ T32] ? __flush_work+0x4ca/0xcb0 [ 244.407956][ T32] __flush_work+0x7c7/0xcb0 [ 244.407991][ T32] ? __timer_delete+0xb1/0x1b0 [ 244.408021][ T32] ? __pfx___flush_work+0x10/0x10 [ 244.408054][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 244.408096][ T32] ? __pfx___might_resched+0x10/0x10 [ 244.408124][ T32] ? _raw_spin_unlock_irq+0x2e/0x50 [ 244.408146][ T32] ? usb_hcd_flush_endpoint+0x359/0x400 [ 244.408187][ T32] cancel_delayed_work_sync+0xd1/0xf0 [ 244.408221][ T32] mmc_stop_host+0xe9/0x400 [ 244.408256][ T32] mmc_remove_host+0x15/0x60 [ 244.408285][ T32] vub300_disconnect+0x12d/0x170 [ 244.408315][ T32] usb_unbind_interface+0x1dd/0x9e0 [ 244.408370][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 244.408408][ T32] device_remove+0x12a/0x180 [ 244.408438][ T32] device_release_driver_internal+0x44e/0x620 [ 244.408488][ T32] bus_remove_device+0x2bc/0x560 [ 244.408519][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 244.408545][ T32] ? __pfx_device_remove_attrs+0x10/0x10 [ 244.408582][ T32] device_del+0x376/0x9b0 [ 244.408634][ T32] ? __pfx_device_del+0x10/0x10 [ 244.408662][ T32] ? kobject_put+0xb9/0x640 [ 244.408723][ T32] usb_disable_device+0x367/0x810 [ 244.408766][ T32] usb_disconnect+0x2e2/0x9a0 [ 244.408805][ T32] hub_event+0x1bb1/0x4420 [ 244.408880][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 244.408913][ T32] ? __pfx_hub_event+0x10/0x10 [ 244.408945][ T32] ? check_irq_usage+0x570/0x8b0 [ 244.408978][ T32] ? lock_acquire+0x1d1/0x380 [ 244.409005][ T32] ? process_one_work+0xa2c/0x1b10 [ 244.409051][ T32] ? process_one_work+0x906/0x1b10 [ 244.409086][ T32] ? process_one_work+0x906/0x1b10 [ 244.409141][ T32] process_one_work+0xac7/0x1b10 [ 244.409264][ T32] ? __pfx_process_one_work+0x10/0x10 [ 244.409290][ T32] ? lock_acquire+0x1d1/0x380 [ 244.409313][ T32] ? __pfx_hub_event+0x10/0x10 [ 244.409336][ T32] worker_thread+0x5ef/0xe50 [ 244.409366][ T32] ? __pfx_worker_thread+0x10/0x10 [ 244.409391][ T32] ? kthread+0x13a/0x450 [ 244.409411][ T32] ? __pfx_worker_thread+0x10/0x10 [ 244.409433][ T32] kthread+0x373/0x450 [ 244.409453][ T32] ? __pfx_kthread+0x10/0x10 [ 244.409476][ T32] ret_from_fork+0x730/0xd60 [ 244.409496][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 244.409514][ T32] ? rcu_is_watching+0x13/0xc0 [ 244.409535][ T32] ? __switch_to+0x800/0x10f0 [ 244.409557][ T32] ? __pfx_kthread+0x10/0x10 [ 244.409580][ T32] ret_from_fork_asm+0x1a/0x30 [ 244.409609][ T32] [ 244.409649][ T32] [ 244.409649][ T32] Showing all locks held in the system: [ 244.409657][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 244.409669][ T32] #0: ffffffff8edd8738 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 244.409712][ T32] #1: ffffffff9bc68c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 244.418147][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 244.418162][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 244.418234][ T32] locks held by klogd/4958: 1, last CPU#0: [ 244.418245][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0x90/0x600 [ 244.418284][ T32] locks held by getty/5356: 2, on CPU#0: [ 244.418295][ T32] #0: ffff8880337240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 244.418339][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 244.418387][ T32] locks held by kworker/1:3/5711: 2, on CPU#1: [ 244.418398][ T32] #0: ffff88801c05a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 244.418442][ T32] #1: ffffc90003f47d08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 244.418487][ T32] locks held by kworker/1:4/5733: 3, on CPU#1: [ 244.418498][ T32] #0: ffff88801c05a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 244.418541][ T32] #1: ffffc90004097d08 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 244.418585][ T32] #2: ffff88802b34d1d8 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x100 [ 244.418626][ T32] locks held by kworker/1:6/5821: 5, on CPU#1: [ 244.418637][ T32] #0: ffff888020af8d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 244.418680][ T32] #1: ffffc90004567d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 244.418725][ T32] #2: ffff88802b0871d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 244.418764][ T32] #3: ffff88802763f1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 244.418803][ T32] #4: ffff88807cd601a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 244.418852][ T32] locks held by syz.5.948/8886: 1, last CPU#0: [ 244.418863][ T32] #0: ffff88807d241078 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xc5/0x140 [ 244.418907][ T32] locks held by syz.1.952/8898: 1, last CPU#1: [ 244.418919][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x25/0x1a0 [ 244.418960][ T32] [ 244.418963][ T32] ============================================= [ 244.418963][ T32] [ 244.418970][ T32] NMI backtrace for cpu 0 [ 244.418982][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 244.419003][ T32] Tainted: [L]=SOFTLOCKUP [ 244.419009][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 244.419018][ T32] Call Trace: [ 244.419028][ T32] [ 244.419034][ T32] dump_stack_lvl+0x100/0x190 [ 244.419058][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 244.419082][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 244.419100][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 244.419120][ T32] sys_info+0x141/0x190 [ 244.419142][ T32] watchdog+0xcb1/0x1030 [ 244.419164][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 244.419183][ T32] ? __pfx_watchdog+0x10/0x10 [ 244.419204][ T32] ? __kthread_parkme+0x18f/0x230 [ 244.419225][ T32] ? kthread+0x13a/0x450 [ 244.419244][ T32] ? __pfx_watchdog+0x10/0x10 [ 244.419260][ T32] kthread+0x373/0x450 [ 244.419280][ T32] ? __pfx_kthread+0x10/0x10 [ 244.419302][ T32] ret_from_fork+0x730/0xd60 [ 244.419320][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 244.419339][ T32] ? __switch_to+0x800/0x10f0 [ 244.419360][ T32] ? __pfx_kthread+0x10/0x10 [ 244.419382][ T32] ret_from_fork_asm+0x1a/0x30 [ 244.419408][ T32] [ 244.419672][ T32] Sending NMI from CPU 0 to CPUs 1: [ 244.419695][ C1] NMI backtrace for cpu 1 [ 244.419706][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.419725][ C1] Tainted: [L]=SOFTLOCKUP [ 244.419730][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 244.419738][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 244.419754][ C1] Code: 91 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 d8 cb ce fc eb a2 e8 61 cc [ 244.419767][ C1] RSP: 0000:ffffc90000157958 EFLAGS: 00000002 [ 244.419779][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 244.419788][ C1] RDX: 00000000000003fd RSI: ffffffff85b084c0 RDI: ffffffff9bc68ca0 [ 244.419797][ C1] RBP: ffffffff9bc68c60 R08: 0000000000000001 R09: 000000000000001f [ 244.419806][ C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 244.419814][ C1] R13: 0000000000000020 R14: fffffbfff378d1e9 R15: dffffc0000000000 [ 244.419824][ C1] FS: 0000000000000000(0000) GS:ffff888123c5c000(0000) knlGS:0000000000000000 [ 244.419838][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.419847][ C1] CR2: 0000000000000000 CR3: 0000000060155000 CR4: 00000000003526f0 [ 244.419857][ C1] Call Trace: [ 244.419861][ C1] [ 244.419867][ C1] wait_for_lsr+0x13a/0x210 [ 244.419885][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 244.419902][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 244.419918][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 244.419933][ C1] serial8250_console_write+0xf46/0x1330 [ 244.419953][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 244.419971][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 244.419993][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 244.420016][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 244.420031][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 244.420044][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 244.420063][ C1] ? do_raw_spin_lock+0xb0/0x260 [ 244.420083][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 244.420100][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 244.420116][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 244.420129][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 244.420144][ C1] nbcon_kthread_func+0x613/0x7d0 [ 244.420159][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 244.420174][ C1] ? __kthread_parkme+0x18f/0x230 [ 244.420190][ C1] ? kthread+0x13a/0x450 [ 244.420206][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 244.420218][ C1] kthread+0x373/0x450 [ 244.420235][ C1] ? __pfx_kthread+0x10/0x10 [ 244.420253][ C1] ret_from_fork+0x730/0xd60 [ 244.420267][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 244.420283][ C1] ? __switch_to+0x800/0x10f0 [ 244.420302][ C1] ? __pfx_kthread+0x10/0x10 [ 244.420320][ C1] ret_from_fork_asm+0x1a/0x30 [ 244.420339][ C1] [ 244.430396][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 245.698491][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 245.709162][ T32] Tainted: [L]=SOFTLOCKUP [ 245.713481][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 245.723535][ T32] Call Trace: [ 245.726815][ T32] [ 245.729744][ T32] dump_stack_lvl+0x100/0x190 [ 245.734430][ T32] vpanic+0x553/0x970 [ 245.738442][ T32] ? __pfx_vpanic+0x10/0x10 [ 245.742947][ T32] panic+0xd1/0xe0 [ 245.746665][ T32] ? __pfx_panic+0x10/0x10 [ 245.751072][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 245.757225][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 245.763392][ T32] ? watchdog.cold+0x1ec/0x234 [ 245.768158][ T32] watchdog.cold+0x1fd/0x234 [ 245.772766][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 245.778571][ T32] ? __pfx_watchdog+0x10/0x10 [ 245.783238][ T32] ? __kthread_parkme+0x18f/0x230 [ 245.788249][ T32] ? kthread+0x13a/0x450 [ 245.792503][ T32] ? __pfx_watchdog+0x10/0x10 [ 245.797168][ T32] kthread+0x373/0x450 [ 245.801236][ T32] ? __pfx_kthread+0x10/0x10 [ 245.805819][ T32] ret_from_fork+0x730/0xd60 [ 245.810410][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 245.815528][ T32] ? __switch_to+0x800/0x10f0 [ 245.820214][ T32] ? __pfx_kthread+0x10/0x10 [ 245.824807][ T32] ret_from_fork_asm+0x1a/0x30 [ 245.829588][ T32] [ 245.832825][ T32] Kernel Offset: disabled [ 245.837128][ T32] Rebooting in 86400 seconds..