last executing test programs: 13.210250421s ago: executing program 3 (id=2476): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x73, 0x1, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100c28, &(0x7f0000000100)={[], [{@uid_gt}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) r7 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0x121, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x15, 0x4004, @fd=r3, 0x5, 0x0, 0x0, 0x0, 0x0, {0xfffc}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_fail_link\x00', r10}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) 12.12485716s ago: executing program 3 (id=2479): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) 11.836963607s ago: executing program 3 (id=2481): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="020300020c000000fdffffffffdbdf2503000600002000000200000064010100000000000000000002000100000000000700fb0300000000030005000000000002000000ac1414aa00000000000000000100080000000000010014"], 0x60}, 0x1, 0x7}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001f00)=@getae={0xd4, 0x1f, 0x1, 0x70bd2c, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d3, 0x2, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x3506}, [@algo_crypt={0x64, 0x2, {{'xchacha12-simd\x00'}, 0xe0, "144f859553d0c41df65eed6e67f58714c1eb41eb57083e9944e433fa"}}, @policy_type={0xa, 0x10, {0x1}}, @lifetime_val={0x24, 0x9, {0x3c, 0xffffffff, 0x3, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8000) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x4, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001a40)={0x84, &(0x7f0000001580)={0x20, 0xe, 0xca, "915ae35d9fb1052a51d78e38cddb9c111086d5c267691dbc62edad699a8082d5bf816616c0b9b9fed9456ae126354abd284e46ab3c7c8af42159b8b1795ff99859dce2fba7594fe677d0568dc6c6d634d0ce468fa6858d46065228c944fad4514c51fd2f262518db0669693cf9801766f7f27a294cc650f505864f4d32dff7b99d1df5b06eaa144adb60dbee651ee42edec9b8697414ed5309cec5d217b049e51330f77415f81ae37f99a14d43b3e99b612a352c7497bddb2251cb9ab52101a04c675b9ba8c80f5a8dd3"}, 0x0, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001740)={0x20, 0x0, 0x4, {0x0, 0x40}}, &(0x7f0000001780)={0x40, 0x7, 0x2, 0x2}, 0x0, &(0x7f0000001800)={0x40, 0xb, 0x2, "61a3"}, &(0x7f0000001840)={0x40, 0xf, 0x2}, &(0x7f0000001880)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000018c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000001900)={0x40, 0x19, 0x2, "0fa4"}, &(0x7f0000001940)={0x40, 0x1a, 0x2, 0xfff7}, &(0x7f0000001980)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000019c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001a00)={0x40, 0x21, 0x1, 0xf9}}) 9.105489582s ago: executing program 2 (id=2493): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xce90, 0x10, 0x3, 0x40004333}, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x7e069000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) 9.05413122s ago: executing program 4 (id=2494): socket$inet6(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendfile(0xffffffffffffffff, r0, 0x0, 0x578410eb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8.92666002s ago: executing program 1 (id=2495): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) shutdown(r0, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xffffffff}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 7.983386533s ago: executing program 3 (id=2497): timerfd_create(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = socket$l2tp(0x2, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rt_sigpending(0x0, 0x0) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x3}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002600)=[{{&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/128, 0x80}], 0x2}, 0x49f1}, {{&(0x7f0000000440)=@ll, 0x80, &(0x7f00000020c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f00000015c0)=""/20, 0x14}, {&(0x7f0000001600)=""/168, 0xa8}, {&(0x7f00000016c0)=""/190, 0xbe}, {&(0x7f0000001780)=""/220, 0xdc}, {&(0x7f0000001d40)=""/144, 0x90}, {&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000001f00)=""/199, 0xc7}, {&(0x7f0000002000)=""/160, 0xa0}], 0xa, &(0x7f0000002180)=""/67, 0x43}, 0x3}, {{&(0x7f0000002200)=@phonet, 0x80, &(0x7f0000002540)=[{&(0x7f0000002280)=""/229, 0xe5}, {&(0x7f0000002380)=""/173, 0xad}, {&(0x7f0000002440)=""/27, 0x1b}, {&(0x7f0000002480)=""/164, 0xa4}], 0x4, &(0x7f0000002580)=""/71, 0x47}, 0x2}], 0x3, 0x200100a2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080)=0x2, 0x3e) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="cc34", 0x2, 0x0, &(0x7f00000000c0)={0xa, 0xfffc, 0x27b6a97, @private2, 0x9}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000140)={@multicast1, @empty, 0x0, 0x1, [@loopback]}, 0x14) mq_timedsend(r6, 0x0, 0x2000, 0x400000000000005, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000f14010000008000fedbdf250c00450072fd45006973736d"], 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x20040804) 7.272197454s ago: executing program 0 (id=2498): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="020300020c000000fdffffffffdbdf2503000600002000000200000064010100000000000000000002000100000000000700fb0300000000030005000000000002000000ac1414aa00000000000000000100080000000000010014"], 0x60}, 0x1, 0x7}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001f00)=@getae={0xd4, 0x1f, 0x1, 0x70bd2c, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d3, 0x2, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x3506}, [@algo_crypt={0x64, 0x2, {{'xchacha12-simd\x00'}, 0xe0, "144f859553d0c41df65eed6e67f58714c1eb41eb57083e9944e433fa"}}, @policy_type={0xa, 0x10, {0x1}}, @lifetime_val={0x24, 0x9, {0x3c, 0xffffffff, 0x3, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x4, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.131384092s ago: executing program 4 (id=2499): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x71, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d8, 0x29, 0x36, {0x5e, 0x37, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast1]}}}], 0x388}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.962205303s ago: executing program 2 (id=2500): socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1002000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$sndpcmc(0x0, 0x4, 0x200081) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect$hid(0x0, 0x16, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) 6.59554909s ago: executing program 1 (id=2501): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 6.565609692s ago: executing program 4 (id=2502): socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1002000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$sndpcmc(0x0, 0x4, 0x200081) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_usb_connect$hid(0x0, 0x16, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) 6.346929335s ago: executing program 0 (id=2503): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x70, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b08"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d8, 0x29, 0x36, {0x5e, 0x37, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x18}}], 0x378}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.57604233s ago: executing program 1 (id=2504): r0 = syz_open_dev$sndmidi(&(0x7f00000005c0), 0x10, 0x260000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000600)={0x0, 0x1, 0xf03}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffe4, 0x1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0xb}]}}]}}]}, 0x5c}}, 0x24040084) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x40400, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0xdb542000) r8 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_NEWNSID={0x24, 0x58, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NETNSA_PID={0x8, 0x2, r8}, @NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xf67acb20825e3f1a}, 0x8148) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x9}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x4, '\x00', r3, r5, 0x2, 0x4, 0x3}, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="14000000010601"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sched_setattr(r8, &(0x7f0000000280)={0x38, 0x0, 0x10000040, 0x6, 0x6, 0x8, 0x7, 0x5, 0x6, 0x100}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r11) 5.441308376s ago: executing program 0 (id=2505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x44) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a3200000000140000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}, {&(0x7f0000000640)="d7d118a1490482962ec4d2cbacb933a2fac55bcb2a40308d3144a2ade353ed6a179ffc633aabc9161af9cc74ddfe3b746d6cfcc77eea2e119d9a4a1ef0f9a4ac3b38b7cd32eeb895f0c509944f913f2b8ac3b84737ea1d39883ccba1db3417121cf076b9b54f21aa7a77731c764b018a3c5698b74bd25d8c3ab901db00a15f6c27e0a08cbfc502c4fd8417e98248e67512d7f8b8239af8802f3a06d891963f64e187b538335891b6cbff2f48eea2cb39da345cf9fbabcccf0f39321cc8f1241a83f6e75768e38b0cc690357c27e8b4166ed67380833174654f78f2c0e34a7db06adeb114bc915190de5e442d365cdb90cbd96c2a8bd32a7ce31d0dea6befb1ef25dd726eaa7ba606ae83ec9f2beebcf5b63522923bd56c067d7597e1f7c1dd1b3e634cf5ea7aa7d8edfa4dc8c67a2b3401f8be5dcb13b2d877b1fb70b98539191b327d6296c45d89e319745705921ace08b0c218ec1a233162c95b9561e0b082ea3eed18d5fb2146cf0cede354cbb2a0a66449c605d61ac53b1510dc79a4dbc52d20f27a862fe26d8e39993a4c502d8e7610965b92b4d8208a8622fbd1772db96d37b9f2e29f5cedf9f166376a23aa8b09d6cc664a3e6bcdc0a04e3ff2563919dfecb44824dde1073777d3a1194d275d9def7a4b07eb2daaba1e2bc54b7393bce7700c85e2cf4d2b071cbdcafa51763146a774538f928c8a8cdf54f61fd06d661cfe7ece6872dce559be4981225dc428a4f754bb6250dc8f60a4f8750a573e3acb3009d0387885546ef2207aaacbbd8b37725d68c33c1b3a9df9797fdee3a51212b8a7562068836992184e626a627b209aed076c2d660d6011969eafc3e1bbf2a021520b1d6eb151f63495074e9582aa48460917580688538a71b9d0374236ca3fa2c78471ceec34be0789eddbb418483229e77165b4408008d9588a33f1fd68c72eddc84a4a49c8e5941a718c11a3b87d257ef1dc00d8e529c492426c8235c77b808f82b56be9e54433bdc48af4e0767077a3001a81691bc03953d44279b94e3d3d7b3a100aaf2a2ed108ae0d32e9a694e0282f20db507c650df54f6039b657b8fce0a7ac20495889bb274398eb09479a79f77a793542eb1e8bdb11724677481f8c4ebd9fed5da21f95211f5ebe6dac113fb08d02adddd4cc60b203c4287c276ae88619f914ccf998e126b0dcba7370ec7fe3322a4be56786a003b9511c51a1fe0d5cb2e8d46dbce4fe35c99e7fd67127c2b48de189752ec78e168cc82bb1c10e943bf49200df764dd83a804b637738c3feff939724a764e6ba78437315ce347baf8c7e35c23e24997d305e1c4ebf05188947cae36e7cab9241297c523d938df76b3d54ecfe46a7f216a8e70e1f22db2bc5469558cf3124fa5510366866b90e9763f22a30fdeff85559739f256f08305ed3990deee92a3ab051ccd9253bec57dd4dd20bce7cc8496ecc4560720bc4bf2e85622ae617ee0af8d8fa199ad205e9344fc11c575b3c7963f22cf45f9aa3153799d856a9cc9817c14b5a6d93f27b551d1dc5935d4fd8e5f18a2bac543b59c3cfde3c16ac869f59d8edd846804920906e6a4d4ca506303e25d02125171645f69953c9be02c463cd60dc743f21dcb9a1a23092ec0567dde320e709c05885b6e8346bfdfe31ad3a7c6fc7571963f1768af16a5520fc1b8d397d341ce3a5ee366821821cb9e443234fba372df33fd7405f276a95643994c073e027487711d4e8dbd40082965a7551d119abe7e02944e9627ef349b8634504ef2c8443ebeb80afeb387ed457de707df8d1aee3a79022d8cf5e3c9be45837b210cecbc359ebc8f3697d5c3faf0ba662f20e010fb1e2a8d3403fbe071896d0fd323db69c850e7b497560d74fdc9dc177fcb3b6c66f6d19e9e153b2d3e96059f7c6e9c9f9679f7d980f35454ce56fadcb3ef3e7da8ce60a9211bfaf86e837f6de2814003071318a91bb0966e5c781e7f24fca01e2946c8f5e6582e81068ab5f67836282fcd3fe8e89cbe153be959ae33baa44d3ebcde9d4ad21d1bb85f613fea6d35e967733d3d7616209d59c7f6ce18214da80ee6e00f79034767d34048e51ff074eef01cb7315496722dbf777eeaec28801f6b311a3c296f6700ff514973aeb9fa9532c3344a17dac607e87e1dd0aa9eaa9a5c8b600b9b42a9bc4fd0a1a1d951675010cfff64f28f059a5077e52d5e34551f74715977e56ead4bab02cad514e5409b6e81dd00483ff0686535fe8c7f5f7884eed05ebc789e0d852027fda8db9cd562655ebdf764a47b4edc0c2d28b93a718b6a31fa28bd4765d08511b6237f6390a38474c98abcac19621d96d002500d7000f1acb443673c60acb823c23bd615541f6f5412e0fa595ff5a3fb935437728cebcef90c57ae4a7e8a6e61be472c82d356f80400942977cff0dd1327db2577fc037dcf87df467d0cd572141859c1fa8e4fba5058445ed29873f3b37c9f11e60e4c22f22a82db7ec98b4c8fddecc91e26f0ab70c975aabca616d0e27c1d2b65b66006c9024bb2b6e16b59e83fc6b44261fc6886ea53622d6adb77ee24d3d6d4f4ea2f54bd737af4f5bef0940121348c46c9a6f59ea7f5a2aeb57510ba1ff236700f0971262ba6601f3503fb6a5ecb7227ccb39d8859ab3c15fada9e0f057868a7b39cee60eb746a88450d119f9859c6173db108ee896f551d39cb75cc1c42a043a19e929f46bec0a7f9e3a703dfd583d8e9d9428468dacd49e5aa820fd9aba140b0766635b17f1f848d3449f122c0a60f2c8238f0d5e891aed348b55c8b0b1bc140ffb664b9c54572b86f608285cdb6c80f1a80e820faf7136b21fa22977ebe9a9c6901195e3ab701197a8e796307581e2e0952eb132f8983f564a62e01976d5b65bd8a0e0447b7c85e764222568a515f2de344067861d3543b3350a657f7f1ea70d348865356a9853e1bc0c344d45bb3e4f6e6861219fd12b5266f8eed59b4abb20ab121c8075cb3ae16ce8458d9fccbb2c24dcb3df66c77f7a321cc14ed761c744823a923ac54e855db7c4fe856efb8c8839c43536a89f4e8bce24eeddcaee59bbf0a70d3f80ca0c84c965ae101833bb2337ba2e786af291d2fe223732f5e08c7ba280efcf6e8526a0da82adb667103b61f346d9a55fa5e50895162ba6d4221795e8c61ae2d5e7223e4fee8dbeeabcf45b5c9312155deb7905f3f62d2834dc7b9abcec45f6d5b93cb8ee42608acd2ce09f08bf213a79aacb5051de2b0d59443dd2705ba895d9e03e25722ed5a947ac45369be2e378c07a8a5719e2d47ce8654cced6b234cf56eb8c64f5bba78428641a4c13b8ce535ef1d88f1985fe53ad297d6e711695180d3886f35044c480b80b55722c426cc84bd73849082ebbfce905cd28bd4997de4e7d7d1efe2f870575f6274fb22770b4107206033f05016bd5bd9e82d411fbe586038e58cbe13737a13788c915da26686a6c225e8f6b65d178182453359975957a5e43d088a30fef5471acc554281ba390cd32d080cada3341e34a094701fd1f4ee4f6b6218f9cc80847fe2723d05c1034a984da9a11b2b7c324d6de8551fffe20dc89b37530f48666c27910c2027af2ca7314e5d9ecdc1a9fd934470264d61232c17e0ff0640a366e4b0c61617eb932afc615ca7b3ade86655bbb409ce67e37cfec01815f413fafe86857f5dd59c1e4408d9dac071f33926ed12baa5ea89c79c370898177afb573d49009139c22488db14c8ed056315e3b556e662e130d87e745d1bf9d6b2d976012dbe4026924cfb4139131b22963ae07241c045bd7185cdb4d6454c21073524726130c0cea35329bb7b156f550bab6d2815c5734db325b9c33a44d8e47d5f8049e3445492fe979dc5cf9d875ec4af2e6501bb62effe663e0f2162aea947f50492fce6c83ce7d38a6bf9d70c4da106c67b66103eecf300fdddb402d4d3f4922cbeb7f480d99b4c96af1b1ae88d5ac63e966f23e1c91b2d2e877f113ee6887a3442ada3b278ddc0a36b818ca13261c0adf5985e0f5287c608f19d20465b909f9c8435ab618d4aefcdb2248f1f4778d6a738c640313e1234f979e7d468cee67a900bf4f71336980e315248fc1db5fa3bd0fb712627a6e45b8216ef07200ff2bdba5e79aa40110f6864862cf28d87f40a97fc65eaabab49df425a0a0f6276dd0e8d76b3e691714a66bbbcd26f46d470ec60070a3827e23804e40d33da5a639143a6eddd7cf837747faa6746bee55bd02d2e20a6c5c0292c6c7c759d918d7a4744f67dd776b6855709b7352f8196aef96ea2506cd504095ca63bfa94ef53ba612470e9e3f2a18c8f5987949fd9fbdb8a51a9ae40fd37ea70e4943c83482372be59cb75b13b89245ac5562b6aac194b942bbe52874e482298bfc581aaecfeca3c3e4132757ad03c5848c94389eac9f766bc0bced19383c69d3ad1db7acfc67246c14d0360674c5165c151a0bb2621f79cb8149d9f4967498409315d7a29eb13f6ad92c5ac473c3f8287767e883baee3bddb24000a2db40e78e2d56346350881abef092e81d538714768235b33d4dfe46a06357a996e9c8c0b01f2e2b56a76b1dfd829b907ab61ea16b0eff8c620efbd7984f90dc4305e291fe2f3f7834095a835462e4bdee6ec527617bdb598b8c423b537b7484e1d34380b24ce9d8a6ba29dd42dd103913da3b76c7651a71ff4346f65de4c96bf674064a2392cc1e978ce693b1a9b9ce2958026720eaa63da1a96f811dcbecd31141b878a88c4879e1945513098ceab394f8b2006231bbf68a73aafc0f2a9b742a457c34d56267d565ecece89836ac3c3627d1f0333e9ecf6534d21388567ac374220678e8448d0b1ea0caa61c10ac24151c2350a2774c2ea1b5c5ce4a4933b23bb99c3f59b79139ece873f734a6f59bb7bbafefe469509e2658c81684327cf6eb3135ab640d20b2f9ca3b65f0a023a61aca5348a3c643beec32060eda0c3aadf3f524635a8d7cefff630d26b23d362b814516d81746920fa00c889a2dd4294367a922631c871b7c50b2f913242ae7b3eef9e8e9ec6d190fcc130238a4424eb4bc92fdbbc407385816a67c5a31cbc2a13a79eb4e44ca07370ded49e86593b3252b2ceac92ee8447f56784ee3d185a9643e7a9728141bdf40924b84ecfe2f92b804d48e7d6321da09ebc619bc441ec9db9f430e72cd4fab657423a49103331abb0fb4cee0397606d2519d5fb7af3fb18e7b0767b2ce4bfb37ccb3590d61013821089846ae4cfb92fafd8d5988b25d718a5f3e7f20ccedef2fe68c5fdfb7f1940fd4f324839c0121fc9b8d7c342a5568826bb14891c07e18d215184307e7397a183c8e6294dcb99ee55d9e7271e80767ff21b6ed4cdbc17500aaed9eebd9f33ed906c22ca5066d7bf55f2927478abfbc4797efbd98e5513a59c94ef899777bd37d9cb6b999081b9970b63730ffba3fd3c86ada3469cac3949a67117e14aac1a805a61c0bea7d84423b4167709e4b4a51a293f0544c450a41cf0b98b4a15f450a8a3782fb4a75fdf485fbbc29c6c90e69a6923f4a55e27e92da4d31bd77a10d89bf4fa68e3205996e43f15ab6563abc024414121befcadfb4a87cc01e7d839c13c3cf3380103f16c4ddcb22c763994cb5cc1abb98a8df08f11d6ea78a69b34ed29cd0db73558234c3551bd274f816642dca36a6e357c13ad087306da1058ba518dda5712931d64e893773e0bf6017945d903460de040b28e73f9b226cbcbb1bb9a2b8bdf646046cfb62e91ee4d292cf8ff594b6b1110e560ca14d283fac7906b6a879cd9b21a605033324", 0x1000}], 0x2}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r4, &(0x7f0000000740), 0x0, 0x0, 0x2) 5.303356606s ago: executing program 1 (id=2506): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioperm(0x2f2d, 0x1, 0x10001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='veno', 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0xffffff02, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) sendmmsg$inet6(r1, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) process_mrelease(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) close(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x3, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 4.623484334s ago: executing program 3 (id=2507): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 3.908261945s ago: executing program 2 (id=2508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r5, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400005f207a14bcfa2dd5d1b5c492a80562e3caee54e5b5158f8a18b5860e69f15069e127c86582e07ffd0ce2b86095e80f8d19252b8315b36729bae3e73b9ea8ee6f48655b42f531f50c04f31786ce9257e8", @ANYRES16=r8, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000101010101010000080026006c09000004004600100051800c00008007000400515a3c00"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 3.872621263s ago: executing program 1 (id=2509): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="020300020c000000fdffffffffdbdf2503000600002000000200000064010100000000000000000002000100000000000700fb0300000000030005000000000002000000ac1414aa00000000000000000100080000000000010014"], 0x60}, 0x1, 0x7}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001f00)=@getae={0xd4, 0x1f, 0x1, 0x70bd2c, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d3, 0x2, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x3506}, [@algo_crypt={0x64, 0x2, {{'xchacha12-simd\x00'}, 0xe0, "144f859553d0c41df65eed6e67f58714c1eb41eb57083e9944e433fa"}}, @policy_type={0xa, 0x10, {0x1}}, @lifetime_val={0x24, 0x9, {0x3c, 0xffffffff, 0x3, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r4 = open_tree(0xffffffffffffffff, 0x0, 0x8000) write$binfmt_misc(r4, &(0x7f0000000440)="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", 0xfbc) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x4, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.236741831s ago: executing program 3 (id=2510): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046f17720fd0b2001adf90102030109021b0001000010000904"], 0x0) sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}], 0x30}}], 0x1, 0x68034) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000008400"/21], 0x18}, 0xd1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25140000000e0001006e657464657673696d0000000f0002006e65cff3b46575a37f92000008000300020000000800ce9a850b004000000006001100060000000c00005d00"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 3.025917927s ago: executing program 4 (id=2511): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) setresgid(0x0, 0xee00, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x22008d0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000e897dc3d7588ed80000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.903967931s ago: executing program 2 (id=2512): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 2.861146322s ago: executing program 4 (id=2513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = open(0x0, 0x8aa00, 0x0) fallocate(r2, 0x30, 0x0, 0x1000f7) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='romfs\x00', 0x80882a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x48, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) flock(r2, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r6, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) read$eventfd(r2, &(0x7f0000000000), 0x8) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x80000001, 0x1, 0x1b, 0x8, "5d48f7695735530291cd11b2b0bd5a4aa17329c16239f4c60d4b0b7f5248d8d09c04b01b213fd3dacb943dc82c2fa4d8a3823f0f9eb1bdb42ff36b73229befcd", "3e1ab37446aeefb3d17267b7eece3ae7d4d8e6fa9670ddcdbf8273e8b6eecf3d", [0x1, 0xf]}) 2.860208502s ago: executing program 0 (id=2514): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x6e, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e"}, @generic={0x80, 0xa, "09e12e5f0b6bdcf72f2e"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x180, 0x29, 0x36, {0x5e, 0x2c, '\x00', [@generic={0xff}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x310}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.458283845s ago: executing program 2 (id=2515): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) 2.428841207s ago: executing program 4 (id=2516): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) ftruncate(r5, 0x6) 2.408523978s ago: executing program 0 (id=2517): r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x7144300, 0x0, 0x5f, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$inet_smc(0x2b, 0x1, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x420000, 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0xa9525000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801040000000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) 2.319549517s ago: executing program 2 (id=2518): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) ftruncate(r4, 0x6) 330.660552ms ago: executing program 0 (id=2519): socket(0x11, 0x3, 0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (fail_nth: 2) 0s ago: executing program 1 (id=2520): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r5, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400005f207a14bcfa2dd5d1b5c492a80562e3caee54e5b5158f8a18b5860e69f15069e127c86582e07ffd0ce2b86095e80f8d19252b8315b36729bae3e73b9ea8ee6f48655b42f531f50c04f31786ce9257e8", @ANYRES16=r8, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000101010101010000080026006c09000004004600100051800c00008007000400515a3c00"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 862.544592][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 862.721197][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 862.727724][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.754487][ T10] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 862.807672][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.837712][ T10] usb 5-1: Product: syz [ 862.846280][ T10] usb 5-1: Manufacturer: syz [ 862.858419][ T10] usb 5-1: SerialNumber: syz [ 862.940657][ T10] usb 5-1: config 0 descriptor?? [ 862.967990][ T10] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 863.266513][T14052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2002'. [ 863.741454][T14058] tmpfs: Bad value for 'mpol' [ 863.741483][T14059] netlink: 'syz.3.2006': attribute type 39 has an invalid length. [ 863.811606][T14056] vlan2: entered promiscuous mode [ 863.816917][T14056] bridge0: entered promiscuous mode [ 863.848379][ T10] usb 5-1: USB disconnect, device number 50 [ 864.770670][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 865.891186][ T10] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 866.105303][ T10] usb 5-1: string descriptor 0 read error: -22 [ 866.138062][ T10] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 866.178273][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.218536][ T10] usb 5-1: config 0 descriptor?? [ 866.250052][ T10] usbtest 5-1:0.0: FX2 device [ 866.287405][ T10] usbtest 5-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 866.570314][T14090] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2014'. [ 866.751263][ T5882] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 866.761116][ T5800] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 867.351240][ T5800] usb 4-1: Using ep0 maxpacket: 16 [ 867.358724][ T5800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.372829][ T5800] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 867.450714][ T5882] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 867.461881][ T5882] usb 1-1: config 0 has no interface number 0 [ 867.470668][ T5800] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 867.480986][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.514712][ T5882] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 867.528036][ T5800] usb 4-1: Product: syz [ 867.534407][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.542661][ T5800] usb 4-1: Manufacturer: syz [ 867.547702][ T5800] usb 4-1: SerialNumber: syz [ 867.554024][ T5882] usb 1-1: Product: syz [ 867.562664][ T5882] usb 1-1: Manufacturer: syz [ 867.567662][ T5882] usb 1-1: SerialNumber: syz [ 867.734130][ T10] usb 5-1: USB disconnect, device number 51 [ 867.759692][ T5882] usb 1-1: config 0 descriptor?? [ 868.895720][ T30] audit: type=1326 audit(867.924:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.1.2015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faab9d8f749 code=0x0 [ 869.474900][T14113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2017'. [ 869.509872][T14113] netlink: 'syz.4.2017': attribute type 10 has an invalid length. [ 869.520783][T14113] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 869.664705][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.671140][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.970642][ T5882] usb 1-1: can't set config #0, error -71 [ 869.995321][ T5882] usb 1-1: USB disconnect, device number 56 [ 870.071307][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 870.740858][ T5800] usb 4-1: USB disconnect, device number 39 [ 870.752549][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.771819][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.789543][ T10] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 870.817644][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.851534][ T10] usb 3-1: config 0 descriptor?? [ 871.131259][ T5898] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 871.381569][ T10] steelseries 0003:1038:1410.0003: item fetching failed at offset 5/7 [ 871.392407][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.410372][ T10] steelseries 0003:1038:1410.0003: parse failed [ 871.416870][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.437336][ T10] steelseries 0003:1038:1410.0003: probe with driver steelseries failed with error -22 [ 871.448722][ T5898] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 871.471294][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.523394][ T9733] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 871.618122][ T5898] usb 2-1: config 0 descriptor?? [ 871.715368][T14139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2020'. [ 871.797480][ T9733] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 871.844410][ T9733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.920863][ T9733] usb 1-1: config 0 descriptor?? [ 872.038230][T14121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.068590][ T5898] steelseries 0003:1038:1410.0004: item fetching failed at offset 5/7 [ 872.098826][ T5898] steelseries 0003:1038:1410.0004: parse failed [ 872.106720][T14121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.114824][ T5898] steelseries 0003:1038:1410.0004: probe with driver steelseries failed with error -22 [ 872.356951][T14146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2022'. [ 872.461085][ C0] hrtimer: interrupt took 31760 ns [ 873.006016][T14155] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 873.467901][ T9733] hackrf 1-1:0.0: usb_control_msg() failed -110 request 0e [ 873.476963][ T9733] hackrf 1-1:0.0: Could not detect board [ 873.483989][ T9733] hackrf 1-1:0.0: probe with driver hackrf failed with error -110 [ 873.535426][T14121] batman_adv: batadv0: Interface deactivated: gretap1 [ 873.675514][ T5800] usb 3-1: USB disconnect, device number 53 [ 873.739088][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.746545][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.044010][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.144481][ T9733] usb 1-1: USB disconnect, device number 57 [ 874.707126][ T3480] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.721435][ T3480] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.737652][ T3480] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.771201][ T3480] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.789839][ T44] usb 2-1: USB disconnect, device number 42 [ 874.827505][ T3480] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.853999][ T3480] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.890528][ T30] audit: type=1400 audit(874.854:386): avc: denied { mount } for pid=14172 comm="syz.1.2032" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 874.985410][ T3480] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.011277][ T3480] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.137911][T14177] netlink: 'syz.0.2033': attribute type 1 has an invalid length. [ 875.591680][ T30] audit: type=1400 audit(875.544:387): avc: denied { setopt } for pid=14182 comm="syz.3.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 875.720812][ T30] audit: type=1400 audit(875.684:388): avc: denied { read } for pid=14179 comm="syz.2.2034" path="socket:[55033]" dev="sockfs" ino=55033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 876.011486][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 876.197589][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 876.209316][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 876.270447][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 876.282130][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.290431][ T10] usb 5-1: Product: syz [ 876.296075][ T10] usb 5-1: Manufacturer: syz [ 876.301264][ T10] usb 5-1: SerialNumber: syz [ 876.329762][ T10] usb 5-1: config 0 descriptor?? [ 877.000648][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 877.321235][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 877.396912][ T10] usb 5-1: USB disconnect, device number 52 [ 877.473789][ T30] audit: type=1400 audit(877.444:389): avc: denied { connect } for pid=14208 comm="syz.1.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 877.548495][ T30] audit: type=1400 audit(877.514:390): avc: denied { setopt } for pid=14208 comm="syz.1.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 878.120067][T14220] erofs (device nbd1): cannot find valid erofs superblock [ 881.499385][T14253] SELinux: ebitmap: truncated map [ 881.508293][T14253] SELinux: failed to load policy [ 881.819339][T14239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 881.826072][T14239] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 881.832695][T14239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 881.839505][T14239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 881.846659][T14239] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 881.901423][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 883.993445][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 883.999695][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 884.012760][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 884.018952][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 884.393247][T14275] FAULT_INJECTION: forcing a failure. [ 884.393247][T14275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.441250][T14275] CPU: 1 UID: 0 PID: 14275 Comm: syz.2.2057 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.441283][T14275] Tainted: [L]=SOFTLOCKUP [ 884.441290][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 884.441301][T14275] Call Trace: [ 884.441310][T14275] [ 884.441316][T14275] dump_stack_lvl+0x16c/0x1f0 [ 884.441338][T14275] should_fail_ex+0x512/0x640 [ 884.441360][T14275] _copy_from_user+0x2e/0xd0 [ 884.441381][T14275] wext_handle_ioctl+0xc2/0x2a0 [ 884.441400][T14275] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 884.441418][T14275] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 884.441433][T14275] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 884.441454][T14275] sock_ioctl+0x3a1/0x6b0 [ 884.441474][T14275] ? __pfx_sock_ioctl+0x10/0x10 [ 884.441491][T14275] ? hook_file_ioctl_common+0x144/0x410 [ 884.441514][T14275] ? selinux_file_ioctl+0x180/0x270 [ 884.441529][T14275] ? selinux_file_ioctl+0xb4/0x270 [ 884.441546][T14275] ? __pfx_sock_ioctl+0x10/0x10 [ 884.441563][T14275] __x64_sys_ioctl+0x18e/0x210 [ 884.441578][T14275] do_syscall_64+0xcd/0xf80 [ 884.441595][T14275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.441608][T14275] RIP: 0033:0x7f2808b8f749 [ 884.441619][T14275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.441631][T14275] RSP: 002b:00007f2809ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.441643][T14275] RAX: ffffffffffffffda RBX: 00007f2808de5fa0 RCX: 00007f2808b8f749 [ 884.441651][T14275] RDX: 0000000000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 884.441658][T14275] RBP: 00007f2809ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 884.441665][T14275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.441672][T14275] R13: 00007f2808de6038 R14: 00007f2808de5fa0 R15: 00007ffcfdabe3a8 [ 884.441687][T14275] [ 884.810411][T14277] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2059'. [ 885.251971][ T30] audit: type=1326 audit(885.214:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.1.2058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faab9d8f749 code=0x0 [ 887.563193][T14305] ceph: No mds server is up or the cluster is laggy [ 887.577830][ T44] libceph: connect (1)[c::]:6789 error -101 [ 887.757328][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 888.998108][T14320] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 889.007874][T14320] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 889.020743][T14320] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 889.031475][T14320] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 889.058892][T14320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 889.315774][T14326] FAULT_INJECTION: forcing a failure. [ 889.315774][T14326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.330324][T14326] CPU: 0 UID: 0 PID: 14326 Comm: syz.0.2069 Tainted: G L syzkaller #0 PREEMPT(full) [ 889.330350][T14326] Tainted: [L]=SOFTLOCKUP [ 889.330355][T14326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 889.330362][T14326] Call Trace: [ 889.330367][T14326] [ 889.330371][T14326] dump_stack_lvl+0x16c/0x1f0 [ 889.330394][T14326] should_fail_ex+0x512/0x640 [ 889.330420][T14326] _copy_to_user+0x32/0xd0 [ 889.330441][T14326] simple_read_from_buffer+0xcb/0x170 [ 889.330459][T14326] proc_fail_nth_read+0x197/0x240 [ 889.330473][T14326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 889.330487][T14326] ? rw_verify_area+0xcf/0x6c0 [ 889.330500][T14326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 889.330512][T14326] vfs_read+0x1e4/0xcf0 [ 889.330528][T14326] ? __pfx___mutex_lock+0x10/0x10 [ 889.330547][T14326] ? __pfx_vfs_read+0x10/0x10 [ 889.330565][T14326] ? __fget_files+0x20e/0x3c0 [ 889.330586][T14326] ksys_read+0x12a/0x250 [ 889.330601][T14326] ? __pfx_ksys_read+0x10/0x10 [ 889.330616][T14326] ? fput+0x70/0xf0 [ 889.330629][T14326] do_syscall_64+0xcd/0xf80 [ 889.330647][T14326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.330660][T14326] RIP: 0033:0x7f2350f8e15c [ 889.330671][T14326] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 889.330684][T14326] RSP: 002b:00007f234f1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 889.330696][T14326] RAX: ffffffffffffffda RBX: 00007f23511e5fa0 RCX: 00007f2350f8e15c [ 889.330704][T14326] RDX: 000000000000000f RSI: 00007f234f1f60a0 RDI: 0000000000000004 [ 889.330712][T14326] RBP: 00007f234f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 889.330719][T14326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.330726][T14326] R13: 00007f23511e6038 R14: 00007f23511e5fa0 R15: 00007fffece7fe08 [ 889.330741][T14326] [ 890.561170][T14340] erofs (device nbd4): cannot find valid erofs superblock [ 891.021275][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 891.021282][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 891.021322][T12475] Bluetooth: hci2: command 0x0c1a tx timeout [ 891.101225][T12475] Bluetooth: hci3: command 0x0c1a tx timeout [ 891.101231][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 891.608941][T14348] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2074'. [ 896.397740][ T30] audit: type=1400 audit(896.364:392): avc: denied { read } for pid=14399 comm="syz.0.2086" path="socket:[56739]" dev="sockfs" ino=56739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 896.524997][T14405] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2088'. [ 896.805904][T14411] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 898.048541][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2090'. [ 898.060580][T14424] netlink: 'syz.1.2090': attribute type 10 has an invalid length. [ 898.071973][T14424] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 900.412930][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 900.621210][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 900.714727][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.738036][ T10] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 900.759135][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.524737][ T10] usb 5-1: Product: syz [ 901.567531][ T10] usb 5-1: Manufacturer: syz [ 901.608978][ T10] usb 5-1: SerialNumber: syz [ 901.633451][ T10] usb 5-1: config 0 descriptor?? [ 901.642530][ T10] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 901.741135][ T5898] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 902.118414][ T5898] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 902.188666][T14465] erofs (device nbd2): cannot find valid erofs superblock [ 902.829683][ T5898] usb 1-1: config 0 has no interface number 0 [ 902.840886][ T5898] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 902.850204][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.859855][ T5898] usb 1-1: Product: syz [ 902.900076][ T5898] usb 1-1: Manufacturer: syz [ 902.907356][ T5898] usb 1-1: SerialNumber: syz [ 902.909741][ T9218] usb 5-1: USB disconnect, device number 53 [ 902.915505][ T5898] usb 1-1: config 0 descriptor?? [ 902.918553][ T44] IPVS: starting estimator thread 0... [ 903.061170][T14471] IPVS: using max 41 ests per chain, 98400 per kthread [ 904.866415][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2102'. [ 905.101666][ T30] audit: type=1400 audit(904.604:393): avc: denied { bind } for pid=14480 comm="syz.2.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 907.396671][T14508] erofs (device nbd1): cannot find valid erofs superblock [ 907.844261][ T5898] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 907.861702][ T5898] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 907.897399][ T5898] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 907.907671][ T5898] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 907.917531][ T5898] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 907.963630][ T5898] usb 1-1: USB disconnect, device number 58 [ 907.981374][ T5898] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 908.062859][ T5898] keyspan 1-1:0.133: device disconnected [ 908.104246][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2108'. [ 908.165771][T14515] netlink: 'syz.2.2108': attribute type 10 has an invalid length. [ 908.229962][T14515] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 908.873438][T14528] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 910.951368][ T9218] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 911.023507][ T44] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 911.107392][T14558] fuse: Unknown parameter 'user_i00000000000000000000' [ 911.124678][ T9218] usb 2-1: Using ep0 maxpacket: 32 [ 911.691687][ T9218] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.750065][ T44] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 911.766917][ T44] usb 5-1: config 0 has no interface number 0 [ 911.981270][ T44] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 912.139804][ T9218] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 912.149143][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.159167][ T9218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.167456][ T44] usb 5-1: Product: syz [ 912.171923][ T44] usb 5-1: Manufacturer: syz [ 912.176520][ T44] usb 5-1: SerialNumber: syz [ 912.187867][ T9218] usb 2-1: Product: syz [ 912.192893][ T9218] usb 2-1: Manufacturer: syz [ 912.218249][ T9218] usb 2-1: SerialNumber: syz [ 912.224735][ T44] usb 5-1: config 0 descriptor?? [ 912.266186][ T9218] usb 2-1: config 0 descriptor?? [ 912.280666][ T9218] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 912.728036][T14569] fuse: Unknown parameter 'user_i00000000000000000000' [ 912.825635][T14567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2119'. [ 914.026465][ T44] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 914.049585][ T44] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 914.070546][ T5898] usb 2-1: USB disconnect, device number 43 [ 914.093063][ T44] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 914.103335][ T44] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 914.123232][ T44] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 914.172730][ T44] usb 5-1: USB disconnect, device number 54 [ 914.216874][ T44] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 914.242541][ T44] keyspan 5-1:0.133: device disconnected [ 914.262658][ T30] audit: type=1400 audit(914.234:394): avc: denied { create } for pid=14585 comm="syz.4.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 915.889280][ T30] audit: type=1400 audit(915.044:395): avc: denied { write } for pid=14585 comm="syz.4.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 916.122778][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'. [ 916.168155][T14597] netlink: 'syz.1.2130': attribute type 10 has an invalid length. [ 916.196509][T14597] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 916.561171][ T44] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 916.713097][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 916.724349][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.741750][ T44] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 916.761693][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.796767][ T44] usb 3-1: config 0 descriptor?? [ 917.702345][ T30] audit: type=1400 audit(917.674:396): avc: denied { ioctl } for pid=14614 comm="syz.4.2132" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 918.278874][ T44] isku 0003:1E7D:319C.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 918.605061][T14628] FAULT_INJECTION: forcing a failure. [ 918.605061][T14628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.618222][T14628] CPU: 1 UID: 0 PID: 14628 Comm: syz.0.2134 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.618253][T14628] Tainted: [L]=SOFTLOCKUP [ 918.618260][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 918.618271][T14628] Call Trace: [ 918.618278][T14628] [ 918.618286][T14628] dump_stack_lvl+0x16c/0x1f0 [ 918.618317][T14628] should_fail_ex+0x512/0x640 [ 918.618350][T14628] _copy_from_user+0x2e/0xd0 [ 918.618379][T14628] memdup_user+0x6b/0xe0 [ 918.618399][T14628] strndup_user+0x78/0xe0 [ 918.618419][T14628] __x64_sys_mount+0x136/0x310 [ 918.618438][T14628] ? __pfx___x64_sys_mount+0x10/0x10 [ 918.618456][T14628] ? rcu_is_watching+0x12/0xc0 [ 918.618481][T14628] do_syscall_64+0xcd/0xf80 [ 918.618508][T14628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.618526][T14628] RIP: 0033:0x7f2350f8f749 [ 918.618541][T14628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.618559][T14628] RSP: 002b:00007f234f1b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 918.618578][T14628] RAX: ffffffffffffffda RBX: 00007f23511e6180 RCX: 00007f2350f8f749 [ 918.618590][T14628] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000180 [ 918.618602][T14628] RBP: 00007f234f1b4090 R08: 00002000000001c0 R09: 0000000000000000 [ 918.618613][T14628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.618625][T14628] R13: 00007f23511e6218 R14: 00007f23511e6180 R15: 00007fffece7fe08 [ 918.618650][T14628] [ 918.846322][ T5898] usb 3-1: USB disconnect, device number 54 [ 918.895778][T14623] fido_id[14623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 919.978114][T14648] FAULT_INJECTION: forcing a failure. [ 919.978114][T14648] name failslab, interval 1, probability 0, space 0, times 0 [ 920.094763][T14648] CPU: 1 UID: 0 PID: 14648 Comm: syz.1.2140 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.094798][T14648] Tainted: [L]=SOFTLOCKUP [ 920.094805][T14648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.094816][T14648] Call Trace: [ 920.094823][T14648] [ 920.094831][T14648] dump_stack_lvl+0x16c/0x1f0 [ 920.094865][T14648] should_fail_ex+0x512/0x640 [ 920.094901][T14648] ? __kvmalloc_node_noprof+0x129/0xa40 [ 920.094927][T14648] should_failslab+0xc2/0x120 [ 920.094954][T14648] __kvmalloc_node_noprof+0x14a/0xa40 [ 920.094980][T14648] ? io_alloc_cache_init+0x38/0x170 [ 920.095012][T14648] ? io_alloc_cache_init+0x38/0x170 [ 920.095035][T14648] ? __init_waitqueue_head+0xca/0x150 [ 920.095063][T14648] io_alloc_cache_init+0x38/0x170 [ 920.095091][T14648] io_uring_setup+0x592/0x2010 [ 920.095114][T14648] ? __pfx_io_uring_setup+0x10/0x10 [ 920.095135][T14648] ? avc_has_perm_noaudit+0x117/0x3b0 [ 920.095182][T14648] __x64_sys_io_uring_setup+0xc2/0x170 [ 920.095205][T14648] do_syscall_64+0xcd/0xf80 [ 920.095233][T14648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.095252][T14648] RIP: 0033:0x7faab9d8f749 [ 920.095269][T14648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.095287][T14648] RSP: 002b:00007faababdefc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 920.095306][T14648] RAX: ffffffffffffffda RBX: 00007faab9fe5fa0 RCX: 00007faab9d8f749 [ 920.095318][T14648] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000010f [ 920.095330][T14648] RBP: 00002000000000c0 R08: 0000000000000000 R09: 0000000000000000 [ 920.095342][T14648] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 920.095354][T14648] R13: 0000000000000000 R14: 000000000000010f R15: 0000000000000000 [ 920.095380][T14648] [ 920.375927][T14650] Set syz0 is full, maxelem 0 reached [ 920.491329][ T30] audit: type=1400 audit(920.324:397): avc: denied { listen } for pid=14649 comm="syz.0.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 920.588400][ T30] audit: type=1400 audit(920.334:398): avc: denied { ioctl } for pid=14649 comm="syz.0.2142" path="socket:[56000]" dev="sockfs" ino=56000 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 921.981246][ T44] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 922.241472][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 922.309507][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.402223][ T44] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 922.438365][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.468164][ T44] usb 4-1: Product: syz [ 922.495647][ T44] usb 4-1: Manufacturer: syz [ 922.500299][ T44] usb 4-1: SerialNumber: syz [ 922.556697][ T44] usb 4-1: config 0 descriptor?? [ 922.586149][ T44] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 923.236855][T14678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2148'. [ 923.583908][ T9218] usb 4-1: USB disconnect, device number 40 [ 923.626165][T14685] FAULT_INJECTION: forcing a failure. [ 923.626165][T14685] name failslab, interval 1, probability 0, space 0, times 0 [ 923.712940][T14685] CPU: 0 UID: 0 PID: 14685 Comm: syz.1.2151 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.712963][T14685] Tainted: [L]=SOFTLOCKUP [ 923.712967][T14685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 923.712974][T14685] Call Trace: [ 923.712978][T14685] [ 923.712986][T14685] dump_stack_lvl+0x16c/0x1f0 [ 923.713007][T14685] should_fail_ex+0x512/0x640 [ 923.713024][T14685] ? fs_reclaim_acquire+0xae/0x150 [ 923.713043][T14685] should_failslab+0xc2/0x120 [ 923.713061][T14685] __kmalloc_noprof+0xeb/0x910 [ 923.713084][T14685] ? tomoyo_encode2+0x100/0x3e0 [ 923.713102][T14685] ? tomoyo_encode2+0x100/0x3e0 [ 923.713117][T14685] tomoyo_encode2+0x100/0x3e0 [ 923.713134][T14685] tomoyo_encode+0x29/0x50 [ 923.713149][T14685] tomoyo_realpath_from_path+0x18f/0x6e0 [ 923.713167][T14685] ? tomoyo_profile+0x47/0x60 [ 923.713186][T14685] tomoyo_path_number_perm+0x245/0x580 [ 923.713199][T14685] ? tomoyo_path_number_perm+0x237/0x580 [ 923.713214][T14685] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 923.713228][T14685] ? find_held_lock+0x2b/0x80 [ 923.713258][T14685] ? find_held_lock+0x2b/0x80 [ 923.713274][T14685] ? hook_file_ioctl_common+0x144/0x410 [ 923.713296][T14685] ? __fget_files+0x20e/0x3c0 [ 923.713314][T14685] security_file_ioctl+0x9b/0x240 [ 923.713331][T14685] __x64_sys_ioctl+0xb7/0x210 [ 923.713345][T14685] do_syscall_64+0xcd/0xf80 [ 923.713362][T14685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.713373][T14685] RIP: 0033:0x7faab9d8f749 [ 923.713384][T14685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.713395][T14685] RSP: 002b:00007faababdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.713406][T14685] RAX: ffffffffffffffda RBX: 00007faab9fe5fa0 RCX: 00007faab9d8f749 [ 923.713413][T14685] RDX: 0000200000000180 RSI: 00000000400caed0 RDI: 0000000000000004 [ 923.713420][T14685] RBP: 00007faababdf090 R08: 0000000000000000 R09: 0000000000000000 [ 923.713427][T14685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.713433][T14685] R13: 00007faab9fe6038 R14: 00007faab9fe5fa0 R15: 00007ffd6706f328 [ 923.713447][T14685] [ 923.717849][T14685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 923.951270][ T9218] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 924.112492][ T9218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.124005][ T9218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.164486][ T9218] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 924.195791][ T9218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.223578][ T9218] usb 3-1: config 0 descriptor?? [ 924.838357][ T9218] steelseries 0003:1038:1410.0006: item fetching failed at offset 5/7 [ 924.912626][ T9218] steelseries 0003:1038:1410.0006: parse failed [ 924.984109][ T9218] steelseries 0003:1038:1410.0006: probe with driver steelseries failed with error -22 [ 925.237191][T14688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2153'. [ 925.327518][ T44] usb 3-1: USB disconnect, device number 55 [ 927.139631][T14732] FAULT_INJECTION: forcing a failure. [ 927.139631][T14732] name failslab, interval 1, probability 0, space 0, times 0 [ 927.179977][T14732] CPU: 0 UID: 0 PID: 14732 Comm: syz.2.2165 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.180002][T14732] Tainted: [L]=SOFTLOCKUP [ 927.180006][T14732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 927.180013][T14732] Call Trace: [ 927.180017][T14732] [ 927.180023][T14732] dump_stack_lvl+0x16c/0x1f0 [ 927.180043][T14732] should_fail_ex+0x512/0x640 [ 927.180066][T14732] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 927.180080][T14732] should_failslab+0xc2/0x120 [ 927.180096][T14732] kmem_cache_alloc_node_noprof+0x86/0x800 [ 927.180108][T14732] ? __alloc_skb+0x156/0x410 [ 927.180122][T14732] ? __alloc_skb+0x156/0x410 [ 927.180130][T14732] __alloc_skb+0x156/0x410 [ 927.180139][T14732] ? __alloc_skb+0x35d/0x410 [ 927.180148][T14732] ? __pfx___alloc_skb+0x10/0x10 [ 927.180166][T14732] ? netlink_autobind.isra.0+0x158/0x370 [ 927.180184][T14732] netlink_alloc_large_skb+0x69/0x140 [ 927.180200][T14732] netlink_sendmsg+0x698/0xdd0 [ 927.180216][T14732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.180235][T14732] ____sys_sendmsg+0xa5d/0xc30 [ 927.180251][T14732] ? copy_msghdr_from_user+0x10a/0x160 [ 927.180264][T14732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 927.180295][T14732] ___sys_sendmsg+0x134/0x1d0 [ 927.180314][T14732] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.180356][T14732] __sys_sendmsg+0x16d/0x220 [ 927.180369][T14732] ? __pfx___sys_sendmsg+0x10/0x10 [ 927.180389][T14732] do_syscall_64+0xcd/0xf80 [ 927.180406][T14732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.180417][T14732] RIP: 0033:0x7f2808b8f749 [ 927.180427][T14732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.180438][T14732] RSP: 002b:00007f2809ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.180449][T14732] RAX: ffffffffffffffda RBX: 00007f2808de5fa0 RCX: 00007f2808b8f749 [ 927.180456][T14732] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 927.180463][T14732] RBP: 00007f2809ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 927.180470][T14732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.180476][T14732] R13: 00007f2808de6038 R14: 00007f2808de5fa0 R15: 00007ffcfdabe3a8 [ 927.180490][T14732] [ 927.511563][ T30] audit: type=1400 audit(927.464:399): avc: denied { nlmsg_read } for pid=14733 comm="syz.2.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 927.633396][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'. [ 927.675838][T14739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.831134][ T9218] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 927.861126][ T44] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 927.982687][ T9218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 927.993818][ T9218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.011610][ T9218] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 928.021248][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 928.027320][ T9218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.039771][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.061767][ T9218] usb 3-1: config 0 descriptor?? [ 928.068893][ T44] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 928.082393][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.090490][ T44] usb 5-1: Product: syz [ 928.096527][ T44] usb 5-1: Manufacturer: syz [ 928.101362][ T44] usb 5-1: SerialNumber: syz [ 928.129831][ T44] usb 5-1: config 0 descriptor?? [ 928.138023][ T44] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 929.168551][ T9218] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 929.257519][ T9218] isku 0003:1E7D:319C.0007: couldn't init struct isku_device [ 929.283006][ T9218] isku 0003:1E7D:319C.0007: couldn't install keyboard [ 929.299881][T14756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2168'. [ 929.546975][ T9218] isku 0003:1E7D:319C.0007: probe with driver isku failed with error -71 [ 929.611482][ T9218] usb 3-1: USB disconnect, device number 56 [ 929.655514][ T10] usb 5-1: USB disconnect, device number 55 [ 929.763057][T14758] fido_id[14758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 931.162063][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.168396][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.251214][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 931.472753][ T30] audit: type=1400 audit(931.424:400): avc: denied { shutdown } for pid=14786 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 931.808481][ T5898] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 931.816129][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 931.824932][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.844342][ T10] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 931.873220][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.889704][ T10] usb 5-1: Product: syz [ 931.903145][ T10] usb 5-1: Manufacturer: syz [ 931.908414][ T10] usb 5-1: SerialNumber: syz [ 931.932737][ T10] usb 5-1: config 0 descriptor?? [ 931.955368][ T10] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 932.003038][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 932.012420][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 932.012461][ T5898] usb 3-1: can't read configurations, error -61 [ 932.141279][ T5898] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 932.344933][T14798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2179'. [ 932.548730][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 932.576127][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 932.585580][ T5898] usb 3-1: can't read configurations, error -61 [ 932.605825][ T5898] usb usb3-port1: attempt power cycle [ 932.646162][ T9218] usb 5-1: USB disconnect, device number 56 [ 932.971809][ T5898] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 933.093491][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 933.103501][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 933.111929][ T5898] usb 3-1: can't read configurations, error -61 [ 933.133011][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 933.251228][ T5898] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 933.291313][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 933.297578][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 933.309267][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 933.320257][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.334201][ T5898] usb 3-1: can't read configurations, error -61 [ 933.342278][ T5898] usb usb3-port1: unable to enumerate USB device [ 933.349366][ T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 933.367010][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.377019][ T10] usb 4-1: Product: syz [ 933.383189][ T10] usb 4-1: Manufacturer: syz [ 933.389134][ T10] usb 4-1: SerialNumber: syz [ 933.400737][ T10] usb 4-1: config 0 descriptor?? [ 933.412704][ T10] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 933.569191][ T30] audit: type=1400 audit(933.534:401): avc: denied { write } for pid=14807 comm="syz.1.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 933.823021][T14820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2184'. [ 934.019280][ T5898] usb 4-1: USB disconnect, device number 41 [ 934.678436][T14833] comedi comedi3: pcmmio: I/O port conflict (0xcf7,32) [ 935.193912][ T30] audit: type=1400 audit(935.164:402): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 935.382562][ T10] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 936.258976][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 936.281560][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.322998][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 936.345671][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.392831][ T10] usb 3-1: config 0 descriptor?? [ 936.471173][ T9218] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 936.642919][ T9218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.654060][ T9218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.672070][ T9218] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 936.706896][ T9218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.754536][ T9218] usb 1-1: config 0 descriptor?? [ 936.840045][ T10] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 937.036133][ T10] isku 0003:1E7D:319C.0008: couldn't init struct isku_device [ 937.056090][ T10] isku 0003:1E7D:319C.0008: couldn't install keyboard [ 937.099130][ T10] isku 0003:1E7D:319C.0008: probe with driver isku failed with error -71 [ 937.135388][ T10] usb 3-1: USB disconnect, device number 61 [ 937.245717][ T9218] steelseries 0003:1038:1410.0009: item fetching failed at offset 5/7 [ 937.273414][ T9218] steelseries 0003:1038:1410.0009: parse failed [ 937.316460][ T9218] steelseries 0003:1038:1410.0009: probe with driver steelseries failed with error -22 [ 937.831299][T14874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2197'. [ 937.978379][T14854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.353718][T14881] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2204'. [ 938.545542][T10882] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.554534][T10882] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.581422][ T44] usb 1-1: USB disconnect, device number 59 [ 938.612648][T10882] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.641569][ T3523] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.652225][ T9218] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 938.817993][ T5882] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 938.843862][ T9218] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 938.858561][ T9218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.889345][ T9218] usb 3-1: config 0 descriptor?? [ 938.911701][ T9218] usb 3-1: selecting invalid altsetting 3 [ 938.948556][ T9218] comedi comedi4: could not set alternate setting 3 in high speed [ 938.967650][ T9218] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 938.976849][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 938.992415][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.004858][ T9218] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 939.151711][ T5882] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 939.721440][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.729596][ T5882] usb 4-1: Product: syz [ 939.735100][ T5882] usb 4-1: Manufacturer: syz [ 939.740015][ T5882] usb 4-1: SerialNumber: syz [ 939.747376][ T5882] usb 4-1: config 0 descriptor?? [ 939.754820][ T5882] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 939.992153][ T5898] usb 3-1: USB disconnect, device number 62 [ 940.660897][T14904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2206'. [ 941.004556][ T5882] usb 4-1: USB disconnect, device number 42 [ 941.161094][ T30] audit: type=1400 audit(941.124:403): avc: denied { shutdown } for pid=14913 comm="syz.0.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 942.355968][ T5882] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 943.182554][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 943.213409][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.338309][ T5882] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 943.896693][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.933167][ T5882] usb 1-1: config 0 descriptor?? [ 944.260167][T14956] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2223'. [ 944.951668][ T5882] isku 0003:1E7D:319C.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 944.997039][ T5882] isku 0003:1E7D:319C.000A: couldn't init struct isku_device [ 945.203332][ T5882] isku 0003:1E7D:319C.000A: couldn't install keyboard [ 945.216640][T14965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14965 comm=syz.2.2226 [ 945.223907][ T5882] isku 0003:1E7D:319C.000A: probe with driver isku failed with error -71 [ 945.854863][ T30] audit: type=1400 audit(945.824:404): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 946.166752][ T5882] usb 1-1: USB disconnect, device number 60 [ 946.708886][ T9218] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 946.831571][T14975] netlink: 'syz.0.2230': attribute type 10 has an invalid length. [ 946.891716][ T9218] usb 5-1: Invalid ep0 maxpacket: 64 [ 947.021322][ T9218] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 947.191423][ T9218] usb 5-1: Invalid ep0 maxpacket: 64 [ 947.197047][ T9218] usb usb5-port1: attempt power cycle [ 947.381177][ T5800] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 947.551170][ T5898] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 947.551200][ T9218] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 947.627526][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 947.639447][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.649511][ T5800] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 947.659403][ T9218] usb 5-1: Invalid ep0 maxpacket: 64 [ 947.666247][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.675714][ T5800] usb 4-1: config 0 descriptor?? [ 947.791302][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 947.791388][ T9218] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 947.805511][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.836128][ T9218] usb 5-1: Invalid ep0 maxpacket: 64 [ 947.842968][ T9218] usb usb5-port1: unable to enumerate USB device [ 947.843385][ T5898] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 947.849797][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.849825][ T5898] usb 3-1: Product: syz [ 947.849841][ T5898] usb 3-1: Manufacturer: syz [ 947.931145][ T5898] usb 3-1: SerialNumber: syz [ 947.950068][ T5898] usb 3-1: config 0 descriptor?? [ 947.982556][ T5898] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 948.133326][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 948.140617][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 948.148516][ T5800] usbhid 4-1:0.0: can't add hid device: -71 [ 948.154601][ T5800] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 948.172985][ T5800] usb 4-1: USB disconnect, device number 43 [ 948.260699][T14993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2228'. [ 948.439250][T10002] usb 3-1: USB disconnect, device number 63 [ 949.350014][T15006] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2236'. [ 952.156035][T15046] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2248'. [ 953.173072][T15054] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 953.216745][T15054] Error validating options; rc = [-22] [ 953.376855][ T5800] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 953.530672][T15071] program syz.0.2255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 953.540108][ T5800] usb 3-1: Using ep0 maxpacket: 32 [ 953.546891][ T5800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.383112][ T5800] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 954.411814][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.490625][ T5800] usb 3-1: Product: syz [ 954.500722][ T5800] usb 3-1: Manufacturer: syz [ 954.505450][ T9218] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 954.577646][ T5800] usb 3-1: SerialNumber: syz [ 954.598867][ T5800] usb 3-1: config 0 descriptor?? [ 954.612235][ T5800] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 954.737340][ T5882] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 955.096391][ T9218] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 955.109848][ T9218] usb 4-1: config 0 has no interface number 0 [ 955.136201][ T9218] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 955.145817][ T9218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.168248][ T9218] usb 4-1: Product: syz [ 955.213531][ T9218] usb 4-1: Manufacturer: syz [ 955.237127][T15081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2250'. [ 955.264839][ T9218] usb 4-1: SerialNumber: syz [ 955.506332][ T5882] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 955.531180][ T5882] usb 5-1: config 0 has no interface number 0 [ 955.538463][ T9218] usb 4-1: config 0 descriptor?? [ 955.568529][ T5800] usb 3-1: USB disconnect, device number 64 [ 955.586187][ T5882] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 955.595969][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.615290][ T5882] usb 5-1: Product: syz [ 955.619599][ T5882] usb 5-1: Manufacturer: syz [ 955.625358][ T5882] usb 5-1: SerialNumber: syz [ 955.664551][ T5882] usb 5-1: config 0 descriptor?? [ 955.679667][T15085] netlink: 'syz.0.2257': attribute type 10 has an invalid length. [ 958.187122][ T9218] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 958.471235][ T5882] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 958.480214][ T5882] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 958.655980][ T9218] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 958.664223][ T5882] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 958.672084][ T9218] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 958.679896][ T9218] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 958.681824][ T5882] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 958.683133][ T5882] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 958.685880][ T5882] usb 5-1: USB disconnect, device number 61 [ 958.702970][ T9218] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 958.740503][ T5882] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 958.741253][ T5882] keyspan 5-1:0.133: device disconnected [ 958.773432][ T9218] usb 4-1: USB disconnect, device number 44 [ 958.788805][ T9218] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 958.800247][ T9218] keyspan 4-1:0.133: device disconnected [ 958.905661][T15109] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 958.949509][T15109] Error validating options; rc = [-22] [ 959.071122][ T5898] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 959.238347][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 959.262103][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.366074][ T5898] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 959.424357][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.544064][ T5898] usb 2-1: config 0 descriptor?? [ 960.060770][T15130] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 960.356119][T15124] syz.4.2267 (15124): drop_caches: 2 [ 960.509116][ T5898] isku 0003:1E7D:319C.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 960.841244][ T30] audit: type=1400 audit(960.734:405): avc: denied { watch watch_reads } for pid=15132 comm="syz.2.2270" path="/443" dev="tmpfs" ino=2350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 961.080900][T15142] netlink: 'syz.4.2272': attribute type 21 has an invalid length. [ 961.108989][T15142] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2272'. [ 961.137074][T15142] netlink: 'syz.4.2272': attribute type 4 has an invalid length. [ 961.166054][T15142] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2272'. [ 962.251305][ T5898] usb 2-1: USB disconnect, device number 44 [ 962.435661][T15150] erofs (device nbd0): cannot find valid erofs superblock [ 962.490696][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 963.071160][ T5882] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 963.135881][T12475] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 963.492522][ T5882] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 963.517793][ T5882] usb 3-1: config 0 has no interface number 0 [ 964.008948][ T5882] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 964.053351][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.092724][ T5882] usb 3-1: Product: syz [ 964.106330][ T5882] usb 3-1: Manufacturer: syz [ 965.059928][ T5882] usb 3-1: SerialNumber: syz [ 965.149224][ T5882] usb 3-1: config 0 descriptor?? [ 966.835770][T15192] binder: 15185:15192 ioctl c018620c 0 returned -14 [ 967.001187][ T5898] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 967.118998][ T5882] usb 3-1: can't set config #0, error -71 [ 967.126091][ T5882] usb 3-1: USB disconnect, device number 65 [ 967.163038][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 967.193984][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.218273][ T5898] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 967.241923][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.269051][ T5898] usb 2-1: config 0 descriptor?? [ 967.301185][T10002] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 967.493935][T10002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.514610][T10002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.537612][T10002] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 967.681159][T10002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.690811][ T5898] usbhid 2-1:0.0: can't add hid device: -71 [ 967.711257][ T5898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 967.798966][ T5898] usb 2-1: USB disconnect, device number 45 [ 967.806334][T10002] usb 1-1: config 0 descriptor?? [ 968.270113][T10002] steelseries 0003:1038:1410.000C: item fetching failed at offset 5/7 [ 968.294767][T10002] steelseries 0003:1038:1410.000C: parse failed [ 968.333072][ T5898] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 968.344884][T10002] steelseries 0003:1038:1410.000C: probe with driver steelseries failed with error -22 [ 968.470118][T15197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2283'. [ 968.501225][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 968.507917][T10002] usb 1-1: USB disconnect, device number 61 [ 968.528742][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.654522][ T5898] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 968.676719][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.693332][ T5898] usb 5-1: Product: syz [ 969.221109][ T30] audit: type=1400 audit(968.724:406): avc: denied { remount } for pid=15206 comm="syz.3.2287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 969.242095][ T5898] usb 5-1: Manufacturer: syz [ 969.246707][ T5898] usb 5-1: SerialNumber: syz [ 969.253168][ T5898] usb 5-1: config 0 descriptor?? [ 969.264063][ T5898] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 969.657755][T15213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2285'. [ 969.912963][ T5882] usb 5-1: USB disconnect, device number 62 [ 972.411132][ T5898] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 973.361503][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 973.451591][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.986890][ T5898] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 974.009719][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.034810][ T5898] usb 1-1: Product: syz [ 974.049653][ T5898] usb 1-1: Manufacturer: syz [ 974.064451][ T5898] usb 1-1: SerialNumber: syz [ 974.071212][T10002] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 974.149426][ T5898] usb 1-1: config 0 descriptor?? [ 974.167219][ T5898] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 974.224175][T15235] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 974.233825][T15235] SELinux: failed to load policy [ 974.313298][T10002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.476234][T10002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.542687][T15263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2296'. [ 974.671933][T10002] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 974.691632][ T5800] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 974.691833][T10002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.772942][T10002] usb 2-1: config 0 descriptor?? [ 974.839574][ T5882] usb 1-1: USB disconnect, device number 62 [ 975.805206][T10002] steelseries 0003:1038:1410.000D: item fetching failed at offset 5/7 [ 975.821517][T10002] steelseries 0003:1038:1410.000D: parse failed [ 975.827873][T10002] steelseries 0003:1038:1410.000D: probe with driver steelseries failed with error -22 [ 975.861988][ T5800] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 975.875495][T15255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2299'. [ 975.890989][ T5800] usb 4-1: config 0 has no interface number 0 [ 975.904648][ T5800] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 975.925185][ T5898] usb 2-1: USB disconnect, device number 46 [ 975.948458][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.990887][ T5800] usb 4-1: Product: syz [ 975.995409][ T5800] usb 4-1: Manufacturer: syz [ 976.002328][ T5800] usb 4-1: SerialNumber: syz [ 976.008674][ T5800] usb 4-1: config 0 descriptor?? [ 978.203245][T15301] erofs (device nbd0): cannot find valid erofs superblock [ 978.259215][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'. [ 979.253165][ T5800] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 979.276402][ T5800] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 979.318735][ T5800] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 979.349773][ T5800] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 979.374297][ T5800] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 979.374877][T15315] netlink: 'syz.4.2311': attribute type 10 has an invalid length. [ 979.389337][ T5800] usb 4-1: USB disconnect, device number 45 [ 979.441814][ T5800] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 979.509790][ T5800] keyspan 4-1:0.133: device disconnected [ 979.706296][ T30] audit: type=1326 audit(979.544:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab9d8f749 code=0x7ffc0000 [ 979.962978][ T5800] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 980.232536][ T5898] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 980.241388][ T30] audit: type=1326 audit(979.544:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab9d8f749 code=0x7ffc0000 [ 980.264362][ T30] audit: type=1326 audit(979.544:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7faab9d8f749 code=0x7ffc0000 [ 980.287622][ T30] audit: type=1326 audit(979.544:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab9d8f749 code=0x7ffc0000 [ 980.350062][ T30] audit: type=1326 audit(979.544:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab9d8f749 code=0x7ffc0000 [ 980.473754][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.491156][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.493898][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 980.500968][ T5898] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 980.561401][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.570157][ T30] audit: type=1326 audit(979.544:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7faab9d8f749 code=0x7ffc0000 [ 980.595393][ T5898] usb 1-1: config 0 descriptor?? [ 980.641201][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.701738][ T5800] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 980.732036][ T30] audit: type=1326 audit(979.544:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab9d8f749 code=0x7ffc0000 [ 980.771274][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.787010][T15309] SELinux: ebitmap: truncated map [ 980.795619][T15309] SELinux: failed to load policy [ 980.844002][ T5800] usb 4-1: config 0 descriptor?? [ 980.903607][ T30] audit: type=1326 audit(979.544:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab9d8f749 code=0x7ffc0000 [ 980.991701][ T30] audit: type=1326 audit(979.544:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faab9d8f749 code=0x7ffc0000 [ 981.087256][ T30] audit: type=1326 audit(979.544:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab9d8f749 code=0x7ffc0000 [ 981.169523][ T5898] steelseries 0003:1038:1410.000E: item fetching failed at offset 5/7 [ 981.219587][ T5898] steelseries 0003:1038:1410.000E: parse failed [ 981.351949][ T5898] steelseries 0003:1038:1410.000E: probe with driver steelseries failed with error -22 [ 981.394438][T15324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2315'. [ 981.823068][ T5800] usbhid 4-1:0.0: can't add hid device: -71 [ 981.848698][ T5800] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 981.912908][ T5800] usb 4-1: USB disconnect, device number 46 [ 982.001536][ T5898] usb 1-1: USB disconnect, device number 63 [ 982.705676][T15355] erofs (device nbd1): cannot find valid erofs superblock [ 982.760571][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2323'. [ 984.408114][T15368] netlink: 'syz.0.2325': attribute type 10 has an invalid length. [ 986.809761][T15399] FAULT_INJECTION: forcing a failure. [ 986.809761][T15399] name failslab, interval 1, probability 0, space 0, times 0 [ 986.879268][T15399] CPU: 0 UID: 0 PID: 15399 Comm: syz.1.2332 Tainted: G L syzkaller #0 PREEMPT(full) [ 986.879292][T15399] Tainted: [L]=SOFTLOCKUP [ 986.879296][T15399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 986.879303][T15399] Call Trace: [ 986.879307][T15399] [ 986.879312][T15399] dump_stack_lvl+0x16c/0x1f0 [ 986.879334][T15399] should_fail_ex+0x512/0x640 [ 986.879352][T15399] ? __kmalloc_cache_node_noprof+0x62/0x830 [ 986.879368][T15399] should_failslab+0xc2/0x120 [ 986.879384][T15399] __kmalloc_cache_node_noprof+0x83/0x830 [ 986.879398][T15399] ? __get_vm_area_node+0x101/0x330 [ 986.879415][T15399] ? __pfx___might_resched+0x10/0x10 [ 986.879428][T15399] ? __get_vm_area_node+0x101/0x330 [ 986.879442][T15399] __get_vm_area_node+0x101/0x330 [ 986.879459][T15399] __vmalloc_node_range_noprof+0x247/0x16b0 [ 986.879478][T15399] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 986.879496][T15399] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 986.879511][T15399] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 986.879527][T15399] ? find_held_lock+0x2b/0x80 [ 986.879544][T15399] ? avc_has_perm_noaudit+0x117/0x3b0 [ 986.879558][T15399] ? avc_has_perm_noaudit+0x149/0x3b0 [ 986.879569][T15399] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 986.879580][T15399] __vmalloc_node_noprof+0xad/0xf0 [ 986.879597][T15399] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 986.879610][T15399] __vmalloc_noprof+0xa3/0x120 [ 986.879626][T15399] ? __pfx___vmalloc_noprof+0x10/0x10 [ 986.879644][T15399] ? rcu_is_watching+0x12/0xc0 [ 986.879655][T15399] ? cap_capable+0x10d/0x3f0 [ 986.879668][T15399] bpf_prog_alloc_no_stats+0x58/0x610 [ 986.879679][T15399] ? security_capable+0x7e/0x260 [ 986.879692][T15399] bpf_prog_alloc+0x3b/0x230 [ 986.879703][T15399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 986.879717][T15399] bpf_prog_load+0x19bc/0x2cc0 [ 986.879736][T15399] ? __pfx_bpf_prog_load+0x10/0x10 [ 986.879753][T15399] ? avc_has_perm_noaudit+0x149/0x3b0 [ 986.879765][T15399] ? avc_has_perm+0x144/0x1f0 [ 986.879781][T15399] ? selinux_bpf+0xdd/0x130 [ 986.879790][T15399] ? bpf_lsm_bpf+0x9/0x10 [ 986.879804][T15399] __sys_bpf+0x3e72/0x4980 [ 986.879822][T15399] ? __pfx___sys_bpf+0x10/0x10 [ 986.879837][T15399] ? find_held_lock+0x2b/0x80 [ 986.879856][T15399] ? find_held_lock+0x2b/0x80 [ 986.879875][T15399] ? __mutex_unlock_slowpath+0x161/0x790 [ 986.879900][T15399] ? fput+0x70/0xf0 [ 986.879909][T15399] ? ksys_write+0x1ac/0x250 [ 986.879923][T15399] ? __pfx_ksys_write+0x10/0x10 [ 986.879939][T15399] __x64_sys_bpf+0x78/0xc0 [ 986.879955][T15399] ? lockdep_hardirqs_on+0x7c/0x110 [ 986.879970][T15399] do_syscall_64+0xcd/0xf80 [ 986.879986][T15399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.879998][T15399] RIP: 0033:0x7faab9d8f749 [ 986.880007][T15399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.880019][T15399] RSP: 002b:00007faababdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 986.880030][T15399] RAX: ffffffffffffffda RBX: 00007faab9fe5fa0 RCX: 00007faab9d8f749 [ 986.880037][T15399] RDX: 0000000000000019 RSI: 000020000000e000 RDI: 0000000000000005 [ 986.880044][T15399] RBP: 00007faababdf090 R08: 0000000000000000 R09: 0000000000000000 [ 986.880050][T15399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.880057][T15399] R13: 00007faab9fe6038 R14: 00007faab9fe5fa0 R15: 00007ffd6706f328 [ 986.880071][T15399] [ 987.215303][T15399] syz.1.2332: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 987.231629][T15399] CPU: 0 UID: 0 PID: 15399 Comm: syz.1.2332 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.231649][T15399] Tainted: [L]=SOFTLOCKUP [ 987.231653][T15399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 987.231660][T15399] Call Trace: [ 987.231664][T15399] [ 987.231669][T15399] dump_stack_lvl+0x16c/0x1f0 [ 987.231688][T15399] warn_alloc+0x248/0x3a0 [ 987.231701][T15399] ? __pfx_warn_alloc+0x10/0x10 [ 987.231711][T15399] ? trace_kmalloc+0x2b/0xb0 [ 987.231725][T15399] ? __kmalloc_cache_node_noprof+0x2ed/0x830 [ 987.231742][T15399] ? __kasan_kmalloc+0x8a/0xb0 [ 987.231756][T15399] ? __get_vm_area_node+0x208/0x330 [ 987.231774][T15399] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 987.231794][T15399] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 987.231811][T15399] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 987.231827][T15399] ? find_held_lock+0x2b/0x80 [ 987.231845][T15399] ? avc_has_perm_noaudit+0x117/0x3b0 [ 987.231859][T15399] ? avc_has_perm_noaudit+0x149/0x3b0 [ 987.231870][T15399] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 987.231881][T15399] __vmalloc_node_noprof+0xad/0xf0 [ 987.231897][T15399] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 987.231911][T15399] __vmalloc_noprof+0xa3/0x120 [ 987.231926][T15399] ? __pfx___vmalloc_noprof+0x10/0x10 [ 987.231943][T15399] ? rcu_is_watching+0x12/0xc0 [ 987.231954][T15399] ? cap_capable+0x10d/0x3f0 [ 987.231967][T15399] bpf_prog_alloc_no_stats+0x58/0x610 [ 987.231979][T15399] ? security_capable+0x7e/0x260 [ 987.231992][T15399] bpf_prog_alloc+0x3b/0x230 [ 987.232002][T15399] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 987.232017][T15399] bpf_prog_load+0x19bc/0x2cc0 [ 987.232036][T15399] ? __pfx_bpf_prog_load+0x10/0x10 [ 987.232052][T15399] ? avc_has_perm_noaudit+0x149/0x3b0 [ 987.232064][T15399] ? avc_has_perm+0x144/0x1f0 [ 987.232080][T15399] ? selinux_bpf+0xdd/0x130 [ 987.232090][T15399] ? bpf_lsm_bpf+0x9/0x10 [ 987.232104][T15399] __sys_bpf+0x3e72/0x4980 [ 987.232121][T15399] ? __pfx___sys_bpf+0x10/0x10 [ 987.232137][T15399] ? find_held_lock+0x2b/0x80 [ 987.232156][T15399] ? find_held_lock+0x2b/0x80 [ 987.232175][T15399] ? __mutex_unlock_slowpath+0x161/0x790 [ 987.232199][T15399] ? fput+0x70/0xf0 [ 987.232209][T15399] ? ksys_write+0x1ac/0x250 [ 987.232228][T15399] ? __pfx_ksys_write+0x10/0x10 [ 987.232244][T15399] __x64_sys_bpf+0x78/0xc0 [ 987.232260][T15399] ? lockdep_hardirqs_on+0x7c/0x110 [ 987.232275][T15399] do_syscall_64+0xcd/0xf80 [ 987.232290][T15399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.232302][T15399] RIP: 0033:0x7faab9d8f749 [ 987.232312][T15399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.232323][T15399] RSP: 002b:00007faababdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 987.232334][T15399] RAX: ffffffffffffffda RBX: 00007faab9fe5fa0 RCX: 00007faab9d8f749 [ 987.232341][T15399] RDX: 0000000000000019 RSI: 000020000000e000 RDI: 0000000000000005 [ 987.232347][T15399] RBP: 00007faababdf090 R08: 0000000000000000 R09: 0000000000000000 [ 987.232353][T15399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.232360][T15399] R13: 00007faab9fe6038 R14: 00007faab9fe5fa0 R15: 00007ffd6706f328 [ 987.232373][T15399] [ 987.232378][T15399] Mem-Info: [ 987.553073][T15399] active_anon:36806 inactive_anon:0 isolated_anon:0 [ 987.553073][T15399] active_file:24354 inactive_file:40979 isolated_file:0 [ 987.553073][T15399] unevictable:774 dirty:288 writeback:0 [ 987.553073][T15399] slab_reclaimable:11802 slab_unreclaimable:102807 [ 987.553073][T15399] mapped:49331 shmem:29461 pagetables:1365 [ 987.553073][T15399] sec_pagetables:3 bounce:0 [ 987.553073][T15399] kernel_misc_reclaimable:0 [ 987.553073][T15399] free:1259459 free_pcp:11507 free_cma:0 [ 987.598882][T15399] Node 0 active_anon:147224kB inactive_anon:0kB active_file:97416kB inactive_file:163712kB unevictable:1560kB isolated(anon):0kB isolated(file):0kB mapped:197324kB dirty:1148kB writeback:0kB shmem:116308kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12640kB pagetables:5308kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 987.631802][T15399] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 987.672089][T15399] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 987.714569][T15399] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 987.744142][T15399] Node 0 DMA32 free:1124652kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:148588kB inactive_anon:0kB active_file:97416kB inactive_file:163712kB unevictable:1560kB writepending:1008kB zspages:0kB present:3129332kB managed:2540832kB mlocked:0kB bounce:0kB free_pcp:32888kB local_pcp:10644kB free_cma:0kB [ 987.815080][T15399] lowmem_reserve[]: 0 0 1 1 1 [ 987.825189][T15399] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 987.895463][T15399] lowmem_reserve[]: 0 0 0 0 0 [ 987.901216][T15399] Node 1 Normal free:3898016kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11040kB local_pcp:8928kB free_cma:0kB [ 988.007373][T15399] lowmem_reserve[]: 0 0 0 0 0 [ 988.017485][T15399] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 988.047965][T15399] Node 0 DMA32: 1751*4kB (UME) 2035*8kB (UME) 1841*16kB (UME) 155*32kB (UME) 176*64kB (UME) 122*128kB (UME) 48*256kB (M) 108*512kB (UME) 77*1024kB (UM) 25*2048kB (UM) 206*4096kB (M) = 1125988kB [ 988.091219][ T5800] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 988.108799][T15399] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 988.161215][T15399] Node 1 Normal: 236*4kB (UE) 62*8kB (UME) 46*16kB (UME) 225*32kB (UME) 86*64kB (UME) 13*128kB (UME) 4*256kB (UME) 7*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3898016kB [ 988.211983][T15399] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 988.232031][T15399] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 988.281158][T15399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 988.282588][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 988.303165][T15399] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 988.321232][T15399] 82141 total pagecache pages [ 988.344793][T15399] 0 pages in swap cache [ 988.446879][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.469333][T15399] Free swap = 124996kB [ 988.482571][ T5800] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 988.483466][T15399] Total swap = 124996kB [ 988.606440][T15413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2334'. [ 988.615563][T15413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2334'. [ 988.995044][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.151105][ T5800] usb 4-1: config 0 descriptor?? [ 989.200915][T15399] 2097051 pages RAM [ 989.205291][T15399] 0 pages HighMem/MovableOnly [ 989.221314][T15399] 429817 pages reserved [ 989.225640][T15399] 0 pages cma reserved [ 990.261125][ T5800] isku 0003:1E7D:319C.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 990.533032][T10002] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 991.078137][ T5800] usb 4-1: USB disconnect, device number 47 [ 991.133306][T10002] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 991.195092][T10002] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.296881][T10002] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 991.328845][T10002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.461330][T10002] usb 5-1: config 0 descriptor?? [ 992.107361][T15447] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 992.130144][T15447] Error validating options; rc = [-22] [ 992.271612][T10002] usbhid 5-1:0.0: can't add hid device: -71 [ 992.287257][T10002] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 992.327900][T10002] usb 5-1: USB disconnect, device number 63 [ 992.365712][T15452] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 992.381286][T15452] Error validating options; rc = [-22] [ 994.027973][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.034465][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.352760][T15460] SELinux: ebitmap: truncated map [ 994.361286][T15460] SELinux: failed to load policy [ 994.434548][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 994.434561][ T30] audit: type=1400 audit(994.404:434): avc: denied { write } for pid=15463 comm="syz.2.2347" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 997.970599][T10002] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 998.061594][T15519] syz.2.2358 uses obsolete (PF_INET,SOCK_PACKET) [ 998.105906][T15519] FAULT_INJECTION: forcing a failure. [ 998.105906][T15519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.119047][T15519] CPU: 1 UID: 0 PID: 15519 Comm: syz.2.2358 Tainted: G L syzkaller #0 PREEMPT(full) [ 998.119080][T15519] Tainted: [L]=SOFTLOCKUP [ 998.119086][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 998.119097][T15519] Call Trace: [ 998.119103][T15519] [ 998.119109][T15519] dump_stack_lvl+0x16c/0x1f0 [ 998.119138][T15519] should_fail_ex+0x512/0x640 [ 998.119168][T15519] _copy_to_user+0x32/0xd0 [ 998.119197][T15519] simple_read_from_buffer+0xcb/0x170 [ 998.119222][T15519] proc_fail_nth_read+0x197/0x240 [ 998.119241][T15519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.119260][T15519] ? rw_verify_area+0xcf/0x6c0 [ 998.119280][T15519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.119297][T15519] vfs_read+0x1e4/0xcf0 [ 998.119324][T15519] ? __pfx_vfs_read+0x10/0x10 [ 998.119344][T15519] ? do_sys_openat2+0x196/0x290 [ 998.119360][T15519] ? __pfx_do_sys_openat2+0x10/0x10 [ 998.119377][T15519] ? __do_sys_add_key+0x331/0x470 [ 998.119405][T15519] ksys_read+0x12a/0x250 [ 998.119425][T15519] ? __pfx_ksys_read+0x10/0x10 [ 998.119444][T15519] ? fdget+0x187/0x210 [ 998.119469][T15519] do_syscall_64+0xcd/0xf80 [ 998.119493][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.119511][T15519] RIP: 0033:0x7f2808b8e15c [ 998.119528][T15519] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 998.119546][T15519] RSP: 002b:00007f2809a75030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 998.119563][T15519] RAX: ffffffffffffffda RBX: 00007f2808de6180 RCX: 00007f2808b8e15c [ 998.119575][T15519] RDX: 000000000000000f RSI: 00007f2809a750a0 RDI: 000000000000000f [ 998.119586][T15519] RBP: 00007f2809a75090 R08: 0000000000000000 R09: 0000000000000000 [ 998.119597][T15519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.119608][T15519] R13: 00007f2808de6218 R14: 00007f2808de6180 R15: 00007ffcfdabe3a8 [ 998.119632][T15519] [ 998.565385][T10002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 998.585627][T10002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.659895][T15529] SELinux: ebitmap: truncated map [ 998.671108][T10002] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 998.724031][T10002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.751839][T10002] usb 1-1: config 0 descriptor?? [ 998.755829][T15529] SELinux: failed to load policy [ 1000.807716][T10002] usbhid 1-1:0.0: can't add hid device: -71 [ 1000.855691][T10002] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1000.940246][T10002] usb 1-1: USB disconnect, device number 64 [ 1001.211186][ T9218] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1001.432253][ T9218] usb 5-1: Using ep0 maxpacket: 32 [ 1001.461602][ T9218] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.522983][ T9218] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1001.551604][ T9218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.559638][ T9218] usb 5-1: Product: syz [ 1001.616526][ T9218] usb 5-1: Manufacturer: syz [ 1001.645333][ T9218] usb 5-1: SerialNumber: syz [ 1001.665892][ T9218] usb 5-1: config 0 descriptor?? [ 1001.692501][ T9218] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1002.208174][T15564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2366'. [ 1003.554042][T10002] usb 5-1: USB disconnect, device number 64 [ 1003.781114][ T9218] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1004.502749][ T9218] usb 3-1: config 0 has no interfaces? [ 1004.533755][ T9218] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1004.631320][ T9218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.666592][ T9218] usb 3-1: Product: syz [ 1004.677532][ T9218] usb 3-1: Manufacturer: syz [ 1004.706735][ T9218] usb 3-1: SerialNumber: syz [ 1004.737707][ T9218] usb 3-1: config 0 descriptor?? [ 1004.909411][T15600] netlink: 'syz.0.2374': attribute type 10 has an invalid length. [ 1005.095409][ T5898] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1005.134155][T15581] netlink: 'syz.2.2372': attribute type 17 has an invalid length. [ 1005.159970][T15581] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1005.217146][T15581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=15581 comm=syz.2.2372 [ 1005.263618][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1005.276041][T10002] usb 3-1: USB disconnect, device number 66 [ 1005.289066][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.301675][ T5898] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1005.315763][T15605] FAULT_INJECTION: forcing a failure. [ 1005.315763][T15605] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.334374][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.344812][T15605] CPU: 0 UID: 0 PID: 15605 Comm: syz.1.2377 Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.344840][T15605] Tainted: [L]=SOFTLOCKUP [ 1005.344846][T15605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1005.344856][T15605] Call Trace: [ 1005.344863][T15605] [ 1005.344870][T15605] dump_stack_lvl+0x16c/0x1f0 [ 1005.344900][T15605] should_fail_ex+0x512/0x640 [ 1005.344928][T15605] ? fs_reclaim_acquire+0xae/0x150 [ 1005.344957][T15605] should_failslab+0xc2/0x120 [ 1005.344983][T15605] __kmalloc_noprof+0xeb/0x910 [ 1005.345012][T15605] ? tomoyo_encode2+0x100/0x3e0 [ 1005.345041][T15605] ? tomoyo_encode2+0x100/0x3e0 [ 1005.345064][T15605] tomoyo_encode2+0x100/0x3e0 [ 1005.345090][T15605] tomoyo_encode+0x29/0x50 [ 1005.345106][T15605] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1005.345124][T15605] ? tomoyo_profile+0x47/0x60 [ 1005.345143][T15605] tomoyo_path_number_perm+0x245/0x580 [ 1005.345155][T15605] ? tomoyo_path_number_perm+0x237/0x580 [ 1005.345170][T15605] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1005.345184][T15605] ? find_held_lock+0x2b/0x80 [ 1005.345213][T15605] ? find_held_lock+0x2b/0x80 [ 1005.345229][T15605] ? hook_file_ioctl_common+0x144/0x410 [ 1005.345249][T15605] ? __fget_files+0x20e/0x3c0 [ 1005.345268][T15605] security_file_ioctl+0x9b/0x240 [ 1005.345284][T15605] __x64_sys_ioctl+0xb7/0x210 [ 1005.345304][T15605] do_syscall_64+0xcd/0xf80 [ 1005.345320][T15605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.345335][T15605] RIP: 0033:0x7faab9d8f749 [ 1005.345345][T15605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.345357][T15605] RSP: 002b:00007faababdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.345368][T15605] RAX: ffffffffffffffda RBX: 00007faab9fe5fa0 RCX: 00007faab9d8f749 [ 1005.345376][T15605] RDX: 0000200000005fc0 RSI: 000000000000890c RDI: 0000000000000003 [ 1005.345382][T15605] RBP: 00007faababdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.345389][T15605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.345396][T15605] R13: 00007faab9fe6038 R14: 00007faab9fe5fa0 R15: 00007ffd6706f328 [ 1005.345410][T15605] [ 1005.345609][T15605] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1005.593641][ T5898] usb 4-1: config 0 descriptor?? [ 1006.026579][ T5898] isku 0003:1E7D:319C.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1006.219005][ T5898] isku 0003:1E7D:319C.0010: couldn't init struct isku_device [ 1006.259990][ T5898] isku 0003:1E7D:319C.0010: couldn't install keyboard [ 1006.292873][ T5898] isku 0003:1E7D:319C.0010: probe with driver isku failed with error -71 [ 1006.324929][ T5898] usb 4-1: USB disconnect, device number 48 [ 1006.336225][ T9218] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1006.508387][ T9218] usb 3-1: Using ep0 maxpacket: 8 [ 1006.526655][ T9218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.539282][ T9218] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1006.549190][ T9218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.613078][ T9218] usb 3-1: config 0 descriptor?? [ 1006.634236][ T9218] usb 3-1: bad CDC descriptors [ 1006.663628][ T9218] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 1006.682349][ T9218] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 1006.693091][ T9218] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1007.996831][T15638] befs: (nullb0): invalid magic header [ 1008.081199][ T5898] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1008.480484][ T30] audit: type=1400 audit(1008.444:435): avc: denied { write } for pid=15631 comm="syz.1.2383" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1008.508331][T15642] evm: overlay not supported [ 1008.621271][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 1008.628096][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.743640][ T5898] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1008.753186][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.773459][ T9218] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1008.796295][ T5898] usb 5-1: Product: syz [ 1008.800509][ T5898] usb 5-1: Manufacturer: syz [ 1008.802584][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.814304][ T5898] usb 5-1: SerialNumber: syz [ 1008.823339][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.843517][ T5898] usb 5-1: config 0 descriptor?? [ 1008.981608][ T9218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.983048][ T5898] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1009.020619][T15652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2388'. [ 1009.173332][T15650] fuse: Unknown parameter 'rooto耔?mode' [ 1009.194886][ T9218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.206428][ T9218] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1009.224574][T10002] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1009.230818][ T9218] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1009.253569][ T9218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.420376][ T9218] usb 1-1: config 0 descriptor?? [ 1009.491146][T10002] usb 2-1: Using ep0 maxpacket: 32 [ 1009.525517][T15656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2385'. [ 1009.656192][T10002] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.822010][T10002] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1009.844198][T10002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.852435][T10002] usb 2-1: Product: syz [ 1009.859823][T10002] usb 2-1: Manufacturer: syz [ 1009.880729][ T5898] usb 5-1: USB disconnect, device number 65 [ 1009.891265][T10002] usb 2-1: SerialNumber: syz [ 1009.903909][T10002] usb 2-1: config 0 descriptor?? [ 1009.921912][T10002] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1011.154710][T15664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2389'. [ 1011.179282][ T9218] usbhid 1-1:0.0: can't add hid device: -71 [ 1011.725614][ T9218] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1011.751432][ T9218] usb 1-1: USB disconnect, device number 65 [ 1011.766416][ T5898] usb 2-1: USB disconnect, device number 47 [ 1012.125630][T15677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.143571][ T5898] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1012.177246][T15677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.317112][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1012.354741][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.412946][ T5898] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1012.429473][T15686] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1012.451994][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.467035][T15686] Error validating options; rc = [-22] [ 1012.478961][ T5898] usb 4-1: config 0 descriptor?? [ 1012.911107][ T9218] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1012.921804][ T5898] isku 0003:1E7D:319C.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1013.075125][ T9218] usb 5-1: Using ep0 maxpacket: 32 [ 1013.098442][ T9218] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1013.112354][ T9218] usb 5-1: config 4 has an invalid interface number: 136 but max is 0 [ 1013.116597][ T5898] isku 0003:1E7D:319C.0011: couldn't init struct isku_device [ 1013.128401][ T9218] usb 5-1: config 4 has no interface number 0 [ 1014.664938][ T5898] isku 0003:1E7D:319C.0011: couldn't install keyboard [ 1014.673516][ T5898] isku 0003:1E7D:319C.0011: probe with driver isku failed with error -71 [ 1014.713499][ T9218] usb 5-1: config 4 interface 136 has no altsetting 0 [ 1014.748424][ T5898] usb 4-1: USB disconnect, device number 49 [ 1014.749286][ T9218] usb 5-1: string descriptor 0 read error: -22 [ 1014.793237][ T9218] usb 5-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8 [ 1014.825498][ T9218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.888307][ T9218] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 1014.925165][ T9218] dvb-usb: bulk message failed: -22 (4/0) [ 1014.948050][ T9218] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1014.986125][ T9218] dvb-usb: bulk message failed: -22 (5/0) [ 1015.005265][ T9218] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1015.052259][ T9218] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1015.081104][ T9218] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1015.114446][ T9218] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650) [ 1015.116172][T15691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.163102][ T9218] usb 5-1: media controller created [ 1015.171505][T15691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.235182][ T9218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1015.305019][ T9218] ttusb2: set interface to alts=3 failed [ 1015.363472][ T9218] DVB: Unable to find symbol tda10023_attach() [ 1015.369759][ T9218] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650' [ 1015.451125][ T9218] rc_core: IR keymap rc-tt-1500 not found [ 1015.463168][ T9218] Registered IR keymap rc-empty [ 1015.479064][ T9218] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1017.111518][ T5898] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1017.134464][T15713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.149431][ T9218] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input30 [ 1017.162534][ T9218] dvb-usb: schedule remote query interval to 150 msecs. [ 1017.169556][ T9218] dvb-usb: bulk message failed: -22 (4/0) [ 1017.177185][ T30] audit: type=1400 audit(1017.144:436): avc: denied { read } for pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=4008 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1017.178024][ T9218] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1017.210141][ T9218] dvb-usb: bulk message failed: -22 (5/0) [ 1017.210429][T15713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.215983][ T9218] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1017.234720][ T9218] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected. [ 1017.247627][ T9218] usb 5-1: USB disconnect, device number 66 [ 1017.309756][ T30] audit: type=1400 audit(1017.144:437): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4008 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1017.323436][T15721] FAULT_INJECTION: forcing a failure. [ 1017.323436][T15721] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.354106][T15721] CPU: 1 UID: 0 PID: 15721 Comm: syz.4.2410 Tainted: G L syzkaller #0 PREEMPT(full) [ 1017.354135][T15721] Tainted: [L]=SOFTLOCKUP [ 1017.354141][T15721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1017.354151][T15721] Call Trace: [ 1017.354157][T15721] [ 1017.354164][T15721] dump_stack_lvl+0x16c/0x1f0 [ 1017.354276][T15721] should_fail_ex+0x512/0x640 [ 1017.354303][T15721] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1017.354323][T15721] should_failslab+0xc2/0x120 [ 1017.354346][T15721] kmem_cache_alloc_noprof+0x83/0x770 [ 1017.354363][T15721] ? copy_time_ns+0x3d6/0x7f0 [ 1017.354382][T15721] ? copy_fs_struct+0x49/0x340 [ 1017.354407][T15721] ? copy_fs_struct+0x49/0x340 [ 1017.354427][T15721] copy_fs_struct+0x49/0x340 [ 1017.354450][T15721] __do_sys_setns+0x50e/0x1f90 [ 1017.354481][T15721] ? __pfx___do_sys_setns+0x10/0x10 [ 1017.354508][T15721] ? ksys_write+0x1ac/0x250 [ 1017.354538][T15721] do_syscall_64+0xcd/0xf80 [ 1017.354564][T15721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.354583][T15721] RIP: 0033:0x7fa28d18f749 [ 1017.354600][T15721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1017.354616][T15721] RSP: 002b:00007fa28e08c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1017.354635][T15721] RAX: ffffffffffffffda RBX: 00007fa28d3e5fa0 RCX: 00007fa28d18f749 [ 1017.354646][T15721] RDX: 0000000000000000 RSI: 0000000024020000 RDI: 0000000000000004 [ 1017.354657][T15721] RBP: 00007fa28e08c090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.354668][T15721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.354679][T15721] R13: 00007fa28d3e6038 R14: 00007fa28d3e5fa0 R15: 00007ffd9d613db8 [ 1017.354703][T15721] [ 1017.371547][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.421835][ T9218] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected. [ 1017.432592][ T30] audit: type=1400 audit(1017.144:438): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4008 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1017.432641][ T30] audit: type=1400 audit(1017.274:439): avc: denied { mount } for pid=15719 comm="syz.4.2410" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1017.693874][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.721877][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1017.853386][ T5898] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1017.863237][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.876954][ T5898] usb 4-1: config 0 descriptor?? [ 1017.913861][ T30] audit: type=1400 audit(1017.274:440): avc: denied { watch } for pid=15719 comm="syz.4.2410" path="/469/file0/bus" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1017.950257][T15728] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1017.964497][T15728] Error validating options; rc = [-22] [ 1018.260610][ T30] audit: type=1400 audit(1018.224:441): avc: denied { name_bind } for pid=15733 comm="syz.1.2413" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1018.306932][ T5898] acrux 0003:1A34:0802.0012: item fetching failed at offset 3/5 [ 1018.320459][ T5898] acrux 0003:1A34:0802.0012: parse failed [ 1018.330290][ T5898] acrux 0003:1A34:0802.0012: probe with driver acrux failed with error -22 [ 1018.531169][ T5898] usb 4-1: USB disconnect, device number 50 [ 1018.678798][T15740] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1018.782522][T15743] netlink: 'syz.0.2408': attribute type 1 has an invalid length. [ 1019.252989][ T30] audit: type=1400 audit(1019.214:442): avc: denied { module_request } for pid=15751 comm="syz.3.2416" kmod="crypto-digest_null" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1019.294330][ T5898] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1019.511079][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 1019.534860][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1019.547493][ T5898] usb 1-1: can't read configurations, error -61 [ 1019.621165][ T9218] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1020.432894][ T5898] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1020.532660][ T9218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1020.562259][ T9218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.596526][ T9218] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1020.601078][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 1020.802513][ T9218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.822193][ T9218] usb 4-1: config 0 descriptor?? [ 1020.829171][T15768] erofs (device nbd1): cannot find valid erofs superblock [ 1020.840522][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'. [ 1021.048265][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1021.099341][ T5898] usb 1-1: can't read configurations, error -61 [ 1021.120381][ T5898] usb usb1-port1: attempt power cycle [ 1021.346961][ T9218] isku 0003:1E7D:319C.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1021.471219][ T5898] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1021.561883][ T9218] isku 0003:1E7D:319C.0013: couldn't init struct isku_device [ 1021.572761][ T9218] isku 0003:1E7D:319C.0013: couldn't install keyboard [ 1021.648734][ T9218] isku 0003:1E7D:319C.0013: probe with driver isku failed with error -71 [ 1021.746073][ T9218] usb 4-1: USB disconnect, device number 51 [ 1021.926253][ T5898] usb 1-1: device descriptor read/8, error -71 [ 1022.254159][T15784] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1022.665085][ T30] audit: type=1400 audit(1022.354:443): avc: denied { connect } for pid=15779 comm="syz.1.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1022.753215][T15784] Error validating options; rc = [-22] [ 1022.781090][ T9733] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1022.941145][ T9733] usb 4-1: Using ep0 maxpacket: 32 [ 1022.947934][ T9733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.972206][ T9733] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1022.997911][ T9733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.031258][ T9733] usb 4-1: Product: syz [ 1023.041125][ T9733] usb 4-1: Manufacturer: syz [ 1023.052784][ T9733] usb 4-1: SerialNumber: syz [ 1023.061932][ T30] audit: type=1400 audit(1023.034:444): avc: denied { write } for pid=15794 comm="syz.4.2427" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1023.100727][ T9733] usb 4-1: config 0 descriptor?? [ 1023.112496][ T9733] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1023.151471][T15796] FAULT_INJECTION: forcing a failure. [ 1023.151471][T15796] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.151508][T15796] CPU: 1 UID: 0 PID: 15796 Comm: syz.4.2427 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.151535][T15796] Tainted: [L]=SOFTLOCKUP [ 1023.151543][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.151555][T15796] Call Trace: [ 1023.151562][T15796] [ 1023.151570][T15796] dump_stack_lvl+0x16c/0x1f0 [ 1023.151601][T15796] should_fail_ex+0x512/0x640 [ 1023.151629][T15796] ? fs_reclaim_acquire+0xae/0x150 [ 1023.151656][T15796] should_failslab+0xc2/0x120 [ 1023.151680][T15796] __kmalloc_noprof+0xeb/0x910 [ 1023.151707][T15796] ? tomoyo_encode2+0x100/0x3e0 [ 1023.151736][T15796] ? tomoyo_encode2+0x100/0x3e0 [ 1023.151758][T15796] tomoyo_encode2+0x100/0x3e0 [ 1023.151786][T15796] tomoyo_encode+0x29/0x50 [ 1023.151809][T15796] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1023.151842][T15796] tomoyo_path_number_perm+0x245/0x580 [ 1023.151863][T15796] ? tomoyo_path_number_perm+0x237/0x580 [ 1023.151886][T15796] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1023.151909][T15796] ? find_held_lock+0x2b/0x80 [ 1023.151958][T15796] ? find_held_lock+0x2b/0x80 [ 1023.151986][T15796] ? hook_file_ioctl_common+0x144/0x410 [ 1023.152023][T15796] ? __fget_files+0x20e/0x3c0 [ 1023.152057][T15796] security_file_ioctl+0x9b/0x240 [ 1023.152084][T15796] __x64_sys_ioctl+0xb7/0x210 [ 1023.152108][T15796] do_syscall_64+0xcd/0xf80 [ 1023.152148][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.152171][T15796] RIP: 0033:0x7fa28d18f749 [ 1023.152188][T15796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.152234][T15796] RSP: 002b:00007fa28e06b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.152256][T15796] RAX: ffffffffffffffda RBX: 00007fa28d3e6090 RCX: 00007fa28d18f749 [ 1023.152270][T15796] RDX: 0000200000000480 RSI: 0000000000004604 RDI: 0000000000000003 [ 1023.152283][T15796] RBP: 00007fa28e06b090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.152295][T15796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.152308][T15796] R13: 00007fa28d3e6128 R14: 00007fa28d3e6090 R15: 00007ffd9d613db8 [ 1023.152338][T15796] [ 1023.152363][T15796] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1023.771186][ T5898] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1023.923481][ T9218] usb 4-1: USB disconnect, device number 52 [ 1023.948894][T15809] netlink: 'syz.4.2431': attribute type 1 has an invalid length. [ 1023.969763][T15809] bond1: entered promiscuous mode [ 1023.974908][T15809] bond1: entered allmulticast mode [ 1023.980557][T15809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1024.062000][T15809] macvlan2: entered promiscuous mode [ 1024.068259][T15809] macvlan2: entered allmulticast mode [ 1024.077749][T15809] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1024.093888][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.119253][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.130615][ T5898] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1024.146384][T15816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1024.157890][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.183970][ T5898] usb 1-1: config 0 descriptor?? [ 1024.239625][T15818] FAULT_INJECTION: forcing a failure. [ 1024.239625][T15818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.254163][T15818] CPU: 0 UID: 0 PID: 15818 Comm: syz.2.2433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1024.254202][T15818] Tainted: [L]=SOFTLOCKUP [ 1024.254209][T15818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1024.254221][T15818] Call Trace: [ 1024.254229][T15818] [ 1024.254237][T15818] dump_stack_lvl+0x16c/0x1f0 [ 1024.254270][T15818] should_fail_ex+0x512/0x640 [ 1024.254305][T15818] _copy_from_user+0x2e/0xd0 [ 1024.254335][T15818] do_ip_setsockopt+0xf00/0x38a0 [ 1024.254357][T15818] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1024.254376][T15818] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1024.254395][T15818] ? avc_has_perm+0x144/0x1f0 [ 1024.254414][T15818] ? __pfx_avc_has_perm+0x10/0x10 [ 1024.254433][T15818] ? proc_fail_nth_write+0x9f/0x220 [ 1024.254459][T15818] ip_setsockopt+0x59/0xf0 [ 1024.254480][T15818] sctp_setsockopt+0x16c/0xb8c0 [ 1024.254501][T15818] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1024.254533][T15818] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1024.254552][T15818] ? find_held_lock+0x2b/0x80 [ 1024.254586][T15818] ? selinux_socket_setsockopt+0x6a/0x80 [ 1024.254608][T15818] ? sock_common_setsockopt+0x2e/0xf0 [ 1024.254632][T15818] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1024.254659][T15818] do_sock_setsockopt+0xf3/0x1d0 [ 1024.254687][T15818] __sys_setsockopt+0x1a0/0x230 [ 1024.254712][T15818] __x64_sys_setsockopt+0xbd/0x160 [ 1024.254731][T15818] ? do_syscall_64+0x91/0xf80 [ 1024.254757][T15818] ? lockdep_hardirqs_on+0x7c/0x110 [ 1024.254783][T15818] do_syscall_64+0xcd/0xf80 [ 1024.254810][T15818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.254830][T15818] RIP: 0033:0x7f2808b8f749 [ 1024.254846][T15818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.254872][T15818] RSP: 002b:00007f2809ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1024.254892][T15818] RAX: ffffffffffffffda RBX: 00007f2808de5fa0 RCX: 00007f2808b8f749 [ 1024.254905][T15818] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000003 [ 1024.254917][T15818] RBP: 00007f2809ab7090 R08: 0000000000000004 R09: 0000000000000000 [ 1024.254929][T15818] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1024.254941][T15818] R13: 00007f2808de6038 R14: 00007f2808de5fa0 R15: 00007ffcfdabe3a8 [ 1024.254968][T15818] [ 1024.664916][T15822] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1024.678400][T15822] Error validating options; rc = [-22] [ 1024.952871][ T5898] steelseries 0003:1038:1410.0014: item fetching failed at offset 5/7 [ 1024.997904][T15825] erofs (device nbd4): cannot find valid erofs superblock [ 1025.007097][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2434'. [ 1026.621646][T15814] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1026.624442][ T5898] steelseries 0003:1038:1410.0014: parse failed [ 1026.627774][T12475] Bluetooth: hci1: command 0x0c1a tx timeout [ 1026.640856][ T5898] steelseries 0003:1038:1410.0014: probe with driver steelseries failed with error -22 [ 1026.665300][ T5898] usb 1-1: USB disconnect, device number 70 [ 1026.920358][T15814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1026.952736][T15814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1026.975285][T15814] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1026.991661][T15814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1029.580652][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 1029.581982][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 1029.593944][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 1029.593994][T12475] Bluetooth: hci0: command 0x0c1a tx timeout [ 1030.350937][T15866] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1030.385501][T15866] Error validating options; rc = [-22] [ 1031.434352][ T5898] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1032.147414][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1032.343891][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.353814][ T5898] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1032.362941][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.373507][ T5898] usb 5-1: config 0 descriptor?? [ 1032.552760][ T30] audit: type=1400 audit(1032.524:445): avc: denied { create } for pid=15893 comm="syz.3.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1032.577896][T15894] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2455'. [ 1032.615459][ T30] audit: type=1400 audit(1032.544:446): avc: denied { write } for pid=15893 comm="syz.3.2455" path="socket:[63793]" dev="sockfs" ino=63793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1032.754995][T15901] SELinux: ebitmap: truncated map [ 1032.763814][T15901] SELinux: failed to load policy [ 1032.822988][ T5898] isku 0003:1E7D:319C.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 1033.168997][ T9733] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1033.275928][ T9218] usb 5-1: USB disconnect, device number 67 [ 1033.350750][ T9733] usb 2-1: Using ep0 maxpacket: 32 [ 1033.371096][ T9733] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1033.390993][ T9733] usb 2-1: config 0 has no interface number 0 [ 1033.398406][ T9733] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1033.416481][ T9733] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1033.434306][ T9733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.442391][ T5882] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1033.457600][ T9733] usb 2-1: Product: syz [ 1033.461797][ T9733] usb 2-1: Manufacturer: syz [ 1033.466400][ T9733] usb 2-1: SerialNumber: syz [ 1033.492163][ T9733] usb 2-1: config 0 descriptor?? [ 1033.511939][ T9733] smsc75xx v1.0.0 [ 1033.636942][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 1033.651440][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.674136][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.690790][ T5882] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 1033.701080][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.715536][ T5882] usb 1-1: config 0 descriptor?? [ 1033.720695][T15922] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2464'. [ 1034.501131][ T30] audit: type=1400 audit(1034.361:447): avc: denied { watch } for pid=15913 comm="syz.0.2462" path="pipe:[63891]" dev="pipefs" ino=63891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1034.767475][ T5882] hid_mf 0003:0079:1801.0016: item fetching failed at offset 0/2 [ 1034.781911][ T5882] hid_mf 0003:0079:1801.0016: HID parse failed. [ 1034.791830][ T5882] hid_mf 0003:0079:1801.0016: probe with driver hid_mf failed with error -22 [ 1034.863752][T15936] binder_alloc: 15927: binder_alloc_buf, no vma [ 1035.355778][ T5882] usb 1-1: USB disconnect, device number 71 [ 1035.656091][ T9733] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1037.169926][ T9733] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1037.180151][ T9733] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1037.194648][ T9733] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1037.204929][ T9733] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1037.215460][ T9733] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1037.225540][ T9733] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1037.294886][ T9733] usb 2-1: USB disconnect, device number 48 [ 1037.410179][T15954] FAULT_INJECTION: forcing a failure. [ 1037.410179][T15954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.451184][T15954] CPU: 1 UID: 0 PID: 15954 Comm: syz.0.2473 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.451221][T15954] Tainted: [L]=SOFTLOCKUP [ 1037.451228][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1037.451238][T15954] Call Trace: [ 1037.451246][T15954] [ 1037.451253][T15954] dump_stack_lvl+0x16c/0x1f0 [ 1037.451284][T15954] should_fail_ex+0x512/0x640 [ 1037.451316][T15954] _copy_to_user+0x32/0xd0 [ 1037.451346][T15954] simple_read_from_buffer+0xcb/0x170 [ 1037.451371][T15954] proc_fail_nth_read+0x197/0x240 [ 1037.451390][T15954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1037.451410][T15954] ? rw_verify_area+0xcf/0x6c0 [ 1037.451431][T15954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1037.451450][T15954] vfs_read+0x1e4/0xcf0 [ 1037.451472][T15954] ? __pfx___mutex_lock+0x10/0x10 [ 1037.451501][T15954] ? __pfx_vfs_read+0x10/0x10 [ 1037.451528][T15954] ? __fget_files+0x20e/0x3c0 [ 1037.451559][T15954] ksys_read+0x12a/0x250 [ 1037.451578][T15954] ? __pfx_ksys_read+0x10/0x10 [ 1037.451605][T15954] do_syscall_64+0xcd/0xf80 [ 1037.451630][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.451647][T15954] RIP: 0033:0x7f2350f8e15c [ 1037.451663][T15954] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1037.451679][T15954] RSP: 002b:00007f234f1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1037.451698][T15954] RAX: ffffffffffffffda RBX: 00007f23511e5fa0 RCX: 00007f2350f8e15c [ 1037.451709][T15954] RDX: 000000000000000f RSI: 00007f234f1f60a0 RDI: 0000000000000006 [ 1037.451719][T15954] RBP: 00007f234f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.451730][T15954] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1037.451742][T15954] R13: 00007f23511e6038 R14: 00007f23511e5fa0 R15: 00007fffece7fe08 [ 1037.451764][T15954] [ 1038.900681][T15980] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1039.411985][T15985] befs: (nullb0): invalid magic header [ 1040.206055][T16005] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 1040.298961][ T9733] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1040.495767][ T9733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1040.582665][ T9733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.605481][ T9733] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1040.620382][ T9733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.494272][T16024] binder_alloc: 16017: binder_alloc_buf, no vma [ 1041.517753][ T9733] usb 4-1: config 0 descriptor?? [ 1041.913826][T16028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.948415][T16028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.074501][ T9733] isku 0003:1E7D:319C.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1042.510054][ T5882] usb 4-1: USB disconnect, device number 53 [ 1044.268412][ T30] audit: type=1326 audit(1043.501:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2f98f749 code=0x7ffc0000 [ 1044.454469][ T30] audit: type=1326 audit(1043.520:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2f98f749 code=0x7ffc0000 [ 1044.568231][ T30] audit: type=1326 audit(1043.539:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2f98f749 code=0x7ffc0000 [ 1044.602810][ T30] audit: type=1326 audit(1043.539:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f3d2f98f749 code=0x7ffc0000 [ 1044.654786][ T30] audit: type=1326 audit(1043.539:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2f98f749 code=0x7ffc0000 [ 1044.686978][ T30] audit: type=1326 audit(1043.539:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2f98f749 code=0x7ffc0000 [ 1044.714764][ T30] audit: type=1326 audit(1043.539:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2f98f749 code=0x7ffc0000 [ 1044.739941][ T30] audit: type=1326 audit(1043.539:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2f98f749 code=0x7ffc0000 [ 1044.764498][ T30] audit: type=1326 audit(1043.539:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16048 comm="syz.3.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3d2f98f749 code=0x7ffc0000 [ 1044.799579][ T30] audit: type=1400 audit(1043.539:457): avc: denied { node_bind } for pid=16048 comm="syz.3.2497" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1046.212143][T16075] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1046.272436][T16075] Error validating options; rc = [-22] [ 1046.453429][T16080] netlink: 'syz.0.2505': attribute type 10 has an invalid length. [ 1047.309581][T16089] binder_alloc: 16086: binder_alloc_buf, no vma [ 1048.839294][ T5800] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1048.852276][ T5882] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1049.042062][ T5800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1049.055466][ T5800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.068295][ T5800] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1049.078462][ T5800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.093571][ T5800] usb 2-1: config 0 descriptor?? [ 1049.142698][T16109] SELinux: ebitmap: truncated map [ 1049.156584][T16109] SELinux: failed to load policy [ 1049.161804][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 1049.169698][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.189473][ T5882] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1049.212562][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.222115][ T5882] usb 4-1: Product: syz [ 1049.227150][ T5882] usb 4-1: Manufacturer: syz [ 1049.231792][ T5882] usb 4-1: SerialNumber: syz [ 1049.239672][ T5882] usb 4-1: config 0 descriptor?? [ 1049.257618][ T5882] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1051.598241][ T5800] usbhid 2-1:0.0: can't add hid device: -71 [ 1051.604262][ T5800] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1163.866055][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1163.873010][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5815/1:b..l [ 1163.881237][ C1] rcu: (detected by 1, t=10502 jiffies, g=80733, q=136 ncpus=2) [ 1163.888939][ C1] task:syz-executor state:R running task stack:23656 pid:5815 tgid:5815 ppid:5804 task_flags:0x400140 flags:0x00080000 [ 1163.902890][ C1] Call Trace: [ 1163.906153][ C1] [ 1163.909077][ C1] ? __schedule+0x10b9/0x6150 [ 1163.913748][ C1] __schedule+0x1139/0x6150 [ 1163.918232][ C1] ? __lock_acquire+0x436/0x2890 [ 1163.923210][ C1] ? __pfx___schedule+0x10/0x10 [ 1163.928062][ C1] ? mark_held_locks+0x49/0x80 [ 1163.932821][ C1] preempt_schedule_irq+0x51/0x90 [ 1163.937851][ C1] irqentry_exit+0x1d8/0x8c0 [ 1163.942435][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1163.948403][ C1] RIP: 0010:kasan_byte_accessible+0x18/0x30 [ 1163.954282][ C1] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 0f b6 07 <3c> 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f [ 1163.973864][ C1] RSP: 0018:ffffc900046cf298 EFLAGS: 00000286 [ 1163.979913][ C1] RAX: 0000000000000000 RBX: ffffffff8e3c96a0 RCX: 0000000000000002 [ 1163.987858][ C1] RDX: 0000000000000000 RSI: ffffffff816cb681 RDI: fffffbfff1c792d4 [ 1163.995799][ C1] RBP: ffffffff8e3c96a0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.003744][ C1] R10: 0000000000000002 R11: 00000000000144b2 R12: ffffffff816cb681 [ 1164.011879][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1164.019856][ C1] ? unwind_next_frame+0xd1/0x20b0 [ 1164.024972][ C1] ? unwind_next_frame+0xd1/0x20b0 [ 1164.030077][ C1] __kasan_check_byte+0x13/0x50 [ 1164.034927][ C1] lock_acquire+0xfc/0x330 [ 1164.039424][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 1164.044617][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1164.050747][ C1] unwind_next_frame+0xd1/0x20b0 [ 1164.055851][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 1164.060949][ C1] ? iput+0x35/0x40 [ 1164.064767][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1164.070929][ C1] arch_stack_walk+0x94/0x100 [ 1164.075581][ C1] ? iput+0x35/0x40 [ 1164.079471][ C1] stack_trace_save+0x8e/0xc0 [ 1164.084140][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1164.089490][ C1] ? __lock_acquire+0x436/0x2890 [ 1164.094415][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1164.099694][ C1] save_stack+0x160/0x1f0 [ 1164.104095][ C1] ? __pfx_save_stack+0x10/0x10 [ 1164.108920][ C1] ? free_unref_folios+0xa22/0x1610 [ 1164.114087][ C1] ? folios_put_refs+0x4be/0x750 [ 1164.118994][ C1] ? shmem_undo_range+0x58f/0x1140 [ 1164.124095][ C1] ? shmem_evict_inode+0x39e/0xbe0 [ 1164.129175][ C1] ? evict+0x3c2/0xad0 [ 1164.133225][ C1] ? iput.part.0+0x621/0x1190 [ 1164.137881][ C1] ? iput+0x35/0x40 [ 1164.141666][ C1] ? page_ext_put+0x3e/0xd0 [ 1164.146154][ C1] __reset_page_owner+0x84/0x1a0 [ 1164.151066][ C1] free_unref_folios+0xa22/0x1610 [ 1164.156062][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1164.161842][ C1] folios_put_refs+0x4be/0x750 [ 1164.166680][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1164.171962][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1164.178274][ C1] shmem_undo_range+0x58f/0x1140 [ 1164.183213][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1164.188593][ C1] ? arch_stack_walk+0xa6/0x100 [ 1164.193433][ C1] ? kasan_save_stack+0x33/0x60 [ 1164.198257][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 1164.203614][ C1] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 1164.209664][ C1] ? dentry_free+0xc2/0x160 [ 1164.214142][ C1] ? __dentry_kill+0x498/0x600 [ 1164.218884][ C1] ? finish_dput+0x76/0x480 [ 1164.223362][ C1] ? dput+0x1f/0x30 [ 1164.227142][ C1] shmem_evict_inode+0x39e/0xbe0 [ 1164.232075][ C1] ? inode_wait_for_writeback+0x170/0x390 [ 1164.237802][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1164.243400][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1164.249483][ C1] ? find_held_lock+0x2b/0x80 [ 1164.254178][ C1] ? evict+0x37e/0xad0 [ 1164.258247][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1164.263692][ C1] evict+0x3c2/0xad0 [ 1164.267568][ C1] ? __pfx_evict+0x10/0x10 [ 1164.271971][ C1] ? iput.part.0+0x619/0x1190 [ 1164.276628][ C1] iput.part.0+0x621/0x1190 [ 1164.281110][ C1] iput+0x35/0x40 [ 1164.284740][ C1] do_unlinkat+0x3d2/0x660 [ 1164.289152][ C1] ? __pfx_do_unlinkat+0x10/0x10 [ 1164.294071][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 1164.299432][ C1] __x64_sys_unlink+0xc5/0x110 [ 1164.304208][ C1] do_syscall_64+0xcd/0xf80 [ 1164.308704][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.314579][ C1] RIP: 0033:0x7f2350f8ecf7 [ 1164.318967][ C1] RSP: 002b:00007fffece7f098 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1164.327350][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2350f8ecf7 [ 1164.335303][ C1] RDX: 00007fffece7f0c0 RSI: 00007fffece7f150 RDI: 00007fffece7f150 [ 1164.343263][ C1] RBP: 00007fffece7f150 R08: 0000000000000000 R09: 0000000000000000 [ 1164.351320][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fffece801e0 [ 1164.359276][ C1] R13: 00007f2351013d7d R14: 00000000000ffe8e R15: 00007fffece80220 [ 1164.367246][ C1] [ 1164.370249][ C1] rcu: rcu_preempt kthread starved for 10540 jiffies! g80733 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1164.381411][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1164.391353][ C1] rcu: RCU grace-period kthread stack dump: [ 1164.397215][ C1] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1164.410669][ C1] Call Trace: [ 1164.413921][ C1] [ 1164.416827][ C1] ? __schedule+0x10b9/0x6150 [ 1164.421489][ C1] __schedule+0x1139/0x6150 [ 1164.425980][ C1] ? __pfx___schedule+0x10/0x10 [ 1164.430804][ C1] ? find_held_lock+0x2b/0x80 [ 1164.435472][ C1] ? schedule+0x2d7/0x3a0 [ 1164.439798][ C1] schedule+0xe7/0x3a0 [ 1164.443863][ C1] schedule_timeout+0x123/0x290 [ 1164.448694][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1164.454049][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1164.459316][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1164.465095][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1164.470529][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1164.475277][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1164.481153][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1164.486325][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1164.491239][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1164.496069][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1164.503326][ C1] rcu_gp_kthread+0x26d/0x380 [ 1164.507980][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1164.513155][ C1] ? rcu_is_watching+0x12/0xc0 [ 1164.517892][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1164.523074][ C1] ? __kthread_parkme+0x19e/0x250 [ 1164.528070][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1164.533244][ C1] kthread+0x3c5/0x780 [ 1164.537286][ C1] ? __pfx_kthread+0x10/0x10 [ 1164.541868][ C1] ? rcu_is_watching+0x12/0xc0 [ 1164.546622][ C1] ? __pfx_kthread+0x10/0x10 [ 1164.551267][ C1] ret_from_fork+0x983/0xb10 [ 1164.555927][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1164.561050][ C1] ? __switch_to+0x7af/0x10d0 [ 1164.565708][ C1] ? __pfx_kthread+0x10/0x10 [ 1164.570294][ C1] ret_from_fork_asm+0x1a/0x30 [ 1164.575045][ C1] [ 1164.578035][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1164.584325][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1164.589514][ C0] NMI backtrace for cpu 0 [ 1164.589529][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1164.589547][ C0] Tainted: [L]=SOFTLOCKUP [ 1164.589553][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1164.589560][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1164.589581][ C0] Code: 96 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 19 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1164.589594][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1164.589607][ C0] RAX: 0000000004968037 RBX: 0000000000000000 RCX: ffffffff8b7846d9 [ 1164.589616][ C0] RDX: 0000000000000000 RSI: ffffffff8dace97a RDI: ffffffff8bf2b400 [ 1164.589625][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 1164.589634][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 1164.589643][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b8d0 R15: 0000000000000000 [ 1164.589652][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1164.589667][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.589677][ C0] CR2: 0000001b2ff19ff8 CR3: 0000000079332000 CR4: 00000000003526f0 [ 1164.589686][ C0] Call Trace: [ 1164.589692][ C0] [ 1164.589697][ C0] default_idle+0x13/0x20 [ 1164.589728][ C0] default_idle_call+0x6c/0xb0 [ 1164.589747][ C0] do_idle+0x38d/0x510 [ 1164.589769][ C0] ? __pfx_do_idle+0x10/0x10 [ 1164.589791][ C0] cpu_startup_entry+0x4f/0x60 [ 1164.589810][ C0] rest_init+0x16b/0x2b0 [ 1164.589822][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1164.589838][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1164.589854][ C0] start_kernel+0x3ef/0x4d0 [ 1164.589869][ C0] x86_64_start_reservations+0x18/0x30 [ 1164.589883][ C0] x86_64_start_kernel+0x130/0x190 [ 1164.589897][ C0] common_startup_64+0x13e/0x148 [ 1164.589918][ C0]