last executing test programs: 6m45.910493415s ago: executing program 0 (id=419): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="ebafb1ad36d7095e4565c0a9d7dbc8f12d8ff3e4acc775f1254fe726406ba5d7218b96581919938f5415e0befe13f7cc46fe76d671443490fc3d9e", 0x3b, 0xfffffffffffffffa, &(0x7f0000000040)={0x0, 0x3938700}) 6m45.767803363s ago: executing program 0 (id=415): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x2000000, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) 6m45.668410825s ago: executing program 0 (id=417): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000002e40)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002e80)='./cifs\x00', 0x1ff) mount(&(0x7f0000002ec0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000002f00)='./cifs\x00', &(0x7f0000002f40)='cifs\x00', 0xf9fdffff, &(0x7f0000002f80)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000003000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200"/84, 0x54, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 6m44.838432122s ago: executing program 0 (id=418): rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) (async) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x5a) write(r0, &(0x7f0000000100)="2d25c873c6d0ff57318d8185a94d488b38f0fcd919d01038dc3dc25401000000febae03d46fdca85c1a1862b89b5ec78104a2521d9223abb9b169eceaaca9ccf1cb8d8714bdff1c9e7be3595f94412", 0x4f) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/16384, 0x4000) (async) socket(0x2a, 0x4, 0x3) 6m44.641120344s ago: executing program 0 (id=420): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='10', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x122, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000600)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', 0x1}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r4, &(0x7f0000000680)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r4, 0x5) write$tun(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000200000100001c"], 0x4a) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000080}, 0x40040) openat(r0, &(0x7f0000000b40)='./proc/thread-self/fail-nth\x00', 0x210000, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x1, 0x2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110a28bd7000fddbdf250900000008000300", @ANYRES32=r9, @ANYBLOB="0500080009000000050007"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc15}, 0x40c0) 6m44.284157177s ago: executing program 0 (id=421): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000041000501010000000300000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c00", @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0x44050) 6m44.14108183s ago: executing program 32 (id=421): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000041000501010000000300000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c00", @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0x44050) 5m25.72291728s ago: executing program 1 (id=911): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r0, 0x6, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @loopback}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r2, &(0x7f0000000280)='27', 0x2) sendmsg$inet_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000300)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) 5m24.746938271s ago: executing program 1 (id=918): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./my_configfs\x00', 0x15d) mount(0x0, &(0x7f00000007c0)='./my_configfs\x00', &(0x7f0000000080)='ext3\x00', 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$nci(r1, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0xc0884123, 0x0) madvise(&(0x7f00003e8000/0x4000)=nil, 0x4000, 0x65) mkdir(&(0x7f0000000840)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) 5m24.453430337s ago: executing program 1 (id=921): socket$netlink(0x10, 0x3, 0x0) pwrite64$ublk_bdev(0xffffffffffffffff, &(0x7f0000000140)="d97bd4cc34de3b48de0ec2acb2a548aca481c7f0d2e1b933e764444d2daa9d9a73390d52cfb0df3e132f024f2381e1ab29e5b976140e0f6075cb98a501c20f9b245635d4124588ab248cbcec0410b0d2b8285a6efcbceda892481f154d67013d68abfa32a3de95b9dff25e0130c6cb14cfa8e3e203ca6a9360cc7faf0cb88c6ac0d6830f7a342bcb10f813881611b9af403e136af98d6889f9246205eb25e28226a08f7f14e6917be4e570cb174af2ea715bb11eef89ef20d24a134574517c9e6a100e354a", 0xc5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1c5) r0 = socket$kcm(0x2, 0x3, 0x2) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='mpol=interlReave:7-', @ANYRESDEC]) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000600)=0x6) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000580)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 5m24.411382844s ago: executing program 1 (id=922): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x1, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="bdd9d14588e6b7", 0x7}], 0x1}}], 0x1, 0x6ef8eb0211163289) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x38ff817, 0x0) umount2(&(0x7f00000003c0)='./file0/../file0\x00', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 5m24.371242603s ago: executing program 1 (id=923): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x1) unshare(0x8000280) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e06050c10"], 0x9) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/sda\x00', 0x101042, 0x5) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000480)) r2 = syz_clone(0x100000, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff07) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x15c, 0x10, 0x2, 0x0, 0xfffffffe, {{@in=@multicast2, @in6=@empty, 0x0, 0x8000}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xc68}, 0x0, 0x2, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff, 0x0, 0x2}}, @algo_auth={0x48, 0x1, {{'cmac(aes)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x15c}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x79f4, 0x1, 0x2, {0x4, @vbi={0x8, 0x2, 0x9, 0x31324d4e, [0x7, 0xfffffffd], [0x40, 0x2], 0x2}}, 0x40004}) unshare(0x4c020080) 5m24.097339395s ago: executing program 1 (id=924): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee01, 0x0, 0x0, 0x0, 0x130, 0x9}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x202, 0x400, 0x0, 0x8, 0x1}) msgsnd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000000000005fd9caaeec198005ccd09daf92e19180d8bfe37b314a20a4dbb41a8616ee98743cdac82ab6a4226020a423a268c7912ad782e8b888a693ba7b70a0dffc81eaa4a9610de0b34949997872a17ffea24ff927f19d2ba38fde815d878d1197f7dc282c6a898c602ecc4c9f3882926b48f670e8a4b517af659ccdb0abe0b65eb9db80e03cc5cfc816a98169081261b39cb88bc6ff50ed2e79259c43ac2b1c8d311f6124d76f8e794f4029c238555546a571fa3"], 0xb9, 0x0) msgsnd(r0, &(0x7f0000000080)={0x3, "2856eecc72482f977dcbb94112997184951e67c20de43853a3cf5115224e304353213e1876975e998d6de8feca1cb037f6e7ba16222ef9acd9a62611a07076bacc7958287ae7884d5a1bda431f1a6206fbb96f6f8a7607a6a7232c087a242fa59a357b60c93eac4919c818848046f471ad40a6ccc63ed4d0f8a898012fb756716a777b6b6cc5505b10d71cadb0371ca53df882eb407084755e2b756abaa3e706b1c9c629b193593fff08a28d84a078"}, 0xb7, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x143041, 0x2a) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x20000000000ff01) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x5}) write$P9_RLOCK(r2, &(0x7f0000000200)={0x8, 0x35, 0x1}, 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000500), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x1, @pix_mp={0x7, 0x3ff, 0x48524742, 0x0, 0xa, [{0x4, 0x4}, {0x7, 0xfffefbfd}, {0x1, 0xfffffffa}, {0x2c64, 0x1}, {0x101, 0x1ea4}, {0x2000, 0xc}, {0xffffffff, 0x3ff}, {0x0, 0x1c68}], 0x1, 0x0, 0x8, 0x2, 0x7}}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}], 0x2c) sendmsg$inet_sctp(r4, &(0x7f0000000280)={&(0x7f00000002c0)=@in6={0xa, 0x4e24, 0xfd, @loopback, 0x5}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="e6", 0x1}], 0x1, &(0x7f00000003c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) syz_open_dev$video(&(0x7f0000000380), 0x0, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 5m24.094808995s ago: executing program 2 (id=925): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000b00), 0x20102, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x5, 0x80000001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 5m23.870349946s ago: executing program 33 (id=924): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0xee01, 0x0, 0x0, 0x0, 0x130, 0x9}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x202, 0x400, 0x0, 0x8, 0x1}) msgsnd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000000000005fd9caaeec198005ccd09daf92e19180d8bfe37b314a20a4dbb41a8616ee98743cdac82ab6a4226020a423a268c7912ad782e8b888a693ba7b70a0dffc81eaa4a9610de0b34949997872a17ffea24ff927f19d2ba38fde815d878d1197f7dc282c6a898c602ecc4c9f3882926b48f670e8a4b517af659ccdb0abe0b65eb9db80e03cc5cfc816a98169081261b39cb88bc6ff50ed2e79259c43ac2b1c8d311f6124d76f8e794f4029c238555546a571fa3"], 0xb9, 0x0) msgsnd(r0, &(0x7f0000000080)={0x3, "2856eecc72482f977dcbb94112997184951e67c20de43853a3cf5115224e304353213e1876975e998d6de8feca1cb037f6e7ba16222ef9acd9a62611a07076bacc7958287ae7884d5a1bda431f1a6206fbb96f6f8a7607a6a7232c087a242fa59a357b60c93eac4919c818848046f471ad40a6ccc63ed4d0f8a898012fb756716a777b6b6cc5505b10d71cadb0371ca53df882eb407084755e2b756abaa3e706b1c9c629b193593fff08a28d84a078"}, 0xb7, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x143041, 0x2a) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x20000000000ff01) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x5}) write$P9_RLOCK(r2, &(0x7f0000000200)={0x8, 0x35, 0x1}, 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000500), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x1, @pix_mp={0x7, 0x3ff, 0x48524742, 0x0, 0xa, [{0x4, 0x4}, {0x7, 0xfffefbfd}, {0x1, 0xfffffffa}, {0x2c64, 0x1}, {0x101, 0x1ea4}, {0x2000, 0xc}, {0xffffffff, 0x3ff}, {0x0, 0x1c68}], 0x1, 0x0, 0x8, 0x2, 0x7}}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}], 0x2c) sendmsg$inet_sctp(r4, &(0x7f0000000280)={&(0x7f00000002c0)=@in6={0xa, 0x4e24, 0xfd, @loopback, 0x5}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="e6", 0x1}], 0x1, &(0x7f00000003c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) syz_open_dev$video(&(0x7f0000000380), 0x0, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 5m23.629070062s ago: executing program 2 (id=927): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r0, 0x6, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @loopback}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r2, &(0x7f0000000280)='27', 0x2) sendmsg$inet_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000300)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) 5m22.492535856s ago: executing program 2 (id=930): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="64000000100001060000000000000000000000007fff00000000000000000000100005007665746830000000000000002400120008000100766574681800020014000100000000000900000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) pwrite64$ublk_bdev(0xffffffffffffffff, &(0x7f0000000140)="d97bd4cc34de3b48de0ec2acb2a548aca481c7f0d2e1b933e764444d2daa9d9a73390d52cfb0df3e132f024f2381e1ab29e5b976140e0f6075cb98a501c20f9b245635d4124588ab248cbcec0410b0d2b8285a6efcbceda892481f154d67013d68abfa32a3de95b9dff25e0130c6cb14cfa8e3e203ca6a9360cc7faf0cb88c6ac0d6830f7a342bcb10f813881611b9af403e136af98d6889f9246205eb25e28226a08f7f14e6917be4e570cb174af2ea715bb11eef89ef20d24a134574517c9e6a100e354a", 0xc5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1c5) r0 = socket$kcm(0x2, 0x3, 0x2) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='mpol=interlReave:7-', @ANYRESDEC]) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000600)=0x6) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000580)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 5m22.406778972s ago: executing program 2 (id=931): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x1, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="bdd9d14588e6b7", 0x7}], 0x1}}], 0x1, 0x6ef8eb0211163289) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x38ff817, 0x0) umount2(&(0x7f00000003c0)='./file0/../file0\x00', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 5m22.096542859s ago: executing program 2 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x80) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), 0x4) landlock_create_ruleset(&(0x7f0000000000)={0x2200, 0x8, 0x5, 0x10000, 0x2}, 0x30, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040e0000000000000025520000000400cf000600480011000000060048003b000000050088000300000005008800050000000a00060008021100000000000800cb000900000006004800000000000500880005000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc800}, 0x4000000) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x2141, 0x1d1) write(r3, &(0x7f00000002c0)='1', 0x1) write(r3, &(0x7f0000000300)='0', 0x1) 5m21.67965746s ago: executing program 2 (id=933): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="140097fa7108301199bcbe41e10000f600010000000000000060181768f958d880b500000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002e000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setns(0xc9, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000700), 0x800001d, 0x0) r2 = socket(0x6, 0x5, 0x2) munlockall() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x20000, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5f}}}}}, 0x20}}, 0x48000) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000580)="97452a307eb495fe223600000000000000", 0x11}, {&(0x7f00000005c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010101}}}], 0x20}, 0x2400c804) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_int(r5, &(0x7f0000000680)=0x100000000, 0x12) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x2, 0x20010, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b40), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001b80)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="6e7217323900"], 0x6) getsockopt$inet_mreqsrc(r8, 0x11e, 0x53, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000001c80)={'syzkaller1\x00', @link_local}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f00000000c0)={0x1f, 0x2}, 0x6) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$tun(r6, &(0x7f0000001cc0)=ANY=[@ANYRESDEC=r8], 0xfce) 5m21.165190303s ago: executing program 34 (id=933): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="140097fa7108301199bcbe41e10000f600010000000000000060181768f958d880b500000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002e000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setns(0xc9, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000700), 0x800001d, 0x0) r2 = socket(0x6, 0x5, 0x2) munlockall() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x20000, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5f}}}}}, 0x20}}, 0x48000) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000580)="97452a307eb495fe223600000000000000", 0x11}, {&(0x7f00000005c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010101}}}], 0x20}, 0x2400c804) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_int(r5, &(0x7f0000000680)=0x100000000, 0x12) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x2, 0x20010, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b40), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001b80)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="6e7217323900"], 0x6) getsockopt$inet_mreqsrc(r8, 0x11e, 0x53, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000001c80)={'syzkaller1\x00', @link_local}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f00000000c0)={0x1f, 0x2}, 0x6) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$tun(r6, &(0x7f0000001cc0)=ANY=[@ANYRESDEC=r8], 0xfce) 5m19.644023404s ago: executing program 3 (id=937): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x7a, 0x29, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5m19.622594074s ago: executing program 3 (id=938): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r0, 0x6, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @loopback}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r2, &(0x7f0000000280)='27', 0x2) sendmsg$inet_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000300)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) 5m18.189291073s ago: executing program 3 (id=939): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="64000000100001060000000000000000000000007fff00000000000000000000100005007665746830000000000000002400120008000100766574681800020014000100000000000900000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) pwrite64$ublk_bdev(0xffffffffffffffff, &(0x7f0000000140)="d97bd4cc34de3b48de0ec2acb2a548aca481c7f0d2e1b933e764444d2daa9d9a73390d52cfb0df3e132f024f2381e1ab29e5b976140e0f6075cb98a501c20f9b245635d4124588ab248cbcec0410b0d2b8285a6efcbceda892481f154d67013d68abfa32a3de95b9dff25e0130c6cb14cfa8e3e203ca6a9360cc7faf0cb88c6ac0d6830f7a342bcb10f813881611b9af403e136af98d6889f9246205eb25e28226a08f7f14e6917be4e570cb174af2ea715bb11eef89ef20d24a134574517c9e6a100e354a", 0xc5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1c5) r0 = socket$kcm(0x2, 0x3, 0x2) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='mpol=interlReave:7-', @ANYRESDEC]) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000600)=0x6) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000580)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 5m18.014316459s ago: executing program 3 (id=940): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x1, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="bdd9d14588e6b7", 0x7}], 0x1}}], 0x1, 0x6ef8eb0211163289) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x38ff817, 0x0) umount2(&(0x7f00000003c0)='./file0/../file0\x00', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 5m17.569012586s ago: executing program 3 (id=941): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) read(r2, &(0x7f0000000280)=""/182, 0xb6) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) r4 = socket$kcm(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 5m17.310039203s ago: executing program 3 (id=942): r0 = fsmount(0xffffffffffffffff, 0x1, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x1, 0x54000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xf, 0x40}}, './file0\x00'}) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x8) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x7fffffffffffffff, 0x0, 0x2}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f0000000100)) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r1, r2, &(0x7f0000000140)=0x1, 0x9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x7, 0x3f4a, 0x2, 0x3, 0x9, 0x4, 0x3, 0xaea, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000200)={r3, 0xffffffffffffffff, 0xc00}, &(0x7f0000000240)=0xc) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000300)={'ah\x00'}, &(0x7f0000000340)=0x1e) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000380)={0x3, 0x6, 0xb50, 0x80000001, 0x6, 0x101}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f00000003c0)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000400)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000440)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000480)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f00000004c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000500)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f00000005c0)={&(0x7f0000000540)=[r6, 0x0, r7, r8, r9, r10, r11], &(0x7f0000000580)=[0xd2c, 0xa, 0x3f6], 0x2, 0x7, 0x4}) write$P9_RSETATTR(r0, &(0x7f0000000600)={0x7, 0x1b, 0x1}, 0x7) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000640)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000680)={0x40000008}) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f00000006c0)={0xb6, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000740)={0x8, r4, 'id0\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r12) sendmsg$NL80211_CMD_DEL_INTERFACE(r12, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r13, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000900)) 5m16.846333432s ago: executing program 35 (id=942): r0 = fsmount(0xffffffffffffffff, 0x1, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x1, 0x54000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xf, 0x40}}, './file0\x00'}) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x8) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x7fffffffffffffff, 0x0, 0x2}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f0000000100)) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r1, r2, &(0x7f0000000140)=0x1, 0x9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x7, 0x3f4a, 0x2, 0x3, 0x9, 0x4, 0x3, 0xaea, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000200)={r3, 0xffffffffffffffff, 0xc00}, &(0x7f0000000240)=0xc) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000300)={'ah\x00'}, &(0x7f0000000340)=0x1e) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000380)={0x3, 0x6, 0xb50, 0x80000001, 0x6, 0x101}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f00000003c0)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000400)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000440)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000480)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f00000004c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000500)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f00000005c0)={&(0x7f0000000540)=[r6, 0x0, r7, r8, r9, r10, r11], &(0x7f0000000580)=[0xd2c, 0xa, 0x3f6], 0x2, 0x7, 0x4}) write$P9_RSETATTR(r0, &(0x7f0000000600)={0x7, 0x1b, 0x1}, 0x7) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000640)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000680)={0x40000008}) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f00000006c0)={0xb6, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000740)={0x8, r4, 'id0\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r12) sendmsg$NL80211_CMD_DEL_INTERFACE(r12, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r13, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000900)) 2m58.67356365s ago: executing program 7 (id=1958): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000140001132bbd7000fcdbdf251040"], 0x24}, 0x1, 0x0, 0x0, 0x20020000}, 0x40880) accept4(r0, 0x0, 0x0, 0x0) 2m58.58462308s ago: executing program 7 (id=1959): setresuid(0xee00, 0xee01, 0xee01) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) (async, rerun: 64) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000a9f76ad01e699ceea7552993112917b0a08beaf5b2fbbaca5af2f97dce6e833a4ef7c5e72f8699fb6915c87583f34bbc7fea93f4db4565a5f155eb6dfa4513987172ff4f5a7f6d2382ac9d2084b53be49b660efefadc22d6d61bb623061caa73001daa4ec13b2506154eccec49974faf13d9d8b49600242d029fa0edc801c1e79b79f0c7073dacfb3795458985dc7412baf75bdbc50bba866eaf4430c58349a242baa01726535bf510576a235ef70dbc753ee82611c8703d576443cb15f42e24527", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20040040) (async, rerun: 64) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendto$inet6(r2, &(0x7f0000000300)='X', 0xfee4, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000380), 0x2, 0x20000000) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x8}, 0x1c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x38, r6, 0x1, 0x72bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ef, 0x1, 0x1, 0xffff, 0x5, 0x2, 0x7, 0xb2a5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1c444ff577"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc840}, 0x40000) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) (async, rerun: 64) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000140)=0x8, 0x4) (rerun: 64) sendto$inet6(r1, &(0x7f0000000180)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c) 2m57.551821452s ago: executing program 7 (id=1962): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000007c0)="5a199a7b21709c83e621130bbf5975f40a808deb7f379f25fcc0dc0051f5076fe21c37983ca7e92deff0eaa385aa1b9951c8c369ad0089f9ad17dabd60f35a59ebefc3888bf6625b3eec960246cf95ae61f5445ead6bdb86db80a0df88c3bd47408f43ad7bc23580b863234d666222f5d84595e5c5100c2e0ff41fbab7eddb1fb3f6caa67d2609087d4f4b0c3d3616e06d1e4dc9503d4fb73ccfce85108941c890efab12b30d82ebf0274cb091022f46ae2dd9b1daf71258fbb08b0c6f0622b9b3b0dc46bec620e7d618041246965ce5f545cc5edd63fa67f9712a508413b0a46b9c5e823c808230da2cb52c675af2260f2595c38217a94fc49f142e2d4f82dc5487f8ebb61488606a6d170facee6e31b9483dd3927f56385be3d03931c8ddfea3dea54bbf2ddd6637c47705e3035f3e295369bfaa9974135abd28a3d3a1e18bb812409725eda1134d57d2e29fd2bb36217c88882547abed2a0d9d09e3eb73a328aee42071431d6b32d0ce42debc89a1c82d361ac177a411f4363691542886787ee7607941e10c1b1003b63817890480e8e4813a70f080f4aceeb42ec41120274deae71f1c6e2fd8e1bc89e53467d96f6539073ac9c7918c74c56825701b371018725f6f1bf86e5c40607a6f3a506285fa50342bc0cf9d9fb0e6c6f5c7d2f02cc31427210ef8a28f753e2c312722e10eb67afd8d661070debaac672bcfdd80199f214ea95dc7818f7ceeaeb3837da1ccef43cdfa31e9b9802e7c9ec7ab608d09b5de32345de5ff2992f0c55a4e122d5a7ae884bbe3b979923c21b65a51725de87b5a7b51d033826d4ad5a9d1d76f04dd15c4e7634b01d38bc3c2163e6a2a67164fbcf7a9f9c2ca920f3d195d6359e07e24b599635810691a2c0ed12038e62b6bbeffc573c1aaa59401ded9bc3b70c2d74041510d79cbdbba32eac0172b71e2f070ab6c0c31d24bbfe143f0fafd59c0811c9249948af7f40b59829b11a8f1ae1affa9e683fdfe484aef9713cf8893101056ad58247f28277e50601a325c1670167cc5f6b252c9d71aeefbf3032bdeb25e4a11de785e5eafdf5e43c33dba68ea71fd618cb09ae9fb6105075df92dff242f4778d329a0701f7d4007fb1ebaa536557dcb8a8bc052d19098338fe55d0746834f823c0f97574df89bbd40496effb798f7d86bc13c66e953bef24e1eb443986d0e111dfe697a82460d5e04d621594c59650eb09d77d4613df8dbd2c32dd95c215e8c908a2950fa2676df764a254057835dc90158903577a0dea313b523972454bf28bf6f0c36bdff512982ad5e1cfb7be980d876fb1bde281105cd60e9e7a8046cf8349253dcc075cc7e4cd4e671fde83000b2bad8a86327dc27c47acd3293774736c3a7fba1103c80262868f70e0b8ef8b62799068b433781069932bb619658fafdff67a2d3be8409a329b7154b0500483231fae68e36919be829f7a493d850ab059c56782c756f276d2dcd1465103ca2a6e7ee210fcc60deba77356e1d2a31a5b2f74a5a5df281765e2856b74e33099777a34b0839e6c236c8ee676b500e6d12f466d1d1ad44a400261d1efc355d388e5dbb7bc5ea09ff35bb128753c2263b9c3209e186315490ba97a27d23bae312ff90c0ed70297a8c173b3ac55d539bd26ce185e4120ac8b4c295fe65278180a0af3a798fa38ea408d5fafb591d62fa113fd0e32478cea6a2eb2743388b51fdf7c064a22d541e6fcfb3e5dcaf2ec6ef219eca630acb41c29036ad48fc60f99d52760ca98552a036111b59e364d8b9e64cd049c4a064e2457622421dc5a39e510603670a313aee939fc7fa9e2611d5cd219292c7bbf2db998f1337f9d2e953aed7f991899955c07665073a3cb560247566eafacb6716488d1dc0f8edd44bde33a6f69b644a133278e17c696254356aac7e1b75f002a9b8184506fa05a8d056c20bcf9fa500bacc0e49ab5d1f4b1d2064a4b061865bebe4684a0631dacd2c8a18a30726bdc93457c1ecc34a7c0085693d33953ca05845bd22154a5785a9c514ec92aad7a3c24afb5e86a611b3b3a9c0ee8fb2cc38e20926d5b167d9d11cb369bb5f20ef6e5bf8da0c9f7dbeeb7011e7725b8451eecc7d4f45e5ae2a3002f0864a4deb9f23f43f42e2a0344a626b94854e5d7a367cb5bc10a0873b9d074180d434d0cca9bfbfbc430a577befa307ac4ca3beff38f95e0dfa645f1e14cf84970fbefe21454da064560275b7d8b1c7047dcaf50dbd39843b65fdf78b30a334c46cb36d1c1194d2f25a800f235a2ba935e2372ea4f603061ed2b78184a62177a03a6af5b14c70d690e049b42d30f2aa3ca8a76e116bf61d2d303c35b7d82a34b02d5c074b9850a86bb84446057d6648ea57bbbd55ff71182726d9384beca0334eb873d4aa3987a8922b8059de38bff0fad482ff8710a9746f8e9f5eadc42fafe806f87cec6d48fdcd13250b6d796025dfd9a5589129d1f58c4c6ac7361f3c0e2af5fa72ec453e5ff5f7db5c21e9f08e558b58b62e708335fe07f6a53632af8aed1426fd97f3c51f446018758236f724a47be674a0b0cd388e63e5f67fbe272e59a9436422a1654e7d7dca1745fac4fd4a87305cc8855018e226e63923ffd412c0a2cf4102b7428b25717718506e947cedaab883b7e1b2f9b438d1a252411fcf4787e93a96ae273df5b1717e7c23cd334d6d5bfd88790863b2296f5deb2702dbfeea80a0009a044cdda495446ff48e8b592594460117ff67f1f8d5053ff252b2271efeb259b94a854b9f0855a2ae40d59efa378e4a9a3b3160ab718753e4e18f47bddf519f2d1164417dd84bbbcd0f4dcf4daba9de73c834e2355d2b3c47468daff77dac7f4ff3064c4e392e11b21fc17868288fae8d9d831c170d26b4a692b6a2421e028ed233ce315c8e9db6e9e5584adba3d8cad0d6cf451a127f4f5352ab8d60da06630f0cc6129b0262b46a2f3916cb05c8b5116de29dc262794276fcb48395d41cfceb79905bc4c71b83866b68980fff49777e6dfe9bc5f9b2b657b01550227b852c76a16e3cbf8f4c92f549cb1beb46e8738f0d353759118f934ba765420b6c7d42d5196cb9b59f27359def0758c9e08e5d391f40b1da9b2174132852f80c92b05895e9f2c27107f9606a9b87955e4da3a85cc0685703218cfcc326e01008f0e8daba71cc11aa5f9fb7458f1e38ee2bf1bc954a3e957db29023e602bf7b2c54f6422f1b33ec277c63a9a39031e56bb4d3abf0681a2d2587851ab2e66d79eb3dd2c9363530af9c70eb5e73978c8a2541a6123846a25dd0bb3c61e699ce5f4258904512cda3e26b257ff9af78328432b86c30350499137c623882f0795a2e103df20df37063da791f84623204523fdb4b038c80217798526afe4e3210587dbe0c973d3d9eb15eb43b7ce8ad7c549137961c36faaf2fd221b60f0bb923a2755e4f688ad8de8ab2027157895749f2ec7268340392edfb93a0eec2260aafb0aa280be245a0c544b229f3ec90098f15fdb09049920a8e9e2b93145a3a7f39e30f7e99e351cf99b51ac8829eafc9f6734e6c057861e31d23f680084bc7ba218d08b88f2b8bc1e228e32bc22284b1725be40f73560e41960c2cc22dbb55fb55b74fe31d0e8df675b4ba357b29345b888468b07a876d046796db2123c3cf4003de496976e0d3249d8720361b77097033691b0beb36030e46b0d9409662c63f3d282902df37bc233c51e74dab73eba1b2f1c256a0ec7faa778c7ae79fd42af4e8a7945ededad5c04e52d426ef20e7338b5a342096d668130ce4cc71338ad03b5809b46c3dfa2b42c1c1cad4846b793af2396d7a27047af8bb7b4d157bb3cd860bcd87c18e64207c2248c05bbb7148927347bfaa728361b29e610aabdba944401fe0387836bcc03379cb5ebbdfa64f834a54ce56670c735e05d10f2c5815ea572e387fbae9484d7a4fd7d895a73de8b6c17957e946ed64ab0193037f4c3635ac046a6877c0cbecf734587e34bb8d26f183ea169c87c66a4d5ecdb7dbc278ed5a3b988d58995442ded078413bc0db095e5e3bcd745b33761e633205d3c63f5d0b30af9570022d651e4233d755a3400556702294ded58b28243d69776ed3c525d10f2cdcff296922b5db2729ead2fe48c18172ccd604f1131c63ab23906350078102eb9c8cb0dbe936b7ee4ff2f02c3a496ddd3c6dd86e302fdbd43e2d0d065cf394204aab6d34f8ea5b95f46d99dde6d2d94ba9d3c41be542f4ba9a2a5909a459ebf005cc42afc00064fd154527c456c095b017ce946db770634bed15caea5f7326c0b31ebef2e551e9b7d38083e16c33491babe8efeddb3b76e377c658ce4898676ba262cb8b8d2af0b3bdf66cdd40c5c2011bf8c153d57b965fec928ef60c5fd49369b07fd8960403799539797141e3cd890493d0fa385f02c7f9498687952aec67f35ca0e7f45847465dc7f54af1d06714bf08c7106ffc2b6ef50411f83c5b0ec006b1ec62819ed9f79ef2970720ae5677dc5687966e8a4cb6484daea23e4ba0cadc43b6d815b0a383e13f076dc13bea1ef688c3b4ea30e6902fe654b76c777197df1ba495916c81c321e9a0f8a80ee45777ea97ecdf6f77d57d9441c4d2ce796ea987ae9adc3394c9e18a4b413d2fb31f119ca3aac3cce5306e49cff7ffafca491d55c9c0af78312e1f7180442552ad933ada2239eaa1cc36cc4e3451687800d1dc3a4d1069fd84363e3338a161bbdf271514e62d3e2c8bfa5f98a0b01e5fa5fb7a52b582874e46f51acb39dd7a57b4a3e9d0bdf2379bd512a5ed4f64c9701c4d44eedb1e758837da5ca1876f3e56a443503a490492f6ec4ac6aafe2bf7f53acf8c7fd3b308a455aaa3b19137e9c046255c8d7857b0e06b90d3606b85615c46e3d076abc9753f028ef10928b7009d876e3f37762cf678e3a956a87e6579f1ea7f8ef9b528d32c64bde5d2275a0edd9a0576b5a6cdb9cfd5f832f5afc6c9b73ac157a054baa2ba97a1c050938a8653414644ae78c1b63fdfb75944db52c23f1b50abc2788de07abb34225f760a406d8c06b6f5c3f9f08b4c6f5b2c78dc37ba72f73fa80f1b234637c1a3662b1a2342c4aaa4a15632525eb81e61983ddcfa4dace5f357c3a62da329a040875cf771b310bcc90fbf6cf2ea9a330ae4b69951a01767c1a8c3a3442152a89328cfbc97128bc83534dbb759eb6baea1b470d007a6c246a61cc5d72e82aaa94132883ef1baf756c84ed2a92e9e03413d31a79e97be54afd6dc660e5bb45901ca4dd2ac682fe64b76a170e4297706fcd77791bee2ed047bcbdf1f6a843dbf41714cf37035e006a98755092525fe9b5ac2f7cb64b51c9ea1b76318286b93c674ebcafcd0741f2e1718de37c244ee70dfee6ff2d1d5261e1e89fa868e725ac2c1f760b29c8dac5d12d86f7662bdc70aeb1b7716e381b2056c225b8b5465714e6e58fc2520eb1b11eae1d695ee8a9a1cb456e52afde99db06e31523b3265e7279aa9acd97b0bad6cbd819702877312d398e90f7f5ca63cfd2d1293cf6fe42419baa58a29dcebfe345242e4e1ae4410571ff7c779383598e46803824445b5dd22aae2d956d18be7cdd85a8c490403b97d0a41e1e2a69e96b671a87dd159f774941e0d760f22f54b613d8094cf9eaa31c6feef19b19b1c857c2b3a52bfe66c6052639d5fe7cf15863054b515e4b161718885ec6f78eb6570b093295b0912c97ba83e0b542eb524fc42fa2f30bac808d7239ad5564f5d2cbb03fe8dc4a8ad01477d62e81727f36f5d955d56ff277d075603196975c62b8e782cec0b8e98498e2184f0bd43d124c01cb87b22c92945233b69806308c3eed725dd698a359137a9223bdd04e96fb0512be4f41daa14f271459f80df84ff9bba27fd1880f924e2012f47f6f85f1ac0ca3342b423d58cbffa319374e71d6760965ef573fa52ff05f47bd2fb8523e19d7af942880959b497a36dfc834220b5501e38ccc1301e3376a72d5abd919ed85459af53808067eac34492a89e03c40f60c20db323e6433713c0fcda5927bfd649aea74db15f150a18d2d70ff3180d2fee75d7cdd7707bec13340c1ac9b774ae69a55dc678e1fc0437b1cdbce66fb3f2c67378ac19d7963e167c61d9eee7a702b78d13067aa0fea8d224074355da79d509e073d8603d756aacbbc79875655ce6fb0b9522b44215b3bd48297b47e889a787415fbe70de3af195d8eaaf544a60d8370e063df648c2f8d6261a012a4cf7bb45d76f496deea338874c340796e191218d481839d587f75ce1a90c1a636e0e439c73cfa0650fae2af23049a0ec710c3e527ca848d74a8f418aa0112f28e1b021cb3b2a6874db458c1a7fca07a5301b9bc1fd8bf64e5832a5a7897bc644cd11fb7f9056dd651350d6cfe75d4c4d292ca0fa5ef65ff607c8f27b24171cd121a1f80be293105033a45bbff6f482f2cc6edfbbd643af2864ba7fefcdb1165cab9a1a4dff5ccf6ef5b355fcac45ebca5c7fd5e711d5b62cada635e8484360c80899431f3d093e40cd5fe51433766be0b4c149ea9011c88d752226cc1d434c84e5dd484c6bbb284b0f4b277d38f168879b163ecc848459eda09903f96cfc8584aa99be05f31205cbbaf06ff91da37cea4273eb2aa36ccd9f6d152140dd504d700ca7bcb005740444631f40ea032efdd8a6403303b82b4ac22e39f34e2d9aca04f434fb15785912d20ddbc7eaacdcee3412506072f61f1e851ef037fe5f1e4be62a2fb756e8fba476487c15a7d6d071bea4e7d1c5b2d30a013b9f0fd1007bd2336b918c375853695a4806cde6f7f613a2f4023e7205251b19aae73cfe2cf278c41282befdf4a304e0479730261d276ea8fa83ef74fd53dc4fd6e0779a8e54e4ef8e6bdf97f5c5f99d70e4b9f5e5229d8888dee3f2c78bba9d56d778b7ec426a83eee4b0bfc25ee9380862355bd8370d04f89446eda932340a471482d84af5d7d73a8dddb245309d3183dfb0805b45ea6d2cad514b18f98ca5c963c3940161f85664187ccc9d7bcc0b14d7c1dc0775c5b3cdf2a2c7452729475a17dd89147f75e5614ec77562769b29fd1fcecc38dcef1464cd6c0a1bb64f5a9505b1ed04ae063a2ccd9637e13f8c0d295777843267b42c774bbcff6e22d12b6da45dbeb3f134e0cde783449453381ab06591401aa168433faae309dfa02bb3ea89906df7271ff45215ce7a9d6d99f75e3602bbc93498a8e0ae44bc89eaf25c12ed3fbaa1e36c3bb9f5027fcadab8efa0adaf5ef7daa20d1b2e663d8e54bb00656260dd0d01f4be2980e9c585d7dcee42b1966fac6f3536f1cd9f860272864df38851020cee93b89f12e2464a78a02abe9d102e1d36bf34570f75ee88fc5d4ad7b8c7f8c3bc0ef3066fcc8f54563a5a04af78f60a6c42ad18ae030dde6509422d3ba4de2054faab91153e0e836e7339928195167b7c0610fca01b4cfabc643bc200193ac8be6199ae22d25f1c21810a4b04ffcf91819849ad18f739a4afdffa224a9855d480d7c1d334fbc2747367354bae8f61edb1c9db2000eb3c70df166753a4b3bedbe5a55c773bbf5c63f173388fb1743c49e55c3145b288c499bcf3b8e7963461d9141ac2d897042db72d613ad82794158b13a110238abbb553d5dcf48fb07eb0daca0e0e9ea865be91f8af0407334957d420a4e9c168f3eeeaa1f086d57eb0c362243348b9afcb932a0752cee524ae6f2a7b968e3c8e86df9926c8770a35379f8301264e9f36a76ab38199cd2f91adad1a614496d1e962931a0ff491317d66643975ef3091c86dc56bc79e12a462977c162d58f23fd803e841b779ba4d1559e00b5254409ed953607c97ede71a72817480b32b8d47006dea59a9c64b6d0e99013089d7fd612ae495b571baf4d1e4279fcb9a34a5b376fc41ea9ebac14c2938a3e063962b29e8764eb30b0813872170ec9bcafa0a29e445db13b34c093d409f78eb502088ffdcea690326c91d105f1a67c88e41920e9497734f8859cfdf36e64806bff46ef7a6cf4f098cf08c5920f19951420d4eb882b1455fbcac998d97a1407ef415f6ff8fe2905c84984fbdd7397af7facc14f6fd6c557e1c6365bb24de505297b74f843e0e51ba52156824b9942f7a260f417c067436bf6f82ff308f6fbaaf0e1f6d17bbafe76af7fd3642c8ec12d46eace1fe314f7038f214929af665a46ba9e6f805211e4d61e1e237585e447716cb86ab5013c8dc5cd9e2c5a0e26a44308ea632fd138fc2419403cafae504a46d7237f0ab6538c2fbbfb3e72f76c348f4c545c5bbf2857fb05dd74d42e13fb320e67393cc4534700b1747cb14a05c38aafd64a82cfc4361fc94bd970d3d0f30fa839acea1f7168f19e320ec68a9b4efe8a04f15c609570ce7b6bda57e6e97d3f9d09b146fe3e23f2f1ff344300ddfcc7ef79f858978df1437d3f53b4a01d4eb26da255ba987547c4d503c80e5f239138e12bda4acfb2a2382e0563c8d4f396964f4a7dada3ff461279646a418a2696efa8834adeae2c5062e6e73893279e743db53f8e1d60aaa99885b7ed3b5f38b4e3608b66590cac579778bc0f9b64965901f013822868c01b8742959ec6c90fec7793d1926e2f87e7c5ef6a711574d9085a57525771c5fa7aad135253547604a3d195da3c8b8182ba38a9ad1584ac7f2d9754db8859dbfdbc637291825629cc14b067427126d20a5b008f9fe623d9515dcebd68aaba99ae79d0bc3e02ba5a73e40bad281fcf8858dcb00d3d7f2d18f487f8a1c46038bc34b41aaa2770aceb612783690fcc4fce631954b37327b66a0fa7b977801c969ce54f2c783dc337cea7abf3b4663243893f158a2166d4ddf005a02a1d0a5cb39436e7aacdcaf36727397402958629f81aa8ffded1823a0c5093cbbb107d6ed309c2824c3da080121d4ba6637f14af771b99b061e21ab3babee6d8248031cad63fd1f4395dbf07b1e949ab827d651bc6194debb0b89927da600c078ee887f962c562e3debe0f5d7a1c6083f94c5e33c32cb4712a1ce6c68fd34731fabc53fa1f9088963959f2c6c4eb06b5d835b45bda6bc0d3ca819617183a714d8168c1f782535fd0289eabe9f45a8da466b910888be395c28310e8dda11a94bacb2f1c22c613048888ab3ba076894d73d45d0e202f61143fb9f81efbaec0e69325eaa24c80a30563cac9302461cc3d8a578fb212dc5ad2f5087851bea708c1a7443d614041c4e220a3bc203d5f693f042a3f1e56cd5914f55306a812da40a479111c46dd28263eabe1de15d53ada5d6bab2508d60650fb15ff8b8155202f5bfe1415d4cf37ec535e8575ba1902ee401fc9406a8c8a88e20a223ec177dca58fdffaccfb12cfc55f60652522eaa1f0f6fba0122366978f25c5dac5e6a2851890ae3938ca7b947dd65cf6d20a1215b8882aa27622ad06bbe8101ee5699e2b6b4418a5fbc7dcb49a87581660106ce01816f8d152fb30171a4b15bf831fc15ecd52d80bc910924e766e32d5d5644d53b5ce6640a55b97b458cd4d2235c0c05ce5a6e4d8afd5580c1d1d77a25b7a65257ad596fa686bc91e9afe05f35abf640dc329fc47b03a6cbc7ac4b3b1367b0c091aeccd547c5d20d8aa91923dd12b4d4653f137a5feaf4702f21d2faf7a87450e3b6827e210d8969b8b4f935f64f5dc3f3a8206d33b319f72eb90279e3d4eb923d7db5fb28a5828487701dd7ffc4a8809188e7a3cc3ad1e20c1608cd7ed3228af1629827580f6f32d68b53e41e75f2f3b45ccb20c2d7106606a1172037b4608bfc0cef42d4dd831973e3e483f1185b4c0fc90bcaad430f8ecd8a0217dcded1b777506c6861b078df602864800bf87eaccec1fa5d1694c6e058a0e19d3cee089edcf515c2459fcd3cf02e7885fbc9bf4209ae7b922949f7b383cfef6a7150c85ab539b8f2a9cfbafc3cce0d809486282af96b866ffcc6ffe2c7e6b26a49f44a3be9b6790b56848b650424d57d4aa141c269dc5a7fc609f1333ed332a4d798191c693c7c584b41eceb82721c717be763605e4de8e12945d693990ff0a6c9f9967986cc4d986855e1dfa55e0a89fefebf5b1e57f2f9d13daa9ed2aa7a589a029a9f1381ca8b94b2a6a7735b6c39370000c69438f3aaebc5e1f196c14a70c67bc8a0988b177d704f377576b7010fd84d076381bbee31a021d002dea8cb3bdf92a98a3111c6a0d1560cb81ced2d2603f45c9c0f754f183813dd7534572eb6d339a39ebc3e7bfb804dfe3ed2b5fd8dfca6175a27e6d9a94eed59151955fee6a59deb1acb8b58a2f55419627105d0dec00a327e0ff6c317ae279b04a5b25073819a552aac69f99c9fb0c870867841aa9b460a37111736359c5fa972cbe85132d38e777c1e504065d4808437c013a65500e39de777d88a0655a1c1aebc59ed42292239ba0eb7bd8f68e5d6bf437a6e2652bf3972ac2691c89c0f20a98cf0991ef0afbf500aeb2c39bea34b3448eccd576b4ed7ffde26fc2a758922d5c8465564e1ac51e47d17b614b8742e9aa690f740c0233fbc48b9f84a318a46662f7830e4e4c4df44e036b716d622a65872fc80cb0087123b1219b593daa23818cf24bbabf9257e4dffa89ca828a745b401883b4d2cc62d57fa875e3dd390b404e0ead534415c3214671729ae87d206ccf8fdd9efff01eafbe4d65606e504e2e6ed741cacbd92c2a9cf7b5f25c82706fc2c09335b6c004723eba6c60f306590211068167e99a4e4e62d27d97cd46a9b99a1436e4dfc92d0812b99e36aaecb330706b07d18a5c83e53202fca33d6109dfe7dcad981c8524d33259527ba5667c89da6f5e5b81b9dfa22282531e74d277424cd616de3c03171292c656af343b0d789087a90a4f0846a403b5b7f486b6274a447e5b8d14b450db03166f8e05a8e08c8aa9737c039569dc5899652609f126aecc439012fe3a320fe9bd330885380c17802ec541ace9a2726bddda44a45804aac733b5df2acf9ec1386f252876d0a99dc754bf902c9f566c6e21205cf8d0b052abbe1f9ae8248bfb3d05548c9cf58d4e575c439b882a98b1c0caa77275cf2bdfed41a9a1fa01a2ed11f1f949838a59c3b535bc006940f9f036267a2475d2fa463d60df61224b0fe0ccd06d028692e80b4efa02a13ebe8ad9c0d833bd8bfc72ea50cd68e3e23d8474d4ae446785a711442b0cd3e5b1c1d7cfa9d1f31c76a1ed74f16e79f80fe25d40c395e5ace46f69a400c1f94417238ae8f796dca3f73c7e7989daecf90878e6be118c562d4e92d1031fe3427e1f485ff1b67eff560c6314e4b4318bd897f73c949ec1a5fee70bfbcf6dd5d57f1dfa2f32ae9c80dee2c9eb50a65d044bf69a599064dba0719d4685612f2c99f3f9efdde692a3d070afc9ca43f6c6c8cb92508b2af7fdb5c365ad47134a2ecc5dd72628c9fea876b1fec76b047e1f68f394094e49e35c23e51ca950a8c238fc693451f672d79bbc7bd3f7e599dc38fa8ecccc2679a8ac0a575d71133844eac42376e56c56524f7b457fa70fb78b2c98f2915d5e39273648921dda1ae1b1a29834cd0e58216c9a9090ea0606d414ce328aa5c634167a1632f622cfb3fe8b72c663924e30b013313db2f39e2903b837a6c90d442b9d9295cd878", 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000640)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000006c0)="671723d7c6012c", 0x7}, {&(0x7f0000000700)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000740)='\x003\x00\x00\x00', 0x5}, {&(0x7f0000000780)="2bc4", 0x4b}], 0x4}, 0x20008b88) 2m57.272250758s ago: executing program 7 (id=1964): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='select \n', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/file0\x00') mount(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') write(r1, &(0x7f00000001c0)='file read /etc/passwd task.uid=0 exec.argv[0!=\"s\\\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="38000000010001", 0x7) 2m57.170054087s ago: executing program 7 (id=1965): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x3, @multicast2}, 0x7) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xc000, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0xa8419, 0x0, 0x0, @by_dev={r2}, [@cache={0x0, 0x1080, 0x0, 0x88, 'cache\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '64', 0x20, '1 passthrough', 0x20, 'mq 2 sequential_threshold 512'}}]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000100)="520003000100b8", 0x7) 2m56.816186895s ago: executing program 7 (id=1968): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000009c0)={&(0x7f0000000a00)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xb000000}, 0x1c, 0x0, 0x0, &(0x7f0000019b40)=ANY=[@ANYBLOB="1800000000000000290000003b0000002f0000000000000018"], 0x30}, 0x40440c0) 2m56.356143194s ago: executing program 36 (id=1968): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000009c0)={&(0x7f0000000a00)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xb000000}, 0x1c, 0x0, 0x0, &(0x7f0000019b40)=ANY=[@ANYBLOB="1800000000000000290000003b0000002f0000000000000018"], 0x30}, 0x40440c0) 6.035595144s ago: executing program 5 (id=3180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x1, &(0x7f0000000000)={0x1f, 0x88}, 0x0) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)="1d", 0xfe3a, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01040000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000408000340fffffffc08000440000000220500020007000000300001800c00010062697477697365002000028008000340ffffffff080001400000000c0800024000000012040007800900010073797a30"], 0x104}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01040000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000408000340fffffffc08000440000000220500020007000000300001800c00010062697477697365002000028008000340ffffffff080001400000000c0800024000000012040007800900010073797a30"], 0x104}}, 0x0) 5.737869374s ago: executing program 5 (id=3181): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0xffffff2d, &(0x7f0000000300)=[{&(0x7f0000000340)="c00e020031000b05d25a806f8c6394f90424fc602f0009000a740100053582c137153e370248018020f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.536623949s ago: executing program 5 (id=3182): r0 = openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004280)={0x2710, 0x0, 0xf0000000}) 5.091520812s ago: executing program 5 (id=3183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f0000000300)=[{0x8001, 0x0, 0x1, &(0x7f0000000340)="d5"}], 0x21}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000001c0)={0x10000, 0x1000}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000380)={0xca, "a982f8b9da104d6735fac7d61dbc1daa68b64e27186d013f752ddd95a07d0db08641a51365029bad99ac72b50384dec913af209a0a71b86da73b1ae1153ab8237e9da06958a5aece339a19eac91280e2dc0f28ebfe0fef145265d094023a0f76de20ca9ad021716722ff7dd6fdf215b017914aac8252d5148a94efffd544603ed593f718416e1b9789db0326afe7a229158dd477db314610bc0a5c79d817624f48f8cf568247d3d3cb02f787a461d4a36510312e60b99710f3fae8f3dce554ce519c713431fd9f6549f0"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.795875539s ago: executing program 8 (id=3197): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044fe0009a8001600050003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 3.726739918s ago: executing program 8 (id=3199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x1001}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='/dev/net/tun\x00', 0x200001, &(0x7f0000000040)={@align=0x4, {0x97a5, 0x1, 0xfff, 0xaa43}}, 0x7fffffff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xbab}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000140)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000a40)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x40, @local, @local}}, 0x28) 3.481431527s ago: executing program 8 (id=3200): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0xff, @loopback={0x1000000}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) 3.352110066s ago: executing program 8 (id=3201): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='0\x00', 0x2) chdir(&(0x7f0000000240)='./bus\x00') prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x1000)=nil) linkat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3.251118281s ago: executing program 8 (id=3203): mkdir(&(0x7f0000001340)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001380)='mnt\x00', &(0x7f00000013c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES8=0x0], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8f, &(0x7f0000000040)=@string={0x8f, 0x3, "de0886d5f456f59bc0112c2bd4f70c8961a48de76e4e6e974c256cb83e8c1023d0b57eb8cc261637c1a43603bbeea760a8860d4aaa397de31781b01651fb992e9d96d8fcb8de6b5ad6af623e9641861384f1e242366592ed208806aae67df0811df474addd109ff436713a65d3fef4c1114724a2791344e09faaa1b705f4dcc20221ef57591f55f9828602ac01"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x423}}]}) openat(0xffffffffffffff9c, &(0x7f0000001480)='mnt/ttyUSB0\x00', 0x2, 0x0) 2.800519945s ago: executing program 5 (id=3207): socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0) eventfd(0xd33) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = open(0x0, 0x60840, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f00000001c0)=0x0, 0x0, 0x0) syz_ublk_add_dev(r1, r2, 0x0, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = semget(0x0, 0x1, 0x608) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)=[0xd7f8, 0xd, 0xfff8, 0x8, 0x6]) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES8=r4], 0x0) 2.763489882s ago: executing program 4 (id=3209): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x54b, 0x4, 0x8f, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0xc8}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xfffffffffffff000) 2.61373435s ago: executing program 4 (id=3210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x6}}, 0x94}}, 0x0) r1 = open(&(0x7f0000000740)='./file0\x00', 0x60840, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000800)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000840)=0x0) r3 = syz_ublk_setup_io_uring(0x4b74, &(0x7f0000000880)={0x0, 0x4, 0x1000}, 0x0, 0x0, 0x0) syz_ublk_setup_queues(r1, r2, &(0x7f00000009c0)={0x0, 0xe4a9, 0x0, 0x2, 0x257}, &(0x7f0000000a40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x10, 0x1000000, 0x10000006, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x144, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x1a0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9c29, 0x8000, 0x1, 0x2b0}}], 0x1, 0x0, 0x0) 2.49173981s ago: executing program 4 (id=3211): mount(0x0, 0x0, 0x0, 0x4000, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c8) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, r8, 0x7, 0x3, 0x1fff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) keyctl$get_keyring_id(0xf8, 0x0, 0x6) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000015240)={0x60, 0x4, 0xffffff69, 0x5, 0xb, "4cb7e4adf3e77187f7ee7a5397e4e83ae8ead1", 0xde52, 0x8}) 2.479686343s ago: executing program 4 (id=3212): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="4c00000011002914001100020004040002000400200000", 0x17) 2.431629962s ago: executing program 4 (id=3213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000440)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000480)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f00000004c0)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9360, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x173) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f00000002c0)=0x3, 0x4) connect$unix(r7, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r7, &(0x7f0000000380)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000240)='15', 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000280)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.499920643s ago: executing program 5 (id=3214): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x1, 0x802) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000001b00)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.484790295s ago: executing program 4 (id=3215): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f0000000040)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='rootfs\x00', 0x208a063, 0x0) gettid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000001400)='mnt\x00', &(0x7f00000013c0), &(0x7f0000001480)={'U-', 0x7}, 0x16, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, 0x0, &(0x7f00000002c0)=0x4c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000240)={0x2, 0x4f, 0x2b, 0x10, 0xb, "06a872c00000f3ff0040040000000000e91f00", 0xae, 0x7}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000001440)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905", @ANYBLOB="f9e3"], 0x0) clock_settime(0xfffff000, &(0x7f0000000280)={0x77359400}) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r2, 0x84, 0x85, &(0x7f0000000140)={0x1, @in={{0x2, 0x4e21, @empty}}, 0x9}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001380)={0x1, 0x0, 0x2, 0x3, 0x0, 0xf, 0x7ff, 0x7fff}, 0x20) sendto(r1, &(0x7f0000000300)="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", 0x1000, 0x20000001, &(0x7f0000001300)=@can, 0x80) 1.251892014s ago: executing program 6 (id=3217): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x104) mount(&(0x7f0000000940)=@filename='mtd0\x00', &(0x7f0000000980)='./mnt\x00', &(0x7f00000009c0)='jffs2\x00', 0x0, 0x0) lgetxattr(&(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)=@known='user.incfs.size\x00', 0x0, 0x0) 1.198650652s ago: executing program 6 (id=3218): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x104) mount(&(0x7f0000000940)=@filename='mtd0\x00', &(0x7f0000000980)='./mnt\x00', &(0x7f00000009c0)='jffs2\x00', 0x0, 0x0) lgetxattr(&(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)=@known='user.incfs.size\x00', 0x0, 0x0) (fail_nth: 2) 664.263737ms ago: executing program 6 (id=3219): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sec/tomoyo/profile\x00', 0x0, 0x80) preadv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/224, 0xe0}], 0x2, 0x8000, 0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe43) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) setfsuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 331.994009ms ago: executing program 6 (id=3220): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x1000) 251.796221ms ago: executing program 6 (id=3221): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x4000000000000000, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x442, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}]}}) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f7ffffffff17"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x12) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000380)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, 0x0) write(r5, &(0x7f0000000780)="040000000000", 0x6) 52.622067ms ago: executing program 8 (id=3222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0x5) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000300)={0x0, 0x0}) (async) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000300)={0x0, 0x0}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000340)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d04}]}) close(r0) (async) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x8200, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, 0xe, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x20004010) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffff8, 0xffffffff}, {}, {0x1, 0x0, 0x1}, 0x0, 0x3503, 0xa, 0x0, 0x0, 0x8a}}, 0xf0}}, 0x0) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffff8, 0xffffffff}, {}, {0x1, 0x0, 0x1}, 0x0, 0x3503, 0xa, 0x0, 0x0, 0x8a}}, 0xf0}}, 0x0) recvfrom$inet(r0, &(0x7f0000000040)=""/8, 0x8, 0x10000, 0x0, 0x0) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) close(r10) (async) close(r10) 0s ago: executing program 6 (id=3223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r0}, 0x14) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='\\x01020304 -0', 0xd) kernel console output (not intermixed with test programs): config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 534.674933][ T5810] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid maxpacket 169, setting to 64 [ 534.674961][ T5810] usb 9-1: config 0 interface 0 has no altsetting 0 [ 534.736840][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 534.736900][ T32] usb 6-1: Product: syz [ 534.736916][ T32] usb 6-1: Manufacturer: syz [ 534.830514][ T5810] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 534.830541][ T5810] usb 9-1: Product: syz [ 534.830555][ T5810] usb 9-1: Manufacturer: syz [ 534.830569][ T5810] usb 9-1: SerialNumber: syz [ 534.947219][ T5810] usb 9-1: config 0 descriptor?? [ 534.956842][T15387] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 534.971359][T15414] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 534.972974][T15414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.023781][T15415] misc userio: Begin command sent, but we're already running [ 535.023809][T15415] misc userio: Begin command sent, but we're already running [ 535.023828][T15415] misc userio: Begin command sent, but we're already running [ 535.023846][T15415] misc userio: Begin command sent, but we're already running [ 535.023865][T15415] misc userio: Begin command sent, but we're already running [ 535.023885][T15415] misc userio: Begin command sent, but we're already running [ 535.023903][T15415] misc userio: Begin command sent, but we're already running [ 535.023922][T15415] misc userio: Begin command sent, but we're already running [ 535.023941][T15415] misc userio: Begin command sent, but we're already running [ 535.023959][T15415] misc userio: Begin command sent, but we're already running [ 535.023978][T15415] misc userio: Begin command sent, but we're already running [ 535.023996][T15415] misc userio: Begin command sent, but we're already running [ 535.024014][T15415] misc userio: Begin command sent, but we're already running [ 535.024033][T15415] misc userio: Begin command sent, but we're already running [ 535.024052][T15415] misc userio: Begin command sent, but we're already running [ 535.024070][T15415] misc userio: Begin command sent, but we're already running [ 535.024088][T15415] misc userio: Begin command sent, but we're already running [ 535.024107][T15415] misc userio: Begin command sent, but we're already running [ 535.024126][T15415] misc userio: Begin command sent, but we're already running [ 535.024145][T15415] misc userio: Begin command sent, but we're already running [ 535.024164][T15415] misc userio: Begin command sent, but we're already running [ 535.024182][T15415] misc userio: Begin command sent, but we're already running [ 535.024201][T15415] misc userio: Begin command sent, but we're already running [ 535.024220][T15415] misc userio: Begin command sent, but we're already running [ 535.024238][T15415] misc userio: Begin command sent, but we're already running [ 535.024257][T15415] misc userio: Begin command sent, but we're already running [ 535.024276][T15415] misc userio: Begin command sent, but we're already running [ 535.024295][T15415] misc userio: Begin command sent, but we're already running [ 535.024314][T15415] misc userio: Begin command sent, but we're already running [ 535.024339][T15415] misc userio: Begin command sent, but we're already running [ 535.024358][T15415] misc userio: Begin command sent, but we're already running [ 535.024377][T15415] misc userio: Begin command sent, but we're already running [ 535.256185][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.259809][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.266399][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.268123][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.279671][ T5810] usb 9-1: selecting invalid altsetting 0 [ 535.284763][ T32] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input85 [ 535.286257][ T5736] input: HID 0c16:0003 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0C16:0003.0031/input/input84 [ 535.375708][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.382751][ T5736] gyration 0003:0C16:0003.0031: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 0c16:0003] on usb-dummy_hcd.4-1/input0 [ 535.437902][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.439090][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.454909][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.473935][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.490474][ T5736] usb 5-1: USB disconnect, device number 107 [ 535.491807][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.555846][T15417] fido_id[15417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 535.641146][ T5810] usb 9-1: USB disconnect, device number 37 [ 535.670091][ T10] usb 6-1: USB disconnect, device number 78 [ 535.956446][T15419] rxe_eth0 speed is unknown, defaulting to 1000 [ 535.972550][T11443] udevd[11443]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.097898][T15428] Invalid logical block size (8704) [ 536.121015][ T12] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 536.278909][ T12] usb 5-1: device descriptor read/64, error -71 [ 536.315429][ T10] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 536.397655][ T5747] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 536.452942][T15436] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2908'. [ 536.452989][T15436] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2908'. [ 536.452999][T15436] netlink: 'syz.5.2908': attribute type 1 has an invalid length. [ 536.499363][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 536.502128][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 536.502159][ T10] usb 7-1: New USB device found: idVendor=19b5, idProduct=0021, bcdDevice=0.40 [ 536.504739][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.504765][ T10] usb 7-1: Product: syz [ 536.504780][ T10] usb 7-1: Manufacturer: syz [ 536.504795][ T10] usb 7-1: SerialNumber: syz [ 536.542878][ T12] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 536.552613][ T5747] usb 9-1: New USB device found: idVendor=1608, idProduct=0201, bcdDevice=1.00 [ 536.568727][ T5747] usb 9-1: config index 0 descriptor too short (expected 63, got 45) [ 536.568780][ T5747] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 536.568823][ T5747] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.583036][ T5747] io_ti 9-1:1.0: required endpoints missing [ 536.705844][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2909'. [ 536.706720][T15438] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2909'. [ 536.713773][ T12] usb 5-1: device descriptor read/64, error -71 [ 536.807512][ T10] usb 7-1: USB disconnect, device number 85 [ 536.827893][ T12] usb usb5-port1: attempt power cycle [ 536.913194][T11443] udevd[11443]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.173461][ T12] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 537.208888][ T12] usb 5-1: device descriptor read/8, error -71 [ 537.461018][ T12] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 537.484385][ T12] usb 5-1: device descriptor read/8, error -71 [ 537.523638][T15457] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2916'. [ 537.523665][T15457] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2916'. [ 537.602577][ T12] usb usb5-port1: unable to enumerate USB device [ 537.783092][T15465] loop5: detected capacity change from 0 to 7 [ 537.783304][T15465] FAULT_INJECTION: forcing a failure. [ 537.783304][T15465] name failslab, interval 1, probability 0, space 0, times 0 [ 537.783330][T15465] CPU: 0 UID: 0 PID: 15465 Comm: syz.6.2919 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.783353][T15465] Tainted: [L]=SOFTLOCKUP [ 537.783360][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 537.783372][T15465] Call Trace: [ 537.783379][T15465] [ 537.783388][T15465] dump_stack_lvl+0xe8/0x150 [ 537.783422][T15465] should_fail_ex+0x3eb/0x540 [ 537.783452][T15465] should_failslab+0xa8/0x100 [ 537.783483][T15465] __kmalloc_cache_noprof+0x9e/0x600 [ 537.783505][T15465] ? xa_find+0x282/0x2b0 [ 537.783545][T15465] ? bdev_disk_changed+0x4ca/0x1680 [ 537.783571][T15465] ? bdev_disk_changed+0x4ca/0x1680 [ 537.783599][T15465] bdev_disk_changed+0x4ca/0x1680 [ 537.783628][T15465] ? loop_reread_partitions+0x46/0xf0 [ 537.783654][T15465] ? __pfx___mutex_lock+0x10/0x10 [ 537.783688][T15465] ? __pfx_bdev_disk_changed+0x10/0x10 [ 537.783712][T15465] ? kobject_uevent_env+0x375/0x9e0 [ 537.783737][T15465] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 537.783768][T15465] ? kobject_uevent_env+0x375/0x9e0 [ 537.783797][T15465] loop_reread_partitions+0x5f/0xf0 [ 537.783823][T15465] loop_configure+0xeff/0x1180 [ 537.783862][T15465] ? __pfx_loop_configure+0x10/0x10 [ 537.783882][T15465] ? __lock_acquire+0x747/0x2de0 [ 537.783923][T15465] ? __might_fault+0xaf/0x130 [ 537.783952][T15465] lo_ioctl+0xa2e/0x1730 [ 537.783971][T15465] ? lock_acquire+0x115/0x350 [ 537.783988][T15465] ? __pfx_lo_ioctl+0x10/0x10 [ 537.784007][T15465] ? lock_acquire+0x115/0x350 [ 537.784034][T15465] ? __lock_acquire+0x747/0x2de0 [ 537.784056][T15465] ? is_bpf_text_address+0x292/0x2b0 [ 537.784089][T15465] ? kernel_text_address+0xa5/0xe0 [ 537.784113][T15465] ? __kernel_text_address+0xd/0x30 [ 537.784136][T15465] ? unwind_get_return_address+0x4d/0x90 [ 537.784159][T15465] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 537.784180][T15465] ? arch_stack_walk+0xfb/0x150 [ 537.784204][T15465] ? __lock_acquire+0x747/0x2de0 [ 537.784234][T15465] ? __lock_acquire+0x747/0x2de0 [ 537.784264][T15465] ? __lock_acquire+0x747/0x2de0 [ 537.784290][T15465] ? __lock_acquire+0x747/0x2de0 [ 537.784324][T15465] ? lock_acquire+0x115/0x350 [ 537.784349][T15465] ? lock_acquire+0x115/0x350 [ 537.784374][T15465] ? is_bpf_text_address+0x26/0x2b0 [ 537.784405][T15465] ? is_bpf_text_address+0x292/0x2b0 [ 537.784433][T15465] ? is_bpf_text_address+0x26/0x2b0 [ 537.784465][T15465] ? kernel_text_address+0xa5/0xe0 [ 537.784488][T15465] ? __kernel_text_address+0xd/0x30 [ 537.784518][T15465] ? unwind_get_return_address+0x4d/0x90 [ 537.784543][T15465] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 537.784564][T15465] ? arch_stack_walk+0xfb/0x150 [ 537.784599][T15465] ? stack_trace_save+0xa9/0x100 [ 537.784621][T15465] ? __pfx_stack_trace_save+0x10/0x10 [ 537.784642][T15465] ? kasan_save_track+0x4f/0x80 [ 537.784669][T15465] ? stack_depot_save_flags+0x33/0x810 [ 537.784699][T15465] ? __lock_acquire+0x747/0x2de0 [ 537.784725][T15465] ? kasan_save_track+0x4f/0x80 [ 537.784747][T15465] ? kasan_save_track+0x3e/0x80 [ 537.784769][T15465] ? kasan_save_free_info+0x40/0x50 [ 537.784787][T15465] ? __kasan_slab_free+0x5c/0x80 [ 537.784811][T15465] ? kfree+0x1c5/0x650 [ 537.784827][T15465] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 537.784851][T15465] ? security_file_ioctl+0xc3/0x2a0 [ 537.784872][T15465] ? __se_sys_ioctl+0x47/0x170 [ 537.784896][T15465] ? do_syscall_64+0x166/0x520 [ 537.784923][T15465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.784949][T15465] ? __asan_memset+0x22/0x50 [ 537.784970][T15465] ? blk_get_meta_cap+0x19d/0x780 [ 537.785006][T15465] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 537.785044][T15465] ? blkdev_common_ioctl+0x14d4/0x3260 [ 537.785081][T15465] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 537.785113][T15465] ? kasan_quarantine_put+0xbb/0x1f0 [ 537.785145][T15465] ? tomoyo_path_number_perm+0x219/0x5f0 [ 537.785171][T15465] ? tomoyo_path_number_perm+0x219/0x5f0 [ 537.785200][T15465] ? do_vfs_ioctl+0x116f/0x1530 [ 537.785265][T15465] ? __pfx_lo_ioctl+0x10/0x10 [ 537.785289][T15465] blkdev_ioctl+0x5e3/0x740 [ 537.785321][T15465] ? __pfx_blkdev_ioctl+0x10/0x10 [ 537.785355][T15465] ? bpf_lsm_file_ioctl+0x9/0x20 [ 537.785380][T15465] ? __pfx_blkdev_ioctl+0x10/0x10 [ 537.785410][T15465] __se_sys_ioctl+0xfc/0x170 [ 537.785440][T15465] do_syscall_64+0x166/0x520 [ 537.785467][T15465] ? trace_irq_disable+0x3b/0x140 [ 537.785491][T15465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.785518][T15465] ? clear_bhb_loop+0x70/0xc0 [ 537.785543][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.785563][T15465] RIP: 0033:0x7ff03a79f559 [ 537.785582][T15465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.785600][T15465] RSP: 002b:00007ff03b68f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.785622][T15465] RAX: ffffffffffffffda RBX: 00007ff03aa25fa0 RCX: 00007ff03a79f559 [ 537.785637][T15465] RDX: 0000200000000380 RSI: 0000000000004c0a RDI: 0000000000000003 [ 537.785651][T15465] RBP: 00007ff03b68f090 R08: 0000000000000000 R09: 0000000000000000 [ 537.785663][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.785676][T15465] R13: 00007ff03aa26038 R14: 00007ff03aa25fa0 R15: 00007ffc43645918 [ 537.785710][T15465] [ 537.871156][ T12] usb 9-1: USB disconnect, device number 38 [ 538.485530][T15474] ceph: No source [ 538.488088][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2921'. [ 538.488113][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2921'. [ 538.988811][T15489] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2927'. [ 539.703236][T15501] netlink: 'syz.5.2930': attribute type 61 has an invalid length. [ 539.954454][T15510] FAULT_INJECTION: forcing a failure. [ 539.954454][T15510] name failslab, interval 1, probability 0, space 0, times 0 [ 539.954488][T15510] CPU: 1 UID: 0 PID: 15510 Comm: syz.4.2932 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.954515][T15510] Tainted: [L]=SOFTLOCKUP [ 539.954523][T15510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 539.954536][T15510] Call Trace: [ 539.954544][T15510] [ 539.954553][T15510] dump_stack_lvl+0xe8/0x150 [ 539.954587][T15510] should_fail_ex+0x3eb/0x540 [ 539.954624][T15510] should_failslab+0xa8/0x100 [ 539.954652][T15510] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 539.954675][T15510] ? __d_alloc+0x37/0x820 [ 539.954697][T15510] ? __d_alloc+0x37/0x820 [ 539.954725][T15510] __d_alloc+0x37/0x820 [ 539.954752][T15510] d_alloc+0x4b/0x190 [ 539.954773][T15510] ? lookup_one_qstr_excl+0xc4/0x360 [ 539.954799][T15510] lookup_one_qstr_excl+0xd8/0x360 [ 539.954828][T15510] __start_renaming+0x1da/0x410 [ 539.954863][T15510] filename_renameat2+0x3a0/0x9a0 [ 539.954895][T15510] ? __pfx_filename_renameat2+0x10/0x10 [ 539.954933][T15510] ? do_getname+0x151/0x250 [ 539.954956][T15510] __se_sys_renameat2+0x5a/0x2c0 [ 539.954979][T15510] do_syscall_64+0x166/0x520 [ 539.955008][T15510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.955030][T15510] ? clear_bhb_loop+0x70/0xc0 [ 539.955055][T15510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.955075][T15510] RIP: 0033:0x7f674ad9f559 [ 539.955094][T15510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.955115][T15510] RSP: 002b:00007f674bd4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 539.955136][T15510] RAX: ffffffffffffffda RBX: 00007f674b025fa0 RCX: 00007f674ad9f559 [ 539.955152][T15510] RDX: ffffffffffffff9c RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 539.955167][T15510] RBP: 00007f674bd4d090 R08: 0000000000000002 R09: 0000000000000000 [ 539.955181][T15510] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000002 [ 539.955194][T15510] R13: 00007f674b026038 R14: 00007f674b025fa0 R15: 00007ffe6f453388 [ 539.955229][T15510] [ 540.076971][T15513] __nla_validate_parse: 1 callbacks suppressed [ 540.076991][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2936'. [ 540.201347][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2937'. [ 540.204120][T15517] comedi comedi0: aio_aio12_8: a I/O base address must be specified [ 540.236145][T15522] netlink: 25 bytes leftover after parsing attributes in process `syz.8.2938'. [ 540.239826][T15522] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.378243][T15528] tipc: Enabled bearer , priority 10 [ 540.380488][T15527] tipc: Disabling bearer [ 540.472598][T15534] CIFS: Attempting to mount //127.0.0.1/share [ 540.481441][T15534] CIFS: VFS: Error connecting to socket. Aborting operation. [ 540.481505][T15534] CIFS: VFS: cifs_mount failed w/return code = -101 [ 540.532929][T15538] FAULT_INJECTION: forcing a failure. [ 540.532929][T15538] name failslab, interval 1, probability 0, space 0, times 0 [ 540.532973][T15538] CPU: 0 UID: 0 PID: 15538 Comm: syz.4.2946 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.533000][T15538] Tainted: [L]=SOFTLOCKUP [ 540.533007][T15538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 540.533019][T15538] Call Trace: [ 540.533028][T15538] [ 540.533036][T15538] dump_stack_lvl+0xe8/0x150 [ 540.533069][T15538] should_fail_ex+0x3eb/0x540 [ 540.533103][T15538] should_failslab+0xa8/0x100 [ 540.533130][T15538] ? skb_clone+0x212/0x3a0 [ 540.533157][T15538] kmem_cache_alloc_noprof+0x9c/0x600 [ 540.533181][T15538] ? skb_clone+0x212/0x3a0 [ 540.533215][T15538] skb_clone+0x212/0x3a0 [ 540.533239][T15538] ? nfnetlink_rcv+0x4b0/0x28c0 [ 540.533262][T15538] nfnetlink_rcv+0x4de/0x28c0 [ 540.533293][T15538] ? __local_bh_enable_ip+0xd6/0x140 [ 540.533318][T15538] ? lockdep_hardirqs_on+0x7b/0x110 [ 540.533346][T15538] ? __dev_queue_xmit+0x29b/0x3920 [ 540.533374][T15538] ? __local_bh_enable_ip+0xd6/0x140 [ 540.533396][T15538] ? __dev_queue_xmit+0x29b/0x3920 [ 540.533427][T15538] ? __dev_queue_xmit+0x1efb/0x3920 [ 540.533457][T15538] ? __dev_queue_xmit+0x29b/0x3920 [ 540.533491][T15538] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 540.533531][T15538] ? __copy_skb_header+0xa3/0x4a0 [ 540.533559][T15538] ? __asan_memcpy+0x40/0x70 [ 540.533579][T15538] ? __skb_clone+0x5c/0x760 [ 540.533610][T15538] ? __skb_clone+0x4a2/0x760 [ 540.533642][T15538] ? skb_clone+0x246/0x3a0 [ 540.533672][T15538] ? __netlink_deliver_tap+0x681/0x6e0 [ 540.533692][T15538] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.533721][T15538] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.533742][T15538] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.533768][T15538] netlink_unicast+0x8ef/0xa80 [ 540.533815][T15538] netlink_sendmsg+0x7f0/0xb20 [ 540.533843][T15538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.533870][T15538] ? aa_sock_msg_perm+0x144/0x210 [ 540.533903][T15538] ? apparmor_socket_sendmsg+0x98/0x360 [ 540.533930][T15538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.533958][T15538] sock_sendmsg_nosec+0x14e/0x190 [ 540.533981][T15538] ____sys_sendmsg+0x54e/0x850 [ 540.534012][T15538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.534047][T15538] ? import_iovec+0x73/0xa0 [ 540.534081][T15538] ___sys_sendmsg+0x2a6/0x360 [ 540.534106][T15538] ? __lock_acquire+0x747/0x2de0 [ 540.534133][T15538] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.534189][T15538] ? __fget_files+0x3a2/0x420 [ 540.534211][T15538] ? __fget_files+0x2a/0x420 [ 540.534242][T15538] __x64_sys_sendmsg+0x1b1/0x290 [ 540.534270][T15538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.534318][T15538] do_syscall_64+0x166/0x520 [ 540.534344][T15538] ? trace_irq_disable+0x3b/0x140 [ 540.534365][T15538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.534383][T15538] ? clear_bhb_loop+0x70/0xc0 [ 540.534406][T15538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.534431][T15538] RIP: 0033:0x7f674ad9f559 [ 540.534450][T15538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.534467][T15538] RSP: 002b:00007f674bd4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.534489][T15538] RAX: ffffffffffffffda RBX: 00007f674b025fa0 RCX: 00007f674ad9f559 [ 540.534505][T15538] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000003 [ 540.534517][T15538] RBP: 00007f674bd4d090 R08: 0000000000000000 R09: 0000000000000000 [ 540.534530][T15538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.534541][T15538] R13: 00007f674b026038 R14: 00007f674b025fa0 R15: 00007ffe6f453388 [ 540.534573][T15538] [ 540.587284][ T5736] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 540.719383][ T5736] usb 6-1: device descriptor read/64, error -71 [ 540.775476][T15549] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 540.782410][T15548] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 540.782441][T15548] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 540.787753][T15548] overlayfs: conflicting lowerdir path [ 540.963172][ T5736] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 541.021154][ T5008] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 541.021419][ T5008] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 541.021435][ T5008] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 541.021495][ T5008] loop0: [ 541.095343][ T5736] usb 6-1: device descriptor read/64, error -71 [ 541.207324][ T5736] usb usb6-port1: attempt power cycle [ 541.334908][T15564] overlayfs: failed to resolve './file1/file0': -2 [ 541.519709][T15577] nvme_fabrics: unknown parameter or missing value 'tr/".jadd3333333333333333:pn-' in ctrl creation request [ 541.553425][ T5736] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 541.574019][ T5736] usb 6-1: device descriptor read/8, error -71 [ 541.745519][ T5747] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 541.816737][ T5736] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 541.838700][ T5736] usb 6-1: device descriptor read/8, error -71 [ 541.899236][ T5747] usb 7-1: New USB device found: idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 541.900164][ T5747] usb 7-1: config 253 has an invalid interface number: 130 but max is 0 [ 541.900190][ T5747] usb 7-1: config 253 has no interface number 0 [ 541.900220][ T5747] usb 7-1: config 253 interface 130 has no altsetting 0 [ 541.902378][ T5747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.902402][ T5747] usb 7-1: Product: syz [ 541.902418][ T5747] usb 7-1: Manufacturer: syz [ 541.902433][ T5747] usb 7-1: SerialNumber: syz [ 541.925685][ T12] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 541.952109][ T5736] usb usb6-port1: unable to enumerate USB device [ 542.071737][ T12] usb 9-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 542.072643][ T12] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.072701][ T12] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 542.072736][ T12] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.074890][ T12] usb 9-1: config 0 descriptor?? [ 542.079287][ T12] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 542.365805][ T5810] usb 9-1: USB disconnect, device number 39 [ 542.399360][T15588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.428693][T15588] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 542.620314][ T5747] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 542.656458][T15594] loop5: detected capacity change from 0 to 7 [ 542.658813][T15594] Dev loop5: unable to read RDB block 7 [ 542.658842][T15594] loop5: unable to read partition table [ 542.658973][T15594] loop5: partition table beyond EOD, truncated [ 542.658992][T15594] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 542.673380][ T5747] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 542.673434][ T5747] dib0700: firmware download failed at 7 with -22 [ 542.714030][ T5747] usb 7-1: USB disconnect, device number 86 [ 542.773616][T15596] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2970'. [ 544.159135][T15628] FAULT_INJECTION: forcing a failure. [ 544.159135][T15628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.159169][T15628] CPU: 0 UID: 0 PID: 15628 Comm: syz.8.2981 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.159196][T15628] Tainted: [L]=SOFTLOCKUP [ 544.159203][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 544.159216][T15628] Call Trace: [ 544.159224][T15628] [ 544.159234][T15628] dump_stack_lvl+0xe8/0x150 [ 544.159268][T15628] should_fail_ex+0x3eb/0x540 [ 544.159303][T15628] _copy_to_user+0x31/0xb0 [ 544.159327][T15628] simple_read_from_buffer+0xe1/0x170 [ 544.159356][T15628] proc_fail_nth_read+0x1bb/0x230 [ 544.159389][T15628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 544.159422][T15628] ? rw_verify_area+0x24a/0x4c0 [ 544.159448][T15628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 544.159480][T15628] vfs_read+0x213/0xa80 [ 544.159507][T15628] ? __pfx___mutex_lock+0x10/0x10 [ 544.159539][T15628] ? __pfx_vfs_read+0x10/0x10 [ 544.159566][T15628] ? __fget_files+0x2a/0x420 [ 544.159587][T15628] ? __fget_files+0x3a2/0x420 [ 544.159609][T15628] ? __fget_files+0x2a/0x420 [ 544.159636][T15628] ? fdget+0x1ac/0x250 [ 544.159666][T15628] ksys_read+0x150/0x270 [ 544.159693][T15628] ? __pfx_ksys_read+0x10/0x10 [ 544.159731][T15628] do_syscall_64+0x166/0x520 [ 544.159759][T15628] ? trace_irq_disable+0x3b/0x140 [ 544.159784][T15628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.159805][T15628] ? clear_bhb_loop+0x70/0xc0 [ 544.159830][T15628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.159851][T15628] RIP: 0033:0x7f3b2835fd8e [ 544.159870][T15628] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 544.159889][T15628] RSP: 002b:00007f3b29286fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 544.159911][T15628] RAX: ffffffffffffffda RBX: 00007f3b292876c0 RCX: 00007f3b2835fd8e [ 544.159927][T15628] RDX: 000000000000000f RSI: 00007f3b292870a0 RDI: 0000000000000006 [ 544.159941][T15628] RBP: 00007f3b29287090 R08: 0000000000000000 R09: 0000000000000000 [ 544.159953][T15628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.159964][T15628] R13: 00007f3b28626038 R14: 00007f3b28625fa0 R15: 00007fffd45849e8 [ 544.160005][T15628] [ 544.737784][ T5736] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 544.786689][T15641] ALSA: seq fatal error: cannot create timer (-22) [ 544.889873][ T5736] usb 7-1: Using ep0 maxpacket: 32 [ 544.890694][ T5736] usb 7-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 544.891671][ T5736] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 544.891696][ T5736] usb 7-1: config 0 has no interface number 0 [ 544.891735][ T5736] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 544.891761][ T5736] usb 7-1: config 0 interface 196 has no altsetting 0 [ 544.893670][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.893694][ T5736] usb 7-1: Product: syz [ 544.893709][ T5736] usb 7-1: Manufacturer: syz [ 544.893724][ T5736] usb 7-1: SerialNumber: syz [ 544.896287][ T5736] usb 7-1: config 0 descriptor?? [ 544.899371][T15631] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 545.102413][ T5747] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 545.223936][ T12] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 545.256506][ T5747] usb 6-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 545.257516][ T5747] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.257567][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.269862][ T5747] as10x_usb: device has been detected [ 545.270793][ T5747] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 545.309284][ T5747] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 545.329033][ T5747] as10x_usb: error during firmware upload part1 [ 545.329406][ T5747] Registered device Abilis Systems DVB-Titan [ 545.386563][ T12] usb 9-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 545.387710][ T12] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 545.387741][ T12] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.388793][ T12] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 545.388806][ T12] usb 9-1: Manufacturer: syz [ 545.391022][ T12] usb 9-1: config 0 descriptor?? [ 545.487171][ T12] rc_core: IR keymap rc-hauppauge not found [ 545.487191][ T12] Registered IR keymap rc-empty [ 545.488414][ T12] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 545.488724][ T5760] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 545.491494][ T12] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input86 [ 545.544378][ T5747] usb 6-1: USB disconnect, device number 83 [ 545.600424][ T5747] Unregistered device Abilis Systems DVB-Titan [ 545.602552][ T5747] as10x_usb: device has been disconnected [ 545.631673][ T5810] usb 9-1: USB disconnect, device number 40 [ 545.650708][ T5760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 545.650751][ T5760] usb 5-1: New USB device found: idVendor=09e8, idProduct=0062, bcdDevice=0.40 [ 545.663339][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.663364][ T5760] usb 5-1: Product: syz [ 545.663380][ T5760] usb 5-1: Manufacturer: syz [ 545.663418][ T5760] usb 5-1: SerialNumber: syz [ 545.821317][ T5736] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 545.829252][ T5736] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 545.909350][ T5760] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 545.959045][ T5760] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 545.963605][ T5760] usb 5-1: USB disconnect, device number 112 [ 546.004086][T11779] udevd[11779]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.465934][T15685] vers=2.0 not permitted when mounting with smb3 [ 546.465934][T15685] [ 546.466228][T15685] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 546.526949][T15687] netlink: 'syz.8.2999': attribute type 4 has an invalid length. [ 546.671139][ T5810] usb 7-1: USB disconnect, device number 87 [ 546.844924][ T5810] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 546.890064][T15705] evm: overlay not supported [ 547.093712][ T5008] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 547.094077][ T5008] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 547.094094][ T5008] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 547.094154][ T5008] loop0: [ 547.468716][ T33] audit: type=1800 audit(1799307052.270:139): pid=15721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.3008" name="/file1" dev="sda1" ino=2056 res=0 errno=-13 [ 547.580456][T15740] FAULT_INJECTION: forcing a failure. [ 547.580456][T15740] name failslab, interval 1, probability 0, space 0, times 0 [ 547.580489][T15740] CPU: 0 UID: 0 PID: 15740 Comm: syz.6.3011 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.580516][T15740] Tainted: [L]=SOFTLOCKUP [ 547.580524][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 547.580536][T15740] Call Trace: [ 547.580544][T15740] [ 547.580552][T15740] dump_stack_lvl+0xe8/0x150 [ 547.580588][T15740] should_fail_ex+0x3eb/0x540 [ 547.580635][T15740] should_failslab+0xa8/0x100 [ 547.580665][T15740] __kmalloc_noprof+0xf9/0x710 [ 547.580686][T15740] ? rcu_is_watching+0x16/0xb0 [ 547.580713][T15740] ? tomoyo_realpath_from_path+0xf2/0x640 [ 547.580742][T15740] ? tomoyo_realpath_from_path+0xf2/0x640 [ 547.580778][T15740] tomoyo_realpath_from_path+0xf2/0x640 [ 547.580820][T15740] tomoyo_mount_permission+0x3e9/0x9e0 [ 547.580849][T15740] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 547.580881][T15740] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 547.580908][T15740] ? kasan_save_track+0x4f/0x80 [ 547.580980][T15740] ? kasan_quarantine_put+0xbb/0x1f0 [ 547.581007][T15740] security_sb_mount+0xe4/0x320 [ 547.581039][T15740] path_mount+0xbc/0x1050 [ 547.581062][T15740] ? user_path_at+0xd4/0x160 [ 547.581084][T15740] __se_sys_mount+0x31d/0x420 [ 547.581109][T15740] ? __pfx___se_sys_mount+0x10/0x10 [ 547.581134][T15740] ? __x64_sys_mount+0x20/0xc0 [ 547.581156][T15740] do_syscall_64+0x166/0x520 [ 547.581182][T15740] ? trace_irq_disable+0x3b/0x140 [ 547.581206][T15740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.581226][T15740] ? clear_bhb_loop+0x70/0xc0 [ 547.581251][T15740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.581271][T15740] RIP: 0033:0x7ff03a79f559 [ 547.581289][T15740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.581307][T15740] RSP: 002b:00007ff03b66e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 547.581329][T15740] RAX: ffffffffffffffda RBX: 00007ff03aa26090 RCX: 00007ff03a79f559 [ 547.581345][T15740] RDX: 0000200000000840 RSI: 0000200000000800 RDI: 0000000000000000 [ 547.581359][T15740] RBP: 00007ff03b66e090 R08: 0000200000000880 R09: 0000000000000000 [ 547.581372][T15740] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 547.581385][T15740] R13: 00007ff03aa26128 R14: 00007ff03aa26090 R15: 00007ffc43645918 [ 547.581418][T15740] [ 547.699984][ T12] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 547.725727][T15740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.844164][ T12] usb 9-1: device descriptor read/64, error -71 [ 547.866687][ T33] audit: type=1800 audit(1799307052.656:140): pid=15735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.3011" name="/file1" dev="sda1" ino=2056 res=0 errno=-13 [ 547.979988][ T10] wacom 0003:056A:003F.0032: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 548.107051][ T12] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 548.238212][ T12] usb 9-1: device descriptor read/64, error -71 [ 548.307844][T15766] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3017'. [ 548.349584][ T12] usb usb9-port1: attempt power cycle [ 548.548037][T15776] sd 0:0:1:0: PR command failed: 1026 [ 548.548120][T15776] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 548.548159][T15776] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 548.644463][ T5810] usb 7-1: new full-speed USB device number 88 using dummy_hcd [ 548.692721][ T12] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 548.701451][T15781] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3022'. [ 548.701478][T15781] block nbd1: Unsupported socket: should be TCP or UNIX. [ 548.728438][ T12] usb 9-1: device descriptor read/8, error -71 [ 548.795515][ T5810] usb 7-1: New USB device found: idVendor=1477, idProduct=1024, bcdDevice=0.00 [ 548.798070][ T5810] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 548.798100][ T5810] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 548.798126][ T5810] usb 7-1: config 0 interface 0 has no altsetting 0 [ 548.798158][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.804685][ T5810] usb 7-1: config 0 descriptor?? [ 548.805989][T15771] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 549.005899][ T12] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 549.026854][ T12] usb 9-1: device descriptor read/8, error -71 [ 549.049708][ T5810] hid-generic 0003:1477:1024.0033: collection stack underflow [ 549.049743][ T5810] hid-generic 0003:1477:1024.0033: item 0 4 0 12 parsing failed [ 549.053140][ T5810] hid-generic 0003:1477:1024.0033: probe with driver hid-generic failed with error -22 [ 549.147883][ T12] usb usb9-port1: unable to enumerate USB device [ 549.236415][ T5810] usb 7-1: USB disconnect, device number 88 [ 549.280626][ T5736] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 549.429673][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3028'. [ 549.441187][ T5736] usb 5-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 549.442650][ T5736] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.442685][ T5736] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 20015, setting to 1024 [ 549.442711][ T5736] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 549.442748][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.446600][T15792] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 549.453214][ T5736] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.655634][ T5736] usb 5-1: USB disconnect, device number 113 [ 549.719766][T15817] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 549.811690][T15820] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 549.817569][T15820] FAULT_INJECTION: forcing a failure. [ 549.817569][T15820] name failslab, interval 1, probability 0, space 0, times 0 [ 549.817600][T15820] CPU: 1 UID: 0 PID: 15820 Comm: syz.5.3032 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.817627][T15820] Tainted: [L]=SOFTLOCKUP [ 549.817634][T15820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 549.817646][T15820] Call Trace: [ 549.817654][T15820] [ 549.817663][T15820] dump_stack_lvl+0xe8/0x150 [ 549.817697][T15820] should_fail_ex+0x3eb/0x540 [ 549.817733][T15820] should_failslab+0xa8/0x100 [ 549.817761][T15820] __kmalloc_noprof+0xf9/0x710 [ 549.817783][T15820] ? tracepoint_probe_unregister+0x452/0xa70 [ 549.817808][T15820] ? tracepoint_probe_unregister+0x452/0xa70 [ 549.817836][T15820] ? __pfx_probe_sched_switch+0x10/0x10 [ 549.817862][T15820] tracepoint_probe_unregister+0x452/0xa70 [ 549.817895][T15820] tracing_stop_cmdline_record+0x6d/0xb0 [ 549.817918][T15820] __ftrace_event_enable_disable+0x49a/0x720 [ 549.817945][T15820] event_enable_write+0x242/0x330 [ 549.817977][T15820] ? __pfx_event_enable_write+0x10/0x10 [ 549.818011][T15820] ? __pfx_event_enable_write+0x10/0x10 [ 549.818042][T15820] vfs_write+0x296/0xba0 [ 549.818075][T15820] ? __pfx_vfs_write+0x10/0x10 [ 549.818100][T15820] ? __fget_files+0x2a/0x420 [ 549.818121][T15820] ? __fget_files+0x3a2/0x420 [ 549.818141][T15820] ? __fget_files+0x2a/0x420 [ 549.818167][T15820] ? fdget+0x1ac/0x250 [ 549.818196][T15820] ksys_write+0x150/0x270 [ 549.818222][T15820] ? __pfx_ksys_write+0x10/0x10 [ 549.818259][T15820] do_syscall_64+0x166/0x520 [ 549.818286][T15820] ? trace_irq_disable+0x3b/0x140 [ 549.818308][T15820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.818329][T15820] ? clear_bhb_loop+0x70/0xc0 [ 549.818353][T15820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.818372][T15820] RIP: 0033:0x7f0a2039f559 [ 549.818391][T15820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.818408][T15820] RSP: 002b:00007f0a21269028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.818429][T15820] RAX: ffffffffffffffda RBX: 00007f0a20625fa0 RCX: 00007f0a2039f559 [ 549.818443][T15820] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 549.818456][T15820] RBP: 00007f0a21269090 R08: 0000000000000000 R09: 0000000000000000 [ 549.818469][T15820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.818481][T15820] R13: 00007f0a20626038 R14: 00007f0a20625fa0 R15: 00007ffd95c5abf8 [ 549.818513][T15820] [ 549.830314][T15821] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3033'. [ 549.929261][T15823] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3033'. [ 550.319223][T15839] FAULT_INJECTION: forcing a failure. [ 550.319223][T15839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.319256][T15839] CPU: 1 UID: 0 PID: 15839 Comm: syz.6.3040 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.319292][T15839] Tainted: [L]=SOFTLOCKUP [ 550.319299][T15839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 550.319310][T15839] Call Trace: [ 550.319318][T15839] [ 550.319327][T15839] dump_stack_lvl+0xe8/0x150 [ 550.319361][T15839] should_fail_ex+0x3eb/0x540 [ 550.319396][T15839] strncpy_from_user+0x36/0x2c0 [ 550.319429][T15839] do_getname+0x77/0x250 [ 550.319453][T15839] user_path_at+0x2a/0x160 [ 550.319479][T15839] __se_sys_mount+0x2dc/0x420 [ 550.319507][T15839] ? __pfx___se_sys_mount+0x10/0x10 [ 550.319539][T15839] ? __x64_sys_mount+0x20/0xc0 [ 550.319563][T15839] do_syscall_64+0x166/0x520 [ 550.319591][T15839] ? trace_irq_disable+0x3b/0x140 [ 550.319616][T15839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.319637][T15839] ? clear_bhb_loop+0x70/0xc0 [ 550.319662][T15839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.319682][T15839] RIP: 0033:0x7ff03a79f559 [ 550.319701][T15839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.319718][T15839] RSP: 002b:00007ff03b68f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 550.319740][T15839] RAX: ffffffffffffffda RBX: 00007ff03aa25fa0 RCX: 00007ff03a79f559 [ 550.319755][T15839] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 550.319768][T15839] RBP: 00007ff03b68f090 R08: 0000200000000300 R09: 0000000000000000 [ 550.319782][T15839] R10: 0000000001000084 R11: 0000000000000246 R12: 0000000000000001 [ 550.319794][T15839] R13: 00007ff03aa26038 R14: 00007ff03aa25fa0 R15: 00007ffc43645918 [ 550.319827][T15839] [ 550.413155][T15838] rxe_eth0 speed is unknown, defaulting to 1000 [ 550.599477][T15849] futex_wake_op: syz.8.3043 tries to shift op by -1; fix this program [ 551.016691][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 551.018858][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 551.035075][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 551.039794][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 551.160622][T15843] ceph: No mds server is up or the cluster is laggy [ 551.203166][T15870] FAULT_INJECTION: forcing a failure. [ 551.203166][T15870] name failslab, interval 1, probability 0, space 0, times 0 [ 551.203203][T15870] CPU: 0 UID: 0 PID: 15870 Comm: syz.8.3047 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.203233][T15870] Tainted: [L]=SOFTLOCKUP [ 551.203241][T15870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 551.203254][T15870] Call Trace: [ 551.203263][T15870] [ 551.203274][T15870] dump_stack_lvl+0xe8/0x150 [ 551.203312][T15870] should_fail_ex+0x3eb/0x540 [ 551.203352][T15870] should_failslab+0xa8/0x100 [ 551.203382][T15870] ? security_inode_alloc+0x39/0x310 [ 551.203414][T15870] kmem_cache_alloc_noprof+0x9c/0x600 [ 551.203440][T15870] ? security_inode_alloc+0x39/0x310 [ 551.203478][T15870] security_inode_alloc+0x39/0x310 [ 551.203512][T15870] inode_init_always_gfp+0x97e/0xd30 [ 551.203542][T15870] alloc_inode+0x82/0x1b0 [ 551.203566][T15870] new_inode+0x1f/0x170 [ 551.203593][T15870] devpts_fill_super+0x14b/0x500 [ 551.203623][T15870] ? __pfx_devpts_fill_super+0x10/0x10 [ 551.203653][T15870] get_tree_nodev+0xbe/0x150 [ 551.203683][T15870] vfs_get_tree+0x92/0x2a0 [ 551.203713][T15870] do_new_mount+0x325/0xb00 [ 551.203743][T15870] ? __pfx_do_new_mount+0x10/0x10 [ 551.203775][T15870] ? ns_capable+0x84/0xe0 [ 551.203812][T15870] ? path_mount+0x647/0x1050 [ 551.203838][T15870] ? user_path_at+0xd4/0x160 [ 551.203865][T15870] __se_sys_mount+0x31d/0x420 [ 551.203894][T15870] ? __pfx___se_sys_mount+0x10/0x10 [ 551.203925][T15870] ? __x64_sys_mount+0x20/0xc0 [ 551.203951][T15870] do_syscall_64+0x166/0x520 [ 551.203982][T15870] ? trace_irq_disable+0x3b/0x140 [ 551.204009][T15870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.204031][T15870] ? clear_bhb_loop+0x70/0xc0 [ 551.204057][T15870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.204079][T15870] RIP: 0033:0x7f3b2839f559 [ 551.204099][T15870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.204118][T15870] RSP: 002b:00007f3b29287028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 551.204142][T15870] RAX: ffffffffffffffda RBX: 00007f3b28625fa0 RCX: 00007f3b2839f559 [ 551.204159][T15870] RDX: 0000200000003840 RSI: 0000200000003800 RDI: 0000000000000000 [ 551.204174][T15870] RBP: 00007f3b28436b50 R08: 0000000000000000 R09: 0000000000000000 [ 551.204189][T15870] R10: 00000000022008d0 R11: 0000000000000246 R12: 0000000000000000 [ 551.204203][T15870] R13: 00007f3b28626038 R14: 00007f3b28625fa0 R15: 00007fffd45849e8 [ 551.204239][T15870] [ 551.303456][ T5736] libceph: connect (1)[c::]:6789 error -101 [ 551.303617][ T5736] libceph: mon0 (1)[c::]:6789 connect error [ 551.773164][T15881] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3050'. [ 552.203226][T15893] @0: renamed from virt_wifi0 [ 552.399209][T15899] netlink: 'syz.5.3057': attribute type 6 has an invalid length. [ 552.496151][T15899] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 552.496483][T15899] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3953147676 (3953147676 ns) > initial count (646423475 ns). Using initial count to start timer. [ 552.592556][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3058'. [ 552.594593][T15905] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3058'. [ 553.071559][ T12] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 553.178098][T15912] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 553.191296][T15912] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 553.242873][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 553.243536][ T12] usb 6-1: New USB device found: idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 553.244497][ T12] usb 6-1: config 135 interface 0 has no altsetting 0 [ 553.246524][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.246546][ T12] usb 6-1: Product: syz [ 553.246560][ T12] usb 6-1: Manufacturer: syz [ 553.246574][ T12] usb 6-1: SerialNumber: syz [ 553.312432][T15912] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 553.416692][T15917] netlink: 'syz.6.3063': attribute type 12 has an invalid length. [ 553.490928][T15923] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3065'. [ 553.540681][ T12] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 553.541853][ T12] dvb_usb_af9015 6-1:135.0: probe with driver dvb_usb_af9015 failed with error -22 [ 553.544317][ T12] usb 6-1: USB disconnect, device number 84 [ 553.557888][T15924] MTRR 2 not used [ 553.748957][T15933] FAULT_INJECTION: forcing a failure. [ 553.748957][T15933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.748990][T15933] CPU: 0 UID: 0 PID: 15933 Comm: syz.4.3068 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.749017][T15933] Tainted: [L]=SOFTLOCKUP [ 553.749024][T15933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 553.749036][T15933] Call Trace: [ 553.749044][T15933] [ 553.749053][T15933] dump_stack_lvl+0xe8/0x150 [ 553.749085][T15933] should_fail_ex+0x3eb/0x540 [ 553.749120][T15933] _copy_from_iter+0x1d3/0x1680 [ 553.749148][T15933] ? __might_fault+0xaf/0x130 [ 553.749181][T15933] ? _copy_from_iter+0x21b/0x1680 [ 553.749208][T15933] ? sock_alloc_send_pskb+0xc87/0xd90 [ 553.749234][T15933] ? __pfx__copy_from_iter+0x10/0x10 [ 553.749264][T15933] ? __pfx__copy_from_iter+0x10/0x10 [ 553.749295][T15933] copy_page_from_iter+0x219/0x2d0 [ 553.749328][T15933] skb_copy_datagram_from_iter+0x2f4/0x720 [ 553.749370][T15933] tun_get_user+0x1510/0x4470 [ 553.749410][T15933] ? aa_file_perm+0x18b/0x15f0 [ 553.749444][T15933] ? aa_file_perm+0x4ed/0x15f0 [ 553.749472][T15933] ? __pfx_tun_get_user+0x10/0x10 [ 553.749499][T15933] ? __lock_acquire+0x747/0x2de0 [ 553.749523][T15933] ? kstrtoull+0x137/0x1d0 [ 553.749556][T15933] ? ref_tracker_alloc+0x172/0x530 [ 553.749585][T15933] ? lock_acquire+0x115/0x350 [ 553.749608][T15933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 553.749630][T15933] ? lock_acquire+0x115/0x350 [ 553.749651][T15933] ? tun_get+0x1c/0x2f0 [ 553.749679][T15933] ? tun_get+0x1c/0x2f0 [ 553.749701][T15933] ? tun_get+0x1c/0x2f0 [ 553.749729][T15933] tun_chr_write_iter+0x113/0x200 [ 553.749756][T15933] vfs_write+0x612/0xba0 [ 553.749789][T15933] ? __pfx_vfs_write+0x10/0x10 [ 553.749817][T15933] ? __fget_files+0x3a2/0x420 [ 553.749842][T15933] ? __fget_files+0x2a/0x420 [ 553.749868][T15933] ? fdget+0x1ac/0x250 [ 553.749897][T15933] ksys_write+0x150/0x270 [ 553.749925][T15933] ? __pfx_ksys_write+0x10/0x10 [ 553.749961][T15933] do_syscall_64+0x166/0x520 [ 553.749989][T15933] ? trace_irq_disable+0x3b/0x140 [ 553.750014][T15933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.750035][T15933] ? clear_bhb_loop+0x70/0xc0 [ 553.750060][T15933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.750079][T15933] RIP: 0033:0x7f674ad9f559 [ 553.750099][T15933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.750116][T15933] RSP: 002b:00007f674bd4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 553.750138][T15933] RAX: ffffffffffffffda RBX: 00007f674b025fa0 RCX: 00007f674ad9f559 [ 553.750153][T15933] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 0000000000000003 [ 553.750167][T15933] RBP: 00007f674bd4d090 R08: 0000000000000000 R09: 0000000000000000 [ 553.750180][T15933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.750193][T15933] R13: 00007f674b026038 R14: 00007f674b025fa0 R15: 00007ffe6f453388 [ 553.750225][T15933] [ 553.797359][T15935] FAULT_INJECTION: forcing a failure. [ 553.797359][T15935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.797392][T15935] CPU: 1 UID: 0 PID: 15935 Comm: syz.8.3070 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.797418][T15935] Tainted: [L]=SOFTLOCKUP [ 553.797425][T15935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 553.797437][T15935] Call Trace: [ 553.797444][T15935] [ 553.797453][T15935] dump_stack_lvl+0xe8/0x150 [ 553.797487][T15935] should_fail_ex+0x3eb/0x540 [ 553.797522][T15935] _copy_to_user+0x31/0xb0 [ 553.797543][T15935] simple_read_from_buffer+0xe1/0x170 [ 553.797570][T15935] proc_fail_nth_read+0x1bb/0x230 [ 553.797603][T15935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.797633][T15935] ? rw_verify_area+0x24a/0x4c0 [ 553.797659][T15935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 553.797686][T15935] vfs_read+0x213/0xa80 [ 553.797715][T15935] ? __pfx___mutex_lock+0x10/0x10 [ 553.797744][T15935] ? __pfx_vfs_read+0x10/0x10 [ 553.797769][T15935] ? __fget_files+0x2a/0x420 [ 553.797790][T15935] ? __fget_files+0x3a2/0x420 [ 553.797810][T15935] ? __fget_files+0x2a/0x420 [ 553.797835][T15935] ? fdget+0x1ac/0x250 [ 553.797862][T15935] ksys_read+0x150/0x270 [ 553.797888][T15935] ? __pfx_ksys_read+0x10/0x10 [ 553.797922][T15935] do_syscall_64+0x166/0x520 [ 553.797948][T15935] ? trace_irq_disable+0x3b/0x140 [ 553.797973][T15935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.797993][T15935] ? clear_bhb_loop+0x70/0xc0 [ 553.798017][T15935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.798036][T15935] RIP: 0033:0x7f3b2835fd8e [ 553.798054][T15935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 553.798078][T15935] RSP: 002b:00007f3b29286fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 553.798100][T15935] RAX: ffffffffffffffda RBX: 00007f3b292876c0 RCX: 00007f3b2835fd8e [ 553.798115][T15935] RDX: 000000000000000f RSI: 00007f3b292870a0 RDI: 0000000000000004 [ 553.798128][T15935] RBP: 00007f3b29287090 R08: 0000000000000000 R09: 0000000000000000 [ 553.798140][T15935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.798152][T15935] R13: 00007f3b28626038 R14: 00007f3b28625fa0 R15: 00007fffd45849e8 [ 553.798183][T15935] [ 554.045667][T15941] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 554.342004][T15950] tipc: Enabled bearer , priority 10 [ 554.342666][T15949] tipc: Resetting bearer [ 554.365093][T15949] tipc: Disabling bearer [ 554.391270][ T5810] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 554.432608][ T5747] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 554.453000][ T9255] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 554.494314][T15952] XFS (mtdblock0): Invalid superblock magic number [ 554.556069][ T5810] usb 5-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 554.603866][ T5747] usb 6-1: Using ep0 maxpacket: 16 [ 554.620163][ T5747] usb 6-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 554.634616][ T9255] usb 7-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 554.638256][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.638283][ T5810] usb 5-1: Product: syz [ 554.638298][ T5810] usb 5-1: Manufacturer: syz [ 554.638312][ T5810] usb 5-1: SerialNumber: syz [ 554.639371][ T9255] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 554.639393][ T9255] usb 7-1: Product: syz [ 554.639407][ T9255] usb 7-1: SerialNumber: syz [ 554.662174][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.662203][ T5747] usb 6-1: Product: syz [ 554.662217][ T5747] usb 6-1: Manufacturer: syz [ 554.662225][ T5747] usb 6-1: SerialNumber: syz [ 554.687859][ T5810] usb 5-1: config 0 descriptor?? [ 554.715675][ T5747] usb 6-1: config 0 descriptor?? [ 554.727092][ T5747] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 554.727990][ T5747] usb 6-1: Detected FT-X [ 554.729712][ T9255] usb 7-1: config 0 descriptor?? [ 554.908737][ T5810] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 114 [ 554.955689][T15946] device-mapper: table: 248:15: integrity: Device lookup failed (-ENOENT) [ 554.955711][T15946] device-mapper: ioctl: error adding target to table [ 554.990785][ T9255] hso 7-1:0.0: Failed to find BULK eps [ 555.014526][T15965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.024838][T15965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.039666][T15967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.040087][T15967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.049335][T15967] device-mapper: table: 248:15: integrity: Device lookup failed (-ENOENT) [ 555.049356][T15967] device-mapper: ioctl: error adding target to table [ 555.066585][T15971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.066997][T15971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.207035][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 555.207693][ T9255] usb 7-1: USB disconnect, device number 89 [ 555.245731][ T5747] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 555.246135][ T5747] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 555.246593][ T5747] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 555.269644][ T5747] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 555.271988][ T5747] usb 6-1: USB disconnect, device number 85 [ 555.275633][ T5747] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 555.276162][ T5747] ftdi_sio 6-1:0.0: device disconnected [ 555.756611][T15982] FAULT_INJECTION: forcing a failure. [ 555.756611][T15982] name failslab, interval 1, probability 0, space 0, times 0 [ 555.756645][T15982] CPU: 1 UID: 0 PID: 15982 Comm: syz.6.3082 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.756672][T15982] Tainted: [L]=SOFTLOCKUP [ 555.756680][T15982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 555.756692][T15982] Call Trace: [ 555.756701][T15982] [ 555.756710][T15982] dump_stack_lvl+0xe8/0x150 [ 555.756745][T15982] should_fail_ex+0x3eb/0x540 [ 555.756778][T15982] ? __alloc_skb+0x1db/0x7a0 [ 555.756802][T15982] should_failslab+0xa8/0x100 [ 555.756831][T15982] ? __alloc_skb+0x1db/0x7a0 [ 555.756852][T15982] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 555.756874][T15982] ? __alloc_skb+0x18d/0x7a0 [ 555.756899][T15982] ? __alloc_skb+0x1db/0x7a0 [ 555.756929][T15982] __alloc_skb+0x1db/0x7a0 [ 555.756960][T15982] netlink_sendmsg+0x5cd/0xb20 [ 555.756991][T15982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.757016][T15982] ? aa_sock_msg_perm+0x144/0x210 [ 555.757049][T15982] ? apparmor_socket_sendmsg+0x98/0x360 [ 555.757076][T15982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.757097][T15982] sock_sendmsg_nosec+0x14e/0x190 [ 555.757121][T15982] ____sys_sendmsg+0x54e/0x850 [ 555.757154][T15982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.757190][T15982] ? import_iovec+0x73/0xa0 [ 555.757224][T15982] ___sys_sendmsg+0x2a6/0x360 [ 555.757249][T15982] ? __lock_acquire+0x747/0x2de0 [ 555.757277][T15982] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.757340][T15982] ? __fget_files+0x3a2/0x420 [ 555.757361][T15982] ? __fget_files+0x2a/0x420 [ 555.757393][T15982] __x64_sys_sendmsg+0x1b1/0x290 [ 555.757423][T15982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 555.757491][T15982] do_syscall_64+0x166/0x520 [ 555.757520][T15982] ? trace_irq_disable+0x3b/0x140 [ 555.757544][T15982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.757565][T15982] ? clear_bhb_loop+0x70/0xc0 [ 555.757590][T15982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.757610][T15982] RIP: 0033:0x7ff03a79f559 [ 555.757629][T15982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.757649][T15982] RSP: 002b:00007ff03b68f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.757671][T15982] RAX: ffffffffffffffda RBX: 00007ff03aa25fa0 RCX: 00007ff03a79f559 [ 555.757687][T15982] RDX: 0000000000040000 RSI: 0000200000000440 RDI: 0000000000000004 [ 555.757701][T15982] RBP: 00007ff03b68f090 R08: 0000000000000000 R09: 0000000000000000 [ 555.757714][T15982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.757727][T15982] R13: 00007ff03aa26038 R14: 00007ff03aa25fa0 R15: 00007ffc43645918 [ 555.757760][T15982] [ 555.874319][T15986] fuse: blksize only supported for fuseblk [ 555.951449][ T9255] usb 5-1: USB disconnect, device number 114 [ 556.597082][ T9255] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 556.675497][T16022] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 556.747579][ T9255] usb 7-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 556.751731][ T9255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.760893][ T9255] usb 7-1: config 0 descriptor?? [ 556.865080][T16035] SQUASHFS error: Failed to read block 0x0: -5 [ 556.865146][T16035] unable to read squashfs_super_block [ 557.451211][ T10] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 557.565158][T16063] FAULT_INJECTION: forcing a failure. [ 557.565158][T16063] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 557.565195][T16063] CPU: 1 UID: 0 PID: 16063 Comm: syz.8.3109 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.565224][T16063] Tainted: [L]=SOFTLOCKUP [ 557.565233][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 557.565246][T16063] Call Trace: [ 557.565254][T16063] [ 557.565264][T16063] dump_stack_lvl+0xe8/0x150 [ 557.565301][T16063] should_fail_ex+0x3eb/0x540 [ 557.565338][T16063] prepare_alloc_pages+0x21e/0x5f0 [ 557.565371][T16063] __alloc_frozen_pages_noprof+0x17c/0x410 [ 557.565401][T16063] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 557.565436][T16063] ? policy_nodemask+0x31b/0x980 [ 557.565472][T16063] alloc_pages_mpol+0x21e/0x390 [ 557.565508][T16063] alloc_pages_noprof+0xb1/0x2b0 [ 557.565541][T16063] pte_alloc_one+0x22/0x3d0 [ 557.565575][T16063] __pte_alloc+0x25/0x1a0 [ 557.565603][T16063] walk_pgd_range+0xfd5/0x1dc0 [ 557.565653][T16063] ? __pfx_guard_install_set_pte+0x10/0x10 [ 557.565689][T16063] ? __pfx_guard_install_set_pte+0x10/0x10 [ 557.565715][T16063] ? __pfx_guard_install_set_pte+0x10/0x10 [ 557.565746][T16063] ? __pfx_guard_install_set_pte+0x10/0x10 [ 557.565778][T16063] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 557.565808][T16063] ? __pfx_walk_pgd_range+0x10/0x10 [ 557.565835][T16063] ? lock_acquire+0x115/0x350 [ 557.565866][T16063] __walk_page_range+0x16d/0x720 [ 557.565895][T16063] ? __lock_acquire+0x747/0x2de0 [ 557.565933][T16063] walk_page_range_vma_unsafe+0x309/0x410 [ 557.565961][T16063] ? arch_stack_walk+0xfb/0x150 [ 557.565991][T16063] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 557.566037][T16063] madvise_vma_behavior+0x3f5b/0x4cb0 [ 557.566075][T16063] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 557.566111][T16063] ? do_raw_spin_lock+0x12b/0x2f0 [ 557.566150][T16063] ? look_up_lock_class+0x57/0x110 [ 557.566181][T16063] ? register_lock_class+0x31/0x2e0 [ 557.566206][T16063] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 557.566235][T16063] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 557.566263][T16063] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 557.566295][T16063] ? __pfx_guard_install_set_pte+0x10/0x10 [ 557.566333][T16063] ? finish_task_switch+0x40e/0xc60 [ 557.566365][T16063] ? __lock_acquire+0x747/0x2de0 [ 557.566415][T16063] ? reacquire_held_locks+0x117/0x1a0 [ 557.566441][T16063] ? lock_vma_under_rcu+0x1d1/0x500 [ 557.566480][T16063] ? lock_vma_under_rcu+0x116/0x500 [ 557.566513][T16063] ? lock_vma_under_rcu+0x116/0x500 [ 557.566542][T16063] ? lock_vma_under_rcu+0x45a/0x500 [ 557.566575][T16063] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 557.566604][T16063] ? futex_unqueue+0x22/0x240 [ 557.566647][T16063] ? vma_assert_stabilised+0x87/0x1f0 [ 557.566684][T16063] madvise_walk_vmas+0x97c/0xb70 [ 557.566725][T16063] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 557.566758][T16063] ? blk_start_plug+0x6e/0x1b0 [ 557.566791][T16063] madvise_do_behavior+0x385/0x540 [ 557.566825][T16063] ? __pfx_madvise_do_behavior+0x10/0x10 [ 557.566872][T16063] do_madvise+0x327/0x3a0 [ 557.566900][T16063] ? __pfx_do_madvise+0x10/0x10 [ 557.566938][T16063] ? __se_sys_futex+0x3a8/0x450 [ 557.566984][T16063] ? rcu_is_watching+0x16/0xb0 [ 557.567021][T16063] __x64_sys_madvise+0xa6/0xc0 [ 557.567050][T16063] do_syscall_64+0x166/0x520 [ 557.567081][T16063] ? trace_irq_disable+0x3b/0x140 [ 557.567107][T16063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.567128][T16063] ? clear_bhb_loop+0x70/0xc0 [ 557.567154][T16063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.567175][T16063] RIP: 0033:0x7f3b2839f559 [ 557.567195][T16063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.567214][T16063] RSP: 002b:00007f3b29287028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 557.567237][T16063] RAX: ffffffffffffffda RBX: 00007f3b28625fa0 RCX: 00007f3b2839f559 [ 557.567254][T16063] RDX: 0000000000000066 RSI: 000000000080fd00 RDI: 000020000042f000 [ 557.567268][T16063] RBP: 00007f3b28436b50 R08: 0000000000000000 R09: 0000000000000000 [ 557.567282][T16063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.567296][T16063] R13: 00007f3b28626038 R14: 00007f3b28625fa0 R15: 00007fffd45849e8 [ 557.567331][T16063] [ 557.606834][ T10] usb 6-1: New USB device found: idVendor=1943, idProduct=2255, bcdDevice=d7.fb [ 557.610075][ T10] usb 6-1: config 255 has an invalid interface number: 133 but max is 0 [ 557.610100][ T10] usb 6-1: config 255 has no interface number 0 [ 557.610128][ T10] usb 6-1: config 255 interface 133 has no altsetting 0 [ 557.619109][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.619136][ T10] usb 6-1: Product: syz [ 557.619151][ T10] usb 6-1: Manufacturer: syz [ 557.619165][ T10] usb 6-1: SerialNumber: syz [ 557.728530][T16068] FAULT_INJECTION: forcing a failure. [ 557.728530][T16068] name failslab, interval 1, probability 0, space 0, times 0 [ 557.728573][T16068] CPU: 0 UID: 0 PID: 16068 Comm: syz.8.3112 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.728600][T16068] Tainted: [L]=SOFTLOCKUP [ 557.728608][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 557.728620][T16068] Call Trace: [ 557.728628][T16068] [ 557.728636][T16068] dump_stack_lvl+0xe8/0x150 [ 557.728669][T16068] should_fail_ex+0x3eb/0x540 [ 557.728705][T16068] should_failslab+0xa8/0x100 [ 557.728733][T16068] __kmalloc_cache_noprof+0x9e/0x600 [ 557.728757][T16068] ? device_add+0xb6/0xb80 [ 557.728781][T16068] ? device_add+0xb6/0xb80 [ 557.728811][T16068] device_add+0xb6/0xb80 [ 557.728839][T16068] netdev_register_kobject+0x197/0x350 [ 557.728866][T16068] register_netdevice+0x17be/0x2280 [ 557.728910][T16068] ? __pfx_register_netdevice+0x10/0x10 [ 557.728945][T16068] ? net_generic+0x1e/0x240 [ 557.728980][T16068] vti6_tnl_create2+0x79/0x370 [ 557.729013][T16068] vti6_locate+0x684/0x780 [ 557.729050][T16068] ? __pfx_vti6_locate+0x10/0x10 [ 557.729078][T16068] ? __might_fault+0xaf/0x130 [ 557.729105][T16068] ? vti6_siocdevprivate+0x560/0x820 [ 557.729138][T16068] vti6_siocdevprivate+0x6ac/0x820 [ 557.729170][T16068] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 557.729220][T16068] ? __pfx___mutex_lock+0x10/0x10 [ 557.729247][T16068] ? full_name_hash+0xb0/0xe0 [ 557.729276][T16068] dev_ifsioc+0xb56/0x1360 [ 557.729308][T16068] dev_ioctl+0x84c/0x1150 [ 557.729335][T16068] sock_ioctl+0x753/0x7e0 [ 557.729367][T16068] ? __pfx_sock_ioctl+0x10/0x10 [ 557.729398][T16068] ? __fget_files+0x2a/0x420 [ 557.729424][T16068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 557.729448][T16068] ? __pfx_sock_ioctl+0x10/0x10 [ 557.729477][T16068] __se_sys_ioctl+0xfc/0x170 [ 557.729506][T16068] do_syscall_64+0x166/0x520 [ 557.729531][T16068] ? trace_irq_disable+0x3b/0x140 [ 557.729561][T16068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.729581][T16068] ? clear_bhb_loop+0x70/0xc0 [ 557.729604][T16068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.729625][T16068] RIP: 0033:0x7f3b2839f559 [ 557.729642][T16068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.729659][T16068] RSP: 002b:00007f3b29287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.729681][T16068] RAX: ffffffffffffffda RBX: 00007f3b28625fa0 RCX: 00007f3b2839f559 [ 557.729696][T16068] RDX: 0000200000000780 RSI: 00000000000089f1 RDI: 0000000000000003 [ 557.729710][T16068] RBP: 00007f3b29287090 R08: 0000000000000000 R09: 0000000000000000 [ 557.729723][T16068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.729734][T16068] R13: 00007f3b28626038 R14: 00007f3b28625fa0 R15: 00007fffd45849e8 [ 557.729767][T16068] [ 557.831550][T16071] openvswitch: netlink: Key type 316 is out of range max 32 [ 557.831801][T16071] FAULT_INJECTION: forcing a failure. [ 557.831801][T16071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.831827][T16071] CPU: 0 UID: 0 PID: 16071 Comm: syz.8.3113 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.831855][T16071] Tainted: [L]=SOFTLOCKUP [ 557.831862][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 557.831874][T16071] Call Trace: [ 557.831883][T16071] [ 557.831891][T16071] dump_stack_lvl+0xe8/0x150 [ 557.831924][T16071] should_fail_ex+0x3eb/0x540 [ 557.831959][T16071] _copy_to_user+0x31/0xb0 [ 557.831981][T16071] simple_read_from_buffer+0xe1/0x170 [ 557.832008][T16071] proc_fail_nth_read+0x1bb/0x230 [ 557.832040][T16071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.832071][T16071] ? rw_verify_area+0x24a/0x4c0 [ 557.832097][T16071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 557.832125][T16071] vfs_read+0x213/0xa80 [ 557.832153][T16071] ? __pfx___mutex_lock+0x10/0x10 [ 557.832183][T16071] ? __pfx_vfs_read+0x10/0x10 [ 557.832208][T16071] ? __fget_files+0x2a/0x420 [ 557.832229][T16071] ? __fget_files+0x3a2/0x420 [ 557.832249][T16071] ? __fget_files+0x2a/0x420 [ 557.832274][T16071] ? fdget+0x1ac/0x250 [ 557.832302][T16071] ksys_read+0x150/0x270 [ 557.832328][T16071] ? __pfx_ksys_read+0x10/0x10 [ 557.832362][T16071] do_syscall_64+0x166/0x520 [ 557.832389][T16071] ? trace_irq_disable+0x3b/0x140 [ 557.832413][T16071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.832432][T16071] ? clear_bhb_loop+0x70/0xc0 [ 557.832455][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.832475][T16071] RIP: 0033:0x7f3b2835fd8e [ 557.832494][T16071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 557.832511][T16071] RSP: 002b:00007f3b29286fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 557.832538][T16071] RAX: ffffffffffffffda RBX: 00007f3b292876c0 RCX: 00007f3b2835fd8e [ 557.832552][T16071] RDX: 000000000000000f RSI: 00007f3b292870a0 RDI: 0000000000000004 [ 557.832565][T16071] RBP: 00007f3b29287090 R08: 0000000000000000 R09: 0000000000000000 [ 557.832578][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.832590][T16071] R13: 00007f3b28626038 R14: 00007f3b28625fa0 R15: 00007fffd45849e8 [ 557.832623][T16071] [ 557.866259][ T9255] ath6kl: Failed to submit usb control message: -110 [ 557.866361][ T9255] ath6kl: unable to send the bmi data to the device: -110 [ 557.866376][ T9255] ath6kl: Unable to send get target info: -110 [ 557.908071][ T9255] ath6kl: Failed to init ath6kl core: -110 [ 557.909609][ T9255] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 557.995901][ T10] s2255 6-1:255.133: Could not find bulk-in endpoint [ 557.995996][ T10] Sensoray 2255 driver load failed: 0xfffffff4 [ 557.996015][ T10] s2255 6-1:255.133: probe with driver s2255 failed with error -12 [ 557.999913][ T10] usbhid 6-1:255.133: couldn't find an input interrupt endpoint [ 558.013949][ T10] usb 6-1: USB disconnect, device number 86 [ 558.357316][ T9255] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 558.510550][ T9255] usb 9-1: New USB device found: idVendor=055f, idProduct=a800, bcdDevice=1.00 [ 558.511806][ T9255] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 558.511846][ T9255] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.517760][T16075] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 558.526033][ T9255] mdc800 9-1:1.0: probe fails -> Wrong Endpoints. [ 558.735132][ T9255] usb 9-1: USB disconnect, device number 45 [ 558.787454][T16081] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3117'. [ 558.809762][T16081] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3117'. [ 558.959699][ T5810] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 558.978441][T16084] sit0: entered promiscuous mode [ 558.984941][T16084] netlink: 'syz.4.3118': attribute type 1 has an invalid length. [ 558.984968][T16084] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3118'. [ 559.009779][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3118'. [ 559.110587][ T5810] usb 6-1: Using ep0 maxpacket: 32 [ 559.117204][ T5810] usb 6-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 559.118265][ T5810] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 559.118283][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 559.118297][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 559.118312][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 559.118345][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 559.120255][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.120269][ T5810] usb 6-1: Product: syz [ 559.120277][ T5810] usb 6-1: Manufacturer: syz [ 559.120285][ T5810] usb 6-1: SerialNumber: syz [ 559.209250][ T5810] usb 6-1: config 0 descriptor?? [ 559.292770][T16086] FAULT_INJECTION: forcing a failure. [ 559.292770][T16086] name failslab, interval 1, probability 0, space 0, times 0 [ 559.292798][T16086] CPU: 0 UID: 0 PID: 16086 Comm: syz.8.3119 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.292826][T16086] Tainted: [L]=SOFTLOCKUP [ 559.292834][T16086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 559.292846][T16086] Call Trace: [ 559.292855][T16086] [ 559.292864][T16086] dump_stack_lvl+0xe8/0x150 [ 559.292888][T16086] should_fail_ex+0x3eb/0x540 [ 559.292910][T16086] should_failslab+0xa8/0x100 [ 559.292926][T16086] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 559.292949][T16086] ? alloc_vfsmnt+0x193/0x510 [ 559.292976][T16086] ? alloc_vfsmnt+0x193/0x510 [ 559.293012][T16086] kstrdup+0x42/0x100 [ 559.293028][T16086] alloc_vfsmnt+0x193/0x510 [ 559.293045][T16086] clone_mnt+0x4c/0xad0 [ 559.293062][T16086] copy_tree+0x3d8/0x9a0 [ 559.293077][T16086] copy_mnt_ns+0x3ff/0xd00 [ 559.293098][T16086] ? rcu_is_watching+0x16/0xb0 [ 559.293130][T16086] ? __pfx_copy_mnt_ns+0x10/0x10 [ 559.293151][T16086] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 559.293178][T16086] create_new_namespaces+0xcf/0x6b0 [ 559.293194][T16086] ? bpf_lsm_capable+0x9/0x20 [ 559.293209][T16086] ? security_capable+0x7e/0x2c0 [ 559.293227][T16086] unshare_nsproxy_namespaces+0x144/0x190 [ 559.293253][T16086] ksys_unshare+0x532/0x890 [ 559.293284][T16086] ? __pfx_ksys_unshare+0x10/0x10 [ 559.293309][T16086] ? ksys_write+0x242/0x270 [ 559.293330][T16086] ? __pfx_ksys_write+0x10/0x10 [ 559.293349][T16086] __x64_sys_unshare+0x38/0x50 [ 559.293363][T16086] do_syscall_64+0x166/0x520 [ 559.293378][T16086] ? trace_irq_disable+0x3b/0x140 [ 559.293399][T16086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.293427][T16086] ? clear_bhb_loop+0x70/0xc0 [ 559.293452][T16086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.293472][T16086] RIP: 0033:0x7f3b2839f559 [ 559.293485][T16086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.293495][T16086] RSP: 002b:00007f3b29287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 559.293507][T16086] RAX: ffffffffffffffda RBX: 00007f3b28625fa0 RCX: 00007f3b2839f559 [ 559.293515][T16086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062060000 [ 559.293522][T16086] RBP: 00007f3b29287090 R08: 0000000000000000 R09: 0000000000000000 [ 559.293529][T16086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.293539][T16086] R13: 00007f3b28626038 R14: 00007f3b28625fa0 R15: 00007fffd45849e8 [ 559.293571][T16086] [ 559.419753][ T10] usb 7-1: USB disconnect, device number 90 [ 559.623389][ T9255] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 559.663177][ T5810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 559.663223][ T5810] input input91: Device does not respond to id packet M [ 559.677192][ T5810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 559.677243][ T5810] input input91: Device does not respond to id packet P [ 559.693616][ T5810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 559.693663][ T5810] input input91: Device does not respond to id packet B [ 559.694057][ T5810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 559.694100][ T5810] input input91: Device does not respond to id packet N [ 559.694464][ T5810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 559.695214][ T5810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 559.697027][ T5810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 559.697428][ T5810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 559.701157][ T5810] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input91 [ 559.776711][ T9255] usb 9-1: New USB device found: idVendor=05ac, idProduct=0225, bcdDevice=80.16 [ 559.787033][ T9255] usb 9-1: config 2 has an invalid interface number: 49 but max is 1 [ 559.787058][ T9255] usb 9-1: config 2 has an invalid interface number: 116 but max is 1 [ 559.787078][ T9255] usb 9-1: config 2 has no interface number 0 [ 559.787093][ T9255] usb 9-1: config 2 has no interface number 1 [ 559.787143][ T9255] usb 9-1: config 2 interface 116 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 559.787170][ T9255] usb 9-1: config 2 interface 116 altsetting 10 endpoint 0x84 has invalid maxpacket 62055, setting to 64 [ 559.787195][ T9255] usb 9-1: config 2 interface 116 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 559.787223][ T9255] usb 9-1: config 2 interface 49 has no altsetting 0 [ 559.787241][ T9255] usb 9-1: config 2 interface 116 has no altsetting 0 [ 559.796436][ T9255] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.796463][ T9255] usb 9-1: Product: syz [ 559.796479][ T9255] usb 9-1: Manufacturer: syz [ 559.796493][ T9255] usb 9-1: SerialNumber: syz [ 559.899901][ T5810] usb 6-1: USB disconnect, device number 87 [ 560.020075][ T9255] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:2.49/input/input92 [ 560.187037][ T10] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 560.222546][ T4993] bcm5974 9-1:2.49: could not read from device [ 560.337425][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 560.338160][ T10] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 560.339503][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 560.339533][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.342100][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.342125][ T10] usb 5-1: Product: syz [ 560.342141][ T10] usb 5-1: Manufacturer: syz [ 560.342155][ T10] usb 5-1: SerialNumber: syz [ 560.345334][ T10] usb 5-1: config 0 descriptor?? [ 560.422766][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 560.422836][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 560.432582][ T4993] bcm5974 9-1:2.49: could not read from device [ 560.435707][T16089] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3120'. [ 560.437804][T16088] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3120'. [ 560.523847][T16116] netlink: Unknown conntrack attr (0) [ 560.523888][T16116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.604124][T16118] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 560.610943][ T5810] usb 7-1: new low-speed USB device number 91 using dummy_hcd [ 560.738840][ T5810] usb 7-1: device descriptor read/64, error -71 [ 560.910929][T16021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 560.917221][T16021] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 560.930542][T16021] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 560.952373][T16021] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 560.956082][T16021] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.981890][ T5810] usb 7-1: new low-speed USB device number 92 using dummy_hcd [ 560.998620][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 560.999220][ T10] em28xx 5-1:0.0: Config register raw data: 0x41 [ 561.111117][ T5810] usb 7-1: device descriptor read/64, error -71 [ 561.222232][ T5810] usb usb7-port1: attempt power cycle [ 561.486441][T16097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3123'. [ 561.510432][T11726] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.538993][T16097] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3123'. [ 561.562774][ T5810] usb 7-1: new low-speed USB device number 93 using dummy_hcd [ 561.568675][T16121] rxe_eth0 speed is unknown, defaulting to 1000 [ 561.587795][ T5810] usb 7-1: device descriptor read/8, error -71 [ 561.662624][T11726] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.749573][T11726] team0: Port device netdevsim1 removed [ 561.751386][T11726] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.824003][ T5810] usb 7-1: new low-speed USB device number 94 using dummy_hcd [ 561.845027][ T5810] usb 7-1: device descriptor read/8, error -71 [ 561.846698][T11726] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.957733][ T5810] usb usb7-port1: unable to enumerate USB device [ 562.112308][T11726] bond0: left allmulticast mode [ 562.112331][T11726] bond_slave_0: left allmulticast mode [ 562.112349][T11726] bond_slave_1: left allmulticast mode [ 562.134188][T11726] bridge0: port 3(bond0) entered disabled state [ 562.138562][T11726] bridge_slave_1: left allmulticast mode [ 562.138586][T11726] bridge_slave_1: left promiscuous mode [ 562.138882][T11726] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.156853][T11726] bridge_slave_0: left allmulticast mode [ 562.156878][T11726] bridge_slave_0: left promiscuous mode [ 562.157127][T11726] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.355707][T11726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.355985][T11726] bond_slave_0: left promiscuous mode [ 562.379963][T11726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.383543][T11726] bond_slave_1: left promiscuous mode [ 562.384831][T11726] bond0 (unregistering): Released all slaves [ 562.407970][ T4993] bcm5974 9-1:2.49: could not read from device [ 562.427536][ T9255] usb 9-1: USB disconnect, device number 46 [ 562.431084][ T4993] bcm5974 9-1:2.49: could not read from device [ 562.504686][T16138] tmpfs: Bad value for 'mpol' [ 562.689125][T11726] tipc: Left network mode [ 562.716594][T16121] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.716765][T16121] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.716889][T16121] bridge_slave_0: entered allmulticast mode [ 562.719998][T16121] bridge_slave_0: entered promiscuous mode [ 562.727029][T16121] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.727156][T16121] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.727276][T16121] bridge_slave_1: entered allmulticast mode [ 562.730330][T16121] bridge_slave_1: entered promiscuous mode [ 562.772037][T16121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.790809][T16121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.893460][T16121] team0: Port device team_slave_0 added [ 562.900324][T16121] team0: Port device team_slave_1 added [ 562.920121][ T5810] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 562.996495][T16121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.996513][T16121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.996535][T16121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.003886][T16121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.003903][T16121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.003928][T16121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.011501][ T55] Bluetooth: hci0: command tx timeout [ 563.063468][ T5810] usb 9-1: device descriptor read/64, error -71 [ 563.101176][T11726] IPVS: stopping master sync thread 12004 ... [ 563.231509][T16121] hsr_slave_0: entered promiscuous mode [ 563.232412][T16121] hsr_slave_1: entered promiscuous mode [ 563.233043][T16121] debugfs: 'hsr0' already exists in 'hsr' [ 563.233054][T16121] Cannot create hsr debugfs directory [ 563.304508][ T5810] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 563.441111][ T5810] usb 9-1: device descriptor read/64, error -71 [ 563.510035][T16162] tmpfs: Bad value for 'mpol' [ 563.510723][T16162] FAULT_INJECTION: forcing a failure. [ 563.510723][T16162] name failslab, interval 1, probability 0, space 0, times 0 [ 563.510747][T16162] CPU: 0 UID: 0 PID: 16162 Comm: syz.6.3136 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.510767][T16162] Tainted: [L]=SOFTLOCKUP [ 563.510772][T16162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 563.510781][T16162] Call Trace: [ 563.510788][T16162] [ 563.510794][T16162] dump_stack_lvl+0xe8/0x150 [ 563.510822][T16162] should_fail_ex+0x3eb/0x540 [ 563.510849][T16162] should_failslab+0xa8/0x100 [ 563.510872][T16162] __kmalloc_noprof+0xf9/0x710 [ 563.510889][T16162] ? tomoyo_encode+0x2ad/0x570 [ 563.510910][T16162] ? tomoyo_encode+0x2ad/0x570 [ 563.510936][T16162] tomoyo_encode+0x2ad/0x570 [ 563.510961][T16162] tomoyo_realpath_from_path+0x5fd/0x640 [ 563.510989][T16162] ? tomoyo_path_number_perm+0x219/0x5f0 [ 563.511008][T16162] tomoyo_path_number_perm+0x246/0x5f0 [ 563.511028][T16162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 563.511045][T16162] ? __lock_acquire+0x747/0x2de0 [ 563.511090][T16162] ? __fget_files+0x2a/0x420 [ 563.511110][T16162] ? __fget_files+0x2a/0x420 [ 563.511127][T16162] ? __fget_files+0x2a/0x420 [ 563.511148][T16162] security_file_ioctl+0xc3/0x2a0 [ 563.511169][T16162] __se_sys_ioctl+0x47/0x170 [ 563.511193][T16162] do_syscall_64+0x166/0x520 [ 563.511213][T16162] ? trace_irq_disable+0x3b/0x140 [ 563.511232][T16162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.511250][T16162] ? clear_bhb_loop+0x70/0xc0 [ 563.511269][T16162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.511284][T16162] RIP: 0033:0x7ff03a79f559 [ 563.511299][T16162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.511312][T16162] RSP: 002b:00007ff03b68f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.511329][T16162] RAX: ffffffffffffffda RBX: 00007ff03aa25fa0 RCX: 00007ff03a79f559 [ 563.511340][T16162] RDX: 0000200000000580 RSI: 0000000000008914 RDI: 0000000000000004 [ 563.511350][T16162] RBP: 00007ff03b68f090 R08: 0000000000000000 R09: 0000000000000000 [ 563.511359][T16162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.511368][T16162] R13: 00007ff03aa26038 R14: 00007ff03aa25fa0 R15: 00007ffc43645918 [ 563.511393][T16162] [ 563.553795][ T5810] usb usb9-port1: attempt power cycle [ 563.624999][T16162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 563.648460][ T5760] usb 5-1: USB disconnect, device number 115 [ 563.650201][ T5760] em28xx 5-1:0.0: Disconnecting em28xx [ 563.726138][ T5760] em28xx: Freeing device [ 563.904206][ T5810] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 563.905736][ T5303] 8021q: adding VLAN 0 to HW filter on device eth18 [ 563.922876][T16165] tmpfs: Bad value for 'mpol' [ 563.928363][ T5810] usb 9-1: device descriptor read/8, error -71 [ 564.164665][ T5810] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 564.202288][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3140'. [ 564.219433][ T5810] usb 9-1: device descriptor read/8, error -71 [ 564.325557][ T5810] usb usb9-port1: unable to enumerate USB device [ 564.509750][T16181] tipc: Enabling of bearer rejected, failed to enable media [ 565.008488][T11726] hsr_slave_0: left promiscuous mode [ 565.014779][T11726] hsr_slave_1: left promiscuous mode [ 565.015753][T11726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.015772][T11726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.016234][ T5008] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 565.016579][ T5008] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 565.016595][ T5008] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 565.016660][ T5008] loop0: [ 565.040517][T11726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.040540][T11726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.097787][ T55] Bluetooth: hci0: command tx timeout [ 565.113747][T11726] veth1_macvtap: left promiscuous mode [ 565.113775][T11726] veth0_macvtap: left promiscuous mode [ 565.113866][T11726] veth1_vlan: left promiscuous mode [ 565.113909][T11726] veth0_vlan: left promiscuous mode [ 565.409888][ T5810] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 565.453894][T11726] team0 (unregistering): Port device team_slave_1 removed [ 565.470902][T11726] team0 (unregistering): Port device team_slave_0 removed [ 565.559436][ T5810] usb 7-1: Using ep0 maxpacket: 32 [ 565.560191][ T5810] usb 7-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 565.561494][ T5810] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 565.561521][ T5810] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 565.561545][ T5810] usb 7-1: config 0 interface 0 has no altsetting 0 [ 565.563778][ T5810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.563802][ T5810] usb 7-1: Product: syz [ 565.563818][ T5810] usb 7-1: Manufacturer: syz [ 565.563832][ T5810] usb 7-1: SerialNumber: syz [ 565.567688][ T5810] usb 7-1: config 0 descriptor?? [ 565.797452][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.797896][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.021204][ T5747] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 566.039041][ T5810] gs_usb 7-1:0.0: Configuring for 137 interfaces [ 566.173153][ T5747] usb 5-1: New USB device found: idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 566.174897][ T5747] usb 5-1: config 253 has an invalid interface number: 130 but max is 0 [ 566.174926][ T5747] usb 5-1: config 253 has no interface number 0 [ 566.174984][ T5747] usb 5-1: config 253 interface 130 has no altsetting 0 [ 566.177067][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.177091][ T5747] usb 5-1: Product: syz [ 566.177106][ T5747] usb 5-1: Manufacturer: syz [ 566.177122][ T5747] usb 5-1: SerialNumber: syz [ 566.202184][T11726] IPVS: stop unused estimator thread 0... [ 566.219678][T16226] FAULT_INJECTION: forcing a failure. [ 566.219678][T16226] name failslab, interval 1, probability 0, space 0, times 0 [ 566.219711][T16226] CPU: 0 UID: 0 PID: 16226 Comm: syz.8.3149 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.219737][T16226] Tainted: [L]=SOFTLOCKUP [ 566.219744][T16226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 566.219756][T16226] Call Trace: [ 566.219766][T16226] [ 566.219774][T16226] dump_stack_lvl+0xe8/0x150 [ 566.219807][T16226] should_fail_ex+0x3eb/0x540 [ 566.219842][T16226] should_failslab+0xa8/0x100 [ 566.219869][T16226] ? ptlock_alloc+0x20/0x70 [ 566.219896][T16226] kmem_cache_alloc_noprof+0x9c/0x600 [ 566.219920][T16226] ? ptlock_alloc+0x20/0x70 [ 566.219954][T16226] ptlock_alloc+0x20/0x70 [ 566.219981][T16226] pte_alloc_one+0x7a/0x3d0 [ 566.220009][T16226] __pte_alloc+0x25/0x1a0 [ 566.220033][T16226] copy_pmd_range+0x5395/0x5c00 [ 566.220080][T16226] ? __pfx___css_rstat_updated+0x10/0x10 [ 566.220119][T16226] ? __pfx_copy_pmd_range+0x10/0x10 [ 566.220146][T16226] ? do_raw_spin_lock+0x12b/0x2f0 [ 566.220190][T16226] ? _raw_spin_unlock+0x28/0x50 [ 566.220214][T16226] ? __pud_alloc+0x348/0x460 [ 566.220244][T16226] copy_page_range+0xcc2/0x12b0 [ 566.220290][T16226] ? __pfx_copy_page_range+0x10/0x10 [ 566.220328][T16226] dup_mmap+0xf70/0x1e10 [ 566.220365][T16226] ? __pfx_dup_mmap+0x10/0x10 [ 566.220391][T16226] ? do_raw_spin_lock+0x12b/0x2f0 [ 566.220432][T16226] ? lock_acquire+0x115/0x350 [ 566.220472][T16226] copy_mm+0x115/0x470 [ 566.220498][T16226] copy_process+0x1ecc/0x4510 [ 566.220535][T16226] ? copy_process+0xd17/0x4510 [ 566.220576][T16226] ? __pfx_copy_process+0x10/0x10 [ 566.220598][T16226] ? get_pid_task+0x20/0x1f0 [ 566.220614][T16226] ? get_pid_task+0x20/0x1f0 [ 566.220639][T16226] kernel_clone+0x2d7/0x940 [ 566.220670][T16226] ? __pfx_kernel_clone+0x10/0x10 [ 566.220715][T16226] __x64_sys_clone+0x1b6/0x230 [ 566.220744][T16226] ? __pfx___x64_sys_clone+0x10/0x10 [ 566.220785][T16226] ? __pfx_ksys_write+0x10/0x10 [ 566.220822][T16226] do_syscall_64+0x166/0x520 [ 566.220849][T16226] ? trace_irq_disable+0x3b/0x140 [ 566.220872][T16226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.220893][T16226] ? clear_bhb_loop+0x70/0xc0 [ 566.220917][T16226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.220936][T16226] RIP: 0033:0x7f3b2839f559 [ 566.220954][T16226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.220970][T16226] RSP: 002b:00007f3b29286fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 566.220990][T16226] RAX: ffffffffffffffda RBX: 00007f3b28625fa0 RCX: 00007f3b2839f559 [ 566.221005][T16226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 566.221016][T16226] RBP: 00007f3b29287090 R08: 0000000000000000 R09: 0000000000000000 [ 566.221028][T16226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 566.221039][T16226] R13: 00007f3b28626038 R14: 00007f3b28625fa0 R15: 00007fffd45849e8 [ 566.221071][T16226] [ 566.368182][T16121] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 566.388128][T16121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 566.391042][T16121] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 566.406735][T16121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 566.408158][T16121] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 566.420606][T16121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 566.424461][T16121] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 566.439775][T16121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 566.521398][ T5810] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 566.529938][ T5810] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 566.530243][ T5810] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 566.627357][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.628742][T16214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.640820][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.647748][T16214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.688407][ T5810] usb 7-1: USB disconnect, device number 95 [ 566.800330][T16121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.838629][T16121] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.849309][T11723] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.849437][T11723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.877034][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.877152][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.926174][ T5747] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 566.930925][ T5747] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 566.930969][ T5747] dib0700: firmware download failed at 7 with -22 [ 566.938354][ T5747] usb 5-1: USB disconnect, device number 116 [ 566.959325][T16247] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 567.185844][ T55] Bluetooth: hci0: command tx timeout [ 567.241971][ T5747] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 567.400687][ T5747] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 567.772380][ T33] audit: type=1326 audit(1799307072.443:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16263 comm="syz.8.3154" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2839f559 code=0x7fc00000 [ 568.542782][T16121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.627721][ T33] audit: type=1326 audit(1799307073.300:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16288 comm="syz.4.3158" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f674ad9f559 code=0x0 [ 569.221185][T16121] veth0_vlan: entered promiscuous mode [ 569.269164][T16121] veth1_vlan: entered promiscuous mode [ 569.272017][T16021] Bluetooth: hci0: command tx timeout [ 569.462050][T16121] veth0_macvtap: entered promiscuous mode [ 569.480527][T16121] veth1_macvtap: entered promiscuous mode [ 569.600017][T16121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.647911][T16121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.693972][ T4148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.694843][ T4148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.694879][ T4148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.694911][ T4148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.712263][T16350] netlink: 'syz.4.3160': attribute type 10 has an invalid length. [ 569.740223][T16350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.749073][T16350] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 569.755238][T16021] Bluetooth: hci1: command 0x1003 tx timeout [ 569.755635][ T55] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 569.997164][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.997223][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.144028][T11723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.144049][T11723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.275049][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3161'. [ 570.275075][T16361] openvswitch: netlink: Flow actions attr not present in new flow. [ 570.371635][ T4148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.371658][ T4148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.550919][T16366] netlink: 'syz.4.3164': attribute type 9 has an invalid length. [ 570.550940][T16366] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.3164'. [ 570.551222][T16366] FAULT_INJECTION: forcing a failure. [ 570.551222][T16366] name failslab, interval 1, probability 0, space 0, times 0 [ 570.551245][T16366] CPU: 0 UID: 0 PID: 16366 Comm: syz.4.3164 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.551265][T16366] Tainted: [L]=SOFTLOCKUP [ 570.551270][T16366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 570.551290][T16366] Call Trace: [ 570.551297][T16366] [ 570.551304][T16366] dump_stack_lvl+0xe8/0x150 [ 570.551330][T16366] should_fail_ex+0x3eb/0x540 [ 570.551357][T16366] should_failslab+0xa8/0x100 [ 570.551377][T16366] ? __kernfs_new_node+0xe6/0x980 [ 570.551399][T16366] kmem_cache_alloc_noprof+0x9c/0x600 [ 570.551417][T16366] ? kstrdup+0x81/0x100 [ 570.551432][T16366] ? __kernfs_new_node+0xe6/0x980 [ 570.551459][T16366] __kernfs_new_node+0xe6/0x980 [ 570.551488][T16366] ? __pfx___kernfs_new_node+0x10/0x10 [ 570.551511][T16366] ? kernfs_root+0x1c/0x230 [ 570.551536][T16366] ? kernfs_root+0x1c/0x230 [ 570.551557][T16366] ? kernfs_root+0x1c/0x230 [ 570.551576][T16366] ? kernfs_root+0x1c/0x230 [ 570.551600][T16366] kernfs_create_dir_ns+0xf7/0x220 [ 570.551619][T16366] sysfs_create_dir_ns+0x12f/0x2a0 [ 570.551642][T16366] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 570.551667][T16366] ? do_raw_spin_unlock+0xf5/0x200 [ 570.551692][T16366] kobject_add_internal+0x622/0xcd0 [ 570.551717][T16366] kobject_add+0x163/0x240 [ 570.551734][T16366] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 570.551765][T16366] ? __pfx_kobject_add+0x10/0x10 [ 570.551790][T16366] ? get_device_parent+0x366/0x3a0 [ 570.551814][T16366] device_add+0x3fa/0xb80 [ 570.551835][T16366] device_create+0x269/0x300 [ 570.551859][T16366] ? timer_init_key+0x161/0x2c0 [ 570.551877][T16366] ? __pfx_device_create+0x10/0x10 [ 570.551898][T16366] ? ieee80211_roc_setup+0x119/0x1d0 [ 570.551916][T16366] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 570.551936][T16366] mac80211_hwsim_new_radio+0x335/0x5990 [ 570.551985][T16366] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 570.552007][T16366] ? trace_kmalloc+0x2a/0xf0 [ 570.552032][T16366] hwsim_new_radio_nl+0xd8b/0xf90 [ 570.552067][T16366] genl_family_rcv_msg_doit+0x233/0x340 [ 570.552099][T16366] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 570.552132][T16366] ? bpf_lsm_capable+0x9/0x20 [ 570.552150][T16366] ? security_capable+0x7e/0x2c0 [ 570.552174][T16366] genl_rcv_msg+0x614/0x7a0 [ 570.552199][T16366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 570.552218][T16366] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 570.552242][T16366] ? __asan_memcpy+0x40/0x70 [ 570.552265][T16366] netlink_rcv_skb+0x226/0x4a0 [ 570.552293][T16366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 570.552318][T16366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 570.552346][T16366] ? down_read+0x2b9/0x320 [ 570.552365][T16366] genl_rcv+0x28/0x40 [ 570.552382][T16366] netlink_unicast+0x8ef/0xa80 [ 570.552423][T16366] netlink_sendmsg+0x7f0/0xb20 [ 570.552447][T16366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.552468][T16366] ? aa_sock_msg_perm+0x144/0x210 [ 570.552495][T16366] ? apparmor_socket_sendmsg+0x98/0x360 [ 570.552517][T16366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.552534][T16366] sock_sendmsg_nosec+0x14e/0x190 [ 570.552555][T16366] ____sys_sendmsg+0x54e/0x850 [ 570.552585][T16366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.552612][T16366] ? import_iovec+0x73/0xa0 [ 570.552638][T16366] ___sys_sendmsg+0x2a6/0x360 [ 570.552656][T16366] ? __lock_acquire+0x747/0x2de0 [ 570.552678][T16366] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.552728][T16366] ? __fget_files+0x3a2/0x420 [ 570.552746][T16366] ? __fget_files+0x2a/0x420 [ 570.552773][T16366] __x64_sys_sendmsg+0x1b1/0x290 [ 570.552799][T16366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 570.552834][T16366] do_syscall_64+0x166/0x520 [ 570.552855][T16366] ? trace_irq_disable+0x3b/0x140 [ 570.552873][T16366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.552888][T16366] ? clear_bhb_loop+0x70/0xc0 [ 570.552907][T16366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.552922][T16366] RIP: 0033:0x7f674ad9f559 [ 570.552938][T16366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.552953][T16366] RSP: 002b:00007f674bd4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.552972][T16366] RAX: ffffffffffffffda RBX: 00007f674b025fa0 RCX: 00007f674ad9f559 [ 570.552986][T16366] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 570.552995][T16366] RBP: 00007f674bd4d090 R08: 0000000000000000 R09: 0000000000000000 [ 570.553004][T16366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.553013][T16366] R13: 00007f674b026038 R14: 00007f674b025fa0 R15: 00007ffe6f453388 [ 570.553037][T16366] [ 570.688475][T16366] kobject: kobject_add_internal failed for hwsim39 (error: -12 parent: mac80211_hwsim) [ 570.831620][T16370] sg_write: data in/out 410076/64 bytes for SCSI command 0x0-- guessing data in; [ 570.831620][T16370] program syz.8.3166 not setting count and/or reply_len properly [ 570.904665][ T33] audit: type=1326 audit(1799307075.564:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.8.3166" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b2839f559 code=0x0 [ 571.254190][T16377] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 571.372629][T16380] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 571.601773][T16382] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 571.766348][T16388] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3173'. [ 571.918576][T16390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 571.980510][ T5747] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 572.130328][ T5747] usb 7-1: Using ep0 maxpacket: 16 [ 572.131648][ T5747] usb 7-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 572.137091][ T5747] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 572.137125][ T5747] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 572.146013][ T5747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.146040][ T5747] usb 7-1: Product: syz [ 572.146055][ T5747] usb 7-1: Manufacturer: syz [ 572.146070][ T5747] usb 7-1: SerialNumber: syz [ 572.153279][ T5747] usb 7-1: config 0 descriptor?? [ 572.166186][ T5747] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 572.166221][ T5747] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 572.201447][T16402] netlink: 'syz.8.3176': attribute type 5 has an invalid length. [ 572.330786][ T9255] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 572.441065][ T5736] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 572.481739][ T9255] usb 5-1: Using ep0 maxpacket: 8 [ 572.489140][ T9255] usb 5-1: New USB device found: idVendor=046d, idProduct=c623, bcdDevice=0.00 [ 572.498905][T16406] FAULT_INJECTION: forcing a failure. [ 572.498905][T16406] name failslab, interval 1, probability 0, space 0, times 0 [ 572.499092][T16406] CPU: 1 UID: 0 PID: 16406 Comm: syz.5.3178 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.499121][T16406] Tainted: [L]=SOFTLOCKUP [ 572.499128][T16406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 572.499140][T16406] Call Trace: [ 572.499148][T16406] [ 572.499155][T16406] dump_stack_lvl+0xe8/0x150 [ 572.499189][T16406] should_fail_ex+0x3eb/0x540 [ 572.499224][T16406] should_failslab+0xa8/0x100 [ 572.499250][T16406] ? vm_area_dup+0x32/0x8e0 [ 572.499278][T16406] kmem_cache_alloc_noprof+0x9c/0x600 [ 572.499301][T16406] ? lock_acquire+0x115/0x350 [ 572.499320][T16406] ? vm_area_dup+0x32/0x8e0 [ 572.499322][ T9255] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.499352][ T9255] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.499356][T16406] vm_area_dup+0x32/0x8e0 [ 572.499376][ T9255] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.499383][T16406] ? __split_vma+0x2a6/0xa40 [ 572.499403][ T9255] usb 5-1: config 0 interface 0 has no altsetting 0 [ 572.499410][T16406] __split_vma+0x2c2/0xa40 [ 572.499438][ T9255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.499441][T16406] ? __pfx___split_vma+0x10/0x10 [ 572.499462][T16406] ? __schedule+0x17f3/0x5830 [ 572.499495][T16406] ? flush_tlb_mm_range+0x542/0x10b0 [ 572.499531][T16406] vms_gather_munmap_vmas+0x322/0x1370 [ 572.499564][T16406] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 572.499592][T16406] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 572.499615][T16406] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 572.499660][T16406] do_vmi_align_munmap+0x2b4/0x4b0 [ 572.499705][T16406] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 572.499751][T16406] ? mas_walk+0x37e/0x490 [ 572.499783][T16406] ? mas_find+0x642/0xcb0 [ 572.499806][T16406] do_vmi_munmap+0x252/0x2d0 [ 572.499838][T16406] move_vma+0x158f/0x1ce0 [ 572.499885][T16406] ? __pfx_move_vma+0x10/0x10 [ 572.499917][T16406] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 572.499943][T16406] ? mtree_load+0x12a/0x780 [ 572.499970][T16406] ? mtree_load+0x12a/0x780 [ 572.499993][T16406] ? mas_walk+0x37e/0x490 [ 572.500023][T16406] ? cap_mmap_addr+0xaa/0xf0 [ 572.500047][T16406] ? bpf_lsm_mmap_addr+0x9/0x50 [ 572.500072][T16406] ? security_mmap_addr+0x71/0x240 [ 572.500112][T16406] mremap_to+0x851/0x950 [ 572.500146][T16406] ? __pfx_mremap_to+0x10/0x10 [ 572.500180][T16406] ? __pfx_check_prep_vma+0x10/0x10 [ 572.500216][T16406] __se_sys_mremap+0xeb1/0x1260 [ 572.500266][T16406] ? __pfx___se_sys_mremap+0x10/0x10 [ 572.500291][T16406] ? fdget+0x1ac/0x250 [ 572.500317][T16406] ? fput+0xa0/0xd0 [ 572.500337][T16406] ? ksys_write+0x242/0x270 [ 572.500364][T16406] ? __pfx_ksys_write+0x10/0x10 [ 572.500395][T16406] ? __x64_sys_mremap+0x20/0xc0 [ 572.500421][T16406] do_syscall_64+0x166/0x520 [ 572.500451][T16406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.500469][T16406] ? clear_bhb_loop+0x70/0xc0 [ 572.500493][T16406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.500513][T16406] RIP: 0033:0x7f873699f559 [ 572.500533][T16406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.500550][T16406] RSP: 002b:00007f8737836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 572.500571][T16406] RAX: ffffffffffffffda RBX: 00007f8736c25fa0 RCX: 00007f873699f559 [ 572.500586][T16406] RDX: 0000000000002000 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 572.500599][T16406] RBP: 00007f8737836090 R08: 0000200000001000 R09: 0000000000000000 [ 572.500613][T16406] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 572.500626][T16406] R13: 00007f8736c26038 R14: 00007f8736c25fa0 R15: 00007ffd2b4af798 [ 572.500658][T16406] [ 572.591107][ T5736] usb 9-1: Using ep0 maxpacket: 32 [ 572.591909][ T5736] usb 9-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 572.593109][ T5736] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.593139][ T5736] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.596558][ T5736] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 572.596582][ T5736] usb 9-1: Product: syz [ 572.596597][ T5736] usb 9-1: Manufacturer: syz [ 572.700592][ T5736] hub 9-1:4.0: USB hub found [ 572.708083][ T9255] usb 5-1: config 0 descriptor?? [ 572.776601][ T5747] em28xx 7-1:0.0: chip ID is em2874 [ 572.864908][ T5736] hub 9-1:4.0: config failed, can't read hub descriptor (err -22) [ 572.923477][ T5736] usb 9-1: USB disconnect, device number 51 [ 573.058654][T16413] netlink: 'syz.5.3181': attribute type 9 has an invalid length. [ 573.058678][T16413] netlink: 134780 bytes leftover after parsing attributes in process `syz.5.3181'. [ 573.154541][ T5810] usb 7-1: USB disconnect, device number 96 [ 573.156350][ T5810] em28xx 7-1:0.0: Disconnecting em28xx [ 573.197122][ T5810] em28xx: Freeing device [ 573.227137][ T9255] input: HID 046d:c623 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C623.0035/input/input93 [ 573.299254][ T9255] logitech 0003:046D:C623.0035: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.4-1/input0 [ 573.363953][ T5736] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 573.516113][ T5736] usb 9-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 573.517453][ T5736] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 573.517485][ T5736] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.520243][ T5736] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 573.520265][ T5736] usb 9-1: Product: syz [ 573.520273][ T5736] usb 9-1: Manufacturer: syz [ 573.588869][ T5736] hub 9-1:4.0: USB hub found [ 573.778179][ T5736] hub 9-1:4.0: config failed, hub has too many ports! (err -19) [ 573.894444][ T5810] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 573.938197][ T9255] wacom 0003:056A:003F.0036: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 573.981922][T16402] Bluetooth: MGMT ver 1.23 [ 574.047081][ T5810] usb 6-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 574.050250][ T5810] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 574.050272][ T5810] usb 6-1: config 0 has no interface number 0 [ 574.052343][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.052363][ T5810] usb 6-1: Product: syz [ 574.052371][ T5810] usb 6-1: Manufacturer: syz [ 574.052379][ T5810] usb 6-1: SerialNumber: syz [ 574.057451][ T5810] usb 6-1: config 0 descriptor?? [ 574.093019][ T5810] usb 6-1: selecting invalid altsetting 1 [ 574.093183][ T5810] dvb_ttusb_budget: ttusb_init_controller: error [ 574.093217][ T5810] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 574.098897][ T5736] usb 9-1: USB disconnect, device number 52 [ 574.199646][ T5810] DVB: Unable to find symbol stv0299_attach() [ 574.229974][ T5810] DVB: Unable to find symbol tda8083_attach() [ 574.229986][ T5810] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 574.335721][ T9255] usb 5-1: USB disconnect, device number 117 [ 574.572948][T16446] program syz.8.3192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.952117][T16466] netlink: 'syz.8.3197': attribute type 4 has an invalid length. [ 574.952142][T16466] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3197'. [ 575.074069][T16463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.249983][T16463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.316142][ T9255] usb 6-1: USB disconnect, device number 88 [ 575.446342][T16463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.565259][T16463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.680151][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.680195][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.709571][T16479] can0: slcan on ttyS3. [ 575.710277][T11723] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.759054][ T10] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 575.780427][T11723] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.805430][T16479] can0 (unregistered): slcan off ttyS3. [ 575.853625][T16481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3205'. [ 575.855815][T16481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3205'. [ 575.889142][ T10] usb 9-1: device descriptor read/64, error -71 [ 576.129402][ T9255] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 576.129572][ T10] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 576.209806][T16356] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 576.259708][ T10] usb 9-1: device descriptor read/64, error -71 [ 576.264114][T16496] Bluetooth: hci0: unsupported parameter 5161 [ 576.264129][T16496] Bluetooth: hci0: unsupported parameter 8192 [ 576.264136][T16496] Bluetooth: hci0: unsupported parameter 5161 [ 576.264143][T16496] Bluetooth: hci0: unsupported parameter 8192 [ 576.304601][ T9255] usb 7-1: New USB device found: idVendor=0079, idProduct=0006, bcdDevice=0.00 [ 576.306300][ T9255] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.306332][ T9255] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 576.306359][ T9255] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 576.306386][ T9255] usb 7-1: config 0 interface 0 has no altsetting 0 [ 576.306419][ T9255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.343510][ T9255] usb 7-1: config 0 descriptor?? [ 576.363719][T16483] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 576.372600][ T10] usb usb9-port1: attempt power cycle [ 576.411436][T16356] usb 6-1: not running at top speed; connect to a high speed hub [ 576.411473][T16356] usb 6-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 576.412337][T16356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.413622][T16356] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 576.413645][T16356] usb 6-1: Product: syz [ 576.413660][T16356] usb 6-1: Manufacturer: syz [ 576.421915][T16356] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 576.619927][T16356] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 576.621446][T16356] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 576.621498][T16356] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 576.622230][T16356] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71 [ 576.647331][T16356] usb 6-1: USB disconnect, device number 89 [ 576.730864][ T10] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 576.761484][ T10] usb 9-1: device descriptor read/8, error -71 [ 576.779723][ T9255] usbhid 7-1:0.0: can't add hid device: -71 [ 576.779846][ T9255] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 576.797148][ T9255] usb 7-1: USB disconnect, device number 97 [ 577.021364][ T10] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 577.041941][ T10] usb 9-1: device descriptor read/8, error -71 [ 577.151991][ T10] usb usb9-port1: unable to enumerate USB device [ 577.469525][T16514] jffs2: notice: (16514) jffs2_build_xattr_subsystem: complete building xattr subsystem, 14 of xdatum (3 unchecked, 11 orphan) and 25 of xref (0 dead, 21 orphan) found. [ 577.512400][ T10] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 577.591947][T16517] jffs2: notice: (16517) jffs2_build_xattr_subsystem: complete building xattr subsystem, 14 of xdatum (3 unchecked, 11 orphan) and 25 of xref (0 dead, 21 orphan) found. [ 577.617830][T16517] FAULT_INJECTION: forcing a failure. [ 577.617830][T16517] name failslab, interval 1, probability 0, space 0, times 0 [ 577.617862][T16517] CPU: 0 UID: 0 PID: 16517 Comm: syz.6.3218 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.617888][T16517] Tainted: [L]=SOFTLOCKUP [ 577.617896][T16517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 577.617907][T16517] Call Trace: [ 577.617915][T16517] [ 577.617924][T16517] dump_stack_lvl+0xe8/0x150 [ 577.617958][T16517] should_fail_ex+0x3eb/0x540 [ 577.617992][T16517] should_failslab+0xa8/0x100 [ 577.618020][T16517] ? do_getname+0x2e/0x250 [ 577.618039][T16517] kmem_cache_alloc_noprof+0x9c/0x600 [ 577.618063][T16517] ? do_getname+0x2e/0x250 [ 577.618087][T16517] do_getname+0x2e/0x250 [ 577.618104][T16517] ? getname_flags+0x11/0x20 [ 577.618136][T16517] __x64_sys_lgetxattr+0x1fb/0x2b0 [ 577.618176][T16517] ? __pfx___x64_sys_lgetxattr+0x10/0x10 [ 577.618226][T16517] ? __pfx_ksys_write+0x10/0x10 [ 577.618262][T16517] do_syscall_64+0x166/0x520 [ 577.618291][T16517] ? trace_irq_disable+0x3b/0x140 [ 577.618315][T16517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.618335][T16517] ? clear_bhb_loop+0x70/0xc0 [ 577.618360][T16517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.618381][T16517] RIP: 0033:0x7ff03a79f559 [ 577.618400][T16517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.618418][T16517] RSP: 002b:00007ff03b68f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 577.618440][T16517] RAX: ffffffffffffffda RBX: 00007ff03aa25fa0 RCX: 00007ff03a79f559 [ 577.618455][T16517] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000001c0 [ 577.618469][T16517] RBP: 00007ff03b68f090 R08: 0000000000000000 R09: 0000000000000000 [ 577.618483][T16517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.618495][T16517] R13: 00007ff03aa26038 R14: 00007ff03aa25fa0 R15: 00007ffc43645918 [ 577.618527][T16517] [ 577.852516][ T10] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 577.869677][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.869726][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 577.869753][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 577.869776][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 577.869819][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.932390][T16507] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 577.932559][T16507] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 577.956383][ T10] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 577.961587][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 577.961678][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 577.996257][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 578.019796][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 578.019891][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 578.042380][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 578.182982][T16507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.194662][T16507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.196906][ T10] usb 5-1: USB disconnect, device number 118 [ 578.245684][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 578.283438][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 578.296668][ T10] keyspan 5-1:1.0: device disconnected [ 578.351558][ T32] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 578.506705][T16524] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3221'. [ 578.507331][ T32] usb 6-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 578.508304][ T32] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.508353][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.529114][ T32] as10x_usb: device has been detected [ 578.529895][ T32] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 578.589293][ T32] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 578.777645][T16505] ------------[ cut here ]------------ [ 578.777660][T16505] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 578.777678][T16505] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x132a/0x15a0, CPU#0: syz.5.3214/16505 [ 578.800526][T16505] Modules linked in: [ 578.804456][T16505] CPU: 0 UID: 0 PID: 16505 Comm: syz.5.3214 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.815726][T16505] Tainted: [L]=SOFTLOCKUP [ 578.820160][T16505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 578.830285][T16505] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 578.835962][T16505] Code: f5 c0 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 23 48 a6 05 00 75 13 48 8d 3d e6 46 a9 05 48 c7 c6 c0 27 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 578.845173][ T32] as10x_usb: error during firmware upload part1 [ 578.845534][ T32] Registered device Abilis Systems DVB-Titan [ 578.862049][T16505] RSP: 0018:ffffc9000408f6a0 EFLAGS: 00010246 [ 578.874235][T16505] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 578.882237][T16505] RDX: ffffc90005e7e000 RSI: ffffffff8c2d27c0 RDI: ffffffff91c3f4c0 [ 578.890865][T16505] RBP: ffffc9000408f840 R08: ffffffff91c0f5f3 R09: 1ffffffff2381ebe [ 578.899280][T16505] R10: dffffc0000000000 R11: fffffbfff2381ebf R12: ffff888036984010 [ 578.907385][T16505] R13: 0000000000000000 R14: 1ffff92000811ee8 R15: 0000000000000000 [ 578.915418][T16505] FS: 00007f87378366c0(0000) GS:ffff888123376000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 578.924387][T16505] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.931012][T16505] CR2: 000000110c334284 CR3: 000000005acde000 CR4: 00000000003526f0 [ 578.939052][T16505] Call Trace: [ 578.942384][T16505] [ 578.945726][T16505] ? __lock_acquire+0x747/0x2de0 [ 578.950692][T16505] ? as102_stream_ctrl+0x27/0xc0 [ 578.955959][T16505] ? trace_contention_end+0x3d/0x140 [ 578.961286][T16505] ? __pfx___mutex_lock+0x10/0x10 [ 578.966585][T16505] ? __mutex_lock+0x305/0x15a0 [ 578.971385][T16505] ? __mutex_unlock_slowpath+0x731/0x900 [ 578.978211][T16505] ? lock_acquire+0x115/0x350 [ 578.982918][T16505] as102_stream_ctrl+0x27/0xc0 [ 578.988023][T16505] __dvb_frontend_open+0x2e9/0xca0 [ 578.993867][T16505] ? dvb_frontend_open+0x1ce/0x870 [ 578.999636][T16505] ? down_read+0x2b9/0x320 [ 579.004675][T16505] ? __pfx_dvb_frontend_open+0x10/0x10 [ 579.010413][T16505] dvb_device_open+0x24f/0x340 [ 579.015480][T16505] chrdev_open+0x4d9/0x600 [ 579.019937][T16505] ? __pfx_chrdev_open+0x10/0x10 [ 579.024915][T16505] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 579.031571][T16505] ? devcgroup_check_permission+0x31/0x8f0 [ 579.037689][T16505] ? __pfx_chrdev_open+0x10/0x10 [ 579.043775][T16505] do_dentry_open+0x80e/0x1360 [ 579.048898][T16505] vfs_open_consume+0x4a/0x350 [ 579.053704][T16505] ? path_openat+0x16e1/0x20f0 [ 579.058829][T16505] path_openat+0x16fc/0x20f0 [ 579.063744][T16505] do_file_open+0x23e/0x4a0 [ 579.068534][T16505] ? __pfx_do_file_open+0x10/0x10 [ 579.073600][T16505] ? _raw_spin_unlock+0x28/0x50 [ 579.078778][T16505] ? alloc_fd+0x6af/0x760 [ 579.083318][T16505] do_sys_openat2+0x115/0x200 [ 579.088248][T16505] ? __se_sys_futex+0x3a8/0x450 [ 579.093693][T16505] ? __pfx_do_sys_openat2+0x10/0x10 [ 579.099290][T16505] ? rcu_is_watching+0x16/0xb0 [ 579.104094][T16505] __x64_sys_openat+0x138/0x170 [ 579.109020][T16505] do_syscall_64+0x166/0x520 [ 579.113669][T16505] ? trace_irq_disable+0x3b/0x140 [ 579.118761][T16505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.124859][T16505] ? clear_bhb_loop+0x70/0xc0 [ 579.129601][T16505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.135609][T16505] RIP: 0033:0x7f873695fd8e [ 579.140048][T16505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 579.159725][T16505] RSP: 002b:00007f8737835b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 579.168211][T16505] RAX: ffffffffffffffda RBX: 00007f87378366c0 RCX: 00007f873695fd8e [ 579.176256][T16505] RDX: 0000000000000802 RSI: 00007f8737835c00 RDI: ffffffffffffff9c [ 579.184239][T16505] RBP: 00007f8737835c00 R08: 0000000000000000 R09: 0000000000000000 [ 579.192292][T16505] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 579.200820][T16505] R13: 00007f8736c26038 R14: 00007f8736c25fa0 R15: 00007ffd2b4af798 [ 579.209318][T16505] [ 579.212364][T16505] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 579.219663][T16505] CPU: 0 UID: 0 PID: 16505 Comm: syz.5.3214 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.230619][T16505] Tainted: [L]=SOFTLOCKUP [ 579.234950][T16505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 579.245018][T16505] Call Trace: [ 579.248310][T16505] [ 579.251246][T16505] vpanic+0x26f/0x710 [ 579.255238][T16505] panic+0xc5/0xd0 [ 579.258960][T16505] ? __pfx_panic+0x10/0x10 [ 579.263389][T16505] __warn+0x315/0x4c0 [ 579.267378][T16505] ? __mutex_lock+0x132a/0x15a0 [ 579.272245][T16505] ? __mutex_lock+0x132a/0x15a0 [ 579.277152][T16505] __report_bug+0x276/0x570 [ 579.281663][T16505] ? __mutex_lock+0x132a/0x15a0 [ 579.286533][T16505] ? __pfx___report_bug+0x10/0x10 [ 579.291570][T16505] ? __lock_acquire+0x747/0x2de0 [ 579.296520][T16505] report_bug_entry+0x19b/0x290 [ 579.301380][T16505] ? __mutex_lock+0x1331/0x15a0 [ 579.306253][T16505] ? __mutex_lock+0x1336/0x15a0 [ 579.311124][T16505] handle_bug+0xce/0x200 [ 579.315404][T16505] exc_invalid_op+0x1a/0x50 [ 579.319905][T16505] asm_exc_invalid_op+0x1a/0x20 [ 579.324754][T16505] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 579.330220][T16505] Code: f5 c0 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 23 48 a6 05 00 75 13 48 8d 3d e6 46 a9 05 48 c7 c6 c0 27 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 579.349831][T16505] RSP: 0018:ffffc9000408f6a0 EFLAGS: 00010246 [ 579.355904][T16505] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 579.363874][T16505] RDX: ffffc90005e7e000 RSI: ffffffff8c2d27c0 RDI: ffffffff91c3f4c0 [ 579.371850][T16505] RBP: ffffc9000408f840 R08: ffffffff91c0f5f3 R09: 1ffffffff2381ebe [ 579.379818][T16505] R10: dffffc0000000000 R11: fffffbfff2381ebf R12: ffff888036984010 [ 579.387795][T16505] R13: 0000000000000000 R14: 1ffff92000811ee8 R15: 0000000000000000 [ 579.395781][T16505] ? __lock_acquire+0x747/0x2de0 [ 579.400726][T16505] ? as102_stream_ctrl+0x27/0xc0 [ 579.405673][T16505] ? trace_contention_end+0x3d/0x140 [ 579.410960][T16505] ? __pfx___mutex_lock+0x10/0x10 [ 579.415992][T16505] ? __mutex_lock+0x305/0x15a0 [ 579.420766][T16505] ? __mutex_unlock_slowpath+0x731/0x900 [ 579.426403][T16505] ? lock_acquire+0x115/0x350 [ 579.431078][T16505] as102_stream_ctrl+0x27/0xc0 [ 579.435844][T16505] __dvb_frontend_open+0x2e9/0xca0 [ 579.440956][T16505] ? dvb_frontend_open+0x1ce/0x870 [ 579.446067][T16505] ? down_read+0x2b9/0x320 [ 579.450493][T16505] ? __pfx_dvb_frontend_open+0x10/0x10 [ 579.455953][T16505] dvb_device_open+0x24f/0x340 [ 579.460735][T16505] chrdev_open+0x4d9/0x600 [ 579.465160][T16505] ? __pfx_chrdev_open+0x10/0x10 [ 579.470096][T16505] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 579.476429][T16505] ? devcgroup_check_permission+0x31/0x8f0 [ 579.482240][T16505] ? __pfx_chrdev_open+0x10/0x10 [ 579.487178][T16505] do_dentry_open+0x80e/0x1360 [ 579.491948][T16505] vfs_open_consume+0x4a/0x350 [ 579.496718][T16505] ? path_openat+0x16e1/0x20f0 [ 579.501490][T16505] path_openat+0x16fc/0x20f0 [ 579.506092][T16505] do_file_open+0x23e/0x4a0 [ 579.510603][T16505] ? __pfx_do_file_open+0x10/0x10 [ 579.515636][T16505] ? _raw_spin_unlock+0x28/0x50 [ 579.520495][T16505] ? alloc_fd+0x6af/0x760 [ 579.524824][T16505] do_sys_openat2+0x115/0x200 [ 579.529498][T16505] ? __se_sys_futex+0x3a8/0x450 [ 579.534348][T16505] ? __pfx_do_sys_openat2+0x10/0x10 [ 579.539544][T16505] ? rcu_is_watching+0x16/0xb0 [ 579.544316][T16505] __x64_sys_openat+0x138/0x170 [ 579.549163][T16505] do_syscall_64+0x166/0x520 [ 579.553759][T16505] ? trace_irq_disable+0x3b/0x140 [ 579.558786][T16505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.564861][T16505] ? clear_bhb_loop+0x70/0xc0 [ 579.569537][T16505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.575432][T16505] RIP: 0033:0x7f873695fd8e [ 579.579850][T16505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 579.599453][T16505] RSP: 002b:00007f8737835b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 579.607877][T16505] RAX: ffffffffffffffda RBX: 00007f87378366c0 RCX: 00007f873695fd8e [ 579.615859][T16505] RDX: 0000000000000802 RSI: 00007f8737835c00 RDI: ffffffffffffff9c [ 579.623848][T16505] RBP: 00007f8737835c00 R08: 0000000000000000 R09: 0000000000000000 [ 579.631829][T16505] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 579.639803][T16505] R13: 00007f8736c26038 R14: 00007f8736c25fa0 R15: 00007ffd2b4af798 [ 579.647786][T16505] [ 579.650987][T16505] Kernel Offset: disabled [ 579.655316][T16505] Rebooting in 86400 seconds..