last executing test programs: 12m31.365840319s ago: executing program 0 (id=1159): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) wait4(r0, &(0x7f0000000280), 0x2, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0xc050) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, 0x0) close(r5) listns(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = fanotify_init(0x8, 0x80000) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000100)={r6, &(0x7f0000000000)='(\x00', 0x101480, &(0x7f0000000040)={@align=0x39d0, {0x200, 0x4, 0x2a0, 0x4}}, 0x3, &(0x7f0000000080), &(0x7f00000000c0)}) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) write$binfmt_elf64(r6, &(0x7f00000006c0)=ANY=[], 0x18) 12m28.74191187s ago: executing program 0 (id=1166): socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0, 0x25}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r1], 0x18}, 0x0) 12m28.510436522s ago: executing program 0 (id=1167): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) close(r1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0xb, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x700}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x33b}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '@\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'wg0\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000016001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) sendmsg$inet6(r3, &(0x7f0000000b40)={&(0x7f0000000180)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}, 0x9}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000240)="d1", 0x1}], 0x1}, 0x4009) 12m26.867406421s ago: executing program 0 (id=1176): socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0x418, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0xcc8c, 0x9000, 0x8, 0x5, 0xfffffffc}, 0x14) syz_usb_connect(0x3, 0x46, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) write$vga_arbiter(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f646573206d656d0172599054b6f8eebc5e40d921fbae5ba994683d7a9545b27f5f82875bc76d06fc62ec1348fe2fde2be8b2c64e1d13e918a5ad"], 0xc) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00'], 0x1a8}, 0x1, 0x0, 0x0, 0x40005}, 0x24040000) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002d000701feffffff01000002027c00000c00018008001600", @ANYRES32=0x0, @ANYBLOB="81697b264e4394b59afb48b86741b8d54259fa77c0826666b29098e2ca518e4609e047a0f4ba06757eb9f4363b6f3284c52770c1996c3c8976268860e9209172f8b5b178d3"], 0x20}, 0x1, 0x0, 0x0, 0x4c855}, 0xc800) unshare(0x400) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x1, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x345b, 0x80000001, 0x26, 0xd, 0x4, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x81, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x9, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x7, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0xdb7f, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x42f, 0xe, 0x8000006, 0x78, 0x1, 0x0, 0xffffffff, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x4100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x80000000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x6a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x5, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaee, 0x4, 0x24], [0x209, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r9, @ANYBLOB="003e8fd10fff0700000c6700000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12m24.108752694s ago: executing program 0 (id=1185): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000885000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4014080) 12m23.485929115s ago: executing program 0 (id=1188): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 12m7.562134709s ago: executing program 32 (id=1188): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 6m19.814692642s ago: executing program 2 (id=2261): ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) 6m19.679835536s ago: executing program 2 (id=2262): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat(0xffffffffffffff9c, 0x0, 0x442, 0xd2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r3) r4 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000000)={0x0, 0xf2}, 0x2) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) sendto(r0, &(0x7f00000007c0)='[', 0x1, 0x8001, 0x0, 0x0) 6m19.513392548s ago: executing program 2 (id=2263): socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8=r0, @ANYBLOB="03"], 0x0) 6m16.113870914s ago: executing program 2 (id=2270): unshare(0x40200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r3, r3, 0x0, 0x2000007ff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x39000, 0x0) write$binfmt_elf64(r6, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) pipe2(&(0x7f0000000100), 0x800) 6m15.689863179s ago: executing program 2 (id=2271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) close(r3) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x97ff, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) creat(0x0, 0xd931d3864d39dcdb) syz_emit_ethernet(0x7a, &(0x7f0000000c40)={@broadcast, @random="b7feff1eff00", @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "4a9e6c", 0x44, 0x2f, 0xe78c6d029ffc7582, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0xca88, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0xc289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4}, 0x2, {0x3, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x21e0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x93}}, &(0x7f0000000480)='GPL\x00'}, 0x80) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2022, 0x0, 0x0) 6m15.005070731s ago: executing program 2 (id=2272): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x618041, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1\x00'}) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0xee, 0x5, 0x3}}, 0x20, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3200000000080041007369770014003300776730"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x104) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000500)=0x4bae, 0x4) 5m58.48366808s ago: executing program 33 (id=2272): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x618041, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1\x00'}) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0xee, 0x5, 0x3}}, 0x20, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3200000000080041007369770014003300776730"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x104) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000500)=0x4bae, 0x4) 35.676740436s ago: executing program 1 (id=3313): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x100, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xe, 0x6}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) unshare(0x28060400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) 31.258040758s ago: executing program 1 (id=3328): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000008400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) setreuid(0xee01, r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0xfffffff8, 0x80000, 0x8000, 0x0, 0x0, r8, 0x5, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000008640)=ANY=[@ANYBLOB="666c4bf838fcf960", @ANYRESHEX=r10, @ANYBLOB="2c726f6f746d6f64653d3030303030cfeb68d1d2318938a072fa3030303030dc567df681b8d73a1da6ca33fb30303030303030303034303030302c757365725f69643d4a15f1163fc847d4951e788864a2d58d0dcb6502d627b1c13b2b684f90bcb3d3", @ANYRES8=r4, @ANYBLOB=',group_id=', @ANYRES16=r5, @ANYBLOB=',\x00']) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000080)={0x50, 0x0, r11, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r10, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008700)=ANY=[@ANYBLOB="f800000000000000f9ffffffffffffff000000000000000002000000000000000200000000000000fd000000000000000200000008000000060000000000000009000000000000000200000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000dc5aed31a07eb666524b994009e74380", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="010000000400000000000000000000000000200037050000000000004d000000f60000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b13292e0000504b1f9394b4cc2ac76f97cad68a579c18a0f1f079def68d92d13f3c68ecd8e2645b000000"], 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f00000083c0)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000240)="a738f2e825d9412e7227d41fc46fa2b736f306843a9939aec892546e6b639fa4b7819115dda278a6adc0f89490f16031a080e7d0cfd442e2a42888005833542c6ceefc748fb7de8453d001600c6bc2e3c4109ab7b2545069c085b5bc03e5e2bebaa23d763fc2ec2910b3c88648d2bf1a6435da82e763053d43c3528023f9fac3894618bba4d2db3de20b150a8eb7770d71a53dcd1b642ebb0c477d9da5dbd240d01f15a52100ab67514d085ac1", 0xad}, {&(0x7f0000000300)="dc1fa29add8d95a6dce8de06f165553743d08e18dd5185165e716e909fd500af288db69dfbae81a09c803d9137fd64295afde8ca96532cd81670276deee14e56310b675898dea743f21262e1d842b954f6571f89b1b20e205a9133f13f3316add01030", 0x63}, {&(0x7f0000000380)="59e855f727b6fcf92a13ec660c33f553cc35a4a89c74e564cfb217f253310f2065f16521780379c0a42b1748bdfb49ca435a1cda63e1cd192c23c18a25868100504a215214ab24ca082e7bfc05a56e3b46df73bf1ee0743e850070ecca3d6d89dfb98d5c332fac3d", 0x68}, {&(0x7f0000000400)="46a7c1875817d811966cd9e1b99da35d00433e955e350e8b7f848dd5b365591b03b466ba96484e2bec7af6b82309f493814625d95921ba1a6ab5ee5353c13d27c5232ac0b5c959e8482b1b384c064c0b508d820f5fab00ae2e38c1f98dc50d8ef8ddb2aeaa006ffe3f9a65d456b27e744e713bf01de53f6bea038f1624f845ba15ac609611a83b9bfcbf0b6e38bbf6f4c4bdda288de1057d82916cc889882bf992fa2f1b3dad0c4e7d1a8c4eb5209ac364fd812e67d2abdcf938add9f020f252dbb5286d5545edfeae58f1e03e8cb4fceb2105532418", 0xd6}, {&(0x7f0000000500)="0664a87dc7d35cb3724a60c32ec371f572d81bc7813e2181813f3fa8ea0e71c72e8a4314e23c810102a8dfe52f8c7a86f0c4200c6edfe6be167696c93abc009a96c50d35e60a925975d2f674e389df8cdf91f998972a6ab5bb66ba0a0009d3e1a87edb9ae1c396d1f785e7c683326de3f1fdc0126d267301480b8ec6f20c1d3bc94f15330f8f92230c3255eb9c8d0cc439c679719b37b2cbc5f816dc650cb67bdc3f41a697839d89f3923b9b84368c7344c50f5887d5655daf89ed2cb88424", 0xbf}], 0x5, &(0x7f0000008440)=[@rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r4, r4, r6, r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, r12, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r3, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x110, 0x4000}}], 0x1, 0x40084) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r14 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r14, 0x1) connect$bt_rfcomm(r14, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 30.101249633s ago: executing program 1 (id=3333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r1, 0x800005, 0x80000}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000004e0001002abd7000000000000203"], 0x18}}, 0x24048014) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) syz_usb_connect(0x0, 0xa55, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003a4a9e41024"], 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000002a00)={0xc, 0x7, 0x7}, 0xc) 26.522352926s ago: executing program 1 (id=3347): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x100, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xe, 0x6}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) unshare(0x28060400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) 24.933646455s ago: executing program 1 (id=3353): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0), &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (fail_nth: 1) 24.265752354s ago: executing program 1 (id=3357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r1, 0x800005, 0x80000}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000004e0001002abd7000000000000203"], 0x18}}, 0x24048014) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) syz_usb_connect(0x0, 0xa55, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003a4a9e41024"], 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000002a00)={0xc, 0x7, 0x7}, 0xc) 9.733927385s ago: executing program 4 (id=3423): r0 = io_uring_setup(0x647e, &(0x7f0000000000)={0x0, 0x12fca0, 0x100, 0x3, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4, r1}, 0xc) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000000580)=[{0x0, 0x1, 0x0}, {0x0, 0x0, 0x0}], 0x2) 9.375882528s ago: executing program 4 (id=3426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 7.982728674s ago: executing program 4 (id=3431): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r0, 0x800005, 0x80000}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000004e0001002abd7000000000000203"], 0x18}}, 0x24048014) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 6.066477298s ago: executing program 6 (id=3437): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 6.015819922s ago: executing program 4 (id=3438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x80, r0, 0x0, 0x7}, 0x38) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@arm64={0x8, 0xc, 0x2, '\x00', 0x908}) 5.088903031s ago: executing program 6 (id=3441): syz_usb_connect(0x2, 0x24, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0x27, 0x66, 0xd3, 0x20, 0xbfd, 0x106, 0xb00f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0xaa, 0xf8, 0x0, 0xb9, 0xeb, 0x43, 0x80}}]}}]}}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0xb) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001b00), &(0x7f0000000000)=""/10, 0x2}, 0x20) 4.763674068s ago: executing program 3 (id=3444): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_ublk_setup_io_uring(0x6a6, &(0x7f0000000040)={0x0, 0xea6c, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0x5331, 0x0, 0x4, 0x199}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x8, 0x2000, 0x23b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x80, 0x0, 0x30e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x8, 0x1, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x2, 0x10367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 4.490851571s ago: executing program 3 (id=3446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="05840000008000002c0012800b00010062726964676500001c00028008003200010000000800797e140000000800050001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x24, 0x4) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000000000000700000a0900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021900000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000640003806000008004000180580007800b000100746172676574000048000280080002400000000230000300b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390090001"], 0x114}}, 0x0) 3.169436782s ago: executing program 6 (id=3451): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x10, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 1) 2.702017058s ago: executing program 6 (id=3454): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4a23, @broadcast}, 0x2, 0x0, 0x1}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) 2.577927662s ago: executing program 4 (id=3456): syz_usb_connect(0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x53ed1eb6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfc}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x2, 0x4, 0x58, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x68, 0xfffffffd, 0x8}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm(0x6, 0x9, 0x4f64) 1.640680781s ago: executing program 6 (id=3458): socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0x418, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0xcc8c, 0x9000, 0x8, 0x5, 0xfffffffc}, 0x14) syz_usb_connect(0x3, 0x46, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000b44d00"/22], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) write$vga_arbiter(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f646573206d656d0172599054b6f8eebc5e40d921fbae5ba994683d7a9545b27f5f82875bc76d06fc62ec1348fe2fde2be8b2c64e1d13e918a5ad"], 0xc) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00'], 0x1a8}, 0x1, 0x0, 0x0, 0x40005}, 0x24040000) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002d000701feffffff01000002027c00000c00018008001600", @ANYRES32=0x0, @ANYBLOB="81697b264e4394b59afb48b86741b8d54259fa77c0826666b29098e2ca518e4609e047a0f4ba06757eb9f4363b6f3284c52770c1996c3c8976268860e9209172f8b5b178d3"], 0x20}, 0x1, 0x0, 0x0, 0x4c855}, 0xc800) unshare(0x400) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x1, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0x10001, 0x5, 0x4, 0x2, 0x7, 0x345b, 0x80000001, 0x26, 0xd, 0x4, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x81, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x9, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x7, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0xdb7f, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x42f, 0xe, 0x8000006, 0x78, 0x1, 0x0, 0xffffffff, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x4100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x80000000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x6a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x5, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaee, 0x4, 0x24], [0x209, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r8, @ANYBLOB="003e8fd10fff0700000c6700000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.536959157s ago: executing program 5 (id=3459): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x4044010) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYRESOCT=r2], 0x44}, 0x1, 0x0, 0x0, 0x24040090}, 0x24004854) 1.334365376s ago: executing program 3 (id=3460): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010102, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4a23, @broadcast}, 0x2, 0x0, 0x1}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4004001) 1.317947586s ago: executing program 5 (id=3461): syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b9a48f10b1134200c9070102030109022400010100100009041302028367160009050402000200fa00090581"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x50, 0xff, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7, 0x4, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xa, 0x4, 0x68}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x5, 0x9, 0x83, 0x10, 0x10}, 0x15, &(0x7f00000000c0)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0xfd, 0x8, 0x3ff}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x71}}, {0x21, &(0x7f0000000140)=@string={0x21, 0x3, "4f3f7b0464c5d26a562f4a2d7ec095e8f6f73db1e45027f43bc3ce9308c120"}}, {0x24, &(0x7f0000000180)=@string={0x24, 0x3, "9227c754393e81d5c7d9300bf1726477122539626fd163f343df7565dd861679ec5a"}}]}) 1.121821585s ago: executing program 5 (id=3462): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) close(r1) r2 = socket(0x2a, 0x5, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0xb, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x700}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x33b}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '@\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'wg0\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000016001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) sendmsg$inet6(r4, &(0x7f0000000b40)={&(0x7f0000000180)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}, 0x9}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000240)="d1", 0x1}], 0x1}, 0x4009) 986.39903ms ago: executing program 4 (id=3463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0x34) (async) r2 = eventfd(0x34) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003600)) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003600)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in=@broadcast, 0x0, 0x8003, 0x0, 0x200, 0xa, 0x20, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x4d6, 0x2b}, 0x0, @in6=@local, 0x0, 0x2}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030427bd7000fd9bdf250000692a", @ANYRES32=0x0, @ANYBLOB="0000000006a701002400128009000100626f6e64000000001400028008001400ffffffff0800130002"], 0x44}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000844) 970.650491ms ago: executing program 5 (id=3464): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x4, 0x65}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) pread64(r0, &(0x7f0000001300)=""/4109, 0x100d, 0x0) 922.252843ms ago: executing program 3 (id=3465): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24048894) 837.01465ms ago: executing program 5 (id=3466): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_ublk_setup_io_uring(0x6a6, &(0x7f0000000040)={0x0, 0xea6c, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0x5331, 0x0, 0x4, 0x199}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x8, 0x2000, 0x23b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x80, 0x0, 0x30e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x8, 0x1, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x2, 0x10367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 721.302646ms ago: executing program 3 (id=3467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1112c8a21b2ce7da}]}], {0x14}}, 0x44}}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000300)='cifs\x00', 0x800049, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 475.860519ms ago: executing program 5 (id=3468): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xc, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf7, 0x8, 0xfe}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x24, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="7d88"]}, @typed={0x8, 0x2, 0x0, 0x0, @binary='b\tRD'}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x24, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="7d88"]}, @typed={0x8, 0x2, 0x0, 0x0, @binary='b\tRD'}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240448c1) (async) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240448c1) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) (async) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000200)=""/25, 0x19}], 0x1}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000180)=0xbd34, 0x4) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000180)=0xbd34, 0x4) recvmmsg(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f00000006c0)=""/129, 0x81}, {&(0x7f0000000780)=""/127, 0x7f}, {&(0x7f0000000880)=""/216, 0xd8}, {&(0x7f0000000980)=""/68, 0x44}, {&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f0000000b00)=""/114, 0x72}], 0x8, &(0x7f0000000c00)=""/104, 0x68}, 0x5}, {{&(0x7f0000000c80)=@caif=@util, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000240)=""/88, 0x58}, {&(0x7f0000000e40)=""/127, 0x7f}, {&(0x7f0000000ec0)=""/214, 0xd6}, {&(0x7f0000000fc0)=""/32, 0x20}, {&(0x7f0000001000)}], 0x6, &(0x7f00000010c0)=""/207, 0xcf}, 0x1}], 0x2, 0x2000, &(0x7f0000001240)) syz_usb_connect$uac1(0x3, 0x128, &(0x7f0000001280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x3, 0x1, 0x0, 0x0, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x50, 0x4f}, [@feature_unit={0x13, 0x24, 0x6, 0x2, 0x2, 0x6, [0x8, 0x8, 0x9, 0x9, 0x5, 0x6], 0x8}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x3, "005b808e811c"}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x5, 0x1, [0x7], 0x5}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x6, 0x20, "88d5e32a"}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0xf, "82058d070c35"}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x0, 0xc, "b9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7f, 0x1, 0xa, 0x0, 0xc}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x4, "3e06d4493af8"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0xf7, 0xa1, 0x2, 0x8}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5000, 0x5, 0x9, '-'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x11d3, 0x9, 0x0, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x460, 0xc, 0x0, 0xc2, {0x7, 0x25, 0x1, 0xc, 0xff, 0xff64}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0xd2, 0x1, 0xe}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7, 0x80, 'h'}, @as_header={0x7, 0x24, 0x1, 0x8, 0x2, 0x4}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0x8, 0xb0, "e81ff9c3"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x10, 0xf09a, 0x9, "539e"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x7, 0x68, "6d59c188"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xbd, 0x0, 0x40, {0x7, 0x25, 0x1, 0x8, 0x7, 0x9}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x5, 0x5, 0x5, 0x8, 0x3}, 0xdb, &(0x7f0000000340)={0x5, 0xf, 0xdb, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "5515c8b554a4cc482ef982d1e7aeeea8"}, @generic={0xa7, 0x10, 0x2, "dabae84c4528696b0ee5f73f399eed37b7554757eb6618c5bd43e7ef14d9dc8da9681614bffd0780de877eae21ac008cbf19f636352971414d606585448f8c52141b884c5c4eec91c2d1522299133f2d876cf3b5c95ef2b4158ebc952db9e2958d4ef6adb2e1cc33e508899ec3c27d52ce78d5ea9f6c7215d66d6cbf4b3a4cf6bfa1f02c3c6e18febfb8d4f1ee6135784a1b526cfa4c17961012a7f158ee435a2afa17c0"}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "1684628a1343b52d8577573a1411b4fa"}]}, 0x3, [{0x6, &(0x7f0000000440)=@string={0x6, 0x3, "488b871f"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40b}}, {0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6103ead084922f886b29e18269c1935503527464c3dcd77a3d2a48bbff765327311f40f5e1e142adee803fd4c6b95c68cd4f045959bb96408d1c4aceda02bfa32bb649d328f2e4fd4aef157f90f581ccbb0679ec52e76d020000000000000000"]}]}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x8, 0x27, {0x27, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f080825"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 317.540405ms ago: executing program 3 (id=3469): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) ioctl$COMEDI_CHANINFO(0xffffffffffffffff, 0x80306403, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f3740"], 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x406, r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x2, 0x158000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) 0s ago: executing program 6 (id=3470): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/../file0\x00', 0x403, 0xa0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="e03f030033000b35d236806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300c58cad27c4d3314ebad87f9f113a525eb4fd765d69f09668ad85e96456f9c97f2fb6204bf0e6659e7b3494430ecf9db15151ed87c0952d45c2d010a3253fd92c8632012a260763c29b244a06ed6280f3eaf0c6be0f79f70a1e28a935228274753d369ab8fea3ba9e12ba9da1cd72c0e0f80000000000000000000000003c1785f56f142d57552e24af22ff37acf542dc", 0xbe}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000c80)={r2, &(0x7f0000000c00), 0x0}, 0x20) openat(r0, &(0x7f0000000280)='./cgroup\x00', 0x101000, 0x125) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(0x0, 0x3, 0x100) r3 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r8, 0x40003400000, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000c80)={r9, 0xd, 0x0, [0x6, 0x2, 0x8, 0x101, 0x5], [0x0, 0x3ff, 0xf92, 0x2, 0x1ff, 0x3, 0xc, 0x7fffffffffffffff, 0x4, 0x401, 0x7, 0x6, 0x0, 0x7, 0x7, 0x9, 0x7, 0x100000000000, 0x8, 0x2, 0x5, 0xffffffffffff8001, 0x1e49000000000, 0x4, 0x4, 0x658, 0x3, 0xd05, 0x5, 0x6, 0x0, 0x5bf, 0xd, 0xa, 0x80000000, 0xdd, 0x3, 0x0, 0x3, 0x3, 0x7fffffff, 0x9, 0x4, 0x2, 0x2, 0x8, 0x9, 0x1, 0x9, 0x2, 0x401, 0x1, 0x8000000000000001, 0xffffffff80000001, 0x2, 0x10, 0xc0000, 0x100000000, 0x1, 0x0, 0xffffffffffffff34, 0x8000000000000001, 0x401, 0xa30e, 0x1, 0x2, 0x5, 0x3, 0x4a5c5511, 0x10001, 0x5, 0x3a, 0x2, 0xfec, 0x6, 0x0, 0xd, 0x9, 0xb, 0x1, 0x3ff, 0x6, 0x6, 0x3, 0x4, 0xf, 0x4, 0xafe, 0x0, 0x100000000, 0x7, 0xff, 0x401, 0x0, 0xfffffffffffffffc, 0x7, 0x8, 0x4, 0x0, 0x4, 0x8, 0x2, 0x6, 0x6, 0x100000001, 0x0, 0x5, 0x8, 0x100000000, 0x80000000, 0x101, 0x100000001, 0x7, 0x7, 0x5, 0x1, 0xf2eb, 0x5, 0x3, 0x3, 0x2]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 117.008636][T16167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.008644][T16167] R13: 00007f0a23516038 R14: 00007f0a23515fa0 R15: 00007ffe101abbf8 [ 1117.008668][T16167] [ 1117.180705][ T5839] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1117.367296][ T5839] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1117.367325][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.374067][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1117.424946][ T5839] usb 7-1: config 0 descriptor?? [ 1117.503855][ T5839] pwc: Samsung MPC-C10 USB webcam detected. [ 1117.674633][T16161] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1118.227328][T11391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.380355][T11391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.562260][T16182] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1120.144824][T11391] bond0 (unregistering): Released all slaves [ 1121.054946][T16195] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1121.145204][T11391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.205297][ T6497] audit_log_start: 18317 callbacks suppressed [ 1121.205313][ T6497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1121.205322][ T6497] audit: audit_lost=250089 audit_rate_limit=0 audit_backlog_limit=64 [ 1121.205524][ T6497] audit: backlog limit exceeded [ 1121.205596][ T6497] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1121.205604][ T6497] audit: audit_lost=250090 audit_rate_limit=0 audit_backlog_limit=64 [ 1121.205614][ T6497] audit: backlog limit exceeded [ 1121.205714][ T5842] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1121.205723][ T5842] audit: audit_lost=250091 audit_rate_limit=0 audit_backlog_limit=64 [ 1121.205733][ T5842] audit: backlog limit exceeded [ 1121.205745][ T5842] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1121.867152][T11391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.071264][T11391] bond0 (unregistering): Released all slaves [ 1122.310775][ T5839] pwc: send_video_command error -71 [ 1122.310792][ T5839] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1122.310900][ T5839] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1122.316434][ T5839] usb 7-1: USB disconnect, device number 17 [ 1122.532261][ T5735] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1122.720803][ T5621] udevd[5621]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1122.856343][ T5735] usb 5-1: not running at top speed; connect to a high speed hub [ 1122.858694][ T5735] usb 5-1: config 127 has an invalid interface number: 170 but max is 0 [ 1122.858725][ T5735] usb 5-1: config 127 has no interface number 0 [ 1122.858756][ T5735] usb 5-1: config 127 interface 170 has no altsetting 0 [ 1122.863292][ T5735] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=b0.0f [ 1122.863319][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.863337][ T5735] usb 5-1: Product: syz [ 1122.863350][ T5735] usb 5-1: Manufacturer: syz [ 1122.863363][ T5735] usb 5-1: SerialNumber: syz [ 1122.929889][T16209] FAULT_INJECTION: forcing a failure. [ 1122.929889][T16209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.929923][T16209] CPU: 1 UID: 0 PID: 16209 Comm: syz.5.3096 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1122.929946][T16209] Tainted: [L]=SOFTLOCKUP [ 1122.929953][T16209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1122.929964][T16209] Call Trace: [ 1122.929972][T16209] [ 1122.929979][T16209] dump_stack_lvl+0xe8/0x150 [ 1122.930006][T16209] should_fail_ex+0x467/0x600 [ 1122.930034][T16209] strncpy_from_user+0x36/0x2c0 [ 1122.930059][T16209] __se_sys_add_key+0xdb/0x420 [ 1122.930203][T16209] ? __pfx___se_sys_add_key+0x10/0x10 [ 1122.930234][T16209] ? __x64_sys_add_key+0x20/0xc0 [ 1122.930255][T16209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.930274][T16209] do_syscall_64+0x174/0x580 [ 1122.930296][T16209] ? trace_irq_disable+0x3b/0x140 [ 1122.930316][T16209] ? clear_bhb_loop+0x40/0x90 [ 1122.930338][T16209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.930355][T16209] RIP: 0033:0x7f0a2329ce59 [ 1122.930373][T16209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.930388][T16209] RSP: 002b:00007f0a214ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1122.930406][T16209] RAX: ffffffffffffffda RBX: 00007f0a23515fa0 RCX: 00007f0a2329ce59 [ 1122.930420][T16209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 1122.930431][T16209] RBP: 00007f0a214ee090 R08: fffffffffffffffe R09: 0000000000000000 [ 1122.930442][T16209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.930453][T16209] R13: 00007f0a23516038 R14: 00007f0a23515fa0 R15: 00007ffe101abbf8 [ 1122.930482][T16209] [ 1123.121224][T15765] hsr_slave_0: entered promiscuous mode [ 1123.129447][T15765] hsr_slave_1: entered promiscuous mode [ 1123.137950][T15765] debugfs: 'hsr0' already exists in 'hsr' [ 1123.137977][T15765] Cannot create hsr debugfs directory [ 1123.284840][T16215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.285742][T16215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.343425][ T5735] kvaser_usb 5-1:127.170: error -ENODEV: Cannot get usb endpoint(s) [ 1123.372712][ T5735] usb 5-1: USB disconnect, device number 101 [ 1124.420914][T16237] affs: No valid root block on device nullb0 [ 1124.771082][T11391] hsr_slave_0: left promiscuous mode [ 1124.804517][T11391] hsr_slave_1: left promiscuous mode [ 1124.805481][T11391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.857928][T11391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.884294][T14180] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1124.996449][T16252] FAULT_INJECTION: forcing a failure. [ 1124.996449][T16252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.996504][T16252] CPU: 1 UID: 0 PID: 16252 Comm: syz.5.3111 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1124.996528][T16252] Tainted: [L]=SOFTLOCKUP [ 1124.996535][T16252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1124.996546][T16252] Call Trace: [ 1124.996553][T16252] [ 1124.996562][T16252] dump_stack_lvl+0xe8/0x150 [ 1124.996591][T16252] should_fail_ex+0x467/0x600 [ 1124.996618][T16252] _copy_from_user+0x2d/0xb0 [ 1124.996644][T16252] ucma_write+0x166/0x2f0 [ 1124.996775][T16252] ? __pfx_ucma_write+0x10/0x10 [ 1124.996791][T16252] ? rw_verify_area+0x1b5/0x4d0 [ 1124.996811][T16252] ? rw_verify_area+0x209/0x4d0 [ 1124.996830][T16252] ? __pfx_ucma_write+0x10/0x10 [ 1124.996845][T16252] vfs_write+0x29f/0xbb0 [ 1124.996869][T16252] ? __pfx_vfs_write+0x10/0x10 [ 1124.996887][T16252] ? __fget_files+0x2a/0x420 [ 1124.996906][T16252] ? __fget_files+0x2a/0x420 [ 1124.996921][T16252] ? __fget_files+0x3a8/0x420 [ 1124.996935][T16252] ? __fget_files+0x2a/0x420 [ 1124.996957][T16252] ksys_write+0x156/0x270 [ 1124.996977][T16252] ? __pfx_ksys_write+0x10/0x10 [ 1124.997000][T16252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.997015][T16252] do_syscall_64+0x174/0x580 [ 1124.997033][T16252] ? clear_bhb_loop+0x40/0x90 [ 1124.997050][T16252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.997063][T16252] RIP: 0033:0x7f0a2329ce59 [ 1124.997076][T16252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.997093][T16252] RSP: 002b:00007f0a214ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1124.997109][T16252] RAX: ffffffffffffffda RBX: 00007f0a23516180 RCX: 00007f0a2329ce59 [ 1124.997119][T16252] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000007 [ 1124.997128][T16252] RBP: 00007f0a214ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.997137][T16252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.997145][T16252] R13: 00007f0a23516218 R14: 00007f0a23516180 R15: 00007ffe101abbf8 [ 1124.997166][T16252] [ 1125.652847][T14180] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1125.652954][T14180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.740055][T14180] usb 2-1: config 0 descriptor?? [ 1125.782340][T14180] pwc: Samsung MPC-C10 USB webcam detected. [ 1126.002471][T11391] hsr_slave_0: left promiscuous mode [ 1126.004021][T16237] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1126.045143][T11391] hsr_slave_1: left promiscuous mode [ 1126.048981][T11391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.100260][T11391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.218882][ T37] kauditd_printk_skb: 33446 callbacks suppressed [ 1126.218898][ T37] audit: type=1400 audit(1782865193.902:1014347): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop6/trace" dev="sysfs" ino=15900 [ 1126.218939][ T37] audit: type=1400 audit(1782865193.902:1014348): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop6/trace" dev="sysfs" ino=15900 [ 1126.218983][ T37] audit: type=1400 audit(1782865193.902:1014349): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1126.219017][ T37] audit: type=1400 audit(1782865193.902:1014350): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1126.219063][ T37] audit: type=1400 audit(1782865193.902:1014351): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1126.219098][ T37] audit: type=1400 audit(1782865193.902:1014352): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1126.219132][ T37] audit: type=1400 audit(1782865193.902:1014353): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1126.230553][ T37] audit: type=1400 audit(1782865193.912:1014354): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop6" dev="sysfs" ino=15878 [ 1126.230599][ T37] audit: type=1400 audit(1782865193.912:1014355): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1126.230631][ T37] audit: type=1400 audit(1782865193.912:1014356): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1126.648043][T14180] pwc: send_video_command error -71 [ 1126.648060][T14180] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1126.648163][T14180] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1126.681934][T14180] usb 2-1: USB disconnect, device number 100 [ 1127.939630][T11391] team0 (unregistering): Port device team_slave_1 removed [ 1128.040508][T11391] team0 (unregistering): Port device team_slave_0 removed [ 1130.589149][T11391] team0 (unregistering): Port device team_slave_1 removed [ 1130.715884][T11391] team0 (unregistering): Port device team_slave_0 removed [ 1131.231509][ T37] kauditd_printk_skb: 12434 callbacks suppressed [ 1131.231526][ T37] audit: type=1400 audit(1782865198.902:1026479): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1131.231626][ T37] audit: type=1400 audit(1782865198.902:1026480): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16319 comm="syz-executor" name="312" dev="tmpfs" ino=1584 [ 1131.231654][ T37] audit: type=1400 audit(1782865198.912:1026481): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1131.231675][ T37] audit: type=1400 audit(1782865198.912:1026482): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1131.231696][ T37] audit: type=1400 audit(1782865198.912:1026483): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop5" dev="sysfs" ino=15755 [ 1131.231715][ T37] audit: type=1400 audit(1782865198.912:1026484): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="mq" dev="sysfs" ino=15851 [ 1131.231735][ T37] audit: type=1400 audit(1782865198.912:1026485): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1131.231755][ T37] audit: type=1400 audit(1782865198.912:1026486): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1131.231775][ T37] audit: type=1400 audit(1782865198.912:1026487): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1131.231796][ T37] audit: type=1400 audit(1782865198.912:1026488): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1131.547882][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1131.554884][T16308] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3129'. [ 1136.271976][ T37] kauditd_printk_skb: 10395 callbacks suppressed [ 1136.271997][ T37] audit: type=1400 audit(1782865203.902:1031350): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16359 comm="syz.4.3147" name="newroot" dev="tmpfs" ino=2 [ 1136.272038][ T37] audit: type=1400 audit(1782865203.902:1031351): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16359 comm="syz.4.3147" name="/" dev="devtmpfs" ino=1 [ 1136.272074][ T37] audit: type=1400 audit(1782865203.902:1031352): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16359 comm="syz.4.3147" name="cpu" dev="devtmpfs" ino=85 [ 1136.272115][ T37] audit: type=1400 audit(1782865203.902:1031353): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16359 comm="syz.4.3147" name="0" dev="devtmpfs" ino=86 [ 1136.272146][ T37] audit: type=1400 audit(1782865203.902:1031354): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=16359 comm="syz.4.3147" name="msr" dev="devtmpfs" ino=87 [ 1136.272177][ T37] audit: type=1400 audit(1782865203.902:1031355): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=16359 comm="syz.4.3147" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 [ 1136.315252][ T37] audit: type=1400 audit(1782865203.992:1031356): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16359 comm="syz.4.3147" name="newroot" dev="tmpfs" ino=2 [ 1136.315284][ T37] audit: type=1400 audit(1782865203.992:1031357): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16359 comm="syz.4.3147" name="/" dev="devtmpfs" ino=1 [ 1136.315305][ T37] audit: type=1400 audit(1782865203.992:1031358): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=16359 comm="syz.4.3147" name="raw-gadget" dev="devtmpfs" ino=816 [ 1136.315326][ T37] audit: type=1400 audit(1782865203.992:1031359): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=16359 comm="syz.4.3147" path="/dev/raw-gadget" dev="devtmpfs" ino=816 [ 1136.554299][ T5839] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1136.704423][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 1136.707136][ T5839] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1136.707152][ T5839] usb 5-1: config 0 has no interface number 0 [ 1136.707178][ T5839] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1136.707192][ T5839] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1136.710683][ T5839] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1136.710700][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.710709][ T5839] usb 5-1: Product: syz [ 1136.710717][ T5839] usb 5-1: Manufacturer: syz [ 1136.710724][ T5839] usb 5-1: SerialNumber: syz [ 1136.716200][ T5839] usb 5-1: config 0 descriptor?? [ 1137.278906][ T5839] appletouch 5-1:0.85: Failed to read mode from device. [ 1137.279049][ T5839] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 1137.288683][ T5839] usb 5-1: USB disconnect, device number 102 [ 1138.134260][T14180] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1138.424303][T14180] usb 2-1: Using ep0 maxpacket: 32 [ 1138.441402][T14180] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1138.441428][T14180] usb 2-1: config 0 has no interface number 0 [ 1138.441469][T14180] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1138.441493][T14180] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1138.455688][T14180] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1138.455715][T14180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.455730][T14180] usb 2-1: Product: syz [ 1138.455737][T14180] usb 2-1: Manufacturer: syz [ 1138.455744][T14180] usb 2-1: SerialNumber: syz [ 1138.518890][T16394] overlayfs: overlapping lowerdir path [ 1138.555225][T14180] usb 2-1: config 0 descriptor?? [ 1138.562536][T16396] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1138.676011][ T5735] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1138.829311][ T5735] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1138.829330][ T5735] usb 6-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 1138.829340][ T5735] usb 6-1: config 220 has no interface number 2 [ 1138.829402][ T5735] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1138.829426][ T5735] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1138.829443][ T5735] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1138.829459][ T5735] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1138.862545][ T5735] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1138.862572][ T5735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.862591][ T5735] usb 6-1: Product: syz [ 1138.862604][ T5735] usb 6-1: Manufacturer: syz [ 1138.862615][ T5735] usb 6-1: SerialNumber: syz [ 1139.322916][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1140.270172][ T5735] usb 6-1: selecting invalid altsetting 0 [ 1140.270834][ T5735] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1140.270920][ T5735] uvcvideo 6-1:220.0: No valid video chain found. [ 1140.569644][ T5735] usb 6-1: selecting invalid altsetting 0 [ 1140.569681][ T5735] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1140.587184][ T5735] usb 6-1: USB disconnect, device number 10 [ 1141.340128][ T5853] audit_log_start: 11544 callbacks suppressed [ 1141.340144][ T5853] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1141.340155][ T5853] audit: audit_lost=260912 audit_rate_limit=0 audit_backlog_limit=64 [ 1141.340167][ T5853] audit: backlog limit exceeded [ 1141.340204][ T5853] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1141.340216][ T5853] audit: audit_lost=260913 audit_rate_limit=0 audit_backlog_limit=64 [ 1141.340229][ T5853] audit: backlog limit exceeded [ 1141.340328][ T5853] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1141.340339][ T5853] audit: audit_lost=260914 audit_rate_limit=0 audit_backlog_limit=64 [ 1141.340351][ T5853] audit: backlog limit exceeded [ 1141.340399][ T5853] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1141.384295][ T5839] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1141.564250][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 1141.579479][ T5839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.579503][ T5839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1141.609734][ T5839] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1141.609762][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.609780][ T5839] usb 5-1: Product: syz [ 1141.609794][ T5839] usb 5-1: Manufacturer: syz [ 1141.609806][ T5839] usb 5-1: SerialNumber: syz [ 1141.695786][ T5839] usb 5-1: 0:2 : does not exist [ 1141.695860][ T5839] usb 5-1: unit 6 not found! [ 1141.956695][ T9] usb 5-1: USB disconnect, device number 103 [ 1142.553066][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3165'. [ 1143.890167][T14180] appletouch 2-1:0.85: Failed to read mode from device. [ 1143.890395][T14180] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1144.250908][T16433] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1144.250924][T16433] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1144.257254][T16433] vhci_hcd vhci_hcd.0: Device attached [ 1144.258379][T16433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3169'. [ 1144.989162][T16434] vhci_hcd: connection closed [ 1145.791986][T11388] vhci_hcd vhci_hcd.4: stop threads [ 1145.821707][T11388] vhci_hcd vhci_hcd.4: release socket [ 1146.096558][ T5720] usb 2-1: USB disconnect, device number 101 [ 1146.130604][T11388] vhci_hcd vhci_hcd.4: disconnect device [ 1146.304009][T16456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3177'. [ 1146.346232][ T37] kauditd_printk_skb: 12794 callbacks suppressed [ 1146.346252][ T37] audit: type=1400 audit(1782865214.012:1042441): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=16454 comm="sed" path="/lib/libbusybox.so.1.37.0" dev="sda1" ino=1111 [ 1146.346295][ T37] audit: type=1400 audit(1782865214.012:1042442): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=16454 comm="sed" path="/lib/libbusybox.so.1.37.0" dev="sda1" ino=1111 [ 1146.346333][ T37] audit: type=1400 audit(1782865214.012:1042443): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1146.346369][ T37] audit: type=1400 audit(1782865214.012:1042444): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1146.346404][ T37] audit: type=1400 audit(1782865214.012:1042445): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1146.346440][ T37] audit: type=1400 audit(1782865214.012:1042446): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1146.346475][ T37] audit: type=1400 audit(1782865214.012:1042447): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1146.346511][ T37] audit: type=1400 audit(1782865214.012:1042448): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop4" dev="sysfs" ino=15632 [ 1146.346546][ T37] audit: type=1400 audit(1782865214.012:1042449): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=16455 comm="syz.4.3177" opid=16455 ocomm="syz.4.3177" [ 1146.346586][ T37] audit: type=1400 audit(1782865214.022:1042450): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16458 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1147.568571][ T5862] usb usb42-port1: attempt power cycle [ 1147.774233][ T5720] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1147.941192][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 1147.980216][ T5720] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1147.980334][ T5720] usb 2-1: config 0 has no interface number 0 [ 1147.981129][ T5720] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1147.981210][ T5720] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1148.130746][ T5720] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1148.130929][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.131014][ T5720] usb 2-1: Product: syz [ 1148.131098][ T5720] usb 2-1: Manufacturer: syz [ 1148.131177][ T5720] usb 2-1: SerialNumber: syz [ 1148.493590][ T5720] usb 2-1: config 0 descriptor?? [ 1148.782232][ T5862] usb usb42-port1: unable to enumerate USB device [ 1148.783409][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1148.833380][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1148.878478][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1148.912503][ T5720] appletouch 2-1:0.85: Failed to read mode from device. [ 1148.919930][ T5720] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1149.347114][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1149.348806][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1149.486842][ T5720] usb 2-1: USB disconnect, device number 102 [ 1151.405905][ T37] kauditd_printk_skb: 5017 callbacks suppressed [ 1151.405924][ T37] audit: type=1400 audit(1782865219.062:1046430): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1199 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.130 dest=48742 netif=eth0 [ 1151.406033][ T37] audit: type=1400 audit(1782865219.062:1046431): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=16500 comm="kworker/u8:8" path="/sbin/modprobe" dev="sda1" ino=1312 [ 1151.406103][ T37] audit: type=1400 audit(1782865219.082:1046432): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" name="slaves" dev="sysfs" ino=15800 [ 1151.406210][ T37] audit: type=1400 audit(1782865219.082:1046433): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop5/slaves" dev="sysfs" ino=15800 [ 1151.448959][ T5720] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1151.467370][ T37] audit: type=1400 audit(1782865219.092:1046434): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop5/slaves" dev="sysfs" ino=15800 [ 1151.468269][ T37] audit: type=1400 audit(1782865219.132:1046435): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=16486 comm="syz.4.3183" path="/dev/raw-gadget" dev="devtmpfs" ino=816 [ 1151.469481][ T37] audit: type=1400 audit(1782865219.132:1046436): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=16486 comm="syz.4.3183" path="/dev/raw-gadget" dev="devtmpfs" ino=816 [ 1151.470279][ T37] audit: type=1400 audit(1782865219.142:1046437): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=16486 comm="syz.4.3183" path="/dev/raw-gadget" dev="devtmpfs" ino=816 [ 1151.554322][ T60] Bluetooth: hci2: command tx timeout [ 1151.598153][ T37] audit: type=1400 audit(1782865219.222:1046438): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=16486 comm="syz.4.3183" path="/dev/raw-gadget" dev="devtmpfs" ino=816 [ 1151.600350][ T37] audit: type=1400 audit(1782865219.232:1046439): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16500 comm="kworker/u8:8" name="/" dev="sda1" ino=2 [ 1151.802686][ T5720] usb 5-1: Using ep0 maxpacket: 16 [ 1153.624283][ T60] Bluetooth: hci2: command tx timeout [ 1155.404700][ T5720] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1155.404786][ T5720] usb 5-1: no configurations [ 1155.404798][ T5720] usb 5-1: can't read configurations, error -22 [ 1155.704336][ T60] Bluetooth: hci2: command tx timeout [ 1156.453057][ T37] kauditd_printk_skb: 4044 callbacks suppressed [ 1156.453086][ T37] audit: type=1400 audit(1782865224.052:1047421): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16507 comm="modprobe" name="/" dev="sda1" ino=2 [ 1156.453127][ T37] audit: type=1400 audit(1782865224.052:1047422): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16507 comm="modprobe" name="lib" dev="sda1" ino=264 [ 1156.453164][ T37] audit: type=1400 audit(1782865224.052:1047423): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16507 comm="modprobe" name="lib" dev="sda1" ino=264 [ 1156.453200][ T37] audit: type=1400 audit(1782865224.052:1047424): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=16507 comm="modprobe" name="libpam_misc.so.0.82.1" dev="sda1" ino=1125 [ 1156.453236][ T37] audit: type=1400 audit(1782865224.052:1047425): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=16507 comm="modprobe" path="/lib/libpam_misc.so.0.82.1" dev="sda1" ino=1125 [ 1156.453274][ T37] audit: type=1400 audit(1782865224.052:1047426): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" name="mq" dev="sysfs" ino=15728 [ 1156.453310][ T37] audit: type=1400 audit(1782865224.052:1047427): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop4/mq" dev="sysfs" ino=15728 [ 1156.453348][ T37] audit: type=1400 audit(1782865224.052:1047428): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop4/mq" dev="sysfs" ino=15728 [ 1156.453385][ T37] audit: type=1400 audit(1782865224.052:1047429): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1156.453421][ T37] audit: type=1400 audit(1782865224.062:1047430): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1157.834301][ T60] Bluetooth: hci2: command tx timeout [ 1159.506188][T10223] bridge_slave_1: left allmulticast mode [ 1159.506221][T10223] bridge_slave_1: left promiscuous mode [ 1159.506491][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.681932][T10223] bridge_slave_0: left allmulticast mode [ 1159.681954][T10223] bridge_slave_0: left promiscuous mode [ 1159.682121][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.914267][ T5735] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1160.999329][T10223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.093347][T16580] FAULT_INJECTION: forcing a failure. [ 1161.093347][T16580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1161.099019][T16580] CPU: 1 UID: 0 PID: 16580 Comm: syz.5.3210 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1161.099049][T16580] Tainted: [L]=SOFTLOCKUP [ 1161.099056][T16580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1161.099065][T16580] Call Trace: [ 1161.099073][T16580] [ 1161.099082][T16580] dump_stack_lvl+0xe8/0x150 [ 1161.099107][T16580] should_fail_ex+0x467/0x600 [ 1161.099141][T16580] prepare_alloc_pages+0x223/0x690 [ 1161.099172][T16580] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1161.099199][T16580] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1161.099227][T16580] ? __pfx_policy_nodemask+0x10/0x10 [ 1161.099251][T16580] ? reacquire_held_locks+0x104/0x190 [ 1161.099286][T16580] alloc_pages_mpol+0xce/0x280 [ 1161.099314][T16580] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1161.099341][T16580] swap_cache_alloc_folio+0x1ac/0x5a0 [ 1161.099448][T16580] read_swap_cache_async+0xe4/0x210 [ 1161.099471][T16580] ? __pfx_read_swap_cache_async+0x10/0x10 [ 1161.099493][T16580] ? madvise_vma_behavior+0xb7d/0x4250 [ 1161.099521][T16580] madvise_vma_behavior+0x2d9f/0x4250 [ 1161.099546][T16580] ? madvise_vma_behavior+0xb7d/0x4250 [ 1161.099574][T16580] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1161.099598][T16580] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1161.099625][T16580] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1161.099652][T16580] ? try_to_take_rt_mutex+0x842/0xb00 [ 1161.099668][T16580] ? up_write+0x5a/0x190 [ 1161.099694][T16580] ? __lock_acquire+0x683/0x2ce0 [ 1161.099719][T16580] ? __lock_acquire+0x683/0x2ce0 [ 1161.099747][T16580] ? __lock_acquire+0x683/0x2ce0 [ 1161.099775][T16580] ? do_raw_spin_lock+0x12b/0x2f0 [ 1161.099797][T16580] ? unwind_next_frame+0x8f/0x2550 [ 1161.099878][T16580] ? is_bpf_text_address+0x26/0x2b0 [ 1161.099918][T16580] ? mas_prev_slot+0xb79/0xc00 [ 1161.099972][T16580] ? __lock_acquire+0x683/0x2ce0 [ 1161.100001][T16580] madvise_walk_vmas+0x576/0xb00 [ 1161.100036][T16580] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1161.100066][T16580] ? blk_start_plug+0x6e/0x1b0 [ 1161.100139][T16580] madvise_do_behavior+0x385/0x540 [ 1161.100169][T16580] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1161.100191][T16580] ? down_read+0x156/0x200 [ 1161.100231][T16580] do_madvise+0x26f/0x330 [ 1161.100263][T16580] ? __pfx_do_madvise+0x10/0x10 [ 1161.100296][T16580] ? __pfx_ksys_write+0x10/0x10 [ 1161.100325][T16580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.100344][T16580] __x64_sys_madvise+0xa6/0xc0 [ 1161.100370][T16580] do_syscall_64+0x174/0x580 [ 1161.100391][T16580] ? trace_irq_disable+0x3b/0x140 [ 1161.100412][T16580] ? clear_bhb_loop+0x40/0x90 [ 1161.100434][T16580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.100452][T16580] RIP: 0033:0x7f0a2329ce59 [ 1161.100471][T16580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.100486][T16580] RSP: 002b:00007f0a214ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1161.100506][T16580] RAX: ffffffffffffffda RBX: 00007f0a23515fa0 RCX: 00007f0a2329ce59 [ 1161.100520][T16580] RDX: 0000000000000003 RSI: 000000000060005f RDI: 0000200000000000 [ 1161.100532][T16580] RBP: 00007f0a214ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.100543][T16580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.100553][T16580] R13: 00007f0a23516038 R14: 00007f0a23515fa0 R15: 00007ffe101abbf8 [ 1161.100583][T16580] [ 1161.102439][ T5735] usb 7-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config [ 1161.141205][T10223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.240024][ T5735] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40 [ 1161.240052][ T5735] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1161.240069][ T5735] usb 7-1: SerialNumber: syz [ 1161.456892][ T37] kauditd_printk_skb: 8246 callbacks suppressed [ 1161.456909][ T37] audit: type=1400 audit(1782865229.132:1054894): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1161.456949][ T37] audit: type=1400 audit(1782865229.142:1054895): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1161.456983][ T37] audit: type=1400 audit(1782865229.142:1054896): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1161.457017][ T37] audit: type=1400 audit(1782865229.142:1054897): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop6" dev="sysfs" ino=15878 [ 1161.457052][ T37] audit: type=1400 audit(1782865229.142:1054898): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="mq" dev="sysfs" ino=15974 [ 1161.457091][ T37] audit: type=1400 audit(1782865229.142:1054899): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="0" dev="sysfs" ino=15975 [ 1161.457126][ T37] audit: type=1400 audit(1782865229.142:1054900): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="cpu0" dev="sysfs" ino=15979 [ 1161.457161][ T37] audit: type=1400 audit(1782865229.142:1054901): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1161.457193][ T37] audit: type=1400 audit(1782865229.142:1054902): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1161.463865][ T37] audit: type=1400 audit(1782865229.142:1054903): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1161.574897][T10223] bond0 (unregistering): Released all slaves [ 1162.186584][T16590] FAULT_INJECTION: forcing a failure. [ 1162.186584][T16590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.186618][T16590] CPU: 1 UID: 0 PID: 16590 Comm: syz.1.3212 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1162.186639][T16590] Tainted: [L]=SOFTLOCKUP [ 1162.186646][T16590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1162.186657][T16590] Call Trace: [ 1162.186665][T16590] [ 1162.186673][T16590] dump_stack_lvl+0xe8/0x150 [ 1162.186700][T16590] should_fail_ex+0x467/0x600 [ 1162.186729][T16590] _copy_from_user+0x2d/0xb0 [ 1162.186761][T16590] __sys_bpf+0x2e7/0xd90 [ 1162.186792][T16590] ? __pfx___sys_bpf+0x10/0x10 [ 1162.186815][T16590] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1162.186842][T16590] ? rt_mutex_slowunlock+0x219/0x460 [ 1162.186884][T16590] ? ksys_write+0x248/0x270 [ 1162.186920][T16590] ? __pfx_ksys_write+0x10/0x10 [ 1162.186948][T16590] __x64_sys_bpf+0xba/0xd0 [ 1162.186968][T16590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.186987][T16590] do_syscall_64+0x174/0x580 [ 1162.187007][T16590] ? trace_irq_disable+0x3b/0x140 [ 1162.187029][T16590] ? clear_bhb_loop+0x40/0x90 [ 1162.187051][T16590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.187068][T16590] RIP: 0033:0x7fb5bd22ce59 [ 1162.187084][T16590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.187099][T16590] RSP: 002b:00007fb5bb45d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1162.187118][T16590] RAX: ffffffffffffffda RBX: 00007fb5bd4a6090 RCX: 00007fb5bd22ce59 [ 1162.187130][T16590] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 1162.187142][T16590] RBP: 00007fb5bb45d090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.187154][T16590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.187165][T16590] R13: 00007fb5bd4a6128 R14: 00007fb5bd4a6090 R15: 00007ffc620c6228 [ 1162.187193][T16590] [ 1162.192378][ T5735] cdc_ether 7-1:1.0: skipping garbage [ 1162.192406][ T5735] cdc_ether 7-1:1.0: skipping garbage [ 1162.192420][ T5735] cdc_ether 7-1:1.0: GUID doesn't match [ 1162.381042][T16594] veth0_to_bond: entered allmulticast mode [ 1162.957191][T10223] hsr_slave_0: left promiscuous mode [ 1162.996862][T10223] hsr_slave_1: left promiscuous mode [ 1162.997858][T10223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.018955][T10223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.186919][T16627] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1164.281838][T10223] team0 (unregistering): Port device team_slave_1 removed [ 1164.395009][T10223] team0 (unregistering): Port device team_slave_0 removed [ 1166.117691][ T5720] usb 7-1: USB disconnect, device number 18 [ 1166.442282][T16660] FAULT_INJECTION: forcing a failure. [ 1166.442282][T16660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.442314][T16660] CPU: 0 UID: 0 PID: 16660 Comm: syz.6.3237 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1166.442338][T16660] Tainted: [L]=SOFTLOCKUP [ 1166.442345][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1166.442356][T16660] Call Trace: [ 1166.442363][T16660] [ 1166.442371][T16660] dump_stack_lvl+0xe8/0x150 [ 1166.442398][T16660] should_fail_ex+0x467/0x600 [ 1166.442425][T16660] _copy_from_iter+0x1d3/0x1660 [ 1166.442452][T16660] ? __lock_acquire+0x683/0x2ce0 [ 1166.442481][T16660] ? __pfx__copy_from_iter+0x10/0x10 [ 1166.442505][T16660] ? __lock_acquire+0x683/0x2ce0 [ 1166.442538][T16660] default_write_copy+0xfd/0x180 [ 1166.442679][T16660] do_transfer+0x1c0/0x240 [ 1166.442703][T16660] ? __pfx_default_write_copy+0x10/0x10 [ 1166.442724][T16660] ? __pfx_do_transfer+0x10/0x10 [ 1166.442753][T16660] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1166.442779][T16660] ? interleaved_copy+0xa7/0x2e0 [ 1166.442797][T16660] ? __pfx_default_write_copy+0x10/0x10 [ 1166.442819][T16660] __snd_pcm_lib_xfer+0x132f/0x1c90 [ 1166.442850][T16660] ? __pfx_interleaved_copy+0x10/0x10 [ 1166.442871][T16660] ? __pfx_default_write_copy+0x10/0x10 [ 1166.442897][T16660] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1166.442918][T16660] ? rt_mutex_slowunlock+0x219/0x460 [ 1166.442944][T16660] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1166.442967][T16660] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1166.442998][T16660] ? snd_pcm_oss_write3+0x194/0x300 [ 1166.443048][T16660] snd_pcm_oss_write3+0x1ae/0x300 [ 1166.443071][T16660] snd_pcm_oss_write2+0x2c2/0x440 [ 1166.443123][T16660] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1166.443143][T16660] ? up_read+0x34/0x180 [ 1166.443162][T16660] ? snd_pcm_action_nonatomic+0x25c/0x2b0 [ 1166.443214][T16660] snd_pcm_oss_write+0x664/0xb40 [ 1166.443247][T16660] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1166.443266][T16660] vfs_write+0x29f/0xbb0 [ 1166.443300][T16660] ? __pfx_vfs_write+0x10/0x10 [ 1166.443325][T16660] ? __fget_files+0x2a/0x420 [ 1166.443350][T16660] ? __fget_files+0x2a/0x420 [ 1166.443370][T16660] ? __fget_files+0x3a8/0x420 [ 1166.443390][T16660] ? __fget_files+0x2a/0x420 [ 1166.443419][T16660] ksys_write+0x156/0x270 [ 1166.443445][T16660] ? __pfx_ksys_write+0x10/0x10 [ 1166.443477][T16660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.443497][T16660] do_syscall_64+0x174/0x580 [ 1166.443517][T16660] ? trace_irq_disable+0x3b/0x140 [ 1166.443537][T16660] ? clear_bhb_loop+0x40/0x90 [ 1166.443559][T16660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.443576][T16660] RIP: 0033:0x7f2095e0ce59 [ 1166.443593][T16660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.443608][T16660] RSP: 002b:00007f2094024028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1166.443627][T16660] RAX: ffffffffffffffda RBX: 00007f2096086180 RCX: 00007f2095e0ce59 [ 1166.443639][T16660] RDX: 0000000000001000 RSI: 0000200000002200 RDI: 0000000000000003 [ 1166.443650][T16660] RBP: 00007f2094024090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.443661][T16660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.443672][T16660] R13: 00007f2096086218 R14: 00007f2096086180 R15: 00007ffe0b1ed1c8 [ 1166.443699][T16660] [ 1166.464248][ T37] kauditd_printk_skb: 16023 callbacks suppressed [ 1166.464264][ T37] audit: type=1400 audit(1782865234.142:1066016): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" name="cpu0" dev="sysfs" ino=15856 [ 1166.464303][ T37] audit: type=1400 audit(1782865234.142:1066017): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop5/mq/0/cpu0" dev="sysfs" ino=15856 [ 1166.464338][ T37] audit: type=1400 audit(1782865234.142:1066018): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop5/mq/0/cpu0" dev="sysfs" ino=15856 [ 1166.464374][ T37] audit: type=1400 audit(1782865234.142:1066019): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1166.464410][ T37] audit: type=1400 audit(1782865234.142:1066020): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1166.464442][ T37] audit: type=1400 audit(1782865234.142:1066021): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1166.464476][ T37] audit: type=1400 audit(1782865234.142:1066022): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1166.464510][ T37] audit: type=1400 audit(1782865234.142:1066023): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1166.464543][ T37] audit: type=1400 audit(1782865234.142:1066024): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop5" dev="sysfs" ino=15755 [ 1166.467382][ T37] audit: type=1400 audit(1782865234.152:1066025): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1167.594229][T16675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1169.192352][T16693] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1170.387129][T16698] FAULT_INJECTION: forcing a failure. [ 1170.387129][T16698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.388224][T16698] CPU: 0 UID: 0 PID: 16698 Comm: syz.5.3249 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1170.388254][T16698] Tainted: [L]=SOFTLOCKUP [ 1170.388262][T16698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.388273][T16698] Call Trace: [ 1170.388281][T16698] [ 1170.388289][T16698] dump_stack_lvl+0xe8/0x150 [ 1170.388321][T16698] should_fail_ex+0x467/0x600 [ 1170.388350][T16698] _copy_to_user+0x31/0xb0 [ 1170.388379][T16698] simple_read_from_buffer+0xe1/0x170 [ 1170.388409][T16698] proc_fail_nth_read+0x1be/0x230 [ 1170.388437][T16698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1170.388461][T16698] ? rw_verify_area+0x250/0x4d0 [ 1170.388487][T16698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1170.388530][T16698] vfs_read+0x219/0xa90 [ 1170.388562][T16698] ? __pfx_vfs_read+0x10/0x10 [ 1170.388588][T16698] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1170.388613][T16698] ? lockdep_hardirqs_on+0x7a/0x110 [ 1170.388634][T16698] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1170.388655][T16698] ? mutex_lock_nested+0x152/0x1d0 [ 1170.388679][T16698] ? fdget_pos+0x252/0x320 [ 1170.388709][T16698] ksys_read+0x156/0x270 [ 1170.388737][T16698] ? __pfx_ksys_read+0x10/0x10 [ 1170.388768][T16698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.388789][T16698] do_syscall_64+0x174/0x580 [ 1170.388809][T16698] ? trace_irq_disable+0x3b/0x140 [ 1170.388832][T16698] ? clear_bhb_loop+0x40/0x90 [ 1170.388854][T16698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.388872][T16698] RIP: 0033:0x7f0a2325d68e [ 1170.388889][T16698] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1170.388904][T16698] RSP: 002b:00007f0a214ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1170.388924][T16698] RAX: ffffffffffffffda RBX: 00007f0a214cd6c0 RCX: 00007f0a2325d68e [ 1170.388937][T16698] RDX: 000000000000000f RSI: 00007f0a214cd0a0 RDI: 0000000000000005 [ 1170.388949][T16698] RBP: 00007f0a214cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.388961][T16698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.388972][T16698] R13: 00007f0a23516128 R14: 00007f0a23516090 R15: 00007ffe101abbf8 [ 1170.389002][T16698] [ 1171.507405][ T37] kauditd_printk_skb: 7654 callbacks suppressed [ 1171.507963][ T37] audit: type=1400 audit(1782865239.172:1070194): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop5" dev="sysfs" ino=15755 [ 1171.512116][ T37] audit: type=1400 audit(1782865239.172:1070195): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16700 comm="modprobe" name="/" dev="sda1" ino=2 [ 1171.514992][ T37] audit: type=1400 audit(1782865239.192:1070196): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" name="integrity" dev="sysfs" ino=15783 [ 1171.516069][ T37] audit: type=1400 audit(1782865239.192:1070197): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16700 comm="modprobe" name="/" dev="sda1" ino=2 [ 1171.517833][ T37] audit: type=1400 audit(1782865239.192:1070198): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16700 comm="modprobe" name="lib" dev="sda1" ino=264 [ 1171.547097][ T37] audit: type=1400 audit(1782865239.232:1070199): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=16700 comm="modprobe" name="libresolv.so.2" dev="sda1" ino=1130 [ 1171.712862][ T37] audit: type=1400 audit(1782865239.392:1070200): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=16700 comm="modprobe" path="/lib/libresolv.so.2" dev="sda1" ino=1130 [ 1171.787660][ T37] audit: type=1400 audit(1782865239.472:1070201): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=16700 comm="modprobe" path="/lib/libresolv.so.2" dev="sda1" ino=1130 [ 1171.809350][ T37] audit: type=1400 audit(1782865239.482:1070202): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop5/integrity" dev="sysfs" ino=15783 [ 1171.809397][ T37] audit: type=1400 audit(1782865239.482:1070203): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop5/integrity" dev="sysfs" ino=15783 [ 1172.184583][ T5837] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1172.664353][ T5837] usb 5-1: Using ep0 maxpacket: 32 [ 1172.667318][ T5837] usb 5-1: config 252 has an invalid interface number: 30 but max is 0 [ 1172.667341][ T5837] usb 5-1: config 252 has no interface number 0 [ 1172.667384][ T5837] usb 5-1: config 252 interface 30 altsetting 16 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1172.667416][ T5837] usb 5-1: config 252 interface 30 has no altsetting 0 [ 1172.673240][ T5837] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 8.ba [ 1172.673266][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.673284][ T5837] usb 5-1: Product: syz [ 1172.673297][ T5837] usb 5-1: Manufacturer: syz [ 1172.673309][ T5837] usb 5-1: SerialNumber: syz [ 1173.013627][T16475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.013751][T16475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.013973][T16475] bridge_slave_0: entered allmulticast mode [ 1173.032980][T16475] bridge_slave_0: entered promiscuous mode [ 1173.140071][T16475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.142767][T16475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.142993][T16475] bridge_slave_1: entered allmulticast mode [ 1173.160878][T16475] bridge_slave_1: entered promiscuous mode [ 1173.450638][ T5837] ljca 5-1:252.30: bulk endpoints not found [ 1173.527293][ T5837] usb 5-1: USB disconnect, device number 106 [ 1173.541878][T16728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1173.651520][T16475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.665554][T16475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.849311][T16475] team0: Port device team_slave_0 added [ 1173.852875][T16475] team0: Port device team_slave_1 added [ 1173.983198][T16475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.983215][T16475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.983237][T16475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.039031][T16475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.039047][T16475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.039070][T16475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.298768][T16751] FAULT_INJECTION: forcing a failure. [ 1174.298768][T16751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.298800][T16751] CPU: 0 UID: 0 PID: 16751 Comm: syz.4.3263 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1174.298824][T16751] Tainted: [L]=SOFTLOCKUP [ 1174.298831][T16751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1174.298841][T16751] Call Trace: [ 1174.298849][T16751] [ 1174.298857][T16751] dump_stack_lvl+0xe8/0x150 [ 1174.298884][T16751] should_fail_ex+0x467/0x600 [ 1174.298912][T16751] _copy_from_user+0x2d/0xb0 [ 1174.298938][T16751] ___sys_sendmsg+0x1c6/0x360 [ 1174.298964][T16751] ? __lock_acquire+0x683/0x2ce0 [ 1174.298992][T16751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1174.299044][T16751] ? __fget_files+0x2a/0x420 [ 1174.299065][T16751] ? __fget_files+0x3a8/0x420 [ 1174.299093][T16751] __x64_sys_sendmsg+0x1b7/0x290 [ 1174.299119][T16751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1174.299157][T16751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.299176][T16751] do_syscall_64+0x174/0x580 [ 1174.299200][T16751] ? trace_irq_disable+0x3b/0x140 [ 1174.299221][T16751] ? clear_bhb_loop+0x40/0x90 [ 1174.299241][T16751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.299257][T16751] RIP: 0033:0x7f2ba6abce59 [ 1174.299273][T16751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.299286][T16751] RSP: 002b:00007f2ba4d0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1174.299313][T16751] RAX: ffffffffffffffda RBX: 00007f2ba6d35fa0 RCX: 00007f2ba6abce59 [ 1174.299326][T16751] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1174.299338][T16751] RBP: 00007f2ba4d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.299349][T16751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.299360][T16751] R13: 00007f2ba6d36038 R14: 00007f2ba6d35fa0 R15: 00007ffc64b488d8 [ 1174.299390][T16751] [ 1174.538184][T16475] hsr_slave_0: entered promiscuous mode [ 1174.539501][T16475] hsr_slave_1: entered promiscuous mode [ 1174.541156][T16475] debugfs: 'hsr0' already exists in 'hsr' [ 1174.541180][T16475] Cannot create hsr debugfs directory [ 1176.419990][T16787] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1176.517252][ T37] kauditd_printk_skb: 11479 callbacks suppressed [ 1176.517268][ T37] audit: type=1400 audit(1782865244.202:1077507): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1176.517308][ T37] audit: type=1400 audit(1782865244.202:1077508): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1176.517343][ T37] audit: type=1400 audit(1782865244.202:1077509): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="dev" dev="sysfs" ino=19 [ 1176.517378][ T37] audit: type=1400 audit(1782865244.202:1077510): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=20 [ 1176.517413][ T37] audit: type=1400 audit(1782865244.202:1077511): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1176.517448][ T37] audit: type=1400 audit(1782865244.202:1077512): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1176.517483][ T37] audit: type=1400 audit(1782865244.202:1077513): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1176.517518][ T37] audit: type=1400 audit(1782865244.202:1077514): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1176.517554][ T37] audit: type=1400 audit(1782865244.202:1077515): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1176.517589][ T37] audit: type=1400 audit(1782865244.202:1077516): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop5" dev="sysfs" ino=15755 [ 1176.731346][T16796] FAULT_INJECTION: forcing a failure. [ 1176.731346][T16796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.731379][T16796] CPU: 0 UID: 0 PID: 16796 Comm: syz.6.3274 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1176.731405][T16796] Tainted: [L]=SOFTLOCKUP [ 1176.731412][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1176.731424][T16796] Call Trace: [ 1176.731432][T16796] [ 1176.731440][T16796] dump_stack_lvl+0xe8/0x150 [ 1176.731475][T16796] should_fail_ex+0x467/0x600 [ 1176.731504][T16796] _copy_from_user+0x2d/0xb0 [ 1176.731531][T16796] ___sys_sendmsg+0x1c6/0x360 [ 1176.731556][T16796] ? __lock_acquire+0x683/0x2ce0 [ 1176.731583][T16796] ? __pfx____sys_sendmsg+0x10/0x10 [ 1176.731640][T16796] ? __fget_files+0x2a/0x420 [ 1176.731662][T16796] ? __fget_files+0x3a8/0x420 [ 1176.731693][T16796] __x64_sys_sendmsg+0x1b7/0x290 [ 1176.731720][T16796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1176.731760][T16796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.731781][T16796] do_syscall_64+0x174/0x580 [ 1176.731805][T16796] ? trace_irq_disable+0x3b/0x140 [ 1176.731828][T16796] ? clear_bhb_loop+0x40/0x90 [ 1176.731849][T16796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.731868][T16796] RIP: 0033:0x7f2095e0ce59 [ 1176.731885][T16796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1176.731900][T16796] RSP: 002b:00007f2094045028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1176.731920][T16796] RAX: ffffffffffffffda RBX: 00007f2096086090 RCX: 00007f2095e0ce59 [ 1176.731934][T16796] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1176.731946][T16796] RBP: 00007f2094045090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.731958][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.731968][T16796] R13: 00007f2096086128 R14: 00007f2096086090 R15: 00007ffe0b1ed1c8 [ 1176.731998][T16796] [ 1177.416375][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.417425][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.584626][ T5837] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1178.847455][ T5837] usb 7-1: Using ep0 maxpacket: 16 [ 1178.858836][ T5837] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 1178.858861][ T5837] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.858878][ T5837] usb 7-1: config 1 has no interface number 0 [ 1178.858919][ T5837] usb 7-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1178.858942][ T5837] usb 7-1: config 1 interface 105 has no altsetting 0 [ 1178.873554][ T5837] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1178.873583][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1178.873601][ T5837] usb 7-1: Product: syz [ 1178.873614][ T5837] usb 7-1: Manufacturer: syz [ 1178.873627][ T5837] usb 7-1: SerialNumber: syz [ 1179.901542][ T5837] aqc111 7-1:1.105: probe with driver aqc111 failed with error -22 [ 1179.918177][ T5837] usb 7-1: USB disconnect, device number 19 [ 1179.993918][T16826] affs: No valid root block on device nullb0 [ 1180.275396][ T5839] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1180.295026][T16833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3285'. [ 1180.428590][ T5839] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1180.428618][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.469413][ T5839] usb 2-1: config 0 descriptor?? [ 1180.486237][ T5839] pwc: Samsung MPC-C10 USB webcam detected. [ 1180.706121][T16826] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1181.333850][ T5839] pwc: send_video_command error -71 [ 1181.333866][ T5839] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1181.333966][ T5839] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1181.382822][ T5839] usb 2-1: USB disconnect, device number 103 [ 1181.530891][ T37] kauditd_printk_skb: 13801 callbacks suppressed [ 1181.530909][ T37] audit: type=1400 audit(1782865249.222:1085729): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop1/slaves" dev="sysfs" ino=15308 [ 1181.530950][ T37] audit: type=1400 audit(1782865249.222:1085730): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop1/slaves" dev="sysfs" ino=15308 [ 1181.530987][ T37] audit: type=1400 audit(1782865249.222:1085731): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1181.531021][ T37] audit: type=1400 audit(1782865249.222:1085732): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1181.531054][ T37] audit: type=1400 audit(1782865249.222:1085733): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16858 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 1181.531097][ T37] audit: type=1400 audit(1782865249.222:1085734): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1181.531127][ T37] audit: type=1400 audit(1782865249.222:1085735): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16858 comm="dhcpcd-run-hook" name="bin" dev="sda1" ino=13 [ 1181.531162][ T37] audit: type=1400 audit(1782865249.222:1085736): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1181.531195][ T37] audit: type=1400 audit(1782865249.222:1085737): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16858 comm="dhcpcd-run-hook" name="rm" dev="sda1" ino=83 [ 1181.531227][ T37] audit: type=1400 audit(1782865249.222:1085739): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1182.612183][T16872] FAULT_INJECTION: forcing a failure. [ 1182.612183][T16872] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.612280][T16872] CPU: 0 UID: 0 PID: 16872 Comm: syz.4.3295 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1182.612305][T16872] Tainted: [L]=SOFTLOCKUP [ 1182.612311][T16872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1182.612322][T16872] Call Trace: [ 1182.612330][T16872] [ 1182.612338][T16872] dump_stack_lvl+0xe8/0x150 [ 1182.612374][T16872] should_fail_ex+0x467/0x600 [ 1182.612409][T16872] should_failslab+0xa8/0x100 [ 1182.612437][T16872] __kmalloc_noprof+0xfe/0x780 [ 1182.612458][T16872] ? rcu_is_watching+0x15/0xb0 [ 1182.612484][T16872] ? tomoyo_realpath_from_path+0xef/0x640 [ 1182.612504][T16872] ? tomoyo_realpath_from_path+0xef/0x640 [ 1182.612530][T16872] tomoyo_realpath_from_path+0xef/0x640 [ 1182.612558][T16872] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1182.612583][T16872] tomoyo_path_number_perm+0x246/0x5f0 [ 1182.612611][T16872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1182.612636][T16872] ? __lock_acquire+0x683/0x2ce0 [ 1182.612672][T16872] ? __pfx___schedule+0x10/0x10 [ 1182.612691][T16872] ? hook_file_ioctl+0x1f3/0x600 [ 1182.612732][T16872] ? __fget_files+0x2a/0x420 [ 1182.612757][T16872] ? __fget_files+0x2a/0x420 [ 1182.612777][T16872] ? __fget_files+0x3a8/0x420 [ 1182.612798][T16872] ? __fget_files+0x2a/0x420 [ 1182.612823][T16872] security_file_ioctl+0xc3/0x2a0 [ 1182.612852][T16872] __se_sys_ioctl+0x47/0x170 [ 1182.612878][T16872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.612898][T16872] do_syscall_64+0x174/0x580 [ 1182.612921][T16872] ? clear_bhb_loop+0x40/0x90 [ 1182.612942][T16872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.612960][T16872] RIP: 0033:0x7f2ba6abce59 [ 1182.612978][T16872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.612992][T16872] RSP: 002b:00007f2ba4ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.613012][T16872] RAX: ffffffffffffffda RBX: 00007f2ba6d36090 RCX: 00007f2ba6abce59 [ 1182.613025][T16872] RDX: 0000200000000000 RSI: 000000008028640c RDI: 000000000000000a [ 1182.613037][T16872] RBP: 00007f2ba4ced090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.613049][T16872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.613059][T16872] R13: 00007f2ba6d36128 R14: 00007f2ba6d36090 R15: 00007ffc64b488d8 [ 1182.613089][T16872] [ 1182.613122][T16872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1183.001210][ T5735] IPVS: starting estimator thread 0... [ 1183.278965][T16876] IPVS: using max 15 ests per chain, 36000 per kthread [ 1183.974731][T16893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3297'. [ 1185.157351][ T5839] IPVS: starting estimator thread 0... [ 1185.273458][T16898] IPVS: using max 8 ests per chain, 19200 per kthread [ 1185.718645][T16903] FAULT_INJECTION: forcing a failure. [ 1185.718645][T16903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.718734][T16903] CPU: 1 UID: 0 PID: 16903 Comm: syz.5.3300 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1185.718759][T16903] Tainted: [L]=SOFTLOCKUP [ 1185.718767][T16903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1185.718778][T16903] Call Trace: [ 1185.718786][T16903] [ 1185.718794][T16903] dump_stack_lvl+0xe8/0x150 [ 1185.718823][T16903] should_fail_ex+0x467/0x600 [ 1185.718851][T16903] _copy_from_user+0x2d/0xb0 [ 1185.718878][T16903] __sys_bpf+0x2e7/0xd90 [ 1185.718910][T16903] ? __pfx___sys_bpf+0x10/0x10 [ 1185.718929][T16903] ? __schedule+0x16f2/0x5500 [ 1185.718951][T16903] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1185.718997][T16903] ? ksys_write+0x248/0x270 [ 1185.719032][T16903] __x64_sys_bpf+0xba/0xd0 [ 1185.719053][T16903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.719073][T16903] do_syscall_64+0x174/0x580 [ 1185.719096][T16903] ? clear_bhb_loop+0x40/0x90 [ 1185.719118][T16903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.719135][T16903] RIP: 0033:0x7f0a2329ce59 [ 1185.719153][T16903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.719167][T16903] RSP: 002b:00007f0a214ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1185.719187][T16903] RAX: ffffffffffffffda RBX: 00007f0a23516180 RCX: 00007f0a2329ce59 [ 1185.719200][T16903] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 1185.719212][T16903] RBP: 00007f0a214ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.719224][T16903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.719236][T16903] R13: 00007f0a23516218 R14: 00007f0a23516180 R15: 00007ffe101abbf8 [ 1185.719265][T16903] [ 1186.535006][ T37] kauditd_printk_skb: 3360 callbacks suppressed [ 1186.535018][ T37] audit: type=1400 audit(1782865254.212:1088946): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop5/mq" dev="sysfs" ino=15851 [ 1186.535045][ T37] audit: type=1400 audit(1782865254.212:1088947): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop5/mq" dev="sysfs" ino=15851 [ 1186.535075][ T37] audit: type=1400 audit(1782865254.212:1088948): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1186.535095][ T37] audit: type=1400 audit(1782865254.212:1088949): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1186.536194][ T37] audit: type=1400 audit(1782865254.222:1088950): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1186.536235][ T37] audit: type=1400 audit(1782865254.222:1088951): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1186.536269][ T37] audit: type=1400 audit(1782865254.222:1088952): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1186.536305][ T37] audit: type=1400 audit(1782865254.222:1088953): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop5" dev="sysfs" ino=15755 [ 1186.536338][ T37] audit: type=1400 audit(1782865254.222:1088954): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="mq" dev="sysfs" ino=15851 [ 1186.539303][ T37] audit: type=1400 audit(1782865254.222:1088955): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1186.954640][T16893] bridge0: port 1(batadv1) entered blocking state [ 1186.967043][T16893] bridge0: port 1(batadv1) entered disabled state [ 1186.967260][T16893] batadv1: entered allmulticast mode [ 1187.132552][T16893] batadv1: entered promiscuous mode [ 1187.354352][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1187.465277][T10223] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1187.465290][T10223] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1187.551694][T16475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1187.561265][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1187.561283][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1187.561296][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1188.121080][T16475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1188.123843][T16475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1188.127933][ T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1188.127960][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.127977][ T9] usb 5-1: Product: syz [ 1188.127990][ T9] usb 5-1: Manufacturer: syz [ 1188.128003][ T9] usb 5-1: SerialNumber: syz [ 1188.159320][ T9] usb 5-1: config 0 descriptor?? [ 1188.160915][T16910] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1188.161361][T16910] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1188.210434][ T9] usb 5-1: ucan: probing device on interface #0 [ 1188.385296][ T9] usb 5-1: ucan: device protocol version 0 is not supported [ 1188.385320][ T9] usb 5-1: ucan: probe failed; try to update the device firmware [ 1188.818970][T16475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1188.868909][T16475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1189.057973][T16475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1189.061135][T16475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1189.203623][T16475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1189.720062][T16937] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1190.558444][ T5839] usb 5-1: USB disconnect, device number 107 [ 1190.873088][T16475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.541282][T16475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.551054][ T37] kauditd_printk_skb: 5350 callbacks suppressed [ 1191.551071][ T37] audit: type=1400 audit(1782865259.232:1093226): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop1" dev="sysfs" ino=15263 [ 1191.551109][ T37] audit: type=1400 audit(1782865259.232:1093227): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop1/uevent" dev="sysfs" ino=15264 [ 1191.551145][ T37] audit: type=1400 audit(1782865259.232:1093228): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1191.551188][ T37] audit: type=1400 audit(1782865259.232:1093229): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1191.551222][ T37] audit: type=1400 audit(1782865259.232:1093230): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1191.551256][ T37] audit: type=1400 audit(1782865259.232:1093231): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1191.551290][ T37] audit: type=1400 audit(1782865259.232:1093232): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1191.551325][ T37] audit: type=1400 audit(1782865259.232:1093233): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop1" dev="sysfs" ino=15263 [ 1191.551358][ T37] audit: type=1400 audit(1782865259.232:1093234): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" name="uevent" dev="sysfs" ino=15264 [ 1191.551392][ T37] audit: type=1400 audit(1782865259.232:1093235): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop1/uevent" dev="sysfs" ino=15264 [ 1192.445069][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.445144][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.582949][T11381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.583080][T11381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.934516][ T5862] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1194.143495][ T5862] usb 5-1: not running at top speed; connect to a high speed hub [ 1194.150098][ T5862] usb 5-1: config 127 has an invalid interface number: 170 but max is 0 [ 1194.150124][ T5862] usb 5-1: config 127 has no interface number 0 [ 1194.150155][ T5862] usb 5-1: config 127 interface 170 has no altsetting 0 [ 1194.185994][ T5862] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=b0.0f [ 1194.186024][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.186042][ T5862] usb 5-1: Product: syz [ 1194.186056][ T5862] usb 5-1: Manufacturer: syz [ 1194.186069][ T5862] usb 5-1: SerialNumber: syz [ 1194.480558][T16966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.498768][T16966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.623009][ T5862] kvaser_usb 5-1:127.170: error -ENODEV: Cannot get usb endpoint(s) [ 1194.640485][ T5862] usb 5-1: USB disconnect, device number 108 [ 1195.432905][ T5613] Bluetooth: hci2: link tx timeout [ 1195.433602][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1195.902374][T16991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3329'. [ 1196.447302][ T5613] Bluetooth: hci2: link tx timeout [ 1196.447322][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.450825][ T5613] Bluetooth: hci2: link tx timeout [ 1196.450844][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.452789][ T5613] Bluetooth: hci2: link tx timeout [ 1196.452804][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.452989][ T5613] Bluetooth: hci2: link tx timeout [ 1196.453001][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.465799][ T5613] Bluetooth: hci2: link tx timeout [ 1196.465817][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.475464][ T5613] Bluetooth: hci2: link tx timeout [ 1196.475482][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.486061][ T5613] Bluetooth: hci2: link tx timeout [ 1196.486087][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.492813][ T5613] Bluetooth: hci2: link tx timeout [ 1196.492829][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.522472][ T5613] Bluetooth: hci2: link tx timeout [ 1196.522490][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.524449][ T5613] Bluetooth: hci2: link tx timeout [ 1196.524464][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.551611][ T5613] Bluetooth: hci2: link tx timeout [ 1196.551629][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.556203][ T5613] Bluetooth: hci2: link tx timeout [ 1196.556221][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.581948][ T5613] Bluetooth: hci2: link tx timeout [ 1196.581969][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.583690][ T5613] Bluetooth: hci2: link tx timeout [ 1196.583704][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.585715][ T5613] Bluetooth: hci2: link tx timeout [ 1196.585731][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.587646][ T5613] Bluetooth: hci2: link tx timeout [ 1196.587661][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.591598][ T5613] Bluetooth: hci2: link tx timeout [ 1196.591612][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.593975][ T5613] Bluetooth: hci2: link tx timeout [ 1196.593988][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.600563][ T37] kauditd_printk_skb: 8722 callbacks suppressed [ 1196.600578][ T37] audit: type=1400 audit(1782865264.282:1099864): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17002 comm="kworker/u8:1" name="/" dev="sda1" ino=2 [ 1196.600618][ T37] audit: type=1400 audit(1782865264.282:1099865): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17002 comm="kworker/u8:1" name="/" dev="sda1" ino=2 [ 1196.600653][ T37] audit: type=1400 audit(1782865264.282:1099866): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17002 comm="kworker/u8:1" name="lib" dev="sda1" ino=264 [ 1196.600686][ T37] audit: type=1400 audit(1782865264.282:1099867): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17002 comm="kworker/u8:1" name="ld-linux-x86-64.so.2" dev="sda1" ino=1104 [ 1196.600721][ T37] audit: type=1400 audit(1782865264.282:1099868): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=17002 comm="kworker/u8:1" path="/lib/ld-linux-x86-64.so.2" dev="sda1" ino=1104 [ 1196.600755][ T37] audit: type=1400 audit(1782865264.282:1099869): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=17002 comm="kworker/u8:1" name="ld-linux-x86-64.so.2" dev="sda1" ino=1104 [ 1196.600789][ T37] audit: type=1400 audit(1782865264.282:1099870): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=17002 comm="kworker/u8:1" name="modprobe" dev="sda1" ino=1312 [ 1196.601721][ T5613] Bluetooth: hci2: link tx timeout [ 1196.601735][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.604403][ T5613] Bluetooth: hci2: link tx timeout [ 1196.604417][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.605783][ T5613] Bluetooth: hci2: link tx timeout [ 1196.605796][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.606967][ T5613] Bluetooth: hci2: link tx timeout [ 1196.606980][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.607405][ T5613] Bluetooth: hci2: link tx timeout [ 1196.607417][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.609011][ T5613] Bluetooth: hci2: link tx timeout [ 1196.609023][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.621046][ T5613] Bluetooth: hci2: link tx timeout [ 1196.621061][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.622515][ T37] audit: type=1400 audit(1782865264.302:1099871): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1196.622568][ T37] audit: type=1400 audit(1782865264.302:1099872): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1196.622604][ T37] audit: type=1400 audit(1782865264.302:1099873): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1196.627266][ T5613] Bluetooth: hci2: link tx timeout [ 1196.627284][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.633946][ T5613] Bluetooth: hci2: link tx timeout [ 1196.633960][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.637417][ T5613] Bluetooth: hci2: link tx timeout [ 1196.637432][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.637588][ T5613] Bluetooth: hci2: link tx timeout [ 1196.637600][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.652911][ T5613] Bluetooth: hci2: link tx timeout [ 1196.652931][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.655170][ T5613] Bluetooth: hci2: link tx timeout [ 1196.655184][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.668981][ T5613] Bluetooth: hci2: link tx timeout [ 1196.669001][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.672705][ T5613] Bluetooth: hci2: link tx timeout [ 1196.672722][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.675953][ T5613] Bluetooth: hci2: link tx timeout [ 1196.675968][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.678252][ T5613] Bluetooth: hci2: link tx timeout [ 1196.678266][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.683943][ T5613] Bluetooth: hci2: link tx timeout [ 1196.683960][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.684323][ T5613] Bluetooth: hci2: link tx timeout [ 1196.684336][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.688476][ T5613] Bluetooth: hci2: link tx timeout [ 1196.688489][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.694500][ T5613] Bluetooth: hci2: link tx timeout [ 1196.694516][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.694739][ T5613] Bluetooth: hci2: link tx timeout [ 1196.694750][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.698637][ T5613] Bluetooth: hci2: link tx timeout [ 1196.698651][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.704390][ T5613] Bluetooth: hci2: link tx timeout [ 1196.704405][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.706037][ T5613] Bluetooth: hci2: link tx timeout [ 1196.706050][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.709955][ T5613] Bluetooth: hci2: link tx timeout [ 1196.709969][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.722504][ T5613] Bluetooth: hci2: link tx timeout [ 1196.722524][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.724426][ T5613] Bluetooth: hci2: link tx timeout [ 1196.724441][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.724953][ T5613] Bluetooth: hci2: link tx timeout [ 1196.724966][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.725312][ T5613] Bluetooth: hci2: link tx timeout [ 1196.725324][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.726952][ T5613] Bluetooth: hci2: link tx timeout [ 1196.726965][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.740493][ T5613] Bluetooth: hci2: link tx timeout [ 1196.740510][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.752342][ T5613] Bluetooth: hci2: link tx timeout [ 1196.752360][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1196.814304][ T5735] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1197.119284][T16475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.158666][ T5735] usb 2-1: Using ep0 maxpacket: 16 [ 1197.544320][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 1197.769582][T16475] veth0_vlan: entered promiscuous mode [ 1197.963477][T16475] veth1_vlan: entered promiscuous mode [ 1198.538910][T16475] veth0_macvtap: entered promiscuous mode [ 1198.576831][T16475] veth1_macvtap: entered promiscuous mode [ 1198.647373][T16475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.726836][T16475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.863201][T11391] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.876359][T11391] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.160424][T11391] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.455465][T11391] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.750772][ T5735] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1199.750857][ T5735] usb 2-1: no configurations [ 1199.750869][ T5735] usb 2-1: can't read configurations, error -22 [ 1201.520235][T11381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.520252][T11381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.567355][T17050] FAULT_INJECTION: forcing a failure. [ 1201.567355][T17050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1201.567388][T17050] CPU: 0 UID: 0 PID: 17050 Comm: syz.1.3353 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1201.567412][T17050] Tainted: [L]=SOFTLOCKUP [ 1201.567419][T17050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1201.567431][T17050] Call Trace: [ 1201.567438][T17050] [ 1201.567446][T17050] dump_stack_lvl+0xe8/0x150 [ 1201.567473][T17050] should_fail_ex+0x467/0x600 [ 1201.567502][T17050] _copy_from_user+0x2d/0xb0 [ 1201.567528][T17050] ___sys_sendmsg+0x1c6/0x360 [ 1201.567552][T17050] ? __lock_acquire+0x683/0x2ce0 [ 1201.567578][T17050] ? __pfx____sys_sendmsg+0x10/0x10 [ 1201.567629][T17050] ? __fget_files+0x2a/0x420 [ 1201.567651][T17050] ? __fget_files+0x3a8/0x420 [ 1201.567680][T17050] __x64_sys_sendmsg+0x1b7/0x290 [ 1201.567714][T17050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1201.567753][T17050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.567771][T17050] do_syscall_64+0x174/0x580 [ 1201.567792][T17050] ? trace_irq_disable+0x3b/0x140 [ 1201.567813][T17050] ? clear_bhb_loop+0x40/0x90 [ 1201.567833][T17050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.567847][T17050] RIP: 0033:0x7fb5bd22ce59 [ 1201.567861][T17050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.567872][T17050] RSP: 002b:00007fb5bb47e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1201.567887][T17050] RAX: ffffffffffffffda RBX: 00007fb5bd4a5fa0 RCX: 00007fb5bd22ce59 [ 1201.567897][T17050] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000004 [ 1201.567905][T17050] RBP: 00007fb5bb47e090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.567913][T17050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.567921][T17050] R13: 00007fb5bd4a6038 R14: 00007fb5bd4a5fa0 R15: 00007ffc620c6228 [ 1201.567942][T17050] [ 1201.605372][ T37] kauditd_printk_skb: 8798 callbacks suppressed [ 1201.605387][ T37] audit: type=1400 audit(1782865269.292:1105753): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13642 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1201.605425][ T37] audit: type=1400 audit(1782865269.292:1105754): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13642 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1201.605459][ T37] audit: type=1400 audit(1782865269.292:1105755): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13642 comm="syz-executor" name="433" dev="tmpfs" ino=2191 [ 1201.605492][ T37] audit: type=1400 audit(1782865269.292:1105756): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13642 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1201.605526][ T37] audit: type=1400 audit(1782865269.292:1105757): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13642 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1201.605560][ T37] audit: type=1400 audit(1782865269.292:1105758): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13642 comm="syz-executor" name="433" dev="tmpfs" ino=2191 [ 1201.606487][ T37] audit: type=1400 audit(1782865269.292:1105759): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1201.606524][ T37] audit: type=1400 audit(1782865269.292:1105760): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1201.606558][ T37] audit: type=1400 audit(1782865269.292:1105761): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1201.606592][ T37] audit: type=1400 audit(1782865269.292:1105762): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="watch" dev="tmpfs" ino=169 [ 1202.060233][T11391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.060255][T11391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.891152][ T5720] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1203.094456][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 1203.982002][ T5720] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1203.982086][ T5720] usb 2-1: no configurations [ 1203.982099][ T5720] usb 2-1: can't read configurations, error -22 [ 1204.008294][T17065] netlink: 'syz.6.3359': attribute type 2 has an invalid length. [ 1204.043764][T17065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3359'. [ 1204.136757][T17065] vlan2: entered promiscuous mode [ 1204.136778][T17065] gretap0: entered promiscuous mode [ 1204.934629][ T5837] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1205.052624][T17086] FAULT_INJECTION: forcing a failure. [ 1205.052624][T17086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.052694][T17086] CPU: 1 UID: 0 PID: 17086 Comm: syz.5.3366 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1205.052719][T17086] Tainted: [L]=SOFTLOCKUP [ 1205.052726][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1205.052737][T17086] Call Trace: [ 1205.052744][T17086] [ 1205.052753][T17086] dump_stack_lvl+0xe8/0x150 [ 1205.052782][T17086] should_fail_ex+0x467/0x600 [ 1205.052810][T17086] _copy_from_user+0x2d/0xb0 [ 1205.052838][T17086] ___sys_sendmsg+0x1c6/0x360 [ 1205.052862][T17086] ? __lock_acquire+0x683/0x2ce0 [ 1205.052889][T17086] ? __pfx____sys_sendmsg+0x10/0x10 [ 1205.052944][T17086] ? __fget_files+0x2a/0x420 [ 1205.052966][T17086] ? __fget_files+0x3a8/0x420 [ 1205.052996][T17086] __x64_sys_sendmsg+0x1b7/0x290 [ 1205.053022][T17086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1205.053063][T17086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.053082][T17086] do_syscall_64+0x174/0x580 [ 1205.053106][T17086] ? clear_bhb_loop+0x40/0x90 [ 1205.053127][T17086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.053145][T17086] RIP: 0033:0x7f0a2329ce59 [ 1205.053162][T17086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.053177][T17086] RSP: 002b:00007f0a2138b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1205.053196][T17086] RAX: ffffffffffffffda RBX: 00007f0a23516180 RCX: 00007f0a2329ce59 [ 1205.053209][T17086] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c [ 1205.053221][T17086] RBP: 00007f0a2138b090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.053233][T17086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.053252][T17086] R13: 00007f0a23516218 R14: 00007f0a23516180 R15: 00007ffe101abbf8 [ 1205.053281][T17086] [ 1205.641603][ T5837] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1205.641621][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.641631][ T5837] usb 7-1: Product: syz [ 1205.641639][ T5837] usb 7-1: Manufacturer: syz [ 1205.641647][ T5837] usb 7-1: SerialNumber: syz [ 1205.823547][ T5837] usb 7-1: config 0 descriptor?? [ 1205.891115][T17089] FAULT_INJECTION: forcing a failure. [ 1205.891115][T17089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.891144][T17089] CPU: 0 UID: 0 PID: 17089 Comm: syz.3.3368 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1205.891165][T17089] Tainted: [L]=SOFTLOCKUP [ 1205.891171][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1205.891181][T17089] Call Trace: [ 1205.891188][T17089] [ 1205.891195][T17089] dump_stack_lvl+0xe8/0x150 [ 1205.891224][T17089] should_fail_ex+0x467/0x600 [ 1205.891246][T17089] _copy_from_user+0x2d/0xb0 [ 1205.891268][T17089] ___sys_sendmsg+0x1c6/0x360 [ 1205.891288][T17089] ? __lock_acquire+0x683/0x2ce0 [ 1205.891310][T17089] ? __pfx____sys_sendmsg+0x10/0x10 [ 1205.891348][T17089] ? kstrtouint+0x6e/0xe0 [ 1205.891385][T17089] ? __fget_files+0x2a/0x420 [ 1205.891402][T17089] ? __fget_files+0x3a8/0x420 [ 1205.891424][T17089] __sys_sendmmsg+0x279/0x4d0 [ 1205.891445][T17089] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1205.891467][T17089] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1205.891498][T17089] ? ksys_write+0x248/0x270 [ 1205.891519][T17089] ? __pfx_ksys_write+0x10/0x10 [ 1205.891541][T17089] __x64_sys_sendmmsg+0xa0/0xc0 [ 1205.891558][T17089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.891573][T17089] do_syscall_64+0x174/0x580 [ 1205.891588][T17089] ? trace_irq_disable+0x3b/0x140 [ 1205.891607][T17089] ? clear_bhb_loop+0x40/0x90 [ 1205.891624][T17089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.891648][T17089] RIP: 0033:0x7f860374ce59 [ 1205.891663][T17089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.891674][T17089] RSP: 002b:00007f86019a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1205.891691][T17089] RAX: ffffffffffffffda RBX: 00007f86039c5fa0 RCX: 00007f860374ce59 [ 1205.891703][T17089] RDX: 0000000000000002 RSI: 0000200000000a00 RDI: 0000000000000003 [ 1205.891713][T17089] RBP: 00007f86019a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.891723][T17089] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 1205.891735][T17089] R13: 00007f86039c6038 R14: 00007f86039c5fa0 R15: 00007ffd5194be68 [ 1205.891758][T17089] [ 1206.135910][ T5837] usb 7-1: ignoring: probably an ADSL modem [ 1206.543598][ T5837] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1206.599934][T17096] FAULT_INJECTION: forcing a failure. [ 1206.599934][T17096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.599969][T17096] CPU: 1 UID: 0 PID: 17096 Comm: syz.3.3371 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1206.599993][T17096] Tainted: [L]=SOFTLOCKUP [ 1206.600000][T17096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1206.600011][T17096] Call Trace: [ 1206.600018][T17096] [ 1206.600027][T17096] dump_stack_lvl+0xe8/0x150 [ 1206.600055][T17096] should_fail_ex+0x467/0x600 [ 1206.600083][T17096] _copy_from_user+0x2d/0xb0 [ 1206.600110][T17096] ___sys_sendmsg+0x1c6/0x360 [ 1206.600135][T17096] ? __lock_acquire+0x683/0x2ce0 [ 1206.600162][T17096] ? __pfx____sys_sendmsg+0x10/0x10 [ 1206.600215][T17096] ? __fget_files+0x2a/0x420 [ 1206.600235][T17096] ? __fget_files+0x3a8/0x420 [ 1206.600264][T17096] __x64_sys_sendmsg+0x1b7/0x290 [ 1206.600290][T17096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1206.600330][T17096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.600349][T17096] do_syscall_64+0x174/0x580 [ 1206.600370][T17096] ? trace_irq_disable+0x3b/0x140 [ 1206.600390][T17096] ? clear_bhb_loop+0x40/0x90 [ 1206.600411][T17096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.600430][T17096] RIP: 0033:0x7f860374ce59 [ 1206.600446][T17096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.600461][T17096] RSP: 002b:00007f86019a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1206.600481][T17096] RAX: ffffffffffffffda RBX: 00007f86039c5fa0 RCX: 00007f860374ce59 [ 1206.600494][T17096] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1206.600506][T17096] RBP: 00007f86019a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.600516][T17096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.600526][T17096] R13: 00007f86039c6038 R14: 00007f86039c5fa0 R15: 00007ffd5194be68 [ 1206.600552][T17096] [ 1206.623270][ T37] kauditd_printk_skb: 8064 callbacks suppressed [ 1206.623287][ T37] audit: type=1400 audit(1782865274.302:1111457): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1206.623326][ T37] audit: type=1400 audit(1782865274.302:1111458): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1206.623360][ T37] audit: type=1400 audit(1782865274.302:1111459): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop6" dev="sysfs" ino=15878 [ 1206.623395][ T37] audit: type=1400 audit(1782865274.302:1111460): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sda1" ino=2 [ 1206.623429][ T37] audit: type=1400 audit(1782865274.302:1111461): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1206.623462][ T37] audit: type=1400 audit(1782865274.302:1111462): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1206.623496][ T37] audit: type=1400 audit(1782865274.302:1111463): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1206.623529][ T37] audit: type=1400 audit(1782865274.302:1111464): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1206.623563][ T37] audit: type=1400 audit(1782865274.302:1111465): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop6" dev="sysfs" ino=15878 [ 1206.623597][ T37] audit: type=1400 audit(1782865274.302:1111466): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="power" dev="sysfs" ino=15913 [ 1206.660589][T17098] netlink: 'syz.5.3370': attribute type 21 has an invalid length. [ 1206.660694][T17098] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3370'. [ 1206.660731][T17098] netlink: 'syz.5.3370': attribute type 1 has an invalid length. [ 1206.754896][ T200] usb 7-1: USB disconnect, device number 20 [ 1206.920916][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1206.979312][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1206.996701][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1207.053219][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1207.055008][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1208.445942][T17128] netlink: 'syz.6.3377': attribute type 10 has an invalid length. [ 1209.231995][ T60] Bluetooth: hci0: command tx timeout [ 1209.264919][T17128] syz_tun: entered promiscuous mode [ 1209.321765][T17128] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1210.883856][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 1211.305279][ T60] Bluetooth: hci0: command tx timeout [ 1211.306284][T17167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3394'. [ 1211.368512][T17168] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1211.642812][ T4966] audit_log_start: 10191 callbacks suppressed [ 1211.642829][ T4966] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1211.642839][T16475] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1211.642840][ T4966] audit: audit_lost=274284 audit_rate_limit=0 audit_backlog_limit=64 [ 1211.642853][ T4966] audit: backlog limit exceeded [ 1211.642851][T16475] audit: audit_lost=274285 audit_rate_limit=0 audit_backlog_limit=64 [ 1211.642865][T16475] audit: backlog limit exceeded [ 1211.642884][ T4966] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1211.642880][T16475] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1211.642895][ T4966] audit: audit_lost=274286 audit_rate_limit=0 audit_backlog_limit=64 [ 1211.642898][T16475] audit: audit_lost=274287 audit_rate_limit=0 audit_backlog_limit=64 [ 1212.104218][ T5837] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1212.295022][ T5837] usb 7-1: config 0 has an invalid interface number: 114 but max is 0 [ 1212.295048][ T5837] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1212.295065][ T5837] usb 7-1: config 0 has an invalid interface number: 33 but max is 0 [ 1212.295082][ T5837] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1212.295101][ T5837] usb 7-1: config 0 has no interface number 0 [ 1212.295116][ T5837] usb 7-1: config 0 has no interface number 1 [ 1212.295168][ T5837] usb 7-1: config 0 interface 114 altsetting 8 endpoint 0x8D has invalid maxpacket 1024, setting to 64 [ 1212.295194][ T5837] usb 7-1: config 0 interface 114 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 1212.295215][ T5837] usb 7-1: config 0 interface 114 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1212.295233][ T5837] usb 7-1: config 0 interface 114 altsetting 8 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 1212.295255][ T5837] usb 7-1: config 0 interface 114 altsetting 8 bulk endpoint 0x7 has invalid maxpacket 8 [ 1212.295273][ T5837] usb 7-1: config 0 interface 114 altsetting 8 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1212.295294][ T5837] usb 7-1: too many endpoints for config 0 interface 33 altsetting 90: 113, using maximum allowed: 30 [ 1212.295326][ T5837] usb 7-1: config 0 interface 33 altsetting 90 has 1 endpoint descriptor, different from the interface descriptor's value: 113 [ 1212.295348][ T5837] usb 7-1: config 0 interface 114 has no altsetting 0 [ 1212.295363][ T5837] usb 7-1: config 0 interface 33 has no altsetting 0 [ 1212.361273][ T5837] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice=74.4b [ 1212.361303][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.361321][ T5837] usb 7-1: Product: syz [ 1212.361334][ T5837] usb 7-1: Manufacturer: 캾衔톃ﭕ휋홺ꋤ슉쉪눚杆ᕖꭾÑ騌폇ﯫﱡ冧櫚筰ᬙ翎ᐔ쳁ڲޚ㮯佼竺۷쾖엍춫₣悎⨊৯f沫㹧꾯숞庇゜歨輳禲훧箺ꕛᾦ飠ෲዻ櫈器梁끿曠ꌥ﷗⏥䦉홏ꅗ䇮﹨洁샶㭦䭕᫖༽侽腒ｪ⶯뵶櫀䖓ࢉ逇쩃䋍蒅贕잳햿噾垞헡쟗䷄ꈑ⛥㥗놰ᚲ↰핒罈掲㸅✚祰潭꤬ [ 1212.361360][ T5837] usb 7-1: SerialNumber: syz [ 1212.533131][ T5837] usb 7-1: config 0 descriptor?? [ 1212.534703][T17180] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1212.536907][T17180] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1212.751972][ T5837] appletouch 7-1:0.114: Could not find int-in endpoint [ 1212.752007][ T5837] appletouch 7-1:0.114: probe with driver appletouch failed with error -5 [ 1212.753591][ T5837] usbhid 7-1:0.114: couldn't find an input interrupt endpoint [ 1212.860453][ T5837] usb 7-1: USB disconnect, device number 21 [ 1213.107987][T17097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.109674][T17097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.109890][T17097] bridge_slave_0: entered allmulticast mode [ 1213.112594][T17097] bridge_slave_0: entered promiscuous mode [ 1213.127644][T17097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.129851][T17097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.130101][T17097] bridge_slave_1: entered allmulticast mode [ 1213.140850][T17097] bridge_slave_1: entered promiscuous mode [ 1213.384297][ T60] Bluetooth: hci0: command tx timeout [ 1213.516149][T17097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.340825][T17097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.144034][T17097] team0: Port device team_slave_0 added [ 1215.162862][T17097] team0: Port device team_slave_1 added [ 1215.282393][T17097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.282443][T17097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.283780][T17097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.467349][ T60] Bluetooth: hci0: command tx timeout [ 1215.678314][T17227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3414'. [ 1216.218080][T17097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.218096][T17097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.218127][T17097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.401708][T17240] FAULT_INJECTION: forcing a failure. [ 1216.401708][T17240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1216.401743][T17240] CPU: 1 UID: 0 PID: 17240 Comm: syz.5.3421 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1216.401766][T17240] Tainted: [L]=SOFTLOCKUP [ 1216.401773][T17240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1216.401784][T17240] Call Trace: [ 1216.401792][T17240] [ 1216.401801][T17240] dump_stack_lvl+0xe8/0x150 [ 1216.401828][T17240] should_fail_ex+0x467/0x600 [ 1216.401856][T17240] _copy_from_user+0x2d/0xb0 [ 1216.401881][T17240] __sys_bind+0x1cc/0x410 [ 1216.401904][T17240] ? __pfx___sys_bind+0x10/0x10 [ 1216.401931][T17240] ? rcu_is_watching+0x15/0xb0 [ 1216.401961][T17240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.401980][T17240] __x64_sys_bind+0x7a/0x90 [ 1216.402000][T17240] do_syscall_64+0x174/0x580 [ 1216.402021][T17240] ? trace_irq_disable+0x3b/0x140 [ 1216.402042][T17240] ? clear_bhb_loop+0x40/0x90 [ 1216.402065][T17240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.402081][T17240] RIP: 0033:0x7f0a2329ce59 [ 1216.402109][T17240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.402124][T17240] RSP: 002b:00007f0a214ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1216.402143][T17240] RAX: ffffffffffffffda RBX: 00007f0a23515fa0 RCX: 00007f0a2329ce59 [ 1216.402156][T17240] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1216.402167][T17240] RBP: 00007f0a214ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.402179][T17240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.402190][T17240] R13: 00007f0a23516038 R14: 00007f0a23515fa0 R15: 00007ffe101abbf8 [ 1216.402217][T17240] [ 1216.602921][T17097] hsr_slave_0: entered promiscuous mode [ 1216.611761][T17097] hsr_slave_1: entered promiscuous mode [ 1216.612739][T17097] debugfs: 'hsr0' already exists in 'hsr' [ 1216.612763][T17097] Cannot create hsr debugfs directory [ 1216.653477][ T37] kauditd_printk_skb: 8680 callbacks suppressed [ 1216.653492][ T37] audit: type=1400 audit(1782865284.322:1127844): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13642 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1216.653518][ T37] audit: type=1400 audit(1782865284.322:1127847): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=13642 comm="syz-executor" name="472" dev="tmpfs" ino=2386 [ 1216.657461][ T37] audit: type=1400 audit(1782865284.342:1127848): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1216.657506][ T37] audit: type=1400 audit(1782865284.342:1127849): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1216.657542][ T37] audit: type=1400 audit(1782865284.342:1127850): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1216.657577][ T37] audit: type=1400 audit(1782865284.342:1127851): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1216.657618][ T37] audit: type=1400 audit(1782865284.342:1127852): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop4" dev="sysfs" ino=15632 [ 1216.657654][ T37] audit: type=1400 audit(1782865284.342:1127853): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" name="uevent" dev="sysfs" ino=15633 [ 1216.657689][ T37] audit: type=1400 audit(1782865284.342:1127854): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop4/uevent" dev="sysfs" ino=15633 [ 1216.657724][ T37] audit: type=1400 audit(1782865284.342:1127855): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4966 comm="udevd" path="/sys/devices/virtual/block/loop4/uevent" dev="sysfs" ino=15633 [ 1216.890227][T17248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.892453][T17248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.912522][T17248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.913094][T17248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.932257][T17248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.932798][T17248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.950162][T17248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.959751][T17248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.970410][T17248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.970958][T17248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.104469][ T5839] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1218.480562][ T5839] usb 7-1: device descriptor read/all, error -71 [ 1218.860957][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3431'. [ 1221.083233][T17292] FAULT_INJECTION: forcing a failure. [ 1221.083233][T17292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.083268][T17292] CPU: 1 UID: 0 PID: 17292 Comm: syz.3.3439 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1221.083287][T17292] Tainted: [L]=SOFTLOCKUP [ 1221.083291][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1221.083300][T17292] Call Trace: [ 1221.083305][T17292] [ 1221.083312][T17292] dump_stack_lvl+0xe8/0x150 [ 1221.083336][T17292] should_fail_ex+0x467/0x600 [ 1221.083357][T17292] _copy_from_user+0x2d/0xb0 [ 1221.083391][T17292] do_sock_getsockopt+0x200/0x7e0 [ 1221.083415][T17292] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1221.083443][T17292] ? __fget_files+0x3a8/0x420 [ 1221.083459][T17292] ? __fget_files+0x2a/0x420 [ 1221.083479][T17292] __x64_sys_getsockopt+0x1aa/0x250 [ 1221.083500][T17292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.083514][T17292] do_syscall_64+0x174/0x580 [ 1221.083531][T17292] ? trace_irq_disable+0x3b/0x140 [ 1221.083549][T17292] ? clear_bhb_loop+0x40/0x90 [ 1221.083565][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.083577][T17292] RIP: 0033:0x7f860374ce59 [ 1221.083592][T17292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.083603][T17292] RSP: 002b:00007f86019a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1221.083619][T17292] RAX: ffffffffffffffda RBX: 00007f86039c5fa0 RCX: 00007f860374ce59 [ 1221.083628][T17292] RDX: 000000000000006c RSI: 0000000000000084 RDI: 0000000000000003 [ 1221.083639][T17292] RBP: 00007f86019a6090 R08: 0000200000000140 R09: 0000000000000000 [ 1221.083648][T17292] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1221.083657][T17292] R13: 00007f86039c6038 R14: 00007f86039c5fa0 R15: 00007ffd5194be68 [ 1221.083678][T17292] [ 1221.484338][ T5839] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1221.634369][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 1221.640306][ T5839] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1221.640340][ T5839] usb 5-1: config 0 has no interface number 0 [ 1221.640384][ T5839] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1221.640407][ T5839] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1221.661052][ T37] kauditd_printk_skb: 5852 callbacks suppressed [ 1221.661071][ T37] audit: type=1400 audit(1782865289.342:1132932): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="/" dev="sysfs" ino=1 [ 1221.661114][ T37] audit: type=1400 audit(1782865289.342:1132933): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="devices" dev="sysfs" ino=18 [ 1221.661149][ T37] audit: type=1400 audit(1782865289.342:1132934): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="virtual" dev="sysfs" ino=1389 [ 1221.661185][ T37] audit: type=1400 audit(1782865289.342:1132935): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13642 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1221.661221][ T37] audit: type=1400 audit(1782865289.342:1132936): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13642 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 1221.661256][ T37] audit: type=1400 audit(1782865289.342:1132937): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=13642 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 [ 1221.661290][ T37] audit: type=1400 audit(1782865289.342:1132938): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=13642 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 [ 1221.661339][ T37] audit: type=1400 audit(1782865289.342:1132939): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="block" dev="sysfs" ino=13350 [ 1221.661374][ T37] audit: type=1400 audit(1782865289.342:1132940): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="loop5" dev="sysfs" ino=15755 [ 1221.661408][ T37] audit: type=1400 audit(1782865289.342:1132941): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4966 comm="udevd" name="mq" dev="sysfs" ino=15851 [ 1221.794216][ T200] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1221.916501][ T5839] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1221.916867][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.916887][ T5839] usb 5-1: Product: syz [ 1221.916901][ T5839] usb 5-1: Manufacturer: syz [ 1221.916914][ T5839] usb 5-1: SerialNumber: syz [ 1221.923332][ T5839] usb 5-1: config 0 descriptor?? [ 1222.003904][ T200] usb 7-1: not running at top speed; connect to a high speed hub [ 1222.020814][ T200] usb 7-1: config 127 has an invalid interface number: 170 but max is 0 [ 1222.020839][ T200] usb 7-1: config 127 has no interface number 0 [ 1222.020870][ T200] usb 7-1: config 127 interface 170 has no altsetting 0 [ 1222.058972][ T200] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=b0.0f [ 1222.059070][ T200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.059099][ T200] usb 7-1: Product: syz [ 1222.059112][ T200] usb 7-1: Manufacturer: syz [ 1222.059125][ T200] usb 7-1: SerialNumber: syz [ 1222.465624][T17315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.466178][T17315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.533601][ T200] kvaser_usb 7-1:127.170: error -ENODEV: Cannot get usb endpoint(s) [ 1222.565596][ T200] usb 7-1: USB disconnect, device number 24 [ 1223.061639][ T5839] appletouch 5-1:0.85: Failed to read mode from device. [ 1223.077361][ T5839] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 1223.111297][ T5839] usb 5-1: USB disconnect, device number 109 [ 1223.309245][T17322] FAULT_INJECTION: forcing a failure. [ 1223.309245][T17322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1223.309278][T17322] CPU: 0 UID: 0 PID: 17322 Comm: syz.6.3451 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1223.309300][T17322] Tainted: [L]=SOFTLOCKUP [ 1223.309306][T17322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1223.309316][T17322] Call Trace: [ 1223.309324][T17322] [ 1223.309331][T17322] dump_stack_lvl+0xe8/0x150 [ 1223.309357][T17322] should_fail_ex+0x467/0x600 [ 1223.309381][T17322] _copy_from_user+0x2d/0xb0 [ 1223.309406][T17322] ___sys_sendmsg+0x1c6/0x360 [ 1223.309429][T17322] ? __lock_acquire+0x683/0x2ce0 [ 1223.309464][T17322] ? __pfx____sys_sendmsg+0x10/0x10 [ 1223.309514][T17322] ? __fget_files+0x2a/0x420 [ 1223.309534][T17322] ? __fget_files+0x3a8/0x420 [ 1223.309561][T17322] __x64_sys_sendmsg+0x1b7/0x290 [ 1223.309585][T17322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1223.309624][T17322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.309644][T17322] do_syscall_64+0x174/0x580 [ 1223.309665][T17322] ? trace_irq_disable+0x3b/0x140 [ 1223.309687][T17322] ? clear_bhb_loop+0x40/0x90 [ 1223.309712][T17322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.309730][T17322] RIP: 0033:0x7f2095e0ce59 [ 1223.309747][T17322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.309762][T17322] RSP: 002b:00007f2094066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1223.309780][T17322] RAX: ffffffffffffffda RBX: 00007f2096085fa0 RCX: 00007f2095e0ce59 [ 1223.309794][T17322] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000007 [ 1223.309805][T17322] RBP: 00007f2094066090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.309817][T17322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.309828][T17322] R13: 00007f2096086038 R14: 00007f2096085fa0 R15: 00007ffe0b1ed1c8 [ 1223.309858][T17322] [ 1223.753908][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3454'. [ 1224.106523][ T60] Bluetooth: hci0: command tx timeout [ 1224.646234][T17097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.857429][T17339] affs: No valid root block on device nullb0 [ 1225.154411][ T5837] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1225.323632][ T5837] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1225.323659][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.379458][ T5837] usb 7-1: config 0 descriptor?? [ 1225.396233][ T5837] pwc: Samsung MPC-C10 USB webcam detected. [ 1225.595883][T17339] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1225.730739][T17097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.809157][T17365] CIFS: VFS: UNC: path must begin with // or \\ [ 1225.809207][T17365] Malformed UNC in devname [ 1225.809207][T17365] [ 1225.809479][T17365] CIFS: VFS: Malformed UNC in devname [ 1226.052234][T17355] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 1226.052254][T17355] bond3: option packets_per_slave: allowed values 0 - 65535 [ 1226.090000][T17355] bond3 (unregistering): Released all slaves [ 1226.154322][ T5839] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1226.199946][ T5837] pwc: send_video_command error -71 [ 1226.199962][ T5837] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1226.200201][ T5837] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1226.231591][ T5837] usb 7-1: USB disconnect, device number 25 [ 1226.377936][T17043] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1226.403878][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 1226.427197][ T5839] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1226.427225][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.427243][ T5839] usb 6-1: Product: syz [ 1226.427257][ T5839] usb 6-1: Manufacturer: syz [ 1226.427270][ T5839] usb 6-1: SerialNumber: syz [ 1226.432564][ T5839] usb 6-1: config 0 descriptor?? [ 1226.437122][ T5839] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1226.528625][T17356] ================================================================== [ 1226.528639][T17356] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1226.528770][T17356] Read of size 8 at addr ffffc9000e842008 by task vhost-17355/17356 [ 1226.528785][T17356] [ 1226.528830][T17356] CPU: 0 UID: 0 PID: 17356 Comm: vhost-17355 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1226.528883][T17356] Tainted: [L]=SOFTLOCKUP [ 1226.528890][T17356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1226.528901][T17356] Call Trace: [ 1226.528908][T17356] [ 1226.528917][T17356] dump_stack_lvl+0xe8/0x150 [ 1226.528939][T17356] print_address_description+0x55/0x1e0 [ 1226.528972][T17356] ? __list_add_valid_or_report+0x4e/0x130 [ 1226.528992][T17356] print_report+0x58/0x70 [ 1226.529010][T17356] kasan_report+0x117/0x150 [ 1226.529033][T17356] ? __list_add_valid_or_report+0x4e/0x130 [ 1226.529058][T17356] __list_add_valid_or_report+0x4e/0x130 [ 1226.529080][T17356] kcov_remote_stop+0x457/0x680 [ 1226.529169][T17356] vhost_run_work_list+0x152/0x1e0 [ 1226.529191][T17356] ? __pfx_vhost_run_work_list+0x10/0x10 [ 1226.529208][T17356] vhost_task_fn+0x2fc/0x4b0 [ 1226.529264][T17356] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1226.529289][T17356] ? __pfx_vhost_task_fn+0x10/0x10 [ 1226.529310][T17356] ? rt_spin_unlock+0x157/0x200 [ 1226.529336][T17356] ? rt_spin_unlock+0x163/0x200 [ 1226.529357][T17356] ? __pfx_vhost_task_fn+0x10/0x10 [ 1226.529376][T17356] ret_from_fork+0x514/0xb70 [ 1226.529398][T17356] ? __pfx_ret_from_fork+0x10/0x10 [ 1226.529416][T17356] ? __switch_to+0xc89/0x1420 [ 1226.529433][T17356] ? __pfx_vhost_task_fn+0x10/0x10 [ 1226.529452][T17356] ret_from_fork_asm+0x1a/0x30 [ 1226.529480][T17356] [ 1226.529486][T17356] [ 1226.529491][T17356] The buggy address belongs to a vmalloc virtual mapping [ 1226.529537][T17356] Memory state around the buggy address: [ 1226.529574][T17356] ffffc9000e841f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1226.529585][T17356] ffffc9000e841f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1226.529596][T17356] >ffffc9000e842000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1226.529604][T17356] ^ [ 1226.529613][T17356] ffffc9000e842080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1226.529624][T17356] ffffc9000e842100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1226.529632][T17356] ================================================================== [ 1226.529912][T17356] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1226.529929][T17356] CPU: 0 UID: 0 PID: 17356 Comm: vhost-17355 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1226.529953][T17356] Tainted: [L]=SOFTLOCKUP [ 1226.529959][T17356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1226.529972][T17356] Call Trace: [ 1226.529979][T17356] [ 1226.529986][T17356] vpanic+0x56c/0xa60 [ 1226.530008][T17356] ? rcu_is_watching+0x15/0xb0 [ 1226.530033][T17356] ? __pfx_vpanic+0x10/0x10 [ 1226.530058][T17356] panic+0xc5/0xd0 [ 1226.530078][T17356] ? __pfx_panic+0x10/0x10 [ 1226.530098][T17356] ? preempt_schedule_thunk+0x16/0x40 [ 1226.530123][T17356] ? preempt_schedule_thunk+0x16/0x40 [ 1226.530148][T17356] ? __list_add_valid_or_report+0x4e/0x130 [ 1226.530169][T17356] check_panic_on_warn+0x89/0xb0 [ 1226.530223][T17356] ? __list_add_valid_or_report+0x4e/0x130 [ 1226.530244][T17356] end_report+0x73/0x170 [ 1226.530273][T17356] ? __list_add_valid_or_report+0x4e/0x130 [ 1226.530294][T17356] kasan_report+0x128/0x150 [ 1226.530317][T17356] ? __list_add_valid_or_report+0x4e/0x130 [ 1226.530341][T17356] __list_add_valid_or_report+0x4e/0x130 [ 1226.530363][T17356] kcov_remote_stop+0x457/0x680 [ 1226.530385][T17356] vhost_run_work_list+0x152/0x1e0 [ 1226.530405][T17356] ? __pfx_vhost_run_work_list+0x10/0x10 [ 1226.530423][T17356] vhost_task_fn+0x2fc/0x4b0 [ 1226.530441][T17356] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1226.530464][T17356] ? __pfx_vhost_task_fn+0x10/0x10 [ 1226.530486][T17356] ? rt_spin_unlock+0x157/0x200 [ 1226.530511][T17356] ? rt_spin_unlock+0x163/0x200 [ 1226.530534][T17356] ? __pfx_vhost_task_fn+0x10/0x10 [ 1226.530553][T17356] ret_from_fork+0x514/0xb70 [ 1226.530573][T17356] ? __pfx_ret_from_fork+0x10/0x10 [ 1226.530592][T17356] ? __switch_to+0xc89/0x1420 [ 1226.530611][T17356] ? __pfx_vhost_task_fn+0x10/0x10 [ 1226.530631][T17356] ret_from_fork_asm+0x1a/0x30 [ 1226.530658][T17356] [ 1226.530940][T17356] Kernel Offset: disabled