last executing test programs: 2m28.344916173s ago: executing program 3 (id=1024): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x385) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x80, &(0x7f0000000380)='wn', 0x2, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x86) fchdir(r4) r5 = open(&(0x7f0000000100)='.\x00', 0x100080, 0x4) flock(r5, 0x6) mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x2, 0x7, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x4, 0x9c1, 0x8002, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x30000, 0x152783}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) chdir(&(0x7f0000000100)='./bus\x00') r7 = syz_open_dev$vcsn(&(0x7f0000000180), 0x5, 0x800) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000780)={0x3, @win={{0xb, 0xffff3982, 0x0, 0x2}, 0x2, 0x4, &(0x7f0000000280)={{0x185, 0x8000, 0x9, 0x1}}, 0x10000, &(0x7f00000002c0)="478180fbd73790e39aa6b32906e635b0cae3800eea0e713e824c5ced5a", 0x7}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000080)) 2m25.939559014s ago: executing program 3 (id=1029): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='f2fs\x00', 0x21c000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') exit(0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) 2m23.520898497s ago: executing program 3 (id=1035): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x43, 0x10000000}}, 0x120) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) 2m20.160091607s ago: executing program 3 (id=1039): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x385) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x80, &(0x7f0000000380)='wn', 0x2, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x86) fchdir(r4) r5 = open(&(0x7f0000000100)='.\x00', 0x100080, 0x4) flock(r5, 0x6) mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x2, 0x7, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x4, 0x9c1, 0x8002, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x30000, 0x152783}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) chdir(&(0x7f0000000100)='./bus\x00') r7 = syz_open_dev$vcsn(&(0x7f0000000180), 0x5, 0x800) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000780)={0x3, @win={{0xb, 0xffff3982, 0x0, 0x2}, 0x2, 0x4, &(0x7f0000000280)={{0x185, 0x8000, 0x9, 0x1}}, 0x10000, &(0x7f00000002c0)="478180fbd73790e39aa6b32906e635b0cae3800eea0e713e824c5ced5a", 0x7}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000080)) 2m19.348781375s ago: executing program 3 (id=1047): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x240}, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) 2m17.114103139s ago: executing program 3 (id=1051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000e5ff0000000000000000000018110000", @ANYRESOCT=r1, @ANYRESOCT=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r1, 0x7, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000f40000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x4001af84, &(0x7f0000000500)) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_io_uring_setup(0x77eb, &(0x7f0000000140)={0x0, 0xf0b1, 0x20, 0x2, 0x1a5, 0x0, r7}, &(0x7f0000000080), &(0x7f0000000240)) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="e62e0000", @ANYRES16=r9, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) 2m1.114094125s ago: executing program 32 (id=1051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000e5ff0000000000000000000018110000", @ANYRESOCT=r1, @ANYRESOCT=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r1, 0x7, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000f40000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x4001af84, &(0x7f0000000500)) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_io_uring_setup(0x77eb, &(0x7f0000000140)={0x0, 0xf0b1, 0x20, 0x2, 0x1a5, 0x0, r7}, &(0x7f0000000080), &(0x7f0000000240)) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="e62e0000", @ANYRES16=r9, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) 16.580557451s ago: executing program 2 (id=1511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x765f2dee690bd45d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) clock_gettime(0x3, &(0x7f0000000000)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13.321926829s ago: executing program 2 (id=1525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x765f2dee690bd45d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) clock_gettime(0x3, &(0x7f0000000000)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10.860632837s ago: executing program 4 (id=1534): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x4, 0x0, [{0x40000cc0, 0x0, 0x3}, {0x31a, 0x0, 0x5}, {0xa61, 0x0, 0x2}, {0xc0000100, 0x0, 0xff}]}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) 10.636585871s ago: executing program 0 (id=1536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) write$nci(0xffffffffffffffff, 0x0, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (fail_nth: 2) 10.250782549s ago: executing program 0 (id=1538): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) creat(0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0xffffffffffffffda, 0x0, {0x1, 0x0, 0x0, 0x0, 0x237, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xd, 0x10000, 0x9, 0x2, 0x3, 0x8000, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) semget(0x1, 0x4, 0x39c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @random="0cc7a14c644e", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@mcast2]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 6.347133583s ago: executing program 0 (id=1540): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) io_setup(0x6, &(0x7f00000000c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x20001, 0x82) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000100)='9', 0x20000101}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100004000) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x46, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}, @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x103881, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "bf53709f390116fd8ec64933c1d0e619158a2ae76480913882fc2cfc2e6b0a2ef638cbb507c0a042f38786ad9061d653b4e0d404e59ce9373350a37d80a427f7", 0x2a}, 0x48, 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@empty, @in=@loopback, 0x4e20, 0x6, 0x4e22, 0xfc00, 0xa, 0x0, 0x0, 0x1d}, {0x3, 0x0, 0x0, 0x0, 0x5, 0x1, 0x83e, 0x4}, {0x8, 0x7, 0x5, 0x7}, 0x100, 0x6e6bb0, 0x2}, {{@in=@loopback, 0x4d3}, 0x0, @in=@multicast1, 0x0, 0x4, 0x2, 0xee, 0x1, 0x80000001, 0x2}}, 0xe8) keyctl$instantiate(0xc, r7, 0x0, 0x0, r8) writev(r6, &(0x7f0000000340), 0x0) 6.346333675s ago: executing program 2 (id=1541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x8, 0x200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create(0x7) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000009c0)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x864, 0x5e, 0x200000000000, 0x100000000000006}) close_range(r5, 0xffffffffffffffff, 0x0) 5.748964166s ago: executing program 4 (id=1543): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0xc004510e, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.41046807s ago: executing program 4 (id=1544): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd5e, &(0x7f00000002c0)=0x10000009) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x0, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x80000006, 0x7, 0xe4, 0x6, 0xfc000000, 0x1, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x5, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x404], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x400, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x4, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x28, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x1, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x3, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.795613871s ago: executing program 4 (id=1548): r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_ipv6host(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="3078303030303030303030303030303030343a1a78303030303030303030303030308030393a3078303030303030303030303030303030303a3078303030303030303030303030303030363a3078303030300230303030303030303030353a0000000030303030303030303030303030323a3078303030303030303030303030666666663a307830303030303030303030303030372f303030303030303030303030303030303030363020c68c00"], 0xb0) 3.668311153s ago: executing program 4 (id=1549): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0xc004510e, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/139, 0x8b, 0x0, 0x8}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201050037057b082d0800070100a0000904000000e6f4cefdaac1fab73e7fff0000000000000000"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0xe}, 0x0, 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf250100000008000100fcffffff340004800500030005000000050003000200000005000300020000000500030002000000050003000000000005000300020000000800020002000000"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB="63af5c4c4d4bf0e3e1a56dd5279ff8d2d629f51800c5577518b022e67c4fbe761ff9381f7014861880266d66bc1e8fc84561", @ANYRES16=0x0, @ANYRES8=r2, @ANYRES8=r2, @ANYRESOCT, @ANYRES32=r3], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0xfffffffe, 0x25dfdc01, {0x2, 0x1f, 0x0, 0x36, r6}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x40020}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001300290a000000000000000007006800", @ANYRES32=r9, @ANYBLOB="0000000000c7000014000000008004000480"], 0x34}}, 0x4050) write$binfmt_misc(r7, &(0x7f0000000080)="845d6f10f848f44d7b1d12278493b3ebedbc78acb9c9c38cb2085f674152e0e542012e185e40c336a49bd40e5db202ad43bb348b7016f19e0adc8ef0810a86be66ee073a5558c9", 0xfc9a) 1.999611186s ago: executing program 2 (id=1554): mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) (async, rerun: 32) r0 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) ftruncate(r0, 0x9) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) epoll_create1(0x80000) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000006c0)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x7, 0x1, 0x6, 0x3ff, {{0x1b, 0x4, 0x3, 0x4, 0x6c, 0x65, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @private=0xa010101, {[@cipso={0x86, 0x13, 0xacca18f9f0667951, [{0x2, 0xd, "06823ed24713c563314e2c"}]}, @timestamp_prespec={0x44, 0x14, 0xd8, 0x3, 0x0, [{@loopback}, {@loopback, 0xde040000}]}, @rr={0x7, 0xb, 0x64, [@loopback, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x78, 0x3, 0x9, [{@local, 0x370b}]}, @ssrr={0x89, 0x17, 0x8, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@dev, @broadcast, 0x0}, &(0x7f0000000580)=0xc) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r8, 0x4024700a, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000006800010000000000000000000a000000000000000600070008000000140006000000000000000000000000000000000108000500", @ANYRES32=r7, @ANYBLOB="18000d8014000600000000130000000089a738c8000000803cd47855262579e62cb6ae2b5284ea45819ac354e828f281066b4bcfed350e172df8ff26598eb3250778f581d5d589a18dfa3747"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'pim6reg0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x178, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0xfff2, 0x2}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x4}}}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0x5, 0x3, 0x2, 0x5, 0x3, 0x6}}, {0x10, 0x2, [0x4d3, 0x5, 0x6aaa, 0x6, 0x5, 0x4]}}, {{0x1c, 0x1, {0xff, 0xf4, 0x8, 0xfff, 0x0, 0x6, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x2, 0x5, 0x3]}}, {{0x1c, 0x1, {0x9, 0x0, 0x2, 0x8, 0x2, 0x8, 0x9, 0x4}}, {0xc, 0x2, [0xb58, 0x2, 0x0, 0x6e9]}}, {{0x1c, 0x1, {0x4, 0x5, 0xedb, 0x5, 0x1, 0x4, 0xd, 0x7}}, {0x12, 0x2, [0x3, 0x0, 0xc8, 0x0, 0x8, 0xc18, 0x4]}}, {{0x1c, 0x1, {0x3, 0x7, 0x7fff, 0x4, 0x0, 0x10, 0x4, 0x4}}, {0xc, 0x2, [0x0, 0x3, 0x1, 0x8]}}, {{0x1c, 0x1, {0x1d, 0x81, 0x8, 0x7, 0x1, 0xc, 0xe86, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x81, 0x12, 0x17a, 0x28, 0x0, 0x6, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x2c, 0x0, 0xa, 0x80000000, 0x1, 0x100, 0x9}}, {0x4}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x1, 0xe, 0x4, @local, @loopback, 0x86, 0x8, 0x8, 0x101}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100), 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf25070000000c000180080003000100000030000180140002006272696467655f736c6176655f3000000800030001000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020067656e657665300000000000000000004000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3100000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="78000180080003000300000008000100", @ANYRES32=r4, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="140002006272696467655f736c6176655f30000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="140002006e69637666300000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e3000"/20], 0x198}, 0x1, 0x0, 0x0, 0x4004}, 0x4008000) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000340)={0xd722, 0xe7, 0x2, 0xed4, 0x3, 0x0, [{0xfffffffffffffff6, 0x80, 0x40009, '\x00', 0x100}, {0x1, 0x5, 0x8}, {0x0, 0x10, 0x1cff6293, '\x00', 0x300}]}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000500000d00000000fdffffff0100000009001000020000000100000001000000080000000300000002000000040f"], &(0x7f0000001f00)=""/4093, 0x4e, 0xffd, 0x1, 0x297}, 0x28) 1.803630192s ago: executing program 1 (id=1555): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x0, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x80000006, 0x7, 0xe4, 0x6, 0xfc000000, 0x1, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x5, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x404], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x400, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x4, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x28, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x1, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x3, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000400000000010000000900010073797a3000"], 0xa4}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.717317178s ago: executing program 0 (id=1556): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r0, &(0x7f0000001280)=""/99, 0x63, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') (async) pread64(r0, &(0x7f0000001280)=""/99, 0x63, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) 1.642319187s ago: executing program 1 (id=1557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipmr_delroute={0x30, 0x19, 0x1, 0x70bd2b, 0x25dfdc01, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x21, 0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x3ff) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r6, &(0x7f0000001280)=[{&(0x7f0000000180)=""/173, 0xad}, {0x0}], 0x2) r7 = syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000040)=0x200000000) r9 = dup2(r8, r8) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/107, 0x0, 0xeeef0000}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x3}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x6) read$FUSE(r9, &(0x7f00000016c0)={0x2020}, 0x2020) write$vhost_msg_v2(r9, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) 1.523904586s ago: executing program 2 (id=1558): r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_ipv6host(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="3078303030303030303030303030303030343a1a78303030303030303030303030308030393a3078303030303030303030303030303030303a3078303030303030303030303030303030363a3078303030300230303030303030303030353a0000000030303030303030303030303030323a3078303030303030303030303030666666663a307830303030303030303030303030372f303030303030303030303030303030303030363020c68c00"], 0xb0) 1.46528097s ago: executing program 1 (id=1559): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x11) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 32) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_fuse_handle_req(r1, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be00", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x1e8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x7, 0x0, 0x1, 0x3, {0x6, 0x9, 0x0, 0xff, 0x3, 0x2, 0x7fffffff, 0xe857, 0x3, 0x8005, 0x3ff, 0x0, r4, 0x4, 0x4}}, {0x20000000000000, 0x6, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}, {{0x4, 0x0, 0x5, 0xa, 0x7, 0x2, {0x4, 0x1, 0x81, 0x7, 0x7, 0x1000009, 0x8, 0xfffffffe, 0x2, 0x8000, 0x4, r3, 0x0, 0x0, 0x5}}, {0x4, 0x40000a09, 0x75, 0x10000, '\x936P\x88xE\xd87\x98\"\\\x9b\xd3E\xc6\xc8\xc7\xaa\x89j\xb0f\x8c\x1e\x9c\x8c\x9cH\x01\xbdk]\xe8\xaf\x84|t\xe2\xc1k\x93\x1c\x9e\x94\xc9\xcd\x9c{U\":\x8eM\x93\x03\x06\"\x944f\xe1OJ4+\x90\x19\xb6~\xf9\xc3vR^\xf6\x84\xac`\x99!A\r\xd0\xef\xa1\x17\xa3;\xcbE j\x14\x97\x9b\xc7\x98\x88J\xbf\x15\x1fLjdX=(\xdebA|4\xe2\x90v\xc4'}}]}, 0x0, 0x0, 0x0}) (async, rerun: 64) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) close(r6) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) (async, rerun: 32) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0x118, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0}}, 0x10) listen(r7, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = syz_open_dev$video4linux(&(0x7f0000000140), 0x25f, 0x200) fsetxattr$trusted_overlay_opaque(r12, &(0x7f0000000000), 0x0, 0x0, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) (async) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.426779832s ago: executing program 0 (id=1560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x1, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000040)=@nullb, 0x0, 0x0, 0x1000080, 0x0) sched_setscheduler(r1, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.263543066s ago: executing program 2 (id=1561): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x240}, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4c8c0) accept$phonet_pipe(r4, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={0x0, @l2={0x1f, 0x5c0a, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1}, @rc, @in={0x2, 0x4e23, @local}, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3ff, 0x4b, 0x81}) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x80, 0x40020000, 0x0}) 791.509931ms ago: executing program 1 (id=1562): r0 = syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001340)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r2 = socket(0x840000000002, 0x3, 0xff) close(0x3) wait4(r0, 0x0, 0x4, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) syz_usb_connect(0x3, 0x35, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004aaf36207205a2580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000009f440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r6}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x114, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0xad, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x8, 0xeb, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x14) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r10 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "98418c9dd6928ceb101452b82aef32bb6e9cd832b0bf832a512695c5b8999ecd8111b4595ccd9d3005281dd16a5e6107244be3ee70b7b77d6dfaecc9c57d8edb", 0x3a}, 0x48, 0xfffffffffffffffb) socket$packet(0x11, 0x2, 0x300) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) keyctl$KEYCTL_PKEY_QUERY(0x18, r10, 0x0, &(0x7f0000000100)='\x00', 0x0) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x9a58014c8eeaffb3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8812}, 0x24000050) 687.82498ms ago: executing program 0 (id=1563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x8, 0x200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000009c0)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x864, 0x5e, 0x200000000000, 0x100000000000006}) close_range(r5, 0xffffffffffffffff, 0x0) 586.966103ms ago: executing program 1 (id=1564): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x101}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3b20cb60}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) 157.681327ms ago: executing program 4 (id=1565): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) io_setup(0x6, &(0x7f00000000c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x20001, 0x82) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000100)='9', 0x20000101}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100004000) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x46, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}, @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x103881, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "bf53709f390116fd8ec64933c1d0e619158a2ae76480913882fc2cfc2e6b0a2ef638cbb507c0a042f38786ad9061d653b4e0d404e59ce9373350a37d80a427f7", 0x2a}, 0x48, 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@empty, @in=@loopback, 0x4e20, 0x6, 0x4e22, 0xfc00, 0xa, 0x0, 0x0, 0x1d}, {0x3, 0x0, 0x0, 0x0, 0x5, 0x1, 0x83e, 0x4}, {0x8, 0x7, 0x5, 0x7}, 0x100, 0x6e6bb0, 0x2}, {{@in=@loopback, 0x4d3}, 0x0, @in=@multicast1, 0x0, 0x4, 0x2, 0xee, 0x1, 0x80000001, 0x2}}, 0xe8) keyctl$instantiate(0xc, r7, 0x0, 0x0, r8) writev(r6, &(0x7f0000000340), 0x0) 0s ago: executing program 1 (id=1566): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) getpid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x0, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x80000006, 0x7, 0xe4, 0x6, 0xfc000000, 0x1, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x5, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x404], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x400, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x4, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x28, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x1, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x3, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000400000000010000000900010073797a3000"], 0xa4}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): pvrusb2_a) [ 457.156357][ T2371] pvrusb2: Attached sub-driver cx25840 [ 457.156385][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 457.156397][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 457.417356][ T8672] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 457.417386][ T8672] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 457.417604][ T8672] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 457.417625][ T8672] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 459.722974][ T8682] FAULT_INJECTION: forcing a failure. [ 459.722974][ T8682] name failslab, interval 1, probability 0, space 0, times 0 [ 459.723011][ T8682] CPU: 0 UID: 0 PID: 8682 Comm: syz.1.903 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 459.723036][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.723050][ T8682] Call Trace: [ 459.723059][ T8682] [ 459.723068][ T8682] dump_stack_lvl+0xe8/0x150 [ 459.723104][ T8682] should_fail_ex+0x46c/0x600 [ 459.723139][ T8682] ? __alloc_skb+0x1dc/0x3a0 [ 459.723171][ T8682] should_failslab+0xa8/0x100 [ 459.723193][ T8682] ? __alloc_skb+0x1dc/0x3a0 [ 459.723214][ T8682] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 459.723246][ T8682] ? lockdep_hardirqs_on+0x7b/0x110 [ 459.723270][ T8682] ? __alloc_skb+0x198/0x3a0 [ 459.723295][ T8682] __alloc_skb+0x1dc/0x3a0 [ 459.723324][ T8682] netlink_sendmsg+0x5c6/0xb30 [ 459.723368][ T8682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.723407][ T8682] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.723437][ T8682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.723470][ T8682] __sock_sendmsg+0x21c/0x270 [ 459.723509][ T8682] ____sys_sendmsg+0x508/0x810 [ 459.723544][ T8682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.723584][ T8682] ? import_iovec+0x74/0xa0 [ 459.723610][ T8682] ___sys_sendmsg+0x21f/0x2a0 [ 459.723642][ T8682] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.723708][ T8682] ? __fget_files+0x2a/0x420 [ 459.723731][ T8682] ? __fget_files+0x3a6/0x420 [ 459.723786][ T8682] __x64_sys_sendmsg+0x1a1/0x260 [ 459.723819][ T8682] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.723858][ T8682] ? __pfx_ksys_write+0x10/0x10 [ 459.723902][ T8682] do_syscall_64+0xec/0xf80 [ 459.723924][ T8682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.723946][ T8682] ? trace_irq_disable+0x37/0x100 [ 459.723970][ T8682] ? clear_bhb_loop+0x60/0xb0 [ 459.723998][ T8682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.724019][ T8682] RIP: 0033:0x7ff5705ef749 [ 459.724039][ T8682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.724058][ T8682] RSP: 002b:00007ff56e84e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.724082][ T8682] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ef749 [ 459.724099][ T8682] RDX: 0000000020004006 RSI: 0000200000000340 RDI: 0000000000000003 [ 459.724113][ T8682] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 0000000000000000 [ 459.724128][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.724141][ T8682] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 459.724184][ T8682] [ 461.504468][ T8708] FAULT_INJECTION: forcing a failure. [ 461.504468][ T8708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.504506][ T8708] CPU: 1 UID: 0 PID: 8708 Comm: syz.4.912 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 461.504531][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.504544][ T8708] Call Trace: [ 461.504553][ T8708] [ 461.504562][ T8708] dump_stack_lvl+0xe8/0x150 [ 461.504599][ T8708] should_fail_ex+0x46c/0x600 [ 461.504634][ T8708] _copy_from_user+0x2d/0xb0 [ 461.504657][ T8708] ___sys_sendmsg+0x158/0x2a0 [ 461.504689][ T8708] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.504768][ T8708] ? __fget_files+0x2a/0x420 [ 461.504791][ T8708] ? __fget_files+0x3a6/0x420 [ 461.504827][ T8708] __x64_sys_sendmsg+0x1a1/0x260 [ 461.504857][ T8708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.504898][ T8708] ? __pfx_ksys_write+0x10/0x10 [ 461.504942][ T8708] do_syscall_64+0xec/0xf80 [ 461.505124][ T8708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.505148][ T8708] ? trace_irq_disable+0x37/0x100 [ 461.505172][ T8708] ? clear_bhb_loop+0x60/0xb0 [ 461.505202][ T8708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.505224][ T8708] RIP: 0033:0x7fb6a903f749 [ 461.505249][ T8708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.505268][ T8708] RSP: 002b:00007fb6a729e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.505292][ T8708] RAX: ffffffffffffffda RBX: 00007fb6a9295fa0 RCX: 00007fb6a903f749 [ 461.505308][ T8708] RDX: 00000000000000c0 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 461.505323][ T8708] RBP: 00007fb6a729e090 R08: 0000000000000000 R09: 0000000000000000 [ 461.505337][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.505350][ T8708] R13: 00007fb6a9296038 R14: 00007fb6a9295fa0 R15: 00007ffe8a395de8 [ 461.505385][ T8708] [ 467.911698][ T8744] @: renamed from bond_slave_0 (while UP) [ 471.277885][ T8757] FAULT_INJECTION: forcing a failure. [ 471.277885][ T8757] name failslab, interval 1, probability 0, space 0, times 0 [ 471.277964][ T8757] CPU: 0 UID: 0 PID: 8757 Comm: syz.3.927 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 471.277991][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.278005][ T8757] Call Trace: [ 471.278018][ T8757] [ 471.278025][ T8757] dump_stack_lvl+0xe8/0x150 [ 471.278053][ T8757] should_fail_ex+0x46c/0x600 [ 471.278085][ T8757] ? inet_bind2_bucket_create+0x34/0x510 [ 471.278108][ T8757] should_failslab+0xa8/0x100 [ 471.278124][ T8757] ? inet_bind2_bucket_create+0x34/0x510 [ 471.278144][ T8757] kmem_cache_alloc_noprof+0x84/0x6c0 [ 471.278165][ T8757] ? kmem_cache_alloc_noprof+0x1e4/0x6c0 [ 471.278193][ T8757] inet_bind2_bucket_create+0x34/0x510 [ 471.278219][ T8757] inet_csk_get_port+0xf70/0x1720 [ 471.278246][ T8757] ? inet_csk_get_port+0xc01/0x1720 [ 471.278287][ T8757] ? inet_csk_get_port+0x5e5/0x1720 [ 471.278315][ T8757] inet_csk_listen_start+0x124/0x320 [ 471.278336][ T8757] __inet_listen_sk+0x2ad/0x5a0 [ 471.278361][ T8757] ? __pfx___inet_listen_sk+0x10/0x10 [ 471.278387][ T8757] ? __local_bh_enable_ip+0x1c3/0x2c0 [ 471.278412][ T8757] inet_listen+0xa5/0x110 [ 471.278431][ T8757] __x64_sys_listen+0x1cd/0x240 [ 471.278451][ T8757] do_syscall_64+0xec/0xf80 [ 471.278466][ T8757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.278482][ T8757] ? clear_bhb_loop+0x60/0xb0 [ 471.278502][ T8757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.278518][ T8757] RIP: 0033:0x7f7a4121f749 [ 471.278533][ T8757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.278547][ T8757] RSP: 002b:00007f7a3f45d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 471.278564][ T8757] RAX: ffffffffffffffda RBX: 00007f7a41476090 RCX: 00007f7a4121f749 [ 471.278576][ T8757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 471.278585][ T8757] RBP: 00007f7a3f45d090 R08: 0000000000000000 R09: 0000000000000000 [ 471.278594][ T8757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.278603][ T8757] R13: 00007f7a41476128 R14: 00007f7a41476090 R15: 00007ffd581be928 [ 471.278631][ T8757] [ 477.786306][ T5897] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 477.933943][ T5897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.933973][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.943400][ T5897] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.943434][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.943456][ T5897] usb 1-1: Product: syz [ 477.943471][ T5897] usb 1-1: Manufacturer: syz [ 477.943486][ T5897] usb 1-1: SerialNumber: syz [ 479.220542][ T5897] usb 1-1: 0:2 : does not exist [ 479.242851][ T5897] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 479.418242][ T5897] usb 1-1: USB disconnect, device number 14 [ 479.780384][ T8821] FAULT_INJECTION: forcing a failure. [ 479.780384][ T8821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.780422][ T8821] CPU: 1 UID: 0 PID: 8821 Comm: syz.1.945 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 479.780449][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.780463][ T8821] Call Trace: [ 479.780471][ T8821] [ 479.780480][ T8821] dump_stack_lvl+0xe8/0x150 [ 479.780515][ T8821] should_fail_ex+0x46c/0x600 [ 479.780551][ T8821] _copy_from_iter+0x1cd/0x1630 [ 479.780596][ T8821] ? __pfx__copy_from_iter+0x10/0x10 [ 479.780626][ T8821] ? set_page_refcounted+0x41/0x1e0 [ 479.780644][ T8821] ? set_page_refcounted+0x6a/0x1e0 [ 479.780669][ T8821] ? set_page_refcounted+0xa0/0x1e0 [ 479.780697][ T8821] ? page_copy_sane+0x4e/0x280 [ 479.780732][ T8821] copy_page_from_iter+0xdd/0x170 [ 479.780769][ T8821] tun_get_user+0x1d40/0x3de0 [ 479.780803][ T8821] ? tun_get_user+0x6fc/0x3de0 [ 479.780844][ T8821] ? __pfx_tun_get_user+0x10/0x10 [ 479.780875][ T8821] ? __lock_acquire+0x6b6/0x2cf0 [ 479.780906][ T8821] ? kstrtoull+0x12f/0x1d0 [ 479.780942][ T8821] ? ref_tracker_alloc+0x2fe/0x450 [ 479.780972][ T8821] ? get_pid_task+0x20/0x1f0 [ 479.781007][ T8821] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 479.781041][ T8821] ? tun_get+0x1c/0x2f0 [ 479.781069][ T8821] ? tun_get+0x1c/0x2f0 [ 479.781103][ T8821] ? tun_get+0x1c/0x2f0 [ 479.781130][ T8821] ? tun_get+0x1c/0x2f0 [ 479.781162][ T8821] tun_chr_write_iter+0x119/0x200 [ 479.781194][ T8821] vfs_write+0x5d5/0xb40 [ 479.781231][ T8821] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 479.781261][ T8821] ? __pfx_vfs_write+0x10/0x10 [ 479.781300][ T8821] ? __fget_files+0x2a/0x420 [ 479.781335][ T8821] ksys_write+0x14b/0x260 [ 479.781367][ T8821] ? __pfx_ksys_write+0x10/0x10 [ 479.781415][ T8821] do_syscall_64+0xec/0xf80 [ 479.781438][ T8821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.781460][ T8821] ? trace_irq_disable+0x37/0x100 [ 479.781484][ T8821] ? clear_bhb_loop+0x60/0xb0 [ 479.781513][ T8821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.781534][ T8821] RIP: 0033:0x7ff5705ee1ff [ 479.781553][ T8821] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 479.781574][ T8821] RSP: 002b:00007ff56e84e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 479.781598][ T8821] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ee1ff [ 479.781614][ T8821] RDX: 000000000000007a RSI: 0000200000000000 RDI: 00000000000000c8 [ 479.781628][ T8821] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 0000000000000000 [ 479.781641][ T8821] R10: 000000000000007a R11: 0000000000000293 R12: 0000000000000001 [ 479.781654][ T8821] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 479.781695][ T8821] [ 481.516369][ T6283] udevd[6283]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.785188][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 482.188217][ T8838] FAULT_INJECTION: forcing a failure. [ 482.188217][ T8838] name failslab, interval 1, probability 0, space 0, times 0 [ 482.188255][ T8838] CPU: 1 UID: 0 PID: 8838 Comm: syz.4.952 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 482.188287][ T8838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 482.188307][ T8838] Call Trace: [ 482.188316][ T8838] [ 482.188325][ T8838] dump_stack_lvl+0xe8/0x150 [ 482.188363][ T8838] should_fail_ex+0x46c/0x600 [ 482.188399][ T8838] ? mas_alloc_nodes+0x291/0x350 [ 482.188432][ T8838] should_failslab+0xa8/0x100 [ 482.188454][ T8838] ? mas_alloc_nodes+0x291/0x350 [ 482.188485][ T8838] kmem_cache_alloc_noprof+0x84/0x6c0 [ 482.188524][ T8838] mas_alloc_nodes+0x291/0x350 [ 482.188562][ T8838] mas_preallocate+0x2e0/0x670 [ 482.188601][ T8838] ? __pfx_mas_preallocate+0x10/0x10 [ 482.188650][ T8838] ? __mas_set_range+0x12f/0x3c0 [ 482.188683][ T8838] __split_vma+0x2fd/0x9e0 [ 482.188713][ T8838] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 482.188740][ T8838] ? __pfx___split_vma+0x10/0x10 [ 482.188764][ T8838] ? rt_mutex_slowunlock+0x493/0x8a0 [ 482.188796][ T8838] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 482.188833][ T8838] vms_gather_munmap_vmas+0x2e2/0x12f0 [ 482.188873][ T8838] ? mtree_range_walk+0x6aa/0x840 [ 482.188899][ T8838] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 482.188937][ T8838] ? mas_find+0xa7d/0xd30 [ 482.188979][ T8838] mmap_region+0x742/0x1d00 [ 482.189019][ T8838] ? __lock_acquire+0x6b6/0x2cf0 [ 482.189055][ T8838] ? __pfx_mmap_region+0x10/0x10 [ 482.189175][ T8838] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 482.189216][ T8838] ? cap_mmap_addr+0xb0/0x100 [ 482.189250][ T8838] ? bpf_lsm_mmap_addr+0x9/0x20 [ 482.189290][ T8838] ? security_mmap_addr+0x71/0x270 [ 482.189325][ T8838] ? shmem_mapping+0xd/0x50 [ 482.189350][ T8838] ? memfd_check_seals_mmap+0x16e/0x210 [ 482.189380][ T8838] do_mmap+0xc23/0x10c0 [ 482.189417][ T8838] ? lockdep_hardirqs_on+0x7b/0x110 [ 482.189439][ T8838] ? __pfx_do_mmap+0x10/0x10 [ 482.189466][ T8838] ? rwbase_write_lock+0x56f/0x750 [ 482.189506][ T8838] vm_mmap_pgoff+0x2a9/0x4d0 [ 482.189542][ T8838] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 482.189576][ T8838] ? __fget_files+0x2a/0x420 [ 482.189599][ T8838] ? __fget_files+0x3a6/0x420 [ 482.189620][ T8838] ? __fget_files+0x2a/0x420 [ 482.189648][ T8838] ksys_mmap_pgoff+0x4e9/0x720 [ 482.189681][ T8838] ? __x64_sys_mmap+0x7f/0x140 [ 482.189709][ T8838] do_syscall_64+0xec/0xf80 [ 482.189730][ T8838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.189754][ T8838] ? trace_irq_disable+0x37/0x100 [ 482.189776][ T8838] ? clear_bhb_loop+0x60/0xb0 [ 482.189803][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.189824][ T8838] RIP: 0033:0x7fb6a903f749 [ 482.189843][ T8838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.189861][ T8838] RSP: 002b:00007fb6a729e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 482.189884][ T8838] RAX: ffffffffffffffda RBX: 00007fb6a9295fa0 RCX: 00007fb6a903f749 [ 482.189899][ T8838] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000002000 [ 482.189913][ T8838] RBP: 00007fb6a729e090 R08: 0000000000000006 R09: 0000000000000000 [ 482.189927][ T8838] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 482.189940][ T8838] R13: 00007fb6a9296038 R14: 00007fb6a9295fa0 R15: 00007ffe8a395de8 [ 482.189974][ T8838] [ 483.001526][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 483.001744][ T6012] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 483.149984][ T6012] usb 4-1: Using ep0 maxpacket: 32 [ 483.157943][ T6012] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 483.158078][ T6012] usb 4-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 8 [ 483.158106][ T6012] usb 4-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 64 [ 483.158132][ T6012] usb 4-1: config 1 interface 0 has no altsetting 0 [ 483.192939][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.192970][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.212746][ T6012] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 483.212972][ T6012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.212995][ T6012] usb 4-1: Product: х [ 483.213010][ T6012] usb 4-1: Manufacturer: ᠊ [ 483.213128][ T6012] usb 4-1: SerialNumber: 핥ꔖ૾즌규⟨⬱怐닽嫸ᛖŔ츫籞脇⑹늃㕷瓋ש࠾쵰ⱥ殐鏾䢻ⶱ擤轅輔뿗뚵峊릠㙔ÿ [ 483.264658][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.264776][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.264830][ T10] usb 1-1: Product: syz [ 483.264871][ T10] usb 1-1: Manufacturer: syz [ 483.264913][ T10] usb 1-1: SerialNumber: syz [ 483.304815][ T8846] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 483.305571][ T8846] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 483.537929][ T10] usb 1-1: 0:2 : does not exist [ 483.654750][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.655339][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.684427][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 483.763897][ T5820] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 485.208014][ T10] usb 1-1: USB disconnect, device number 15 [ 485.515320][ T6293] udevd[6293]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.762378][ T6012] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 485.844435][ T6012] usb 4-1: USB disconnect, device number 15 [ 485.994169][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.994940][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.006613][ T8902] bridge0: entered allmulticast mode [ 486.029926][ T5897] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 486.200702][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 486.203509][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.203543][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.203584][ T5897] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 486.203609][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.244992][ T5897] usb 5-1: config 0 descriptor?? [ 487.193528][ T5897] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 487.193561][ T5897] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 487.290134][ T5897] ft260 0003:0403:6030.0005: failed to retrieve chip version [ 487.310138][ T5897] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -5 [ 491.018315][ T37] kauditd_printk_skb: 73 callbacks suppressed [ 491.018339][ T37] audit: type=1800 audit(1767711284.941:230): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.991" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 491.215391][ T8668] usb 5-1: USB disconnect, device number 26 [ 491.491479][ T8967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.491580][ T8967] IPv6: NLM_F_CREATE should be set when creating new route [ 491.491615][ T8967] IPv6: NLM_F_CREATE should be set when creating new route [ 491.492343][ T8967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.993984][ T8977] FAULT_INJECTION: forcing a failure. [ 491.993984][ T8977] name fail_futex, interval 1, probability 0, space 0, times 1 [ 491.994015][ T8977] CPU: 0 UID: 0 PID: 8977 Comm: syz.4.1001 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 491.994033][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.994044][ T8977] Call Trace: [ 491.994050][ T8977] [ 491.994057][ T8977] dump_stack_lvl+0xe8/0x150 [ 491.994084][ T8977] should_fail_ex+0x46c/0x600 [ 491.994113][ T8977] get_futex_key+0x1a8/0x1660 [ 491.994144][ T8977] ? __pfx_get_futex_key+0x10/0x10 [ 491.994162][ T8977] ? __lock_acquire+0x6b6/0x2cf0 [ 491.994186][ T8977] ? __lock_acquire+0x6b6/0x2cf0 [ 491.994211][ T8977] futex_wake+0xf8/0x560 [ 491.994230][ T8977] ? __pfx_futex_wake+0x10/0x10 [ 491.994247][ T8977] ? do_raw_spin_lock+0x121/0x290 [ 491.994273][ T8977] do_futex+0x395/0x420 [ 491.994295][ T8977] ? __might_fault+0xb0/0x130 [ 491.994322][ T8977] ? __pfx_do_futex+0x10/0x10 [ 491.994376][ T8977] ? __might_fault+0xb0/0x130 [ 491.994401][ T8977] mm_release+0x103/0x290 [ 491.994430][ T8977] exit_mm+0x52/0x230 [ 491.994452][ T8977] ? unwind_deferred_task_exit+0x68/0xa0 [ 491.994480][ T8977] do_exit+0x627/0x22f0 [ 491.994504][ T8977] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 491.994520][ T8977] ? lockdep_hardirqs_on+0x7b/0x110 [ 491.994536][ T8977] ? __pfx_do_exit+0x10/0x10 [ 491.994557][ T8977] ? rt_mutex_slowunlock+0x493/0x8a0 [ 491.994655][ T8977] ? reacquire_held_locks+0x104/0x190 [ 491.994679][ T8977] ? rt_spin_lock+0x1c1/0x3e0 [ 491.994708][ T8977] do_group_exit+0x21c/0x2d0 [ 491.994732][ T8977] ? rt_spin_unlock+0x161/0x200 [ 491.994755][ T8977] get_signal+0x125d/0x1310 [ 491.994788][ T8977] arch_do_signal_or_restart+0x9a/0x7a0 [ 491.994816][ T8977] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 491.994847][ T8977] ? __x64_sys_recvmmsg+0x190/0x240 [ 491.994876][ T8977] exit_to_user_mode_loop+0x87/0x4e0 [ 491.994898][ T8977] ? rcu_is_watching+0x15/0xb0 [ 491.994915][ T8977] do_syscall_64+0x2c1/0xf80 [ 491.994931][ T8977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.994946][ T8977] ? trace_irq_disable+0x37/0x100 [ 491.994963][ T8977] ? clear_bhb_loop+0x60/0xb0 [ 491.994988][ T8977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.995005][ T8977] RIP: 0033:0x7fb6a903f749 [ 491.995019][ T8977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.995032][ T8977] RSP: 002b:00007fb6a725c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 491.995049][ T8977] RAX: fffffffffffffe00 RBX: 00007fb6a9296180 RCX: 00007fb6a903f749 [ 491.995060][ T8977] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000004 [ 491.995070][ T8977] RBP: 00007fb6a725c090 R08: 0000000000000000 R09: 0000000000000000 [ 491.995080][ T8977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.995090][ T8977] R13: 00007fb6a9296218 R14: 00007fb6a9296180 R15: 00007ffe8a395de8 [ 491.995113][ T8977] [ 492.502535][ T8981] (syz.3.1003,8981,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 492.503613][ T8981] o2cb: This node has not been configured. [ 492.503626][ T8981] o2cb: Cluster check failed. Fix errors before retrying. [ 492.503653][ T8981] (syz.3.1003,8981,1):user_dlm_register:674 ERROR: status = -22 [ 492.503679][ T8981] (syz.3.1003,8981,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 496.067118][ T8996] FAULT_INJECTION: forcing a failure. [ 496.067118][ T8996] name failslab, interval 1, probability 0, space 0, times 0 [ 496.067154][ T8996] CPU: 0 UID: 0 PID: 8996 Comm: syz.1.1008 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 496.067178][ T8996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.067192][ T8996] Call Trace: [ 496.067200][ T8996] [ 496.067210][ T8996] dump_stack_lvl+0xe8/0x150 [ 496.067246][ T8996] should_fail_ex+0x46c/0x600 [ 496.067282][ T8996] ? __alloc_skb+0x1dc/0x3a0 [ 496.067308][ T8996] should_failslab+0xa8/0x100 [ 496.067330][ T8996] ? __alloc_skb+0x1dc/0x3a0 [ 496.067352][ T8996] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 496.067385][ T8996] ? lockdep_hardirqs_on+0x7b/0x110 [ 496.067409][ T8996] ? __alloc_skb+0x198/0x3a0 [ 496.067435][ T8996] __alloc_skb+0x1dc/0x3a0 [ 496.067464][ T8996] netlink_sendmsg+0x5c6/0xb30 [ 496.067515][ T8996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.067555][ T8996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.067585][ T8996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.067617][ T8996] __sock_sendmsg+0x21c/0x270 [ 496.067657][ T8996] ____sys_sendmsg+0x508/0x810 [ 496.067691][ T8996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.067729][ T8996] ? import_iovec+0x74/0xa0 [ 496.067756][ T8996] ___sys_sendmsg+0x21f/0x2a0 [ 496.067788][ T8996] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.067857][ T8996] ? __fget_files+0x2a/0x420 [ 496.067879][ T8996] ? __fget_files+0x3a6/0x420 [ 496.067913][ T8996] __x64_sys_sendmsg+0x1a1/0x260 [ 496.067945][ T8996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.067985][ T8996] ? __pfx_ksys_write+0x10/0x10 [ 496.068030][ T8996] do_syscall_64+0xec/0xf80 [ 496.068052][ T8996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.068074][ T8996] ? trace_irq_disable+0x37/0x100 [ 496.068097][ T8996] ? clear_bhb_loop+0x60/0xb0 [ 496.068124][ T8996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.068146][ T8996] RIP: 0033:0x7ff5705ef749 [ 496.068166][ T8996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.068186][ T8996] RSP: 002b:00007ff56e84e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.068210][ T8996] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ef749 [ 496.068226][ T8996] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 496.068241][ T8996] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 0000000000000000 [ 496.068255][ T8996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.068268][ T8996] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 496.068304][ T8996] [ 496.395447][ T9005] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 496.395515][ T9005] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 496.395865][ T9005] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 496.395917][ T9005] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 496.903470][ T9021] FAULT_INJECTION: forcing a failure. [ 496.903470][ T9021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.903508][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.1.1016 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 496.903533][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.903548][ T9021] Call Trace: [ 496.903556][ T9021] [ 496.903566][ T9021] dump_stack_lvl+0xe8/0x150 [ 496.903602][ T9021] should_fail_ex+0x46c/0x600 [ 496.903639][ T9021] _copy_to_user+0x31/0xb0 [ 496.903665][ T9021] simple_read_from_buffer+0xe1/0x170 [ 496.903694][ T9021] proc_fail_nth_read+0x1b6/0x220 [ 496.903730][ T9021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.903773][ T9021] ? rw_verify_area+0x2ac/0x4e0 [ 496.903804][ T9021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.903840][ T9021] vfs_read+0x206/0xa30 [ 496.903881][ T9021] ? __pfx_vfs_read+0x10/0x10 [ 496.903916][ T9021] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 496.903940][ T9021] ? lockdep_hardirqs_on+0x7b/0x110 [ 496.903961][ T9021] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 496.903983][ T9021] ? mutex_lock_nested+0x154/0x1d0 [ 496.904011][ T9021] ? fdget_pos+0x253/0x320 [ 496.904045][ T9021] ksys_read+0x14b/0x260 [ 496.904078][ T9021] ? __pfx_ksys_read+0x10/0x10 [ 496.904122][ T9021] do_syscall_64+0xec/0xf80 [ 496.904143][ T9021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.904165][ T9021] ? trace_irq_disable+0x37/0x100 [ 496.904189][ T9021] ? clear_bhb_loop+0x60/0xb0 [ 496.904217][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.904238][ T9021] RIP: 0033:0x7ff5705ee15c [ 496.904257][ T9021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 496.904277][ T9021] RSP: 002b:00007ff56e84e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.904300][ T9021] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ee15c [ 496.904317][ T9021] RDX: 000000000000000f RSI: 00007ff56e84e0a0 RDI: 0000000000000004 [ 496.904332][ T9021] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 0000000000000000 [ 496.904346][ T9021] R10: 0000000040002042 R11: 0000000000000246 R12: 0000000000000001 [ 496.904360][ T9021] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 496.904397][ T9021] [ 497.356560][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 499.211312][ T9030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1017'. [ 499.211346][ T9030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1017'. [ 499.501139][ T9040] FAULT_INJECTION: forcing a failure. [ 499.501139][ T9040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.501177][ T9040] CPU: 1 UID: 0 PID: 9040 Comm: syz.1.1022 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 499.501202][ T9040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.501216][ T9040] Call Trace: [ 499.501224][ T9040] [ 499.501234][ T9040] dump_stack_lvl+0xe8/0x150 [ 499.501270][ T9040] should_fail_ex+0x46c/0x600 [ 499.501307][ T9040] _copy_from_user+0x2d/0xb0 [ 499.501330][ T9040] __copy_msghdr+0x3c5/0x5b0 [ 499.501363][ T9040] ___sys_sendmsg+0x1a5/0x2a0 [ 499.501395][ T9040] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.501430][ T9040] ? kstrtouint+0x6e/0xe0 [ 499.501487][ T9040] ? __fget_files+0x2a/0x420 [ 499.501510][ T9040] ? __fget_files+0x3a6/0x420 [ 499.501545][ T9040] __sys_sendmmsg+0x22d/0x430 [ 499.501579][ T9040] ? __pfx___sys_sendmmsg+0x10/0x10 [ 499.501617][ T9040] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 499.501663][ T9040] ? ksys_write+0x230/0x260 [ 499.501696][ T9040] ? __pfx_ksys_write+0x10/0x10 [ 499.501734][ T9040] __x64_sys_sendmmsg+0xa0/0xc0 [ 499.501765][ T9040] do_syscall_64+0xec/0xf80 [ 499.501787][ T9040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.501809][ T9040] ? trace_irq_disable+0x37/0x100 [ 499.501833][ T9040] ? clear_bhb_loop+0x60/0xb0 [ 499.501861][ T9040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.501884][ T9040] RIP: 0033:0x7ff5705ef749 [ 499.501903][ T9040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.501922][ T9040] RSP: 002b:00007ff56e84e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 499.501944][ T9040] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ef749 [ 499.501969][ T9040] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 499.501984][ T9040] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 0000000000000000 [ 499.501998][ T9040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.502011][ T9040] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 499.502047][ T9040] [ 501.734383][ T9047] (syz.3.1024,9047,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 501.735011][ T9047] o2cb: This node has not been configured. [ 501.735022][ T9047] o2cb: Cluster check failed. Fix errors before retrying. [ 501.735050][ T9047] (syz.3.1024,9047,0):user_dlm_register:674 ERROR: status = -22 [ 501.735075][ T9047] (syz.3.1024,9047,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 504.081811][ T9059] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 504.081841][ T9059] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 504.082008][ T9059] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 504.082029][ T9059] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 504.822618][ T8350] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 504.822658][ T8350] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 504.822688][ T8350] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 504.822716][ T8350] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 504.822744][ T8350] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 504.822771][ T8350] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 504.822798][ T8350] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 504.822826][ T8350] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 504.822860][ T8350] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 504.822888][ T8350] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 505.041767][ T8350] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.43 Device [syz1] on syz1 [ 508.006449][ T9085] fido_id[9085]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 508.285240][ T9093] (syz.3.1039,9093,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 508.285892][ T9093] o2cb: This node has not been configured. [ 508.285904][ T9093] o2cb: Cluster check failed. Fix errors before retrying. [ 508.285930][ T9093] (syz.3.1039,9093,0):user_dlm_register:674 ERROR: status = -22 [ 508.285954][ T9093] (syz.3.1039,9093,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 508.479927][ T930] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 508.733348][ T930] usb 3-1: Using ep0 maxpacket: 8 [ 508.735720][ T930] usb 3-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.735755][ T930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 508.735790][ T930] usb 3-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 508.735816][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.746427][ T930] usb 3-1: config 0 descriptor?? [ 512.685462][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.685538][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.730892][ T5884] usb 3-1: USB disconnect, device number 26 [ 515.600010][ T5876] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 515.781551][ T5876] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 515.781583][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.781604][ T5876] usb 2-1: config 0 has no interface number 0 [ 515.781651][ T5876] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 515.781679][ T5876] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 515.781702][ T5876] usb 2-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.784219][ T5876] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 515.784249][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.784270][ T5876] usb 2-1: Product: syz [ 515.784286][ T5876] usb 2-1: Manufacturer: syz [ 515.784302][ T5876] usb 2-1: SerialNumber: syz [ 515.884606][ T5876] usb 2-1: config 0 descriptor?? [ 515.889119][ T5876] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 515.899253][ T5876] nokiaca42v2 ttyUSB0: required endpoint is missing [ 516.094425][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.094990][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.137940][ T6012] usb 2-1: USB disconnect, device number 18 [ 516.149330][ T6012] cypress_m8 2-1:0.35: device disconnected [ 516.881181][ T9146] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 516.881209][ T9146] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 516.881359][ T9146] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 516.881379][ T9146] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 520.852182][ T9167] FAULT_INJECTION: forcing a failure. [ 520.852182][ T9167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.852220][ T9167] CPU: 0 UID: 0 PID: 9167 Comm: syz.4.1066 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 520.852245][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 520.852259][ T9167] Call Trace: [ 520.852267][ T9167] [ 520.852277][ T9167] dump_stack_lvl+0xe8/0x150 [ 520.852313][ T9167] should_fail_ex+0x46c/0x600 [ 520.852350][ T9167] _copy_from_user+0x2d/0xb0 [ 520.852373][ T9167] __copy_msghdr+0x3c5/0x5b0 [ 520.852406][ T9167] ___sys_sendmsg+0x1a5/0x2a0 [ 520.852438][ T9167] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.852505][ T9167] ? __fget_files+0x2a/0x420 [ 520.852528][ T9167] ? __fget_files+0x3a6/0x420 [ 520.852562][ T9167] __x64_sys_sendmsg+0x1a1/0x260 [ 520.852593][ T9167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.852632][ T9167] ? __pfx_ksys_write+0x10/0x10 [ 520.852685][ T9167] do_syscall_64+0xec/0xf80 [ 520.852708][ T9167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.852730][ T9167] ? trace_irq_disable+0x37/0x100 [ 520.852755][ T9167] ? clear_bhb_loop+0x60/0xb0 [ 520.852782][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.852805][ T9167] RIP: 0033:0x7fb6a903f749 [ 520.852824][ T9167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.852844][ T9167] RSP: 002b:00007fb6a729e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.852868][ T9167] RAX: ffffffffffffffda RBX: 00007fb6a9295fa0 RCX: 00007fb6a903f749 [ 520.852885][ T9167] RDX: 0000000020004804 RSI: 0000200000000200 RDI: 0000000000000003 [ 520.852900][ T9167] RBP: 00007fb6a729e090 R08: 0000000000000000 R09: 0000000000000000 [ 520.852913][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.852926][ T9167] R13: 00007fb6a9296038 R14: 00007fb6a9295fa0 R15: 00007ffe8a395de8 [ 520.852962][ T9167] [ 524.067358][ T9189] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 524.067386][ T9189] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 524.067528][ T9189] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 524.067548][ T9189] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 524.580446][ T9200] syz.2.1079 uses obsolete (PF_INET,SOCK_PACKET) [ 525.268601][ T9207] gfs2: not a GFS2 filesystem [ 527.270517][ T6191] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 527.322109][ T9234] FAULT_INJECTION: forcing a failure. [ 527.322109][ T9234] name failslab, interval 1, probability 0, space 0, times 0 [ 527.322146][ T9234] CPU: 1 UID: 0 PID: 9234 Comm: syz.1.1086 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 527.322171][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.322185][ T9234] Call Trace: [ 527.322194][ T9234] [ 527.322208][ T9234] dump_stack_lvl+0xe8/0x150 [ 527.322361][ T9234] should_fail_ex+0x46c/0x600 [ 527.322403][ T9234] should_failslab+0xa8/0x100 [ 527.322428][ T9234] __kmalloc_cache_node_noprof+0x8b/0x700 [ 527.322464][ T9234] ? __get_vm_area_node+0x172/0x350 [ 527.322499][ T9234] __get_vm_area_node+0x172/0x350 [ 527.322535][ T9234] __vmalloc_node_range_noprof+0x371/0x16a0 [ 527.322571][ T9234] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 527.322621][ T9234] ? is_bpf_text_address+0x26/0x2b0 [ 527.322653][ T9234] ? kernel_text_address+0xa5/0xe0 [ 527.322695][ T9234] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 527.322732][ T9234] ? __lock_acquire+0x6b6/0x2cf0 [ 527.322774][ T9234] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 527.322801][ T9234] __vmalloc_noprof+0xd2/0x120 [ 527.322835][ T9234] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 527.322867][ T9234] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 527.322900][ T9234] bpf_prog_alloc+0x3c/0x1a0 [ 527.322931][ T9234] bpf_prog_load+0x735/0x1a10 [ 527.323020][ T9234] ? get_pid_task+0x20/0x1f0 [ 527.323055][ T9234] ? __pfx_bpf_prog_load+0x10/0x10 [ 527.323082][ T9234] ? __might_fault+0xb0/0x130 [ 527.323137][ T9234] ? bpf_lsm_bpf+0x9/0x20 [ 527.323157][ T9234] ? security_bpf+0x7e/0x300 [ 527.323195][ T9234] __sys_bpf+0x507/0x860 [ 527.323225][ T9234] ? __pfx___sys_bpf+0x10/0x10 [ 527.323249][ T9234] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 527.323300][ T9234] ? ksys_write+0x230/0x260 [ 527.323336][ T9234] ? __pfx_ksys_write+0x10/0x10 [ 527.323377][ T9234] __x64_sys_bpf+0x7c/0x90 [ 527.323400][ T9234] do_syscall_64+0xec/0xf80 [ 527.323422][ T9234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.323444][ T9234] ? trace_irq_disable+0x37/0x100 [ 527.323468][ T9234] ? clear_bhb_loop+0x60/0xb0 [ 527.323494][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.323515][ T9234] RIP: 0033:0x7ff5705ef749 [ 527.323536][ T9234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.323555][ T9234] RSP: 002b:00007ff56e84e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 527.323579][ T9234] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ef749 [ 527.323597][ T9234] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 527.323611][ T9234] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 0000000000000000 [ 527.323626][ T9234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.323639][ T9234] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 527.323677][ T9234] [ 527.326738][ T9234] syz.1.1086: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 527.326819][ T9234] CPU: 1 UID: 0 PID: 9234 Comm: syz.1.1086 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 527.326843][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.326857][ T9234] Call Trace: [ 527.326866][ T9234] [ 527.326875][ T9234] dump_stack_lvl+0xe8/0x150 [ 527.326911][ T9234] warn_alloc+0x22e/0x3b0 [ 527.326952][ T9234] ? should_fail_ex+0x344/0x600 [ 527.326988][ T9234] ? __pfx_warn_alloc+0x10/0x10 [ 527.327022][ T9234] ? __kmalloc_cache_node_noprof+0x2aa/0x700 [ 527.327059][ T9234] ? __get_vm_area_node+0x172/0x350 [ 527.327095][ T9234] ? __get_vm_area_node+0x2e2/0x350 [ 527.327134][ T9234] __vmalloc_node_range_noprof+0x396/0x16a0 [ 527.327189][ T9234] ? is_bpf_text_address+0x26/0x2b0 [ 527.327223][ T9234] ? kernel_text_address+0xa5/0xe0 [ 527.327267][ T9234] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 527.327304][ T9234] ? __lock_acquire+0x6b6/0x2cf0 [ 527.327343][ T9234] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 527.327368][ T9234] __vmalloc_noprof+0xd2/0x120 [ 527.327400][ T9234] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 527.327430][ T9234] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 527.327463][ T9234] bpf_prog_alloc+0x3c/0x1a0 [ 527.327491][ T9234] bpf_prog_load+0x735/0x1a10 [ 527.327525][ T9234] ? get_pid_task+0x20/0x1f0 [ 527.327559][ T9234] ? __pfx_bpf_prog_load+0x10/0x10 [ 527.327585][ T9234] ? __might_fault+0xb0/0x130 [ 527.327638][ T9234] ? bpf_lsm_bpf+0x9/0x20 [ 527.327656][ T9234] ? security_bpf+0x7e/0x300 [ 527.327692][ T9234] __sys_bpf+0x507/0x860 [ 527.327720][ T9234] ? __pfx___sys_bpf+0x10/0x10 [ 527.327742][ T9234] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 527.327791][ T9234] ? ksys_write+0x230/0x260 [ 527.327826][ T9234] ? __pfx_ksys_write+0x10/0x10 [ 527.327866][ T9234] __x64_sys_bpf+0x7c/0x90 [ 527.327889][ T9234] do_syscall_64+0xec/0xf80 [ 527.327911][ T9234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.327933][ T9234] ? trace_irq_disable+0x37/0x100 [ 527.327962][ T9234] ? clear_bhb_loop+0x60/0xb0 [ 527.327989][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.328011][ T9234] RIP: 0033:0x7ff5705ef749 [ 527.328031][ T9234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.328050][ T9234] RSP: 002b:00007ff56e84e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 527.328073][ T9234] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ef749 [ 527.328096][ T9234] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 527.328110][ T9234] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 0000000000000000 [ 527.328124][ T9234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.328137][ T9234] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 527.328172][ T9234] [ 527.339165][ T9234] Mem-Info: [ 527.339203][ T9234] active_anon:267 inactive_anon:26952 isolated_anon:0 [ 527.339203][ T9234] active_file:26133 inactive_file:39858 isolated_file:0 [ 527.339203][ T9234] unevictable:770 dirty:106 writeback:0 [ 527.339203][ T9234] slab_reclaimable:12470 slab_unreclaimable:100375 [ 527.339203][ T9234] mapped:44161 shmem:21676 pagetables:1558 [ 527.339203][ T9234] sec_pagetables:0 bounce:0 [ 527.339203][ T9234] kernel_misc_reclaimable:0 [ 527.339203][ T9234] free:1261393 free_pcp:21446 free_cma:0 [ 527.339352][ T9234] Node 0 active_anon:1068kB inactive_anon:107808kB active_file:104332kB inactive_file:159432kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:176644kB dirty:420kB writeback:0kB shmem:85168kB kernel_stack:13724kB pagetables:6072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 527.339489][ T9234] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 527.339605][ T9234] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.364175][ T9234] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 527.364327][ T9234] Node 0 DMA32 free:1137568kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1068kB inactive_anon:107808kB active_file:104332kB inactive_file:159432kB unevictable:1544kB writepending:420kB zspages:0kB present:3129332kB managed:2574684kB mlocked:8kB bounce:0kB free_pcp:85780kB local_pcp:11908kB free_cma:0kB [ 527.364532][ T9234] lowmem_reserve[]: 0 0 1 1 1 [ 527.364626][ T9234] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.364783][ T9234] lowmem_reserve[]: 0 0 0 0 0 [ 527.364880][ T9234] Node 1 Normal free:3892644kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.365049][ T9234] lowmem_reserve[]: 0 0 0 0 0 [ 527.365144][ T9234] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 527.376167][ T9234] Node 0 DMA32: 84*4kB (UME) 954*8kB (UME) 837*16kB (UM) 102*32kB (UME) 224*64kB (UME) 53*128kB (UME) 111*256kB (UM) 53*512kB (UME) 30*1024kB (UM) 3*2048kB (ME) 244*4096kB (UM) = 1137584kB [ 527.384260][ T9234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 527.389903][ T9234] Node 1 Normal: 201*4kB (UME) 60*8kB (UME) 44*16kB (UME) 221*32kB (UME) 95*64kB (UME) 31*128kB (UM) 15*256kB (UM) 8*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 942*4096kB (M) = 3892644kB [ 527.390379][ T9234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.390423][ T9234] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 527.390473][ T9234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.390518][ T9234] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 527.390561][ T9234] 87663 total pagecache pages [ 527.390583][ T9234] 0 pages in swap cache [ 527.390604][ T9234] Free swap = 124996kB [ 527.390626][ T9234] Total swap = 124996kB [ 527.390654][ T9234] 2097051 pages RAM [ 527.390669][ T9234] 0 pages HighMem/MovableOnly [ 527.393696][ T9234] 421354 pages reserved [ 527.393728][ T9234] 0 pages cma reserved [ 527.420939][ T6191] usb 3-1: no configurations [ 527.420961][ T6191] usb 3-1: can't read configurations, error -22 [ 527.593400][ T6191] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 527.770845][ T6191] usb 3-1: no configurations [ 527.770867][ T6191] usb 3-1: can't read configurations, error -22 [ 527.782276][ T6191] usb usb3-port1: attempt power cycle [ 527.889634][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 527.925154][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 527.964436][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 527.968355][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 527.986160][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 528.454441][ T6191] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 528.474960][ T6191] usb 3-1: no configurations [ 528.474983][ T6191] usb 3-1: can't read configurations, error -22 [ 528.619971][ T6191] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 528.644997][ T6191] usb 3-1: no configurations [ 528.645019][ T6191] usb 3-1: can't read configurations, error -22 [ 528.645413][ T6191] usb usb3-port1: unable to enumerate USB device [ 528.701283][ T9242] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 528.701311][ T9242] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 528.701449][ T9242] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 528.701470][ T9242] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 530.147129][ T5816] Bluetooth: hci5: command tx timeout [ 530.147997][ T9235] chnl_net:caif_netlink_parms(): no params data found [ 530.313711][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1104'. [ 530.449843][ T6225] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 530.589914][ T6225] usb 3-1: device descriptor read/64, error -71 [ 530.829884][ T6225] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 530.943152][ T6191] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 531.181220][ T6225] usb 3-1: device descriptor read/64, error -71 [ 531.470613][ T6225] usb usb3-port1: attempt power cycle [ 531.568308][ T6191] usb 5-1: no configurations [ 531.568328][ T6191] usb 5-1: can't read configurations, error -22 [ 532.220933][ T5816] Bluetooth: hci5: command tx timeout [ 532.270883][ T6191] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 533.219903][ T6225] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 533.240322][ T6225] usb 3-1: device descriptor read/8, error -71 [ 533.330074][ T9235] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.330232][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.330416][ T9235] bridge_slave_0: entered allmulticast mode [ 533.335932][ T9235] bridge_slave_0: entered promiscuous mode [ 533.336831][ T6191] usb 5-1: no configurations [ 533.336849][ T6191] usb 5-1: can't read configurations, error -22 [ 533.339229][ T9235] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.350747][ T6191] usb usb5-port1: attempt power cycle [ 533.399101][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.399395][ T9235] bridge_slave_1: entered allmulticast mode [ 533.420243][ T9235] bridge_slave_1: entered promiscuous mode [ 535.519134][ T5816] Bluetooth: hci5: command tx timeout [ 537.589974][ T5820] Bluetooth: hci5: command tx timeout [ 538.014852][ T9235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.878394][ T8636] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.068853][ T9235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.534187][ T8636] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.374139][ T8636] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.325351][ T9235] team0: Port device team_slave_0 added [ 544.328951][ T9235] team0: Port device team_slave_1 added [ 544.793659][ T8636] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.988259][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.988281][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.988310][ T9235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.030325][ T5876] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 545.045578][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.045597][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.045627][ T9235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.169834][ T5876] usb 3-1: device descriptor read/64, error -71 [ 545.419983][ T5876] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 545.481980][ T9235] hsr_slave_0: entered promiscuous mode [ 545.483504][ T9235] hsr_slave_1: entered promiscuous mode [ 545.484451][ T9235] debugfs: 'hsr0' already exists in 'hsr' [ 545.484473][ T9235] Cannot create hsr debugfs directory [ 545.549947][ T5876] usb 3-1: device descriptor read/64, error -71 [ 545.660402][ T5876] usb usb3-port1: attempt power cycle [ 545.746886][ T9417] loop5: detected capacity change from 0 to 2135 [ 545.970622][ T9377] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 546.029885][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 546.066139][ T5876] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 546.094883][ T5876] usb 3-1: device descriptor read/8, error -71 [ 546.171417][ T9417] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 546.199340][ T9] usb 5-1: config 0 has an invalid interface number: 212 but max is 0 [ 546.199371][ T9] usb 5-1: config 0 has no interface number 0 [ 546.261005][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 546.261039][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.261062][ T9] usb 5-1: Product: syz [ 546.261078][ T9] usb 5-1: Manufacturer: syz [ 546.261093][ T9] usb 5-1: SerialNumber: syz [ 546.327113][ T9] usb 5-1: config 0 descriptor?? [ 546.338447][ T5876] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 546.352752][ T9] ftdi_sio 5-1:0.212: FTDI USB Serial Device converter detected [ 546.354480][ T9] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 546.374605][ T5876] usb 3-1: device descriptor read/8, error -71 [ 546.432208][ T9377] Buffer I/O error on dev loop5, logical block 266, async page read [ 546.482309][ T5876] usb usb3-port1: unable to enumerate USB device [ 546.533051][ T9419] Buffer I/O error on dev loop5, logical block 266, async page read [ 546.628058][ T9419] Buffer I/O error on dev loop5, logical block 266, async page read [ 546.754139][ T8636] bridge_slave_1: left allmulticast mode [ 546.754285][ T8636] bridge_slave_1: left promiscuous mode [ 546.756599][ T8636] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.950507][ T8636] bridge_slave_0: left allmulticast mode [ 546.950532][ T8636] bridge_slave_0: left promiscuous mode [ 546.950797][ T8636] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.463715][ T6028] usb 5-1: USB disconnect, device number 30 [ 549.483427][ T6028] ftdi_sio 5-1:0.212: device disconnected [ 549.686478][ T9433] input: syz0 as /devices/virtual/input/input24 [ 549.768594][ T9436] netlink: 'syz.0.1162': attribute type 4 has an invalid length. [ 549.780950][ T9437] netlink: 'syz.0.1162': attribute type 4 has an invalid length. [ 550.896873][ T6012] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 551.052840][ T6012] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.052871][ T6012] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.056020][ T6012] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.056051][ T6012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.056073][ T6012] usb 3-1: Product: syz [ 551.056088][ T6012] usb 3-1: Manufacturer: syz [ 551.056103][ T6012] usb 3-1: SerialNumber: syz [ 551.356937][ T6012] usb 3-1: 0:2 : does not exist [ 551.369881][ T6012] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 551.440366][ T6012] usb 3-1: USB disconnect, device number 39 [ 551.497221][ T9419] udevd[9419]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.612720][ T9497] loop9: detected capacity change from 0 to 7 [ 553.628515][ T9497] Dev loop9: unable to read RDB block 7 [ 553.628559][ T9497] loop9: unable to read partition table [ 553.628755][ T9497] loop9: partition table beyond EOD, truncated [ 553.628782][ T9497] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 554.102707][ T8636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.190469][ T8636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.192996][ T9513] FAULT_INJECTION: forcing a failure. [ 554.192996][ T9513] name failslab, interval 1, probability 0, space 0, times 0 [ 554.193031][ T9513] CPU: 0 UID: 0 PID: 9513 Comm: syz.1.1193 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 554.193056][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.193070][ T9513] Call Trace: [ 554.193078][ T9513] [ 554.193088][ T9513] dump_stack_lvl+0xe8/0x150 [ 554.193124][ T9513] should_fail_ex+0x46c/0x600 [ 554.193161][ T9513] should_failslab+0xa8/0x100 [ 554.193184][ T9513] __kmalloc_noprof+0xe0/0x7e0 [ 554.193218][ T9513] ? tomoyo_encode+0x28b/0x550 [ 554.193247][ T9513] tomoyo_encode+0x28b/0x550 [ 554.193275][ T9513] tomoyo_realpath_from_path+0x58d/0x5d0 [ 554.193300][ T9513] ? tomoyo_domain+0xd9/0x130 [ 554.193330][ T9513] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 554.193362][ T9513] tomoyo_path_number_perm+0x1e8/0x5a0 [ 554.193397][ T9513] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 554.193426][ T9513] ? __lock_acquire+0x6b6/0x2cf0 [ 554.193459][ T9513] ? do_raw_spin_lock+0x121/0x290 [ 554.193522][ T9513] ? __fget_files+0x2a/0x420 [ 554.193550][ T9513] ? __fget_files+0x2a/0x420 [ 554.193572][ T9513] ? __fget_files+0x3a6/0x420 [ 554.193594][ T9513] ? __fget_files+0x2a/0x420 [ 554.193622][ T9513] security_file_ioctl+0xcb/0x2d0 [ 554.193658][ T9513] __se_sys_ioctl+0x47/0x170 [ 554.193690][ T9513] do_syscall_64+0xec/0xf80 [ 554.193712][ T9513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.193735][ T9513] ? trace_irq_disable+0x37/0x100 [ 554.193759][ T9513] ? clear_bhb_loop+0x60/0xb0 [ 554.193786][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.193808][ T9513] RIP: 0033:0x7ff5705ef749 [ 554.193828][ T9513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.193847][ T9513] RSP: 002b:00007ff56e84e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.193871][ T9513] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ef749 [ 554.193906][ T9513] RDX: 00002000000002c0 RSI: 000000000000890b RDI: 0000000000000003 [ 554.193920][ T9513] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 0000000000000000 [ 554.193933][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.193946][ T9513] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 554.193988][ T9513] [ 554.194009][ T9513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 554.483278][ T8636] bond0 (unregistering): Released all slaves [ 554.798020][ T9520] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 554.798049][ T9520] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 554.798228][ T9520] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 554.798248][ T9520] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 555.469500][ T9534] FAULT_INJECTION: forcing a failure. [ 555.469500][ T9534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.469532][ T9534] CPU: 0 UID: 0 PID: 9534 Comm: syz.4.1200 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 555.469553][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.469564][ T9534] Call Trace: [ 555.469570][ T9534] [ 555.469578][ T9534] dump_stack_lvl+0xe8/0x150 [ 555.469607][ T9534] should_fail_ex+0x46c/0x600 [ 555.469636][ T9534] _copy_from_user+0x2d/0xb0 [ 555.469654][ T9534] ____sys_sendmsg+0x2fa/0x810 [ 555.469683][ T9534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.469720][ T9534] ? import_iovec+0x74/0xa0 [ 555.469740][ T9534] ___sys_sendmsg+0x21f/0x2a0 [ 555.469764][ T9534] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.469790][ T9534] ? kstrtouint+0x6e/0xe0 [ 555.469834][ T9534] ? __fget_files+0x2a/0x420 [ 555.469855][ T9534] ? __fget_files+0x3a6/0x420 [ 555.469881][ T9534] __sys_sendmmsg+0x22d/0x430 [ 555.469907][ T9534] ? __pfx___sys_sendmmsg+0x10/0x10 [ 555.469937][ T9534] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 555.469978][ T9534] ? ksys_write+0x230/0x260 [ 555.470012][ T9534] ? __pfx_ksys_write+0x10/0x10 [ 555.470051][ T9534] __x64_sys_sendmmsg+0xa0/0xc0 [ 555.470090][ T9534] do_syscall_64+0xec/0xf80 [ 555.470113][ T9534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.470134][ T9534] ? clear_bhb_loop+0x60/0xb0 [ 555.470160][ T9534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.470182][ T9534] RIP: 0033:0x7fb6a903f749 [ 555.470200][ T9534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.470218][ T9534] RSP: 002b:00007fb6a729e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 555.470243][ T9534] RAX: ffffffffffffffda RBX: 00007fb6a9295fa0 RCX: 00007fb6a903f749 [ 555.470259][ T9534] RDX: 04924924924924b9 RSI: 0000200000000400 RDI: 0000000000000004 [ 555.470274][ T9534] RBP: 00007fb6a729e090 R08: 0000000000000000 R09: 0000000000000000 [ 555.470288][ T9534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.470301][ T9534] R13: 00007fb6a9296038 R14: 00007fb6a9295fa0 R15: 00007ffe8a395de8 [ 555.470336][ T9534] [ 556.467102][ T9565] FAULT_INJECTION: forcing a failure. [ 556.467102][ T9565] name failslab, interval 1, probability 0, space 0, times 0 [ 556.467129][ T9565] CPU: 0 UID: 0 PID: 9565 Comm: syz.4.1214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 556.467147][ T9565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.467157][ T9565] Call Trace: [ 556.467163][ T9565] [ 556.467169][ T9565] dump_stack_lvl+0xe8/0x150 [ 556.467203][ T9565] should_fail_ex+0x46c/0x600 [ 556.467229][ T9565] should_failslab+0xa8/0x100 [ 556.467245][ T9565] __kmalloc_noprof+0xe0/0x7e0 [ 556.467268][ T9565] ? tomoyo_encode+0x28b/0x550 [ 556.467288][ T9565] tomoyo_encode+0x28b/0x550 [ 556.467308][ T9565] tomoyo_realpath_from_path+0x58d/0x5d0 [ 556.467332][ T9565] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 556.467355][ T9565] tomoyo_path_number_perm+0x1e8/0x5a0 [ 556.467379][ T9565] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 556.467400][ T9565] ? __lock_acquire+0x6b6/0x2cf0 [ 556.467424][ T9565] ? do_raw_spin_lock+0x121/0x290 [ 556.467469][ T9565] ? __fget_files+0x2a/0x420 [ 556.467488][ T9565] ? __fget_files+0x2a/0x420 [ 556.467504][ T9565] ? __fget_files+0x3a6/0x420 [ 556.467519][ T9565] ? __fget_files+0x2a/0x420 [ 556.467538][ T9565] security_file_ioctl+0xcb/0x2d0 [ 556.467563][ T9565] __se_sys_ioctl+0x47/0x170 [ 556.467587][ T9565] do_syscall_64+0xec/0xf80 [ 556.467603][ T9565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.467618][ T9565] ? trace_irq_disable+0x37/0x100 [ 556.467635][ T9565] ? clear_bhb_loop+0x60/0xb0 [ 556.467656][ T9565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.467671][ T9565] RIP: 0033:0x7fb6a903f749 [ 556.467685][ T9565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.467699][ T9565] RSP: 002b:00007fb6a729e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.467718][ T9565] RAX: ffffffffffffffda RBX: 00007fb6a9295fa0 RCX: 00007fb6a903f749 [ 556.467730][ T9565] RDX: 0000200000000080 RSI: 000000004008af00 RDI: 0000000000000007 [ 556.467740][ T9565] RBP: 00007fb6a729e090 R08: 0000000000000000 R09: 0000000000000000 [ 556.467750][ T9565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.467770][ T9565] R13: 00007fb6a9296038 R14: 00007fb6a9295fa0 R15: 00007ffe8a395de8 [ 556.467796][ T9565] [ 556.467811][ T9565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 559.291846][ T9583] gfs2: not a GFS2 filesystem [ 561.580552][ T9597] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1225'. [ 561.977813][ T9235] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 562.264171][ T9235] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 562.680003][ T8636] hsr_slave_0: left promiscuous mode [ 562.729926][ T8636] hsr_slave_1: left promiscuous mode [ 562.797415][ T8636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.798246][ T8636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.900030][ T8636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.900062][ T8636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.199606][ T8636] veth1_macvtap: left promiscuous mode [ 563.224982][ T8636] veth0_macvtap: left promiscuous mode [ 563.225420][ T8636] veth1_vlan: left promiscuous mode [ 563.228451][ T8636] veth0_vlan: left promiscuous mode [ 563.617860][ T9637] FAULT_INJECTION: forcing a failure. [ 563.617860][ T9637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.617897][ T9637] CPU: 1 UID: 0 PID: 9637 Comm: syz.2.1223 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 563.617922][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.617936][ T9637] Call Trace: [ 563.617944][ T9637] [ 563.617953][ T9637] dump_stack_lvl+0xe8/0x150 [ 563.617989][ T9637] should_fail_ex+0x46c/0x600 [ 563.618026][ T9637] _copy_from_iter+0x1cd/0x1630 [ 563.618059][ T9637] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 563.618094][ T9637] ? __pfx__copy_from_iter+0x10/0x10 [ 563.618131][ T9637] ? set_page_refcounted+0xa0/0x1e0 [ 563.618154][ T9637] ? page_copy_sane+0x4e/0x280 [ 563.618188][ T9637] copy_page_from_iter+0xdd/0x170 [ 563.618226][ T9637] tun_get_user+0x1d40/0x3de0 [ 563.618259][ T9637] ? tun_get_user+0x6fc/0x3de0 [ 563.618300][ T9637] ? __pfx_tun_get_user+0x10/0x10 [ 563.618325][ T9637] ? __lock_acquire+0x6b6/0x2cf0 [ 563.618358][ T9637] ? kstrtoull+0x12f/0x1d0 [ 563.618395][ T9637] ? ref_tracker_alloc+0x2fe/0x450 [ 563.618424][ T9637] ? get_pid_task+0x20/0x1f0 [ 563.618458][ T9637] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 563.618491][ T9637] ? tun_get+0x1c/0x2f0 [ 563.618519][ T9637] ? tun_get+0x1c/0x2f0 [ 563.618577][ T9637] ? tun_get+0x1c/0x2f0 [ 563.618603][ T9637] ? tun_get+0x1c/0x2f0 [ 563.618636][ T9637] tun_chr_write_iter+0x119/0x200 [ 563.618667][ T9637] vfs_write+0x5d5/0xb40 [ 563.618702][ T9637] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 563.618731][ T9637] ? __pfx_vfs_write+0x10/0x10 [ 563.618773][ T9637] ? __fget_files+0x2a/0x420 [ 563.618806][ T9637] ksys_write+0x14b/0x260 [ 563.618840][ T9637] ? __pfx_ksys_write+0x10/0x10 [ 563.618884][ T9637] do_syscall_64+0xec/0xf80 [ 563.618906][ T9637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.618928][ T9637] ? trace_irq_disable+0x37/0x100 [ 563.618951][ T9637] ? clear_bhb_loop+0x60/0xb0 [ 563.618979][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.619001][ T9637] RIP: 0033:0x7f2d016fe1ff [ 563.619020][ T9637] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 563.619040][ T9637] RSP: 002b:00007f2cff95e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 563.619063][ T9637] RAX: ffffffffffffffda RBX: 00007f2d01955fa0 RCX: 00007f2d016fe1ff [ 563.619079][ T9637] RDX: 0000000000000046 RSI: 0000200000000180 RDI: 00000000000000c8 [ 563.619094][ T9637] RBP: 00007f2cff95e090 R08: 0000000000000000 R09: 0000000000000000 [ 563.619108][ T9637] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 563.619121][ T9637] R13: 00007f2d01956038 R14: 00007f2d01955fa0 R15: 00007ffe6e429948 [ 563.619157][ T9637] [ 568.018599][ T9661] FAULT_INJECTION: forcing a failure. [ 568.018599][ T9661] name failslab, interval 1, probability 0, space 0, times 0 [ 568.018637][ T9661] CPU: 0 UID: 0 PID: 9661 Comm: syz.4.1248 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 568.018662][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.018677][ T9661] Call Trace: [ 568.018685][ T9661] [ 568.018695][ T9661] dump_stack_lvl+0xe8/0x150 [ 568.018732][ T9661] should_fail_ex+0x46c/0x600 [ 568.018769][ T9661] should_failslab+0xa8/0x100 [ 568.018793][ T9661] __kmalloc_noprof+0xe0/0x7e0 [ 568.018825][ T9661] ? tomoyo_encode+0x28b/0x550 [ 568.018854][ T9661] tomoyo_encode+0x28b/0x550 [ 568.018883][ T9661] tomoyo_realpath_from_path+0x58d/0x5d0 [ 568.018918][ T9661] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 568.018961][ T9661] tomoyo_path_number_perm+0x1e8/0x5a0 [ 568.018998][ T9661] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 568.019028][ T9661] ? __lock_acquire+0x6b6/0x2cf0 [ 568.019062][ T9661] ? do_raw_spin_lock+0x121/0x290 [ 568.019123][ T9661] ? __fget_files+0x2a/0x420 [ 568.019151][ T9661] ? __fget_files+0x2a/0x420 [ 568.019173][ T9661] ? __fget_files+0x3a6/0x420 [ 568.019195][ T9661] ? __fget_files+0x2a/0x420 [ 568.019223][ T9661] security_file_ioctl+0xcb/0x2d0 [ 568.019259][ T9661] __se_sys_ioctl+0x47/0x170 [ 568.019293][ T9661] do_syscall_64+0xec/0xf80 [ 568.019315][ T9661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.019337][ T9661] ? trace_irq_disable+0x37/0x100 [ 568.019360][ T9661] ? clear_bhb_loop+0x60/0xb0 [ 568.019387][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.019408][ T9661] RIP: 0033:0x7fb6a903f749 [ 568.019427][ T9661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.019446][ T9661] RSP: 002b:00007fb6a729e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.019470][ T9661] RAX: ffffffffffffffda RBX: 00007fb6a9295fa0 RCX: 00007fb6a903f749 [ 568.019485][ T9661] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000005 [ 568.019500][ T9661] RBP: 00007fb6a729e090 R08: 0000000000000000 R09: 0000000000000000 [ 568.019514][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.019527][ T9661] R13: 00007fb6a9296038 R14: 00007fb6a9295fa0 R15: 00007ffe8a395de8 [ 568.019563][ T9661] [ 568.019583][ T9661] ERROR: Out of memory at tomoyo_realpath_from_path. [ 571.256174][ T9689] gfs2: not a GFS2 filesystem [ 572.110011][ T5876] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 572.275135][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 572.336004][ T5876] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 572.336043][ T5876] usb 3-1: config 0 has no interface number 0 [ 572.336097][ T5876] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.336126][ T5876] usb 3-1: config 0 interface 85 has no altsetting 0 [ 572.393457][ T5876] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 572.393493][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.393515][ T5876] usb 3-1: Product: syz [ 572.393531][ T5876] usb 3-1: Manufacturer: syz [ 572.393547][ T5876] usb 3-1: SerialNumber: syz [ 572.402850][ T5876] usb 3-1: config 0 descriptor?? [ 573.942222][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.942296][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.087514][ T5876] appletouch 3-1:0.85: Failed to request geyser raw mode [ 574.087766][ T5876] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 574.232996][ T5876] usb 3-1: USB disconnect, device number 40 [ 574.843162][ T9729] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1271'. [ 574.866612][ T8636] team0 (unregistering): Port device team_slave_1 removed [ 574.906252][ T9731] FAULT_INJECTION: forcing a failure. [ 574.906252][ T9731] name failslab, interval 1, probability 0, space 0, times 0 [ 574.906289][ T9731] CPU: 0 UID: 0 PID: 9731 Comm: syz.1.1273 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 574.906314][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.906329][ T9731] Call Trace: [ 574.906337][ T9731] [ 574.906347][ T9731] dump_stack_lvl+0xe8/0x150 [ 574.906384][ T9731] should_fail_ex+0x46c/0x600 [ 574.906421][ T9731] ? __alloc_skb+0x1dc/0x3a0 [ 574.906446][ T9731] should_failslab+0xa8/0x100 [ 574.906478][ T9731] ? __alloc_skb+0x1dc/0x3a0 [ 574.906500][ T9731] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 574.906535][ T9731] ? lockdep_hardirqs_on+0x7b/0x110 [ 574.906559][ T9731] ? __alloc_skb+0x198/0x3a0 [ 574.906583][ T9731] __alloc_skb+0x1dc/0x3a0 [ 574.906613][ T9731] alloc_skb_with_frags+0xca/0x890 [ 574.906643][ T9731] ? __lock_acquire+0x6b6/0x2cf0 [ 574.906677][ T9731] ? __pfx_smack_log+0x10/0x10 [ 574.906700][ T9731] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 574.906738][ T9731] sock_alloc_send_pskb+0x859/0x990 [ 574.906776][ T9731] ? __lock_acquire+0x6b6/0x2cf0 [ 574.906818][ T9731] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 574.906849][ T9731] ? __lock_acquire+0x6b6/0x2cf0 [ 574.906884][ T9731] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 574.906930][ T9731] unix_dgram_sendmsg+0x454/0x1840 [ 574.906968][ T9731] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 574.907002][ T9731] ? is_bpf_text_address+0x26/0x2b0 [ 574.907040][ T9731] ? __lock_acquire+0x6b6/0x2cf0 [ 574.907077][ T9731] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 574.907107][ T9731] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 574.907135][ T9731] ? do_sys_openat2+0x15a/0x200 [ 574.907166][ T9731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.907196][ T9731] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 574.907227][ T9731] __sock_sendmsg+0x21c/0x270 [ 574.907267][ T9731] ____sys_sendmsg+0x508/0x810 [ 574.907303][ T9731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.907343][ T9731] ? import_iovec+0x74/0xa0 [ 574.907369][ T9731] ___sys_sendmsg+0x21f/0x2a0 [ 574.907401][ T9731] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.907476][ T9731] ? __fget_files+0x2a/0x420 [ 574.907500][ T9731] ? __fget_files+0x3a6/0x420 [ 574.907536][ T9731] __x64_sys_sendmsg+0x1a1/0x260 [ 574.907569][ T9731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.907609][ T9731] ? __pfx_ksys_write+0x10/0x10 [ 574.907653][ T9731] do_syscall_64+0xec/0xf80 [ 574.907674][ T9731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.907695][ T9731] ? trace_irq_disable+0x37/0x100 [ 574.907718][ T9731] ? clear_bhb_loop+0x60/0xb0 [ 574.907745][ T9731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.907765][ T9731] RIP: 0033:0x7ff5705ef749 [ 574.907785][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.907802][ T9731] RSP: 002b:00007ff56e84e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.907825][ T9731] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ef749 [ 574.907841][ T9731] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000005 [ 574.907855][ T9731] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 0000000000000000 [ 574.907868][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.907880][ T9731] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 574.907914][ T9731] [ 575.429951][ T8636] team0 (unregistering): Port device team_slave_0 removed [ 579.744780][ T9235] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 579.994124][ T9235] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 580.156087][ T37] audit: type=1800 audit(1767711374.071:231): pid=9821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1311" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 581.286416][ T9840] FAULT_INJECTION: forcing a failure. [ 581.286416][ T9840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.286481][ T9840] CPU: 0 UID: 0 PID: 9840 Comm: syz.0.1314 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 581.286508][ T9840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.286522][ T9840] Call Trace: [ 581.286532][ T9840] [ 581.286541][ T9840] dump_stack_lvl+0xe8/0x150 [ 581.286581][ T9840] should_fail_ex+0x46c/0x600 [ 581.286610][ T9840] strncpy_from_user+0x36/0x2c0 [ 581.286635][ T9840] getname_flags+0xf3/0x540 [ 581.286658][ T9840] do_sys_openat2+0xbc/0x200 [ 581.286677][ T9840] ? lockdep_hardirqs_on+0x7b/0x110 [ 581.286693][ T9840] ? __pfx_do_sys_openat2+0x10/0x10 [ 581.286726][ T9840] __x64_sys_openat+0x138/0x170 [ 581.286748][ T9840] do_syscall_64+0xec/0xf80 [ 581.286763][ T9840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.286779][ T9840] ? clear_bhb_loop+0x60/0xb0 [ 581.286798][ T9840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.286813][ T9840] RIP: 0033:0x7fb91693f749 [ 581.286827][ T9840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.286842][ T9840] RSP: 002b:00007fb914b7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.286858][ T9840] RAX: ffffffffffffffda RBX: 00007fb916b96090 RCX: 00007fb91693f749 [ 581.286874][ T9840] RDX: 0000000000000240 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 581.286885][ T9840] RBP: 00007fb914b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 581.286895][ T9840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.286904][ T9840] R13: 00007fb916b96128 R14: 00007fb916b96090 R15: 00007ffd2a3771e8 [ 581.286928][ T9840] [ 582.739901][ T5876] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 582.900107][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 582.904035][ T5876] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 582.904074][ T5876] usb 3-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 8 [ 582.904099][ T5876] usb 3-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 64 [ 582.904125][ T5876] usb 3-1: config 1 interface 0 has no altsetting 0 [ 582.907252][ T5876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.907285][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.907306][ T5876] usb 3-1: Product: х [ 582.907322][ T5876] usb 3-1: Manufacturer: ᠊ [ 582.907336][ T5876] usb 3-1: SerialNumber: 핥ꔖ૾즌규⟨⬱怐닽嫸ᛖŔ츫籞脇⑹늃㕷瓋ש࠾쵰ⱥ殐鏾䢻ⶱ擤轅輔뿗뚵峊릠㙔ÿ [ 582.923796][ T9843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 582.924035][ T9843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 583.178005][ T9843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.262664][ T9843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.395099][ T5820] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 583.562839][ T9235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.123658][ T9235] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.478039][ T8636] IPVS: stop unused estimator thread 0... [ 584.484875][ T2231] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.489182][ T2231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.519652][ T2231] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.527581][ T2231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.682812][ T5876] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 584.754784][ T5876] usb 3-1: USB disconnect, device number 41 [ 585.881525][ T44] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 586.049890][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 586.065897][ T44] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.065936][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 586.065973][ T44] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 586.065996][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.098588][ T44] usb 3-1: config 0 descriptor?? [ 586.216212][ T9235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.531621][ T44] hid (null): unknown global tag 0xe [ 586.621905][ T44] hid_parser_main: 73 callbacks suppressed [ 586.621931][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 586.621963][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 586.621991][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 586.622019][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 586.622046][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 586.622073][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 586.622101][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 586.622127][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 586.622153][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 586.622180][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 586.623482][ T44] cougar 0003:060B:500A.0008: unknown global tag 0xe [ 586.623502][ T44] cougar 0003:060B:500A.0008: item 0 0 1 14 parsing failed [ 586.624383][ T44] cougar 0003:060B:500A.0008: parse failed [ 586.624498][ T44] cougar 0003:060B:500A.0008: probe with driver cougar failed with error -22 [ 586.866637][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.867001][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.953126][ T44] usb 3-1: USB disconnect, device number 42 [ 588.539631][ T9913] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 590.429120][ T9327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 590.460798][ T9327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 590.463875][ T9327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 590.483024][ T9327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 590.490169][ T9327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 590.688129][ T9948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1338'. [ 591.070194][ T9960] Illegal XDP return value 4294967274 on prog (id 155) dev syz_tun, expect packet loss! [ 591.476297][ T9973] FAULT_INJECTION: forcing a failure. [ 591.476297][ T9973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.476336][ T9973] CPU: 0 UID: 0 PID: 9973 Comm: syz.2.1345 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 591.476361][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.476376][ T9973] Call Trace: [ 591.476384][ T9973] [ 591.476394][ T9973] dump_stack_lvl+0xe8/0x150 [ 591.476432][ T9973] should_fail_ex+0x46c/0x600 [ 591.476470][ T9973] _copy_from_user+0x2d/0xb0 [ 591.476494][ T9973] kstrtouint_from_user+0xc4/0x170 [ 591.476530][ T9973] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 591.476581][ T9973] proc_fail_nth_write+0x88/0x200 [ 591.476615][ T9973] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 591.476656][ T9973] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 591.476692][ T9973] vfs_write+0x287/0xb40 [ 591.476733][ T9973] ? __pfx_vfs_write+0x10/0x10 [ 591.476769][ T9973] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 591.476792][ T9973] ? lockdep_hardirqs_on+0x7b/0x110 [ 591.476813][ T9973] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 591.476835][ T9973] ? mutex_lock_nested+0x154/0x1d0 [ 591.476865][ T9973] ? fdget_pos+0x253/0x320 [ 591.476900][ T9973] ksys_write+0x14b/0x260 [ 591.476934][ T9973] ? __pfx_ksys_write+0x10/0x10 [ 591.476981][ T9973] do_syscall_64+0xec/0xf80 [ 591.477003][ T9973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.477023][ T9973] ? trace_irq_disable+0x37/0x100 [ 591.477046][ T9973] ? clear_bhb_loop+0x60/0xb0 [ 591.477080][ T9973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.477102][ T9973] RIP: 0033:0x7f2d016fe1ff [ 591.477120][ T9973] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 591.477140][ T9973] RSP: 002b:00007f2cff93d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 591.477162][ T9973] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2d016fe1ff [ 591.477178][ T9973] RDX: 0000000000000001 RSI: 00007f2cff93d0a0 RDI: 0000000000000005 [ 591.477192][ T9973] RBP: 00007f2cff93d090 R08: 0000000000000000 R09: 0000000000000000 [ 591.477206][ T9973] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000001 [ 591.477218][ T9973] R13: 00007f2d01956128 R14: 00007f2d01956090 R15: 00007ffe6e429948 [ 591.477314][ T9973] [ 592.540086][ T5820] Bluetooth: hci2: command tx timeout [ 593.335772][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 593.377978][ T9938] chnl_net:caif_netlink_parms(): no params data found [ 593.899850][ T44] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 594.049886][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 594.054575][ T44] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 594.054609][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.134422][ T44] pvrusb2: Hardware description: Terratec Grabster AV400 [ 594.134442][ T44] pvrusb2: ********** [ 594.134450][ T44] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 594.134462][ T44] pvrusb2: Important functionality might not be entirely working. [ 594.134472][ T44] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 594.134484][ T44] pvrusb2: ********** [ 594.321206][ T2371] pvrusb2: Invalid write control endpoint [ 594.359307][ T44] usb 1-1: USB disconnect, device number 16 [ 594.514826][ T2371] pvrusb2: Invalid write control endpoint [ 594.514845][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 594.514856][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 594.514864][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 594.514876][ T2371] pvrusb2: Device being rendered inoperable [ 594.514954][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 594.515024][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 594.561969][ T2371] pvrusb2: Attached sub-driver cx25840 [ 594.562022][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 594.562054][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 594.619912][ T5820] Bluetooth: hci2: command tx timeout [ 595.552114][ T9938] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.570095][ T9938] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.570369][ T9938] bridge_slave_0: entered allmulticast mode [ 595.578659][ T9938] bridge_slave_0: entered promiscuous mode [ 595.613660][ T9938] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.613935][ T9938] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.614188][ T9938] bridge_slave_1: entered allmulticast mode [ 595.641643][ T9938] bridge_slave_1: entered promiscuous mode [ 596.132297][ T9938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.176228][ T9938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.706251][ T5820] Bluetooth: hci2: command tx timeout [ 596.759839][ T6504] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 596.964548][ T6504] usb 1-1: Using ep0 maxpacket: 16 [ 597.023129][ T6504] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 597.023160][ T6504] usb 1-1: config 0 has no interface number 0 [ 597.023211][ T6504] usb 1-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.023239][ T6504] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 597.023267][ T6504] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 597.163136][ T6504] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 597.163169][ T6504] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 597.163192][ T6504] usb 1-1: Manufacturer: syz [ 597.163207][ T6504] usb 1-1: SerialNumber: syz [ 597.312763][ T6504] usb 1-1: config 0 descriptor?? [ 597.319224][T10092] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 597.411255][ T9938] team0: Port device team_slave_0 added [ 597.845066][ T9938] team0: Port device team_slave_1 added [ 598.044917][ T6504] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 598.082522][ T6504] usb 1-1: USB disconnect, device number 17 [ 599.351610][ T5820] Bluetooth: hci2: command tx timeout [ 599.560108][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.560127][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.560156][ T9938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.651124][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.651143][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.651172][ T9938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.087637][T10136] gfs2: not a GFS2 filesystem [ 600.435545][ T5898] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 600.700169][T10138] FAULT_INJECTION: forcing a failure. [ 600.700169][T10138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.700205][T10138] CPU: 1 UID: 0 PID: 10138 Comm: syz.2.1396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 600.700229][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.700243][T10138] Call Trace: [ 600.700252][T10138] [ 600.700261][T10138] dump_stack_lvl+0xe8/0x150 [ 600.700299][T10138] should_fail_ex+0x46c/0x600 [ 600.700335][T10138] _copy_to_user+0x31/0xb0 [ 600.700359][T10138] simple_read_from_buffer+0xe1/0x170 [ 600.700387][T10138] proc_fail_nth_read+0x1b6/0x220 [ 600.700425][T10138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 600.700460][T10138] ? rw_verify_area+0x2ac/0x4e0 [ 600.700490][T10138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 600.700524][T10138] vfs_read+0x206/0xa30 [ 600.700562][T10138] ? __pfx_vfs_read+0x10/0x10 [ 600.700593][T10138] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 600.700616][T10138] ? lockdep_hardirqs_on+0x7b/0x110 [ 600.700637][T10138] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 600.700657][T10138] ? mutex_lock_nested+0x154/0x1d0 [ 600.700684][T10138] ? fdget_pos+0x253/0x320 [ 600.700719][T10138] ksys_read+0x14b/0x260 [ 600.700753][T10138] ? __pfx_ksys_read+0x10/0x10 [ 600.700807][T10138] do_syscall_64+0xec/0xf80 [ 600.700829][T10138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.700851][T10138] ? trace_irq_disable+0x37/0x100 [ 600.700875][T10138] ? clear_bhb_loop+0x60/0xb0 [ 600.700903][T10138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.700924][T10138] RIP: 0033:0x7f2d016fe15c [ 600.700943][T10138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 600.700962][T10138] RSP: 002b:00007f2cff95e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 600.700986][T10138] RAX: ffffffffffffffda RBX: 00007f2d01955fa0 RCX: 00007f2d016fe15c [ 600.701002][T10138] RDX: 000000000000000f RSI: 00007f2cff95e0a0 RDI: 0000000000000005 [ 600.701016][T10138] RBP: 00007f2cff95e090 R08: 0000000000000000 R09: 0000000000000000 [ 600.701030][T10138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.701043][T10138] R13: 00007f2d01956038 R14: 00007f2d01955fa0 R15: 00007ffe6e429948 [ 600.701079][T10138] [ 600.795238][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 600.803939][ T5898] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 600.804028][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.957538][ T5898] pvrusb2: Hardware description: Terratec Grabster AV400 [ 600.957604][ T5898] pvrusb2: ********** [ 600.957632][ T5898] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 600.957677][ T5898] pvrusb2: Important functionality might not be entirely working. [ 600.957701][ T5898] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 600.957733][ T5898] pvrusb2: ********** [ 601.096378][ T13] bridge_slave_1: left allmulticast mode [ 601.096402][ T13] bridge_slave_1: left promiscuous mode [ 601.097017][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.157080][ T2371] pvrusb2: Invalid write control endpoint [ 601.214264][ T5898] usb 5-1: USB disconnect, device number 31 [ 601.274742][ T13] bridge_slave_0: left allmulticast mode [ 601.274774][ T13] bridge_slave_0: left promiscuous mode [ 601.276224][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.376153][ T2371] pvrusb2: Invalid write control endpoint [ 601.376172][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 601.376183][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 601.376192][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 601.376205][ T2371] pvrusb2: Device being rendered inoperable [ 601.378580][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 601.378646][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 601.637045][ T2371] pvrusb2: Attached sub-driver cx25840 [ 601.637065][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 601.637078][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 602.085182][T10158] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 606.747344][ T805] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 606.997439][T10199] FAULT_INJECTION: forcing a failure. [ 606.997439][T10199] name failslab, interval 1, probability 0, space 0, times 0 [ 606.997477][T10199] CPU: 1 UID: 0 PID: 10199 Comm: syz.1.1419 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 606.997503][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.997516][T10199] Call Trace: [ 606.997529][T10199] [ 606.997539][T10199] dump_stack_lvl+0xe8/0x150 [ 606.997574][T10199] should_fail_ex+0x46c/0x600 [ 606.997613][T10199] should_failslab+0xa8/0x100 [ 606.997637][T10199] __kmalloc_noprof+0xe0/0x7e0 [ 606.997669][T10199] ? kfree+0x4d/0x900 [ 606.997695][T10199] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 606.997725][T10199] tomoyo_realpath_from_path+0xe3/0x5d0 [ 606.997750][T10199] ? tomoyo_domain+0xd9/0x130 [ 606.997780][T10199] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 606.997813][T10199] tomoyo_path_number_perm+0x1e8/0x5a0 [ 606.997848][T10199] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 606.997878][T10199] ? __lock_acquire+0x6b6/0x2cf0 [ 606.997913][T10199] ? do_raw_spin_lock+0x121/0x290 [ 606.997982][T10199] ? __fget_files+0x2a/0x420 [ 606.998009][T10199] ? __fget_files+0x2a/0x420 [ 606.998030][T10199] ? __fget_files+0x3a6/0x420 [ 606.998052][T10199] ? __fget_files+0x2a/0x420 [ 606.998079][T10199] security_file_ioctl+0xcb/0x2d0 [ 606.998113][T10199] __se_sys_ioctl+0x47/0x170 [ 606.998147][T10199] do_syscall_64+0xec/0xf80 [ 606.998168][T10199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.998191][T10199] ? clear_bhb_loop+0x60/0xb0 [ 606.998227][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.998249][T10199] RIP: 0033:0x7ff5705ef749 [ 606.998268][T10199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.998294][T10199] RSP: 002b:00007ff56e84e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.998324][T10199] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ef749 [ 606.998341][T10199] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 606.998355][T10199] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 0000000000000000 [ 606.998369][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.998382][T10199] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 606.998418][T10199] [ 606.998491][T10199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 607.029421][T10199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 609.188276][T10237] FAULT_INJECTION: forcing a failure. [ 609.188276][T10237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.188513][T10237] CPU: 0 UID: 0 PID: 10237 Comm: syz.1.1434 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 609.188539][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.188554][T10237] Call Trace: [ 609.188565][T10237] [ 609.188576][T10237] dump_stack_lvl+0xe8/0x150 [ 609.188623][T10237] should_fail_ex+0x46c/0x600 [ 609.188659][T10237] _copy_from_user+0x2d/0xb0 [ 609.188691][T10237] kstrtouint_from_user+0xc4/0x170 [ 609.188727][T10237] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 609.188779][T10237] proc_fail_nth_write+0x88/0x200 [ 609.188817][T10237] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 609.188846][T10237] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 609.188889][T10237] vfs_write+0x287/0xb40 [ 609.188929][T10237] ? __pfx_vfs_write+0x10/0x10 [ 609.188963][T10237] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 609.188987][T10237] ? lockdep_hardirqs_on+0x7b/0x110 [ 609.189007][T10237] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 609.189034][T10237] ? mutex_lock_nested+0x154/0x1d0 [ 609.189055][T10237] ? fdget_pos+0x253/0x320 [ 609.189099][T10237] ksys_write+0x14b/0x260 [ 609.189189][T10237] ? __pfx_ksys_write+0x10/0x10 [ 609.189238][T10237] do_syscall_64+0xec/0xf80 [ 609.189279][T10237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.189307][T10237] ? trace_irq_disable+0x37/0x100 [ 609.189342][T10237] ? clear_bhb_loop+0x60/0xb0 [ 609.189369][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.189392][T10237] RIP: 0033:0x7ff5705ee1ff [ 609.189411][T10237] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 609.189429][T10237] RSP: 002b:00007ff56e84e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 609.189453][T10237] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff5705ee1ff [ 609.189469][T10237] RDX: 0000000000000001 RSI: 00007ff56e84e0a0 RDI: 0000000000000005 [ 609.189484][T10237] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 0000000000000000 [ 609.189498][T10237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 609.189638][T10237] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 609.189679][T10237] [ 611.959992][ T805] usb 1-1: device descriptor read/64, error -110 [ 612.209968][ T805] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 612.213136][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.290986][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.333216][ T13] bond0 (unregistering): Released all slaves [ 612.339897][ T805] usb 1-1: device descriptor read/64, error -32 [ 612.450260][ T805] usb usb1-port1: attempt power cycle [ 613.796488][ T805] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 613.810311][ T805] usb 1-1: device descriptor read/8, error -32 [ 613.982950][ T37] audit: type=1800 audit(1767711407.921:232): pid=10268 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1444" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 614.069375][T10179] raw-gadget.0 gadget.0: failed to queue disconnect event [ 614.112081][ T9938] hsr_slave_0: entered promiscuous mode [ 614.113574][ T9938] hsr_slave_1: entered promiscuous mode [ 614.114618][ T9938] debugfs: 'hsr0' already exists in 'hsr' [ 614.114644][ T9938] Cannot create hsr debugfs directory [ 614.166282][T10271] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 614.449934][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 614.599972][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 614.603831][ T9] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 614.603864][ T9] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 614.603890][ T9] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 614.603917][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 614.606963][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 614.606998][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.607020][ T9] usb 3-1: Product: syz [ 614.607035][ T9] usb 3-1: Manufacturer: syz [ 614.607051][ T9] usb 3-1: SerialNumber: syz [ 614.901684][ T13] hsr_slave_0: left promiscuous mode [ 614.920417][ T13] hsr_slave_1: left promiscuous mode [ 614.943621][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.981071][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.041803][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.044631][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.080369][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 615.791831][ T805] usb 3-1: USB disconnect, device number 43 [ 615.797777][ T805] usblp0: removed [ 615.916893][ T37] audit: type=1800 audit(1767711409.851:233): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1455" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 616.112375][T10319] FAULT_INJECTION: forcing a failure. [ 616.112375][T10319] name failslab, interval 1, probability 0, space 0, times 0 [ 616.112414][T10319] CPU: 1 UID: 0 PID: 10319 Comm: syz.2.1457 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 616.112440][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.112456][T10319] Call Trace: [ 616.112464][T10319] [ 616.112474][T10319] dump_stack_lvl+0xe8/0x150 [ 616.112512][T10319] should_fail_ex+0x46c/0x600 [ 616.112551][T10319] should_failslab+0xa8/0x100 [ 616.112574][T10319] __kmalloc_noprof+0xe0/0x7e0 [ 616.112606][T10319] ? tomoyo_encode+0x28b/0x550 [ 616.112644][T10319] tomoyo_encode+0x28b/0x550 [ 616.112672][T10319] tomoyo_realpath_from_path+0x58d/0x5d0 [ 616.112707][T10319] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 616.112738][T10319] tomoyo_path_number_perm+0x1e8/0x5a0 [ 616.112785][T10319] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 616.112815][T10319] ? __lock_acquire+0x6b6/0x2cf0 [ 616.112857][T10319] ? do_raw_spin_lock+0x121/0x290 [ 616.112919][T10319] ? __fget_files+0x2a/0x420 [ 616.112947][T10319] ? __fget_files+0x2a/0x420 [ 616.112970][T10319] ? __fget_files+0x3a6/0x420 [ 616.112992][T10319] ? __fget_files+0x2a/0x420 [ 616.113020][T10319] security_file_ioctl+0xcb/0x2d0 [ 616.113055][T10319] __se_sys_ioctl+0x47/0x170 [ 616.113089][T10319] do_syscall_64+0xec/0xf80 [ 616.113121][T10319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.113142][T10319] ? trace_irq_disable+0x37/0x100 [ 616.113172][T10319] ? clear_bhb_loop+0x60/0xb0 [ 616.113199][T10319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.113226][T10319] RIP: 0033:0x7f2d016ff749 [ 616.113244][T10319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.113269][T10319] RSP: 002b:00007f2cff95e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.113293][T10319] RAX: ffffffffffffffda RBX: 00007f2d01955fa0 RCX: 00007f2d016ff749 [ 616.113309][T10319] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 616.113322][T10319] RBP: 00007f2cff95e090 R08: 0000000000000000 R09: 0000000000000000 [ 616.113336][T10319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.113348][T10319] R13: 00007f2d01956038 R14: 00007f2d01955fa0 R15: 00007ffe6e429948 [ 616.113384][T10319] [ 616.113418][T10319] ERROR: Out of memory at tomoyo_realpath_from_path. [ 616.113469][T10319] input input28: cannot allocate more than FF_MAX_EFFECTS effects [ 619.140494][T10340] input input29: cannot allocate more than FF_MAX_EFFECTS effects [ 621.939929][ T805] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 622.069910][ T805] usb 1-1: device descriptor read/64, error -71 [ 622.312347][ T805] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 622.331116][T10371] FAULT_INJECTION: forcing a failure. [ 622.331116][T10371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.331155][T10371] CPU: 1 UID: 0 PID: 10371 Comm: syz.1.1480 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 622.331188][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 622.331203][T10371] Call Trace: [ 622.331213][T10371] [ 622.331222][T10371] dump_stack_lvl+0xe8/0x150 [ 622.331270][T10371] should_fail_ex+0x46c/0x600 [ 622.331309][T10371] _copy_to_user+0x31/0xb0 [ 622.331341][T10371] simple_read_from_buffer+0xe1/0x170 [ 622.331370][T10371] proc_fail_nth_read+0x1b6/0x220 [ 622.331409][T10371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.331448][T10371] ? rw_verify_area+0x2ac/0x4e0 [ 622.331479][T10371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.331514][T10371] vfs_read+0x206/0xa30 [ 622.331556][T10371] ? __pfx_vfs_read+0x10/0x10 [ 622.331589][T10371] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 622.331614][T10371] ? lockdep_hardirqs_on+0x7b/0x110 [ 622.331635][T10371] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 622.331658][T10371] ? mutex_lock_nested+0x154/0x1d0 [ 622.331687][T10371] ? fdget_pos+0x253/0x320 [ 622.331718][T10371] ksys_read+0x14b/0x260 [ 622.331752][T10371] ? __pfx_ksys_read+0x10/0x10 [ 622.331818][T10371] do_syscall_64+0xec/0xf80 [ 622.331844][T10371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.331865][T10371] ? trace_irq_disable+0x37/0x100 [ 622.331888][T10371] ? clear_bhb_loop+0x60/0xb0 [ 622.331916][T10371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.331944][T10371] RIP: 0033:0x7ff5705ee15c [ 622.331964][T10371] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 622.331983][T10371] RSP: 002b:00007ff56e84e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 622.332007][T10371] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ee15c [ 622.332024][T10371] RDX: 000000000000000f RSI: 00007ff56e84e0a0 RDI: 0000000000000004 [ 622.332038][T10371] RBP: 00007ff56e84e090 R08: 0000000000000000 R09: 000000000000001c [ 622.332053][T10371] R10: 000000000004fffd R11: 0000000000000246 R12: 0000000000000001 [ 622.332067][T10371] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 622.332103][T10371] [ 622.602680][ T13] team0 (unregistering): Port device team_slave_1 removed [ 622.610823][ T805] usb 1-1: device descriptor read/64, error -71 [ 622.720515][ T805] usb usb1-port1: attempt power cycle [ 622.912761][ T44] hid_parser_main: 117 callbacks suppressed [ 622.912784][ T44] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 622.927491][ T44] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 623.020765][ T13] team0 (unregistering): Port device team_slave_0 removed [ 623.042299][T10386] fido_id[10386]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 623.083994][ T805] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 623.101216][ T805] usb 1-1: device descriptor read/8, error -71 [ 623.340183][ T805] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 623.362289][ T805] usb 1-1: device descriptor read/8, error -71 [ 623.470669][ T805] usb usb1-port1: unable to enumerate USB device [ 623.978472][T10406] FAULT_INJECTION: forcing a failure. [ 623.978472][T10406] name failslab, interval 1, probability 0, space 0, times 0 [ 623.978508][T10406] CPU: 1 UID: 0 PID: 10406 Comm: syz.1.1492 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 623.978533][T10406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 623.978547][T10406] Call Trace: [ 623.978555][T10406] [ 623.978564][T10406] dump_stack_lvl+0xe8/0x150 [ 623.978600][T10406] should_fail_ex+0x46c/0x600 [ 623.978637][T10406] should_failslab+0xa8/0x100 [ 623.978662][T10406] __kmalloc_noprof+0xe0/0x7e0 [ 623.978694][T10406] ? tomoyo_encode+0x28b/0x550 [ 623.978720][T10406] tomoyo_encode+0x28b/0x550 [ 623.978748][T10406] tomoyo_realpath_from_path+0x58d/0x5d0 [ 623.978784][T10406] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 623.978817][T10406] tomoyo_path_number_perm+0x1e8/0x5a0 [ 623.978860][T10406] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 623.978898][T10406] ? __lock_acquire+0x6b6/0x2cf0 [ 623.978937][T10406] ? do_raw_spin_lock+0x121/0x290 [ 623.979001][T10406] ? __fget_files+0x2a/0x420 [ 623.979028][T10406] ? __fget_files+0x2a/0x420 [ 623.979051][T10406] ? __fget_files+0x3a6/0x420 [ 623.979072][T10406] ? __fget_files+0x2a/0x420 [ 623.979102][T10406] security_file_ioctl+0xcb/0x2d0 [ 623.979137][T10406] __se_sys_ioctl+0x47/0x170 [ 623.979171][T10406] do_syscall_64+0xec/0xf80 [ 623.979193][T10406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.979215][T10406] ? trace_irq_disable+0x37/0x100 [ 623.979239][T10406] ? clear_bhb_loop+0x60/0xb0 [ 623.979267][T10406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.979289][T10406] RIP: 0033:0x7ff5705ef749 [ 623.979308][T10406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.979327][T10406] RSP: 002b:00007ff56e80c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.979351][T10406] RAX: ffffffffffffffda RBX: 00007ff570846180 RCX: 00007ff5705ef749 [ 623.979368][T10406] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000006 [ 623.979383][T10406] RBP: 00007ff56e80c090 R08: 0000000000000000 R09: 0000000000000000 [ 623.979398][T10406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.979411][T10406] R13: 00007ff570846218 R14: 00007ff570846180 R15: 00007fffe93c73c8 [ 623.979449][T10406] [ 623.979470][T10406] ERROR: Out of memory at tomoyo_realpath_from_path. [ 624.154794][ T37] audit: type=1800 audit(1767711418.091:234): pid=10408 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1493" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 625.300238][T10414] FAULT_INJECTION: forcing a failure. [ 625.300238][T10414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.300305][T10414] CPU: 1 UID: 0 PID: 10414 Comm: syz.0.1495 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 625.300331][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.300346][T10414] Call Trace: [ 625.300356][T10414] [ 625.300366][T10414] dump_stack_lvl+0xe8/0x150 [ 625.300403][T10414] should_fail_ex+0x46c/0x600 [ 625.300440][T10414] _copy_to_user+0x31/0xb0 [ 625.300466][T10414] simple_read_from_buffer+0xe1/0x170 [ 625.300494][T10414] proc_fail_nth_read+0x1b6/0x220 [ 625.300533][T10414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 625.300563][T10414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 625.300597][T10414] ? vfs_read+0x1eb/0xa30 [ 625.300629][T10414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 625.300666][T10414] vfs_read+0x206/0xa30 [ 625.300712][T10414] ? __pfx_vfs_read+0x10/0x10 [ 625.300747][T10414] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 625.300771][T10414] ? lockdep_hardirqs_on+0x7b/0x110 [ 625.300793][T10414] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 625.300815][T10414] ? mutex_lock_nested+0x154/0x1d0 [ 625.300843][T10414] ? fdget_pos+0x253/0x320 [ 625.300878][T10414] ksys_read+0x14b/0x260 [ 625.300913][T10414] ? __pfx_ksys_read+0x10/0x10 [ 625.300959][T10414] do_syscall_64+0xec/0xf80 [ 625.300979][T10414] ? rcu_is_watching+0x15/0xb0 [ 625.301013][T10414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.301036][T10414] ? clear_bhb_loop+0x60/0xb0 [ 625.301065][T10414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.301086][T10414] RIP: 0033:0x7fb91693e15c [ 625.301106][T10414] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 625.301126][T10414] RSP: 002b:00007fb914b5c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 625.301149][T10414] RAX: ffffffffffffffda RBX: 00007fb916b96180 RCX: 00007fb91693e15c [ 625.301166][T10414] RDX: 000000000000000f RSI: 00007fb914b5c0a0 RDI: 0000000000000008 [ 625.301181][T10414] RBP: 00007fb914b5c090 R08: 0000000000000000 R09: 0000000000000000 [ 625.301196][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.301226][T10414] R13: 00007fb916b96218 R14: 00007fb916b96180 R15: 00007ffd2a3771e8 [ 625.301265][T10414] [ 626.735174][T10422] gfs2: not a GFS2 filesystem [ 628.426183][T10435] sctp: [Deprecated]: syz.0.1498 (pid 10435) Use of int in maxseg socket option. [ 628.426183][T10435] Use struct sctp_assoc_value instead [ 630.773989][T10486] gfs2: not a GFS2 filesystem [ 631.899668][T10497] netlink: 'syz.4.1513': attribute type 4 has an invalid length. [ 631.952748][T10503] netlink: 'syz.4.1513': attribute type 4 has an invalid length. [ 634.390977][T10528] sctp: [Deprecated]: syz.0.1519 (pid 10528) Use of int in maxseg socket option. [ 634.390977][T10528] Use struct sctp_assoc_value instead [ 635.168810][T10540] gfs2: not a GFS2 filesystem [ 635.320467][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.325572][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 637.008896][T10568] binder: 10567:10568 unknown command 0 [ 637.008924][T10568] binder: 10567:10568 ioctl c0306201 200000000080 returned -22 [ 637.094530][T10568] binder: 10567:10568 ioctl c0306201 200000000300 returned -14 [ 637.299045][ T9938] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 637.396169][ T9938] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 637.439947][ T6292] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 637.521729][ T9938] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 637.589818][ T6292] usb 5-1: Using ep0 maxpacket: 8 [ 637.591930][ T6292] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 637.591996][ T6292] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 637.592020][ T6292] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 637.592052][ T6292] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 637.592078][ T6292] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.592123][ T6292] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 637.592148][ T6292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.675866][ T9938] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 637.910004][ T6292] usb 5-1: GET_CAPABILITIES returned 0 [ 637.910056][ T6292] usbtmc 5-1:16.0: can't read capabilities [ 641.821744][ T44] usb 5-1: USB disconnect, device number 32 [ 641.980149][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 641.982484][ T9938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.983033][T10607] bridge_slave_1: left allmulticast mode [ 641.983057][T10607] bridge_slave_1: left promiscuous mode [ 642.039941][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.005950][ T9938] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.067334][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.067574][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.200559][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.200791][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.833786][T10634] syzkaller0: entered promiscuous mode [ 643.833814][T10634] syzkaller0: entered allmulticast mode [ 643.862977][T10632] FAULT_INJECTION: forcing a failure. [ 643.862977][T10632] name failslab, interval 1, probability 0, space 0, times 0 [ 643.863015][T10632] CPU: 1 UID: 0 PID: 10632 Comm: syz.1.1547 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 643.863039][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.863054][T10632] Call Trace: [ 643.863062][T10632] [ 643.863072][T10632] dump_stack_lvl+0xe8/0x150 [ 643.863110][T10632] should_fail_ex+0x46c/0x600 [ 643.863146][T10632] should_failslab+0xa8/0x100 [ 643.863170][T10632] __kmalloc_cache_noprof+0x84/0x6d0 [ 643.863204][T10632] ? mutex_lock_nested+0x154/0x1d0 [ 643.863232][T10632] ? packet_mc_add+0x12d/0xb90 [ 643.863251][T10632] ? packet_mc_add+0x28/0xb90 [ 643.863274][T10632] packet_mc_add+0x12d/0xb90 [ 643.863309][T10632] packet_setsockopt+0xbf1/0x12c0 [ 643.863343][T10632] ? do_raw_spin_lock+0x121/0x290 [ 643.863440][T10632] ? __pfx_packet_setsockopt+0x10/0x10 [ 643.863483][T10632] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 643.863510][T10632] ? __fget_files+0x2a/0x420 [ 643.863545][T10632] ? __fget_files+0x2a/0x420 [ 643.863572][T10632] ? __fget_files+0x2a/0x420 [ 643.863593][T10632] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 643.863623][T10632] ? __pfx_packet_setsockopt+0x10/0x10 [ 643.863657][T10632] do_sock_setsockopt+0x17c/0x1b0 [ 643.863690][T10632] __x64_sys_setsockopt+0x145/0x1b0 [ 643.863723][T10632] do_syscall_64+0xec/0xf80 [ 643.863744][T10632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.863766][T10632] ? trace_irq_disable+0x37/0x100 [ 643.863789][T10632] ? clear_bhb_loop+0x60/0xb0 [ 643.863817][T10632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.863839][T10632] RIP: 0033:0x7ff5705ef749 [ 643.863859][T10632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.863878][T10632] RSP: 002b:00007ff56e84e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 643.863902][T10632] RAX: ffffffffffffffda RBX: 00007ff570845fa0 RCX: 00007ff5705ef749 [ 643.863918][T10632] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 643.863932][T10632] RBP: 00007ff56e84e090 R08: 0000000000000010 R09: 0000000000000000 [ 643.863946][T10632] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 643.863961][T10632] R13: 00007ff570846038 R14: 00007ff570845fa0 R15: 00007fffe93c73c8 [ 643.863997][T10632] [ 644.459902][ T7534] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 644.854958][ T9938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.860467][ T7534] usb 1-1: Using ep0 maxpacket: 32 [ 644.882530][ T7534] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 644.882564][ T7534] usb 1-1: config 0 has no interface number 0 [ 644.882632][ T7534] usb 1-1: config 0 interface 184 has no altsetting 0 [ 644.915097][ T805] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 644.988613][ T7534] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 644.988646][ T7534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.988667][ T7534] usb 1-1: Product: syz [ 644.988682][ T7534] usb 1-1: Manufacturer: syz [ 644.988698][ T7534] usb 1-1: SerialNumber: syz [ 645.079212][ T7534] usb 1-1: config 0 descriptor?? [ 645.090251][ T805] usb 5-1: Using ep0 maxpacket: 8 [ 645.179421][ T805] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 645.179464][ T805] usb 5-1: can't read configurations, error -61 [ 645.253095][ T7534] smsc75xx v1.0.0 [ 645.350247][ T805] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 645.500223][ T7534] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 645.500540][ T7534] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 645.530614][ T805] usb 5-1: Using ep0 maxpacket: 8 [ 645.547539][ T805] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 645.547585][ T805] usb 5-1: can't read configurations, error -61 [ 645.557932][ T805] usb usb5-port1: attempt power cycle [ 645.650742][ T7534] usb 1-1: USB disconnect, device number 26 [ 646.009856][ T805] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 646.031980][ T805] usb 5-1: Using ep0 maxpacket: 8 [ 646.036418][ T805] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 646.036462][ T805] usb 5-1: can't read configurations, error -61 [ 646.220005][ T805] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 646.240782][ T805] usb 5-1: Using ep0 maxpacket: 8 [ 646.264673][ T805] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 646.264714][ T805] usb 5-1: can't read configurations, error -61 [ 646.287736][ T805] usb usb5-port1: unable to enumerate USB device [ 646.528263][ T9938] veth0_vlan: entered promiscuous mode [ 646.572075][ T9938] veth1_vlan: entered promiscuous mode [ 646.773985][ T9938] veth0_macvtap: entered promiscuous mode [ 646.788449][ T9938] veth1_macvtap: entered promiscuous mode [ 646.800295][T10699] fuse: Bad value for 'fd' [ 646.800632][T10699] fuse: Bad value for 'fd' [ 646.800992][T10699] fuse: Bad value for 'fd' [ 646.801304][T10699] fuse: Bad value for 'fd' [ 646.801645][T10699] fuse: Bad value for 'fd' [ 646.802005][T10699] fuse: Bad value for 'fd' [ 646.854726][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.874783][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.902339][ T1493] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.902624][ T1493] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.902667][ T1493] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.902708][ T1493] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.080197][T10699] fuse: Bad value for 'fd' [ 647.080542][T10699] fuse: Bad value for 'fd' [ 647.080887][T10699] fuse: Bad value for 'fd' [ 647.081216][T10699] fuse: Bad value for 'fd' [ 647.081530][T10699] fuse: Bad value for 'fd' [ 647.082384][T10699] fuse: Bad value for 'fd' [ 647.082756][T10699] fuse: Bad value for 'fd' [ 647.083068][T10699] fuse: Bad value for 'fd' [ 647.083068][T10699] fuse: Bad value for 'fd' [ 647.083395][T10699] fuse: Bad value for 'fd' [ 647.083701][T10699] fuse: Bad value for 'fd' [ 647.084040][T10699] fuse: Bad value for 'fd' [ 647.084558][T10699] fuse: Bad value for 'fd' [ 647.084952][T10699] fuse: Bad value for 'fd' [ 647.085324][T10699] fuse: Bad value for 'fd' [ 647.085702][T10699] fuse: Bad value for 'fd' [ 647.086067][T10699] fuse: Bad value for 'fd' [ 647.086414][T10699] fuse: Bad value for 'fd' [ 648.222206][ T7534] ------------[ cut here ]------------ [ 648.222222][ T7534] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 648.222246][ T7534] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#1: kworker/1:12/7534 [ 648.222293][ T7534] Modules linked in: [ 648.222318][ T7534] CPU: 1 UID: 0 PID: 7534 Comm: kworker/1:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 648.222343][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.222358][ T7534] Workqueue: events drm_fb_helper_damage_work [ 648.222385][ T7534] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 648.222412][ T7534] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 648.222431][ T7534] RSP: 0018:ffffc9001cb87860 EFLAGS: 00010246 [ 648.222451][ T7534] RAX: 1ffff11004796000 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 648.222468][ T7534] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 648.222485][ T7534] RBP: ffffc9001cb87948 R08: 0000000000000000 R09: 0000000000000000 [ 648.222499][ T7534] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 648.222516][ T7534] R13: ffff888023cb0000 R14: 1ffff92003970f10 R15: ffffffff8b569b80 [ 648.222533][ T7534] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 648.222551][ T7534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.222566][ T7534] CR2: 00007ff57064e470 CR3: 0000000034e72000 CR4: 00000000003526f0 [ 648.222598][ T7534] Call Trace: [ 648.222607][ T7534] [ 648.222622][ T7534] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 648.222647][ T7534] ? rt_spin_unlock+0x150/0x200 [ 648.222679][ T7534] ? __pfx_autoremove_wake_function+0x10/0x10 [ 648.222712][ T7534] ? rt_spin_unlock+0x161/0x200 [ 648.222746][ T7534] ? drm_vblank_get+0x147/0x260 [ 648.222774][ T7534] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 648.222815][ T7534] drm_fb_helper_damage_work+0xc9/0x650 [ 648.222845][ T7534] ? process_scheduled_works+0x9ef/0x1770 [ 648.222878][ T7534] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 648.222911][ T7534] ? process_scheduled_works+0x9ef/0x1770 [ 648.222935][ T7534] ? process_scheduled_works+0x9ef/0x1770 [ 648.222965][ T7534] process_scheduled_works+0xad1/0x1770 [ 648.223057][ T7534] ? __pfx_process_scheduled_works+0x10/0x10 [ 648.223083][ T7534] ? do_raw_spin_lock+0x121/0x290 [ 648.223130][ T7534] worker_thread+0x8a0/0xda0 [ 648.223175][ T7534] ? __kthread_parkme+0x7b/0x200 [ 648.223222][ T7534] kthread+0x711/0x8a0 [ 648.223259][ T7534] ? __pfx_worker_thread+0x10/0x10 [ 648.223285][ T7534] ? __pfx_kthread+0x10/0x10 [ 648.223315][ T7534] ? rt_spin_unlock+0x150/0x200 [ 648.223352][ T7534] ? rt_spin_unlock+0x161/0x200 [ 648.223381][ T7534] ? __pfx_kthread+0x10/0x10 [ 648.223415][ T7534] ret_from_fork+0x510/0xa50 [ 648.223445][ T7534] ? __pfx_ret_from_fork+0x10/0x10 [ 648.223467][ T7534] ? __switch_to+0xc9e/0x1480 [ 648.223508][ T7534] ? __pfx_kthread+0x10/0x10 [ 648.223542][ T7534] ret_from_fork_asm+0x1a/0x30 [ 648.223599][ T7534] [ 648.223630][ T7534] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 648.223648][ T7534] CPU: 1 UID: 0 PID: 7534 Comm: kworker/1:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 648.223674][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.223689][ T7534] Workqueue: events drm_fb_helper_damage_work [ 648.223715][ T7534] Call Trace: [ 648.223724][ T7534] [ 648.223734][ T7534] vpanic+0x1e0/0x670 [ 648.223771][ T7534] panic+0xb9/0xc0 [ 648.223803][ T7534] ? __pfx_panic+0x10/0x10 [ 648.223848][ T7534] ? ret_from_fork_asm+0x1a/0x30 [ 648.223889][ T7534] __warn+0x317/0x4b0 [ 648.223919][ T7534] ? drm_wait_one_vblank+0x39a/0x5c0 [ 648.223949][ T7534] ? drm_wait_one_vblank+0x39a/0x5c0 [ 648.223975][ T7534] __report_bug+0x288/0x500 [ 648.224022][ T7534] ? drm_wait_one_vblank+0x39a/0x5c0 [ 648.224055][ T7534] ? __pfx___report_bug+0x10/0x10 [ 648.224117][ T7534] report_bug_entry+0x19a/0x290 [ 648.224155][ T7534] ? drm_wait_one_vblank+0x587/0x5c0 [ 648.224180][ T7534] ? drm_wait_one_vblank+0x58c/0x5c0 [ 648.224204][ T7534] handle_bug+0xca/0x200 [ 648.224233][ T7534] exc_invalid_op+0x1a/0x50 [ 648.224260][ T7534] asm_exc_invalid_op+0x1a/0x20 [ 648.224282][ T7534] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 648.224307][ T7534] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 648.224326][ T7534] RSP: 0018:ffffc9001cb87860 EFLAGS: 00010246 [ 648.224345][ T7534] RAX: 1ffff11004796000 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 648.224361][ T7534] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 648.224379][ T7534] RBP: ffffc9001cb87948 R08: 0000000000000000 R09: 0000000000000000 [ 648.224393][ T7534] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 648.224416][ T7534] R13: ffff888023cb0000 R14: 1ffff92003970f10 R15: ffffffff8b569b80 [ 648.224460][ T7534] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 648.224485][ T7534] ? rt_spin_unlock+0x150/0x200 [ 648.224517][ T7534] ? __pfx_autoremove_wake_function+0x10/0x10 [ 648.224549][ T7534] ? rt_spin_unlock+0x161/0x200 [ 648.224583][ T7534] ? drm_vblank_get+0x147/0x260 [ 648.224611][ T7534] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 648.224651][ T7534] drm_fb_helper_damage_work+0xc9/0x650 [ 648.224681][ T7534] ? process_scheduled_works+0x9ef/0x1770 [ 648.224712][ T7534] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 648.224745][ T7534] ? process_scheduled_works+0x9ef/0x1770 [ 648.224770][ T7534] ? process_scheduled_works+0x9ef/0x1770 [ 648.224799][ T7534] process_scheduled_works+0xad1/0x1770 [ 648.224859][ T7534] ? __pfx_process_scheduled_works+0x10/0x10 [ 648.224884][ T7534] ? do_raw_spin_lock+0x121/0x290 [ 648.224930][ T7534] worker_thread+0x8a0/0xda0 [ 648.224974][ T7534] ? __kthread_parkme+0x7b/0x200 [ 648.225023][ T7534] kthread+0x711/0x8a0 [ 648.225065][ T7534] ? __pfx_worker_thread+0x10/0x10 [ 648.225092][ T7534] ? __pfx_kthread+0x10/0x10 [ 648.225121][ T7534] ? rt_spin_unlock+0x150/0x200 [ 648.225158][ T7534] ? rt_spin_unlock+0x161/0x200 [ 648.225187][ T7534] ? __pfx_kthread+0x10/0x10 [ 648.225221][ T7534] ret_from_fork+0x510/0xa50 [ 648.225249][ T7534] ? __pfx_ret_from_fork+0x10/0x10 [ 648.225272][ T7534] ? __switch_to+0xc9e/0x1480 [ 648.225313][ T7534] ? __pfx_kthread+0x10/0x10 [ 648.225347][ T7534] ret_from_fork_asm+0x1a/0x30 [ 648.225404][ T7534] [ 648.226014][ T7534] Kernel Offset: disabled