last executing test programs: 44.068959461s ago: executing program 4 (id=8102): syz_emit_ethernet(0xe, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044804) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX]) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x32, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rxrpc(0x21, 0x2, 0xa) unlink(&(0x7f00000000c0)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00eabb", @ANYRES16=r5, @ANYBLOB="31070400008000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(0x0, &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x3, 0x1, 0x2, 0xb, 0xa, 0x1, 0x1}, @generic={0x0, 0x8, 0x1, 0x8, 0x1}, @generic={0x6, 0x8, 0x6, 0x6a7, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, @jmp={0x5, 0x1, 0x0, 0x0, 0x2, 0x10, 0x10}], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0xfffffffe, 0x4, 0x5, 0x80000000}, 0x10, 0x241ae, r3, 0x7, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x4, 0x5, 0xd, 0x7}, {0x4, 0x1, 0x3, 0x1}, {0x0, 0x5, 0x3, 0x3}, {0x0, 0x3, 0x2, 0xff3d3c9b2f0db}, {0x0, 0x2, 0x1}, {0x2, 0x4, 0xd}, {0x0, 0x1, 0x3, 0x7}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x0, 0x0, 0x9b, 0x0, &(0x7f0000000500)=""/155, 0x41, 0x0, 0xa8, 0xfa, &(0x7f00000005c0)="a4a506800c15568663773450f3af53842ca168f8d5f8aa254b143428b66ea876ef14aace7595e675625b91caca417bca1552ebfa9e261994514ed3392a3d4335d6466a1e25c24ad689357ce746f821df1e17a0484e9a9b3b8faff36d53f827ebeeff491128922013b500d2ff9a3356f194813367d9627463b451fcc6f93d6d36e9347aa617b40ab9de70e355b5763dea28410736f07fd43761f70048c30edca2010f34f8f0c93e27", &(0x7f0000000680)="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", 0x0, 0x0, 0x56f2eeb2}, 0x50) socket(0x8000000010, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002200)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00ed00000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 41.75939801s ago: executing program 0 (id=8106): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000008540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2], 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x20000020) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000004200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000004240)=ANY=[@ANYRESDEC=r1, @ANYRES16=r3, @ANYBLOB="020026bd7000fddbdf2501606300000014000000000c5e000000000000aa04000b001000000008000c000200f09b7d569e5a9aa8e892379b7c3dcd1db8a0fe92ca7b6779b37c38f837f92742faef4e4ca84ce8b01bfee9"], 0x38}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000085c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32=r3, @ANYBLOB=',group_id=', @ANYRES64=r1, @ANYRESOCT=r0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x1b) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9084edf4, 0xcd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0xba) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r6, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$MEMGETBADBLOCK(r6, 0x40084d0b, &(0x7f0000000140)=0x30) syz_fuse_handle_req(r0, &(0x7f00000063c0)="a7ffa00fb7362d7643b5d57b252efa82f0048b50f15e806e5140cd8c68db5a3959b26b42770661873ccd880e952eea780936031a07bdb88a12b719c73ff26b23961bfe71fe9ed7077f1890359617a4b58fb5aa636467bbe5f6598c7d286ad1a39784120d5adcf3532a22486b315ab6ebdac84e85cecca574113f022c33b818b353f90b8da049025ab6e6c364d69588409d14df74744c20c3364d431e8417e781c32d2281e712cfd3ba31d4197a32f8ae189ab04f787f421a7b8573c56df0ee9e8088ffd9b370e1cf78a2fa7adb10b2770d61d471158ed6d72e8f0c0c0e10673894ce9b86c854efa8932534bbabc7b6c3e0a2b1898befeadde5346a4d884c69138ce4c9a69e466c7b7c6fb1711a6ba276778fc735e814679ed1d58418ad2422c216f41cc2d8794614867f1f5840a54c31ffe46af3065a1eb8f3a2cde8381e556d13f82773cd7c72869169a8b9d38a1d8a521a907822fe862a2da9dc6d3cdfe9d41453b4022bb4a2d981767fbb83da01d7e8adb99f2c2bd0822e824129ebc992e4f189edd80179cf07b93ce537ab81dc0d6a08ade45b237a3471706aacfbf9931894ff0b1c744dd71502871c3a5569baf7119bd318b8c493144265e5ada08dc6c54f602a3d866d2ba2875fa5c1d05c0724b7dbd0b033d47ee478d3ec89ec7baa51aaf7a8fe8ec047dafca190f11a334143197bd10aa003180ced26b08cfdc90891d6eb631bb0b1545ce823dea37d13e5c95f226b7a888925e8e5103984b2e01970f0c61069b976adf601187e69034fce51eef9b720c20054694df885345b05927b26044d4fd5ac729cb8d36250da0af4187f2f1fac72c8db880bbbaf9f2c3570c489f32a47ae4f75cae00225029b3662dad99fa4a561ab22f41a4f02e896dd145a8a54ef30a58eb30d4fb690d758d5429c1af4a3f596ba6f226f71a15d1f6ba47328697aab83322afa4c02a601c39faf22ce3e626f843032ce6f8e0444a4260c527b23a92df5ab18bd368bd016085778a08d9ee6f8092be13ce18a8cd97ae80f5b1ec36871fa362e34cb3b38c21f75bc4865896b1d4baf847d2740c0150802b505713bfcb91d70d7d23ec2402abef578202b863bdc9af2cccfe15be94c946cb265515efc1feb6a589d8ae08b1494655727d2c43825f88f4ddb850e258d796b886220897f8075b1a9e88e82b330fc12c9721dd88ed83fc08958d12220ea9c441e81fc49d5bdf3df4357f7bc2dca0acface8545028135c16ee46a0641bd327bef978cef5627d1fa8bfa87339a7438de30f143ff547f58bc446a6b01d9fc9f5ad435594426771720940008b182b74e83df5f68eb9e29caa0a5d58a32970e3e0ad74c37683418d232709b444ee4a871fa5fef5ff34c2d659c62e473f77b4bbe09b3b6a2a7b77e872d8329a79c6c1375a56f67a63cba8c495756aa0a536e733bcb28e514771a6e06a22c58604437b157ec3fac6a14454b57eb0841938236fe1b885bbc88156c3c149c694542f871db9a99b906a40220f2ff3694ed071766977903fb6011e7ac2c6e63f6a4a7d16003fc0bbafa1def29420838ebe960e3f0eb0fa04a3a05e81f33e8a931c727cb0c69efe820d7da367c45d4718c729683141dfaa24409cae64b9e1890a0cef5e1fce1f22f50fe8718616247e73110da1f96d03491f5e36188c451da1fe60ff7a126d79d4eac5c285b4eeda3a4d914cbc3bb757aa58027ee9b90090ec1fd43d5bc92b0c1a42874d631b28a239461b230347d6e16533ff8949ef6568640cd37efdd04e0d912337565ece700da2e1fba10c1b24e1a2ffca1ee3de772bf6bf6fb7a24b38abd36bd55c90aae12a109df0341509881f3c8b1576ea4a724961976ebaa4083a773830254966674fcded2b0376debb6097a2b8f6ae2da9940966229e1a0ca93989ec4d871c8b89970d766bbc928b3d2b094176c020dddbacb1915a61fc584e6acda67325ce26995d8e315663fecd66fc5a0ab0e75fdca087afc7a0b65109f346d544014b1260e689b271d7e692fd83ac488aaa583072f1068cd6275ca08f542a691512927b0ea76584dd2b5632219afd0abdf26bc10c5a72e1ba7da48909e906c226564156cf12cc5da7da6575a1769c52ca13ba5643c598474af9ef8f5cab8b64c475483e7e91e4f12cabb3849b9d9944bad479cc99c640e216e3e287b9378f0c1f98f658d7c57b2135531812e0139f1858472f4cdfd23705521a5135236090a8c43a8015abad21cc0f8fdead3259c41a13739b50c4de4fc2a620c67c3da0f2bbed98325a7ad56d297ed0c34351f4ddf63c7a9fcf8e326a02303bf2c1d60652a9cc3c3d616531902a621574991fc82f2252623ba625ea5ba754c5ab9386ea1fa5f69b1a2881ebcf7b19167127c8736ad614fb03698c23ad70f1dc2263a8fdc36d03394c362206118a1a94be6adf9e05256eb9b3f0fd02e6f018fa9dd3e2e839fb8cca700f29d0b8b9fa81a70cba4ac8b0e666f2efbb89f45667b4cac3947096be48d9fc2cdc5aea16bb5c069088caafd48422ab61cbc3af86ef8daa2d9608166d2e8097fe8088a17a30a7309ec3718e3a652217df12d85667400a9073dc0c1f485be09592670874714c6d3d557dfa41f6dcc4c3ca04111586d8e30ddc7d8067563d4acafa1f35ebf2a3a1c2d298618295bab8b71638f10164e9ee88668f899fb06112d72f79705d7aa0217007ca5e258f34e2b227acd87af2c2d0d019a25940675378aba10e74b849d2573c894fe781c25eed4a48d216f5359db7317dd101fc57249c188ff3243123dbae6eada1d30705e3c35a2912ceb8a2e57b9017b94a6bac989488d98a5a9017477cf96b39de4244ac742a4cafb1807f59b0d3b00000200db1317953d6443b662d4d47c84740b82069a00a6e1de3e6c03d17fd95e5b234c5e7169eba0831488cb246bfccc89413d4609a42a459f2695bf8d4303988c934b591a678e6f2de36fe42a57f32ea785fe95c1636d857ff50bf6a3bfc9a00085e056b2403425be90242318c67a87917c4212ab71663c05f1802d586297c09286ea12db0118fdcb41336b802016979bda1f8f8905eb701b175af95f15693675b07eacab5f75dd4cda48a81a17e0273677453dbeec8707f5d365e6998d4792942a26f5a9147c41e4040740660fb8271aef838d2c36ca6c15d27615ecd7044b4f47dd3412025c05aa2f91bb85a15b0e0e86cbd0ed33aadc4e601e4ddf2107f55588438dfc69dac387f2c9996cad89b236ad73509b59a067783b52d424fb1efc60aaebc5ab5d72c742e6e0055fc82dc33ebd8a27e9a079bbcee2160874f19a1b4028f9f9fd0aa6c7411ab64dd9fe1ea8451791b1c8496336fe7349db30c6913a28037a7c35842133242160b1c70cc8565b0dce3281785ce050a6ff1d0dcb9feb19084f3a2c2b596eb62d948aa0525ecee9862d4c345902367331b53404975dd759806fdd88d22c5c07623c11cd247d38da951e4ae8d7ffc6eea547d6e8f7dfc83dabdb29ea6e8e7a56b4fdaff2b6a6cdbacd75d2712a780b51fa529628fc68a0b115f594aa9f2e5171ed7c782ced53aa3da83b2b5f347d299d594bbeb8973b80a2150bf36ba7549227c2fd43c197b5f67d71be225290f6fc22db5ca50c747a99d20c2fbd121448e2aa8a691dbb0fd52c3cd109180b5dfeafb2dd1547ce6133b279f977036067491f64d0668dd80bb5280f7463b14c91d591df4900514b04fe2eba55e2b4c95d76c78ab4d62ebfad5b1545ba1a148cdc65ff6180254231906b1389975c4f9c6d18e004d9721388fa88292c465e48de5660e8955bed21dda3fadb5224df37b3c2b83019d325ef9c07b6055d48163130e667ac510368dfd196d48dbecaebc08b1d0dbe5702c8509d537f71348fce869b409a947be6d256129a773944a4d050e39a18434c8565d2b63f83f47ad0958eaa861f4978ccd6db9d9623d96aac44d68ad511ca03d60165c6a8ce61f7f742caefe2af5a758da986c1093a5a20a4776736dee2db002a2bc2a4b49b958955894be3dc805eb5209055f4bf4b24640a051b1a5753a8cf4488aae9296f323935da64371b33877f831e35aed0011ab05302602b17555d94a8d27cfed4b734cc2da68e0e79b4ef02ed88fb29de99bbc0217fb5720f93b8e65195850a5f63a9d103bf35f01628e7d21ae1f7151315d84226404b53751db1f35b99b71ffc5c4fe2f3d6a77116f9b6a363be56b63d41ee08d7c44bb562199bcdb1b52fec99ed2f8b8cfd6d38e80d6e65562fc61c3d4e988983b9eaa1f4bf40c2107172b8615950bf71f104a9f5c08b8501c97a6a1406dd74eaae1e50d6e216bba4eea3f00acefe6e78e73dbe8aabf06f4bacea5da6710c0dc3113d297e6d060f633dac4d77c6f517a676f881beea34c552c044bf1d654cab8eea33eb123e024c3198cd43486988ccaf35645f9780e1021b03314214aa11474539360b9bad6b5a6cc6efdd64c67e8c6e85650112138838e14deee1797e9930fbdac8a2575c6f796bfb340b0efad68cc9497b1360af46860b9963e64e01dd9348072fad39259db83898ba02ca4b254ca5d79cdd3916fcfb03ace4cc1e1b1695d5b8aff4f7ee846b79926df4014297a822ec51182b618b2bf2f3e6c047bd66b6d7dc99da51c81247e779a8c0a4566aeed7dc983112dd44acbf324f26a34cbb859ea9a4d76225ea6eaae15572201964259b1bef04c873431a1474c03ad4988db95a49725abc390303379c4a4ddd17b58bdc59bc7db412e8ece1c94036c4b11b99f7f76a829a0236ca3b3586843311e01d410d94c9fa6bb6df230d36536721c4251175b049616184c70380d9ea0086a2089a002928aae612f8f3f397e917bef72303c5cc33e3fd23a254b3f2a37d0ef7eeca37cea532a6118009c1eff356236ed091e463d277097e9b0eb6728d55803b136dac4e4ad0c09520d67e478a03e50b884f1602b43296bb95dd709bb98342e7344c63c729b9e6e161f464bc4c9dbd02c927e86e50bbe457dcb1780e3623e18e6a761dcca00339aa2d29de9ecbe67c98912f13301d5ec4d0903666424b82f33fbf6c362acbd118c95e1cf19792b41e224bf9d6d1412e544104df44515a1804141ab6c7826a681aae5932fdb8779c75913945b6fba13d04d4f96e6471b19025708d8b0ca1504325873893a5af9a9b1096cacb5f6e6bbc11175bbdc70d312255804d1c5f243ae561c0c073fdee705b1c847529c7399785a0e58626a0311fb00cd69da9fc578b2e28c28672a9630008c9ba86d8fe22e0d334f24328c705386cdef00e05f6340b53581b99ae4ff8873766c7804c93b7d9f83c1b01f7b65bac5082717a0db41714d7bacf9ce3cc6205381c83d30f05061e7619505d6d287fbb476449dc0292fbdf00026a5366256e4c380174c671a5baf5c5a0e1d2c5e3d169171bc93e68cbf069244bcfe44d2b325056998915680c3b12aa558442e08ae598d55bb645384aff0cb2a9703408b614a9078ebafbe740a1d4327a5285d2dbce6cce07546915ddf81e8e81a1842bad9b24fe4bab0f273fd403863d842229f917dfb40f4621e6ba6426eeff2b3bd08df1d1d9a01eea869ea9e063e864f86cbe4bcb98009850cee644fdba6e9dd75f76e6f5c0cba6ce85047ee18d54f2fdbbf92da611e8d6fb946db81d4c9a0415405f2a7c5a31040183b64fa56cd82f1f1a783a090de97f619075bc52c01b251ef59faf636b47a5753fc9e7fb01fb6d2450d66fdf14200b4e1addaa38c497a95a1f4d2bc5eea644dbb0767562d87e9d7909d8a2b3cc7314e272cfe09bc66ac1c8510d7de54e129418446b7022ffdfe1ad64d8e4b5a34dcdc5792f25e4f99bc778b79cd77355e814de3d96abbae10a8631bc06fc388a85f93119b3f0a50ddca78c6471a7a4e95698838c45eb56e36f21e7fa7df92e182dfb074551fba52c4f8ba113b18bdbede64b4008c7fb828b2ff40a8031d819d5edcac5a218f9120b124197f61535d8313949de17ca9782028f67fc3bd128771b315921cb3664c217149d86936b93c8c6b8b3a25af2d9643e63e5c1dc4d904cd1ea8e1060b7f125073da8931d08f88515925ea938ca0d4203b5a15bbf26af5f6031e55f6197451623c471dfddb3d678a8ceb6d44c3dbe8d6db6dac22124859894deb45ad1f471c8cae4083bb9026fea2a93f361863aa9e8d7d17cb97eaca9de77bf8c91cc6b8047ddcf7cc569c6ee1cd22710dcca7f4dac0e49e924a127581ee79fb427712965abbd5b5dec571a53344a0f5c6ae6c4b9b655ffbf6d6045dabec0a295014f7caf1fa2b3436f033cce5fc7a14353137064a5fab0926c3c095a5127a43b738b07c4be3bfb63fcb094daefa890e9b21643ed2b8c5d981473c481f3ef85a25fbc1fe91603a41393a9d6f626b2c6408061af49eaffab36b77fab3b47c80cdaaa5cbf29b86369afc64fde2f69ece0c514bf0a98551d7c36055158c49095adf32d8f8dc7b7b0a18cf0d2962c602b07006a53e078d26b16b23dc90b69f8618fca4b41f45afb1761cc2b215b90dfc998e038111199eea0ea0322b3e30b6dd39a0593d7428d69f40ce072491e0005262d24cc6bb45692333af3cdabd9a6024ced752baa74b81233b7a3f871dced46c52c6b749df68c4e2a5ac467c509ce2fa75ef1df2ad760702117b8006aee3b28d154cae96cbfafaeff9450a837e7f2719d8566bc8239656e31c2394a09038ca0494c82691a36b2b5b8b23d1003bcdd657591d1f36606f8fb0823da0c962b796b5a78193e95a766cc85259c1e0192f51e54bdcd85d26d44762a7b4c5a78fb87293e035ce3625841b4e85764200817f80557b7b6772da81c93675f143c2a8730f5d9ef8c1ae8270fca47289dc8c1fb0d37a17438cba0b8b29fe6f89d55995cc420a12522154e1b68896f0d23a868b19862ca47b940f00246911c598d102bac78110022434e5de484911f9568afa8f86d60470b7c9653a0ca7a56b50ac18172524ec0f3b1b16968f225c90e89d51cf765721579774d691fbf573222968d6a24f3e8b3aac07809c4b03841add126ad14bca2d85de69744fd077d7e6c69ba7f25f4c4a8be62313bdfe573b81ae6ea616122644ffd6403828fd2600116ae843a56e12774c20cb8c82fcd4eeab7814a4260ea3a0dff7958ab44b7198fc8849f4adff2bcbf9810d10637034f36cce78853c35cbecd6986d7eb27067db04c5424c4d30790a63169dccb0ad3a8f10f7387f0ac8b108b8c3f482ac14d136e6abc479fc821cffde1f49a7aea93b23b1da01cf0d4a48c3d8bcf7ed467d3cbe30ec37376982b85539f6c685b8867540d425ede78e04d1dcef34fc2cc15ac45329c963b35c55898774775d086dc73259118f2d3dcfb7ab3ce9b4f03b5b45419979539ab20bdd73f0b05b1985f02fe603145554a706592c782c93ea7ba973ea44532102a44bd29d2d00d1a524bab8f4ab8623a0594152841b21dea1cb5f3e2192b6c1358b75ea7e790bb71f1fa1eddfcbad58e638e0876888666a12780389ffe66a2b7fc287d89bb8ed8e8e6184ae3b6add070cc874d4180422644931a6ba535016006f09bd07395fb5fc2a10e9deccf3fed6c57d1a2487d327834dfd3b3f5dbccdb0c09b36a07e58894bad4ef919dc248fa88bdea94d6767dcb67d6f7bf50ce3d8778291887fdd29f8a6f21d7162cbc23473edb9b6e9d733d0a068a00782bdeb3218e8965b9e616fd5b1e37e9dbdff36dd0555826430cfa0ca0131689496c6a2e2e6e9c20911c2be8e0a08d2f2e3dc326cb3d926cc910a186b456a19aa5940ac9ce6580f6f886a2e9c6079c8c4f284e49add1b912b21d60de5ca37df31625e5ffc333cb87e653f93573df4375a819ab27a53130502cc0cd5117f8db11b966002f5162e89871f13a3346deaafc3070e19c37d96510d520620975602dd32fc86223079aeff28c11ea4eb4578072ffdf5d5ff84a6851be44c3935f535520e10dedd5de6196aeb2c9bd4f3f210cffa0f2e0835e254e7a9d9415e501fd6619a6ab1d8acd99d38ddd41860e8eac6e1e0b0e978b150fcbfc6536cb4c16625a58dd93dcf8777bf3ae930f33b496e6c184e4111cde36a97f35f0ca71932c93490936ff4e6e1a17f51058130aec013a8e012cfb9777de4b6f60d51d59a7a86f74f4f2fa20c1fa3ea43a884e6430e32ca239f1f9a15d18acee71440645a63998d3b238846aeadfd9178e7b4a84b8542d2a4a764bb70ef2a710b6f29a1284747794f7d9c1a140514061ee376bdbd312a057de0029a755849bd35e3b3973f371ee99422ae4b623bc521e124ab7f06f23c7bbd9526a80d45d0d2ef51acdc40828c10d7455190ab9635101c6f995d57f05515d73feedc8c35441ffaf254b4023f056b1359f9f69834b5a4dcbf44922fecde815a10d5d48fdfb9a1110df5d93ac5321b6d9b3300ff79205abac600b221b0eb770f835acd3ba64cf4da5f71031bbe966ba858acfedf7ea306ce93de653164df182da96f93848e6d7f289f6ce80c643d8323d61fb291eeff753e76ea7ace416ca469b11af1d77f0c5ca12c7fb7b7e476d3d2a55c0bcc2eba21298575b03a0b47182bf922bf23b30280f5a8b755734cb6ab673b6d069e57d8ed7a1d31e73033501a6b3259ce86c7df3bd2afed8e29029c43afd721ae365bb0592dbe4ee234a0b1e7ad87a793e53f56574c03fab965d0291cac20f486a541828850559140337e77c46b58e0040affa93a12e87c6f6ed77e06306da0f1d1a264cea71905f8e9702ab52f1a6713b915ca06b22ec5642a85efbbb35796f704088db8cad22c9ac4803d394a6a9009008420a6769f1339e817e63e851f62372a22c0b7df07fb46f60dcf6566b886b433c1d38bafa8d53cb5503a41b2985b473f5e2ba55cfdb7cdd1f62b1e63d4bf9864e2ebbe3b92e29e3c3467123243eeea794e3f4746d220ba0125518f2113b72aee37c5ad80352d8fe3033fd7ab9aee08a1c533548577d8651687f496be36f5e583820dcffaccf2cc62b72b9f699ad465ed29b222e35795309d5bcdbfe3cf723780c029976d6d23a846ce2ded0b36cd5540e3d1ce3e01ac463ea7a3cec310dc6475cfb28ef87af7b9887af7c6410873f4091f05c71d89a639a199dcfce6320816491b609ab15bb1452f0859bed8dd66ca4f7f37ac2a5eaecc576600ac51d9ffa33dd5db7d0a76ae6c1c5090147e9cfa3b9f35943c1510fc6a293d2dbd7e74fbee6d6f42baa934bcfd85fc78e2be60ae1fe9e965af4af33a052894d29551876dea27f9ff3cb352d6f292031298ba97d4be11853da6853b44044f28ab76958c102a90c5421aa6b7d63b799791f9e7cd1196a8923d93415f9b5ef4c31b6d811a2d72970e455cf3f15fe4c9540a186cdde987d483f74c45e547c10ecf5c9450838cabe5f986544f620e4c15142e9f653fdb3f653ae2521de31e5db38de758e62ef6f1094363c777f5571f92f5520b0a31177abb4dbc2cab296227edd89462f99ad6f9bbe95a592e1c78f5ffdd8d8cd308e03e72f9758d59003ee6e5e0f007457f704c0aa5d684af2517139d8083adcd465fa5e5bf5d2cd29bb6e1eb9315fc6d5ea0053a4970a725917f6b42a8445d2b1f65cd91d23de9d3ae2ca56eafb2a8fd26746834b4f018de1058648a175086ede87f71f3b5b1ca0edfed9a72d03d5c034aa1d542322bb34598752c1c36663195f7c33a4c507d2221a2fdcd4948fdf7b26e8245577b1ded3c179b50af2f04ce05dd626dd0c2b3a259abbf31dbf5726eec2b764d69c04233df278484f575e18ed73f6e05fa2440cc26701d0f7166a350b31d69c9772ae862884a720161f36592f3d53797b63c98e93e4f5a6da6868b1141ff179bfdc91db6f99ef6c5df1877fefdce00c4236d0c3d2f0c3bb52b09fdc05c463f61ff9b91e3fb7ca884b413cdfb3e12d5b12fdb7415855c6b56bb414f46bda9aad574974e55a6c9553e5ce25a5604e053aa2440118e30cbca20041fa42b903335aee8f16cef4584f35badc86e8b8564f1c3e76b601a768cddafcb8bc4a15fed8cbc46cf33bb40bd4c0aeb03e5bbf9fe86410ad76e41c342039f6a49f3e5a591e631aa8e0a2656dda083cac22bbc57608d6b2ebd2a68e0771cc4e481c4565672c88a66d0ff67f52f9d5135ed8e2d06c1ea88d2a666c76f232cd4aca1eb761ae769fecb3c3fe783fdac96a702608b1dc4b3125bb5be29c223a966c47c60e6ad2048cea5fc988bdb9e3424c1b19ff8ef2a86eb1ef516629c415f04943bacc8828a7ae5bea9c15ca03e5951c95aa962ff3786a49be1eeafc619d95c129b6cb4293504def493a2eb0bdd7bfe4b0e4c5978d424662330c4f97f09f14217f14553f1dbda0e937f188899489b065ee1ab77337172a7a85e7ec5ef836ad93c9dcfb30bf6b0fb69beef10408ea07a304e3891e8bf92717ca4fb0556f79f379e0000521a9904c08a7a7f93d243ad4647aea71e040a5e7703e778ded482830e327c6a29e3ccc8c21f1ed6097939dba7dc3408b13ed5e4bb40189b0e46e2ca1022724a9177a7962dbafd59ac60e450480a13d2806ede22b64e485e608981caf5dea4fa12f9a00a0b8d79a2fb405d745895c94b66c3108d1990599ef1379acf101934208b246578efab6029f58920c5557a75c98408f08f740afe76e8ccbd4dcbb76daa5c7f6900fdcf834477f9391a3a4f772e5f8960ccbb1b8c7ce03b654a2285d71f8e588f6f213040e7bd9875ced05a8ef04222f29ffd7c9fbd4894d5fec7105ba107be73d271433941794297071fec0a990ec6e0a7dfd6ddd3756cace45bbc7f95f53a92950608caf936fc19f85704336e4329019b09b05f9d64b265ebd9375139b8476870d7bd63c8de31d6a108f08dd48fb02d80394d9656e8a732a1d6679fca922b8a73d3dbcb92ecb513072e4390fde9a004293e1dee6483ba92fdf87811550fcc45596fb53e290594b80a605272870c38c9b8e283725d2259da5a1fa1d98b9bf4e98fc09321d5ec04fda761274d0eee4a9612289819b5f471f665ece46c72ee5bb149e6fae57854f4ce17f8c821337b5cb38ead069ba2a0dfb7b05ddc7fd12e72b7b318577f708a0cd424cf0eb8df7b8e1746a283fef87a620c075772cd9cd75ea73efc5d86ee26c821b9bda13f44186e5332e807931bf41aba59bfc243cabe9b7279c9df52e7aa2f6909d90eca5ff9b837ccc479abbfee4ded5e4c48e00d7cd6a81a24a2f8faa4c29411630da8c3e161a5e735c640cea21bcfa65413e63dcff86e1d907adb36d118f66b32bf27313b0ed085782ad36ac98ab6135a49dc94be731b84bc11609cabca69391cfc8270cc13b4bd374338c13738112233431e3b492c579fc15bbc4e04fe8ee20c5e77bd47dc0c859d0775ebe50e764839d9cfe33ca848f0be897c6afefe84c9e65bc38e283da40faa6f7caf6e3299c829f2692b3f09d65589ee640ffb36a8021721ec0debbfcb55a54ff24e80a440f4b0f37430cf26ee403c2ca3c34df4d8d68b5f625d11e25c1e27c81bd4b9dd35cc153d0b3f42e7f198a9e241ad564391e9b849231085da28ef5a05449d0a30078997329d3a8129f81e8a5cef799048dcdda16e3a800bf976666200", 0x2000, &(0x7f000000d0c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="b000"], 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7100030000008900000008000300", @ANYRES32=r10, @ANYBLOB="20001d801c00008006000500c000000005000c000200000005000b0000000000"], 0x3c}}, 0x4) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) write$FUSE_INTERRUPT(r0, &(0x7f00000002c0)={0x10, 0x0, r8}, 0x10) ioctl$KVM_CAP_X86_DISABLE_EXITS(r11, 0x4068aea3, &(0x7f0000000000)) r12 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r12, 0xc100565c, &(0x7f0000000400)={0x100000, 0x1000, 0x1, {0x8, @win={{0x7, 0x7f, 0xffffff7c, 0x4000800}, 0x5, 0xc83, 0x0, 0x9, 0x0, 0x9}}, 0x5}) getdents64(r5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000083c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x4, 0x4c1}, &(0x7f0000008480)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000084c0)=@assoc_value={r13, 0x5}, &(0x7f0000008500)=0x8) sync() 41.758070052s ago: executing program 1 (id=8107): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 41.14923831s ago: executing program 4 (id=8109): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020435531300000000000010902240001000030a00904010002030002000921770002012229000905810340"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="060000000000000002004e25e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e21ac"], 0x20000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010062a74a6467650000100002800c00210098"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010062a74a6467650000100002800c00210098"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00!)'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) munmap$binder(r6, 0x2) (async) munmap$binder(r6, 0x2) munmap$binder(r6, 0x8) 40.512392143s ago: executing program 0 (id=8112): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 40.314511162s ago: executing program 3 (id=8114): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x10, 0x822000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000940)=0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', 0x0, 0x800, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000340)={r1, 0x0, 0x303002, &(0x7f00000001c0)={@align=0x2d, {0x401, 0x3, 0x7, 0x7}}, 0x7fff, &(0x7f0000000280), &(0x7f0000000300)=0x2a}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setfsgid(0x0) 40.312724155s ago: executing program 0 (id=8115): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/79}) syz_usb_connect$cdc_ncm(0x1, 0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000082505a1a44000010203010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391a0000000c241ba10210008500fbff0808241c7f00070100042401"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 39.647612802s ago: executing program 4 (id=8116): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) getrlimit(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x9ea27589817d43c7, 0x74, &(0x7f0000000600)=""/116}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r4, 0x8916, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x10000, 0x14000, {{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2f}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xfffffffffffffeff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4080000}, 0x4004) 39.644080872s ago: executing program 3 (id=8117): r0 = socket(0x2b, 0x1, 0x41) listen(r0, 0x5) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000012c0)) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}}], 0x1, 0x34000, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0xfffe, 0xecdf, 0x0, 0x0, 0xa}, {@in=@private=0xa010101, 0xffffffff, 0x32}, @in=@local, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, {0xfffffffffffffffd, 0x400804, 0x9, 0x292}, {0x1cb00000, 0x1}, 0x0, 0x34ff, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc-serpent-sse2\x00'}}}]}, 0x138}}, 0x44050) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c02000000000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000000a002800aaaaaaaaaa160000"], 0x2c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sched_setattr(r2, &(0x7f00000000c0)={0x38, 0x6, 0x0, 0xffffff0c, 0x81, 0xfffffffffffffac8, 0x4, 0x72, 0x8, 0x91}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2d000000010001", 0x7) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000100)=0x8) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000280)={0x9, 0x6, 0x8, 0x6, 0xfffffffffffffff7, 0x5, 0x6, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000040)=ANY=[@ANYRES32]) 39.49587425s ago: executing program 1 (id=8118): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1dc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x10, 0x822000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000940)=0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000880)={{0xffffffffffffffff, &(0x7f0000000000)='fuse\x00', 0x101000, &(0x7f0000000040)={@align=0x3, {0x2, 0x4, 0x7ff, 0x6}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000240)=0x6}, 0x4, &(0x7f0000000800)=[{0x3, 0xfffffffb, &(0x7f0000000380)='\x00', &(0x7f00000004c0)='<', 0x1, 0x1a}, {0x3, 0x100, &(0x7f0000000500)='syz1\x00', &(0x7f0000000540)="ae450950fd05d39976dae1a75f55c54e07b451858fd275b2510d648703709c67182dcc282c3adf4273ca4b4886c7dc04dd8e456c22768e88cc970f28dac3c98a8c50c2f8155627041c6e7bbf205a85cab47e1c89f1ec3310cfc44193b8f7f7f4af0a86b275b357063783d7ff96684d734dcbdfed057691d9964b6183903081a1bf75aa8670d79f061b05ce71d4018e32d7c3326aa75c", 0x96, 0x20}, {0x2, 0x40, &(0x7f0000000600)='/dev/cpu/#/msr\x00', &(0x7f0000000640)="5059905c7cc6721fc066e11394dc51562e2193dd27eb79f76315cdcc148f9c650abe56866ee64b41e391bd9878e1d76302d5966a3b0d6dcc37bc57c72c87df7770d61697b72c16d5b706b80e734d323e194282b4a5c2df9b4f2a4b30e87dbd95a961d23f614d64c3f372f7d559785b3be75ab34f37cccfc2f1f9533de779e43a65a6726edc2125e41f9d5d53274557c754663179cf678cb98658dafbbcb27414c7a6bfcfb4f16d27f9b2d6", 0xab}, {0x2, 0xe08a, &(0x7f0000000700)='^\x00', &(0x7f0000000740)="b68b8e0bf205c8375dc19fd7e5a81a54fd271fe36df776d45a662e63102a45aac86f677e37a1b7a20cac2b1c6c19e89d2b8668c623fe94bc5bed464fd86a49a94058e856b1a6d09cb7299e86c3190be309fb731bb4d5d874e7cbd7fd79d6df37ef6bc7062910dfef613e10c856ebc87a29c8072b4d7e3ffb53ad42b35e17483650f9a25e6f99e28c6d910872ce4f366d1cb8eec5c59267cb57acb3a5fed4226be806d1a0cdb8ba1c84184b45e89aa7c899148ec5af54b4e64271", 0xba, 0x38}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', 0x0, 0x800, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000340)={r2, &(0x7f00000000c0)='syz1\x00', 0x303002, &(0x7f00000001c0)={@align=0x2d, {0x401, 0x3, 0x7, 0x7}}, 0x7fff, &(0x7f0000000280), &(0x7f0000000300)=0x2a}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setfsgid(0x0) 38.670949751s ago: executing program 3 (id=8119): socket(0x10, 0x80002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syz_tun\x00', 0x8000}) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0xd99, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0xec, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x2, 0x400, 0x3, 0x253, 0x0, r3}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x10, 0x1000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacd, 0x20000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81f70, 0x2, 0x1, 0x1aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff0f, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x8007) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 37.475246659s ago: executing program 1 (id=8120): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000900), 0x10, 0x822000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000940)=0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000880)={{0xffffffffffffffff, &(0x7f0000000000)='fuse\x00', 0x101000, &(0x7f0000000040)={@align=0x3, {0x2, 0x4, 0x7ff, 0x6}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000240)=0x6}, 0x4, &(0x7f0000000800)=[{0x3, 0xfffffffb, &(0x7f0000000380)='\x00', &(0x7f00000004c0)='<', 0x1, 0x1a}, {0x3, 0x100, &(0x7f0000000500)='syz1\x00', &(0x7f0000000540)="ae450950fd05d39976dae1a75f55c54e07b451858fd275b2510d648703709c67182dcc282c3adf4273ca4b4886c7dc04dd8e456c22768e88cc970f28dac3c98a8c50c2f8155627041c6e7bbf205a85cab47e1c89f1ec3310cfc44193b8f7f7f4af0a86b275b357063783d7ff96684d734dcbdfed057691d9964b6183903081a1bf75aa8670d79f061b05ce71d4018e32d7c3326aa75c", 0x96, 0x20}, {0x2, 0x40, &(0x7f0000000600)='/dev/cpu/#/msr\x00', &(0x7f0000000640)="5059905c7cc6721fc066e11394dc51562e2193dd27eb79f76315cdcc148f9c650abe56866ee64b41e391bd9878e1d76302d5966a3b0d6dcc37bc57c72c87df7770d61697b72c16d5b706b80e734d323e194282b4a5c2df9b4f2a4b30e87dbd95a961d23f614d64c3f372f7d559785b3be75ab34f37cccfc2f1f9533de779e43a65a6726edc2125e41f9d5d53274557c754663179cf678cb98658dafbbcb27414c7a6bfcfb4f1", 0xa6}, {0x2, 0xe08a, &(0x7f0000000700)='^\x00', &(0x7f0000000740)="b68b8e0bf205c8375dc19fd7e5a81a54fd271fe36df776d45a662e63102a45aac86f677e37a1b7a20cac2b1c6c19e89d2b8668c623fe94bc5bed464fd86a49a94058e856b1a6d09cb7299e86c3190be309fb731bb4d5d874e7cbd7fd79d6df37ef6bc7062910dfef613e10c856ebc87a29c8072b4d7e3ffb53ad42b35e17483650f9a25e6f99e28c6d910872ce4f366d1cb8eec5c59267cb57acb3a5fed4226be806d1a0cdb8ba1c84184b45e89aa7c899148ec5af54b4e64271", 0xba, 0x38}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', 0x0, 0x800, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000340)={r2, &(0x7f00000000c0)='syz1\x00', 0x303002, &(0x7f00000001c0)={@align=0x2d, {0x401, 0x3, 0x7, 0x7}}, 0x7fff, &(0x7f0000000280), &(0x7f0000000300)=0x2a}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setfsgid(0x0) 36.205115388s ago: executing program 0 (id=8121): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r4, &(0x7f0000000580)=""/174, 0xff56) 35.104584852s ago: executing program 1 (id=8122): syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x82}, &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 35.043432019s ago: executing program 0 (id=8123): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) syz_usb_connect$uac3(0x4, 0x0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x7ffffffe}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) bind$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000580)) mq_unlink(&(0x7f0000000280)='fd/3\x00') r4 = syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x9100}, @void, @mpls={[{0xffff8, 0x0, 0x1}, {0x5}, {0x0, 0x0, 0x1}], @generic="f2f9688354715e4b133a965e8866073027dba182610b9e1a03f40b3730e8be5d9db4cea499cd9c977b902a86d7fe256f8ae79c9e734a78048f9feae7ddfbb1b0a4f82580f7ecf1049bb0d846db8f665e2d209884e03df3fdb15565f13523f46ca7fda99b524d7aea8c7c73763874a3cb13ef609f9e283a9f69e1465539041104e2681d44"}}, 0x94) io_submit(r5, 0x0, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x40c01) writev(r6, 0x0, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_usb_connect$uac3(0x1, 0x102, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x499, 0x105a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x3, 0x1, 0x8, 0x70, 0x3, {0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x12c, 0xfd, 0x7}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xd, 0x4, 0x8, 0x5, "ed74ee6f7a73d6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa3, 0x1, 0x49, {0xa, 0x25, 0x25, 0x6, 0x0, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x1, 0x6, "1454"}, @as_header={0x17, 0x24, 0x1, 0x9, 0x5, 0x1, 0x5, 0x14, 0x68, 0x8, 0x3}, @as_header={0x17, 0x24, 0x1, 0x8, 0x9, 0xaca, 0x0, 0xe5, 0x3, 0x6, 0x6}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x5b, 0x2, "", '$'}, @as_header={0x17, 0x24, 0x1, 0xd, 0x4, 0x6, 0x4, 0x1, 0xff, 0x0, 0x7}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0xb, 0x81, "a79780bcb9d4a9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x6, 0xb, {0xa, 0x25, 0x25, 0x0, 0x6, 0x8}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x50, 0x6f, 0x5, 0x6, 0x10, 0xfb}, 0xc1, &(0x7f00000002c0)={0x5, 0xf, 0xc1, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0xf2, 0x4, 0x2, 0xf0f, 0xa, [0xc000, 0xff3f00, 0xffc0c0, 0x0]}, @generic={0x9d, 0x10, 0x1, "2927be8b56d4134507fcc68d70ae3ca051a7f8c2fd610698c31d51eebbd546ecaf5f29aff411ac813953747a7cf17ef2c9745bbe8b3bf83d0a1cc59bf7b96e82be12f48b148e0e5f9ccddf337a846050326be5050c381a460fb509a68c7c463b5c928794a6ccc968245a3e7f6514722ccfd867ec86bfb5a7de60e4feae6af62f484f522783370258107357013223219a0b6ae1c53166dcc8507c"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x95, &(0x7f00000005c0)=@string={0x95, 0x3, "eaf0ab9553d40fba43c4608fa0f004e2b002dbffcc83335014c6e655bfa9a063c5ad3b984e9b5399519144a88bd7b8279386107b2265f1f655315ded04e0518f55d2f9b1bbc5482f88a96063d6cd0be23fa0dade5988f7a0024722f54844bfafbb53f462145132c5028dee75d135d4285103e8b7689d230ec082c62ad5e9cadb51170b1b7e2606f9b772f85770c3296ee6f621"}}, {0xb2, &(0x7f0000000680)=@string={0xb2, 0x3, "b027416c2bbcd91a4943f65fd003aaf2601d55fc20a1affab9d8af5401f3a760d0d3519c331c445b9970c3d1760a31d66c5ffa82b5d80ac25d420449b78c21722ab60afc931715091691a85bc2fe4b5dcb00b1bbe527be053426a9e075d89abfb7cfbf6c9ad046bd1f838d07d892c76eb656ca205d33883099189df726355f59f9ac722d91c95a310509811a416631be5d4dae0de0f557a61b062949561f9d16c2ec8643df2919610045978dd46a11e8"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x459}}]}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0) 35.028602808s ago: executing program 2 (id=8124): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff000000000000d74c1224000000000000020000000000000000ca0829c0e01b8ce487bb7d6ea9010000000000000300000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000500000000000000000000ffffff7f580000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="2c7f3a6fc245d681b084e71bc56b18ce046e3a78ede7077c0fa7890497e6e51fd41654be1eb9c2d19317839140b4519f3e8565dc8567eb4b60ef31856b8e5102bce08854a96fa59e2f9514cc941a2e3504fc642f22ba91631cb35ba6f5efaa8802c2daedb17217aa436fd3590f633dec00a56bca002732e08f28d42af0e9bb20e30a34ffedf9471ab60e2f7648d568edb191c6732ecf6704e27e979602663071244e9155fb4408944b5e4a60149debcab2f2e13b8200e917010b4f2dc8ea98d45a77ef00daec0f4852d2ea050606cae921869f9c5f6e5eeb4b1e83ab8bb7b28a69abd09e9221a22bab9f4be89261775b6932c5cb364895849722c4b46ed80289a881638b763d84ce5f70509a47f08c4f20e02119d15f1d85ac57c9ed6fb042fcca5cfac8fa563254ba5d093ee77d00ba8a73e328777d8b4e8bfc298e2d51ad63d8c546480093883aece2e0692c240f45b6771adb53c79731488afbf6231364c546daf3f55c48c79412c1b2c7b2170e29c514046d095e5fcaa7bf5d18d06ee00b067a23f8287929f977e9740469f479103d44df9368f5961998829cb66cf61ed458b1a55d3328cb757894d3202e886645122d995d3cd2c30c47ff46897cb880cd1409026cee957dbc154665664cfb725eef87cc39992dcc7b740693050e32398c91f1cd13a9fe7ef5268e8602149275c512a2aafcb4e9b3d484f7814516c569299b9b81a02facf43c0c5753b3000fb68f29c88d1e920c26f9ca0c002a20fe64857a025b249cebef97915dd708f9006cde6a7dab39422cf537ff9ef14802526a70bf477504c3d1059a75d8eb5378528c5edaaa096019bfe89cf9ed8b9aded0d93bc5f0e6dc21294948b630a5c1613ce168338152e1dc63c4d63b9bc64aad9836e24019d32327cb30f3e22a509dcd210d1e906b57a96013c589e8a96edf92baf736f0c69988030d93c5afac4f31d09a2b23d0bde1c818c58ce828d33bc810d8116807ec1a4acf537c077b1a5956edb9a581737fd3039420750ce4ea71564f071b55682487ba33e1478289a37cdcda771feb1d5864fce210036174bd24896844049a13a4f8a540bd7dfe32cf5896e2018f1b1b7dd603a019c3f5485c851b9e98e3110719c9680ba15578cbb5120730ebe8860b199eba93fbd63bb5150963bfac8bd5893a1b3d5ae457a1d74a8684aa7aaed4a28413ab4d59559cbd3a8c592c7bdb34e03e36809d9d8e470d4a88d38a6b1ffa1be60ab73c3eaef6a07f1d1572a438acc52e4a4d370eb87f3445daadc7ae52c15523414aa0b21abbef0bb97eee7b84e5e4d6b4573ce84eb16cc9139a03a100adad0aa2ec509b3fdc50aaa37244346071fdc3b23d10df5a9eaadb9aede01e02d67d0b5924a92f1d24c6d83329c4cec5abfc9678fb7dbd1aedf558eeda4bc917599948b8efafc9fbe0052559e9d2f94b779dc3b59825ae867bf647de5211ce8916c8ac01347804c9c5fe7958d44e63cea3241eeac5981ed5d93cadc2d21610f7d398d4526395d71cc97e5fbb20396a777977d92c47b912f0fcc93c171df535729e783337d0260db9db9959909c4913a3496f23244258419562f410ee8d68e30b05fd6d5cc88dc39659540d74a9d1eff09afc760ba6a32bd6405377881716de82a22970678c792d46b71e268ddcff321e1109cb27051ca54d9093da5e32d17bda5f90ee37cd172585489ff764f16adddcc59e94e7c3159ae4f60cf66c05af269d93f350a58ea0d5b6963a70264886170142f0502e81f0d922004f1776014ad2ed56175340d80f424702966438809542ff082033d1bcfd428fab8d54572a84fd1c1b357e8bce5db197af4f3110ef2b23379103e3f7d188f50c45e057cf468ef3e44123f7227ee60e2bbac3ae0311d9326660f8208e8544dc5aa66cfb3b9598585594d1dbd60f58bc7364baedc58062fad0854370d9788da40cebabf1ef729ed92ebfc74627c55c1b37ddbe7a2c8c254cf4121fc6d6686ae23c620e6615a594b975fcb49a319ea27a668c555dda48c4a1b40bdd45adc170d0cf1e02a5aa3856ad06c1951c77745e72420aca20348aadacb0ba9dc66ed46aa56c939228cbee5c8ad7f7aca94c2302c4908476290bdea9e7d262c23d9ddd9d5855eadb151eedf6d8d95766319bcf330a94110b0895657dcfb7d12dcbab7cc15df4b3cca9ff3b2295f0ad13c21f22573d1fdf5630c79b5fe46f1adfe7bb9cadb850418aea1ff10e2df9b49c5d07a000a619d21e13809414549ee0d89cf39f3c00fc2113b2884edbf18b00a8b1103d4f40bd5fccc6e50d8ee3d0f2588774fbbdde3869ac9940d74feb11983244a4517d57690a6503c63ed56d7d52ddb10bc0e331f4738b804c429d1c208de672296b3f87acbac1c9874e0f0b33edd5e1e2ebb0927730c86d7ad07e36402c3f1515d4cf29ac68789242f44bfaf775e5ba5fcfb6f4d4371ab8ad9d6eb8b2ae27fa8ffc9801fec0a107d19ddd4c25d36eb750ef4ed805e4fbff4122bc2b8afcd329c9170ae410731169f11e2015e9e2228d37b775809a28ec6a3b67e0572f47bf6498c2a147a594ab309b6a18ff5b8f41fa8535bc3b342bd5c23576c2fc78626a84765c71644e8bb2b033a5080f70ea05cbdef77922a668ea9415ca6602aab534187402e2840393854b331e91dbf9ac337a6d0d80deeb4ab423f0690babfe0571e355d2ac548d889abc896cfb867c147b29162d47899c4961354a5531baafa04aff30f1ce0eecb8218e922575037c19ad74f76e489a2d18b6fc5f1fa765a005c9acf03aa723f7321e8eedddcb4ebc839c188da378dc15575a6804e0cd79b9bfbc0c7fbbeaedd292b14644d3e962cad174fd62f9ded4630d27b6ad66575349d96ea055f26ab5645a41d64706c47036674180ea39e8d9031218bba148cc26d77fff99029629b88a644821f5e8149011cc0e2e3803680eda38bc771ff7f5eff707388d1d87f94cbfaa55e1a0de5e945f3aa0086114b5c64f29a0d09e2a7de267d61ba09b11020e34b17180f9929a1dd3d781df95365fd638cf3d858755b481880c6e529cc44b9fbd417a7cbf4f4e7bc5deed2c7f038afd951872baad9799f53b197182c917d3605cbb5de2c95fa9d09b883c3d9f6cf1cb30ff6aaadd6e17010325cabdb247af05faf9df9b0aee027857f88c3da7ad19e08da3cb5f663cc9dce6eec8416a0bfbe2e77a5b20a6da4e4acc9670c7cc63eddf615d13fd89e2f00aefb1439e69a2818b8f24d7ae04bc718a401fba508b0685e1e52dc7bca6c53c049d757d5755ba6394427ba45bafec43c39cbc3a5f68b88afdefa51df6be63a0c63f39c69e2ad10567cf7b408e15fd441ac365be897d6b60fe30bba997045c0ae891326369206cf9c53a609292eebe3f67c58964535710929c37211cade7dae9c965933b1aa2377d056ae400d8ef9f540f11c907f48858007fcb9303b0f2814cc6dd30636389f167d88847c9a55fb6a70adf41e54f7a433a79c9464f72ad2f615386cfa0b14081f1f55eb54b9dc96f4910ad369f37cb33259a4fae1dcf051699017ec8dce20f5401a768275f54cb61c346f06217de6eb195982b49b0a576d894fdeb1796a1b99b72d99783eca623fee56d239c263b0db23caea3462136cdac22128f0acbab8b332a7c1303bbb5997114f987398e0afbce9678ec9ce3a93b7d66fc8359c9ba1b53a65d90a1eb62caa8c56b98b337289809a56874f631edf56c508ef43106147be721c4597291f19dc8cd4150d2b34ea30846fcd8531b34dbbae516e7c42366e980c91d0180421195fb6bfb9574c2741d0a45583e275b1fd0e48f4b164957247b81a5c0292075a38f5016ab017d39c5783eb8b602281867cfdd980ee1fbe181617c526f2b3bc64905474d352b07ae36e89f5829c49b3bd2f27df0d11d1b893cfc16d2e3dcca2adc1f54915fdf6bf55be5995197bfdae10dec6556ff5f61e5e1f64112f153892b79051fa92f852854360eab66a2d9012eca143affe992ed5ad883bcb736a883e12c25d025790a1c477258a413b71fdf6321f2624efbe74f7bf816f6b07ef348bc8a8389c73293f320951d093307baa49f7544bab3b51cdc52a0cb1994358d4ca436aa66f791adae81921a01c807f1212e38b7dacc6ab7cd2a0809069c88787daecb201e7e82d321248c1f747eb9c31f76017436c2aa345c13ed45227214d37eb6701c15ff52b1d5d3d490dc80d67bd3b779009939a7dd65e759317103f21695ba06260f455d98454e3992f419899047e8ae24ef10b3c96621506d65a5c20dc5732a71478c019b240f1194fc959d77df7a1d5d6b1b6f8f43cf7e4d4d72dadf888041c3936f354045b15f2530bbdc38a2fbd8a966732ffe26d994b7ffa0c558259ff7395e4bad1f3225250ba85707e5c653e742bed1a342e6fe56c75a4c7cdf7f342e83b6a83e5dff2ee9aaab8edcc7a3ee33631887b2492995da3190e3ca8ba74ac2732a27d6524218605207c8387baf8372e3cc79879b78590dc5447ddc0aadd6c7aacbd354a445d826d6a07f89245c26ea48871a01dc9cdb40e0c6d20e5aae8141aa3aa15b5e6c85abf6eb8be70b056cabdd6da3f383b8e94fbbb1a0d9480dc55542cedb897a90b48a61776ddc4532c995c10c262c22bbac38ba5b111a09d3587ea98feaa6288bdb3f5bb3bee3ea69e4440f0192a34bf3498b933abdbfbeec830a6e74171cedc90847bc05047402f7f0501e5ca2503022c613dc779fe618ffec011ff69b9e37ad5cc2340f28656093f792742a3069c8a96e213cde8c33d110a2723bd41db10e3842e4f019f10b56c18d2093d9b508a043e1242bbc9de165f21df3530c470cda9e60a3859833bcccb9715ffd7313bac4ac1b9c1d0a3e71bb5ddba842084683a3e2ebb2b1d9fc9dbb6ecfc92af8c7bba41f3eee1c861e73d1e1e6aa7310b9adf5fc32f94913ce8cb2f924c6fb5df0be37b10d50c58b201833b03c1712d4fe50a2054a045084b892fb77457d2f0e399256a599bd91feffe659f3feeab33f8ffa4e4747ccad3814d43980d5cdb46b3a1f033b782162cdc89162a1d901590f5344781ec7d96713103893766684a4a71bf482d4223ab8c0f71b09bdfe176063ba3a967f5b5907f501302d00ad10f030aa640559feca28d9d2362ad4be69d9012ccb8ed8bb031ed27c03134c2e00de5743adf4deb78f3162f3d194d70250b4020ff64d52a30755e699d58460cac659c63c4633b43317a2265d8be16bb1abbe492033ede9d12744741124370e441e6614ab896aa239b30cfe55db1cf09c527fd23725bbd209e89aab62e517bf1449c2fbc203d78ad763892cdd5934fdbc97f023334201501260588ec39bc7b6231fe38b5b9ac8fc121049cd61c33fd23ff0480363ddd82fcb6f5d118724427fde4671cd416b96298727927f476e83bbc17f0856c7988b88e76f0cedb5d397ce4cb76efc02d7fc626e838b08ed594659cba8537f319585365f83b1269c3d4dd253bf238690dcf542b715b419100b03857f57a0dad7d2f0e099597de6bdbd9f0e18ce6a6ca478bfd7644e3ddb913bef96569c74f5733176fd25749436d6f6c8852821ad5653401814657f7ff5ccb1d47161eabdf56573f38f766827cb8bbd1fd9fd26d5eeb2e9dc5c0b0e05d0a8e335da8180f384c6bac1ad872accfe09ac9ca9102f2c35dad7689cf734a5378dc8d834b267560a089da2372d5cfbbce9aa13a55dba0b03def8ee1dec2f6a97ff7ff9a35e65272a0fff7db3aec4e9456b1d310f9b69e910be07fd161de8f67b845805282a51572a7b3668c923d03a600cfa68a881bddcf814ff4a98d9adfa2d06e883d3e65f8b6d4ca5dc4667be08449be9d08cd6fbb78c11873b1ef3f081b10cf6314bbd06ffb380df233d0e644dc8ee498bd95333c2daf9db0e6801fb274577205e791071debdb01d9786b1cc624e1425b1561afb438feaf5069937de348c51e0b4c79c88856791e9bf736d6c748025f9b28182521b67596acdf15a9e41fa02b592de42d72702ba41c1976029e082d4bb2f63da60d73732bb98783db88cc0d09e849ffac5323b2b28290ba34d1a3e0c1228a2fb0c2e92503b51d54fd0825948ca15c5511b032c36cce2c04431a47cbc378e3ec1c57ad3b37aa2b667bbc23f21880dce621a3b203579da06ffb79359619b181a72ed4d192e52c13f2dacfc18ba40f7254071e1103a164f5cf8323bbec9cd9fa6f2c9eae70715a1ef57b18c6908dabb0f7c1efe1a6ae9b6068e510209d54f760f922ed4401f1709ab65a1e4953772054d585b8a8a738463f6d70ee9dc180feeab307e6ee094ad80050a3dd450a75a7e7dff6e7a74256f2b651ce905d1c99eb30786c00e1544872b76892286848b297f31d8222cf23a4a4a664bd784ffb7a2c3abadac43cc7a791926e59e0471bdc45186ff4f564b68a9b8beedd2ef63b79823acc0a81c867b443d8f8a2242e6efe1838a8db801930644cbc73d769c0e1668a413eb2609b6151329edce4a024c5ff11110beb54a408e752729e033baccecbd321dfd8e4f16f79d16d13aa4ef212139d0cb81c8f755b6d189ef9c2869e5c2cee655df4b75c00828333c8b62c93b3ec270fe0c1af3fae784c950b441f6f78639ea5678652fbd216700d4ee85cd8662db78a061e959507787e12c7ba002f08fa01a860b34549e89bd1d3da3d23befc59ce2d50abcecba8671f4e8c312816f3977e65479b6fa8cfc618e1f569e9a12c8faea700e86748ff468c43adbd7ea74ce1702d2659bfc26ce49b24c62731dfc1f161bd31d8b6af4ea1100caf248ec18976f1a6c8143df40416e42ef9d225e40436b5fbf34450fad6f3bb8abfcffa367e0a16305dda8205bfdd33625667f709ec3a947e6ea1329c4f7d7aa8917aeccd6078e54ec7196ec7dfb27ee64e26df48a6a705c2ce330ca7b3f21a9ba1f55e2fc334adccbd7b05b489008a6d8c01f81b2b0d8933770e277ab8ceae9776e30df8573cc0032c487eea774893b300b7680188093074c71b4856436fb6dff8c82de2e227af5ea8dae0387a239c70ed977b9bc3087c55af8ec448eb4d819156fde9104bc6443d49ef5a4f3cf27614b99507c894af487637377d06476b3671c7158a870613e0a7d9ee3c693a7fd132adcc06c22e6d4655a2eef2570ab323f8a5a4b50360b0ec14c528b6cffa26b160a07c798947315ec19dafcb805b06dd45fd9a2f328dff773e680435b53349bb241cd82842f915fd23b27099b5ba5483a81fdea7f28408654f4932edfa33d10fd90281b208a9a5915543bc7e15427b4e5db36d1d1ab238e1c1cd5ffb646bf7cb033dd613bd2ddb6d56983d943618c5bd0e44f5c2d981b54ec7e5e7a988dbeb6d8b7c2707c3e7685ddbfe80fc77c1d9cb31c63c5436cd5b2b105dbc1cb7d024dcda8a47ba30068f24677b38503ba582c286437435d7b8a16dca4a56dad4db7e715a578391acfc62d6350ef92ef8b789877158c904803c3354affc8a235f2cc768856a13edf0a4cd9de6b67f7333e1b882a8ecadeb0fbc2005a708f838daf2dc86fe35d953a15d2ede3cc093e45f2719653da1d8936d10c596a66cfd588b5663e8c2afe73b5bc23c967826cf4d24fbbf9d68d18b8f65347933238d7242f69a458959cf51ae79f3f5c5a7180fe23cab53edbf0d81534b7f9b5c697981a0822c36aa483fd95111417834e5062e4ac25817727ac3380c91c7440bcb212a4354035c3813664c0fbf042623bd791873e90646940ef658f4784cdcb714e55d48cc3a30b0195895850aedc32df9435a53c0a9fab07ecfd8778d64b44be1d270fce94c2ff04e984b9f50d541e4d4d871d193a37a05f83d557be8d9cc66027d7dd3a6315b3c9838c0da8c897ca81bcb44e076bee3a7614d9806d018541c46c196b7fd677e2960306849be082875b535dd411428847dddfc2ee9af77a16c282c1ad32151ad2e2ec2a9a1281c593bddddda03afe69cd5bfd83a6e416fa2d47066533877a4dcf24b24d84dadd27acee6127fd94db9be4e3efe74650f2ad01a9adfcecfdc535cc48e3b770a9a8cde6cea193501fb89097c97d25f1bdf00c8b69ce94bd38e1c133b9f52fb8b05a7c477ce4bcaeffda896f457e21e4e93c779657cf05712a7ca161f9680a8619e1dee220ad153729b47789e737675a04733cf94fb494ecebfc8750dfe44e3959558d21ae42f76b705bf092e45445b2521162409cacc720aad8f00f5821f452953512798548369f5a5700c8d02d49cf797e7a48d05c7d7fcc09b9bbe21a907c81d5f4cbb978f21d25d802a047cd46640025f75f2c01c10a21c92a9dec5618dcbd6025dd67b215b038aaae91e76f7c729dd5b61092858013930675f124fc3c62b130f0d898affd9972a202785def90fe7f9ddd821c7de4b5acc2a30bc74085225c23e091cdb2ec42df6f5c88a6666ced41b601374c9e761c0686f71cc1c8f0daade0ba730dd6c2670df4db97c1d1ad250bf7eeaf7f5309ec18a4331e0c3a9808832898d208d7cd293bdfbb7c51d17e3f3d1397a579b8c81e5aec1e1b0ce4cd796f1cf68a49b19841126c73affc13641756cd954ad3c0e62caca61e71c9491441a294739e172d3306b00e4230febdb13bd7630184c8db1dc363fe62015e5985997d56b059dd0602b98a6bb4c0a8e0a10853cc19b2e9e187c0b2e8d70789cb863c71544445acb31edb4459698a21c1aed76a592786053f904f144d5e7715737c253a34a038cc47d4877f8140eb06fd7da9633772b445b21a7c6fe985997b64732bdf022538d57952f6f7340981ea8a2e1f19d639a3138e5f1e58f9413e74d1017f6f0649be152a3fb01a6f53521a446fd5f1a70d0279730a4ae15bc300490f55880232a3dc10a6519dc7b489160ef480e8fb3029428005c4cbee70ac0360094228e70afa66460d09e8d6ea83e89932d58a6a7ba76059de6ed122d3a02ca42bcb1572d214112e906ee607351663efea2dfd7d1a2bcb6d1d9f5d8351703b990944ca1db5452132de124677da884939c6b4890cb94f000d71f2edb511bb94a4f61afb5ee1edc7f4e14cf81ca27bbc5bcf7dd84dd495e0f174d3c9b43469c1ab1514430d7dd3adce3bdfeaa714162ea45e43f6a3b57d719449c7a191383d23069779fe7e57032c2d37d04054728acc67c2c87351d7615239978373bf22d2f5d70366eb7f3fb4a155293f98c9078b28aef1449e552616dc44963dd2b79061784f57a72105e180a6b2770c7cede4d321efda0dd526e0b5c05af55bfe606abf51569316dc0bdbc2f6f46c47a33b4bf9536acdf783dee9424605bd290f6ece0745b0890d836b24efb5361c457cc5fe6a61fe5251d60c60819365377c878a3a53229e88f3b02616ed33a23b46da3d3ecec20d174981ddb45bbfdafafc6d3296f6952e063f24a5024499b1a6b2045a29c1b8a7090e70c9f32bc187da0df89e3a1445057010206dc172ad0e247a84d8f665687f5c50eba70e019b88ebff42e9091675882af7c04c540e5b779603510d46f8e504a8a0cdcb9709ec0db4f882292c791398eefe3ac8951c0e055872c8cd29acf3b785dbd145a7c5b9e1e57853e6287ea09c2a167fd3f55ee323191dbc54f77c6875cd000a587896c658ccf47c66727d4e866206edd84b198a39adec533369ebaadb85b230b3457ed685548aa09c7c8a6e256b4c668a27a85871456e447fc221228a205ffe2b78276928416626d788feb47054db5409b03d923ab7d5443b135161171f70eee14f596d386707354be9422fcc4f3f318cd81ba2cce3e3d357b67e8fc70490a9a04d639d772077d5d8fb5665e4721e8142de055952f6c0152eb59d042f336e8e3b988de0cbad82fed64932fe71c3276ea1ec3034799b32761c71534f3b3db4037a9c541ccc6984b963c8da9cdc1ea4feaeb95ffece5aac1424a4e9d5e215c74c0f5d760e82d92126fc36eb5809ccc9e84e185494f5c0d01f68fc5623fedf20ba355166f22deabaaff5911b82ffefcb7e625ba4c3fd280d49eff03fe4114ed658c43a9d5321bd20ab75055fc3ae4270326f67e6d4ffc4ec54a727a5385f690aa18ca103edeeaf1725d4e13a7079314165e0ab1ed9e035bd530aaaaaee8f7e2a0134be70988795b535aefa64a8f52efb7ccaa3464dd9800a4281443dadfcc3d31d1acf1e205ff6f351a15efb2f19d587fbce90029ab9bc9d3dd3425c54b836492ae2c3726b91ce7e4b5082d83c8c22e394a529cb301c1288c03da50b3f16bb450522fcac0a2e7508640d130682557a615906be3506c27e6edfe2248182a5eb8f6df2da7be7d8db534b4f39e9ef46f336340e820a8433fd5df91c629e6bb459b770f750b3dd80f402b9297e72df4ef5a06d0e43acde89303cc7f5ed771f2b9fbc97166c48b277f6aa37766903d7d210899eede048a3ab9485edd521f917488913b5da3521c7b97717d27c26c7416276e9de97ea8427060c6c6c1d5049af3d793c99dd767177a6d5b123c688f93050956b024d4d49aa4573e9e99f9aa5402da85eafc14979cba26420a6bf0bb2621948295d45c3279065cd3a7313c280864f78d4b274f5f92adb20e374c6d2f7cda8938a52da1f56ac226612b95ea1e4ef5bfd11c5e3fe9604972447d3aa7fd4d78f56ecd2dd3d9f79ee12485f1b8ba3cd86e62402a76a5cad273a5446da398a66f4c36cd14bf834cdde99f18201ed3d1922b48171cc9b62d632b5fb34424e610f2fdcc8595d28842d78b26b1f2a7dcdad1c02f91a09626079470eea9f90d08a543ecf9e6b50756a160d240bcfdc5f3ee6ed995c98fb64efca7dcdba8223c07902e3117161ce2ec916888a9780cfd34ac52083301e30fdddb111c1bb61fe38d3489f09f89ef5823a6fa0b41ea013056c0a7f27ed2f3deba06b68661f5eeffe5d53829edace17a81d788f8eb8c7ce644312cc23e9b6ff48b0153f7df30f544e33f9b791ddb45e93cfda5f9874ee1e70c0864cd295be114ab8dd42d89cc1b4c34ad91d5779dc68294c7085a166c917e72cd09b637307a1fc5efe6fe163eabe16bbbca30ee1f292a904156ac4782889378d439c3dee4f95bd63c59b5ce44104d929c93c0648279b98cb7fe8ba7638d94e8e77cb74e2ea560932b3a28017783230ff22287e5c00d93f6923f8b6edccc412522f3fcd3c9146cb5c43f261705a08c64e84d923ce6b1a06e922c8dac6d7e5c22b2e5c9b8269b2810b490b8a43c0fe42b298bbc1f03f62dcdb67e24e89b14f7558fee85ca00f0a3d34b1664aeb940917dd3f1a08c5db10858f4cffee54f480e816a6dc9553b5043870d7f0a76134ee95a5a688b50281a1836fb721abe9105f9dfd7173f32bbb2bd00a75af11bc3a7618a0111cb8d5e30c5af5fe512bc23b5c590377817c063b25e2f5eed4a64825d4ca494518c4c0b9cac88cc3ccaa5477ad3e9c0b3577c156e88cd4df354d383efa800536d62790c86feb6a862cae1543e3e9c984c64ecb2b25319d62a3308e20b8ad261ecdb746bf28f58220c5ebe03204d5fe86094d81036a36ed905d4cfcc8054e7947f3ac9e88897a983adce3e3724745df71395b959b067ddc1bd8c30f092546d25a0b24f5df9136af84fb76a96d3eccefcf9ab5", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 34.735914466s ago: executing program 2 (id=8125): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x70c0, &(0x7f0000000080)={0x0, 0xbf6d, 0x2}) setreuid(0xffffffffffffffff, 0xee01) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 34.541949858s ago: executing program 2 (id=8126): io_submit(0x0, 0x3c, &(0x7f0000000840)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000000500)="cf5e28e57254e7762564c549285685d31ad8640605f6d9fad6942f8c7b0446942821c148f1420b7e4b899eb80bc10a6583f682794889438f2b65b5a5804b9c93bb1b79482e9d987408dfa5991e20ed6023a0f9e78dd81112781118e2ba8812d030f2a18680f5398a878f55c918632584c787cb08540da9125898cf5ed16498", 0x0, 0xffffffffffffffff, 0x0, 0x1}]) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0) fcntl$setlease(r1, 0x400, 0x1) read$msr(r0, &(0x7f0000019300)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = io_uring_setup(0x105513, &(0x7f0000000100)={0x0, 0x857, 0x2, 0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x19, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0x48, 0x0, &(0x7f0000000700)="000000000000006172e81960d798f00200ee02aa712602c95c5612e8f2c87b1e7705c9d902c313d9ce8e5c40ba17fa348f70cefef09a67baf30616ae7719a834f59dbdeda48a4be4", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000240)=ANY=[@ANYRES64=r4]) 34.460049559s ago: executing program 4 (id=8127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0xa4, 0x2, 0x6, 0x5, 0x7, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x10}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffff01}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4c}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x34000c24) socket(0x25, 0x6, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$loop(0x0, 0x7, 0x180862) socket$inet6(0xa, 0x3, 0x3c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 34.353876835s ago: executing program 1 (id=8128): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_connect$uac3(0x3, 0xe9, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0xd0, 0x20, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x22, 0x30, 0xcb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1d, 0x9}, [@output_terminal={0x13, 0x24, 0x3, 0x6, 0x305, 0x1, 0x2, 0x12, 0x9, 0x5, 0x4, 0xf6c8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x3, "197c217e2bd3"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x100, 0x2, 0xff, "9d66f0"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x101, 0x9, 0xb1, '+;'}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xaf}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x31, 0x3, 0x32, 0x2, '(', "b6a412"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x4, 0x8, "87cf", 'C'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfc, 0x89, 0x5, {0xa, 0x25, 0x25, 0x7000, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x1, 0xf0, 0x6, 'U'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2e, 0x1, 0x3, 0x8b, "4d17", "87"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x2, 0xde, {0xa, 0x25, 0x25, 0x6, 0x2, 0x8}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x5, 0x91, 0xe4, 0x8, 0xc}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x8, 0x6f31}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40a}}, {0xbe, &(0x7f0000000200)=@string={0xbe, 0x3, "e834d5cdfdc39c8dc3ebe8658f9ec2820396eb711c9ccc8d6cb9c7691804e69a5fc689a182d8550d1a318710119dcca50ebf7fd14302c91bce539977b1574221b3f0da41f9feb517fd0e4673fc35fd20f4e761bcbb884d0871c74a4e8dd942bf7e48a3a3b9ca21a78f23340243701ad902a2b226b3c998e9664864d8106dd15830ea8641e74ec9ebda0bf7579a95583b158ef34a34c6029a0157bc3f040dc42b0d6951bf7a92cb9be5479fb072dc75866e775bd6b3bc5e32e4e3e2e7"}}]}) syz_usb_connect$uac3(0x4, 0xdc, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x0, 0x90, 0x4, {0x8, 0xb, 0x1, 0x1, 0x1, 0x25, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x66, 0xfffffffd}, [@multiply_unit={0xb, 0x24, 0xd, 0x7f, 0x6, 0x40, 0xa28}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x301, 0x7, 0x3, 0x1, 0xd95e, 0x0, 0x92, 0xadd2}, @input_terminal={0x14, 0x24, 0x2, 0x5, 0x100, 0x3, 0x1, 0x4, 0xff01, 0x6b6, 0x1ff, 0x6}, @source_unit={0xc, 0x24, 0xb, 0x8, 0x1, 0x6, 0x0, 0x3}, @output_terminal={0x13, 0x24, 0x3, 0x5, 0x2, 0x3, 0x3, 0x8, 0xb2b, 0x5, 0x3ff, 0xfffe}, @multiply_unit={0xb, 0x24, 0xd, 0x4, 0x7, 0x7fffffff, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x0, 0x7f, {0xa, 0x25, 0x25, 0x40, 0xa1, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xac, 0x8, 0x7, {0xa, 0x25, 0x25, 0x10, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x188, 0x5, 0x49, 0x2, 0x10, 0x1}, 0x42, &(0x7f00000004c0)={0x5, 0xf, 0x42, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8e, "7003ca04c0cc78db12c7110f861af514"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "7b491c13c391936964f2a0646ad06051"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x0, 0xaac}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x81, 0x4, 0x8, 0x2}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42f}}]}) 34.021970229s ago: executing program 2 (id=8129): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xc, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x10006, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x3, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x9, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0x74, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x0, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x7, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x6, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a8, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x9, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000380)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) r5 = dup(r4) r6 = open(&(0x7f0000000040)='./file1\x00', 0x840c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) r8 = socket(0x1, 0x1, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f0000000080), 0x8, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd700000000000010000", @ANYRES32=r8, @ANYBLOB="0c00018808000100", @ANYRES32=r8, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r11 = dup(r7) write$UHID_INPUT(r11, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 33.465505942s ago: executing program 3 (id=8130): io_submit(0x0, 0x3c, &(0x7f0000000840)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000000500)="cf5e28e57254e7762564c549285685d31ad8640605f6d9fad6942f8c7b0446942821c148f1420b7e4b899eb80bc10a6583f682794889438f2b65b5a5804b9c93bb1b79482e9d987408dfa5991e20ed6023a0f9e78dd81112781118e2ba8812d030f2a18680f5398a878f55c918632584c787cb08540da9125898cf5ed16498", 0x0, 0xffffffffffffffff, 0x0, 0x1}]) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0) fcntl$setlease(r1, 0x400, 0x1) read$msr(r0, &(0x7f0000019300)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = io_uring_setup(0x105513, &(0x7f0000000100)={0x0, 0x857, 0x2, 0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x19, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0x48, 0x0, &(0x7f0000000700)="000000000000006172e81960d798f00200ee02aa712602c95c5612e8f2c87b1e7705c9d902c313d9ce8e5c40ba17fa348f70cefef09a67baf30616ae7719a834f59dbdeda48a4be4", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x15, &(0x7f0000000880)=ANY=[@ANYBLOB="186a000009000000000000000800000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000500000018110000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="02002f00e2000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, r5, 0x6}, 0x94) 32.742247457s ago: executing program 4 (id=8131): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/79}) syz_usb_connect$cdc_ncm(0x1, 0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000082505a1a44000010203010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391a0000000c241ba10210008500fbff0808241c7f00070100042401"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 32.717057618s ago: executing program 3 (id=8132): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$lock(r0, 0x11, &(0x7f00000048c0)={0x0, 0x2, 0x1, 0x9f}) syz_clone(0x81489000, 0x0, 0x61, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) userfaultfd(0x801) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14005c46f53ece4481ceb4da6c0001", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf2518"], 0x14}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x20040002) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) 32.627926632s ago: executing program 2 (id=8133): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r4, &(0x7f0000000580)=""/174, 0xff56) 31.694844093s ago: executing program 2 (id=8134): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) accept$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) signalfd4(r1, &(0x7f0000000380)={[0x40]}, 0x8, 0x80c00) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x1401, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x200048c0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40) sendmmsg(r4, &(0x7f0000000000), 0x4000078, 0x40040) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000000)) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x3}}) 31.313030625s ago: executing program 1 (id=8135): socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000300)=0x4) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) fsopen(&(0x7f0000000040)='nfs\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000540)='btrfs\x00', 0x1003402, &(0x7f0000000100)='barrier') 30.668802178s ago: executing program 0 (id=8136): io_submit(0x0, 0x3c, &(0x7f0000000840)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000000500)="cf5e28e57254e7762564c549285685d31ad8640605f6d9fad6942f8c7b0446942821c148f1420b7e4b899eb80bc10a6583f682794889438f2b65b5a5804b9c93bb1b79482e9d987408dfa5991e20ed6023a0f9e78dd81112781118e2ba8812d030f2a18680f5398a878f55c918632584c787cb08540da9125898cf5ed16498", 0x0, 0xffffffffffffffff, 0x0, 0x1}]) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0) fcntl$setlease(r1, 0x400, 0x1) read$msr(r0, &(0x7f0000019300)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = io_uring_setup(0x105513, &(0x7f0000000100)={0x0, 0x857, 0x2, 0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x19, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00005a3000/0x3000)=nil, 0x3000, 0x380000b, 0x12, r2, 0x724c6000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0x48, 0x0, &(0x7f0000000700)="000000000000006172e81960d798f00200ee02aa712602c95c5612e8f2c87b1e7705c9d902c313d9ce8e5c40ba17fa348f70cefef09a67baf30616ae7719a834f59dbdeda48a4be4", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000240)=ANY=[@ANYRES64=r4]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x15, &(0x7f0000000880)=ANY=[@ANYBLOB="186a000009000000000000000800000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000500000018110000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="02002f00e2000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, r5, 0x6}, 0x94) 30.227536057s ago: executing program 4 (id=8137): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0xffffff80, 0x6}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0xee01, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) socket(0x1e, 0x2, 0x0) setpgid(0x0, r4) creat(&(0x7f0000000180)='./file0\x00', 0x5f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$tun(r0, 0x0, 0x0) 30.067248147s ago: executing program 3 (id=8138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20040814}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r2], 0x14}}, 0x20048800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r6, 0x400, 0x1) truncate(&(0x7f00000006c0)='./file1\x00', 0x2000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 0s ago: executing program 32 (id=8136): io_submit(0x0, 0x3c, &(0x7f0000000840)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000000500)="cf5e28e57254e7762564c549285685d31ad8640605f6d9fad6942f8c7b0446942821c148f1420b7e4b899eb80bc10a6583f682794889438f2b65b5a5804b9c93bb1b79482e9d987408dfa5991e20ed6023a0f9e78dd81112781118e2ba8812d030f2a18680f5398a878f55c918632584c787cb08540da9125898cf5ed16498", 0x0, 0xffffffffffffffff, 0x0, 0x1}]) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0) fcntl$setlease(r1, 0x400, 0x1) read$msr(r0, &(0x7f0000019300)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = io_uring_setup(0x105513, &(0x7f0000000100)={0x0, 0x857, 0x2, 0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x19, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00005a3000/0x3000)=nil, 0x3000, 0x380000b, 0x12, r2, 0x724c6000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0x48, 0x0, &(0x7f0000000700)="000000000000006172e81960d798f00200ee02aa712602c95c5612e8f2c87b1e7705c9d902c313d9ce8e5c40ba17fa348f70cefef09a67baf30616ae7719a834f59dbdeda48a4be4", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000240)=ANY=[@ANYRES64=r4]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x15, &(0x7f0000000880)=ANY=[@ANYBLOB="186a000009000000000000000800000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000500000018110000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="02002f00e2000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, r5, 0x6}, 0x94) kernel console output (not intermixed with test programs): 04 00 66 66 [ 2316.621520][ T1996] RSP: 0018:ffffc90007077c18 EFLAGS: 00050206 [ 2316.621529][ T1996] RAX: 0000000000000001 RBX: 0000200000000040 RCX: 0000000000000003 [ 2316.621539][ T1996] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc90007077c68 [ 2316.621545][ T1996] RBP: 0000000000000003 R08: 0000000000000001 R09: fffff52000e0ef8d [ 2316.621552][ T1996] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 2316.621558][ T1996] R13: ffffc90007077c68 R14: ffff88807510c980 R15: 1ffff92000e0efab [ 2316.621573][ T1996] _copy_from_user+0x98/0xd0 [ 2316.621587][ T1996] parse_command+0xa0/0x270 [ 2316.621601][ T1996] ? __pfx_parse_command+0x10/0x10 [ 2316.621617][ T1996] bm_entry_write+0x77/0x440 [ 2316.621632][ T1996] vfs_write+0x2aa/0x1050 [ 2316.621648][ T1996] ? __pfx_bm_entry_write+0x10/0x10 [ 2316.621662][ T1996] ? __pfx_vfs_write+0x10/0x10 [ 2316.621677][ T1996] ? __fget_files+0x215/0x3d0 [ 2316.621697][ T1996] ? __fget_files+0x21f/0x3d0 [ 2316.621717][ T1996] ksys_write+0x12a/0x250 [ 2316.621732][ T1996] ? __pfx_ksys_write+0x10/0x10 [ 2316.621752][ T1996] do_syscall_64+0x115/0x870 [ 2316.621767][ T1996] ? clear_bhb_loop+0x40/0x90 [ 2316.621780][ T1996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2316.621791][ T1996] RIP: 0033:0x7fc22bb9de99 [ 2316.621801][ T1996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2316.621811][ T1996] RSP: 002b:00007fc22ca52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2316.621820][ T1996] RAX: ffffffffffffffda RBX: 00007fc22be25fa0 RCX: 00007fc22bb9de99 [ 2316.621827][ T1996] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000003 [ 2316.621833][ T1996] RBP: 00007fc22ca52090 R08: 0000000000000000 R09: 0000000000000000 [ 2316.621839][ T1996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2316.621845][ T1996] R13: 00007fc22be26038 R14: 00007fc22be25fa0 R15: 00007ffe5a855068 [ 2316.621860][ T1996] [ 2317.562808][ T2000] netlink: 'syz.3.7615': attribute type 6 has an invalid length. [ 2318.145266][ T30] audit: type=1400 audit(1784287923.995:14409): avc: denied { read append } for pid=2004 comm="syz.2.7618" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2318.319793][ T30] audit: type=1400 audit(1784287923.995:14410): avc: denied { open } for pid=2004 comm="syz.2.7618" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2318.872537][ T2019] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7620'. [ 2318.896212][ T2019] 0·: renamed from hsr0 [ 2319.247445][ T2019] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2319.290784][ T2028] hpfs: Bad magic ... probably not HPFS [ 2319.327511][ T2019] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2319.630073][ T2019] 0·: entered allmulticast mode [ 2319.666740][ T2019] hsr_slave_0: entered allmulticast mode [ 2319.695419][ T2019] hsr_slave_1: entered allmulticast mode [ 2319.738550][ T2037] hpfs: Bad magic ... probably not HPFS [ 2319.771091][ T2019] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 2319.947061][ T30] audit: type=1400 audit(1784287925.805:14411): avc: denied { mount } for pid=2040 comm="syz.1.7625" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2319.989028][ T2042] overlayfs: overlapping lowerdir path [ 2320.008571][ T2041] FAULT_INJECTION: forcing a failure. [ 2320.008571][ T2041] name failslab, interval 1, probability 0, space 0, times 0 [ 2320.296267][ T2041] CPU: 1 UID: 60928 PID: 2041 Comm: syz.1.7625 Tainted: G L syzkaller #0 PREEMPT(full) [ 2320.296288][ T2041] Tainted: [L]=SOFTLOCKUP [ 2320.296292][ T2041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2320.296299][ T2041] Call Trace: [ 2320.296303][ T2041] [ 2320.296308][ T2041] dump_stack_lvl+0x100/0x190 [ 2320.296325][ T2041] should_fail_ex.cold+0x5/0xa [ 2320.296339][ T2041] should_failslab+0xc2/0x120 [ 2320.296353][ T2041] kmem_cache_alloc_noprof+0x91/0x6a0 [ 2320.296365][ T2041] ? do_getname+0x35/0x390 [ 2320.296379][ T2041] do_getname+0x35/0x390 [ 2320.296394][ T2041] do_sys_openat2+0xc7/0x1e0 [ 2320.296406][ T2041] ? __pfx_do_sys_openat2+0x10/0x10 [ 2320.296427][ T2041] __x64_sys_openat2+0x244/0x380 [ 2320.296440][ T2041] ? __pfx___x64_sys_openat2+0x10/0x10 [ 2320.296452][ T2041] ? ksys_write+0x1ac/0x250 [ 2320.296472][ T2041] do_syscall_64+0x115/0x870 [ 2320.296488][ T2041] ? clear_bhb_loop+0x40/0x90 [ 2320.296501][ T2041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2320.296512][ T2041] RIP: 0033:0x7f696f99de99 [ 2320.296522][ T2041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2320.296532][ T2041] RSP: 002b:00007f69708f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 2320.296543][ T2041] RAX: ffffffffffffffda RBX: 00007f696fc25fa0 RCX: 00007f696f99de99 [ 2320.296550][ T2041] RDX: 0000200000000080 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 2320.296557][ T2041] RBP: 00007f69708f5090 R08: 0000000000000000 R09: 0000000000000000 [ 2320.296563][ T2041] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 2320.296570][ T2041] R13: 00007f696fc26038 R14: 00007f696fc25fa0 R15: 00007ffeb65a12d8 [ 2320.296583][ T2041] [ 2320.693810][ T2050] tipc: Enabling of bearer rejected, already enabled [ 2320.932375][ T30] audit: type=1400 audit(1784287926.785:14412): avc: denied { unmount } for pid=29652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2321.155244][ T30] audit: type=1326 audit(1784287927.015:14413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2059 comm="syz.4.7631" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f3019de99 code=0x0 [ 2322.090440][ T2079] hpfs: Bad magic ... probably not HPFS [ 2322.352084][ T2078] netlink: 'syz.3.7635': attribute type 6 has an invalid length. [ 2322.631107][ T2086] FAULT_INJECTION: forcing a failure. [ 2322.631107][ T2086] name failslab, interval 1, probability 0, space 0, times 0 [ 2322.673688][ T2086] CPU: 1 UID: 0 PID: 2086 Comm: syz.1.7637 Tainted: G L syzkaller #0 PREEMPT(full) [ 2322.673717][ T2086] Tainted: [L]=SOFTLOCKUP [ 2322.673724][ T2086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2322.673734][ T2086] Call Trace: [ 2322.673741][ T2086] [ 2322.673748][ T2086] dump_stack_lvl+0x100/0x190 [ 2322.673776][ T2086] should_fail_ex.cold+0x5/0xa [ 2322.673799][ T2086] should_failslab+0xc2/0x120 [ 2322.673822][ T2086] __kmalloc_noprof+0xfc/0x820 [ 2322.673839][ T2086] ? __pfx_dynamic_dname+0x10/0x10 [ 2322.673862][ T2086] ? tomoyo_encode2+0xfb/0x3c0 [ 2322.673893][ T2086] tomoyo_encode2+0xfb/0x3c0 [ 2322.673923][ T2086] tomoyo_encode+0x29/0x50 [ 2322.673948][ T2086] tomoyo_realpath_from_path+0x18c/0x690 [ 2322.673981][ T2086] tomoyo_path_number_perm+0x23c/0x580 [ 2322.674003][ T2086] ? tomoyo_path_number_perm+0x22e/0x580 [ 2322.674028][ T2086] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2322.674076][ T2086] ? find_held_lock+0x2b/0x80 [ 2322.674102][ T2086] ? __fget_files+0x215/0x3d0 [ 2322.674131][ T2086] ? hook_file_ioctl_common+0x140/0x440 [ 2322.674149][ T2086] ? __fget_files+0x215/0x3d0 [ 2322.674180][ T2086] ? __fget_files+0x21f/0x3d0 [ 2322.674212][ T2086] security_file_ioctl+0xd3/0x230 [ 2322.674237][ T2086] __x64_sys_ioctl+0xb7/0x210 [ 2322.674262][ T2086] do_syscall_64+0x115/0x870 [ 2322.674289][ T2086] ? clear_bhb_loop+0x40/0x90 [ 2322.674312][ T2086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2322.674330][ T2086] RIP: 0033:0x7f696f99de99 [ 2322.674346][ T2086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2322.674363][ T2086] RSP: 002b:00007f69708d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2322.674381][ T2086] RAX: ffffffffffffffda RBX: 00007f696fc26090 RCX: 00007f696f99de99 [ 2322.674399][ T2086] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2322.674409][ T2086] RBP: 00007f69708d4090 R08: 0000000000000000 R09: 0000000000000000 [ 2322.674420][ T2086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2322.674430][ T2086] R13: 00007f696fc26128 R14: 00007f696fc26090 R15: 00007ffeb65a12d8 [ 2322.674453][ T2086] [ 2322.714404][ T2086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2323.866561][ T2101] tipc: Enabling of bearer rejected, already enabled [ 2324.418014][ T30] audit: type=1326 audit(1784287930.275:14414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.3.7646" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc22bb9de99 code=0x0 [ 2327.121234][ T2154] hpfs: Bad magic ... probably not HPFS [ 2328.301424][ T2180] siw: device registration error -23 [ 2328.751828][ T2181] FAULT_INJECTION: forcing a failure. [ 2328.751828][ T2181] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.777141][ T2181] CPU: 1 UID: 0 PID: 2181 Comm: syz.0.7662 Tainted: G L syzkaller #0 PREEMPT(full) [ 2328.777164][ T2181] Tainted: [L]=SOFTLOCKUP [ 2328.777168][ T2181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2328.777175][ T2181] Call Trace: [ 2328.777179][ T2181] [ 2328.777183][ T2181] dump_stack_lvl+0x100/0x190 [ 2328.777202][ T2181] should_fail_ex.cold+0x5/0xa [ 2328.777218][ T2181] should_failslab+0xc2/0x120 [ 2328.777231][ T2181] __kmalloc_noprof+0xfc/0x820 [ 2328.777243][ T2181] ? tomoyo_encode2+0xfb/0x3c0 [ 2328.777262][ T2181] tomoyo_encode2+0xfb/0x3c0 [ 2328.777280][ T2181] tomoyo_encode+0x29/0x50 [ 2328.777295][ T2181] tomoyo_realpath_from_path+0x18c/0x690 [ 2328.777314][ T2181] tomoyo_path_number_perm+0x23c/0x580 [ 2328.777328][ T2181] ? tomoyo_path_number_perm+0x22e/0x580 [ 2328.777349][ T2181] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2328.777395][ T2181] ? find_held_lock+0x2b/0x80 [ 2328.777413][ T2181] ? __fget_files+0x215/0x3d0 [ 2328.777428][ T2181] ? hook_file_ioctl_common+0x140/0x440 [ 2328.777438][ T2181] ? __fget_files+0x215/0x3d0 [ 2328.777456][ T2181] ? __fget_files+0x21f/0x3d0 [ 2328.777475][ T2181] security_file_ioctl+0xd3/0x230 [ 2328.777490][ T2181] __x64_sys_ioctl+0xb7/0x210 [ 2328.777507][ T2181] do_syscall_64+0x115/0x870 [ 2328.777522][ T2181] ? clear_bhb_loop+0x40/0x90 [ 2328.777535][ T2181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2328.777547][ T2181] RIP: 0033:0x7f7f36d9de99 [ 2328.777557][ T2181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2328.777568][ T2181] RSP: 002b:00007f7f37ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2328.777579][ T2181] RAX: ffffffffffffffda RBX: 00007f7f37026090 RCX: 00007f7f36d9de99 [ 2328.777586][ T2181] RDX: 0000200000000180 RSI: 0000000000003b82 RDI: 0000000000000003 [ 2328.777592][ T2181] RBP: 00007f7f37ced090 R08: 0000000000000000 R09: 0000000000000000 [ 2328.777599][ T2181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2328.777605][ T2181] R13: 00007f7f37026128 R14: 00007f7f37026090 R15: 00007ffc4d84b108 [ 2328.777619][ T2181] [ 2328.777852][ T2181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2329.334149][ T2191] siw: device registration error -23 [ 2329.879369][ T2192] hpfs: Bad magic ... probably not HPFS [ 2330.701602][ T2209] FAULT_INJECTION: forcing a failure. [ 2330.701602][ T2209] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.737181][ T2209] CPU: 1 UID: 0 PID: 2209 Comm: syz.3.7669 Tainted: G L syzkaller #0 PREEMPT(full) [ 2330.737216][ T2209] Tainted: [L]=SOFTLOCKUP [ 2330.737222][ T2209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2330.737232][ T2209] Call Trace: [ 2330.737237][ T2209] [ 2330.737244][ T2209] dump_stack_lvl+0x100/0x190 [ 2330.737269][ T2209] should_fail_ex.cold+0x5/0xa [ 2330.737291][ T2209] should_failslab+0xc2/0x120 [ 2330.737316][ T2209] __kmalloc_noprof+0xfc/0x820 [ 2330.737334][ T2209] ? tomoyo_encode2+0xfb/0x3c0 [ 2330.737363][ T2209] tomoyo_encode2+0xfb/0x3c0 [ 2330.737390][ T2209] tomoyo_encode+0x29/0x50 [ 2330.737414][ T2209] tomoyo_realpath_from_path+0x18c/0x690 [ 2330.737444][ T2209] tomoyo_path_number_perm+0x23c/0x580 [ 2330.737465][ T2209] ? tomoyo_path_number_perm+0x22e/0x580 [ 2330.737490][ T2209] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2330.737535][ T2209] ? find_held_lock+0x2b/0x80 [ 2330.737559][ T2209] ? __fget_files+0x215/0x3d0 [ 2330.737584][ T2209] ? hook_file_ioctl_common+0x140/0x440 [ 2330.737600][ T2209] ? __fget_files+0x215/0x3d0 [ 2330.737628][ T2209] ? __fget_files+0x21f/0x3d0 [ 2330.737655][ T2209] security_file_ioctl+0xd3/0x230 [ 2330.737681][ T2209] __x64_sys_ioctl+0xb7/0x210 [ 2330.737704][ T2209] do_syscall_64+0x115/0x870 [ 2330.737729][ T2209] ? clear_bhb_loop+0x40/0x90 [ 2330.737750][ T2209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2330.737767][ T2209] RIP: 0033:0x7fc22bb9de99 [ 2330.737782][ T2209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2330.737799][ T2209] RSP: 002b:00007fc22ca52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2330.737816][ T2209] RAX: ffffffffffffffda RBX: 00007fc22be25fa0 RCX: 00007fc22bb9de99 [ 2330.737827][ T2209] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 2330.737837][ T2209] RBP: 00007fc22ca52090 R08: 0000000000000000 R09: 0000000000000000 [ 2330.737847][ T2209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2330.737856][ T2209] R13: 00007fc22be26038 R14: 00007fc22be25fa0 R15: 00007ffe5a855068 [ 2330.737878][ T2209] [ 2330.983000][ T2209] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2330.989763][ T2209] program syz.3.7669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2331.365262][ T2213] netlink: 'syz.4.7670': attribute type 6 has an invalid length. [ 2331.640474][ T2217] fuse: Bad value for 'fd' [ 2333.233289][T24908] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2333.413246][T24908] usb 2-1: Using ep0 maxpacket: 8 [ 2333.425677][T24908] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2333.450449][T24908] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2333.486014][T24908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2333.518328][T24908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2333.560080][T24908] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2333.603760][T24908] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2333.632111][T24908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.890656][T24908] usb 2-1: GET_CAPABILITIES returned 0 [ 2333.917540][T24908] usbtmc 2-1:16.0: can't read capabilities [ 2334.483991][ T2257] netlink: 'syz.3.7684': attribute type 6 has an invalid length. [ 2334.855427][ T2266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7686'. [ 2334.976270][T24908] usb 2-1: USB disconnect, device number 59 [ 2335.742346][ T2270] netlink: 'syz.4.7688': attribute type 6 has an invalid length. [ 2336.386446][ T2287] hpfs: Bad magic ... probably not HPFS [ 2338.079384][ T2307] netlink: 'syz.2.7696': attribute type 6 has an invalid length. [ 2338.128731][ T2310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2338.405567][ T2324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7701'. [ 2338.834873][T11089] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2339.143565][T11089] usb 5-1: Using ep0 maxpacket: 32 [ 2339.333079][T11089] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2339.471807][T11089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2339.482239][ T2335] hpfs: Bad magic ... probably not HPFS [ 2339.503911][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2339.533601][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 2339.679673][T11089] usb 5-1: Product: syz [ 2339.684623][T11089] usb 5-1: Manufacturer: syz [ 2339.689247][T11089] usb 5-1: SerialNumber: syz [ 2339.699085][T11089] usb 5-1: config 0 descriptor?? [ 2339.992782][T11089] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2340.253737][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2340.404087][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 2340.413761][ T9] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 2340.429426][ T9] usb 1-1: config 0 has no interface number 0 [ 2340.454718][ T9] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2340.487168][ T9] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2340.523115][ T9] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2340.560634][ T9] usb 1-1: config 0 interface 196 has no altsetting 0 [ 2340.621065][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 2340.631556][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.646392][ T9] usb 1-1: Product: syz [ 2340.653257][ T4989] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2340.674093][ T9] usb 1-1: Manufacturer: syz [ 2340.679124][ T9] usb 1-1: SerialNumber: syz [ 2340.822491][ T9] usb 1-1: config 0 descriptor?? [ 2340.837032][ T2341] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2340.905582][ T4989] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2340.914160][ T4989] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 2340.931810][ T4989] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 2340.946640][ T4989] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 2340.967222][ T4989] usb 4-1: config 129 has no interface number 0 [ 2340.978236][ T4989] usb 4-1: config 129 has no interface number 1 [ 2340.990190][ T4989] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2341.014378][ T4989] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 2341.046638][ T4989] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 2341.093262][ T4989] usb 4-1: config 129 interface 135 has no altsetting 0 [ 2341.368104][ T4989] usb 4-1: config 129 interface 5 has no altsetting 0 [ 2341.395918][ T4989] usb 4-1: string descriptor 0 read error: -22 [ 2341.402300][ T4989] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 2341.413326][ T4989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2341.442677][ T4989] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2341.459989][ T4989] usb 4-1: MIDIStreaming interface descriptor not found [ 2341.505810][ T9] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2341.567674][ T9] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 2341.588728][T11089] gspca_ov534_9: reg_r err -71 [ 2341.649241][ T9] usb 1-1: USB disconnect, device number 73 [ 2341.902634][ T4989] usb 4-1: USB disconnect, device number 53 [ 2341.933836][T11089] gspca_ov534_9: Unknown sensor 0000 [ 2341.933906][T11089] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 2342.007880][T11089] usb 5-1: USB disconnect, device number 84 [ 2342.411716][ T2378] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7714'. [ 2343.525260][ T2389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7713'. [ 2343.534272][ T2389] nbd: must specify a size in bytes for the device [ 2343.541649][ T2389] loop5: detected capacity change from 0 to 2640 [ 2343.548713][ T2389] buffer_io_error: 336 callbacks suppressed [ 2343.548726][ T2389] Buffer I/O error on dev loop5, logical block 0, async page read [ 2343.562512][ T2389] Buffer I/O error on dev loop5, logical block 0, async page read [ 2343.570426][ T2389] Buffer I/O error on dev loop5, logical block 0, async page read [ 2343.578319][ T2389] Buffer I/O error on dev loop5, logical block 0, async page read [ 2343.586227][ T2389] Buffer I/O error on dev loop5, logical block 0, async page read [ 2343.594291][ T2389] Buffer I/O error on dev loop5, logical block 0, async page read [ 2343.602169][ T2389] Buffer I/O error on dev loop5, logical block 0, async page read [ 2343.610098][ T2389] Buffer I/O error on dev loop5, logical block 0, async page read [ 2343.617935][ T2389] ldm_validate_partition_table(): Disk read failed. [ 2343.621854][ T2385] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 2343.624628][ T2389] loop5: unable to read partition table [ 2343.624802][ T2389] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 2343.647754][ T2385] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 2344.498010][ T2415] hpfs: Bad magic ... probably not HPFS [ 2345.104850][ T2419] hpfs: Bad magic ... probably not HPFS [ 2345.575080][ T2432] hpfs: Bad magic ... probably not HPFS [ 2345.837950][ T2426] lo speed is unknown, defaulting to 1000 [ 2347.402991][T26766] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2347.713419][T26766] usb 4-1: Using ep0 maxpacket: 16 [ 2348.447313][T26766] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2348.460448][T26766] usb 4-1: no configurations [ 2348.480248][T26766] usb 4-1: can't read configurations, error -22 [ 2348.706526][ T2489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7735'. [ 2348.715510][ T2489] nbd: must specify a size in bytes for the device [ 2348.722639][ T2489] loop5: detected capacity change from 0 to 2640 [ 2348.729613][ T2489] buffer_io_error: 328 callbacks suppressed [ 2348.729622][ T2489] Buffer I/O error on dev loop5, logical block 0, async page read [ 2348.743532][ T2489] Buffer I/O error on dev loop5, logical block 0, async page read [ 2348.751354][ T2489] Buffer I/O error on dev loop5, logical block 0, async page read [ 2348.759397][ T2489] Buffer I/O error on dev loop5, logical block 0, async page read [ 2348.767387][ T2489] Buffer I/O error on dev loop5, logical block 0, async page read [ 2348.775306][ T2489] Buffer I/O error on dev loop5, logical block 0, async page read [ 2348.783497][ T2489] loop5: unable to read partition table [ 2348.787306][ T2490] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 2348.789258][ T2489] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 2348.797681][ T2490] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 2348.814769][ T2490] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 2348.823112][ T2490] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 2349.405799][ T2482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7739'. [ 2349.603729][T24908] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 2349.953086][T24908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2349.976780][T24908] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2350.006564][T24908] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2350.028155][T24908] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2350.078267][T24908] usb 2-1: string descriptor 0 read error: -22 [ 2350.089463][T24908] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2350.109687][T24908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.147995][T24908] cdc_ncm 2-1:1.0: skipping garbage [ 2350.174530][T24908] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 2350.205200][T24908] cdc_ncm 2-1:1.0: bind() failure [ 2350.350100][T24908] usb 2-1: USB disconnect, device number 60 [ 2350.387991][ T2515] kvm: kvm [2514]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 2350.480157][ T2515] kvm: kvm [2514]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 2352.427090][ T2543] siw: device registration error -23 [ 2352.550733][T24908] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2353.113234][T24908] usb 1-1: Using ep0 maxpacket: 8 [ 2353.122320][T24908] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2353.134275][T24908] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2353.147979][T24908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2353.176018][T24908] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2353.201291][T24908] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2353.227904][T24908] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2353.249602][ T30] audit: type=1400 audit(1784287959.106:14415): avc: denied { append } for pid=2547 comm="syz.3.7754" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2353.254577][T24908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.463493][ T1817] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2353.538674][T24908] usb 1-1: GET_CAPABILITIES returned 0 [ 2353.553487][T24908] usbtmc 1-1:16.0: can't read capabilities [ 2353.625839][ T1817] usb 5-1: Using ep0 maxpacket: 32 [ 2353.647018][ T1817] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 2353.672987][ T1817] usb 5-1: config 0 has no interface number 0 [ 2353.687056][ T1817] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2353.744389][ T1817] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2353.755579][ T1817] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2353.766603][ T1817] usb 5-1: config 0 interface 196 has no altsetting 0 [ 2353.787651][ T1817] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 2353.797024][ T1817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.811698][ T1817] usb 5-1: Product: syz [ 2353.817063][ T1817] usb 5-1: Manufacturer: syz [ 2353.829536][ T1817] usb 5-1: SerialNumber: syz [ 2353.845669][ T1817] usb 5-1: config 0 descriptor?? [ 2353.858826][ T2550] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2354.140016][ T4989] usb 1-1: USB disconnect, device number 74 [ 2354.456313][ T1817] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2354.567186][ T1817] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 2354.623757][ T1817] usb 5-1: USB disconnect, device number 85 [ 2355.353618][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2355.476794][ T1817] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2355.607663][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 2355.686720][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.709876][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 2355.935697][ T2614] hpfs: Bad magic ... probably not HPFS [ 2356.003380][ T1817] usb 1-1: Using ep0 maxpacket: 16 [ 2356.008562][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2356.015679][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2356.035693][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2356.055483][ T9] usb 4-1: config 0 descriptor?? [ 2356.070107][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2356.081555][ T1817] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2356.095571][ T1817] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2356.111814][ T1817] usb 1-1: Product: syz [ 2356.116674][ T1817] usb 1-1: Manufacturer: syz [ 2356.123661][ T1817] usb 1-1: SerialNumber: syz [ 2356.153913][ T1817] usb 1-1: config 0 descriptor?? [ 2356.549199][ T2623] netlink: 'syz.1.7768': attribute type 6 has an invalid length. [ 2356.700475][ T1817] usb 1-1: USB disconnect, device number 75 [ 2356.841670][ T2626] kvm: pic: single mode not supported [ 2356.846093][ T2626] kvm: pic: single mode not supported [ 2356.853336][ T2626] kvm: pic: level sensitive irq not supported [ 2356.885699][ T2626] kvm: pic: single mode not supported [ 2356.891828][ T2626] kvm: pic: level sensitive irq not supported [ 2356.903466][ T2626] kvm: pic: single mode not supported [ 2356.909596][ T2626] kvm: pic: level sensitive irq not supported [ 2356.931908][ T2626] kvm: pic: level sensitive irq not supported [ 2356.951009][ T2626] kvm: pic: single mode not supported [ 2356.970643][ T2626] kvm: pic: single mode not supported [ 2356.976138][ T2626] kvm: pic: level sensitive irq not supported [ 2357.022240][ T2626] kvm: pic: single mode not supported [ 2357.038359][ T2626] kvm: pic: single mode not supported [ 2357.238512][ T2641] hpfs: Bad magic ... probably not HPFS [ 2357.732748][ T2648] netlink: 'syz.0.7774': attribute type 6 has an invalid length. [ 2358.261685][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2358.302522][T24908] usb 4-1: USB disconnect, device number 56 [ 2358.673491][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 2358.682885][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2358.693917][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2358.706957][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2358.718295][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.742726][ T9] usb 1-1: Product: syz [ 2358.760979][ T9] usb 1-1: Manufacturer: syz [ 2358.792216][ T9] usb 1-1: SerialNumber: syz [ 2358.819582][ T2664] tipc: Enabling of bearer rejected, already enabled [ 2358.830073][ T9] usb 1-1: 0:2 : does not exist [ 2359.034867][ T2671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7772'. [ 2359.043859][ T2671] nbd: must specify a size in bytes for the device [ 2359.051008][ T2671] loop5: detected capacity change from 0 to 2640 [ 2359.057653][ T2671] buffer_io_error: 326 callbacks suppressed [ 2359.057663][ T2671] Buffer I/O error on dev loop5, logical block 0, async page read [ 2359.071583][ T2671] Buffer I/O error on dev loop5, logical block 0, async page read [ 2359.079472][ T2671] Buffer I/O error on dev loop5, logical block 0, async page read [ 2359.087382][ T2671] Buffer I/O error on dev loop5, logical block 0, async page read [ 2359.095464][ T2671] Buffer I/O error on dev loop5, logical block 0, async page read [ 2359.103622][ T2671] loop5: unable to read partition table [ 2359.107972][ T2673] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 2359.109593][ T2671] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 2359.117801][ T2673] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 2359.134889][ T2673] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 2359.143341][ T2673] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 2359.151774][ T2673] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 2359.399821][ T2650] IPVS: Error connecting to the multicast addr [ 2359.493923][ T2650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7776'. [ 2359.667534][ T2679] hpfs: Bad magic ... probably not HPFS [ 2359.874222][ T2650] hsr_slave_1 (unregistering): left promiscuous mode [ 2359.998397][ T1817] usb 1-1: USB disconnect, device number 76 [ 2360.577200][ T2689] FAULT_INJECTION: forcing a failure. [ 2360.577200][ T2689] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.186759][ T2689] CPU: 1 UID: 0 PID: 2689 Comm: syz.4.7783 Tainted: G L syzkaller #0 PREEMPT(full) [ 2361.186780][ T2689] Tainted: [L]=SOFTLOCKUP [ 2361.186783][ T2689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2361.186790][ T2689] Call Trace: [ 2361.186795][ T2689] [ 2361.186800][ T2689] dump_stack_lvl+0x100/0x190 [ 2361.186817][ T2689] should_fail_ex.cold+0x5/0xa [ 2361.186831][ T2689] should_failslab+0xc2/0x120 [ 2361.186845][ T2689] __kmalloc_noprof+0xfc/0x820 [ 2361.186856][ T2689] ? __pfx_dynamic_dname+0x10/0x10 [ 2361.186871][ T2689] ? tomoyo_encode2+0xfb/0x3c0 [ 2361.186890][ T2689] tomoyo_encode2+0xfb/0x3c0 [ 2361.186908][ T2689] tomoyo_encode+0x29/0x50 [ 2361.186923][ T2689] tomoyo_realpath_from_path+0x18c/0x690 [ 2361.186945][ T2689] tomoyo_path_number_perm+0x23c/0x580 [ 2361.186958][ T2689] ? tomoyo_path_number_perm+0x22e/0x580 [ 2361.186973][ T2689] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2361.187000][ T2689] ? find_held_lock+0x2b/0x80 [ 2361.187016][ T2689] ? __fget_files+0x215/0x3d0 [ 2361.187031][ T2689] ? hook_file_ioctl_common+0x140/0x440 [ 2361.187042][ T2689] ? __fget_files+0x215/0x3d0 [ 2361.187061][ T2689] ? __fget_files+0x21f/0x3d0 [ 2361.187079][ T2689] security_file_ioctl+0xd3/0x230 [ 2361.187095][ T2689] __x64_sys_ioctl+0xb7/0x210 [ 2361.187111][ T2689] do_syscall_64+0x115/0x870 [ 2361.187127][ T2689] ? clear_bhb_loop+0x40/0x90 [ 2361.187140][ T2689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2361.187152][ T2689] RIP: 0033:0x7f7f3019de99 [ 2361.187162][ T2689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2361.187173][ T2689] RSP: 002b:00007f7f310b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2361.187184][ T2689] RAX: ffffffffffffffda RBX: 00007f7f30425fa0 RCX: 00007f7f3019de99 [ 2361.187191][ T2689] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2361.187198][ T2689] RBP: 00007f7f310b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2361.187204][ T2689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2361.187210][ T2689] R13: 00007f7f30426038 R14: 00007f7f30425fa0 R15: 00007fff9bc0d858 [ 2361.187224][ T2689] [ 2361.187237][ T2689] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2361.483207][T24908] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2361.655271][T24908] usb 3-1: Using ep0 maxpacket: 16 [ 2361.678347][T24908] usb 3-1: config 1 has an invalid interface number: 119 but max is 3 [ 2361.712934][T24908] usb 3-1: config 1 has an invalid interface number: 170 but max is 3 [ 2361.750068][T24908] usb 3-1: config 1 has an invalid interface number: 74 but max is 3 [ 2361.783356][T24908] usb 3-1: config 1 has an invalid interface number: 164 but max is 3 [ 2361.810670][T24908] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2361.845488][T24908] usb 3-1: config 1 has an invalid interface number: 231 but max is 3 [ 2361.873572][T24908] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2362.023371][ T4989] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2362.073771][T24908] usb 3-1: config 1 has 6 interfaces, different from the descriptor's value: 4 [ 2362.199635][ T30] audit: type=1400 audit(1784287967.766:14416): avc: denied { execute } for pid=2695 comm="syz.3.7786" name="sg#" dev="devtmpfs" ino=7324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 2362.274093][T24908] usb 3-1: config 1 has no interface number 1 [ 2362.317343][T24908] usb 3-1: config 1 has no interface number 2 [ 2362.405439][ T4989] usb 2-1: Using ep0 maxpacket: 16 [ 2362.426303][ T4989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2362.442507][T24908] usb 3-1: config 1 has no interface number 3 [ 2362.448765][ T4989] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 2362.461880][T24908] usb 3-1: config 1 has no interface number 4 [ 2362.469883][T24908] usb 3-1: config 1 has no interface number 5 [ 2362.476662][ T4989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2362.487300][T24908] usb 3-1: config 1 interface 119 altsetting 4 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 2362.499034][ T4989] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2362.518849][ T4989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2362.527503][T24908] usb 3-1: config 1 interface 119 altsetting 4 has an endpoint descriptor with address 0x99, changing to 0x89 [ 2362.553295][ T4989] usb 2-1: config 0 descriptor?? [ 2362.562259][T24908] usb 3-1: config 1 interface 170 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 2362.583401][ T4989] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2362.630264][ T2712] netlink: 'syz.4.7788': attribute type 6 has an invalid length. [ 2362.720491][T24908] usb 3-1: config 1 interface 74 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 2362.750239][T24908] usb 3-1: config 1 interface 74 altsetting 5 endpoint 0x3 has an invalid bInterval 65, changing to 10 [ 2362.786262][T24908] usb 3-1: config 1 interface 74 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2362.817991][T24908] usb 3-1: config 1 interface 74 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2363.109964][T24908] usb 3-1: too many endpoints for config 1 interface 0 altsetting 32: 123, using maximum allowed: 30 [ 2363.222658][T24908] usb 3-1: config 1 interface 0 altsetting 32 has a duplicate endpoint with address 0x4, skipping [ 2363.262833][T24908] usb 3-1: config 1 interface 0 altsetting 32 has a duplicate endpoint with address 0x6, skipping [ 2363.291386][T24908] usb 3-1: config 1 interface 0 altsetting 32 has 3 endpoint descriptors, different from the interface descriptor's value: 123 [ 2363.346593][T24908] usb 3-1: config 1 interface 164 altsetting 32 has a duplicate endpoint with address 0x8, skipping [ 2363.377368][ T2714] netlink: 'syz.0.7790': attribute type 6 has an invalid length. [ 2363.420797][T24908] usb 3-1: config 1 interface 164 altsetting 32 bulk endpoint 0xE has invalid maxpacket 16 [ 2363.461676][T24908] usb 3-1: config 1 interface 164 altsetting 32 has a duplicate endpoint with address 0x7, skipping [ 2363.498970][T24908] usb 3-1: config 1 interface 164 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 2363.537156][T24908] usb 3-1: config 1 interface 164 altsetting 32 has a duplicate endpoint with address 0x1, skipping [ 2363.601423][T24908] usb 3-1: config 1 interface 164 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 2363.632153][T24908] usb 3-1: config 1 interface 164 altsetting 32 has a duplicate endpoint with address 0x4, skipping [ 2363.656602][T24908] usb 3-1: config 1 interface 164 altsetting 32 has a duplicate endpoint with address 0xA, skipping [ 2363.691652][T24908] usb 3-1: config 1 interface 164 altsetting 32 has a duplicate endpoint with address 0xA, skipping [ 2363.722881][T24908] usb 3-1: config 1 interface 164 altsetting 32 has a duplicate endpoint with address 0x3, skipping [ 2363.819184][T24908] usb 3-1: config 1 interface 164 altsetting 32 has a duplicate endpoint with address 0x7, skipping [ 2363.830620][T24908] usb 3-1: config 1 interface 164 altsetting 32 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 2363.842861][T24908] usb 3-1: config 1 interface 164 altsetting 32 has a duplicate endpoint with address 0x5, skipping [ 2363.959436][T24908] usb 3-1: config 1 interface 164 altsetting 32 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 2363.972899][T24908] usb 3-1: too many endpoints for config 1 interface 231 altsetting 12: 218, using maximum allowed: 30 [ 2363.983999][T24908] usb 3-1: config 1 interface 231 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 2363.995076][T24908] usb 3-1: config 1 interface 231 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 218 [ 2364.008331][T24908] usb 3-1: config 1 interface 119 has no altsetting 0 [ 2364.426882][T24908] usb 3-1: config 1 interface 170 has no altsetting 0 [ 2364.507456][T24908] usb 3-1: config 1 interface 74 has no altsetting 0 [ 2364.542347][T24908] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2364.561760][T24908] usb 3-1: config 1 interface 164 has no altsetting 0 [ 2364.589497][T24908] usb 3-1: config 1 interface 231 has no altsetting 0 [ 2364.622989][T24908] usb 3-1: string descriptor 0 read error: -71 [ 2364.642465][T24908] usb 3-1: New USB device found, idVendor=0db0, idProduct=6861, bcdDevice=91.e3 [ 2364.661971][T24908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.780088][ T2740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7792'. [ 2364.789091][ T2740] nbd: must specify a size in bytes for the device [ 2364.796936][ T2740] loop5: detected capacity change from 0 to 2640 [ 2364.803778][ T2740] buffer_io_error: 325 callbacks suppressed [ 2364.803791][ T2740] Buffer I/O error on dev loop5, logical block 0, async page read [ 2364.817578][ T2740] Buffer I/O error on dev loop5, logical block 0, async page read [ 2364.825760][ T2740] Buffer I/O error on dev loop5, logical block 0, async page read [ 2364.833656][ T2740] Buffer I/O error on dev loop5, logical block 0, async page read [ 2364.841513][ T2740] Buffer I/O error on dev loop5, logical block 0, async page read [ 2364.849729][ T2740] Buffer I/O error on dev loop5, logical block 0, async page read [ 2364.858158][ T2740] Buffer I/O error on dev loop5, logical block 3, async page read [ 2364.862766][T24908] usb 3-1: can't set config #1, error -71 [ 2364.866016][ T2740] loop5: unable to read partition table [ 2364.875572][ T2737] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 2364.877622][ T2740] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 2364.885926][ T2737] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 2364.903020][ T2737] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 2364.970251][T24908] usb 3-1: USB disconnect, device number 82 [ 2365.021726][ T9] usb 2-1: USB disconnect, device number 61 [ 2365.764059][ T2754] netlink: 'syz.1.7796': attribute type 6 has an invalid length. [ 2366.588130][ T2767] netlink: 'syz.3.7798': attribute type 6 has an invalid length. [ 2370.063741][ T2801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7806'. [ 2370.714904][ T2815] netlink: 'syz.2.7809': attribute type 6 has an invalid length. [ 2370.843230][ T4989] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 2370.880164][ T2817] kvm: kvm [2816]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 2370.913710][ T2817] kvm: kvm [2816]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 2370.996378][ T4989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2371.022544][ T4989] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2371.032904][ T4989] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2371.046917][ T2836] FAULT_INJECTION: forcing a failure. [ 2371.046917][ T2836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2371.048972][ T4989] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2371.082574][ T2836] CPU: 0 UID: 0 PID: 2836 Comm: syz.4.7813 Tainted: G L syzkaller #0 PREEMPT(full) [ 2371.082599][ T2836] Tainted: [L]=SOFTLOCKUP [ 2371.082604][ T2836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2371.082610][ T2836] Call Trace: [ 2371.082615][ T2836] [ 2371.082619][ T2836] dump_stack_lvl+0x100/0x190 [ 2371.082637][ T2836] should_fail_ex.cold+0x5/0xa [ 2371.082651][ T2836] _copy_from_user+0x2e/0xd0 [ 2371.082665][ T2836] kstrtouint_from_user+0xd6/0x1d0 [ 2371.082682][ T2836] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2371.082699][ T2836] ? __lock_acquire+0x49f/0x1a40 [ 2371.082717][ T2836] proc_fail_nth_write+0x83/0x220 [ 2371.082733][ T2836] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2371.082751][ T2836] vfs_write+0x2aa/0x1050 [ 2371.082767][ T2836] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2371.082783][ T2836] ? __pfx_vfs_write+0x10/0x10 [ 2371.082798][ T2836] ? __fget_files+0x215/0x3d0 [ 2371.082823][ T2836] ? __fget_files+0x21f/0x3d0 [ 2371.082843][ T2836] ksys_write+0x12a/0x250 [ 2371.082858][ T2836] ? __pfx_ksys_write+0x10/0x10 [ 2371.082877][ T2836] do_syscall_64+0x115/0x870 [ 2371.082894][ T2836] ? clear_bhb_loop+0x40/0x90 [ 2371.082907][ T2836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2371.082918][ T2836] RIP: 0033:0x7f7f3015e6ce [ 2371.082929][ T2836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2371.082940][ T2836] RSP: 002b:00007f7f31094fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2371.082951][ T2836] RAX: ffffffffffffffda RBX: 00007f7f310956c0 RCX: 00007f7f3015e6ce [ 2371.082958][ T2836] RDX: 0000000000000001 RSI: 00007f7f310950a0 RDI: 0000000000000003 [ 2371.082964][ T2836] RBP: 00007f7f31095090 R08: 0000000000000000 R09: 0000000000000000 [ 2371.082970][ T2836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2371.082976][ T2836] R13: 00007f7f30426128 R14: 00007f7f30426090 R15: 00007fff9bc0d858 [ 2371.082990][ T2836] [ 2371.328910][ T4989] usb 2-1: string descriptor 0 read error: -22 [ 2371.335365][ T4989] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2371.377322][ T4989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.579246][ T4989] cdc_ncm 2-1:1.0: skipping garbage [ 2371.696435][ T4989] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 2371.722084][ T4989] cdc_ncm 2-1:1.0: bind() failure [ 2371.740734][ T4989] usb 2-1: USB disconnect, device number 62 [ 2373.942048][ T2879] netlink: 'syz.1.7820': attribute type 6 has an invalid length. [ 2374.107754][ T2891] netlink: 'syz.2.7821': attribute type 6 has an invalid length. [ 2374.533294][T11089] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2375.268288][ T2897] hpfs: Bad magic ... probably not HPFS [ 2375.578160][T11089] usb 2-1: Using ep0 maxpacket: 16 [ 2375.971474][T11089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2376.071658][ T2906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7825'. [ 2376.579242][T11089] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2376.588407][T11089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2376.641559][T11089] usb 2-1: Product: syz [ 2376.698825][T11089] usb 2-1: Manufacturer: syz [ 2376.782439][T11089] usb 2-1: SerialNumber: syz [ 2376.820869][T11089] usb 2-1: config 0 descriptor?? [ 2376.856041][T11089] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2376.868137][T11089] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 2377.009728][ T2909] tipc: Started in network mode [ 2377.014702][ T2909] tipc: Node identity ac14140f, cluster identity 4711 [ 2377.021615][ T2909] tipc: New replicast peer: 172.30.0.3 [ 2377.027465][ T2909] tipc: Enabled bearer , priority 10 [ 2377.448569][ T2915] hpfs: Bad magic ... probably not HPFS [ 2378.847946][ T1817] tipc: Node number set to 2886997007 [ 2378.919182][T11089] em28xx 2-1:0.0: chip ID is em2765 [ 2379.193340][T24908] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 2379.337535][ T4989] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 2379.374537][ T2933] netlink: 'syz.4.7833': attribute type 6 has an invalid length. [ 2379.405423][T11089] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2379.426511][T11089] em28xx 2-1:0.0: board has no eeprom [ 2379.506541][T11089] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2379.516118][ T4989] usb 3-1: config 248 has an invalid interface number: 168 but max is 0 [ 2379.526170][T24908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2379.533849][T11089] em28xx 2-1:0.0: dvb set to bulk mode. [ 2379.533912][ T1817] em28xx 2-1:0.0: Binding DVB extension [ 2379.546055][ T4989] usb 3-1: config 248 has no interface number 0 [ 2379.726978][T11089] usb 2-1: USB disconnect, device number 63 [ 2379.762282][ T4989] usb 3-1: config 248 interface 168 has no altsetting 0 [ 2379.762439][T11089] em28xx 2-1:0.0: Disconnecting em28xx [ 2379.789380][T24908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2379.819826][ T4989] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 6.7c [ 2380.085921][T24908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2380.165947][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2380.183528][ T4989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.198290][T24908] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2380.220605][ T4989] usb 3-1: Product: syz [ 2380.226593][ T4989] usb 3-1: Manufacturer: syz [ 2380.233805][ T1817] em28xx 2-1:0.0: Registering input extension [ 2380.243754][ T4989] usb 3-1: SerialNumber: syz [ 2380.250860][T24908] usb 4-1: string descriptor 0 read error: -22 [ 2380.265270][T11089] em28xx 2-1:0.0: Closing input extension [ 2380.267918][T24908] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2380.301453][T24908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.415311][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 2380.471153][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2380.904573][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2380.920090][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2380.957529][T24908] cdc_ncm 4-1:1.0: skipping garbage [ 2380.962212][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2380.999795][ T2927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2381.001649][T24908] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 2381.036582][ T9] usb 5-1: config 0 descriptor?? [ 2381.041917][T24908] cdc_ncm 4-1:1.0: bind() failure [ 2381.055765][ T2927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2381.095934][ T9] hub 5-1:0.0: USB hub found [ 2381.105062][T11089] em28xx 2-1:0.0: Freeing device [ 2381.139522][ T30] audit: type=1400 audit(1784287986.996:14417): avc: denied { watch watch_reads } for pid=2926 comm="syz.2.7831" path="/proc/180/task/182/fd" dev="proc" ino=160044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2381.177682][ T1817] usb 3-1: USB disconnect, device number 83 [ 2381.210573][T24908] usb 4-1: USB disconnect, device number 57 [ 2381.302575][ T9] hub 5-1:0.0: 1 port detected [ 2381.446250][ T2958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7838'. [ 2381.525840][T11089] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2381.733864][T11089] usb 2-1: Using ep0 maxpacket: 16 [ 2381.750588][T11089] usb 2-1: no configurations [ 2381.766187][T11089] usb 2-1: can't read configurations, error -22 [ 2381.934616][T11089] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2382.103283][T11089] usb 2-1: Using ep0 maxpacket: 16 [ 2382.115478][T11089] usb 2-1: no configurations [ 2382.128047][T11089] usb 2-1: can't read configurations, error -22 [ 2382.139490][ T2963] kvm: kvm [2962]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 2382.142055][T11089] usb usb2-port1: attempt power cycle [ 2382.160119][ T2966] FAULT_INJECTION: forcing a failure. [ 2382.160119][ T2966] name failslab, interval 1, probability 0, space 0, times 0 [ 2382.174796][ T2963] kvm: kvm [2962]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 2382.183814][ T2966] CPU: 1 UID: 0 PID: 2966 Comm: syz.0.7842 Tainted: G L syzkaller #0 PREEMPT(full) [ 2382.183841][ T2966] Tainted: [L]=SOFTLOCKUP [ 2382.183848][ T2966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2382.183858][ T2966] Call Trace: [ 2382.183864][ T2966] [ 2382.183871][ T2966] dump_stack_lvl+0x100/0x190 [ 2382.183898][ T2966] should_fail_ex.cold+0x5/0xa [ 2382.183921][ T2966] should_failslab+0xc2/0x120 [ 2382.183943][ T2966] __kmalloc_noprof+0xfc/0x820 [ 2382.183963][ T2966] ? tomoyo_encode2+0xfb/0x3c0 [ 2382.183991][ T2966] tomoyo_encode2+0xfb/0x3c0 [ 2382.184019][ T2966] tomoyo_encode+0x29/0x50 [ 2382.184045][ T2966] tomoyo_realpath_from_path+0x18c/0x690 [ 2382.184078][ T2966] tomoyo_path_number_perm+0x23c/0x580 [ 2382.184100][ T2966] ? tomoyo_path_number_perm+0x22e/0x580 [ 2382.184124][ T2966] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2382.184169][ T2966] ? find_held_lock+0x2b/0x80 [ 2382.184200][ T2966] ? __fget_files+0x215/0x3d0 [ 2382.184226][ T2966] ? hook_file_ioctl_common+0x140/0x440 [ 2382.184243][ T2966] ? __fget_files+0x215/0x3d0 [ 2382.184272][ T2966] ? __fget_files+0x21f/0x3d0 [ 2382.184302][ T2966] security_file_ioctl+0xd3/0x230 [ 2382.184327][ T2966] __x64_sys_ioctl+0xb7/0x210 [ 2382.184353][ T2966] do_syscall_64+0x115/0x870 [ 2382.184378][ T2966] ? clear_bhb_loop+0x40/0x90 [ 2382.184401][ T2966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2382.184419][ T2966] RIP: 0033:0x7f7f36d9de99 [ 2382.184435][ T2966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2382.184452][ T2966] RSP: 002b:00007f7f37d0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2382.184470][ T2966] RAX: ffffffffffffffda RBX: 00007f7f37025fa0 RCX: 00007f7f36d9de99 [ 2382.184481][ T2966] RDX: 00002000000000c0 RSI: 0000000000003b83 RDI: 0000000000000003 [ 2382.184492][ T2966] RBP: 00007f7f37d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 2382.184503][ T2966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2382.184513][ T2966] R13: 00007f7f37026038 R14: 00007f7f37025fa0 R15: 00007ffc4d84b108 [ 2382.184538][ T2966] [ 2382.184555][ T2966] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2382.404960][ T9] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 2382.412853][ T9] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 2382.444331][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 2382.470808][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 2382.503501][T11089] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2382.554171][T11089] usb 2-1: Using ep0 maxpacket: 16 [ 2382.586627][T11089] usb 2-1: no configurations [ 2382.594009][ T2972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=2972 comm=syz.0.7843 [ 2382.622228][T11089] usb 2-1: can't read configurations, error -22 [ 2382.784968][T11089] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2382.953892][T11089] usb 2-1: Using ep0 maxpacket: 16 [ 2383.028700][ T2978] binder: 2975:2978 ioctl c0306201 200000000080 returned -14 [ 2383.040772][ T30] audit: type=1400 audit(1784287988.896:14418): avc: denied { write } for pid=2975 comm="syz.2.7844" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2383.071652][T11089] usb 2-1: no configurations [ 2383.077761][ T2976] binder: 2975:2976 ioctl c0306201 2000000003c0 returned -14 [ 2383.105688][T11089] usb 2-1: can't read configurations, error -22 [ 2383.117616][T11089] usb usb2-port1: unable to enumerate USB device [ 2383.213333][ T4989] usb 5-1: USB disconnect, device number 86 [ 2383.390705][ T2983] netlink: 'syz.4.7845': attribute type 6 has an invalid length. [ 2383.443342][T24908] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2383.603231][T24908] usb 3-1: Using ep0 maxpacket: 16 [ 2383.615822][T24908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 2383.637328][T24908] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2383.659901][T24908] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 2383.670210][T24908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2383.700858][T24908] usb 3-1: config 0 descriptor?? [ 2384.127309][ T2976] binder: 2975:2976 ioctl 40045567 1 returned -22 [ 2384.168262][T24908] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 2384.178178][T24908] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 2384.198312][ T2993] netlink: 'syz.3.7848': attribute type 6 has an invalid length. [ 2384.229516][T24908] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 2384.262612][T24908] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 2384.281620][T24908] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 2384.421593][T24908] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 2384.483765][T24908] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 2384.511805][T24908] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 2384.529831][T24908] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 2384.550295][T24908] hid-picolcd 0003:04D8:C002.0020: unknown main item tag 0x0 [ 2384.646590][T24908] hid-picolcd 0003:04D8:C002.0020: No report with id 0x11 found [ 2384.799233][ T2996] netlink: 'syz.1.7849': attribute type 6 has an invalid length. [ 2384.811760][T24908] usb 3-1: USB disconnect, device number 84 [ 2385.077459][ T3005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7852'. [ 2387.511448][ T3025] netlink: 'syz.1.7857': attribute type 6 has an invalid length. [ 2389.198068][ T3054] netlink: 'syz.3.7862': attribute type 6 has an invalid length. [ 2389.870109][ T3062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7863'. [ 2389.879132][ T3062] nbd: must specify a size in bytes for the device [ 2389.886570][ T3062] loop5: detected capacity change from 0 to 2640 [ 2389.893393][ T3062] buffer_io_error: 327 callbacks suppressed [ 2389.893407][ T3062] Buffer I/O error on dev loop5, logical block 0, async page read [ 2389.907476][ T3062] Buffer I/O error on dev loop5, logical block 0, async page read [ 2389.915399][ T3062] Buffer I/O error on dev loop5, logical block 0, async page read [ 2389.923261][ T3062] Buffer I/O error on dev loop5, logical block 0, async page read [ 2389.931238][ T3062] Buffer I/O error on dev loop5, logical block 0, async page read [ 2389.939441][ T3062] Buffer I/O error on dev loop5, logical block 0, async page read [ 2389.947497][ T3062] Buffer I/O error on dev loop5, logical block 1, async page read [ 2389.955341][ T3062] Dev loop5: unable to read RDB block 8 [ 2389.959303][ T3061] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 2389.960891][ T3062] loop5: unable to read partition table [ 2389.969509][ T3061] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 2389.975282][ T3062] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 2389.983642][ T3061] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 2390.073452][T24908] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2390.253306][T24908] usb 4-1: Using ep0 maxpacket: 32 [ 2390.260055][T24908] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 2390.270473][T24908] usb 4-1: config 0 has no interface number 0 [ 2390.298320][T24908] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2390.415448][T24908] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2390.452799][T24908] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2390.466895][T24908] usb 4-1: config 0 interface 196 has no altsetting 0 [ 2390.506219][T24908] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 2390.528553][T24908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.586908][T24908] usb 4-1: Product: syz [ 2390.601351][T24908] usb 4-1: Manufacturer: syz [ 2390.614117][T24908] usb 4-1: SerialNumber: syz [ 2390.644781][T24908] usb 4-1: config 0 descriptor?? [ 2391.584212][ T3058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2392.363374][ T4989] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2392.620877][ T4989] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2392.746929][ T4989] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2392.846007][ T4989] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 2393.116434][ T4989] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 2393.162167][ T4989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.176771][ T3087] loop2: detected capacity change from 0 to 8 [ 2393.189337][ T4989] usb 5-1: Product: syz [ 2393.200382][ T4989] usb 5-1: Manufacturer: syz [ 2393.230293][ T4989] usb 5-1: SerialNumber: syz [ 2393.307543][T24908] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2393.340113][T24908] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 2393.391731][T24908] usb 4-1: USB disconnect, device number 58 [ 2393.724153][ T3093] hpfs: Bad magic ... probably not HPFS [ 2393.923949][ T30] audit: type=1400 audit(1784287999.746:14419): avc: denied { getopt } for pid=3081 comm="syz.4.7870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2394.262309][ T3087] Dev loop2: unable to read RDB block 8 [ 2394.267997][ T3087] loop2: unable to read partition table [ 2394.275222][ T3087] loop2: partition table beyond EOD, truncated [ 2394.302769][ T3087] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 2394.377869][ T4989] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2394.752974][ T4989] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 2395.089874][ T3110] syzkaller0: entered promiscuous mode [ 2395.173716][ T3110] syzkaller0: entered allmulticast mode [ 2395.207504][ T3111] netlink: 'syz.1.7875': attribute type 6 has an invalid length. [ 2395.211353][ T3115] FAULT_INJECTION: forcing a failure. [ 2395.211353][ T3115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2395.450501][ T3115] CPU: 1 UID: 0 PID: 3115 Comm: syz.3.7876 Tainted: G L syzkaller #0 PREEMPT(full) [ 2395.450532][ T3115] Tainted: [L]=SOFTLOCKUP [ 2395.450540][ T3115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2395.450549][ T3115] Call Trace: [ 2395.450556][ T3115] [ 2395.450563][ T3115] dump_stack_lvl+0x100/0x190 [ 2395.450590][ T3115] should_fail_ex.cold+0x5/0xa [ 2395.450613][ T3115] _copy_from_user+0x2e/0xd0 [ 2395.450635][ T3115] kstrtouint_from_user+0xd6/0x1d0 [ 2395.450660][ T3115] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2395.450686][ T3115] ? __lock_acquire+0x49f/0x1a40 [ 2395.450717][ T3115] proc_fail_nth_write+0x83/0x220 [ 2395.450743][ T3115] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2395.450775][ T3115] vfs_write+0x2aa/0x1050 [ 2395.450801][ T3115] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2395.450828][ T3115] ? __pfx_vfs_write+0x10/0x10 [ 2395.450853][ T3115] ? __fget_files+0x215/0x3d0 [ 2395.450887][ T3115] ? __fget_files+0x21f/0x3d0 [ 2395.450921][ T3115] ksys_write+0x12a/0x250 [ 2395.450946][ T3115] ? __pfx_ksys_write+0x10/0x10 [ 2395.450978][ T3115] do_syscall_64+0x115/0x870 [ 2395.451004][ T3115] ? clear_bhb_loop+0x40/0x90 [ 2395.451026][ T3115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2395.451050][ T3115] RIP: 0033:0x7fc22bb5e6ce [ 2395.451065][ T3115] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2395.451082][ T3115] RSP: 002b:00007fc22ca0ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2395.451100][ T3115] RAX: ffffffffffffffda RBX: 00007fc22ca106c0 RCX: 00007fc22bb5e6ce [ 2395.451112][ T3115] RDX: 0000000000000001 RSI: 00007fc22ca100a0 RDI: 0000000000000006 [ 2395.451123][ T3115] RBP: 00007fc22ca10090 R08: 0000000000000000 R09: 0000000000000000 [ 2395.451135][ T3115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2395.451146][ T3115] R13: 00007fc22be26218 R14: 00007fc22be26180 R15: 00007ffe5a855068 [ 2395.451171][ T3115] [ 2395.687894][ T4989] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 2395.705239][ T4989] usb 5-1: USB disconnect, device number 87 [ 2395.759510][T32767] udevd[32767]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2395.999453][ T3124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7880'. [ 2396.679228][ T3129] kvm: kvm [3128]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 2396.842208][ T3129] kvm: kvm [3128]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 2398.822964][ T3154] kvm: kvm [3150]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 2399.113632][ T3154] kvm: kvm [3150]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 2400.321025][ T3169] netlink: 'syz.4.7890': attribute type 6 has an invalid length. [ 2400.410377][ T3183] FAULT_INJECTION: forcing a failure. [ 2400.410377][ T3183] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.443343][ T3183] CPU: 1 UID: 0 PID: 3183 Comm: syz.1.7894 Tainted: G L syzkaller #0 PREEMPT(full) [ 2400.443373][ T3183] Tainted: [L]=SOFTLOCKUP [ 2400.443379][ T3183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2400.443389][ T3183] Call Trace: [ 2400.443394][ T3183] [ 2400.443401][ T3183] dump_stack_lvl+0x100/0x190 [ 2400.443422][ T3183] should_fail_ex.cold+0x5/0xa [ 2400.443436][ T3183] should_failslab+0xc2/0x120 [ 2400.443449][ T3183] kmem_cache_alloc_noprof+0x91/0x6a0 [ 2400.443460][ T3183] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2400.443481][ T3183] ? do_getname+0x35/0x390 [ 2400.443496][ T3183] do_getname+0x35/0x390 [ 2400.443510][ T3183] user_path_at+0x26/0x60 [ 2400.443530][ T3183] bpf_uprobe_multi_link_attach+0x540/0x1600 [ 2400.443556][ T3183] ? find_held_lock+0x2b/0x80 [ 2400.443585][ T3183] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 2400.443605][ T3183] ? __fget_files+0x21f/0x3d0 [ 2400.443625][ T3183] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2400.443639][ T3183] __sys_bpf+0x414f/0x4e80 [ 2400.443661][ T3183] ? __pfx___sys_bpf+0x10/0x10 [ 2400.443678][ T3183] ? find_held_lock+0x2b/0x80 [ 2400.443694][ T3183] ? get_pid_task+0xfc/0x250 [ 2400.443709][ T3183] ? get_pid_task+0xfc/0x250 [ 2400.443729][ T3183] ? find_held_lock+0x2b/0x80 [ 2400.443747][ T3183] ? rcu_read_lock_any_held+0x6a/0xa0 [ 2400.443763][ T3183] ? find_held_lock+0x2b/0x80 [ 2400.443778][ T3183] ? ksys_write+0x190/0x250 [ 2400.443793][ T3183] ? ksys_write+0x190/0x250 [ 2400.443818][ T3183] ? fput+0x79/0x100 [ 2400.443831][ T3183] ? __x64_sys_bpf+0xce/0x140 [ 2400.443840][ T3183] __x64_sys_bpf+0xce/0x140 [ 2400.443850][ T3183] ? do_syscall_64+0x90/0x870 [ 2400.443867][ T3183] do_syscall_64+0x115/0x870 [ 2400.443882][ T3183] ? clear_bhb_loop+0x40/0x90 [ 2400.443896][ T3183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2400.443907][ T3183] RIP: 0033:0x7f696f99de99 [ 2400.443918][ T3183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2400.443928][ T3183] RSP: 002b:00007f69708f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2400.443939][ T3183] RAX: ffffffffffffffda RBX: 00007f696fc25fa0 RCX: 00007f696f99de99 [ 2400.443946][ T3183] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 2400.443953][ T3183] RBP: 00007f69708f5090 R08: 0000000000000000 R09: 0000000000000000 [ 2400.443959][ T3183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2400.443965][ T3183] R13: 00007f696fc26038 R14: 00007f696fc25fa0 R15: 00007ffeb65a12d8 [ 2400.443979][ T3183] [ 2400.884726][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2400.891588][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 2400.897386][ T3194] xt_hashlimit: size too large, truncated to 1048576 [ 2401.251632][ T3198] hpfs: Bad magic ... probably not HPFS [ 2401.771650][ T3224] netlink: 'syz.2.7903': attribute type 11 has an invalid length. [ 2401.783481][ T3224] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7903'. [ 2401.979364][ T3230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7904'. [ 2402.076033][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2402.284677][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2402.344376][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2402.429002][ T9] usb 3-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 8 [ 2402.529279][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2402.617068][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 2402.679345][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.764355][ T9] usb 3-1: Product: syz [ 2402.801900][ T9] usb 3-1: Manufacturer: syz [ 2402.848882][ T9] usb 3-1: SerialNumber: syz [ 2403.114582][ T3224] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2403.671808][ T1817] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2403.748602][ T3224] Can't find a SQUASHFS superblock on nullb0 [ 2403.846860][ T3224] bridge0: port 1(bridge_slave_0) entered disabled state [ 2403.872843][ T1817] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2403.933557][ T1817] usb 2-1: config 228 has an invalid interface number: 86 but max is 0 [ 2404.175941][ T1817] usb 2-1: config 228 has no interface number 0 [ 2404.182468][ T1817] usb 2-1: config 228 interface 86 has no altsetting 0 [ 2404.219724][ T1817] usb 2-1: New USB device found, idVendor=0b57, idProduct=9de3, bcdDevice=87.f6 [ 2404.268101][ T1817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2404.307906][ T1817] usb 2-1: Product: syz [ 2404.322928][ T1817] usb 2-1: Manufacturer: syz [ 2404.341069][ T1817] usb 2-1: SerialNumber: syz [ 2404.376176][ T9] usblp0: Disabling reads from problematic bidirectional printer [ 2404.385578][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 2404.402685][ T3253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7909'. [ 2404.442028][ T9] usb 3-1: USB disconnect, device number 85 [ 2404.477209][ T9] usblp0: removed [ 2404.615276][ T1817] usbhid 2-1:228.86: couldn't find an input interrupt endpoint [ 2404.637297][ T1817] usb 2-1: USB disconnect, device number 68 [ 2404.856043][ T3258] hpfs: Bad magic ... probably not HPFS [ 2405.353648][ T9] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 2405.483513][ T9] usb 3-1: device descriptor read/64, error -71 [ 2406.138310][ T3285] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2406.275991][ T3285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2406.282886][ T3285] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 2406.290675][ T3285] audit: backlog limit exceeded [ 2406.296698][ T3285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2406.303302][ T3285] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 2406.310970][ T3285] audit: backlog limit exceeded [ 2406.318321][ T3285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2406.325688][ T3285] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 2406.333410][ T3285] audit: backlog limit exceeded [ 2406.338299][ T3285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2406.667593][ T3285] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7917'. [ 2406.676615][ T3285] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7917'. [ 2406.685878][ T3285] netlink: 'syz.4.7917': attribute type 5 has an invalid length. [ 2406.693649][ T3285] netlink: 'syz.4.7917': attribute type 6 has an invalid length. [ 2406.701366][ T3285] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7917'. [ 2406.787099][ T9] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 2406.943540][ T1817] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2406.963249][ T9] usb 3-1: device descriptor read/64, error -71 [ 2407.363576][ T9] usb usb3-port1: attempt power cycle [ 2407.435529][ T1817] usb 4-1: Using ep0 maxpacket: 16 [ 2407.449398][ T1817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2407.484198][ T1817] usb 4-1: config 3 has an invalid interface number: 74 but max is 0 [ 2407.500874][ T1817] usb 4-1: config 3 has no interface number 0 [ 2407.523883][ T1817] usb 4-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 2407.579677][ T1817] usb 4-1: config 3 interface 74 has no altsetting 0 [ 2407.604071][ T1817] usb 4-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 2407.621057][ T1817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.636630][ T1817] usb 4-1: Product: syz [ 2407.644212][ T1817] usb 4-1: Manufacturer: syz [ 2407.651514][ T1817] usb 4-1: SerialNumber: syz [ 2407.703500][ T9] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 2407.734381][ T9] usb 3-1: device descriptor read/8, error -71 [ 2407.922615][ T1817] usb 4-1: USB disconnect, device number 59 [ 2407.986736][ T9] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 2408.352767][ T9] usb 3-1: device descriptor read/8, error -71 [ 2408.496447][ T9] usb usb3-port1: unable to enumerate USB device [ 2409.172941][ T3319] NILFS (nullb0): couldn't find nilfs on the device [ 2411.685309][ T3331] netlink: 'syz.3.7926': attribute type 6 has an invalid length. [ 2413.673898][T24908] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2413.883202][T24908] usb 1-1: Using ep0 maxpacket: 32 [ 2413.903998][T24908] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2413.929323][T24908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2413.972885][T24908] usb 1-1: config 0 descriptor?? [ 2414.257669][T24908] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2414.346088][ T3381] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7939'. [ 2414.408952][T24908] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 2414.443764][T24908] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2414.455242][ T30] kauditd_printk_skb: 278 callbacks suppressed [ 2414.455258][ T30] audit: type=1400 audit(1784288020.306:14486): avc: denied { firmware_load } for pid=24908 comm="kworker/1:2" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2415.654831][ T7465] Bluetooth: (null): Invalid header checksum [ 2415.777413][ T138] Bluetooth: (null): Invalid header checksum [ 2415.930915][ T3400] kvm: kvm [3399]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 2415.947985][ T3400] kvm: kvm [3399]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 2416.747727][ T3415] netlink: 'syz.0.7947': attribute type 6 has an invalid length. [ 2417.144587][ T3419] netlink: 'syz.2.7948': attribute type 6 has an invalid length. [ 2417.409044][ T3424] netlink: 'syz.0.7949': attribute type 6 has an invalid length. [ 2418.647640][ T3432] hpfs: Bad magic ... probably not HPFS [ 2418.699590][ T3436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2419.201515][ T1817] IPVS: starting estimator thread 0... [ 2419.305932][ T3446] IPVS: using max 51 ests per chain, 122400 per kthread [ 2419.465473][ T3451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7957'. [ 2420.530562][ T3460] hpfs: Bad magic ... probably not HPFS [ 2420.643298][T14833] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2420.683518][ T5704] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 2420.946396][T14833] usb 4-1: Using ep0 maxpacket: 8 [ 2420.976388][T14833] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2421.007991][T14833] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2421.162207][ T5704] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2421.184788][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2421.198160][T14833] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2421.212918][ T5704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2421.228364][T14833] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2421.243446][ T5704] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2421.266540][T14833] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2421.302960][ T5704] usb 3-1: string descriptor 0 read error: -22 [ 2421.315346][ T5704] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2421.324491][T14833] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2421.333846][T14833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2421.341884][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2421.458899][ T5704] cdc_ncm 3-1:1.0: skipping garbage [ 2421.487298][ T5704] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 2421.555984][ T5704] cdc_ncm 3-1:1.0: bind() failure [ 2421.915700][T14833] usb 4-1: GET_CAPABILITIES returned 0 [ 2421.935714][T14833] usbtmc 4-1:16.0: can't read capabilities [ 2421.943536][ T5704] usb 3-1: USB disconnect, device number 90 [ 2422.444500][ T1817] usb 4-1: USB disconnect, device number 60 [ 2422.600203][ T3487] hpfs: Bad magic ... probably not HPFS [ 2423.151078][ T3501] siw: device registration error -23 [ 2423.244349][T22112] Bluetooth: (null): Invalid header checksum [ 2423.359834][T13241] Bluetooth: (null): Invalid header checksum [ 2423.380877][ T3500] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 2423.402630][T22112] Bluetooth: (null): Invalid header checksum [ 2424.042049][T22112] Bluetooth: (null): Invalid header checksum [ 2424.055364][T22112] Bluetooth: (null): Invalid header checksum [ 2424.094798][T22112] Bluetooth: (null): Invalid header checksum [ 2424.161581][T22112] Bluetooth: (null): Invalid header checksum [ 2424.178583][T22112] Bluetooth: (null): Invalid header checksum [ 2424.430537][ T3533] hpfs: Bad magic ... probably not HPFS [ 2425.157312][ T3542] kvm: kvm [3541]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 2425.188369][ T3542] kvm: kvm [3541]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 2426.789026][ T3555] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 2426.800648][ T3555] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 2426.825463][ T3555] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 2426.836111][ T3555] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 2426.851147][ T3555] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 2426.861771][ T3555] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 2426.876654][ T3555] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 2426.887248][ T3555] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 2426.897022][ T3555] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 2427.083383][T11089] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2427.303558][T11089] usb 4-1: Using ep0 maxpacket: 8 [ 2427.338152][T11089] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2427.437430][T11089] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2427.563922][T11089] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2427.579764][ T30] audit: type=1400 audit(1784288033.436:14487): avc: denied { setopt } for pid=3558 comm="syz.2.7985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2427.593141][T11089] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2427.641995][T11089] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2427.674546][T11089] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2427.732121][T11089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2428.410408][T11089] usb 4-1: GET_CAPABILITIES returned 0 [ 2428.418257][T11089] usbtmc 4-1:16.0: can't read capabilities [ 2428.553580][ T5704] usb 4-1: USB disconnect, device number 61 [ 2429.555635][ T3583] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2429.564007][ T3583] UDF-fs: Scanning with blocksize 512 failed [ 2429.575677][ T3583] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2429.583297][ T3583] UDF-fs: Scanning with blocksize 1024 failed [ 2429.591201][ T3583] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2429.598946][ T3583] UDF-fs: Scanning with blocksize 2048 failed [ 2429.607300][ T3583] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 2429.614841][ T3583] UDF-fs: Scanning with blocksize 4096 failed [ 2429.922950][ T3579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2429.961139][ T3579] 8021q: adding VLAN 0 to HW filter on device team0 [ 2429.982811][ T3579] batman_adv: batadv0: Interface activated: dummy0 [ 2430.013307][ T3579] batadv0: mtu less than device minimum [ 2430.115565][ T3586] FAULT_INJECTION: forcing a failure. [ 2430.115565][ T3586] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.141323][ T3579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2430.152169][ T3579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2430.162949][ T3579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2430.173741][ T3579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2430.184508][ T3579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2430.195288][ T3579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2430.206588][ T3579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2430.217436][ T3579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2430.228313][ T3579] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2430.512936][ T3586] CPU: 0 UID: 0 PID: 3586 Comm: syz.4.7994 Tainted: G L syzkaller #0 PREEMPT(full) [ 2430.512968][ T3586] Tainted: [L]=SOFTLOCKUP [ 2430.512975][ T3586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2430.512987][ T3586] Call Trace: [ 2430.512994][ T3586] [ 2430.513001][ T3586] dump_stack_lvl+0x100/0x190 [ 2430.513030][ T3586] should_fail_ex.cold+0x5/0xa [ 2430.513053][ T3586] should_failslab+0xc2/0x120 [ 2430.513074][ T3586] __kmalloc_noprof+0xfc/0x820 [ 2430.513093][ T3586] ? __pfx_dynamic_dname+0x10/0x10 [ 2430.513115][ T3586] ? tomoyo_encode2+0xfb/0x3c0 [ 2430.513142][ T3586] tomoyo_encode2+0xfb/0x3c0 [ 2430.513172][ T3586] tomoyo_encode+0x29/0x50 [ 2430.513197][ T3586] tomoyo_realpath_from_path+0x18c/0x690 [ 2430.513230][ T3586] tomoyo_path_number_perm+0x23c/0x580 [ 2430.513251][ T3586] ? tomoyo_path_number_perm+0x22e/0x580 [ 2430.513276][ T3586] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2430.513324][ T3586] ? find_held_lock+0x2b/0x80 [ 2430.513349][ T3586] ? __fget_files+0x215/0x3d0 [ 2430.513375][ T3586] ? hook_file_ioctl_common+0x140/0x440 [ 2430.513393][ T3586] ? __fget_files+0x215/0x3d0 [ 2430.513425][ T3586] ? __fget_files+0x21f/0x3d0 [ 2430.513456][ T3586] security_file_ioctl+0xd3/0x230 [ 2430.513483][ T3586] __x64_sys_ioctl+0xb7/0x210 [ 2430.513509][ T3586] do_syscall_64+0x115/0x870 [ 2430.513536][ T3586] ? clear_bhb_loop+0x40/0x90 [ 2430.513558][ T3586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2430.513577][ T3586] RIP: 0033:0x7f7f3019de99 [ 2430.513593][ T3586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2430.513610][ T3586] RSP: 002b:00007f7f310b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2430.513628][ T3586] RAX: ffffffffffffffda RBX: 00007f7f30425fa0 RCX: 00007f7f3019de99 [ 2430.513647][ T3586] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 2430.513658][ T3586] RBP: 00007f7f310b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2430.513669][ T3586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2430.513679][ T3586] R13: 00007f7f30426038 R14: 00007f7f30425fa0 R15: 00007fff9bc0d858 [ 2430.513704][ T3586] [ 2430.754025][ T3586] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2431.096712][ T3579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2431.486871][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2431.736227][ T3579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2431.937402][ T3579] veth1_macvtap: left promiscuous mode [ 2431.951838][ T3579] veth0_macvtap: left promiscuous mode [ 2431.970159][ T3579] veth0_macvtap: entered promiscuous mode [ 2432.007086][ T3579] veth1_macvtap: entered promiscuous mode [ 2432.032324][ T3579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2432.049291][ T3579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2432.075771][ T3579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2432.093802][ T3612] bad cache= option: noner_mlock 0 [ 2432.093802][ T3612] nr_zspages 0 [ 2432.093802][ T3612] nr_free_cma 0 [ 2432.093802][ T3612] numa_hit 10311463 [ 2432.093802][ T3612] numa_miss 1 [ 2432.093802][ T3612] numa_foreign 1 [ 2432.093802][ T3612] numa_interleave 9298 [ 2432.093802][ T3612] numa_local 10305741 [ 2432.093802][ T3612] numa_other 5723 [ 2432.093802][ T3612] nr_inactive_anon 0 [ 2432.093802][ T3612] nr_active_anon 82010 [ 2432.093802][ T3612] nr_inactive_file 35404 [ 2432.093802][ T3612] nr_active_file 0 [ 2432.093802][ T3612] nr_unevictable 768 [ 2432.093802][ T3612] nr_slab_reclaimable 13356 [ 2432.093802][ T3612] nr_slab_unreclaimable 122281 [ 2432.093802][ T3612] nr_isolated_anon 0 [ 2432.093802][ T3612] nr_isolated_file 0 [ 2432.093802][ T3612] workingset_nodes 0 [ 2432.093802][ T3612] workingset_refault_anon 24485 [ 2432.093802][ T3612] workingset_refault_file 0 [ 2432.093802][ T3612] workingset_activate_anon 0 [ 2432.093802][ T3612] workingset_activate_file 0 [ 2432.093802][ T3612] workingset_restore_anon 0 [ 2432.093802][ T3612] workingset_restore_file 0 [ 2432.093802][ T3612] workingset_nodereclaim 0 [ 2432.093802][ T3612] nr_anon_pages 13795 [ 2432.093802][ T3612] nr_mapped 35971 [ 2432.093802][ T3612] nr_file_pages 104371 [ 2432.093802][ T3612] nr_dirty 439 [ 2432.093802][ T3612] nr_writeback 0 [ 2432.093802][ T3612] nr_shmem 68971 [ 2432.093802][ T3612] nr_shmem_hugepages 0 [ 2432.093802][ T3612] nr_shmem_pmdmapped 0 [ 2432.093802][ T3612] nr_file_hugepages 0 [ 2432.093802][ T3612] nr_file_pmdmapped 0 [ 2432.093802][ T3612] nr_anon_transparent_hugepages 0 [ 2432.093802][ T3612] nr_vmscan_write 67885 [ 2432.093802][ T3612] nr_vmscan_immediate_reclaim 0 [ 2432.093802][ T3612] nr_dirtied 85407 [ 2432.093802][ T3612] nr_written 80275 [ 2432.093802][ T3612] nr_throttled_written 0 [ 2432.093802][ T3612] nr_kernel_misc_reclaimable 0 [ 2432.093802][ T3612] nr_foll_pin_acquired 23847 [ 2432.093802][ T3612] nr_foll_pin_released 23847 [ 2432.093802][ T3612] nr_vmalloc 102097 [ 2432.094150][ T3612] CIFS: VFS: bad cache= option: noner_mlock 0 [ 2432.094150][ T3612] nr_zspages 0 [ 2432.094150][ T3612] nr_free_cma 0 [ 2432.094150][ T3612] numa_hit 10311463 [ 2432.094150][ T3612] numa_miss 1 [ 2432.094150][ T3612] numa_foreign 1 [ 2432.094150][ T3612] numa_interleave 9298 [ 2432.094150][ T3612] numa_local 10305741 [ 2432.094150][ T3612] numa_other 5723 [ 2432.094150][ T3612] nr_inactive_anon 0 [ 2432.094150][ T3612] nr_active_anon 82010 [ 2432.094150][ T3612] nr_inactive_file 35404 [ 2432.094150][ T3612] nr_active_file 0 [ 2432.094150][ T3612] nr_unevictable 768 [ 2432.094150][ T3612] nr_slab_reclaimable 13356 [ 2432.094150][ T3612] nr_slab_unreclaimable 122281 [ 2432.094150][ T3612] nr_isolated_anon 0 [ 2432.094150][ T3612] nr_isolated_file 0 [ 2432.094150][ T3612] workingset_nodes 0 [ 2432.094150][ T3612] workingset_refault_anon 24485 [ 2432.094150][ T3612] workingset_refault_file 0 [ 2432.094150][ T3612] workingset_activate_anon 0 [ 2432.094150][ T3612] workingset_activate_file 0 [ 2432.094150][ T3612] workingset_restore_anon 0 [ 2432.094150][ T3612] workingset_restore_file 0 [ 2432.094150][ T3612] workingset_nodereclaim 0 [ 2432.094150][ T3612] nr_anon_pages 13795 [ 2432.094150][ T3612] nr_mapped 35971 [ 2432.094150][ T3612] nr_file_pages 104371 [ 2432.094150][ T3612] nr_dirty 439 [ 2432.094150][ T3612] nr_writeback 0 [ 2432.094150][ T3612] nr_shmem 68971 [ 2432.094150][ T3612] nr_shmem_hugepages 0 [ 2432.094150][ T3612] nr_shmem_pmdmapped 0 [ 2432.094150][ T3612] nr_file_hugepages 0 [ 2432.094150][ T3612] nr_file_pmdmapped 0 [ 2432.094150][ T3612] nr_anon_transparent_hugepages 0 [ 2432.094150][ T3612] nr_vmscan_write 67885 [ 2432.094150][ T3612] nr_vmscan_immediate_reclaim 0 [ 2432.094150][ T3612] nr_dirtied 85407 [ 2432.094150][ T3612] nr_written 80275 [ 2432.094150][ T3612] nr_throttled_written 0 [ 2432.094150][ T3612] nr_kernel_misc_reclaimable 0 [ 2432.094150][ T3612] nr_foll_pin_acquired 23847 [ 2432.094150][ T3612] nr_foll_pin_released 23847 [ 2432.285778][ T3579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2432.608540][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 2432.617499][ T7465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2432.774980][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 2432.775085][ T7465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2433.640405][ T7455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2433.840260][ T7455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.040663][ T7455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.052677][ T7455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.121405][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8005'. [ 2434.636031][ T30] audit: type=1400 audit(1784288040.496:14488): avc: denied { remount } for pid=3642 comm="syz.0.8008" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2435.144161][T13241] net_ratelimit: 57 callbacks suppressed [ 2435.144175][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2435.232963][ T3652] netlink: 'syz.2.8010': attribute type 6 has an invalid length. [ 2435.801216][ T3657] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2435.954379][ T3657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2435.962792][ T3657] audit: audit_lost=76 audit_rate_limit=0 audit_backlog_limit=64 [ 2435.970636][ T3657] audit: backlog limit exceeded [ 2435.977617][ T3657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2435.985104][ T3657] audit: audit_lost=77 audit_rate_limit=0 audit_backlog_limit=64 [ 2435.992932][ T3657] audit: backlog limit exceeded [ 2435.998024][ T3657] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2436.004679][ T3657] audit: audit_lost=78 audit_rate_limit=0 audit_backlog_limit=64 [ 2436.013146][ T3657] audit: backlog limit exceeded [ 2436.397970][ T138] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2436.442256][ T3646] netlink: 'syz.4.8009': attribute type 6 has an invalid length. [ 2437.787501][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2438.434816][T22112] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2439.044059][ T12] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2439.851778][ T12] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2440.710971][ T138] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2441.080686][ T3694] xt_hashlimit: size too large, truncated to 1048576 [ 2441.193716][ T3690] netlink: 'syz.1.8021': attribute type 6 has an invalid length. [ 2441.337479][ T12] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2442.033400][T14833] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2442.044422][ T7459] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2442.374222][T14833] usb 5-1: Using ep0 maxpacket: 32 [ 2442.398498][T14833] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2442.407968][T14833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.416492][T14833] usb 5-1: Product: syz [ 2442.447280][T14833] usb 5-1: Manufacturer: syz [ 2442.461222][T14833] usb 5-1: SerialNumber: syz [ 2442.482013][T14833] usb 5-1: config 0 descriptor?? [ 2442.590957][T14833] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2442.898186][T32089] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2443.600777][T14833] gspca_ov534_9: reg_w failed -110 [ 2444.115841][ T3726] hpfs: Bad magic ... probably not HPFS [ 2444.183234][T14833] gspca_ov534_9: Unknown sensor 0000 [ 2444.183818][T14833] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 2444.278245][ T7455] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2444.997869][T22112] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2445.068697][T11089] usb 5-1: USB disconnect, device number 88 [ 2445.159717][ T3748] netlink: 666 bytes leftover after parsing attributes in process `syz.4.8034'. [ 2445.305639][ T3751] hpfs: Bad magic ... probably not HPFS [ 2445.563268][ T7459] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2446.095188][ T7459] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2446.643456][T22112] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2447.304654][T22112] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2447.363637][ T3788] netlink: 'syz.3.8045': attribute type 11 has an invalid length. [ 2447.376374][ T3788] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8045'. [ 2447.653263][T26766] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2447.833539][T26766] usb 4-1: Using ep0 maxpacket: 32 [ 2447.840421][T26766] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2447.848209][T22112] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2447.878462][T26766] usb 4-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 8 [ 2447.891849][T26766] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2447.905075][T26766] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 2447.917238][T26766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2447.926181][T26766] usb 4-1: Product: syz [ 2447.932102][T26766] usb 4-1: Manufacturer: syz [ 2447.938931][T26766] usb 4-1: SerialNumber: syz [ 2447.950676][ T3788] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2448.040754][ T1817] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 2448.053256][ T5704] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2448.168951][ T3788] Can't find a SQUASHFS superblock on nullb0 [ 2448.189036][T26766] usblp0: Disabling reads from problematic bidirectional printer [ 2448.233378][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2448.236419][ T1817] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2448.276758][ T1817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2448.277759][ T5704] usb 5-1: config 228 has an invalid interface number: 86 but max is 0 [ 2448.296036][ T1817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2448.299529][T26766] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 2448.317075][ T5704] usb 5-1: config 228 has no interface number 0 [ 2448.396739][ T5704] usb 5-1: config 228 interface 86 has no altsetting 0 [ 2448.556766][T26766] usb 4-1: USB disconnect, device number 62 [ 2448.557004][T32089] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2448.564700][ T5704] usb 5-1: New USB device found, idVendor=0b57, idProduct=9de3, bcdDevice=87.f6 [ 2448.587608][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2448.587739][ T1817] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2448.595654][ T5704] usb 5-1: Product: syz [ 2448.618097][T26766] usblp0: removed [ 2448.620028][ T1817] usb 2-1: string descriptor 0 read error: -22 [ 2448.624697][ T5704] usb 5-1: Manufacturer: syz [ 2448.640276][ T1817] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2448.678319][ T5704] usb 5-1: SerialNumber: syz [ 2448.701460][ T1817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2448.722643][ T1817] cdc_ncm 2-1:1.0: skipping garbage [ 2448.736233][ T1817] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 2448.749574][ T1817] cdc_ncm 2-1:1.0: bind() failure [ 2448.915275][ T5704] usbhid 5-1:228.86: couldn't find an input interrupt endpoint [ 2448.935719][ T1817] usb 2-1: USB disconnect, device number 69 [ 2448.977295][ T5704] usb 5-1: USB disconnect, device number 89 [ 2449.123453][T22112] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2449.803500][ T12] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2450.497338][ T7459] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2451.064278][T22112] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2451.623274][T32089] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2451.726026][ T3851] FAULT_INJECTION: forcing a failure. [ 2451.726026][ T3851] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.739642][ T3851] CPU: 0 UID: 0 PID: 3851 Comm: syz.2.8063 Tainted: G L syzkaller #0 PREEMPT(full) [ 2451.739667][ T3851] Tainted: [L]=SOFTLOCKUP [ 2451.739671][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2451.739677][ T3851] Call Trace: [ 2451.739682][ T3851] [ 2451.739686][ T3851] dump_stack_lvl+0x100/0x190 [ 2451.739702][ T3851] should_fail_ex.cold+0x5/0xa [ 2451.739716][ T3851] should_failslab+0xc2/0x120 [ 2451.739729][ T3851] __kmalloc_noprof+0xfc/0x820 [ 2451.739741][ T3851] ? tomoyo_encode2+0xfb/0x3c0 [ 2451.739760][ T3851] tomoyo_encode2+0xfb/0x3c0 [ 2451.739777][ T3851] tomoyo_encode+0x29/0x50 [ 2451.739793][ T3851] tomoyo_realpath_from_path+0x18c/0x690 [ 2451.739812][ T3851] tomoyo_path_number_perm+0x23c/0x580 [ 2451.739826][ T3851] ? tomoyo_path_number_perm+0x22e/0x580 [ 2451.739839][ T3851] ? __kvm_handle_async_pf+0x54/0xa0 [ 2451.739856][ T3851] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2451.739870][ T3851] ? lock_acquire+0x1b9/0x370 [ 2451.739895][ T3851] ? find_held_lock+0x2b/0x80 [ 2451.739914][ T3851] ? __fget_files+0x215/0x3d0 [ 2451.739930][ T3851] ? hook_file_ioctl_common+0x140/0x440 [ 2451.739940][ T3851] ? __fget_files+0x215/0x3d0 [ 2451.739959][ T3851] ? __fget_files+0x21f/0x3d0 [ 2451.739977][ T3851] security_file_ioctl+0xd3/0x230 [ 2451.739993][ T3851] __x64_sys_ioctl+0xb7/0x210 [ 2451.740009][ T3851] do_syscall_64+0x115/0x870 [ 2451.740024][ T3851] ? clear_bhb_loop+0x40/0x90 [ 2451.740037][ T3851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.740049][ T3851] RIP: 0033:0x7fb92939de99 [ 2451.740059][ T3851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2451.740069][ T3851] RSP: 002b:00007fb92a286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2451.740080][ T3851] RAX: ffffffffffffffda RBX: 00007fb929626090 RCX: 00007fb92939de99 [ 2451.740087][ T3851] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000008 [ 2451.740094][ T3851] RBP: 00007fb92a286090 R08: 0000000000000000 R09: 0000000000000000 [ 2451.740100][ T3851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2451.740107][ T3851] R13: 00007fb929626128 R14: 00007fb929626090 R15: 00007ffe4b7846a8 [ 2451.740121][ T3851] [ 2451.740149][ T3851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2452.684053][T32089] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2452.874927][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8067'. [ 2453.544542][ T7455] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2454.156385][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2454.606783][ T3880] gtp0: entered promiscuous mode [ 2454.655930][ T3880] gtp0: entered allmulticast mode [ 2454.815575][ T138] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2455.365557][ T12] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2455.974609][T22112] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2456.563695][ T7455] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2457.111444][ T3887] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2457.578624][ T7459] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2457.879937][ T3894] hpfs: Bad magic ... probably not HPFS [ 2458.183396][ T7455] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2458.831179][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2459.303414][T26766] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2459.383698][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2459.573253][T26766] usb 2-1: Using ep0 maxpacket: 8 [ 2459.581716][T26766] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2459.591886][T26766] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2459.626917][T26766] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2459.673829][T26766] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2459.700651][T26766] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2459.714706][T26766] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2459.754174][T26766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2459.964883][ T7459] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2459.983572][ T3922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8081'. [ 2460.052856][T26766] usb 2-1: GET_CAPABILITIES returned 0 [ 2460.072898][T26766] usbtmc 2-1:16.0: can't read capabilities [ 2460.554278][ T12] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2460.621349][T26766] usb 2-1: USB disconnect, device number 70 [ 2461.104465][ T3930] netlink: 'syz.3.8083': attribute type 6 has an invalid length. [ 2461.137831][ T7459] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2461.726204][ T138] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2462.048551][ T3953] netlink: 'syz.3.8089': attribute type 6 has an invalid length. [ 2462.325909][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2462.345755][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 2462.373226][ T7455] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2462.903495][ T138] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2463.317514][T32089] Bluetooth: (null): Invalid header checksum [ 2463.343592][ T7459] Bluetooth: (null): Invalid header checksum [ 2463.444088][ T7459] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2463.461700][ T7455] Bluetooth: (null): Invalid header checksum [ 2463.794606][T14833] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 2463.873207][ T5704] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2463.983279][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2463.984985][T14833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2464.007934][T14833] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2464.021829][T14833] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2464.031877][T14833] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2464.045154][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 2464.052298][ T5704] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2464.060782][ T5704] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2464.071209][ T5704] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2464.081679][ T5704] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2464.091752][T14833] usb 3-1: string descriptor 0 read error: -22 [ 2464.098072][T14833] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2464.107161][ T5704] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2464.120168][T14833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2464.128290][ T5704] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2464.133177][ T1817] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2464.138446][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2464.156387][T14833] cdc_ncm 3-1:1.0: skipping garbage [ 2464.161654][T14833] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 2464.168683][T14833] cdc_ncm 3-1:1.0: bind() failure [ 2464.253285][T11089] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2464.294760][ T1817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2464.303497][ T1817] usb 4-1: config 228 has an invalid interface number: 86 but max is 0 [ 2464.311945][ T1817] usb 4-1: config 228 has no interface number 0 [ 2464.318276][ T1817] usb 4-1: config 228 interface 86 has no altsetting 0 [ 2464.327225][ T1817] usb 4-1: New USB device found, idVendor=0b57, idProduct=9de3, bcdDevice=87.f6 [ 2464.336592][ T1817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2464.344765][ T1817] usb 4-1: Product: syz [ 2464.348923][ T1817] usb 4-1: Manufacturer: syz [ 2464.353547][ T1817] usb 4-1: SerialNumber: syz [ 2464.380087][ T5704] usb 2-1: GET_CAPABILITIES returned 0 [ 2464.385985][ T5704] usbtmc 2-1:16.0: can't read capabilities [ 2464.403262][T11089] usb 5-1: Using ep0 maxpacket: 32 [ 2464.415901][T11089] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 2464.425845][T11089] usb 5-1: config 0 has no interface number 0 [ 2464.432135][T11089] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2464.442493][T11089] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2464.452750][T11089] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2464.463030][T11089] usb 5-1: config 0 interface 196 has no altsetting 0 [ 2464.471423][ T9] usb 3-1: USB disconnect, device number 91 [ 2464.482591][T11089] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 2464.492544][T11089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2464.500642][T11089] usb 5-1: Product: syz [ 2464.504850][T11089] usb 5-1: Manufacturer: syz [ 2464.509442][T11089] usb 5-1: SerialNumber: syz [ 2464.514440][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2464.531372][T11089] usb 5-1: config 0 descriptor?? [ 2464.536947][ T3994] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 2464.571956][ T1817] usbhid 4-1:228.86: couldn't find an input interrupt endpoint [ 2464.581988][ T1817] usb 4-1: USB disconnect, device number 63 [ 2464.605946][ T5704] usb 2-1: USB disconnect, device number 71 [ 2465.042761][ T7459] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2465.159839][ T30] kauditd_printk_skb: 257 callbacks suppressed [ 2465.159854][ T30] audit: type=1400 audit(1784288071.016:14554): avc: denied { getopt } for pid=3997 comm="syz.2.8103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2465.281404][T11089] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2465.303850][T11089] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 2466.230983][T11089] usb 5-1: USB disconnect, device number 90 [ 2466.254114][ T7455] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2466.697921][ T4013] fuse: Bad value for 'user_id' [ 2466.711726][ T4013] fuse: Bad value for 'user_id' [ 2467.105633][ T7459] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2467.383459][ T9] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 2467.547111][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2467.570467][ T9] usb 5-1: config 0 has no interface number 0 [ 2467.590963][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2467.631681][ T9] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2467.654072][T32089] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2467.674191][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 2467.681898][ T4029] netlink: 'syz.2.8113': attribute type 11 has an invalid length. [ 2467.706824][ T4029] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8113'. [ 2467.713304][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2467.743145][ T9] usb 5-1: config 0 descriptor?? [ 2468.013614][ T5704] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2468.013852][ T4038] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2468.056889][ T4037] netlink: 'syz.4.8109': attribute type 1 has an invalid length. [ 2468.165437][ T30] audit: type=1400 audit(1784288074.026:14555): avc: denied { search } for pid=4031 comm="syz.1.8107" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2468.194967][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2468.203346][ T4032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2468.220524][ T30] audit: type=1400 audit(1784288074.026:14556): avc: denied { search } for pid=4031 comm="syz.1.8107" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2468.255202][ T4032] audit: audit_lost=143 audit_rate_limit=0 audit_backlog_limit=64 [ 2468.264687][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 2468.280850][ T5704] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2468.290582][ T4032] audit: backlog limit exceeded [ 2468.295963][ T30] audit: type=1400 audit(1784288074.026:14557): avc: denied { search } for pid=4031 comm="syz.1.8107" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2468.296605][ T4037] bond1: entered promiscuous mode [ 2468.324070][ T4037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2468.329083][ T4032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2468.346614][ T5704] usb 3-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 8 [ 2468.362182][ T9] usbhid 5-1:0.1: can't add hid device: -71 [ 2468.367155][ T4032] audit: audit_lost=144 audit_rate_limit=0 audit_backlog_limit=64 [ 2468.369259][ T9] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 2468.386684][ T5704] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2468.388900][ T9] usb 5-1: USB disconnect, device number 91 [ 2468.410114][ T30] audit: type=1400 audit(1784288074.026:14558): avc: denied { search } for pid=4031 comm="syz.1.8107" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2468.528676][ T5704] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 2468.538045][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2468.585417][ T5704] usb 3-1: Product: syz [ 2468.601319][ T5704] usb 3-1: Manufacturer: syz [ 2468.617155][ T5704] usb 3-1: SerialNumber: syz [ 2469.256921][ T4029] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2469.771528][ T4058] hpfs: Bad magic ... probably not HPFS [ 2469.951193][ T4029] Can't find a SQUASHFS superblock on nullb0 [ 2470.029566][T32089] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2470.637674][ T7465] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2471.370839][ T7465] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2471.759268][ T4071] hpfs: Bad magic ... probably not HPFS [ 2471.947214][ T5704] usblp0: Disabling reads from problematic bidirectional printer [ 2471.984628][ T7465] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2472.013474][ T5704] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 235 proto 2 vid 0x03F0 pid 0x0004 [ 2472.462134][ T4076] overlayfs: overlapping lowerdir path [ 2472.851373][ T5704] usb 3-1: USB disconnect, device number 92 [ 2472.876600][ T7455] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2472.903535][ T5704] usblp0: removed [ 2473.166802][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8122'. [ 2473.225087][ T4085] batadv0: entered promiscuous mode [ 2473.255302][ T4085] macsec1: entered promiscuous mode [ 2473.294280][ T4085] macsec1: entered allmulticast mode [ 2473.319608][ T4085] batadv0: entered allmulticast mode [ 2473.356699][ T4085] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 2473.394882][ T4085] batadv0: left allmulticast mode [ 2473.416616][ T4085] batadv0: left promiscuous mode [ 2473.454372][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2474.005102][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2474.213797][ T5704] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2474.483710][ T5704] usb 2-1: Using ep0 maxpacket: 32 [ 2474.500993][ T5704] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2474.530194][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2474.563812][ T5704] usb 2-1: config 0 descriptor?? [ 2474.584854][ T7465] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2474.603336][ T5704] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2474.842978][ T4107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8129'. [ 2474.851987][ T4107] nbd: must specify at least one socket [ 2474.859701][ T4107] loop5: detected capacity change from 0 to 2640 [ 2474.866542][ T4107] buffer_io_error: 327 callbacks suppressed [ 2474.866557][ T4107] Buffer I/O error on dev loop5, logical block 0, async page read [ 2474.880353][ T4107] Buffer I/O error on dev loop5, logical block 0, async page read [ 2474.888555][ T4107] Buffer I/O error on dev loop5, logical block 0, async page read [ 2474.896442][ T4107] Buffer I/O error on dev loop5, logical block 0, async page read [ 2474.904309][ T4107] Buffer I/O error on dev loop5, logical block 0, async page read [ 2474.912216][ T4107] Buffer I/O error on dev loop5, logical block 0, async page read [ 2474.920441][ T4107] Buffer I/O error on dev loop5, logical block 0, async page read [ 2474.928984][ T4107] Buffer I/O error on dev loop5, logical block 0, async page read [ 2474.936981][ T4107] ldm_validate_partition_table(): Disk read failed. [ 2474.942122][ T4104] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 2474.943909][ T4107] loop5: unable to read partition table [ 2474.952087][ T4104] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 2474.957874][ T4107] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 2475.113764][ T5704] gspca_vc032x: reg_r err -110 [ 2475.252360][ T7455] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2475.258518][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.273558][ T4096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2475.294829][ T4096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2475.346454][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.366494][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.391607][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.406214][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.437433][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.446079][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.456850][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.462542][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.473058][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.478425][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.483836][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.489186][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2475.931854][ T4116] overlayfs: overlapping lowerdir path [ 2476.364125][ T7455] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2476.387157][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2476.392659][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2476.398509][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2476.404254][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2476.409558][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 2476.415273][ T5704] gspca_vc032x: Unknown sensor... [ 2476.420367][ T5704] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 2476.439790][ T5704] usb 2-1: USB disconnect, device number 72 [ 2476.443495][ T4113] kvm: kvm [4112]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 2476.484574][ T4113] kvm: kvm [4112]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 2476.493644][T11089] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 2476.678346][T11089] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2476.762915][T11089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2476.778037][T11089] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2476.809571][T11089] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2476.907490][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2476.944401][T11089] usb 5-1: string descriptor 0 read error: -22 [ 2476.950732][T11089] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2476.961173][T11089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2476.982693][T11089] cdc_ncm 5-1:1.0: skipping garbage [ 2476.998338][T11089] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 2477.167557][T11089] cdc_ncm 5-1:1.0: bind() failure [ 2477.189560][T11089] usb 5-1: USB disconnect, device number 92 [ 2477.468948][ T7465] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2477.960049][T24908] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2477.993774][T24908] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 2478.062954][ T4137] netlink: 'syz.2.8134': attribute type 6 has an invalid length. [ 2478.243229][T13241] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2478.292959][T24908] usb 1-1: USB disconnect, device number 77 [ 2497.092486][ C0] sched: DL replenish lagged too much [ 2506.668459][ T3221] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 2523.882413][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2555.440357][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 2585.752307][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2591.366580][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 2646.772606][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2647.708677][ T1310] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 2697.133026][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2697.140013][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4143/1:b..l [ 2697.148421][ C0] rcu: (detected by 0, t=10503 jiffies, g=295673, q=1828889 ncpus=2) [ 2697.156572][ C0] task:syz.3.8138 state:R running task stack:26200 pid:4143 tgid:4138 ppid:28542 task_flags:0x40054c flags:0x00080002 [ 2697.171614][ C0] Call Trace: [ 2697.174890][ C0] [ 2697.177837][ C0] __schedule+0x125c/0x6730 [ 2697.182346][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 2697.187565][ C0] ? __pfx___schedule+0x10/0x10 [ 2697.192420][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 2697.197776][ C0] preempt_schedule_common+0x42/0xc0 [ 2697.203071][ C0] preempt_schedule_thunk+0x16/0x40 [ 2697.208263][ C0] _raw_spin_unlock+0x3e/0x50 [ 2697.212925][ C0] __zap_vma_range+0x16f7/0x4a30 [ 2697.217860][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 2697.223152][ C0] ? find_held_lock+0x2b/0x80 [ 2697.227840][ C0] unmap_vmas+0x299/0x5f0 [ 2697.232168][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 2697.237021][ C0] ? mas_next_slot+0x10a3/0x1960 [ 2697.241952][ C0] exit_mmap+0x1ef/0xa00 [ 2697.246179][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2697.250938][ C0] ? rcu_is_watching+0x12/0xc0 [ 2697.255706][ C0] ? uprobe_clear_state+0x49/0x260 [ 2697.260816][ C0] ? find_held_lock+0x2b/0x80 [ 2697.265495][ C0] ? uprobe_clear_state+0x5f/0x260 [ 2697.270616][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 2697.276251][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 2697.281862][ C0] __mmput+0x12a/0x410 [ 2697.285910][ C0] mmput+0x67/0x80 [ 2697.289631][ C0] do_exit+0x8b1/0x2ae0 [ 2697.293787][ C0] ? __up_read+0x333/0x980 [ 2697.298203][ C0] ? __pfx_do_exit+0x10/0x10 [ 2697.302793][ C0] ? do_raw_spin_lock+0x128/0x260 [ 2697.307820][ C0] ? find_held_lock+0x2b/0x80 [ 2697.312470][ C0] ? get_signal+0x7e0/0x21e0 [ 2697.317043][ C0] do_group_exit+0xd5/0x2a0 [ 2697.321550][ C0] get_signal+0x1ec7/0x21e0 [ 2697.326064][ C0] ? __pfx_get_signal+0x10/0x10 [ 2697.330912][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2697.336030][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 2697.341575][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2697.347727][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 2697.352989][ C0] exit_to_user_mode_loop+0x139/0x6f0 [ 2697.358347][ C0] ? rcu_is_watching+0x12/0xc0 [ 2697.363114][ C0] do_syscall_64+0x666/0x870 [ 2697.367705][ C0] ? clear_bhb_loop+0x40/0x90 [ 2697.372384][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2697.378267][ C0] RIP: 0033:0x7fc22bb9de99 [ 2697.382664][ C0] RSP: 002b:00007fc22ca31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2697.391051][ C0] RAX: 0000200000000000 RBX: 00007fc22be26090 RCX: 00007fc22bb9de99 [ 2697.399021][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 2697.406989][ C0] RBP: 00007fc22bc33eaf R08: ffffffffffffffff R09: 000000001b5cb000 [ 2697.414955][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 2697.422900][ C0] R13: 00007fc22be26128 R14: 00007fc22be26090 R15: 00007ffe5a855068 [ 2697.430862][ C0] [ 2697.433879][ C0] rcu: rcu_preempt kthread starved for 4345 jiffies! g295673 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2697.445080][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2697.455029][ C0] rcu: RCU grace-period kthread stack dump: [ 2697.460903][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2697.474399][ C0] Call Trace: [ 2697.477675][ C0] [ 2697.480609][ C0] __schedule+0x125c/0x6730 [ 2697.485132][ C0] ? __pfx___schedule+0x10/0x10 [ 2697.489963][ C0] ? find_held_lock+0x2b/0x80 [ 2697.494630][ C0] ? schedule+0x225/0x2c0 [ 2697.498969][ C0] schedule+0xdd/0x2c0 [ 2697.503038][ C0] schedule_timeout+0x127/0x280 [ 2697.507889][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2697.513261][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2697.518545][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2697.524332][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 2697.529789][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 2697.534552][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2697.539837][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2697.544781][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 2697.549991][ C0] ? rcu_is_watching+0x12/0xc0 [ 2697.554769][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2697.560575][ C0] rcu_gp_kthread+0x179/0x230 [ 2697.565236][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2697.570443][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2697.576258][ C0] ? __kthread_parkme+0x18c/0x230 [ 2697.581290][ C0] ? kthread+0x13a/0x450 [ 2697.585526][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2697.590698][ C0] kthread+0x370/0x450 [ 2697.594747][ C0] ? __pfx_kthread+0x10/0x10 [ 2697.599342][ C0] ret_from_fork+0x72b/0xd50 [ 2697.603938][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2697.609053][ C0] ? __switch_to+0x800/0x10f0 [ 2697.613734][ C0] ? __pfx_kthread+0x10/0x10 [ 2697.618328][ C0] ret_from_fork_asm+0x1a/0x30 [ 2697.623107][ C0] [ 2697.626128][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2697.632419][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2697.637601][ C1] NMI backtrace for cpu 1 [ 2697.637617][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2697.637637][ C1] Tainted: [L]=SOFTLOCKUP [ 2697.637643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2697.637651][ C1] RIP: 0010:mark_lock+0x23/0xa20 [ 2697.637669][ C1] Code: 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 56 41 55 49 89 fd 41 54 49 89 f4 53 48 83 e4 f0 48 83 ec 70 65 48 8b 1d a5 34 7e 12 <48> 89 5c 24 68 89 d3 83 fa 08 74 6d 41 be 01 00 00 00 89 d9 41 d3 [ 2697.637682][ C1] RSP: 0018:ffffc90000a07f00 EFLAGS: 00000086 [ 2697.637695][ C1] RAX: 0000000000000003 RBX: da41684d146b1900 RCX: 0000000000000007 [ 2697.637704][ C1] RDX: 0000000000000008 RSI: ffff88801ea83130 RDI: ffff88801ea82540 [ 2697.637712][ C1] RBP: ffffc90000a07f98 R08: 0000000000000000 R09: 0000000000000001 [ 2697.637721][ C1] R10: 0000000000000000 R11: 0000000000000002 R12: ffff88801ea83130 [ 2697.637729][ C1] R13: ffff88801ea82540 R14: 0000000000000000 R15: 0000000000000002 [ 2697.637738][ C1] FS: 0000000000000000(0000) GS:ffff888123ee8000(0000) knlGS:0000000000000000 [ 2697.637753][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2697.637762][ C1] CR2: 0000559f166f3be0 CR3: 0000000026eb9000 CR4: 00000000003526f0 [ 2697.637771][ C1] Call Trace: [ 2697.637776][ C1] [ 2697.637782][ C1] ? rcu_is_watching+0x12/0xc0 [ 2697.637802][ C1] ? __lock_acquire+0x49f/0x1a40 [ 2697.637817][ C1] __lock_acquire+0x49f/0x1a40 [ 2697.637834][ C1] lock_acquire+0x1b9/0x370 [ 2697.637848][ C1] ? unwind_next_frame+0xbd/0x2090 [ 2697.637868][ C1] ? unwind_next_frame+0x3be/0x2090 [ 2697.637887][ C1] ? unwind_next_frame+0x3be/0x2090 [ 2697.637907][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2697.637928][ C1] unwind_next_frame+0xd1/0x2090 [ 2697.637946][ C1] ? unwind_next_frame+0xbd/0x2090 [ 2697.637965][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2697.637985][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2697.638006][ C1] arch_stack_walk+0x94/0xf0 [ 2697.638027][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2697.638045][ C1] ? skb_free_head+0xb9/0x160 [ 2697.638069][ C1] stack_trace_save+0x8e/0xc0 [ 2697.638088][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2697.638107][ C1] ? common_startup_64+0x13e/0x158 [ 2697.638127][ C1] ? __lock_acquire+0x49f/0x1a40 [ 2697.638141][ C1] kasan_save_stack+0x30/0x50 [ 2697.638155][ C1] ? kasan_save_stack+0x30/0x50 [ 2697.638168][ C1] ? kasan_save_track+0x14/0x30 [ 2697.638181][ C1] ? kasan_save_free_info+0x3b/0x70 [ 2697.638199][ C1] ? __kasan_slab_free+0x5f/0x80 [ 2697.638212][ C1] ? kfree+0x22b/0x6c0 [ 2697.638228][ C1] ? skb_free_head+0xb9/0x160 [ 2697.638245][ C1] ? skb_release_data+0x6c5/0x8e0 [ 2697.638258][ C1] ? consume_skb+0xc4/0x110 [ 2697.638271][ C1] ? nft_synproxy_do_eval+0xa24/0xce0 [ 2697.638291][ C1] ? nft_do_chain+0x2e5/0x19d0 [ 2697.638303][ C1] ? nft_do_chain_inet+0xf3/0x400 [ 2697.638321][ C1] ? nf_hook_slow+0xbf/0x220 [ 2697.638338][ C1] ? nf_hook.constprop.0+0x2a6/0x750 [ 2697.638354][ C1] ? ip_local_deliver+0x163/0x1f0 [ 2697.638369][ C1] ? ip_rcv+0x33a/0x3c0 [ 2697.638384][ C1] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 2697.638402][ C1] ? __netif_receive_skb+0x1f/0x120 [ 2697.638419][ C1] ? process_backlog+0x37a/0x1580 [ 2697.638436][ C1] ? __napi_poll.constprop.0+0xaf/0x450 [ 2697.638454][ C1] ? net_rx_action+0xa40/0xf20 [ 2697.638472][ C1] ? handle_softirqs+0x1ea/0x9b0 [ 2697.638487][ C1] ? __irq_exit_rcu+0x162/0x210 [ 2697.638500][ C1] ? irq_exit_rcu+0x9/0x30 [ 2697.638515][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2697.638540][ C1] kasan_save_track+0x14/0x30 [ 2697.638553][ C1] kasan_save_free_info+0x3b/0x70 [ 2697.638571][ C1] __kasan_slab_free+0x5f/0x80 [ 2697.638585][ C1] ? skb_free_head+0x30/0x160 [ 2697.638603][ C1] kfree+0x22b/0x6c0 [ 2697.638619][ C1] ? rcu_is_watching+0x12/0xc0 [ 2697.638637][ C1] skb_free_head+0xb9/0x160 [ 2697.638655][ C1] skb_release_data+0x6c5/0x8e0 [ 2697.638670][ C1] consume_skb+0xc4/0x110 [ 2697.638684][ C1] nft_synproxy_do_eval+0xa24/0xce0 [ 2697.638705][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2697.638726][ C1] ? ip_vs_service_find+0x154/0x390 [ 2697.638741][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 2697.638761][ C1] nft_do_chain+0x2e5/0x19d0 [ 2697.638776][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 2697.638789][ C1] ? rcu_is_watching+0x12/0xc0 [ 2697.638808][ C1] ? ip_vs_in_hook+0x9e3/0x2b70 [ 2697.638824][ C1] ? ip_vs_in_hook+0xa60/0x2b70 [ 2697.638844][ C1] nft_do_chain_inet+0xf3/0x400 [ 2697.638862][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2697.638882][ C1] ? nf_nat_ipv4_local_in+0x181/0x730 [ 2697.638899][ C1] nf_hook_slow+0xbf/0x220 [ 2697.638916][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 2697.638932][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2697.638949][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 2697.638964][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2697.638981][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2697.638999][ C1] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 2697.639016][ C1] ip_local_deliver+0x163/0x1f0 [ 2697.639032][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 2697.639049][ C1] ip_rcv+0x33a/0x3c0 [ 2697.639069][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 2697.639084][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 2697.639102][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 2697.639122][ C1] ? lock_acquire+0x1b9/0x370 [ 2697.639136][ C1] ? process_backlog+0x32a/0x1580 [ 2697.639154][ C1] ? process_backlog+0x32a/0x1580 [ 2697.639172][ C1] __netif_receive_skb+0x1f/0x120 [ 2697.639191][ C1] process_backlog+0x37a/0x1580 [ 2697.639211][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 2697.639230][ C1] net_rx_action+0xa40/0xf20 [ 2697.639250][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2697.639268][ C1] ? rcu_is_watching+0x12/0xc0 [ 2697.639285][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 2697.639304][ C1] ? tmigr_handle_remote+0x132/0x380 [ 2697.639320][ C1] ? run_timer_base+0x121/0x190 [ 2697.639334][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2697.639349][ C1] handle_softirqs+0x1ea/0x9b0 [ 2697.639366][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2697.639381][ C1] ? _raw_spin_unlock+0x28/0x50 [ 2697.639398][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 2697.639418][ C1] __irq_exit_rcu+0x162/0x210 [ 2697.639433][ C1] irq_exit_rcu+0x9/0x30 [ 2697.639449][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2697.639467][ C1] [ 2697.639472][ C1] [ 2697.639477][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2697.639492][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2697.639511][ C1] Code: 56 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 19 12 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2697.639523][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 2697.639533][ C1] RAX: 000000000d877cb9 RBX: ffff88801ea82540 RCX: ffffffff8bb982d5 [ 2697.639542][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a4195 RDI: ffffffff8c401280 [ 2697.639551][ C1] RBP: ffffed1003d504a8 R08: 0000000000000001 R09: ffffed10170a678d [ 2697.639560][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 2697.639568][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 2697.639579][ C1] ? ct_kernel_exit+0x125/0x180 [ 2697.639599][ C1] default_idle+0x9/0x10 [ 2697.639611][ C1] default_idle_call+0x6c/0xb0 [ 2697.639623][ C1] do_idle+0x3a7/0x5b0 [ 2697.639639][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 2697.639656][ C1] ? __pfx_do_idle+0x10/0x10 [ 2697.639673][ C1] ? do_idle+0x12/0x5b0 [ 2697.639690][ C1] cpu_startup_entry+0x4f/0x60 [ 2697.639707][ C1] start_secondary+0x21d/0x2d0 [ 2697.639722][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2697.639739][ C1] common_startup_64+0x13e/0x158 [ 2697.639761][ C1]