last executing test programs: 9m36.993673613s ago: executing program 0 (id=1853): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0x0, 0x0}) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = landlock_create_ruleset(&(0x7f0000000100)={0xb001, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaac29d776d30658d23280045000028db49679db09bd90064010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601b00000020060000000000000000000000ffffac1e0101fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84c20000907800001e0c7b785e98aa1c6f580000"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x200040b4) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="04140000", @ANYRES16=r0, @ANYBLOB="000226bd7000fbdbdf2567000000080001000800000008000300", @ANYRES32, @ANYBLOB="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"], 0x1404}, 0x1, 0x0, 0x0, 0x20004000}, 0x8800) pwritev2(r4, &(0x7f0000002d00)=[{&(0x7f0000000140)="6c9c7f46efa79f5e44e790aefae0e076c70eb620193ba825dd53543c76cb89b56d587d5cbc11f1d6c55d28772d197fa815b5a893b4b8fa61c1b593ca273f9ff77f29813b23988ab5ebdee0a2941a", 0x4e}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000000580)="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", 0x180}, {&(0x7f0000002b40)="cbe033ca3209e1e3433fb8d3c2f83c8b2ab32c7efc59b21725f20f9facb473224d99b8e92278fa4cded7d73d639ae29e28e481d627d43b9778d3ea8e45b8ffa1b5cd9df12491612c9d52e2cfd1a03253879b002b71684717d6ebb3afc8b12b2c88395d19f2ed5c6a9962e55743a35b660e6b9bda7d53a947fb6fc10a56cd2712dcf8ac8ac0e768eea0d837896457ad054905d4f944ee608b43790e4337d3318889c383570fc0906cd0ffdb7df7a478f7a84c2dd776cd639fb738a02735e8a12e0753b3320ad1d8b8b0c1441c5dc09e004e141a", 0xd3}, {&(0x7f00000002c0)="de78bec07203612a75dcbe89610998717cd0dc74f1596215a46ba8959ef37d70e1e2793ac2c98b0453fa2b4cfffbbd116aa8586aec2af9eadb5432edd0427208a5205ea90cb658f142f514e4045881c3f3e4345949ede0d89395061ad59ba24e5c3d972ad536b057cb066b4478de3f9db59808c8286ffa8735", 0x79}, {&(0x7f0000002c40)="9e65f4f04ac7ce7183b2fdc4d424eb5437b559d05520213308194ddc1d549d9f05d2a7d940095d73cf7aef7190dae5e482da638796c392fba927e134710bfca0a0976c1e1513ea4b5492d5aaa2c511047803f7e7159937d413b7609155aabf9d11fa19a67e7fe92c1333d29f334c0055ba570a0c5918454059db631f51e401f4360ed50534a1272b466b2c1a4d", 0x8d}, {&(0x7f0000000400)="2f15c90119bbbb2cefd972e769a7d3273dbe463bc66e08fed4479067db8ff7fe629c7e2874162f4b05c84a7d5e44f451aabc4472697d29a5371d7f8f9fe9cbde2dfbad7011052d9201f02b90d1eb71551093c6500669ff0398133a584d4dcd3550eaef444c8088094fa5687601", 0x6d}, {&(0x7f0000000340)="0cac42659f88998dff74bd5f5a", 0xd}, {&(0x7f00000004c0)="58d16fd6d38e0686455cfb28dfc4f5e26c28ce5bd027c545aa3a50ffd818d2340e0ce87a1230d2b4cdc0ff6aee5689274ba2251ee035b03314d10fb9", 0x3c}], 0x9, 0xe43, 0x2, 0x1) 9m36.118182886s ago: executing program 0 (id=1856): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1, 0x1000000}) 9m35.679487887s ago: executing program 0 (id=1859): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffdfe, 0x801) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) creat(0x0, 0x79) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2802, 0x0) writev(r2, &(0x7f0000000080), 0x0) recvmmsg(r1, &(0x7f00000037c0), 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x101) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000000)=0xc, 0x4) socket$nl_route(0x10, 0x3, 0x0) 9m34.895351413s ago: executing program 0 (id=1861): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000040)={0x14, 0x1, 0x2, "df7c0cc512bd49656a65f318b8c09101bd9eeb82e5549c2e012929bccfcc4f2a", 0xb5315258}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) chdir(&(0x7f0000000400)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xf, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0xfffffffa, 0x71, 0x10, 0x5c}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0xd5) r4 = openat(r3, &(0x7f0000004280)='.\x00', 0x800, 0x0) getdents64(r4, &(0x7f0000000240)=""/48, 0x30) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000004, {0x0, 0x200000000, 0x7, 0x4, 0x6, 0x4, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r8, 0x0, 0x2007}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x26, 0x2d, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cf, 0x0, 0x0, 0x1, 0x10001}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) close(0x3) r9 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r9, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000080)={0x9, 0x80000000, @name="ae4ab862a062226c0c845e5047f29557e535313d4fd4b9bffdfcbc7fa22c1fb3"}) getdents(r4, 0x0, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x8000) ioctl$HIDIOCINITREPORT(r10, 0x4805, 0x0) 9m33.278526594s ago: executing program 0 (id=1864): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002980)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4041080) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x5) 9m32.58263869s ago: executing program 0 (id=1870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001680)=@gcm_128={{0x303}, "0000e60000010027", "568c9f21823385cf6b936989b62bac53", "0000001b", "ff00"}, 0x28) write$binfmt_aout(r0, 0x0, 0xfdef) 9m32.556387762s ago: executing program 32 (id=1870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001680)=@gcm_128={{0x303}, "0000e60000010027", "568c9f21823385cf6b936989b62bac53", "0000001b", "ff00"}, 0x28) write$binfmt_aout(r0, 0x0, 0xfdef) 1m46.035538728s ago: executing program 1 (id=3485): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3d, 0xd, 0x0, 0x0, 0x300, 0xfffffffb, 0x24}, 0x9c) 1m45.946881507s ago: executing program 1 (id=3487): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r8}) close_range(r4, 0xffffffffffffffff, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x20002880) socket(0x1e, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) syz_open_dev$sg(0x0, 0x6, 0x22400) 1m45.021378888s ago: executing program 1 (id=3489): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000c00ebffffff0100020000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019640)=""/102392, 0x18ff8) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r3, 0x20, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24084004}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m44.610902548s ago: executing program 1 (id=3491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000040)=0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)="9e93e4cf55ce5373a1ff6b255b7393be21af97e5178b6a9f214fe7e5ddb031a93076dd565640cb148eb19b0c73ec185fb9d6cd51fcaf30c27ecfac8944d23aee30e7a23c78b28d8886a65547fc04d28497fc4f7c2aa26ac0908ea855c9039b27d71a66bff111c2fd1ce05b6f64ce5913a080da607194801d8bc7d79f19bb77edbdc7727b196fe7cd822f3c3d0f21b997e732b04619677e1df266146fdad28d26bfabc63f7ba5a7dbc58f32b40ac00d4162da1ada1138b0ab1f1739019e", 0xbd) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x18, &(0x7f00000001c0)=""/24, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x1, 0x80, 0x3}, 0x10, 0x0, r1, 0x3, &(0x7f0000000400)=[r1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x5, 0x7, 0xb}, {0x4, 0x2, 0x3, 0x1}, {0x1, 0x4, 0x0, 0xa}], 0x10, 0xe0b4}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x2711, @host}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000280)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m42.07684798s ago: executing program 1 (id=3495): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000c00ebffffff0100020000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019640)=""/102392, 0x18ff8) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1m41.809566274s ago: executing program 1 (id=3498): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001840)={0x84, &(0x7f0000001340)={0x0, 0x3, 0x8, "6e812891baf00ff0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x890, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x400000}}]}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m26.698116045s ago: executing program 33 (id=3498): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001840)={0x84, &(0x7f0000001340)={0x0, 0x3, 0x8, "6e812891baf00ff0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x40, 0x21, 0x1, 0x7f}}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x890, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x400000}}]}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 13.836688725s ago: executing program 2 (id=3885): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c0000904000002070101"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 13.388968558s ago: executing program 6 (id=3887): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) socket(0x10, 0x2, 0x0) setrlimit(0x7, &(0x7f0000000ac0)={0x4, 0x8001}) epoll_create(0x802) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 13.102291783s ago: executing program 6 (id=3892): socket(0x25, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240), &(0x7f0000000280)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000800)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x4, 0x83, 0xdc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mq_open(&(0x7f0000000000)='!\x00', 0x40, 0x10, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_macvtap\x00', 0x4}, 0x18) 11.270002639s ago: executing program 6 (id=3896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000044000701fcffffff00000000017c000008000100", @ANYRES32=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0xb8, 0x5f, 0x101, 0x0, 0x0, "", [@typed={0xa5, 0xaf, 0x0, 0x0, @str='d\xee\xfacR\xaf\xbe\x9b\x944\x9cM\x88y\x9b\x00\x15\x00#\xa6\xd7\xb1\x86\xed\x83\xa0\xbd\xdd/\x14i\xc0\x89\x80\xecF\xd8\xbc\xd5\xd9F\x92Mw\xe0\xf4\x9a\fs&\x0e7\x10\xc1\x93\xcb8Y\xc3\xd4\xe4\x87\x12\xbb\xa8T\xf89:\xac\xed\xa9\xf4/\x82\xdb\x91k\x01d\x1d7\xfa\xeb\xd7Gu\xf4\x7f\x93\xde)\f\xcaJiL\xe2\xe3`\xc6\xca,0_\xc6\xe8r8+\xbb1_\xae\xd1x+E\xa1\xdd\xa2\xaa\x85\xa6\v\xb6\xa3\xd3(\xb7\xc2\xb7q\x98\xb4i\x92a\xeay\xd5he\x9b\x0f\r\xa4\xfaV\"D.\xae\xb2\xd1\xf0\x04}\'\xadC'}]}, 0xb8}], 0x1, 0x0, 0x0, 0x4008040}, 0x0) 10.951137299s ago: executing program 6 (id=3898): r0 = syz_io_uring_setup(0x8f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0x226}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000380)={0x0, 0x1ccd, 0x800, 0x2, 0x28, 0x0, r0}, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1c, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}, "75de8b187f39dd7f3731c0d0"}}}}}}, 0x0) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036"], 0x5b0}, 0x20008041) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000080000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f14889c2ad23", 0x6}], 0x1}, 0x20000044) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x47e, 0x2) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r7, &(0x7f00000003c0)={0xa, 0xfffb, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r7, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f03f, 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4001, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 10.658123299s ago: executing program 6 (id=3900): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010025bdf000fcdbdf251000000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0xc) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10.228969941s ago: executing program 6 (id=3902): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGVERSION(r6, 0x80044801, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001940)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0x2}, {0x2, 0x3}, {0xfff2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x40840) 10.087386453s ago: executing program 2 (id=3903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0006"], 0x1c}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.840406125s ago: executing program 2 (id=3908): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fsopen(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x20003, 0x2) clock_gettime(0xfffffffffffffffc, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000540)='vegas\x00', 0x6) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000340)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = fanotify_init(0x0, 0x0) socket$inet6(0xa, 0x802, 0x88) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 7.627232494s ago: executing program 2 (id=3915): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000640)=0xe000, 0x1fff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) mbind(&(0x7f00009f4000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000000c0)=0x6, 0x6a0e, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x10a, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0xbf, 0x70, 0x20, 0x7}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "ae25b1fd05d849921ff66de5c710f842"}]}, 0x5, [{0x2d, &(0x7f0000000280)=@string={0x2d, 0x3, "c13df9cec7e71338269820d444fae321ea1605b8c68c82a2961b62c010206b7959d0977cf4334a502b3836"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1407}}, {0xec, &(0x7f0000000340)=@string={0xec, 0x3, "6130cb1ee54920c10c2f1694681901162e6b43f7b608676d140a1df43425e46d3d49c9ea1214b522f8cb795c3d2a1b8e75b5e5974f2b62d2f0f354caa89b518f7f523bc2939e9fa9c4ea4c06e31c15bd3b6009487e9bb94f9b1ecf8c1eb147f917fb985a6694e6c963bfd0586ec55e4a0c0c1f863d2ccad8c155e107558152d0ea9c1ca133c9a6d3b62c5a60593dbb55b61f9251ad76eed9f40bfb46b538ace73cfb9d9220c902591654ca56d70d1a426345fba526309d25d7f660511388354268ce69b04c7f2db01332b63cae0c2afe073090c7a2f56c224c09bc29eee6383780739b76851e8b9fccb7"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000000000002a90a02700000000b3813e2503a3b6004e8763a79a1bdde840503b5d8c3dda"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.367847711s ago: executing program 2 (id=3935): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x9ce}], 0x1) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x8000}, 0x4) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x7, 0xc, 0xa, 0x40, 0x7c, 0x10}) 4.08965192s ago: executing program 4 (id=3936): unshare(0x2a020400) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r1, &(0x7f0000000040), 0x4000000000002ac, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000400), &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x2c, &(0x7f0000000280), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x1d, 0x68, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write(r3, &(0x7f00000000c0)="510003000000", 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x8}, 0x94) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_PARAMS={{0x7}, 0x2}}}, 0x7) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0xc) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x860b, 0x1}) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000, 0x40012202, &(0x7f0000000180)=@phonet={0x23, 0x4b, 0x1, 0x7}, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f00000003c0)={0x1, 0x4e8, 0xfffffffffffffc00, 0x0, 0x8001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100), &(0x7f00000002c0)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) 3.353421987s ago: executing program 3 (id=3938): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r8}) close_range(r4, 0xffffffffffffffff, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000fc00000000000000000000000000000000000003000000400200000073ce193de24a1a08df3b3b9a961b00000048bd7b8180cf899714a8d9b720e1cf5e0f5b04f2d97bd54902fb465090a216baa6f5152a53cff3080000007d72277321e12d708daeae754994e2ba478eff29367c57c019b0e50a935a8f62176dd5a9a9e68c894a78c0064c80a885ff140a8d3a53a964ed1c398c35c587e49bdf723fc577061adc2e946e8929e228c0d5df99354fd63bf7451f1bf7f944e9d37833c490", @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200"/84], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x20002880) socket(0x1e, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) syz_open_dev$sg(0x0, 0x6, 0x22400) 3.243276863s ago: executing program 3 (id=3940): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000c00ebffffff0100020000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019640)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r3, 0x20, 0x4, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24084004}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 3.192544896s ago: executing program 3 (id=3942): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) getpid() socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty, 0x20004}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4895) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xb, 0x46}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000200)={r8, 0x0, 0x8, 0xeb0, 0x7f0}) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x6800, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r9, 0x80045017, &(0x7f0000000240)) 3.082971948s ago: executing program 3 (id=3943): r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 3.080492681s ago: executing program 4 (id=3944): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) 2.995436913s ago: executing program 4 (id=3945): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000c00ebffffff0100020000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r3, 0x20, 0x4, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24084004}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, 0x0, 0x41) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.937922863s ago: executing program 4 (id=3946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000040)=0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)="9e93e4cf55ce5373a1ff6b255b7393be21af97e5178b6a9f214fe7e5ddb031a93076dd565640cb148eb19b0c73ec185fb9d6cd51fcaf30c27ecfac8944d23aee30e7a23c78b28d8886a65547fc04d28497fc4f7c2aa26ac0908ea855c9039b27d71a66bff111c2fd1ce05b6f64ce5913a080da607194801d8bc7d79f19bb77edbdc7727b196fe7cd822f3c3d0f21b997e732b04619677e1df266146fdad28d26bfabc63f7ba5a7dbc58f32b40ac00d4162da1ada1138b0ab1f1739019e", 0xbd) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfff}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x18, &(0x7f00000001c0)=""/24, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x1, 0x80, 0x3}, 0x10, 0x0, r1, 0x3, &(0x7f0000000400)=[r1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x5, 0x7, 0xb}, {0x4, 0x2, 0x3, 0x1}, {0x1, 0x4, 0x0, 0xa}], 0x10, 0xe0b4}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000280)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r8, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x4f, 0x2, 0x1, "8baadc000000000000ffffffff00000000c300000000000000001c00", 0x51424752}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.199540248s ago: executing program 5 (id=3947): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xd2ec0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0xa, 0x44, 0x3e8a) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x1001, 0x1000000, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) iopl(0x3) socket$nl_route(0x10, 0x3, 0x0) 2.171281937s ago: executing program 3 (id=3948): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x3) prctl$PR_SET_THP_DISABLE(0x41, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f, 0xffffffff, 0x10400, 0xa0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7}}, 0x50) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x0, r10) 1.874980369s ago: executing program 4 (id=3949): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=readaheadlk']) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 589.734659ms ago: executing program 4 (id=3950): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="5800000015", 0x5}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x1) flock(r7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$UHID_CREATE(r8, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000180)=""/109, 0x6d, 0x8, 0x8, 0x9, 0x6, 0x9}}, 0x120) 545.275717ms ago: executing program 5 (id=3951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c00000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0xb000000, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) 455.391276ms ago: executing program 2 (id=3952): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c0000904000002070101"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 451.444914ms ago: executing program 5 (id=3953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x700, 0x80, 0x0, 0x6, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x66, 0x0, 0x7, 0x4, 0x0, @private=0xa010102, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xfff, 0xffff672e, 0x8, 0x402, 0xffffffffffffffff, 0x5, '\x00', r2, r1, 0x3, 0x4, 0x0, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180074bc3e0b0000000000000000c88ef49238bcf9689594e54b3b77e8393cf7351b1a76e159e25c7cbdf6a697c8631870102daaaf152460033e0230981318f960a396ab2ec9eadd25360d6c0492800cba0b03fd5d7d5117b8c0c0f4d1e2656abde4c51df42177fe0fb6c2b5f6ababd04c1e60e7a473e2826eb2986d63ce56e884812ae251de4e81e7fdc1b25cc41c00b9655c1fb535cac111172f40ae1ea57b2613e789866c880f4c55b16730874cdaa1043cb6e8ae0e5b08cb98142e44b2768d01aa90bc", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x2c, 0x0, &(0x7f0000000180)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x5, @pix={0x5, 0x98, 0x50565559, 0x1, 0x8264, 0x101, 0x6, 0x8, 0x1, 0x7, 0x0, 0x1}}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 213.797844ms ago: executing program 3 (id=3954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0006"], 0x1c}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 157.992861ms ago: executing program 5 (id=3955): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc7", 0x6}, {&(0x7f0000000a80)="7ba863ad0844e1bd4dbef819ad938d2eee02cc1497ea33634963307c75b71ef12b9fbbea39f886b64512ad1872b4a443bc9cc208de87c837a95fd97febf6075d78c0403a08a84d9a3ba8cbb6ea4a407c45d4dc24888128c42aa1d6717e0edd917db8439b8b5f51eee2dceaab1ef9d195286d1b5764996c37012da4", 0x7b}], 0x2, 0x0, 0x0, 0x4c004}], 0x1, 0x51) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000003300010000000000000000000500000a3c000000090a05000000000000000000050000090900020073797a31000000000c0010400000000000000004080005400000002d08000640000000001c000000120a01080000000000000500000508000340000000091400000011004abb00000000000000000a00000a"], 0x80}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x3c}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x2, 0x4, 0x0, 0x60}}, 0xf0}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 35.067853ms ago: executing program 5 (id=3956): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2046) syz_fuse_handle_req(r1, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=3957): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000170a018859f822340177a0942cdc01000000000000000000000006ebe5d09fd9a7731ec389ac24f755126bfd514e572052dfc126613030b622d5a68e6c0f278deb71cbfd640f633ff71653eea9726e0fbe9269c138b1299a6e1a01bc8d3165bc71c0a07d26946c5e1c2cdc5f7731533856d6c56afe93f584302342b0d80c386c1b1b1bd371"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x230200) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setrlimit(0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="ee61d15b176da8ea8abe33a2ac1a58bde11db6411b4864916c5ac483163a894aaee52e9e377fc5bab5055d789da66a7a70863f889aad1335f04ee4450038b9778f4d5ec530dd982feea0da048265c0ac677634f7f8a03936495e01ad2391429afd94e82dd69e1e130ee96890732fd2607f206484a26cd5fb3c25cedbf3e614e91913ecc6cb885d6634e642a4663fb173c97df34d038205965db55ba937f12ef8ec0905e1cd0aae11db41a3046e273aeecf2fe24cbdb77f0b7aaf43983b50874a6dd6bf1a1b37c155a4d520a4f14573abd041057b027c698396e651d92fa6"], &(0x7f0000000380)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0xbe55d000) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r6, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c8000006800e97800000400000000000a0003002000001004"], 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) kernel console output (not intermixed with test programs): root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1132.177117][T18954] overlayfs: failed to resolve './file1': -2 [ 1133.159517][T18939] veth1_vlan: entered allmulticast mode [ 1133.168157][T18939] team0: Device veth1_vlan failed to register rx_handler [ 1133.472844][ T5904] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1133.480787][ T917] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1133.484030][T18966] input: syz0 as /devices/virtual/input/input111 [ 1133.533598][T11139] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1133.662595][ T917] usb 6-1: Using ep0 maxpacket: 32 [ 1133.695488][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 1133.704998][ T917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.753789][ T917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.754327][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.778041][ T917] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1133.789095][ T917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.837060][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.866463][ T917] usb 6-1: config 0 descriptor?? [ 1133.872151][ T5904] usb 3-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 1133.881377][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.918363][T11139] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1133.922081][ T917] hub 6-1:0.0: USB hub found [ 1133.944551][ T5904] usb 3-1: config 0 descriptor?? [ 1133.977835][T11139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.016650][T11139] usb 4-1: config 0 descriptor?? [ 1134.163455][ T917] hub 6-1:0.0: 1 port detected [ 1134.257923][T18962] syz_tun: entered allmulticast mode [ 1134.311666][ T977] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1134.358439][T18843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1134.378343][T18843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1134.394025][T18843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1134.400693][ T5904] logitech-hidpp-device 0003:046D:C343.002E: hidraw0: USB HID v3.0e Device [HID 046d:c343] on usb-dummy_hcd.2-1/input0 [ 1134.420373][T18843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1134.474966][ T977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.501625][ T977] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1134.506335][T18961] syz_tun: left allmulticast mode [ 1134.523939][ T977] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1134.539370][T11139] ath6kl: Failed to submit usb control message: -71 [ 1134.553745][T11139] ath6kl: unable to send the bmi data to the device: -71 [ 1134.569895][T11139] ath6kl: Unable to send get target info: -71 [ 1134.576697][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1134.585007][T11139] ath6kl: Failed to init ath6kl core: -71 [ 1134.603904][T11139] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1134.619883][ T977] usb 5-1: Product: syz [ 1134.634138][T11139] usb 4-1: USB disconnect, device number 90 [ 1134.637328][ T977] usb 5-1: Manufacturer: syz [ 1134.682447][ T977] usb 5-1: SerialNumber: syz [ 1134.693187][T18958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.698879][T18843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.712293][T18958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.738784][ T977] usb 3-1: USB disconnect, device number 90 [ 1134.784939][T18843] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.803801][ T917] hub 6-1:0.0: activate --> -90 [ 1134.815802][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.822915][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.838547][T18474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.845677][T18474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.990350][T18997] netlink: 'syz.4.3293': attribute type 1 has an invalid length. [ 1135.011335][T18997] netlink: 15918 bytes leftover after parsing attributes in process `syz.4.3293'. [ 1135.117453][T18843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.185673][T18843] veth0_vlan: entered promiscuous mode [ 1135.207201][T18843] veth1_vlan: entered promiscuous mode [ 1135.215324][T15288] usb 6-1: USB disconnect, device number 32 [ 1135.216353][ T917] usb 6-1-port1: config error [ 1135.278613][T18843] veth0_macvtap: entered promiscuous mode [ 1135.294310][T18843] veth1_macvtap: entered promiscuous mode [ 1135.348438][T18843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.385471][T18843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.437865][T18843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.447513][T18843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.892908][T18843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.904155][T18843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.094776][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.146682][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.285893][ T6517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.314291][ T6517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.324581][T19024] fuse: Bad value for 'fd' [ 1137.063362][T19036] input: syz0 as /devices/virtual/input/input112 [ 1137.395301][ T10] usb 5-1: USB disconnect, device number 92 [ 1137.566882][ T30] audit: type=1400 audit(1752017450.807:979): avc: denied { setopt } for pid=19037 comm="syz.5.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1137.722653][ T30] audit: type=1400 audit(1752017450.807:980): avc: denied { write } for pid=19037 comm="syz.5.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1137.839846][T19043] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3299'. [ 1138.895511][T19056] input: syz0 as /devices/virtual/input/input113 [ 1139.083166][T19054] lo speed is unknown, defaulting to 1000 [ 1140.410359][T19062] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 1140.646642][T19071] fuse: Bad value for 'fd' [ 1140.752024][ T977] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1140.957124][ T977] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1140.970284][ T977] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.012576][ T977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1141.031625][ T977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.048848][ T30] audit: type=1400 audit(1752017454.287:981): avc: denied { write } for pid=19089 comm="syz.1.3310" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1141.302167][ T977] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1141.362960][ T977] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1141.415634][ T977] usb 6-1: Product: syz [ 1141.440729][ T977] usb 6-1: Manufacturer: syz [ 1141.535790][ T977] cdc_wdm 6-1:1.0: skipping garbage [ 1141.547753][ T977] cdc_wdm 6-1:1.0: skipping garbage [ 1141.574913][ T977] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1141.924505][ T10] usb 6-1: USB disconnect, device number 33 [ 1144.538309][T19121] lo speed is unknown, defaulting to 1000 [ 1145.920260][ T30] audit: type=1804 audit(1752017458.857:982): pid=19125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3319" name="/newroot/53/file0" dev="tmpfs" ino=314 res=1 errno=0 [ 1146.185024][T19134] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1148.181706][T13681] Bluetooth: hci4: command 0x0406 tx timeout [ 1149.271707][T11139] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1149.441757][T11139] usb 3-1: Using ep0 maxpacket: 32 [ 1149.448578][T11139] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1149.464197][T11139] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1149.477212][T11139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1149.490847][T11139] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1149.527659][T11139] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1149.705546][T11139] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 1149.716409][T11139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.725103][T11139] usb 3-1: Product: syz [ 1149.729533][T11139] usb 3-1: Manufacturer: syz [ 1149.756178][T11139] usb 3-1: SerialNumber: syz [ 1149.765964][T11139] usb 3-1: config 0 descriptor?? [ 1149.772915][T19167] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1149.780813][T11139] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1149.991629][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1150.031716][T19167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.061833][T19167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.161825][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1150.165606][T19167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.514945][T19167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.764744][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1150.868439][ T5904] usb 3-1: USB disconnect, device number 91 [ 1150.889041][ T10] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1150.940665][ T10] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1151.095922][T19190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3336'. [ 1151.208752][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1151.374822][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1151.399511][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.424467][ T10] usb 4-1: Product: syz [ 1151.434008][ T10] usb 4-1: Manufacturer: syz [ 1151.438618][ T10] usb 4-1: SerialNumber: syz [ 1152.464521][T19198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=19198 comm=syz.2.3338 [ 1152.885568][ T30] audit: type=1400 audit(1752017466.127:983): avc: denied { write } for pid=19205 comm="syz.1.3341" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1153.019939][ T30] audit: type=1400 audit(1752017466.137:984): avc: denied { open } for pid=19205 comm="syz.1.3341" path="/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1153.056563][ T30] audit: type=1400 audit(1752017466.137:985): avc: denied { unmount } for pid=19205 comm="syz.1.3341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1153.089382][ T30] audit: type=1400 audit(1752017466.297:986): avc: denied { lock } for pid=19207 comm="syz.4.3342" path="socket:[70305]" dev="sockfs" ino=70305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1153.964941][ T30] audit: type=1400 audit(1752017467.197:987): avc: denied { create } for pid=19207 comm="syz.4.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1154.014227][ T5154] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 1154.716815][ T10] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1154.776104][ T10] usb 4-1: USB disconnect, device number 91 [ 1156.225562][T19241] netlink: 'syz.5.3351': attribute type 1 has an invalid length. [ 1156.440074][ T30] audit: type=1400 audit(1752017469.677:988): avc: denied { create } for pid=19245 comm="syz.2.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1156.465828][ T30] audit: type=1400 audit(1752017469.707:989): avc: denied { ioctl } for pid=19245 comm="syz.2.3353" path="socket:[70426]" dev="sockfs" ino=70426 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1156.876116][T17473] IPVS: starting estimator thread 0... [ 1157.043107][T19256] IPVS: using max 35 ests per chain, 84000 per kthread [ 1158.097983][T19275] overlayfs: failed to clone upperpath [ 1159.511755][ T5904] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1159.981708][ T10] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1159.989382][ T5897] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1160.031676][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 1160.045670][ T5904] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.065932][ T5904] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1160.092432][ T5904] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1160.124447][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.141861][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 1160.158678][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1160.247479][ T5904] usbtmc 6-1:16.0: bulk endpoints not found [ 1160.267408][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1160.280525][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1160.325364][ T5897] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1160.335685][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.408357][ T5897] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1160.435678][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1160.471261][ T5904] usb 6-1: USB disconnect, device number 34 [ 1160.477344][ T5897] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1160.502793][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.536614][ T5897] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1160.548537][ T10] usb 3-1: config 0 descriptor?? [ 1160.569578][T19299] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1160.599041][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.622854][ T5897] usb 5-1: Product: syz [ 1160.630912][ T5897] usb 5-1: Manufacturer: syz [ 1160.635950][ T5897] usb 5-1: SerialNumber: syz [ 1160.734037][T19320] pim6reg: entered allmulticast mode [ 1162.335249][ T5897] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1162.347236][ T5897] usb 5-1: USB disconnect, device number 93 [ 1162.638798][ T977] IPVS: starting estimator thread 0... [ 1162.646171][T19338] tipc: Started in network mode [ 1162.651048][T19338] tipc: Node identity ac1414aa, cluster identity 4711 [ 1162.713520][T19338] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1162.751656][T19342] IPVS: using max 76 ests per chain, 182400 per kthread [ 1162.759912][T19338] tipc: Enabled bearer , priority 10 [ 1162.851703][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1162.934783][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1162.940791][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1162.991703][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1163.043781][ T10] usb 3-1: USB disconnect, device number 92 [ 1163.131607][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1163.271627][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1163.411610][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1163.551774][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1163.561713][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1163.701731][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1163.714615][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1163.724157][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.758669][ T30] audit: type=1400 audit(1752017476.997:990): avc: denied { setopt } for pid=19377 comm="syz.4.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1163.778131][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.790663][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 1163.796784][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 1163.817176][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1163.842188][ T977] tipc: Node number set to 2886997162 [ 1163.892601][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.913173][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1163.922512][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1163.952402][ T10] usb 3-1: Product: syz [ 1163.966217][ T10] usb 3-1: Manufacturer: syz [ 1163.981669][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1164.003055][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1164.008651][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1164.021662][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1164.061947][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1164.068042][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1164.251616][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1164.365307][ T10] usb 3-1: USB disconnect, device number 93 [ 1164.575397][T19378] ceph: No mds server is up or the cluster is laggy [ 1164.630509][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 1164.647285][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 1164.941385][ T30] audit: type=1400 audit(1752017478.177:991): avc: denied { read } for pid=19392 comm="syz.2.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1165.097223][T19398] netlink: 'syz.3.3403': attribute type 11 has an invalid length. [ 1165.106401][T19398] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3403'. [ 1165.202386][T19407] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 1166.055891][ T30] audit: type=1400 audit(1752017479.297:992): avc: denied { bind } for pid=19418 comm="syz.5.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1166.076300][T19419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3411'. [ 1166.116878][T19419] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3411'. [ 1166.200644][T19422] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1166.412304][ T10] IPVS: starting estimator thread 0... [ 1166.433148][T19428] tipc: Started in network mode [ 1166.441319][T19428] tipc: Node identity ac1414aa, cluster identity 4711 [ 1166.451637][ T5897] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1166.466194][T19428] tipc: Enabled bearer , priority 10 [ 1166.512045][T19429] IPVS: using max 75 ests per chain, 180000 per kthread [ 1166.618534][ T5897] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1166.638467][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.655273][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1166.666717][ T5897] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.689117][ T5897] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1166.745585][ T5904] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1166.770825][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1166.785583][ T30] audit: type=1400 audit(1752017480.027:993): avc: denied { setopt } for pid=19439 comm="syz.3.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1166.808563][ T5897] usb 6-1: Product: syz [ 1166.813353][ T5897] usb 6-1: Manufacturer: syz [ 1166.824666][ T5897] cdc_wdm 6-1:1.0: skipping garbage [ 1166.830013][ T5897] cdc_wdm 6-1:1.0: skipping garbage [ 1166.840102][ T5897] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1166.882241][ T5904] usb 3-1: device descriptor read/64, error -71 [ 1167.033664][ T5897] usb 6-1: USB disconnect, device number 35 [ 1167.131714][ T5904] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1167.340382][T19443] hub 9-0:1.0: USB hub found [ 1167.348104][T19443] hub 9-0:1.0: 1 port detected [ 1167.362082][ T5904] usb 3-1: device descriptor read/64, error -71 [ 1167.373187][T19447] overlayfs: failed to clone upperpath [ 1167.448588][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1167.455570][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1167.501824][ T5904] usb usb3-port1: attempt power cycle [ 1167.582669][ T5897] tipc: Node number set to 2886997162 [ 1167.628443][T19458] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3425'. [ 1167.921628][ C1] net_ratelimit: 3 callbacks suppressed [ 1167.921647][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1168.518838][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1168.548107][T19449] ceph: No mds server is up or the cluster is laggy [ 1168.609319][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1168.621767][ T5904] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1168.674446][T13681] Bluetooth: hci0: command 0x0406 tx timeout [ 1168.721713][ T5904] usb 3-1: device descriptor read/8, error -71 [ 1168.968123][T19472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.971668][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1168.975390][T19472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.982275][ T5904] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1169.100553][ T5904] usb 3-1: device descriptor read/8, error -71 [ 1169.171268][ T30] audit: type=1804 audit(1752017482.397:994): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3429" name="/newroot/106/file0" dev="tmpfs" ino=601 res=1 errno=0 [ 1169.303791][ T5904] usb usb3-port1: unable to enumerate USB device [ 1169.556795][T19472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.594755][T19472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.702019][T19472] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.719478][T19472] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.741408][T19472] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.759307][T19472] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.977368][ T30] audit: type=1400 audit(1752017483.187:995): avc: denied { read } for pid=19484 comm="syz.4.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1170.011681][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1170.035894][T19472] bridge1: left promiscuous mode [ 1170.147391][T19476] vlan0: entered promiscuous mode [ 1170.194675][ T5904] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1170.210188][T19476] team0: Port device vlan0 added [ 1170.585283][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1170.637702][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1170.684111][ T5904] usb 3-1: can't read configurations, error -71 [ 1170.770141][T19493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1171.041720][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1171.082655][T19516] FAULT_INJECTION: forcing a failure. [ 1171.082655][T19516] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.095724][T19516] CPU: 0 UID: 0 PID: 19516 Comm: syz.2.3441 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1171.095749][T19516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1171.095760][T19516] Call Trace: [ 1171.095767][T19516] [ 1171.095774][T19516] dump_stack_lvl+0x16c/0x1f0 [ 1171.095804][T19516] should_fail_ex+0x512/0x640 [ 1171.095827][T19516] ? __kmalloc_noprof+0xbf/0x510 [ 1171.095854][T19516] ? constrain_params_by_rules+0x175/0xca0 [ 1171.095882][T19516] should_failslab+0xc2/0x120 [ 1171.095908][T19516] __kmalloc_noprof+0xd2/0x510 [ 1171.095937][T19516] constrain_params_by_rules+0x175/0xca0 [ 1171.095969][T19516] ? preempt_schedule_common+0x44/0xc0 [ 1171.095997][T19516] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1171.096031][T19516] ? rcu_is_watching+0x12/0xc0 [ 1171.096061][T19516] ? snd_pcm_oss_change_params_locked+0x9cd/0x3a30 [ 1171.096089][T19516] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1171.096121][T19516] ? snd_pcm_oss_write+0x4c3/0xa10 [ 1171.096136][T19516] ? vfs_write+0x2a0/0x1150 [ 1171.096157][T19516] ? ksys_write+0x12a/0x250 [ 1171.096177][T19516] ? do_syscall_64+0xcd/0x4c0 [ 1171.096200][T19516] ? snd_interval_refine+0x2fa/0x580 [ 1171.096226][T19516] snd_pcm_hw_refine+0x7de/0xad0 [ 1171.096259][T19516] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1171.096304][T19516] snd_pcm_hw_param_first+0x334/0x6f0 [ 1171.096337][T19516] snd_pcm_hw_param_near.constprop.0+0x702/0x8e0 [ 1171.096369][T19516] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1171.096399][T19516] ? snd_pcm_hw_param_value+0x1f5/0x5b0 [ 1171.096424][T19516] ? snd_pcm_oss_change_params_locked+0x958/0x3a30 [ 1171.096457][T19516] snd_pcm_oss_change_params_locked+0x9cd/0x3a30 [ 1171.096498][T19516] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1171.096527][T19516] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 1171.096552][T19516] ? snd_pcm_oss_write+0x4a2/0xa10 [ 1171.096581][T19516] ? sched_clock_cpu+0x6c/0x530 [ 1171.096612][T19516] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1171.096642][T19516] snd_pcm_oss_write+0x4c3/0xa10 [ 1171.096661][T19516] ? bpf_lsm_file_permission+0x9/0x10 [ 1171.096688][T19516] ? security_file_permission+0x71/0x210 [ 1171.096718][T19516] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1171.096735][T19516] vfs_write+0x2a0/0x1150 [ 1171.096762][T19516] ? __pfx_vfs_write+0x10/0x10 [ 1171.096783][T19516] ? find_held_lock+0x2b/0x80 [ 1171.096806][T19516] ? __fget_files+0x204/0x3c0 [ 1171.096834][T19516] ? __fget_files+0x20e/0x3c0 [ 1171.096856][T19516] ? rcu_watching_snap_stopped_since+0x50/0x110 [ 1171.096888][T19516] ksys_write+0x12a/0x250 [ 1171.096910][T19516] ? __pfx_ksys_write+0x10/0x10 [ 1171.096940][T19516] do_syscall_64+0xcd/0x4c0 [ 1171.096967][T19516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.096985][T19516] RIP: 0033:0x7fbab9d8e929 [ 1171.097001][T19516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.097018][T19516] RSP: 002b:00007fbabac53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1171.097036][T19516] RAX: ffffffffffffffda RBX: 00007fbab9fb6160 RCX: 00007fbab9d8e929 [ 1171.097048][T19516] RDX: 0000000000088020 RSI: 0000200000002000 RDI: 000000000000000c [ 1171.097059][T19516] RBP: 00007fbabac53090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.097070][T19516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.097081][T19516] R13: 0000000000000000 R14: 00007fbab9fb6160 R15: 00007ffec2b6c768 [ 1171.097110][T19516] [ 1172.091625][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1172.238757][ T30] audit: type=1400 audit(1752017485.477:996): avc: denied { setopt } for pid=19518 comm="syz.1.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1172.311520][ T30] audit: type=1400 audit(1752017485.547:997): avc: denied { setopt } for pid=19521 comm="syz.1.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1173.131837][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1173.253453][T19541] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1173.932731][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1174.121998][ T10] usb 6-1: device descriptor read/64, error -71 [ 1174.161606][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1174.422193][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1174.582317][ T10] usb 6-1: device descriptor read/64, error -71 [ 1175.033836][ T10] usb usb6-port1: attempt power cycle [ 1175.201605][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1175.508508][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1175.551437][ T10] usb 6-1: device descriptor read/8, error -71 [ 1175.668039][T19569] FAULT_INJECTION: forcing a failure. [ 1175.668039][T19569] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.680973][T19569] CPU: 1 UID: 0 PID: 19569 Comm: syz.2.3459 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1175.681001][T19569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1175.681011][T19569] Call Trace: [ 1175.681018][T19569] [ 1175.681024][T19569] dump_stack_lvl+0x16c/0x1f0 [ 1175.681052][T19569] should_fail_ex+0x512/0x640 [ 1175.681075][T19569] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1175.681101][T19569] should_failslab+0xc2/0x120 [ 1175.681126][T19569] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1175.681149][T19569] ? __mpol_dup+0x74/0x380 [ 1175.681169][T19569] __mpol_dup+0x74/0x380 [ 1175.681186][T19569] ? __pfx___mpol_dup+0x10/0x10 [ 1175.681209][T19569] mbind_range+0x2ad/0x570 [ 1175.681230][T19569] do_mbind+0x848/0xf30 [ 1175.681256][T19569] ? __pfx_do_mbind+0x10/0x10 [ 1175.681271][T19569] ? find_held_lock+0x2b/0x80 [ 1175.681294][T19569] ? ksys_write+0x190/0x250 [ 1175.681328][T19569] ? __pfx_get_nodes+0x10/0x10 [ 1175.681358][T19569] ? __fget_files+0x20e/0x3c0 [ 1175.681387][T19569] kernel_mbind+0x1e3/0x1f0 [ 1175.681406][T19569] ? __pfx_kernel_mbind+0x10/0x10 [ 1175.681432][T19569] do_syscall_64+0xcd/0x4c0 [ 1175.681459][T19569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.681477][T19569] RIP: 0033:0x7fbab9d8e929 [ 1175.681492][T19569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.681508][T19569] RSP: 002b:00007fbabac95038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1175.681525][T19569] RAX: ffffffffffffffda RBX: 00007fbab9fb5fa0 RCX: 00007fbab9d8e929 [ 1175.681540][T19569] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 1175.681551][T19569] RBP: 00007fbabac95090 R08: 0000000000000000 R09: 0000000000000002 [ 1175.681562][T19569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.681572][T19569] R13: 0000000000000000 R14: 00007fbab9fb5fa0 R15: 00007ffec2b6c768 [ 1175.681597][T19569] [ 1175.879592][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1175.892102][ T10] usb 6-1: device descriptor read/8, error -71 [ 1176.002017][ T10] usb usb6-port1: unable to enumerate USB device [ 1176.251605][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1176.941256][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.281598][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1177.599663][T19611] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1177.612632][T19610] FAULT_INJECTION: forcing a failure. [ 1177.612632][T19610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.612662][T19610] CPU: 0 UID: 0 PID: 19610 Comm: syz.5.3470 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1177.612686][T19610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1177.612696][T19610] Call Trace: [ 1177.612702][T19610] [ 1177.612708][T19610] dump_stack_lvl+0x16c/0x1f0 [ 1177.612734][T19610] should_fail_ex+0x512/0x640 [ 1177.612758][T19610] _copy_to_user+0x32/0xd0 [ 1177.612782][T19610] rng_dev_read+0x1ea/0x810 [ 1177.612808][T19610] ? __pfx_virtio_read+0x10/0x10 [ 1177.612824][T19610] ? __pfx_rng_dev_read+0x10/0x10 [ 1177.612853][T19610] ? vfs_readv+0x44b/0x8b0 [ 1177.612873][T19610] ? __pfx_rng_dev_read+0x10/0x10 [ 1177.612895][T19610] vfs_readv+0x5be/0x8b0 [ 1177.612917][T19610] ? __pfx_vfs_readv+0x10/0x10 [ 1177.612936][T19610] ? find_held_lock+0x2b/0x80 [ 1177.612969][T19610] ? __fget_files+0x20e/0x3c0 [ 1177.612995][T19610] ? do_preadv+0x1a6/0x270 [ 1177.613012][T19610] do_preadv+0x1a6/0x270 [ 1177.613031][T19610] ? __pfx_do_preadv+0x10/0x10 [ 1177.613047][T19610] ? xfd_validate_state+0x61/0x180 [ 1177.613075][T19610] do_syscall_64+0xcd/0x4c0 [ 1177.613101][T19610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.613118][T19610] RIP: 0033:0x7ff67a78e929 [ 1177.613131][T19610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1177.613146][T19610] RSP: 002b:00007ff6785d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1177.613161][T19610] RAX: ffffffffffffffda RBX: 00007ff67a9b6080 RCX: 00007ff67a78e929 [ 1177.613172][T19610] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 1177.613181][T19610] RBP: 00007ff6785d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.613190][T19610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.613205][T19610] R13: 0000000000000000 R14: 00007ff67a9b6080 R15: 00007ffcec9f5028 [ 1177.613225][T19610] [ 1178.321608][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1178.541274][T19620] SELinux: syz.4.3473 (19620) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1178.557771][T19620] syzkaller1: entered promiscuous mode [ 1178.563728][T19620] syzkaller1: entered allmulticast mode [ 1179.361601][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1180.331893][ T5897] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1180.411593][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1180.734266][ T5897] usb 6-1: device descriptor read/64, error -71 [ 1181.105340][T19653] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1181.120420][T19653] batman_adv: batadv0: Adding interface: gretap1 [ 1181.126837][T19653] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.152243][T19653] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1181.441590][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1181.591641][ T5897] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1181.781700][ T5897] usb 6-1: device descriptor read/64, error -71 [ 1181.862497][ T30] audit: type=1400 audit(1752017495.057:998): avc: denied { ioctl } for pid=19662 comm="syz.2.3484" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1182.429410][ T5897] usb usb6-port1: attempt power cycle [ 1182.491592][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1182.941670][ T5897] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1183.011836][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1183.019576][ T5897] usb 6-1: device descriptor read/8, error -32 [ 1183.276550][T19674] lo speed is unknown, defaulting to 1000 [ 1183.521600][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1184.561593][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1185.563379][T19692] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1185.601622][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1185.637240][ T57] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1185.782635][ T57] usb 6-1: device descriptor read/64, error -71 [ 1185.976140][T19701] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1186.270396][ T57] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1186.319559][T19707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1186.569223][ T57] usb 6-1: device descriptor read/64, error -71 [ 1186.641661][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1186.740533][ T57] usb usb6-port1: attempt power cycle [ 1187.177917][T19717] fuse: Bad value for 'fd' [ 1187.681651][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1187.988537][ T57] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1188.047211][ T57] usb 6-1: device descriptor read/8, error -71 [ 1188.090964][ T917] IPVS: starting estimator thread 0... [ 1188.211709][T19732] IPVS: using max 39 ests per chain, 93600 per kthread [ 1188.311957][ T57] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1188.364225][T19735] netlink: 'syz.2.3505': attribute type 11 has an invalid length. [ 1188.365120][ T57] usb 6-1: device descriptor read/8, error -71 [ 1188.372501][T19735] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3505'. [ 1188.556781][ T57] usb usb6-port1: unable to enumerate USB device [ 1188.731660][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1189.339743][ T30] audit: type=1400 audit(1752017502.537:999): avc: denied { setopt } for pid=19737 comm="syz.5.3508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1189.373637][ T30] audit: type=1400 audit(1752017502.537:1000): avc: denied { bind } for pid=19737 comm="syz.5.3508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1189.406568][ T30] audit: type=1400 audit(1752017502.537:1001): avc: denied { name_bind } for pid=19737 comm="syz.5.3508" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1189.474887][ T30] audit: type=1400 audit(1752017502.537:1002): avc: denied { node_bind } for pid=19737 comm="syz.5.3508" saddr=fe88::6 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1189.515823][ T30] audit: type=1400 audit(1752017502.757:1003): avc: denied { sqpoll } for pid=19738 comm="syz.3.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1189.761595][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1189.926848][T19758] overlayfs: failed to clone upperpath [ 1190.801595][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1190.979473][T19771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1190.998460][ T36] Bluetooth: hci3: Frame reassembly failed (-84) [ 1191.020074][ T30] audit: type=1326 audit(1752017504.257:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19762 comm="syz.2.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab9d8e929 code=0x7ffc0000 [ 1191.088548][ T30] audit: type=1326 audit(1752017504.257:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19762 comm="syz.2.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab9d8e929 code=0x7ffc0000 [ 1191.147900][ T30] audit: type=1326 audit(1752017504.297:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19762 comm="syz.2.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbab9d8e929 code=0x7ffc0000 [ 1191.231822][T15288] libceph: connect (1)[c::]:6789 error -101 [ 1191.237893][T15288] libceph: mon0 (1)[c::]:6789 connect error [ 1191.253383][ T30] audit: type=1326 audit(1752017504.297:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19762 comm="syz.2.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab9d8e929 code=0x7ffc0000 [ 1191.331227][ T30] audit: type=1326 audit(1752017504.297:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19762 comm="syz.2.3515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab9d8e929 code=0x7ffc0000 [ 1191.501823][T15288] libceph: connect (1)[c::]:6789 error -101 [ 1191.507886][T15288] libceph: mon0 (1)[c::]:6789 connect error [ 1191.621730][ T57] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1191.772466][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 1191.779096][ T57] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1191.788125][ T57] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.798256][ T57] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1191.808841][ T57] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1191.818234][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.826554][ T57] usb 6-1: Product: syz [ 1191.830699][ T57] usb 6-1: Manufacturer: syz [ 1191.835318][ T57] usb 6-1: SerialNumber: syz [ 1191.841600][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1192.022770][T15288] libceph: connect (1)[c::]:6789 error -101 [ 1192.029803][T15288] libceph: mon0 (1)[c::]:6789 connect error [ 1192.043527][T19773] ceph: No mds server is up or the cluster is laggy [ 1192.256166][ T57] usb 6-1: 0:2 : does not exist [ 1192.341618][T15288] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1192.492979][T15288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1192.503970][T15288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1192.516842][T15288] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1192.525986][T15288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.535526][T15288] usb 3-1: config 0 descriptor?? [ 1192.544905][T19781] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1192.760529][T19781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.769328][T19781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.891592][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1193.041753][ T5154] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1193.041763][T13681] Bluetooth: hci3: command 0xfc11 tx timeout [ 1193.931588][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1194.192752][T15288] usbhid 3-1:0.0: can't add hid device: -71 [ 1194.200920][T15288] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1194.215228][T15288] usb 3-1: USB disconnect, device number 100 [ 1194.765512][ T57] usb 6-1: USB disconnect, device number 48 [ 1194.956032][T19811] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1194.971586][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1195.564232][ T5154] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 1195.571250][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1195.571263][ T30] audit: type=1400 audit(1752017508.797:1025): avc: denied { watch } for pid=19818 comm="syz.3.3531" path="/151/control" dev="tmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1196.011931][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1196.151824][T15288] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1196.313419][T15288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.336568][T15288] usb 5-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 1196.358279][T15288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.389965][T15288] usb 5-1: config 0 descriptor?? [ 1196.440041][T15288] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 1197.051589][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1197.625209][ T30] audit: type=1400 audit(1752017510.867:1026): avc: denied { mount } for pid=19852 comm="syz.2.3540" name="/" dev="autofs" ino=73535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1197.791780][ T57] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1197.807447][ T30] audit: type=1400 audit(1752017511.047:1027): avc: denied { unmount } for pid=17711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1198.031617][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 1198.061303][T19858] FAULT_INJECTION: forcing a failure. [ 1198.061303][T19858] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.074217][T19858] CPU: 1 UID: 0 PID: 19858 Comm: syz.2.3541 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1198.074241][T19858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1198.074252][T19858] Call Trace: [ 1198.074258][T19858] [ 1198.074266][T19858] dump_stack_lvl+0x16c/0x1f0 [ 1198.074296][T19858] should_fail_ex+0x512/0x640 [ 1198.074322][T19858] should_failslab+0xc2/0x120 [ 1198.074348][T19858] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1198.074375][T19858] ? sidtab_sid2str_get+0x17a/0x680 [ 1198.074405][T19858] kmemdup_noprof+0x29/0x60 [ 1198.074428][T19858] sidtab_sid2str_get+0x17a/0x680 [ 1198.074456][T19858] sidtab_entry_to_string+0x33/0x110 [ 1198.074483][T19858] security_sid_to_context_core+0x35c/0x640 [ 1198.074508][T19858] avc_audit_post_callback+0x109/0x8f0 [ 1198.074536][T19858] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 1198.074560][T19858] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1198.074586][T19858] ? skb_put+0x138/0x1b0 [ 1198.074605][T19858] ? audit_log_n_string+0x253/0x540 [ 1198.074630][T19858] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1198.074655][T19858] common_lsm_audit+0x24b/0x300 [ 1198.074679][T19858] ? __pfx_common_lsm_audit+0x10/0x10 [ 1198.074704][T19858] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1198.074727][T19858] ? avc_update_node.isra.0+0x4c0/0xb60 [ 1198.074757][T19858] slow_avc_audit+0x186/0x210 [ 1198.074774][T19858] ? __pfx_slow_avc_audit+0x10/0x10 [ 1198.074794][T19858] ? avc_denied+0x14a/0x190 [ 1198.074824][T19858] ? avc_has_perm_noaudit+0x306/0x3b0 [ 1198.074845][T19858] avc_has_perm+0x18b/0x1c0 [ 1198.074864][T19858] ? __pfx_avc_has_perm+0x10/0x10 [ 1198.074891][T19858] sock_has_perm+0x252/0x2f0 [ 1198.074910][T19858] ? __pfx_sock_has_perm+0x10/0x10 [ 1198.074932][T19858] ? __lock_acquire+0xb8a/0x1c90 [ 1198.074962][T19858] selinux_socket_bind+0xee/0xa40 [ 1198.074987][T19858] ? __pfx_selinux_socket_bind+0x10/0x10 [ 1198.075007][T19858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1198.075030][T19858] ? tomoyo_socket_bind_permission+0x14f/0x350 [ 1198.075054][T19858] ? __pfx_tomoyo_socket_bind_permission+0x10/0x10 [ 1198.075080][T19858] ? __fget_files+0x204/0x3c0 [ 1198.075108][T19858] ? __fget_files+0x20e/0x3c0 [ 1198.075141][T19858] security_socket_bind+0xc6/0x240 [ 1198.075162][T19858] __sys_bind+0x13e/0x260 [ 1198.075180][T19858] ? __pfx___sys_bind+0x10/0x10 [ 1198.075197][T19858] ? __fget_files+0x20e/0x3c0 [ 1198.075237][T19858] __x64_sys_bind+0x72/0xb0 [ 1198.075255][T19858] ? lockdep_hardirqs_on+0x7c/0x110 [ 1198.075278][T19858] do_syscall_64+0xcd/0x4c0 [ 1198.075304][T19858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.075321][T19858] RIP: 0033:0x7fbab9d8e929 [ 1198.075336][T19858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.075353][T19858] RSP: 002b:00007fbabac53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1198.075371][T19858] RAX: ffffffffffffffda RBX: 00007fbab9fb6160 RCX: 00007fbab9d8e929 [ 1198.075382][T19858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1198.075393][T19858] RBP: 00007fbabac53090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.075404][T19858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.075414][T19858] R13: 0000000000000000 R14: 00007fbab9fb6160 R15: 00007ffec2b6c768 [ 1198.075439][T19858] [ 1198.077739][ T30] audit: type=1400 audit(1752017511.297:1028): avc: denied { create } for pid=19855 comm="syz.2.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1198.089898][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1198.430381][ T30] audit: type=1400 audit(1752017511.297:1029): avc: denied { ioctl } for pid=19855 comm="syz.2.3541" path="socket:[72442]" dev="sockfs" ino=72442 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1198.478522][ T57] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1198.487373][ T57] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.499842][ T57] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1198.509047][ T30] audit: type=1400 audit(1752017511.297:1030): avc: denied { bind } for pid=19855 comm="syz.2.3541" ssid=148 tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1198.511038][ T57] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1198.540524][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.548856][ T57] usb 6-1: Product: syz [ 1198.554986][ T57] usb 6-1: Manufacturer: syz [ 1198.559814][ T57] usb 6-1: SerialNumber: syz [ 1198.693320][T15288] pwc: send_video_command error -71 [ 1198.701667][T15288] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1198.709223][T15288] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1198.720598][T15288] usb 5-1: USB disconnect, device number 94 [ 1199.009934][ T57] usb 6-1: 0:2 : does not exist [ 1199.016466][T19862] input: syz0 as /devices/virtual/input/input115 [ 1199.131580][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1199.173932][T19867] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1199.417231][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3545'. [ 1199.486226][T19872] FAULT_INJECTION: forcing a failure. [ 1199.486226][T19872] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.498944][T19872] CPU: 0 UID: 0 PID: 19872 Comm: syz.4.3546 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1199.498967][T19872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1199.498978][T19872] Call Trace: [ 1199.498985][T19872] [ 1199.498992][T19872] dump_stack_lvl+0x16c/0x1f0 [ 1199.499022][T19872] should_fail_ex+0x512/0x640 [ 1199.499045][T19872] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1199.499069][T19872] should_failslab+0xc2/0x120 [ 1199.499096][T19872] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1199.499115][T19872] ? ksys_write+0x190/0x250 [ 1199.499136][T19872] ? keyring_restrict+0x27a/0x670 [ 1199.499167][T19872] keyring_restrict+0x27a/0x670 [ 1199.499193][T19872] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1199.499221][T19872] ? __pfx_keyring_restrict+0x10/0x10 [ 1199.499246][T19872] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1199.499279][T19872] keyctl_restrict_keyring+0x1a4/0x250 [ 1199.499301][T19872] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 1199.499325][T19872] ? ksys_write+0x1ac/0x250 [ 1199.499351][T19872] ? __pfx_ksys_write+0x10/0x10 [ 1199.499377][T19872] __do_sys_keyctl+0x4c1/0x590 [ 1199.499400][T19872] do_syscall_64+0xcd/0x4c0 [ 1199.499427][T19872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.499446][T19872] RIP: 0033:0x7ff8ab38e929 [ 1199.499460][T19872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.499477][T19872] RSP: 002b:00007ff8a91f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1199.499494][T19872] RAX: ffffffffffffffda RBX: 00007ff8ab5b6080 RCX: 00007ff8ab38e929 [ 1199.499506][T19872] RDX: 0000000000000000 RSI: 000000000da051b2 RDI: 000000000000001d [ 1199.499517][T19872] RBP: 00007ff8a91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.499527][T19872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.499538][T19872] R13: 0000000000000000 R14: 00007ff8ab5b6080 R15: 00007ffd2cec4c88 [ 1199.499562][T19872] [ 1199.611755][ T5154] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1199.961169][ T5154] Bluetooth: hci5: Injecting HCI hardware error event [ 1199.992036][T13681] Bluetooth: hci5: hardware error 0x00 [ 1200.171601][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1200.509605][T19887] lo speed is unknown, defaulting to 1000 [ 1200.654783][ T5897] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1200.813443][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.826043][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1200.847016][ T5897] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1200.856473][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.867557][ T5897] usb 3-1: Product: syz [ 1200.872028][ T5897] usb 3-1: Manufacturer: syz [ 1200.876757][ T5897] usb 3-1: SerialNumber: syz [ 1200.889982][ T5897] usb 3-1: config 0 descriptor?? [ 1200.898995][ T5897] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1200.910578][ T5897] imon 3-1:0.0: unable to initialize intf0, err -19 [ 1200.922731][ T5897] imon:imon_probe: failed to initialize context! [ 1200.999429][ T5897] imon 3-1:0.0: unable to register, err -19 [ 1201.201585][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1201.300433][ T30] audit: type=1400 audit(1752017514.537:1031): avc: denied { getopt } for pid=19895 comm="syz.3.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1201.303832][T19896] lo speed is unknown, defaulting to 1000 [ 1201.376754][T11139] usb 6-1: USB disconnect, device number 49 [ 1201.537663][ T5897] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1201.647741][T19907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1201.661966][T19907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1201.670534][T19907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1201.693177][T19907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1201.701625][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 1201.706982][T19907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1201.780313][T19905] lo speed is unknown, defaulting to 1000 [ 1201.813481][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1201.839456][ T5897] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1201.856221][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.871576][ T5897] usb 5-1: Product: syz [ 1201.875855][ T5897] usb 5-1: Manufacturer: syz [ 1201.880444][ T5897] usb 5-1: SerialNumber: syz [ 1201.891507][ T5897] usb 5-1: config 0 descriptor?? [ 1201.904815][ T5897] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1201.915889][ T5897] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1201.922268][T11139] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1201.997712][T19905] chnl_net:caif_netlink_parms(): no params data found [ 1202.091506][T19905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.091993][T11139] usb 6-1: Using ep0 maxpacket: 8 [ 1202.104636][T19905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.114236][T11139] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 1202.114628][T19905] bridge_slave_0: entered allmulticast mode [ 1202.130011][T19905] bridge_slave_0: entered promiscuous mode [ 1202.131091][T11139] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.139753][T19905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.153170][T19905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.160298][T19905] bridge_slave_1: entered allmulticast mode [ 1202.167904][T19905] bridge_slave_1: entered promiscuous mode [ 1202.177671][T11139] usb 6-1: config 0 has no interfaces? [ 1202.188034][T11139] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1202.197419][T11139] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.208663][T19905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.230403][T19905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.234802][T11139] usb 6-1: config 0 descriptor?? [ 1202.251609][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1202.277118][T19905] team0: Port device team_slave_0 added [ 1202.286905][T19905] team0: Port device team_slave_1 added [ 1202.311333][T19905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.318413][T19905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.408600][T13681] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1203.281580][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1203.343284][T19905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.392887][ T5904] usb 3-1: USB disconnect, device number 101 [ 1203.402269][ T5897] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1203.404566][T19905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.417306][T19905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.447389][T19905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.479703][ T5897] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1203.495518][ T5897] em28xx 5-1:0.0: board has no eeprom [ 1203.508671][T19905] hsr_slave_0: entered promiscuous mode [ 1203.515082][T19905] hsr_slave_1: entered promiscuous mode [ 1203.521435][T19905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1203.530162][T19905] Cannot create hsr debugfs directory [ 1203.571656][ T5897] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1203.588925][ T5897] em28xx 5-1:0.0: dvb set to bulk mode. [ 1203.608008][T11139] em28xx 5-1:0.0: Binding DVB extension [ 1203.616979][ T30] audit: type=1400 audit(1752017516.847:1032): avc: denied { connect } for pid=19925 comm="syz.2.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1203.673932][ T30] audit: type=1400 audit(1752017516.907:1033): avc: denied { read write } for pid=19925 comm="syz.2.3561" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1203.747688][T11139] em28xx 5-1:0.0: Registering input extension [ 1203.761777][T13681] Bluetooth: hci3: command tx timeout [ 1203.956758][T19905] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1203.983393][T19905] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1204.000222][T19905] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1204.066530][T19905] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1204.268057][T19905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.322248][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1204.338119][T19905] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.358933][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.366023][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.459667][ T5897] usb 5-1: USB disconnect, device number 95 [ 1204.477064][ T5897] em28xx 5-1:0.0: Disconnecting em28xx [ 1204.507230][ T57] usb 6-1: USB disconnect, device number 50 [ 1204.540147][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3569'. [ 1204.564949][ T5897] em28xx 5-1:0.0: Closing input extension [ 1204.586682][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.593804][T10740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.605528][T19953] SELinux: syz.5.3569 (19953) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1204.625158][T19949] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1204.746468][T19949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.758157][ T5897] em28xx 5-1:0.0: Freeing device [ 1205.349925][T19977] overlayfs: failed to clone upperpath [ 1205.371623][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1205.586276][T19905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1205.852018][T13681] Bluetooth: hci3: command tx timeout [ 1206.401701][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1207.141804][T19905] veth0_vlan: entered promiscuous mode [ 1207.178356][T19905] veth1_vlan: entered promiscuous mode [ 1207.246150][T19905] veth0_macvtap: entered promiscuous mode [ 1207.256695][T19905] veth1_macvtap: entered promiscuous mode [ 1207.307594][T19905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1207.361440][T19905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1207.437524][T19905] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.448721][T19905] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.451600][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1207.458454][T19905] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.478234][T19905] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.789061][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.871788][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.922865][T13681] Bluetooth: hci3: command tx timeout [ 1208.165448][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.178485][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.491723][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1209.531705][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1210.018832][T13681] Bluetooth: hci3: command tx timeout [ 1210.369545][ T30] audit: type=1400 audit(1752017523.607:1034): avc: denied { getopt } for pid=20041 comm="syz.4.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1210.480581][T20043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1210.561582][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1210.663558][ T30] audit: type=1400 audit(1752017523.607:1035): avc: denied { ioctl } for pid=20041 comm="syz.4.3593" path="socket:[74484]" dev="sockfs" ino=74484 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1211.521007][ T30] audit: type=1400 audit(1752017524.757:1036): avc: denied { getopt } for pid=20053 comm="syz.3.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1211.601580][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1211.639840][T20059] netlink: 'syz.4.3599': attribute type 33 has an invalid length. [ 1211.655821][T20059] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3599'. [ 1211.720181][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3599'. [ 1212.651614][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1213.008019][T11139] libceph: connect (1)[c::]:6789 error -101 [ 1213.034616][T11139] libceph: mon0 (1)[c::]:6789 connect error [ 1213.116484][T11139] libceph: connect (1)[c::]:6789 error -101 [ 1213.131051][T11139] libceph: mon0 (1)[c::]:6789 connect error [ 1213.398001][T20091] netlink: 'syz.3.3600': attribute type 51 has an invalid length. [ 1213.406072][T20091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3600'. [ 1213.661742][T11139] libceph: connect (1)[c::]:6789 error -101 [ 1213.671903][T11139] libceph: mon0 (1)[c::]:6789 connect error [ 1213.678618][T11139] libceph: connect (1)[c::]:6789 error -101 [ 1213.691600][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1213.691728][T11139] libceph: mon0 (1)[c::]:6789 connect error [ 1213.780071][T20075] ceph: No mds server is up or the cluster is laggy [ 1213.910608][T20082] ceph: No mds server is up or the cluster is laggy [ 1214.137318][T20093] sp0: Synchronizing with TNC [ 1214.691674][T11139] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1214.731662][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1214.857189][T20120] binder: 20119:20120 ioctl c0306201 2000000003c0 returned -14 [ 1214.873725][T11139] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.913431][T11139] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.971620][T11139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.186846][T11139] usb 3-1: Product: syz [ 1215.191050][T11139] usb 3-1: Manufacturer: syz [ 1215.200176][T11139] usb 3-1: SerialNumber: syz [ 1215.411639][ T917] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1215.503856][T20131] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1215.510401][T20131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1215.611816][T20131] vhci_hcd vhci_hcd.0: Device attached [ 1215.761638][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1215.922112][ T5923] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1216.545572][ T57] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1216.801601][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1216.808977][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 1216.892151][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.910708][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.931745][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1217.072377][ T57] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1217.089481][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.096557][T11139] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1217.105184][ T57] usb 6-1: config 0 descriptor?? [ 1217.221204][T11139] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 1217.306084][T11139] cdc_ncm 3-1:1.0: setting tx_max = 52 [ 1217.332665][T11139] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1217.356268][T11139] usb 3-1: USB disconnect, device number 102 [ 1217.372774][T11139] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1217.433739][T20128] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 1217.440276][T20128] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1217.465429][T20157] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1217.487758][T20128] vhci_hcd vhci_hcd.0: Device attached [ 1217.579780][T20154] vhci_hcd: connection closed [ 1217.582338][T20133] vhci_hcd: connection reset by peer [ 1217.595679][ T57] usbhid 6-1:0.0: can't add hid device: -71 [ 1217.602722][ T72] vhci_hcd: stop threads [ 1217.611805][ T72] vhci_hcd: release socket [ 1217.616420][ T57] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1217.638689][ T72] vhci_hcd: disconnect device [ 1217.667330][ T72] vhci_hcd: stop threads [ 1217.673934][ T57] usb 6-1: USB disconnect, device number 51 [ 1217.683691][ T72] vhci_hcd: release socket [ 1217.704084][ T72] vhci_hcd: disconnect device [ 1217.841580][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1217.994598][T20168] lo speed is unknown, defaulting to 1000 [ 1218.881583][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1219.921605][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1220.037378][T20203] vcan1: entered promiscuous mode [ 1220.065986][T20201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=20201 comm=syz.3.3629 [ 1220.089448][T20203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=20203 comm=syz.5.3631 [ 1220.217522][T20209] input: syz0 as /devices/virtual/input/input117 [ 1220.917560][T20223] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1220.961658][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1221.023905][T20225] kAFS: unparsable volume name [ 1221.031729][ T5923] vhci_hcd: vhci_device speed not set [ 1221.133759][T20226] netlink: 'syz.5.3635': attribute type 1 has an invalid length. [ 1222.001586][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1222.291864][ T5897] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1222.382416][T20247] pim6reg: entered allmulticast mode [ 1222.464355][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 1222.489341][ T5897] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1222.512469][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.547434][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1222.663148][T20250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46848 sclass=netlink_route_socket pid=20250 comm=syz.4.3642 [ 1222.685235][ T30] audit: type=1400 audit(1752017535.927:1037): avc: denied { watch watch_reads } for pid=20248 comm="syz.4.3642" path="pipe:[75961]" dev="pipefs" ino=75961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1222.713341][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1222.725679][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.734410][T20250] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1222.745270][T20250] sd 0:0:1:0: device reset [ 1222.749033][ T5897] usb 3-1: Product: syz [ 1223.051570][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1223.536008][ T5897] usb 3-1: Manufacturer: syz [ 1223.540649][ T5897] usb 3-1: SerialNumber: syz [ 1223.632780][T11139] libceph: connect (1)[c::]:6789 error -101 [ 1223.638915][T11139] libceph: mon0 (1)[c::]:6789 connect error [ 1223.962394][T11139] libceph: connect (1)[c::]:6789 error -101 [ 1224.028573][ T5897] usb 3-1: 0:2 : does not exist [ 1224.049921][T11139] libceph: mon0 (1)[c::]:6789 connect error [ 1224.081715][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1224.386364][T20256] ceph: No mds server is up or the cluster is laggy [ 1224.391591][ T30] audit: type=1400 audit(1752017537.617:1038): avc: denied { execute } for pid=20265 comm="syz.3.3647" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=75996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1224.528313][T20274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3648'. [ 1224.540658][ T30] audit: type=1400 audit(1752017537.767:1039): avc: denied { write } for pid=20273 comm="syz.4.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1224.728443][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3651'. [ 1224.738146][T20285] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3650'. [ 1224.738181][T20286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.748131][T20282] netlink: 'syz.6.3651': attribute type 9 has an invalid length. [ 1224.773411][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3651'. [ 1224.861811][T20291] netlink: 'syz.6.3651': attribute type 1 has an invalid length. [ 1224.935141][ T30] audit: type=1400 audit(1752017538.177:1040): avc: denied { map } for pid=20295 comm="syz.6.3655" path="socket:[76100]" dev="sockfs" ino=76100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1225.054890][ T30] audit: type=1400 audit(1752017538.207:1041): avc: denied { read } for pid=20295 comm="syz.6.3655" path="socket:[76100]" dev="sockfs" ino=76100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1225.091862][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3655'. [ 1225.103395][T20296] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3655'. [ 1225.131581][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1225.394416][ T5923] usb 3-1: USB disconnect, device number 103 [ 1226.161567][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1226.428095][ T30] audit: type=1400 audit(1752017539.667:1042): avc: denied { wake_alarm } for pid=20314 comm="syz.3.3660" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1226.561695][T11139] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1226.581153][T20322] FAULT_INJECTION: forcing a failure. [ 1226.581153][T20322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.607279][T20322] CPU: 1 UID: 0 PID: 20322 Comm: syz.6.3662 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1226.607303][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1226.607312][T20322] Call Trace: [ 1226.607316][T20322] [ 1226.607320][T20322] dump_stack_lvl+0x16c/0x1f0 [ 1226.607339][T20322] should_fail_ex+0x512/0x640 [ 1226.607357][T20322] _copy_to_user+0x32/0xd0 [ 1226.607374][T20322] copy_siginfo_to_user+0x27/0xc0 [ 1226.607390][T20322] x64_setup_rt_frame+0x811/0xcf0 [ 1226.607408][T20322] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1226.607425][T20322] arch_do_signal_or_restart+0x5e4/0x7d0 [ 1226.607439][T20322] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1226.607461][T20322] exit_to_user_mode_loop+0x84/0x110 [ 1226.607475][T20322] do_syscall_64+0x3f6/0x4c0 [ 1226.607491][T20322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.607502][T20322] RIP: 0033:0x7f6d48f8e927 [ 1226.607512][T20322] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1226.607523][T20322] RSP: 002b:00007f6d49d35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 1226.607534][T20322] RAX: 0000000000000114 RBX: 00007f6d491b5fa0 RCX: 00007f6d48f8e929 [ 1226.607541][T20322] RDX: fffffffffffffc01 RSI: 0000000000000009 RDI: 0000000000000006 [ 1226.607548][T20322] RBP: 00007f6d49d35090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.607554][T20322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.607560][T20322] R13: 0000000000000000 R14: 00007f6d491b5fa0 R15: 00007fffa4375108 [ 1226.607574][T20322] [ 1226.722987][T11139] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1227.106338][T11139] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.155508][T11139] usb 6-1: config 0 descriptor?? [ 1227.170019][T11139] cp210x 6-1:0.0: cp210x converter detected [ 1227.201582][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1227.298899][T20333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3667'. [ 1227.330262][T20333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3667'. [ 1227.341799][T17664] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1227.375704][T11139] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1227.383653][T11139] cp210x 6-1:0.0: querying part number failed [ 1227.408959][T11139] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1227.438897][T11139] usb 6-1: USB disconnect, device number 52 [ 1227.485285][T11139] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1227.496897][T11139] cp210x 6-1:0.0: device disconnected [ 1227.513518][T17664] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.537287][T17664] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1227.602143][T17664] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1227.621264][T17664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1227.639946][T17664] usb 3-1: Product: syz [ 1227.644611][T17664] usb 3-1: Manufacturer: syz [ 1227.649218][T17664] usb 3-1: SerialNumber: syz [ 1227.776886][ T30] audit: type=1400 audit(1752017542.025:1043): avc: denied { relabelfrom } for pid=20344 comm="syz.6.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1227.787769][T20351] 9pnet_fd: Insufficient options for proto=fd [ 1227.814542][ T30] audit: type=1400 audit(1752017542.025:1044): avc: denied { relabelto } for pid=20344 comm="syz.6.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1227.871747][ T5923] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1228.149811][T20361] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1228.162434][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 1228.172791][ T5923] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1228.181497][ T5923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.241570][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1228.714571][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1228.731161][ T5923] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1228.745325][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.755964][ T5923] usb 5-1: Product: syz [ 1228.771605][ T5923] usb 5-1: Manufacturer: syz [ 1228.777028][ T5923] usb 5-1: SerialNumber: syz [ 1229.010482][T20373] overlayfs: failed to clone upperpath [ 1229.291776][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1229.623441][ T5923] usb 5-1: 0:2 : does not exist [ 1229.678699][T20381] overlayfs: failed to clone upperpath [ 1229.805072][T20383] 9pnet_fd: Insufficient options for proto=fd [ 1230.041840][T20388] lo speed is unknown, defaulting to 1000 [ 1230.331582][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1230.362340][T20394] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1230.509950][ T5923] usb 3-1: USB disconnect, device number 104 [ 1230.924683][ T10] usb 5-1: USB disconnect, device number 97 [ 1231.108948][T20410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=20410 comm=syz.4.3694 [ 1231.211837][T11139] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1231.371562][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1231.429450][ T5923] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1231.581695][T11139] usb 6-1: Using ep0 maxpacket: 8 [ 1231.589134][T11139] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1231.598298][T11139] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1231.624996][T11139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.663985][T11139] usb 6-1: Product: syz [ 1231.688067][T11139] usb 6-1: Manufacturer: syz [ 1231.706380][T11139] usb 6-1: SerialNumber: syz [ 1231.717061][T20420] netlink: 'syz.3.3697': attribute type 11 has an invalid length. [ 1231.725253][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 1231.731232][T11139] usb 6-1: config 0 descriptor?? [ 1231.734338][T20420] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3697'. [ 1231.755012][T11139] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 1231.756343][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1231.771327][ T5923] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1231.783575][ T5923] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1231.797558][ T5923] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1231.827008][ T5923] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1231.848385][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.856661][ T5923] usb 3-1: Product: syz [ 1231.861181][ T5923] usb 3-1: Manufacturer: syz [ 1231.869086][ T5923] usb 3-1: SerialNumber: syz [ 1231.960150][T11139] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 1231.977467][T11139] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1232.271603][T11139] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1232.342659][ T57] usb 6-1: USB disconnect, device number 53 [ 1232.411585][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1232.902353][T11139] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.913434][T11139] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1232.920055][T11139] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1232.929176][T11139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.939774][T11139] usb 5-1: config 0 descriptor?? [ 1232.944948][ T917] IPVS: starting estimator thread 0... [ 1233.077507][T20431] IPVS: using max 43 ests per chain, 103200 per kthread [ 1233.451589][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1233.508215][T20438] lo speed is unknown, defaulting to 1000 [ 1233.571111][T11139] aquacomputer_d5next 0003:0C70:F00B.002F: hidraw0: USB HID v0.00 Device [HID 0c70:f00b] on usb-dummy_hcd.4-1/input0 [ 1234.259905][ T10] usb 5-1: USB disconnect, device number 98 [ 1234.296089][ T5923] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1234.310493][T20443] fido_id[20443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1234.329200][ T5923] usb 3-1: USB disconnect, device number 105 [ 1234.481560][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1235.267962][T20465] netlink: 'syz.3.3710': attribute type 11 has an invalid length. [ 1235.277214][T20465] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3710'. [ 1235.521564][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1236.323395][T20485] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1236.561576][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1237.095573][ T30] audit: type=1400 audit(1752017551.315:1045): avc: denied { audit_read } for pid=20493 comm="syz.6.3719" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1237.601812][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1237.935288][ T30] audit: type=1400 audit(1752017551.865:1046): avc: denied { kexec_image_load } for pid=20501 comm="syz.6.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1238.101853][ T30] audit: type=1400 audit(1752017552.335:1047): avc: denied { connect } for pid=20508 comm="syz.5.3723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1238.212494][T11139] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1238.250559][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.421685][T11139] usb 3-1: Using ep0 maxpacket: 16 [ 1238.429250][T11139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.519188][ T30] audit: type=1400 audit(1752017552.755:1048): avc: denied { bind } for pid=20514 comm="syz.6.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1238.641558][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1238.897780][T11139] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1238.918051][T11139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.941794][ T30] audit: type=1400 audit(1752017552.765:1049): avc: denied { write } for pid=20514 comm="syz.6.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1238.961464][T20519] wireguard0: entered promiscuous mode [ 1238.978141][T20519] wireguard0: entered allmulticast mode [ 1238.979459][T11139] usb 3-1: config 0 descriptor?? [ 1239.681557][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1239.885342][T11139] mcp2221 0003:04D8:00DD.0030: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1240.508485][ T917] usb 3-1: USB disconnect, device number 106 [ 1240.721583][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1240.861688][ T5923] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1241.021645][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 1241.033924][ T5923] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1241.053760][ T5923] usb 6-1: config 0 has no interface number 0 [ 1241.066001][ T5923] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1241.076350][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.085915][ T5923] usb 6-1: Product: syz [ 1241.093590][ T5923] usb 6-1: Manufacturer: syz [ 1241.098272][ T5923] usb 6-1: SerialNumber: syz [ 1241.271850][ T5923] usb 6-1: config 0 descriptor?? [ 1241.388252][ T30] audit: type=1400 audit(1752017555.635:1050): avc: denied { create } for pid=20547 comm="syz.3.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1241.408130][ C1] vkms_vblank_simulate: vblank timer overrun [ 1241.535489][ T5923] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1241.553855][T20551] lo speed is unknown, defaulting to 1000 [ 1241.568392][ T30] audit: type=1400 audit(1752017555.695:1051): avc: denied { sys_admin } for pid=20547 comm="syz.3.3735" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1241.639311][ T30] audit: type=1400 audit(1752017555.865:1052): avc: denied { associate } for pid=20556 comm="syz.3.3735" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1241.667388][T17473] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1241.687618][ T5923] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1241.709202][ T5923] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1241.761579][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1241.795369][T20559] pim6reg: entered allmulticast mode [ 1241.893087][T17473] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.945160][T17473] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1242.008775][ T30] audit: type=1400 audit(1752017556.255:1053): avc: denied { setopt } for pid=20560 comm="syz.4.3738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1242.033363][ T30] audit: type=1400 audit(1752017556.255:1054): avc: denied { getopt } for pid=20560 comm="syz.4.3738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1242.066369][T17473] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1242.206284][T20563] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1242.216677][T20563] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1242.764963][T17473] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1242.801567][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1242.835987][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1242.843560][T15288] usb 6-1: USB disconnect, device number 54 [ 1242.882551][T17473] usb 7-1: Product: syz [ 1242.892250][ T30] audit: type=1400 audit(1752017556.465:1055): avc: denied { firmware_load } for pid=20560 comm="syz.4.3738" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1242.945176][T17473] usb 7-1: Manufacturer: syz [ 1242.986097][T17473] usb 7-1: SerialNumber: syz [ 1243.206892][T15288] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1243.279861][T15288] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1243.325373][T15288] quatech2 6-1:0.51: device disconnected [ 1243.646785][T20579] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1243.841570][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1244.797750][T15288] usb 7-1: USB disconnect, device number 2 [ 1244.821729][T17473] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1244.881771][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1244.986236][ T917] libceph: connect (1)[c::]:6789 error -101 [ 1244.986831][T17473] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1244.996551][ T917] libceph: mon0 (1)[c::]:6789 connect error [ 1245.010466][T17473] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.050262][T20611] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1245.081721][T17473] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1245.182181][ T30] audit: type=1400 audit(1752017559.425:1056): avc: denied { map } for pid=20613 comm="syz.5.3752" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1245.208550][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.294875][ T917] libceph: connect (1)[c::]:6789 error -101 [ 1245.303370][ T917] libceph: mon0 (1)[c::]:6789 connect error [ 1245.391586][T17473] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.458471][ T30] audit: type=1400 audit(1752017559.425:1057): avc: denied { execute } for pid=20613 comm="syz.5.3752" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1245.460609][T13681] Bluetooth: hci1: command 0x0406 tx timeout [ 1245.520534][T17473] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1245.747429][T17473] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1245.765549][T17473] usb 5-1: Product: syz [ 1245.777622][T17473] usb 5-1: Manufacturer: syz [ 1245.791788][T20602] ceph: No mds server is up or the cluster is laggy [ 1245.892200][T17473] cdc_wdm 5-1:1.0: skipping garbage [ 1245.897422][T17473] cdc_wdm 5-1:1.0: skipping garbage [ 1245.917135][T17473] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1245.931689][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1245.973362][ T30] audit: type=1400 audit(1752017560.215:1058): avc: denied { execmod } for pid=20606 comm="syz.2.3751" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=77244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1246.075179][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3753'. [ 1246.114998][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3753'. [ 1246.141991][ T917] usb 5-1: USB disconnect, device number 99 [ 1246.308823][T20630] input: syz0 as /devices/virtual/input/input118 [ 1246.514019][ T30] audit: type=1400 audit(1752017560.755:1059): avc: denied { rename } for pid=20636 comm="syz.6.3758" name="file1" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1246.574245][T20640] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3759'. [ 1246.591992][T20640] netlink: 'syz.2.3759': attribute type 2 has an invalid length. [ 1246.961571][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1247.404959][T20647] FAULT_INJECTION: forcing a failure. [ 1247.404959][T20647] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.417710][T20647] CPU: 0 UID: 0 PID: 20647 Comm: syz.4.3760 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1247.417734][T20647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1247.417744][T20647] Call Trace: [ 1247.417751][T20647] [ 1247.417759][T20647] dump_stack_lvl+0x16c/0x1f0 [ 1247.417788][T20647] should_fail_ex+0x512/0x640 [ 1247.417811][T20647] ? fs_reclaim_acquire+0xae/0x150 [ 1247.417832][T20647] ? tomoyo_encode2+0x100/0x3e0 [ 1247.417856][T20647] should_failslab+0xc2/0x120 [ 1247.417882][T20647] __kmalloc_noprof+0xd2/0x510 [ 1247.417907][T20647] ? tomoyo_encode2+0x76/0x3e0 [ 1247.417933][T20647] tomoyo_encode2+0x100/0x3e0 [ 1247.417960][T20647] tomoyo_encode+0x29/0x50 [ 1247.417983][T20647] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1247.418016][T20647] tomoyo_path_number_perm+0x245/0x580 [ 1247.418035][T20647] ? tomoyo_path_number_perm+0x237/0x580 [ 1247.418058][T20647] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1247.418106][T20647] ? find_held_lock+0x2b/0x80 [ 1247.418129][T20647] ? hook_file_ioctl_common+0x145/0x410 [ 1247.418152][T20647] ? __fget_files+0x20e/0x3c0 [ 1247.418180][T20647] security_file_ioctl+0x9b/0x240 [ 1247.418205][T20647] __x64_sys_ioctl+0xb7/0x210 [ 1247.418227][T20647] do_syscall_64+0xcd/0x4c0 [ 1247.418253][T20647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.418271][T20647] RIP: 0033:0x7ff8ab38e929 [ 1247.418291][T20647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1247.418308][T20647] RSP: 002b:00007ff8a91d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1247.418326][T20647] RAX: ffffffffffffffda RBX: 00007ff8ab5b6160 RCX: 00007ff8ab38e929 [ 1247.418338][T20647] RDX: 0000200000000380 RSI: 0000000000004601 RDI: 0000000000000005 [ 1247.418350][T20647] RBP: 00007ff8a91d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.418361][T20647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.418372][T20647] R13: 0000000000000000 R14: 00007ff8ab5b6160 R15: 00007ffd2cec4c88 [ 1247.418396][T20647] [ 1247.418456][T20647] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1247.839321][T20650] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1248.011549][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1249.051571][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1249.345275][T20664] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3766'. [ 1249.894261][T20674] hub 8-0:1.0: USB hub found [ 1249.899491][T20674] hub 8-0:1.0: 1 port detected [ 1250.081562][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1251.121552][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1251.555474][T20688] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3773'. [ 1251.660976][T20695] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3773'. [ 1251.704624][ T30] audit: type=1400 audit(1752017565.935:1060): avc: denied { ioctl } for pid=20687 comm="syz.6.3773" path="socket:[77971]" dev="sockfs" ino=77971 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1251.882410][T20697] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1252.161568][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1252.409857][T20705] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1252.773019][T20715] 9pnet_fd: Insufficient options for proto=fd [ 1252.812865][T20707] fuse: Unknown parameter 'grou00000000000000000000' [ 1253.201547][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1254.251570][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1254.425600][T20752] binder: BINDER_SET_CONTEXT_MGR already set [ 1254.431863][T20752] binder: 20748:20752 ioctl 4018620d 200000000040 returned -16 [ 1254.439749][ T30] audit: type=1400 audit(1752017568.675:1061): avc: denied { map } for pid=20748 comm="syz.6.3790" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1254.465199][T20752] binder: 20748:20752 ioctl c0306201 200000000240 returned -11 [ 1254.485488][T20753] input: syz0 as /devices/virtual/input/input120 [ 1255.281547][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1256.331552][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1256.382414][ T30] audit: type=1400 audit(1752017570.435:1062): avc: denied { name_bind } for pid=20768 comm="syz.5.3798" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1256.602012][T20778] FAULT_INJECTION: forcing a failure. [ 1256.602012][T20778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.615132][T20778] CPU: 1 UID: 0 PID: 20778 Comm: syz.2.3799 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1256.615155][T20778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1256.615166][T20778] Call Trace: [ 1256.615173][T20778] [ 1256.615180][T20778] dump_stack_lvl+0x16c/0x1f0 [ 1256.615210][T20778] should_fail_ex+0x512/0x640 [ 1256.615237][T20778] _copy_to_user+0x32/0xd0 [ 1256.615264][T20778] simple_read_from_buffer+0xcb/0x170 [ 1256.615290][T20778] proc_fail_nth_read+0x197/0x270 [ 1256.615314][T20778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1256.615338][T20778] ? rw_verify_area+0xcf/0x680 [ 1256.615357][T20778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1256.615379][T20778] vfs_read+0x1e1/0xc60 [ 1256.615404][T20778] ? __pfx___mutex_lock+0x10/0x10 [ 1256.615430][T20778] ? __pfx_vfs_read+0x10/0x10 [ 1256.615458][T20778] ? __fget_files+0x20e/0x3c0 [ 1256.615490][T20778] ksys_read+0x12a/0x250 [ 1256.615510][T20778] ? __pfx_ksys_read+0x10/0x10 [ 1256.615539][T20778] do_syscall_64+0xcd/0x4c0 [ 1256.615566][T20778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.615584][T20778] RIP: 0033:0x7fbab9d8d33c [ 1256.615599][T20778] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1256.615616][T20778] RSP: 002b:00007fbabac53030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1256.615633][T20778] RAX: ffffffffffffffda RBX: 00007fbab9fb6160 RCX: 00007fbab9d8d33c [ 1256.615645][T20778] RDX: 000000000000000f RSI: 00007fbabac530a0 RDI: 0000000000000007 [ 1256.615656][T20778] RBP: 00007fbabac53090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.615667][T20778] R10: 0000000000001010 R11: 0000000000000246 R12: 0000000000000001 [ 1256.615678][T20778] R13: 0000000000000000 R14: 00007fbab9fb6160 R15: 00007ffec2b6c768 [ 1256.615702][T20778] [ 1256.802470][ C1] vkms_vblank_simulate: vblank timer overrun [ 1256.948297][T15288] libceph: connect (1)[c::]:6789 error -101 [ 1256.957255][T15288] libceph: mon0 (1)[c::]:6789 connect error [ 1257.123083][ T917] libceph: connect (1)[c::]:6789 error -101 [ 1257.124984][ T30] audit: type=1400 audit(1752017571.375:1063): avc: denied { call } for pid=20785 comm="syz.4.3803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1257.129210][ T917] libceph: mon0 (1)[c::]:6789 connect error [ 1257.292560][T15288] libceph: connect (1)[c::]:6789 error -101 [ 1257.298766][T15288] libceph: mon0 (1)[c::]:6789 connect error [ 1257.336277][T20775] ceph: No mds server is up or the cluster is laggy [ 1257.353272][T20792] input: syz0 as /devices/virtual/input/input121 [ 1257.361549][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1257.561762][ T917] libceph: connect (1)[c::]:6789 error -101 [ 1258.019827][T20804] can0: slcan on ptm0. [ 1258.069991][ T917] libceph: mon0 (1)[c::]:6789 connect error [ 1258.220393][T20784] ceph: No mds server is up or the cluster is laggy [ 1258.406255][T20796] can0 (unregistered): slcan off ptm0. [ 1258.411543][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1259.333275][T20817] ceph: No mds server is up or the cluster is laggy [ 1259.340288][ T917] libceph: connect (1)[c::]:6789 error -101 [ 1259.346448][ T917] libceph: mon0 (1)[c::]:6789 connect error [ 1259.441631][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1259.524486][T20827] fuse: Unknown parameter 'grou00000000000000000000' [ 1259.878207][ T30] audit: type=1400 audit(1752017574.045:1064): avc: denied { read } for pid=20823 comm="syz.5.3813" lport=35228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1260.252271][T20848] affs: No valid root block on device nullb0 [ 1260.481570][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1260.647901][T17473] libceph: connect (1)[c::]:6789 error -101 [ 1260.672565][T17473] libceph: mon0 (1)[c::]:6789 connect error [ 1260.737077][T20856] fuse: Bad value for 'fd' [ 1260.787428][T20845] ceph: No mds server is up or the cluster is laggy [ 1260.836671][T20860] tipc: Started in network mode [ 1260.842026][T20860] tipc: Node identity 4, cluster identity 4711 [ 1260.860579][T20860] tipc: Node number set to 4 [ 1260.882530][ T917] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1261.351645][ T917] usb 7-1: Using ep0 maxpacket: 32 [ 1261.389310][ T917] usb 7-1: config 0 has an invalid interface number: 233 but max is 0 [ 1261.434701][ T917] usb 7-1: config 0 has no interface number 0 [ 1261.477323][T20873] fuse: Unknown parameter 'grou00000000000000000000' [ 1261.509511][ T917] usb 7-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=d3.4f [ 1261.521540][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1261.536760][ T917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.574620][ T917] usb 7-1: Product: syz [ 1261.578808][ T917] usb 7-1: Manufacturer: syz [ 1261.602089][ T917] usb 7-1: SerialNumber: syz [ 1261.629387][ T917] usb 7-1: config 0 descriptor?? [ 1261.653634][ T917] io_ti 7-1:0.233: required endpoints missing [ 1261.720021][T20878] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 1261.733746][T20878] tipc: Enabled bearer , priority 10 [ 1261.775181][T20881] tmpfs: Bad value for 'mpol' [ 1261.861163][T20843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.871311][T20843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.561542][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1262.917730][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1262.955772][T15288] usb 7-1: USB disconnect, device number 3 [ 1263.000400][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1263.021201][T20905] fuse: Unknown parameter 'grou00000000000000000000' [ 1263.131919][T20911] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1263.281725][T17473] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1263.300414][ T57] libceph: connect (1)[c::]:6789 error -101 [ 1263.311033][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 1263.432839][T17473] usb 5-1: Using ep0 maxpacket: 16 [ 1263.601542][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1263.672588][T20896] ceph: No mds server is up or the cluster is laggy [ 1263.879706][T17473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.879902][ T57] libceph: connect (1)[c::]:6789 error -101 [ 1263.903788][T17473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.914928][T17473] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1263.927775][T17473] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1263.936869][T17473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.955789][T17473] usb 5-1: config 0 descriptor?? [ 1264.021743][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 1264.651551][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1264.832543][T17473] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1264.839793][T17473] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1264.871379][T17473] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1264.880603][T17473] microsoft 0003:045E:07DA.0031: ignoring exceeding usage max [ 1264.925462][T17473] microsoft 0003:045E:07DA.0031: unknown main item tag 0x6 [ 1264.987103][T17473] microsoft 0003:045E:07DA.0031: unknown main item tag 0x4 [ 1265.000377][T17473] microsoft 0003:045E:07DA.0031: unknown main item tag 0x5 [ 1265.017856][T17473] microsoft 0003:045E:07DA.0031: unbalanced collection at end of report description [ 1265.045082][T17473] microsoft 0003:045E:07DA.0031: parse failed [ 1265.051353][T17473] microsoft 0003:045E:07DA.0031: probe with driver microsoft failed with error -22 [ 1265.691537][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1266.731538][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1266.973315][T11139] usb 5-1: USB disconnect, device number 100 [ 1267.761544][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1268.493986][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 1268.504650][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 1268.512251][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 1268.521086][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 1268.542824][T20970] fuse: Invalid rootmode [ 1268.811535][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1268.819093][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 1268.955573][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 1269.097878][T20978] syz_tun: entered allmulticast mode [ 1269.214218][T20985] Mount JFS Failure: -22 [ 1269.218791][T20985] jfs_mount failed w/return code = -22 [ 1269.326035][T20966] ceph: No mds server is up or the cluster is laggy [ 1269.433563][T20978] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1269.471544][ T5953] IPVS: starting estimator thread 0... [ 1269.603125][T20988] IPVS: using max 76 ests per chain, 182400 per kthread [ 1269.851564][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1269.912990][T21004] netlink: 'syz.2.3865': attribute type 10 has an invalid length. [ 1269.922143][T21004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.929694][T21004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.121558][ T977] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1270.134398][T21004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.141599][T21004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.150322][T21004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.157494][T21004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.252563][T21007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3865'. [ 1270.255461][T21004] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1270.289201][T21007] bridge_slave_1: left allmulticast mode [ 1270.296130][T21007] bridge_slave_1: left promiscuous mode [ 1270.326233][ T977] usb 7-1: Using ep0 maxpacket: 32 [ 1270.342091][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.694668][T21007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.710346][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.759996][T21007] bridge_slave_0: left allmulticast mode [ 1270.766367][T21007] bridge_slave_0: left promiscuous mode [ 1270.775392][T21007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.891531][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1271.160148][ T977] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1271.203100][ T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.221927][T21007] bond0: (slave bridge0): Releasing backup interface [ 1271.255032][ T977] usb 7-1: config 0 descriptor?? [ 1271.363571][T21013] netlink: 'syz.5.3868': attribute type 11 has an invalid length. [ 1271.371552][T21013] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1271.871996][ T977] aquacomputer_d5next 0003:0C70:F0B6.0032: item fetching failed at offset 0/3 [ 1271.897500][ T977] aquacomputer_d5next 0003:0C70:F0B6.0032: probe with driver aquacomputer_d5next failed with error -22 [ 1271.921695][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1271.982630][T21018] fuse: Invalid rootmode [ 1272.135706][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1272.147655][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1272.555700][ T977] libceph: connect (1)[c::]:6789 error -101 [ 1272.583121][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 1272.950343][T21027] ceph: No mds server is up or the cluster is laggy [ 1272.964047][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1272.985395][T20976] syz_tun: left allmulticast mode [ 1272.994487][ T57] usb 7-1: USB disconnect, device number 4 [ 1273.111305][T21046] 9pnet_fd: Insufficient options for proto=fd [ 1274.001537][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1274.449970][ T30] audit: type=1400 audit(1752017588.695:1065): avc: denied { mount } for pid=21066 comm="syz.6.3887" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1274.484296][ T5953] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1275.041531][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1275.157883][ T30] audit: type=1400 audit(1752017589.045:1066): avc: denied { write } for pid=21068 comm="syz.4.3889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1275.219154][ T5953] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.286759][T21087] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 1275.325428][ T5953] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1275.462714][ T5953] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1275.504532][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1275.523185][ T5953] usb 3-1: Product: syz [ 1275.527463][ T5953] usb 3-1: Manufacturer: syz [ 1275.789972][ T5953] usb 3-1: SerialNumber: syz [ 1276.091533][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1277.121542][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1277.303535][T21116] input: syz0 as /devices/virtual/input/input123 [ 1277.578838][T17473] usb 3-1: USB disconnect, device number 107 [ 1277.798394][T21125] fuse: Unknown parameter 'group_id00000000000000000000' [ 1278.052305][ T917] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1278.059830][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880588f3000: rx timeout, send abort [ 1278.064807][ T30] audit: type=1400 audit(1752017592.315:1067): avc: denied { read } for pid=5185 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1278.093378][T17473] libceph: connect (1)[c::]:6789 error -101 [ 1278.161549][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1278.188679][T17473] libceph: mon0 (1)[c::]:6789 connect error [ 1278.211685][ T30] audit: type=1400 audit(1752017592.315:1068): avc: denied { search } for pid=5185 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1278.233381][ T30] audit: type=1400 audit(1752017592.315:1069): avc: denied { search } for pid=5185 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1278.255844][ T30] audit: type=1400 audit(1752017592.315:1070): avc: denied { add_name } for pid=5185 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1278.261516][ T917] usb 7-1: Using ep0 maxpacket: 32 [ 1278.276932][ T30] audit: type=1400 audit(1752017592.315:1071): avc: denied { create } for pid=5185 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1278.421711][ T30] audit: type=1400 audit(1752017592.315:1072): avc: denied { append open } for pid=5185 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1278.461138][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 1278.466120][ T917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.470101][T21138] input: syz0 as /devices/virtual/input/input124 [ 1278.479657][ T917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.490694][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 1278.559137][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880588f1400: rx timeout, send abort [ 1278.567792][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880588f3000: abort rx timeout. Force session deactivation [ 1278.651760][ T917] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1278.691424][ T917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.707905][ T917] usb 7-1: config 0 descriptor?? [ 1278.793222][ T30] audit: type=1400 audit(1752017592.315:1073): avc: denied { getattr } for pid=5185 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1278.886517][T21131] ceph: No mds server is up or the cluster is laggy [ 1278.917959][T21123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.953121][T21123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.067651][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880588f1400: abort rx timeout. Force session deactivation [ 1279.183095][T21123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3902'. [ 1279.203684][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1279.749035][ T72] bond0: (slave bond_slave_0): interface is now down [ 1279.760918][T21145] netlink: 'syz.3.3910': attribute type 10 has an invalid length. [ 1279.772576][ T72] bond0: (slave bond_slave_1): interface is now down [ 1279.783626][T21145] syz_tun: entered promiscuous mode [ 1279.796610][T21145] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1279.836692][ T72] bond0: (slave bond_slave_0): interface is now down [ 1279.870481][ T72] bond0: (slave bond_slave_1): interface is now down [ 1279.890466][ T72] bond0: (slave syz_tun): interface is now down [ 1279.912822][ T72] bond0: now running without any active interface! [ 1280.241547][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1280.431538][ T5953] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1280.591645][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 1280.604199][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.615360][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.625174][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1280.638575][ T5953] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1280.648314][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.659586][ T5953] usb 3-1: config 0 descriptor?? [ 1281.131121][T21172] netlink: 'syz.5.3920': attribute type 11 has an invalid length. [ 1281.142821][T21172] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3920'. [ 1281.245904][T21176] netlink: 'syz.3.3922': attribute type 11 has an invalid length. [ 1281.253867][T21176] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3922'. [ 1281.281532][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1281.286116][ T5953] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1281.327684][T21179] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1281.391634][ T5953] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1281.399000][ T5953] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1281.408131][ T5953] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max [ 1281.441755][ T5953] microsoft 0003:045E:07DA.0033: unknown main item tag 0x6 [ 1281.449146][ T5953] microsoft 0003:045E:07DA.0033: unknown main item tag 0x4 [ 1281.458198][ T5953] microsoft 0003:045E:07DA.0033: unknown main item tag 0x5 [ 1281.466892][ T5953] microsoft 0003:045E:07DA.0033: unbalanced collection at end of report description [ 1281.481503][ T5953] microsoft 0003:045E:07DA.0033: parse failed [ 1281.488082][ T5953] microsoft 0003:045E:07DA.0033: probe with driver microsoft failed with error -22 [ 1282.111918][ T57] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1282.274265][ T57] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.285465][ T57] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 1282.296672][ T57] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1282.304124][ T57] usb 6-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1282.313293][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.322913][ T57] usb 6-1: config 0 descriptor?? [ 1282.329314][T21181] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1282.336552][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1282.604245][T21196] netlink: 'syz.3.3930': attribute type 2 has an invalid length. [ 1282.612347][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3930'. [ 1282.626221][T21197] netlink: 'syz.3.3930': attribute type 2 has an invalid length. [ 1282.635507][T21197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3930'. [ 1282.767185][ T57] hid-alps 0003:044E:1215.0034: unknown main item tag 0x0 [ 1282.783330][ T57] hid-alps 0003:044E:1215.0034: unknown main item tag 0x0 [ 1282.790747][ T57] hid-alps 0003:044E:1215.0034: item fetching failed at offset 2/7 [ 1282.800223][ T57] hid-alps 0003:044E:1215.0034: parse failed [ 1282.806782][ T57] hid-alps 0003:044E:1215.0034: probe with driver hid-alps failed with error -22 [ 1283.157373][ T30] audit: type=1400 audit(1752017597.405:1074): avc: denied { watch } for pid=21207 comm="syz.3.3934" path="/273/file1" dev="tmpfs" ino=1527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1283.239884][T17473] usb 6-1: USB disconnect, device number 55 [ 1283.267247][ T30] audit: type=1400 audit(1752017597.405:1075): avc: denied { watch_sb watch_reads } for pid=21207 comm="syz.3.3934" path="/273/file1" dev="tmpfs" ino=1527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1283.320426][ T57] usb 3-1: USB disconnect, device number 108 [ 1283.361527][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1283.741641][ T57] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1283.752057][T21217] Bluetooth: MGMT ver 1.23 [ 1283.758687][T19907] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 1283.917532][ T57] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.929103][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1283.940662][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1283.950555][ T57] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1283.965504][ T57] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1283.975046][ T57] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1283.985160][ T57] usb 3-1: Manufacturer: syz [ 1284.165783][ T917] usbhid 7-1:0.0: can't add hid device: -32 [ 1284.300860][ T57] usb 3-1: config 0 descriptor?? [ 1284.308607][ T917] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1284.411547][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1284.584800][ T30] audit: type=1400 audit(1752017598.835:1076): avc: denied { bind } for pid=21229 comm="syz.3.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1284.791558][ T57] rc_core: IR keymap rc-hauppauge not found [ 1284.797507][ T57] Registered IR keymap rc-empty [ 1284.803260][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1285.097595][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1285.259926][ T57] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1285.362823][ T57] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input125 [ 1285.428335][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1285.451520][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1285.597034][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1285.632187][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1285.652395][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1285.682334][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1285.713038][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1285.731616][T21254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3948'. [ 1285.933213][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1286.013527][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1286.131641][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1286.155858][ T57] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1286.491534][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1287.143136][ T57] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1287.152272][ T57] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1287.184636][ T57] usb 3-1: USB disconnect, device number 109 [ 1287.521762][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1287.621827][ T57] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1287.697606][T21282] fuse: Bad value for 'fd' [ 1287.793169][ T57] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.807930][ T57] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1287.837802][ T57] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1287.850625][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1287.867824][ T57] usb 3-1: Product: syz [ 1287.877358][ T57] usb 3-1: Manufacturer: syz [ 1287.896452][ T57] usb 3-1: SerialNumber: syz [ 1288.472360][T21264] ================================================================== [ 1288.480443][T21264] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 1288.488590][T21264] Read of size 1 at addr ffff88807751acb0 by task syz.4.3950/21264 [ 1288.496454][T21264] [ 1288.498759][T21264] CPU: 1 UID: 0 PID: 21264 Comm: syz.4.3950 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1288.498775][T21264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1288.498781][T21264] Call Trace: [ 1288.498786][T21264] [ 1288.498790][T21264] dump_stack_lvl+0x116/0x1f0 [ 1288.498808][T21264] print_report+0xcd/0x680 [ 1288.498824][T21264] ? __virt_addr_valid+0x81/0x610 [ 1288.498838][T21264] ? __phys_addr+0xe8/0x180 [ 1288.498850][T21264] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1288.498863][T21264] kasan_report+0xe0/0x110 [ 1288.498878][T21264] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1288.498892][T21264] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1288.498905][T21264] __kasan_check_byte+0x36/0x50 [ 1288.498921][T21264] lock_acquire+0xfc/0x350 [ 1288.498937][T21264] _raw_spin_lock_irqsave+0x3a/0x60 [ 1288.498950][T21264] ? remove_wait_queue+0x25/0x180 [ 1288.498965][T21264] remove_wait_queue+0x25/0x180 [ 1288.498981][T21264] ep_remove_wait_queue+0x85/0x1d0 [ 1288.498995][T21264] ep_clear_and_put+0x186/0x440 [ 1288.499007][T21264] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 1288.499021][T21264] ep_eventpoll_release+0x3e/0x60 [ 1288.499033][T21264] __fput+0x3ff/0xb70 [ 1288.499045][T21264] task_work_run+0x14d/0x240 [ 1288.499063][T21264] ? __pfx_task_work_run+0x10/0x10 [ 1288.499082][T21264] ? __pfx___do_sys_close_range+0x10/0x10 [ 1288.499109][T21264] exit_to_user_mode_loop+0xeb/0x110 [ 1288.499123][T21264] do_syscall_64+0x3f6/0x4c0 [ 1288.499139][T21264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.499151][T21264] RIP: 0033:0x7ff8ab38e929 [ 1288.499160][T21264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1288.499171][T21264] RSP: 002b:00007ffd2cec4de8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1288.499183][T21264] RAX: 0000000000000000 RBX: 00007ff8ab5b7ba0 RCX: 00007ff8ab38e929 [ 1288.499192][T21264] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1288.499198][T21264] RBP: 00007ff8ab5b7ba0 R08: 0000000000000c30 R09: 000000152cec50df [ 1288.499205][T21264] R10: 00007ff8ab5b7ac0 R11: 0000000000000246 R12: 000000000013a763 [ 1288.499212][T21264] R13: 00007ff8ab5b6080 R14: ffffffffffffffff R15: 00007ffd2cec4f00 [ 1288.499222][T21264] [ 1288.499226][T21264] [ 1288.723408][T21264] Allocated by task 7690: [ 1288.727721][T21264] kasan_save_stack+0x33/0x60 [ 1288.732380][T21264] kasan_save_track+0x14/0x30 [ 1288.737033][T21264] __kasan_kmalloc+0xaa/0xb0 [ 1288.741611][T21264] comedi_device_postconfig+0x2cb/0xc80 [ 1288.747135][T21264] comedi_device_attach+0x3cf/0x900 [ 1288.752325][T21264] do_devconfig_ioctl+0x1a7/0x580 [ 1288.757327][T21264] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 1288.762762][T21264] __x64_sys_ioctl+0x18e/0x210 [ 1288.767501][T21264] do_syscall_64+0xcd/0x4c0 [ 1288.771992][T21264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.777873][T21264] [ 1288.780172][T21264] Freed by task 21265: [ 1288.784210][T21264] kasan_save_stack+0x33/0x60 [ 1288.788877][T21264] kasan_save_track+0x14/0x30 [ 1288.793541][T21264] kasan_save_free_info+0x3b/0x60 [ 1288.798627][T21264] __kasan_slab_free+0x51/0x70 [ 1288.803374][T21264] kfree+0x2b4/0x4d0 [ 1288.807246][T21264] comedi_device_detach+0x2a4/0x9e0 [ 1288.812426][T21264] do_devconfig_ioctl+0x46c/0x580 [ 1288.817437][T21264] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 1288.822898][T21264] __x64_sys_ioctl+0x18e/0x210 [ 1288.827665][T21264] do_syscall_64+0xcd/0x4c0 [ 1288.832161][T21264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.838033][T21264] [ 1288.840334][T21264] The buggy address belongs to the object at ffff88807751ac00 [ 1288.840334][T21264] which belongs to the cache kmalloc-256 of size 256 [ 1288.854363][T21264] The buggy address is located 176 bytes inside of [ 1288.854363][T21264] freed 256-byte region [ffff88807751ac00, ffff88807751ad00) [ 1288.868131][T21264] [ 1288.870445][T21264] The buggy address belongs to the physical page: [ 1288.876831][T21264] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7751a [ 1288.885565][T21264] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1288.894040][T21264] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1288.901558][T21264] page_type: f5(slab) [ 1288.905515][T21264] raw: 00fff00000000040 ffff88801b841b40 ffffea0000d67380 dead000000000004 [ 1288.914073][T21264] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1288.922642][T21264] head: 00fff00000000040 ffff88801b841b40 ffffea0000d67380 dead000000000004 [ 1288.931299][T21264] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1288.939946][T21264] head: 00fff00000000001 ffffea0001dd4681 00000000ffffffff 00000000ffffffff [ 1288.948588][T21264] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1288.957241][T21264] page dumped because: kasan: bad access detected [ 1288.963625][T21264] page_owner tracks the page as allocated [ 1288.969312][T21264] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5948, tgid 5948 (syz-executor), ts 71829232889, free_ts 71763524376 [ 1288.989864][T21264] post_alloc_hook+0x1c0/0x230 [ 1288.994608][T21264] get_page_from_freelist+0x1321/0x3890 [ 1289.000132][T21264] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1289.006004][T21264] alloc_pages_mpol+0x1fb/0x550 [ 1289.010838][T21264] new_slab+0x23b/0x330 [ 1289.014974][T21264] ___slab_alloc+0xd9c/0x1940 [ 1289.019641][T21264] __slab_alloc.constprop.0+0x56/0xb0 [ 1289.024989][T21264] __kmalloc_noprof+0x2f2/0x510 [ 1289.029823][T21264] security_inode_init_security+0x13f/0x390 [ 1289.035695][T21264] shmem_symlink+0x135/0x9f0 [ 1289.040275][T21264] vfs_symlink+0x400/0x680 [ 1289.044674][T21264] do_symlinkat+0x261/0x310 [ 1289.049167][T21264] __x64_sys_symlinkat+0x93/0xc0 [ 1289.054092][T21264] do_syscall_64+0xcd/0x4c0 [ 1289.058584][T21264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.064461][T21264] page last free pid 10 tgid 10 stack trace: [ 1289.070421][T21264] __free_frozen_pages+0x7fe/0x1180 [ 1289.075603][T21264] qlist_free_all+0x4d/0x120 [ 1289.080181][T21264] kasan_quarantine_reduce+0x195/0x1e0 [ 1289.085624][T21264] __kasan_slab_alloc+0x69/0x90 [ 1289.090459][T21264] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1289.096339][T21264] __alloc_skb+0x2b2/0x380 [ 1289.100742][T21264] mld_newpack.isra.0+0x18e/0xa20 [ 1289.105754][T21264] add_grhead+0x299/0x340 [ 1289.110069][T21264] add_grec+0x112a/0x1680 [ 1289.114383][T21264] mld_ifc_work+0x41f/0xca0 [ 1289.118871][T21264] process_one_work+0x9cf/0x1b70 [ 1289.123794][T21264] worker_thread+0x6c8/0xf10 [ 1289.128366][T21264] kthread+0x3c5/0x780 [ 1289.132415][T21264] ret_from_fork+0x5d7/0x6f0 [ 1289.137004][T21264] ret_from_fork_asm+0x1a/0x30 [ 1289.141756][T21264] [ 1289.144064][T21264] Memory state around the buggy address: [ 1289.149674][T21264] ffff88807751ab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1289.157729][T21264] ffff88807751ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1289.165770][T21264] >ffff88807751ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1289.173811][T21264] ^ [ 1289.179419][T21264] ffff88807751ad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1289.187463][T21264] ffff88807751ad80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1289.195504][T21264] ================================================================== [ 1289.203548][T21264] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1289.210724][T21264] CPU: 1 UID: 0 PID: 21264 Comm: syz.4.3950 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 1289.222770][T21264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1289.232808][T21264] Call Trace: [ 1289.236071][T21264] [ 1289.238988][T21264] dump_stack_lvl+0x3d/0x1f0 [ 1289.243572][T21264] panic+0x71c/0x800 [ 1289.247470][T21264] ? __pfx_panic+0x10/0x10 [ 1289.251880][T21264] ? __pfx__printk+0x10/0x10 [ 1289.256452][T21264] ? end_report+0x4c/0x170 [ 1289.260857][T21264] ? check_panic_on_warn+0x1f/0xb0 [ 1289.265970][T21264] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1289.271327][T21264] check_panic_on_warn+0xab/0xb0 [ 1289.276255][T21264] end_report+0x107/0x170 [ 1289.280574][T21264] kasan_report+0xee/0x110 [ 1289.284981][T21264] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1289.290345][T21264] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1289.295701][T21264] __kasan_check_byte+0x36/0x50 [ 1289.300539][T21264] lock_acquire+0xfc/0x350 [ 1289.304945][T21264] _raw_spin_lock_irqsave+0x3a/0x60 [ 1289.310150][T21264] ? remove_wait_queue+0x25/0x180 [ 1289.315165][T21264] remove_wait_queue+0x25/0x180 [ 1289.320008][T21264] ep_remove_wait_queue+0x85/0x1d0 [ 1289.325112][T21264] ep_clear_and_put+0x186/0x440 [ 1289.329951][T21264] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 1289.335657][T21264] ep_eventpoll_release+0x3e/0x60 [ 1289.340665][T21264] __fput+0x3ff/0xb70 [ 1289.344631][T21264] task_work_run+0x14d/0x240 [ 1289.349208][T21264] ? __pfx_task_work_run+0x10/0x10 [ 1289.354303][T21264] ? __pfx___do_sys_close_range+0x10/0x10 [ 1289.360017][T21264] exit_to_user_mode_loop+0xeb/0x110 [ 1289.365292][T21264] do_syscall_64+0x3f6/0x4c0 [ 1289.369872][T21264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.375749][T21264] RIP: 0033:0x7ff8ab38e929 [ 1289.380148][T21264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.399753][T21264] RSP: 002b:00007ffd2cec4de8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1289.408154][T21264] RAX: 0000000000000000 RBX: 00007ff8ab5b7ba0 RCX: 00007ff8ab38e929 [ 1289.416128][T21264] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1289.424084][T21264] RBP: 00007ff8ab5b7ba0 R08: 0000000000000c30 R09: 000000152cec50df [ 1289.432043][T21264] R10: 00007ff8ab5b7ac0 R11: 0000000000000246 R12: 000000000013a763 [ 1289.439997][T21264] R13: 00007ff8ab5b6080 R14: ffffffffffffffff R15: 00007ffd2cec4f00 [ 1289.447957][T21264] [ 1289.451142][T21264] Kernel Offset: disabled [ 1289.455442][T21264] Rebooting in 86400 seconds..