last executing test programs: 3m22.827239612s ago: executing program 2 (id=1947): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpgid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x1042, &(0x7f0000001300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60010100100c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e200e2210"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x401, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 3m21.647270354s ago: executing program 2 (id=1951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) (fail_nth: 2) socket(0x10, 0x5, 0xffffffff) 3m20.29839419s ago: executing program 2 (id=1958): setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x8226e281b5918560}, 0x4000011) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500ed", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800400030004000000080002"], 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000440)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = memfd_secret(0x80000) mkdirat(r7, &(0x7f0000000080)='./debug/lru_gen\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) read$FUSE(r8, &(0x7f0000004480)={0x2020}, 0x2020) pread64(r8, &(0x7f0000000600), 0x100, 0x3f00) syz_emit_ethernet(0x22, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) 3m18.428629067s ago: executing program 2 (id=1961): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x7, &(0x7f0000000280)=@framed={{}, [@generic={0x15, 0x8, 0x0, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m17.973298496s ago: executing program 2 (id=1963): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f00002d6000/0x3000)=nil, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='e1my_eprob', 0xa) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f000023a000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000349000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x60000000000000, 0x9, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000300)=@raw=[@alu={0x7, 0x1, 0xb, 0x2, 0xa}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1, 0xa, 0x10001) 3m16.309664046s ago: executing program 2 (id=1969): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x161, 0x40000867, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x49131, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) clock_adjtime(0x1, &(0x7f0000000540)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb}) fremovexattr(r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='0', 0x1) 3m1.228072938s ago: executing program 32 (id=1969): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x161, 0x40000867, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x49131, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) clock_adjtime(0x1, &(0x7f0000000540)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb}) fremovexattr(r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='0', 0x1) 57.174941885s ago: executing program 1 (id=2314): setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x8226e281b5918560}, 0x4000011) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500ed9b000000001000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800400030004000000080002"], 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = memfd_secret(0x80000) mkdirat(r7, &(0x7f0000000080)='./debug/lru_gen\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) read$FUSE(r8, &(0x7f0000004480)={0x2020}, 0x2020) pread64(r8, &(0x7f0000000600), 0x100, 0x3f00) syz_emit_ethernet(0x22, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) 56.078397267s ago: executing program 1 (id=2315): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x2a}, @dev={0xfe, 0x80, '\x00', 0x26}, 0xbf, 0x8b5, 0x7, 0xd00, 0x808, 0x8, r1}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r5, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x187540) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1f, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r7, @ANYBLOB="000000000000005303d55200010000e2129d9908cfe3c90095e2d840ae04a30af1148b7dc24156a0a3ae529e216704d53abecb2cb47c5027fe0701a49e7f5721611e8cb51488216688024cbc72654d9367b0db14c28cf12481e22ae275320aa90a567c5e7021399d42bdae2f7d34fc295eab06dd06"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f0000000040)) 54.238978231s ago: executing program 1 (id=2317): openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, 0xfffffffffffffffc) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0xfffffffffffffffc, &(0x7f0000000000)=0xffffff48) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) r6 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x4, 0x8, 0xff, 0x1}, {0x8, 0xf, 0x5, 0x3}]}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r6, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) write(r1, &(0x7f0000000300)="140a5c84945dacc8567dabcfced6bcceb0ccd71b12509da3bb2f4767e87ea79eecfff5346468f50999dea7964d9fd9abffc2487f2b2713087bf455dd2797d4b438aca1ace2e58b2d7299595f9373873bf3c6d063562756160add41d0ef3a5db78b1b5c9c644622e6b38bb4d5", 0x6c) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r9 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) 53.280763639s ago: executing program 1 (id=2320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpgid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x1042, &(0x7f0000001300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60010100100c1100fe880000000000000000000000000001fe8000000000000000000000000000aa4e200e2210"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a36019b8af9"], 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(r7, 0x0, 0x8000002) 51.9638211s ago: executing program 1 (id=2323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) getcwd(0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x224c42, 0x8) fallocate(r2, 0x0, 0x1000000, 0x3) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = syz_io_uring_setup(0xed9, &(0x7f0000000340)={0x0, 0x2090, 0x2, 0x800008, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000000240), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000500)='n', 0x1) write(r1, &(0x7f0000000240)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r6 = syz_io_uring_setup(0xf01, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="39010000", @ANYRES16=0x0, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700fe8000000000000000000000000000aa0500030029000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6b4edcacef5ed738}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x200c80c0}, 0x4804) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x40, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) 51.339378175s ago: executing program 1 (id=2326): r0 = socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x3, 0x4e, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000020010000000000000000000000000001ac1414aa000000000000000000000b20000042a432eb5cff7268021e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000c0ffffffffffffff05000000000000000000000000000000fffffffffffffeff00000000000000000000000000000000fcffffffffffffff000a000000000000feffffffff7f4000020000000000000801800000b86b6e000100000300000000"], 0xb8}}, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) fsopen(0x0, 0x0) unshare(0x40000000) syz_emit_vhci(0x0, 0xa) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@version_u}], [], 0x6b}}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x101) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x13, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) 36.040049626s ago: executing program 33 (id=2326): r0 = socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x3, 0x4e, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000020010000000000000000000000000001ac1414aa000000000000000000000b20000042a432eb5cff7268021e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000c0ffffffffffffff05000000000000000000000000000000fffffffffffffeff00000000000000000000000000000000fcffffffffffffff000a000000000000feffffffff7f4000020000000000000801800000b86b6e000100000300000000"], 0xb8}}, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) fsopen(0x0, 0x0) unshare(0x40000000) syz_emit_vhci(0x0, 0xa) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@version_u}], [], 0x6b}}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x101) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x13, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) 14.583151188s ago: executing program 4 (id=2406): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], 0x0}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x3a, 0x0, 0x0) 14.184759732s ago: executing program 4 (id=2408): r0 = socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a0320904000006000000000705"], 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000020010000000000000000000000000001ac1414aa000000000000000000000b20000042a432eb5cff7268021e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000c0ffffffffffffff05000000000000000000000000000000fffffffffffffeff00000000000000000000000000000000fcffffffffffffff000a000000000000feffffffff7f4000020000000000000801800000b86b6e000100000300000000"], 0xb8}}, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) fsopen(0x0, 0x0) unshare(0x40000000) syz_emit_vhci(0x0, 0xa) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@version_u}], [], 0x6b}}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x101) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x13, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) 13.085504281s ago: executing program 0 (id=2410): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x46400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x7, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x7ffe, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x64, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x4, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) 10.580179488s ago: executing program 3 (id=2415): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x1402, 0x1, 0x70bd23, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0) 10.06788702s ago: executing program 5 (id=2416): socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}, 0xa0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.738944354s ago: executing program 0 (id=2417): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r5, 0x5) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c90012000e00050017420a008000009200020a00408a"], 0x17) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r8, 0x8, &(0x7f0000000080)=0x7) 8.507431235s ago: executing program 5 (id=2418): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], 0x0}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x3a, 0x0, 0x0) 8.321554843s ago: executing program 5 (id=2419): socket$inet(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsmount(r4, 0x1, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000340)=@base={0x2, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x10) write$9p(0xffffffffffffffff, &(0x7f00000002c0)="d51a83", 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0xf8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 8.313525889s ago: executing program 0 (id=2420): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) getdents(r2, 0x0, 0x0) 8.282915613s ago: executing program 6 (id=2421): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e00"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x1402, 0x1, 0x70bd23, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0) 8.212356254s ago: executing program 3 (id=2422): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 7.145020666s ago: executing program 5 (id=2423): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000840)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff79a4"], 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000003f0009000000000000080000030000000400000010000180"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 6.54021364s ago: executing program 6 (id=2424): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) (fail_nth: 2) 6.371828061s ago: executing program 6 (id=2425): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) unshare(0x22020600) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)) signalfd4(r3, &(0x7f0000000140), 0x8, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80000) r4 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') preadv(r5, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/68, 0x44}], 0x1, 0x5c, 0x65a) dup(r4) 5.66726421s ago: executing program 3 (id=2426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101a02, 0x13c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_j1939(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="76b0c94c8eaad7858a", 0x9}], 0x1}}], 0x1, 0x51) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x500, 0x0, 0x1e8, 0x0, 0x418, 0x418, 0x418, 0x4, &(0x7f00000001c0), {[{{@arp={@remote, @broadcast, 0xffffff00, 0xff000000, 0x4, 0xa, {@mac, {[0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0x9ab6, 0x969, 0x9, 0x8, 0x8000, 0xfffa, 'hsr0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x324}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:dhcp_etc_t:s0\x00'}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xfd83, 0x0, 0x0, 0x0, "14b80bcaa0367abe59b51cd657891362d7d45329044a61db0caf63479691b29289bd5bbf83e80338aac7f944c770c717fd145464e4716ece8213b2a7c51eea9e"}}}, {{@arp={@local, @remote, 0xff, 0xff0000ff, 0x2, 0xc, {@mac, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x3, 0x10, 0x1000, 0x3, 0x40, 0x3, 'bridge_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x32}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2b7e5f1fd2bef3e0185d905569760dd66691933469bc93fabdb60d6e531f"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x550) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x2, {0x1, 0xf0, 0x2}, {0x0, 0x1, 0x1}, 0xff, 0xfe}, {0x0, 0x3, {0x1, 0x0, 0x4}, {0x0, 0xf0, 0x2}, 0x0, 0xfe}, {0x0, 0x3, {0x1, 0xff}, {0x0, 0xf0, 0xbbb88231f7c69642}, 0xfc, 0xfe}, {0x2, 0x4, {0x0, 0xff, 0x1}, {0x2, 0x0, 0x4}, 0x1, 0xfd}, {0x3, 0x0, {0x0, 0xff}, {0x0, 0x0, 0x1}, 0x0, 0x2}], 0xa0) 5.423783684s ago: executing program 0 (id=2427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) getcwd(0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x224c42, 0x8) fallocate(r2, 0x0, 0x1000000, 0x3) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) r4 = syz_io_uring_setup(0xed9, &(0x7f0000000340)={0x0, 0x2090, 0x2, 0x800008, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000000240), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000500)='n', 0x1) write(r1, &(0x7f0000000240)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r6 = syz_io_uring_setup(0xf01, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="39010000", @ANYRES16=0x0, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700fe8000000000000000000000000000aa0500030029000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6b4edcacef5ed738}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250200000014000700fe80000000000000000000000000000a140007000000000000000000000000000000000008000800e000000114000900ff01000000000000000000000000000108000800ac1414bb14000900fe8000000000000000000000000000aa14000700fc0000000000000000000000000000060400"], 0x9c}, 0x1, 0x0, 0x0, 0x200c80c0}, 0x4804) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x40, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) 4.916101336s ago: executing program 6 (id=2428): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200), 0x20) (fail_nth: 2) 4.869786164s ago: executing program 4 (id=2429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r1, 0x5601, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400011800a0001006c696d6974000000300002800c00024000000000000000030c00014000000000000001010c00024000000000000000050800034000000007"], 0x5cc}}, 0x0) 4.710845537s ago: executing program 3 (id=2430): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], 0x0}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x3a, 0x0, 0x0) 4.626976514s ago: executing program 5 (id=2431): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x408) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x4e, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r2, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r3 = socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000200), 0x20) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0xfb, 0x8b, 0x1, 0x2, "8a5e1dc477933a943bbd5b51c8c63df3", "4044cb9f94af700063570e1bb36f81ad63e174274e88b9c56b789fda2a4a76fff90286fe93a1a4e5fd7c0c4e7f2ed1d20894b5175256b7d899c48cd7149e2da1cc4377b753ec018f8c221e09926ac171ab8ad288b6152ee4b65e3030b6d4846f45cd468ba2f2662dd7323807a3342588659f65ba9aff"}, 0x8b, 0x0) 4.62632179s ago: executing program 4 (id=2432): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) mmap(0x0, 0x0, 0x7, 0x20010, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xa12}]}, &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000000)=0x5, 0x4) 4.531601065s ago: executing program 0 (id=2433): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000019100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000eb3e00010324f82f56b3dbdff2ad000000"], 0x14}}, 0xc4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd045ce70548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f83b6d9d00ffcfd"}, 0xd8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000190c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000019080), 0x109100, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmsg$unix(r2, &(0x7f0000000900)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000780)=""/28, 0x1c}], 0x2, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x10000) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000019180)=""/102369, 0x18fe1, 0x200) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x4, 0x7}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0xee01, 0x0) 4.2754383s ago: executing program 3 (id=2434): syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000000280)={0xdc, 0x0, 0xc}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80) 2.851802121s ago: executing program 0 (id=2435): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd70feffffffdfffffff0000000000", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400040000004fde25f3427b0800070000030000"], 0x60}}, 0x110) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x9, 0x0, 0x11}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20008010) epoll_create(0x567) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x4000, 0x102, 0x8}, 0x18) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 2.747284942s ago: executing program 6 (id=2436): r0 = socket(0x10, 0x6, 0xffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x1, 0x8001, 0x400000007}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r5, 0x0, 0x0, 0xbf30ccbe47c3e0ec, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000140)) r6 = fsmount(0xffffffffffffffff, 0x0, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getattr(r8, &(0x7f0000002980)={0x38}, 0x38, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r7, 0xffffffffffffffff}}, './file0\x00'}) 2.59012297s ago: executing program 5 (id=2437): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r1, 0x4}, 0x38) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000261dec400a1a03016a03010203010902120001f01750020904aa090094707200"], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r2 = syz_open_dev$loop(0x0, 0x401, 0x145981) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x7) r4 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x3f, &(0x7f0000000040)=0x1, 0x4) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) gettid() ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f00000000c0)) futex(&(0x7f0000000200), 0x3, 0x2, 0x0, 0x0, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES8=r5, @ANYBLOB, @ANYRES64=r7, @ANYRES64=r6, @ANYBLOB="5b41861fa3058dbeed1a25711a70c9e8442536e0d3ace8b62c8432a3bbdde52b82776528ec590e3c73f46a3e55647b4fe19dad154be158e454dbb98afc21cb09dcf8822fcdb2a42f6de8b95d2d5ba95e595a5fa63e3d462d9dae1c303f7f4cd2d5dd80a79364207caae2c1b11ac0efcfcdb8616edfbc5c679efb90881f70a962d56f3444085984290d49988194289fa115fa84b1d0622aef124e84d303b0c59ced519439745feb4d5ae475bd2ea595bb83fdc0dac863e0de151f2758527731fa719c13"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x80000000, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) 2.488785461s ago: executing program 4 (id=2438): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setresuid(0xee01, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x174, 0xe, 0xf, 0x801, 0x70bd27, 0x25dfdbfb, {0x9, 0x0, 0x5}, [@nested={0x142, 0x117, 0x0, 0x1, [@nested={0x4, 0xe3}, @generic="3e8e834388c0fbc5b02703d9ef55d9f6b19a98d05ef71629077bfecf1b577915eadae23c7e4d3d845e2709729d444f18852b79512b5af7608579a746cc52bfcf4aaff1649ca27f83e13e18f7a425f1c5b92403b7b6c397d5507cedb40c417e23dc56f2968d8302cbc8a3e5d6053ece4ed88b7578be554a04b296b64dbd678d91597ffbc8177cb259263b2718af0a21984fc2a87a1feb5847a4b4d979077d3c942451196398dccd49a841a674eb92bec6fc1c568de59f5cf9811197a93b150b146f2f300434218162652fc17bdb278d4996f4b8bfc18c", @nested={0x4, 0x28}, @typed={0x57, 0x2a, 0x0, 0x0, @binary="fc78a3cd051ff0dc8b2179046bee8c63aef5f51a652621986b9909189ff03fcc0059e66bd487967a4649a412322dcfa93d8bc9c11365a56c7a4fe414a14d704ec239b4d6f15adf29ed41e37b5d69611054d83d"}, @typed={0x8, 0x12, 0x0, 0x0, @pid=r2}]}, @typed={0x8, 0x126, 0x0, 0x0, @uid}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x104, 0x0, 0x0, @fd}]}, 0x174}, 0x1, 0x0, 0x0, 0x20040001}, 0x22040010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r5 = gettid() tkill(r5, 0x16) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup(r6) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r7, &(0x7f0000000140)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) 1.157621916s ago: executing program 4 (id=2439): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7, 0x787c256fe882f005, 0x6, 0x10000, {{0x17, 0x4, 0x0, 0x4, 0x5c, 0x64, 0x0, 0x5, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x89, 0x1, 0x4, [{@broadcast, 0x81}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x3d, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1f}]}, @ssrr={0x89, 0x13, 0xb0, [@rand_addr=0x64010102, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x28}]}, @end, @noop, @generic={0x94, 0x8, "09287e0dc65f"}, @timestamp_addr={0x44, 0xc, 0xc6, 0x1, 0x5, [{@empty, 0x400}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_delneigh={0x68, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, r2, 0x40, 0x20}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_VNI={0x8, 0x7, 0x8}, @NDA_FDB_EXT_ATTRS={0x38, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xe}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x8}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x8}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x800) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 459.068958ms ago: executing program 3 (id=2440): r0 = socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a0320904000006000000000705"], 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000020010000000000000000000000000001ac1414aa000000000000000000000b20000042a432eb5cff7268021e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000c0ffffffffffffff05000000000000000000000000000000fffffffffffffeff00000000000000000000000000000000fcffffffffffffff000a000000000000feffffffff7f4000020000000000000801800000b86b6e000100000300000000"], 0xb8}}, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) fsopen(0x0, 0x0) unshare(0x40000000) syz_emit_vhci(0x0, 0xa) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@version_u}], [], 0x6b}}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70", 0x101) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x13, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) 0s ago: executing program 6 (id=2441): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc}, 0x10}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x1c, r2, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000bb8fc9ec1c1762e01d400000000000922e8fc92d00"/38], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x40, 0x3}, 0x1}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x1, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x1, 0x8, 0xa, 0x9, 0xffd, 0x200200, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) r7 = gettid() r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r9, &(0x7f0000000240)="ea6e73d751dc79706f3499", 0xb) sendfile(r9, r8, 0x0, 0x3ffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) pipe(0x0) timer_settime(r10, 0x1, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) kernel console output (not intermixed with test programs): 88509036.340:1883): avc: denied { map } for pid=13554 comm="syz.5.2079" path="socket:[38371]" dev="sockfs" ino=38371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 807.284861][ T31] audit: type=1400 audit(1788509036.340:1884): avc: denied { read } for pid=13554 comm="syz.5.2079" path="socket:[38371]" dev="sockfs" ino=38371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 807.292053][ T5689] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 808.775050][ T985] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 808.925061][ T985] usb 5-1: Using ep0 maxpacket: 8 [ 808.936086][ T985] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 808.951859][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.961152][ T985] usb 5-1: Product: syz [ 808.961198][ T985] usb 5-1: Manufacturer: syz [ 808.961217][ T985] usb 5-1: SerialNumber: syz [ 809.130873][ T31] audit: type=1400 audit(1788509038.190:1885): avc: denied { read } for pid=13568 comm="syz.1.2080" dev="nsfs" ino=4026533386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 809.154718][ T31] audit: type=1400 audit(1788509038.220:1886): avc: denied { open } for pid=13568 comm="syz.1.2080" path="net:[4026533386]" dev="nsfs" ino=4026533386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 809.190105][ T31] audit: type=1400 audit(1788509038.250:1887): avc: denied { read } for pid=13568 comm="syz.1.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 809.218239][ T985] usb 5-1: unit 0 not found! [ 809.274198][ T7306] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 809.296412][ T985] snd_usb_variax 5-1:1.1: Line 6 Variax Workbench found [ 809.305224][ T985] snd_usb_variax 5-1:1.1: set_interface failed [ 809.312002][ T985] snd_usb_variax 5-1:1.1: Line 6 Variax Workbench now disconnected [ 809.320536][ T985] snd_usb_variax 5-1:1.1: probe with driver snd_usb_variax failed with error -71 [ 809.334047][ T985] snd_usb_variax 5-1:1.2: Line 6 Variax Workbench found [ 809.341880][ T985] snd_usb_variax 5-1:1.2: set_interface failed [ 809.348592][ T985] snd_usb_variax 5-1:1.2: Line 6 Variax Workbench now disconnected [ 809.358024][ T985] snd_usb_variax 5-1:1.2: probe with driver snd_usb_variax failed with error -71 [ 809.370517][ T985] usb 5-1: USB disconnect, device number 93 [ 809.417599][T13304] udevd[13304]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 809.434008][ T7306] usb 1-1: Using ep0 maxpacket: 8 [ 809.435490][ T7306] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 809.452725][ T7306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.464049][ T7306] usb 1-1: config 0 descriptor?? [ 809.475025][ T7306] usb 1-1: probing VID:PID(0424:012C) [ 809.484169][ T7306] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 809.491157][ T7306] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 809.491209][ T7306] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 809.491231][ T7306] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 809.491252][ T7306] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 809.515682][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.515731][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.953430][T13596] FAULT_INJECTION: forcing a failure. [ 809.953430][T13596] name failslab, interval 1, probability 0, space 0, times 0 [ 809.966635][T13596] CPU: 1 UID: 0 PID: 13596 Comm: syz.4.2089 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.966668][T13596] Tainted: [L]=SOFTLOCKUP [ 809.966675][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 809.966688][T13596] Call Trace: [ 809.966696][T13596] [ 809.966704][T13596] dump_stack_lvl+0x100/0x190 [ 809.966741][T13596] should_fail_ex.cold+0x5/0xa [ 809.966766][T13596] should_failslab+0xc2/0x120 [ 809.966788][T13596] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 809.966806][T13596] ? __alloc_skb+0x5b7/0x710 [ 809.966831][T13596] ? __alloc_skb+0x140/0x710 [ 809.966857][T13596] __alloc_skb+0x140/0x710 [ 809.966880][T13596] ? __alloc_skb+0x5b7/0x710 [ 809.966903][T13596] ? __pfx___alloc_skb+0x10/0x10 [ 809.966931][T13596] netlink_alloc_large_skb+0x69/0x150 [ 809.966960][T13596] netlink_sendmsg+0x680/0xda0 [ 809.966988][T13596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.967015][T13596] ? selinux_socket_sendmsg+0x198/0x2f0 [ 809.967045][T13596] ____sys_sendmsg+0xa4d/0xbe0 [ 809.967066][T13596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.967093][T13596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.967118][T13596] ? lock_acquire+0x1d1/0x380 [ 809.967138][T13596] ? get_pid_task+0x2a/0x250 [ 809.967163][T13596] ___sys_sendmsg+0x190/0x1e0 [ 809.967188][T13596] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.967210][T13596] ? get_pid_task+0x106/0x250 [ 809.967240][T13596] ? find_held_lock+0x2b/0x80 [ 809.967280][T13596] __sys_sendmsg+0x160/0x210 [ 809.967309][T13596] ? __pfx___sys_sendmsg+0x10/0x10 [ 809.967350][T13596] do_syscall_64+0x123/0x790 [ 809.967374][T13596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.967394][T13596] RIP: 0033:0x7f04d9d9e159 [ 809.967411][T13596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.967428][T13596] RSP: 002b:00007f04dac5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.967448][T13596] RAX: ffffffffffffffda RBX: 00007f04da025fa0 RCX: 00007f04d9d9e159 [ 809.967460][T13596] RDX: 0000000004004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 809.967471][T13596] RBP: 00007f04dac5c090 R08: 0000000000000000 R09: 0000000000000000 [ 809.967482][T13596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.967493][T13596] R13: 00007f04da026038 R14: 00007f04da025fa0 R15: 00007ffd04fa7318 [ 809.967519][T13596] [ 810.071059][T13604] FAULT_INJECTION: forcing a failure. [ 810.071059][T13604] name failslab, interval 1, probability 0, space 0, times 0 [ 810.071095][T13604] CPU: 0 UID: 0 PID: 13604 Comm: syz.1.2092 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.071124][T13604] Tainted: [L]=SOFTLOCKUP [ 810.071131][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 810.071141][T13604] Call Trace: [ 810.071148][T13604] [ 810.071155][T13604] dump_stack_lvl+0x100/0x190 [ 810.071188][T13604] should_fail_ex.cold+0x5/0xa [ 810.071214][T13604] should_failslab+0xc2/0x120 [ 810.071236][T13604] __kmalloc_noprof+0xfc/0x840 [ 810.071253][T13604] ? tomoyo_encode2+0xfb/0x3c0 [ 810.071276][T13604] tomoyo_encode2+0xfb/0x3c0 [ 810.071296][T13604] tomoyo_encode+0x29/0x50 [ 810.071312][T13604] tomoyo_realpath_from_path+0x18c/0x690 [ 810.071334][T13604] tomoyo_path_number_perm+0x23c/0x580 [ 810.071357][T13604] ? tomoyo_path_number_perm+0x22e/0x580 [ 810.071381][T13604] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 810.071413][T13604] ? __lock_acquire+0x4c5/0x1ec0 [ 810.071442][T13604] ? __fget_files+0x34/0x3d0 [ 810.071462][T13604] ? find_held_lock+0x2b/0x80 [ 810.071484][T13604] ? hook_file_ioctl_common+0x140/0x440 [ 810.071508][T13604] ? __fget_files+0x21f/0x3d0 [ 810.071531][T13604] security_file_ioctl+0xd3/0x230 [ 810.071558][T13604] __x64_sys_ioctl+0xb7/0x210 [ 810.071586][T13604] do_syscall_64+0x123/0x790 [ 810.071611][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.071629][T13604] RIP: 0033:0x7f312ef9e159 [ 810.071645][T13604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.071660][T13604] RSP: 002b:00007f312fe9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 810.071677][T13604] RAX: ffffffffffffffda RBX: 00007f312f225fa0 RCX: 00007f312ef9e159 [ 810.071689][T13604] RDX: 0000000000000000 RSI: 000000008010500d RDI: 0000000000000003 [ 810.071699][T13604] RBP: 00007f312fe9c090 R08: 0000000000000000 R09: 0000000000000000 [ 810.071708][T13604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.071718][T13604] R13: 00007f312f226038 R14: 00007f312f225fa0 R15: 00007ffee3078a98 [ 810.071739][T13604] [ 810.071756][T13604] ERROR: Out of memory at tomoyo_realpath_from_path. [ 810.129397][ T7306] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 810.316388][T13607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 810.332452][T13573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.332779][T13573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.703339][ T7306] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 810.961017][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2098'. [ 810.973195][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2098'. [ 812.336708][T13644] netlink: 'syz.5.2101': attribute type 10 has an invalid length. [ 812.347254][T13644] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.347793][T13644] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.596639][T13644] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.596799][T13644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.597111][T13644] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.597214][T13644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.695284][T13644] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 814.438961][ T7306] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 815.166257][ T7306] usb 1-1: USB disconnect, device number 77 [ 816.111477][T10077] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 816.383954][ T5595] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 816.404896][ T5689] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 816.503885][ T5712] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 816.545533][ T5595] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 816.567689][ T5689] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 816.585983][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.604145][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.616050][ T5595] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.632686][ T5595] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.649331][ T5595] usb 6-1: config 0 descriptor?? [ 816.663645][ T5689] usb 5-1: config 0 descriptor?? [ 816.664696][ T5712] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 816.665567][ T5712] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 816.665600][ T5712] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 816.665626][ T5712] usb 2-1: config 1 interface 0 has no altsetting 0 [ 816.668519][ T5712] usb 2-1: string descriptor 0 read error: -22 [ 816.668618][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.736947][ T5595] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 816.964692][T13651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.980132][T13651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.460485][ T5712] hid_parser_main: 1 callbacks suppressed [ 817.460584][ T5712] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 817.460618][ T5712] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 817.460641][ T5712] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 817.460660][ T5712] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 817.460676][ T5712] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 817.460694][ T5712] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 817.460712][ T5712] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 817.460730][ T5712] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 817.460748][ T5712] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 817.460767][ T5712] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0 [ 817.622139][ T5712] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:20D6:CB17.0004/input/input19 [ 817.747640][ T5712] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:20D6:CB17.0004/input/input20 [ 817.863227][ T5712] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:20D6:CB17.0004/input/input21 [ 817.912730][T13674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.957559][T13664] macvtap1: entered allmulticast mode [ 817.958092][T13664] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 817.958269][T13664] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 817.963045][T13664] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 819.201049][T13674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.205930][ T5712] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:20D6:CB17.0004/input/input22 [ 819.246220][T13693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.246590][T13693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.277399][T13664] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 819.397442][ T5712] hid-udraw 0003:20D6:CB17.0004: hidraw0: USB HID v0.02 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 819.942825][ T5689] usbhid 5-1:0.0: can't add hid device: -71 [ 819.942983][ T5689] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 819.981298][ T5689] usb 5-1: USB disconnect, device number 94 [ 820.066336][ T5595] usb 6-1: USB disconnect, device number 2 [ 820.193565][ T31] audit: type=1400 audit(1788509049.250:1888): avc: denied { getopt } for pid=13705 comm="syz.5.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 820.203778][ T985] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 820.325341][T13672] macvtap1: entered allmulticast mode [ 820.325373][T13672] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 820.410196][T13672] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 820.417304][T13672] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 820.418763][T13711] FAULT_INJECTION: forcing a failure. [ 820.418763][T13711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.418820][T13711] CPU: 0 UID: 0 PID: 13711 Comm: syz.4.2117 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.418849][T13711] Tainted: [L]=SOFTLOCKUP [ 820.418857][T13711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 820.418869][T13711] Call Trace: [ 820.418876][T13711] [ 820.418885][T13711] dump_stack_lvl+0x100/0x190 [ 820.418921][T13711] should_fail_ex.cold+0x5/0xa [ 820.418949][T13711] _copy_to_user+0x32/0xd0 [ 820.418981][T13711] store_msg+0x44/0x160 [ 820.419004][T13711] do_mq_timedreceive+0xb30/0x1270 [ 820.419033][T13711] ? lock_acquire+0x1d1/0x380 [ 820.419054][T13711] ? __pfx_do_mq_timedreceive+0x10/0x10 [ 820.419080][T13711] ? __mutex_unlock_slowpath+0x35d/0x930 [ 820.419112][T13711] ? __fget_files+0x21f/0x3d0 [ 820.419141][T13711] __x64_sys_mq_timedreceive+0x1cd/0x260 [ 820.419167][T13711] ? ksys_write+0x1ac/0x250 [ 820.419185][T13711] ? __pfx___x64_sys_mq_timedreceive+0x10/0x10 [ 820.419214][T13711] do_syscall_64+0x123/0x790 [ 820.419235][T13711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.419254][T13711] RIP: 0033:0x7f04d9d9e159 [ 820.419271][T13711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.419290][T13711] RSP: 002b:00007f04dac3b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 820.419310][T13711] RAX: ffffffffffffffda RBX: 00007f04da026090 RCX: 00007f04d9d9e159 [ 820.419323][T13711] RDX: 00000000000000c8 RSI: 0000200000000340 RDI: 0000000000000003 [ 820.419334][T13711] RBP: 00007f04dac3b090 R08: 0000000000000000 R09: 0000000000000000 [ 820.419345][T13711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.419356][T13711] R13: 00007f04da026128 R14: 00007f04da026090 R15: 00007ffd04fa7318 [ 820.419382][T13711] [ 820.446765][T13672] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 820.758612][T13699] batadv_slave_1: entered promiscuous mode [ 820.759195][T13699] batadv_slave_1: left promiscuous mode [ 820.854704][ T5712] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 820.873235][T13709] netlink: 'syz.5.2118': attribute type 1 has an invalid length. [ 820.886899][T13709] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2118'. [ 820.999308][ T5689] usb 2-1: USB disconnect, device number 95 [ 821.173812][T13712] netlink: 'syz.5.2118': attribute type 1 has an invalid length. [ 821.173854][T13712] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2118'. [ 821.174162][T13712] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 821.548850][T13738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2121'. [ 822.012420][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 822.012466][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 825.118775][ T985] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 825.279775][ T985] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 825.280742][ T985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32816, setting to 64 [ 825.280782][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.306013][ T985] usb 2-1: config 0 descriptor?? [ 825.692640][T13788] tipc: Disabling bearer [ 826.306436][ T985] usbhid 2-1:0.0: can't add hid device: -71 [ 826.306587][ T985] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 826.871997][ T985] usb 2-1: USB disconnect, device number 96 [ 828.617102][T13809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2137'. [ 829.319337][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2139'. [ 829.334513][T10077] block nbd16: Receive control failed (result -1) [ 829.548543][T10077] Bluetooth: hci4: unexpected event for opcode 0x2011 [ 829.607364][T13825] tipc: Enabling of bearer rejected, failed to enable media [ 830.972876][T13837] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 830.989500][ T31] audit: type=1400 audit(1788509060.050:1889): avc: denied { nlmsg_read } for pid=13834 comm="syz.3.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 833.244260][T13853] netlink: 'syz.1.2149': attribute type 1 has an invalid length. [ 833.806187][T13853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.063297][T13853] bridge1: entered promiscuous mode [ 834.170791][T13853] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 834.495819][T13867] FAULT_INJECTION: forcing a failure. [ 834.495819][T13867] name failslab, interval 1, probability 0, space 0, times 0 [ 834.509696][T13867] CPU: 0 UID: 0 PID: 13867 Comm: syz.0.2144 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.509736][T13867] Tainted: [L]=SOFTLOCKUP [ 834.509745][T13867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 834.509759][T13867] Call Trace: [ 834.509770][T13867] [ 834.509781][T13867] dump_stack_lvl+0x100/0x190 [ 834.509827][T13867] should_fail_ex.cold+0x5/0xa [ 834.509860][T13867] should_failslab+0xc2/0x120 [ 834.509888][T13867] __kmalloc_cache_noprof+0x91/0x6d0 [ 834.509922][T13867] ? __request_module+0x2b7/0x6a0 [ 834.509954][T13867] __request_module+0x2b7/0x6a0 [ 834.509982][T13867] ? __pfx___request_module+0x10/0x10 [ 834.510010][T13867] ? __pfx___mutex_lock+0x10/0x10 [ 834.510036][T13867] ? lock_acquire+0x1d1/0x380 [ 834.510075][T13867] bpf_fill_super+0x742/0x960 [ 834.510104][T13867] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 834.510141][T13867] ? __pfx_bpf_fill_super+0x10/0x10 [ 834.510175][T13867] ? rcu_is_watching+0x13/0xc0 [ 834.510205][T13867] ? cap_capable+0x107/0x430 [ 834.510237][T13867] ? __pfx_bpf_fill_super+0x10/0x10 [ 834.510265][T13867] get_tree_nodev+0xdd/0x190 [ 834.510286][T13867] vfs_get_tree+0x92/0x320 [ 834.510316][T13867] vfs_cmd_create+0xd7/0x2a0 [ 834.510349][T13867] __do_sys_fsconfig+0x55a/0xcb0 [ 834.510392][T13867] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 834.510438][T13867] do_syscall_64+0x123/0x790 [ 834.510464][T13867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.510487][T13867] RIP: 0033:0x7f6bf1f9e159 [ 834.510506][T13867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.510527][T13867] RSP: 002b:00007f6bf2f48028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 834.510549][T13867] RAX: ffffffffffffffda RBX: 00007f6bf2225fa0 RCX: 00007f6bf1f9e159 [ 834.510562][T13867] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 834.510575][T13867] RBP: 00007f6bf2035024 R08: 0000000000000000 R09: 0000000000000000 [ 834.510586][T13867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.510598][T13867] R13: 00007f6bf2226038 R14: 00007f6bf2225fa0 R15: 00007fff5f7d15d8 [ 834.510627][T13867] [ 834.818297][ T31] audit: type=1400 audit(1788509063.880:1890): avc: denied { mount } for pid=13866 comm="syz.0.2144" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 834.972150][ T31] audit: type=1400 audit(1788509064.030:1891): avc: denied { ioctl } for pid=13866 comm="syz.0.2144" path="socket:[39066]" dev="sockfs" ino=39066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 835.119662][T10259] IPVS: starting estimator thread 0... [ 835.129397][T13868] IPVS: length: 74 != 199675292344 [ 835.214249][T13880] IPVS: using max 74 ests per chain, 177600 per kthread [ 840.401990][T13915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2161'. [ 840.708105][T13922] FAULT_INJECTION: forcing a failure. [ 840.708105][T13922] name failslab, interval 1, probability 0, space 0, times 0 [ 840.725467][T13922] CPU: 0 UID: 0 PID: 13922 Comm: syz.1.2156 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.725501][T13922] Tainted: [L]=SOFTLOCKUP [ 840.725508][T13922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 840.725518][T13922] Call Trace: [ 840.725533][T13922] [ 840.725542][T13922] dump_stack_lvl+0x100/0x190 [ 840.725580][T13922] should_fail_ex.cold+0x5/0xa [ 840.725608][T13922] should_failslab+0xc2/0x120 [ 840.725633][T13922] __kmalloc_cache_noprof+0x91/0x6d0 [ 840.725659][T13922] ? __might_fault+0xc5/0x140 [ 840.725686][T13922] ? alloc_pipe_info+0x10e/0x590 [ 840.725713][T13922] alloc_pipe_info+0x10e/0x590 [ 840.725736][T13922] splice_direct_to_actor+0x78f/0xa30 [ 840.725762][T13922] ? __lock_acquire+0x4c5/0x1ec0 [ 840.725781][T13922] ? __pfx_direct_splice_actor+0x10/0x10 [ 840.725803][T13922] ? lock_acquire+0x1d1/0x380 [ 840.725820][T13922] ? get_pid_task+0x2a/0x250 [ 840.725844][T13922] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 840.725868][T13922] ? lock_acquire+0x1d1/0x380 [ 840.725890][T13922] do_splice_direct+0x174/0x240 [ 840.725914][T13922] ? __pfx_do_splice_direct+0x10/0x10 [ 840.725933][T13922] ? avc_policy_seqno+0x9/0x20 [ 840.725957][T13922] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 840.725984][T13922] ? rw_verify_area+0xce/0x6d0 [ 840.726008][T13922] do_sendfile+0xadc/0xe20 [ 840.726037][T13922] ? __pfx_do_sendfile+0x10/0x10 [ 840.726061][T13922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 840.726085][T13922] ? __fget_files+0x21f/0x3d0 [ 840.726113][T13922] __x64_sys_sendfile64+0x1d8/0x220 [ 840.726136][T13922] ? ksys_write+0x1ac/0x250 [ 840.726153][T13922] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 840.726183][T13922] do_syscall_64+0x123/0x790 [ 840.726207][T13922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.726227][T13922] RIP: 0033:0x7f312ef9e159 [ 840.726245][T13922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.726263][T13922] RSP: 002b:00007f312fe9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 840.726284][T13922] RAX: ffffffffffffffda RBX: 00007f312f225fa0 RCX: 00007f312ef9e159 [ 840.726297][T13922] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 840.726311][T13922] RBP: 00007f312fe9c090 R08: 0000000000000000 R09: 0000000000000000 [ 840.726323][T13922] R10: 0000000000001007 R11: 0000000000000246 R12: 0000000000000001 [ 840.726334][T13922] R13: 00007f312f226038 R14: 00007f312f225fa0 R15: 00007ffee3078a98 [ 840.726360][T13922] [ 840.748067][ T31] audit: type=1400 audit(1788509069.810:1892): avc: denied { write } for pid=13923 comm="syz.5.2163" name="functions" dev="configfs" ino=36357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 840.752117][T13924] FAULT_INJECTION: forcing a failure. [ 840.752117][T13924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.752153][T13924] CPU: 1 UID: 0 PID: 13924 Comm: syz.5.2163 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.752176][T13924] Tainted: [L]=SOFTLOCKUP [ 840.752183][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 840.752193][T13924] Call Trace: [ 840.752200][T13924] [ 840.752207][T13924] dump_stack_lvl+0x100/0x190 [ 840.752239][T13924] should_fail_ex.cold+0x5/0xa [ 840.752265][T13924] _copy_from_iter+0x1f4/0x1690 [ 840.752297][T13924] ? __pfx__copy_from_iter+0x10/0x10 [ 840.752321][T13924] ? kasan_save_track+0x14/0x30 [ 840.752340][T13924] ? __kasan_kmalloc+0xaa/0xb0 [ 840.752358][T13924] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 840.752385][T13924] ? configfs_write_iter+0x388/0x4e0 [ 840.752413][T13924] configfs_write_iter+0xb3/0x4e0 [ 840.752439][T13924] vfs_write+0x6af/0x1050 [ 840.752465][T13924] ? __pfx_configfs_write_iter+0x10/0x10 [ 840.752489][T13924] ? __pfx_vfs_write+0x10/0x10 [ 840.752512][T13924] ? find_held_lock+0x2b/0x80 [ 840.752551][T13924] ksys_write+0x12a/0x250 [ 840.752566][T13924] ? __pfx_ksys_write+0x10/0x10 [ 840.752589][T13924] do_syscall_64+0x123/0x790 [ 840.752612][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.752630][T13924] RIP: 0033:0x7fc52739e159 [ 840.752644][T13924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.752660][T13924] RSP: 002b:00007fc5255f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 840.752679][T13924] RAX: ffffffffffffffda RBX: 00007fc527625fa0 RCX: 00007fc52739e159 [ 840.752690][T13924] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000006 [ 840.752700][T13924] RBP: 00007fc5255f6090 R08: 0000000000000000 R09: 0000000000000000 [ 840.752710][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.752720][T13924] R13: 00007fc527626038 R14: 00007fc527625fa0 R15: 00007ffe8e2f6878 [ 840.752743][T13924] [ 841.305516][T13930] syzkaller0: entered promiscuous mode [ 841.311258][T13930] syzkaller0: entered allmulticast mode [ 841.322817][T13930] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 841.442017][T13938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2165'. [ 841.467422][T13938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2165'. [ 841.983976][ T5689] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 842.186670][T13928] syzkaller0: entered promiscuous mode [ 842.186871][T13928] syzkaller0: entered allmulticast mode [ 844.252500][T13937] tipc: Enabled bearer , priority 0 [ 844.272153][T13926] tipc: Resetting bearer [ 844.438497][T13926] tipc: Disabling bearer [ 844.632988][ T31] audit: type=1326 audit(1788509073.690:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.4.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 844.633213][ T31] audit: type=1326 audit(1788509073.690:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.4.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 844.637163][ T31] audit: type=1326 audit(1788509073.700:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.4.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 844.637350][ T31] audit: type=1326 audit(1788509073.700:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.4.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 844.637497][ T31] audit: type=1326 audit(1788509073.700:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.4.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 844.637833][ T31] audit: type=1326 audit(1788509073.700:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.4.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 844.638045][ T31] audit: type=1326 audit(1788509073.700:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.4.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 844.638477][ T31] audit: type=1326 audit(1788509073.700:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.4.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 844.638637][ T31] audit: type=1326 audit(1788509073.700:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.4.2172" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 845.344349][ T5712] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 845.557349][ T5712] usb 5-1: Using ep0 maxpacket: 8 [ 845.579816][ T5712] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 845.680039][ T5712] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.680147][ T5712] usb 5-1: config 0 interface 0 has no altsetting 0 [ 845.680383][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.795419][ T5704] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 845.901248][ T5712] usb 5-1: config 0 descriptor?? [ 845.969319][ T5704] usb 2-1: Using ep0 maxpacket: 32 [ 845.988986][ T5704] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 846.018718][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.029982][ T5704] usb 2-1: config 0 has no interfaces? [ 846.101784][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 846.101871][ T5704] usb 2-1: Product: syz [ 846.120937][ T5704] usb 2-1: Manufacturer: syz [ 846.122688][ T5704] usb 2-1: SerialNumber: syz [ 846.514307][ T5704] usb 2-1: config 0 descriptor?? [ 846.729981][T13982] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 846.733892][T13982] CIFS: Attempting to mount //127.0.0.1/share [ 846.834394][T13982] CIFS: VFS: Error connecting to socket. Aborting operation. [ 846.838228][T13982] CIFS: VFS: cifs_mount failed w/return code = -101 [ 846.841207][T13980] CIFS: Attempting to mount //127.0.0.1/share [ 846.845636][T13980] CIFS: VFS: Error connecting to socket. Aborting operation. [ 846.845996][T13980] CIFS: VFS: cifs_mount failed w/return code = -101 [ 848.002664][T13975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.035111][T13975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.073202][ T5712] usbhid 5-1:0.0: can't add hid device: -71 [ 848.073330][ T5712] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 848.098377][ T5712] usb 5-1: USB disconnect, device number 95 [ 848.131724][T13987] syzkaller0: entered promiscuous mode [ 848.146309][T13987] syzkaller0: entered allmulticast mode [ 848.155670][T13987] FAULT_INJECTION: forcing a failure. [ 848.155670][T13987] name failslab, interval 1, probability 0, space 0, times 0 [ 848.168979][T13987] CPU: 1 UID: 0 PID: 13987 Comm: syz.5.2178 Tainted: G L syzkaller #0 PREEMPT(full) [ 848.169014][T13987] Tainted: [L]=SOFTLOCKUP [ 848.169022][T13987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 848.169034][T13987] Call Trace: [ 848.169042][T13987] [ 848.169050][T13987] dump_stack_lvl+0x100/0x190 [ 848.169088][T13987] should_fail_ex.cold+0x5/0xa [ 848.169115][T13987] should_failslab+0xc2/0x120 [ 848.169141][T13987] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 848.169163][T13987] ? __alloc_skb+0x5b7/0x710 [ 848.169193][T13987] ? __alloc_skb+0x140/0x710 [ 848.169223][T13987] __alloc_skb+0x140/0x710 [ 848.169248][T13987] ? __alloc_skb+0x5b7/0x710 [ 848.169290][T13987] ? __pfx___alloc_skb+0x10/0x10 [ 848.169314][T13987] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 848.169342][T13987] ? sock_has_perm+0x25a/0x2f0 [ 848.169366][T13987] ? __pfx_sock_has_perm+0x10/0x10 [ 848.169392][T13987] netlink_alloc_large_skb+0x69/0x150 [ 848.169424][T13987] netlink_sendmsg+0x680/0xda0 [ 848.169457][T13987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.169483][T13987] ? selinux_socket_sendmsg+0x198/0x2f0 [ 848.169511][T13987] ____sys_sendmsg+0xa4d/0xbe0 [ 848.169532][T13987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.169559][T13987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 848.169587][T13987] ? lock_acquire+0x1d1/0x380 [ 848.169607][T13987] ? get_pid_task+0x2a/0x250 [ 848.169635][T13987] ___sys_sendmsg+0x190/0x1e0 [ 848.169661][T13987] ? __pfx____sys_sendmsg+0x10/0x10 [ 848.169685][T13987] ? get_pid_task+0x106/0x250 [ 848.169713][T13987] ? find_held_lock+0x2b/0x80 [ 848.169748][T13987] __sys_sendmsg+0x160/0x210 [ 848.169777][T13987] ? __pfx___sys_sendmsg+0x10/0x10 [ 848.169818][T13987] do_syscall_64+0x123/0x790 [ 848.169844][T13987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.169865][T13987] RIP: 0033:0x7fc52739e159 [ 848.169883][T13987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.169902][T13987] RSP: 002b:00007fc5255f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.169924][T13987] RAX: ffffffffffffffda RBX: 00007fc527625fa0 RCX: 00007fc52739e159 [ 848.169937][T13987] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 848.169948][T13987] RBP: 00007fc5255f6090 R08: 0000000000000000 R09: 0000000000000000 [ 848.169960][T13987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.169971][T13987] R13: 00007fc527626038 R14: 00007fc527625fa0 R15: 00007ffe8e2f6878 [ 848.169994][T13987] [ 850.779959][ T5712] usb 2-1: USB disconnect, device number 97 [ 850.839030][T13997] syzkaller0: entered promiscuous mode [ 850.839079][T13997] syzkaller0: entered allmulticast mode [ 852.348678][T14028] uprobe: syz.0.2190:14028 failed to unregister, leaking uprobe [ 856.445431][T14059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2195'. [ 856.956352][T14061] fuse: Unknown parameter '000000000000000000030x0000000000000007' [ 859.017384][T14080] netlink: 'syz.1.2202': attribute type 1 has an invalid length. [ 859.165739][T14080] bond3: entered promiscuous mode [ 859.177067][ T5712] libceph: connect (1)0.0.0.0:6789 error -22 [ 859.184293][T14080] 8021q: adding VLAN 0 to HW filter on device bond3 [ 859.191654][ T5712] libceph: mon0 (1)0.0.0.0:6789 connect error [ 859.233839][ T5703] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 859.585178][ T985] libceph: connect (1)0.0.0.0:6789 error -22 [ 859.585371][ T985] libceph: mon0 (1)0.0.0.0:6789 connect error [ 859.597139][ T5703] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 859.605417][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.605469][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.640584][ T5703] usb 5-1: config 0 descriptor?? [ 859.677798][T14080] syzkaller1: entered promiscuous mode [ 859.714522][T14080] syzkaller1: entered allmulticast mode [ 859.833284][T14082] ceph: No mds server is up or the cluster is laggy [ 860.113847][T14068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.114644][T14068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.302246][T14087] bond3: (slave bridge2): making interface the new active one [ 860.302326][T14087] bridge2: entered promiscuous mode [ 860.320510][T14087] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 860.412343][T14112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2206'. [ 860.696180][ T5712] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 860.844439][ T5712] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 860.855369][ T5712] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 860.855409][ T5712] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 860.855444][ T5712] usb 6-1: config 4 has no interface number 0 [ 860.855480][ T5712] usb 6-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 860.895720][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.895755][ T5712] usb 6-1: Product: syz [ 860.895789][ T5712] usb 6-1: Manufacturer: syz [ 860.895808][ T5712] usb 6-1: SerialNumber: syz [ 861.034622][ T5704] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 861.172858][T13966] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 862.548361][ T5704] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 862.560108][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.560179][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.560230][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.600522][ T5704] usb 2-1: config 0 descriptor?? [ 862.682070][ T5712] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 862.768192][T14127] lo speed is unknown, defaulting to 1000 [ 862.807714][ T5703] usbhid 5-1:0.0: can't add hid device: -71 [ 862.807849][ T5703] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 862.838338][ T5712] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 862.839128][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 862.839144][ T31] audit: type=1400 audit(1788509091.900:1927): avc: denied { firmware_load } for pid=5712 comm="kworker/1:5" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 862.880623][ T5712] dib0700: firmware download failed at 7 with -22 [ 862.908660][ T5712] usb 6-1: USB disconnect, device number 4 [ 862.925620][ T5703] usb 5-1: USB disconnect, device number 96 [ 863.092196][T14115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.092557][T14115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.434958][ T5703] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 863.650148][ T5703] usb 5-1: not running at top speed; connect to a high speed hub [ 863.659853][ T5703] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 863.769775][ T5703] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.780958][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.223290][ T5703] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 864.319023][ T5704] usbhid 2-1:0.0: can't add hid device: -71 [ 864.319163][ T5704] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 864.680474][ T5704] usb 2-1: USB disconnect, device number 98 [ 864.722553][ T31] audit: type=1400 audit(1788509093.780:1928): avc: denied { write } for pid=14117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.907399][T14133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 864.933282][ T31] audit: type=1400 audit(1788509093.990:1929): avc: denied { write } for pid=14144 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.193879][T14148] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 865.290291][T14146] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 865.729039][ T5703] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 865.729420][ T5703] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 865.729464][ T5703] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 865.730136][ T5703] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 865.899632][ T5703] usb 5-1: USB disconnect, device number 97 [ 866.634267][T14179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2219'. [ 867.035918][ T31] audit: type=1400 audit(1788509096.090:1930): avc: denied { write } for pid=14153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.233243][ T31] audit: type=1400 audit(1788509096.290:1931): avc: denied { write } for pid=14186 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.361906][T13966] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 868.502524][ T31] audit: type=1400 audit(1788509097.560:1932): avc: denied { connect } for pid=14183 comm="syz.4.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 868.726382][ T5703] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 868.906141][ T5703] usb 6-1: Using ep0 maxpacket: 32 [ 868.912114][ T5703] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 868.924617][ T5703] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 868.924644][ T5703] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 868.924665][ T5703] usb 6-1: config 0 has no interface number 0 [ 868.924682][ T5703] usb 6-1: too many endpoints for config 0 interface 51 altsetting 255: 255, using maximum allowed: 30 [ 868.924705][ T5703] usb 6-1: config 0 interface 51 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 868.924724][ T5703] usb 6-1: config 0 interface 51 has no altsetting 0 [ 868.985193][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.985214][ T5703] usb 6-1: Product: syz [ 868.985223][ T5703] usb 6-1: Manufacturer: syz [ 868.985234][ T5703] usb 6-1: SerialNumber: syz [ 869.017781][ T5703] usb 6-1: config 0 descriptor?? [ 869.213966][ T31] audit: type=1400 audit(1788509098.280:1933): avc: denied { mounton } for pid=14207 comm="syz.1.2226" path="/382/file0" dev="tmpfs" ino=2083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 869.241548][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 869.251333][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 869.270447][ T5703] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 869.279971][ T5703] usb 6-1: qt2_attach - failed to power on unit: -71 [ 869.287486][ T5703] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 869.299686][ T5703] usb 6-1: USB disconnect, device number 5 [ 869.313349][ T31] audit: type=1400 audit(1788509098.370:1934): avc: denied { map } for pid=14207 comm="syz.1.2226" path="/382/file0" dev="tmpfs" ino=2083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 869.537694][ T31] audit: type=1400 audit(1788509098.600:1935): avc: denied { ioctl } for pid=14207 comm="syz.1.2226" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 870.884787][ T5689] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 870.956654][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.956737][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.045684][ T5689] usb 6-1: Using ep0 maxpacket: 8 [ 871.057339][ T5689] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 871.119133][T14238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2233'. [ 871.391222][ T5689] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.391266][ T5689] usb 6-1: config 0 interface 0 has no altsetting 0 [ 871.391300][ T5689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.426187][ T5689] usb 6-1: config 0 descriptor?? [ 871.949541][T14250] vlan2: entered allmulticast mode [ 871.949646][T14250] bond0: entered allmulticast mode [ 871.949700][T14250] bridge1: entered allmulticast mode [ 872.684850][T14255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.685370][T14255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.793301][ T5689] usbhid 6-1:0.0: can't add hid device: -71 [ 872.793423][ T5689] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 872.854683][ T5689] usb 6-1: USB disconnect, device number 6 [ 873.656538][ T31] audit: type=1400 audit(1788509102.700:1936): avc: denied { create } for pid=14260 comm="syz.4.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 873.813924][ T31] audit: type=1400 audit(1788509102.870:1937): avc: denied { write } for pid=14260 comm="syz.4.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 876.357702][ T5689] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 876.556847][T14300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2247'. [ 876.848550][ T5689] usb 6-1: not running at top speed; connect to a high speed hub [ 876.848605][ T5689] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 876.869721][ T5689] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.869787][ T5689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.907223][ T5689] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 877.378452][T14291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 877.752419][T14311] syzkaller0: entered promiscuous mode [ 877.752475][T14311] syzkaller0: entered allmulticast mode [ 877.797693][ T5689] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 877.798044][ T5689] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 877.798084][ T5689] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 877.798755][ T5689] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71 [ 877.858592][ T5689] usb 6-1: USB disconnect, device number 7 [ 877.980235][T14318] syzkaller0: entered promiscuous mode [ 877.980266][T14318] syzkaller0: entered allmulticast mode [ 878.184301][T14322] FAULT_INJECTION: forcing a failure. [ 878.184301][T14322] name failslab, interval 1, probability 0, space 0, times 0 [ 878.197116][T14322] CPU: 1 UID: 0 PID: 14322 Comm: syz.1.2252 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.197139][T14322] Tainted: [L]=SOFTLOCKUP [ 878.197143][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 878.197151][T14322] Call Trace: [ 878.197157][T14322] [ 878.197163][T14322] dump_stack_lvl+0x100/0x190 [ 878.197190][T14322] should_fail_ex.cold+0x5/0xa [ 878.197208][T14322] should_failslab+0xc2/0x120 [ 878.197225][T14322] __kmalloc_noprof+0xfc/0x840 [ 878.197236][T14322] ? rcu_is_watching+0x13/0xc0 [ 878.197253][T14322] ? tomoyo_realpath_from_path+0xb6/0x690 [ 878.197270][T14322] tomoyo_realpath_from_path+0xb6/0x690 [ 878.197285][T14322] tomoyo_path_number_perm+0x23c/0x580 [ 878.197303][T14322] ? tomoyo_path_number_perm+0x22e/0x580 [ 878.197319][T14322] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 878.197341][T14322] ? __lock_acquire+0x4c5/0x1ec0 [ 878.197358][T14322] ? __fget_files+0x34/0x3d0 [ 878.197373][T14322] ? find_held_lock+0x2b/0x80 [ 878.197387][T14322] ? hook_file_ioctl_common+0x140/0x440 [ 878.197404][T14322] ? __fget_files+0x21f/0x3d0 [ 878.197419][T14322] security_file_ioctl+0xd3/0x230 [ 878.197438][T14322] __x64_sys_ioctl+0xb7/0x210 [ 878.197459][T14322] do_syscall_64+0x123/0x790 [ 878.197476][T14322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.197489][T14322] RIP: 0033:0x7f312ef9e159 [ 878.197500][T14322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.197512][T14322] RSP: 002b:00007f312fe9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.197524][T14322] RAX: ffffffffffffffda RBX: 00007f312f225fa0 RCX: 00007f312ef9e159 [ 878.197532][T14322] RDX: 0000200000000380 RSI: 00000000c0185500 RDI: 0000000000000003 [ 878.197539][T14322] RBP: 00007f312fe9c090 R08: 0000000000000000 R09: 0000000000000000 [ 878.197546][T14322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.197554][T14322] R13: 00007f312f226038 R14: 00007f312f225fa0 R15: 00007ffee3078a98 [ 878.197578][T14322] [ 878.197588][T14322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 879.325103][ T31] audit: type=1400 audit(1788509108.390:1938): avc: denied { accept } for pid=14334 comm="syz.1.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 879.881728][T14341] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2260'. [ 880.719479][T14355] batadv_slave_1: entered promiscuous mode [ 881.330079][T14350] batadv_slave_1: left promiscuous mode [ 882.264187][ T30] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 882.544817][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 882.660068][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 882.680407][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.680439][ T30] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 882.680484][ T30] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 882.680512][ T30] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 882.680536][ T30] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 882.680553][ T30] usb 6-1: config 1 interface 1 has no altsetting 0 [ 882.761138][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.761187][ T30] usb 6-1: Product: syz [ 882.761218][ T30] usb 6-1: Manufacturer: syz [ 882.761238][ T30] usb 6-1: SerialNumber: syz [ 883.128924][ T30] usb 6-1: selecting invalid altsetting 0 [ 883.281423][ T4917] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 883.292557][ T4917] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 883.301044][ T4917] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 883.311866][ T4917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 883.319738][ T4917] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 883.331997][ T30] usb 6-1: 1:1: cannot get freq (v2/v3): err -32 [ 883.383787][ T5595] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 883.549673][ T5595] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 883.554133][ T5595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.554174][ T5595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.571611][ T5595] usb 2-1: config 0 descriptor?? [ 883.757195][T14303] tipc: Resetting bearer [ 883.992508][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2263'. [ 884.290119][T14303] tipc: Disabling bearer [ 884.351964][T14337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.352405][T14337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.595479][ T5595] usbhid 2-1:0.0: can't add hid device: -71 [ 884.595610][ T5595] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 884.615050][ T5595] usb 2-1: USB disconnect, device number 99 [ 884.628072][ T5696] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 884.728783][ T30] usb 6-1: USB disconnect, device number 8 [ 884.786181][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 884.786976][ T5696] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 884.791908][ T5696] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 884.791931][ T5696] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.791949][ T5696] usb 5-1: config 0 has no interface number 0 [ 884.811699][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.811729][ T5696] usb 5-1: Product: syz [ 884.811745][ T5696] usb 5-1: Manufacturer: syz [ 884.811760][ T5696] usb 5-1: SerialNumber: syz [ 884.829171][ T5696] usb 5-1: config 0 descriptor?? [ 884.837491][ T5696] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 885.069477][ T5696] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 885.069664][ T5696] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 885.112314][T14368] lo speed is unknown, defaulting to 1000 [ 885.433855][T13966] Bluetooth: hci1: command tx timeout [ 886.327289][ T30] usb 5-1: USB disconnect, device number 98 [ 887.484200][T12486] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 887.514693][T13966] Bluetooth: hci1: command tx timeout [ 887.634010][T12486] usb 5-1: Using ep0 maxpacket: 32 [ 887.640533][T12486] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 887.653366][T12486] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 887.662044][T12486] usb 5-1: config 0 has no interface number 0 [ 887.671951][T12486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.681371][T12486] usb 5-1: Product: syz [ 887.681393][T12486] usb 5-1: Manufacturer: syz [ 887.681409][T12486] usb 5-1: SerialNumber: syz [ 887.700934][T12486] usb 5-1: config 0 descriptor?? [ 887.710164][T12486] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 887.905329][T14368] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.917085][T14368] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.936391][T14368] bridge_slave_0: entered allmulticast mode [ 887.950233][T14368] bridge_slave_0: entered promiscuous mode [ 887.982549][T14368] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.992141][T14368] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.992443][T14368] bridge_slave_1: entered allmulticast mode [ 888.008588][T14368] bridge_slave_1: entered promiscuous mode [ 888.015724][T12486] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 888.041310][T12486] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 888.082971][T14368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.097635][T14368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.178425][T14368] team0: Port device team_slave_0 added [ 888.187760][T14368] team0: Port device team_slave_1 added [ 888.203185][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 14 [ 888.256575][T14368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.265849][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.265929][T14368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.305567][T14368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.305597][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.305645][T14368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.631337][T14368] hsr_slave_0: entered promiscuous mode [ 888.699206][T14368] hsr_slave_1: entered promiscuous mode [ 888.732205][T14368] debugfs: 'hsr0' already exists in 'hsr' [ 888.749328][T14368] Cannot create hsr debugfs directory [ 889.280679][T14400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2273'. [ 889.598114][T13966] Bluetooth: hci1: command tx timeout [ 890.343000][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 890.352588][ T5712] usb 5-1: USB disconnect, device number 99 [ 890.387130][ T5712] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 890.867155][ T5712] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 890.867800][ T5712] quatech2 5-1:0.51: device disconnected [ 891.673689][T13966] Bluetooth: hci1: command tx timeout [ 896.857297][T14368] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 896.857342][T14368] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 896.863742][T14368] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.910545][T14462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2285'. [ 898.491823][ T5712] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 898.518322][T14368] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 898.534427][T14368] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 898.548111][T14368] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.363489][ T5712] usb 6-1: not running at top speed; connect to a high speed hub [ 899.364413][ T5712] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 899.882853][ T5712] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.882926][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.071309][ T5712] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 900.190057][T14463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 900.493337][T14368] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 900.493428][T14368] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 900.498358][T14368] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.593803][ T5712] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 900.596356][ T5712] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 900.596400][ T5712] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 900.659767][ T5712] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71 [ 900.693959][ T5712] usb 6-1: USB disconnect, device number 9 [ 901.046480][T14368] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 901.046551][T14368] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 901.046592][T14368] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.635771][T14494] batadv_slave_1: entered promiscuous mode [ 901.747981][T14490] batadv_slave_1: left promiscuous mode [ 901.814025][ T5712] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 902.027357][ T5712] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 902.044108][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.044173][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.421059][ T5712] usb 5-1: config 0 descriptor?? [ 902.750646][T14483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.750915][T14483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.845180][T14504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2296'. [ 903.526398][T14368] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 903.671111][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 903.680169][T14368] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 903.815021][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 903.827206][T14368] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 903.913277][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 903.946757][T14368] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 903.969636][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 905.569756][ T5712] usbhid 5-1:0.0: can't add hid device: -71 [ 905.569880][ T5712] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 905.604266][ T5712] usb 5-1: USB disconnect, device number 100 [ 905.661274][T14368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.702545][T14368] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.720563][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.720665][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.758861][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.758947][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.883715][ T5712] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 908.033681][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 908.040984][ T5712] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 908.067645][ T5712] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.078697][ T5712] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 908.089954][ T5712] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 908.101232][ T5712] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 908.115290][ T5712] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 908.115321][ T5712] usb 2-1: config 1 interface 1 has no altsetting 0 [ 908.145723][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.154410][ T5712] usb 2-1: Product: syz [ 908.154463][ T5712] usb 2-1: Manufacturer: syz [ 908.154481][ T5712] usb 2-1: SerialNumber: syz [ 908.189687][T14368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.357915][T14368] veth0_vlan: entered promiscuous mode [ 908.408544][T14368] veth1_vlan: entered promiscuous mode [ 908.523537][ T5712] usb 2-1: selecting invalid altsetting 0 [ 908.556675][T14368] veth0_macvtap: entered promiscuous mode [ 908.579322][T14368] veth1_macvtap: entered promiscuous mode [ 908.621239][T14368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.669476][T14368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.714428][ T5712] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 908.723815][T10265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.724099][T10265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.724172][T10265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.724203][T10265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.206586][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2306'. [ 909.237420][ T5875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.237463][ T5875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.649902][T14573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2308'. [ 909.982665][T10264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.006892][T10264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.296467][ T5704] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 910.393242][T14579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2266'. [ 910.450901][T14579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2266'. [ 910.458884][ T5704] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 910.461545][ T5704] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 910.461575][ T5704] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 910.461598][ T5704] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 910.461620][ T5704] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 910.461643][ T5704] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 910.461665][ T5704] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 910.505039][ T5712] usb 2-1: USB disconnect, device number 100 [ 910.544080][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 910.544124][ T5704] usb 6-1: Product: syz [ 910.544155][ T5704] usb 6-1: Manufacturer: syz [ 910.607230][T14575] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 910.607397][T14575] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 910.607509][T14575] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 910.607586][T14575] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 910.607688][T14575] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 910.607792][T14575] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 910.631055][ T5704] usb 6-1: USB2VGA dongle found at address 10 [ 910.653725][ T5704] usb 6-1: Allocated 8 output buffers [ 910.666539][ T5704] usb 6-1: Failed to early initialize device [ 910.800432][T14585] syzkaller0: entered promiscuous mode [ 910.800522][T14585] syzkaller0: entered allmulticast mode [ 911.129473][T14588] usb 6-1: Failed to initialize device [ 911.161913][T14588] 9p: Bad value for 'rfdno' [ 911.171884][T14588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.172254][T14588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.194644][ T5595] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 911.245941][T14575] lo speed is unknown, defaulting to 1000 [ 911.357256][ T5595] usb 4-1: not running at top speed; connect to a high speed hub [ 911.357318][ T5595] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 911.381037][ T5595] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.391236][ T5595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.423731][ T5595] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 911.646543][T14587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.403215][ T5595] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 912.415653][ T5595] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 912.415724][ T5595] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 912.416415][ T5595] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 912.534419][ T5595] usb 4-1: USB disconnect, device number 27 [ 914.519656][ T31] audit: type=1326 audit(1788509143.580:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.1.2317" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f312ef9e159 code=0x0 [ 915.617827][T14626] batadv_slave_1: entered promiscuous mode [ 915.778974][T14628] batadv_slave_1: entered promiscuous mode [ 916.105348][T14620] batadv_slave_1: left promiscuous mode [ 916.285879][T14622] batadv_slave_1: left promiscuous mode [ 917.175829][T14646] [U]  [ 917.391192][T14648] lo speed is unknown, defaulting to 1000 [ 917.434268][ T5595] usb 6-1: USB disconnect, device number 10 [ 917.455502][ T5696] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 917.621035][ T5696] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 917.625237][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 917.625272][ T5696] usb 5-1: Product: syz [ 917.625285][ T5696] usb 5-1: SerialNumber: syz [ 917.631958][ T5696] usb 5-1: config 0 descriptor?? [ 917.804714][T13526] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 917.954679][T13526] usb 2-1: Using ep0 maxpacket: 16 [ 917.958546][T13526] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 917.959459][T13526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.959486][T13526] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.959506][T13526] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 917.959540][T13526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.975176][T13526] usb 2-1: config 0 descriptor?? [ 918.053748][ T5703] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 918.237339][ T5703] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 918.238915][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.238958][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.241675][ T5703] usb 4-1: config 0 descriptor?? [ 918.280106][ T5712] usb 5-1: USB disconnect, device number 101 [ 918.508259][T14642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.508824][T14642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.559249][T13526] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input25 [ 918.627263][T13526] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 919.183648][T14663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2329'. [ 919.836260][ T5696] usb 2-1: reset high-speed USB device number 101 using dummy_hcd [ 919.943216][ T5703] usbhid 4-1:0.0: can't add hid device: -71 [ 919.943341][ T5703] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 919.968825][ T5703] usb 4-1: USB disconnect, device number 28 [ 920.223915][T14481] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 920.379183][T14481] usb 5-1: not running at top speed; connect to a high speed hub [ 920.379257][T14481] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 920.381309][T14481] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.381348][T14481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.417781][T14481] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 920.634276][ T5704] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 920.707362][T14672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 920.796031][ T5704] usb 4-1: not running at top speed; connect to a high speed hub [ 920.796091][ T5704] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 920.798010][ T5704] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.798956][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.857806][ T5704] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 921.008200][T14481] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 921.020956][T14481] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 921.031581][T14481] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 921.045367][T14481] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 921.103099][T14679] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2334'. [ 921.402461][T14674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 921.439539][T14481] usb 5-1: USB disconnect, device number 102 [ 921.678187][ T5704] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 921.689069][ T5704] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 921.689117][ T5704] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 921.718004][ T5704] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 921.722522][ T5704] usb 4-1: USB disconnect, device number 29 [ 921.840212][T14686] syzkaller0: entered promiscuous mode [ 921.840317][T14686] syzkaller0: entered allmulticast mode [ 923.643752][T14693] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14693 comm=syz.0.2330 [ 923.679977][T14693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2330'. [ 923.753984][T12486] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 923.904968][T12486] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 923.905933][T12486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.905980][T12486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.906019][T12486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.917994][T12486] usb 5-1: config 0 descriptor?? [ 924.324864][T14701] dlm: no locking on control device [ 924.364447][T14688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.364918][T14688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.533950][T12486] usbhid 5-1:0.0: can't add hid device: -71 [ 924.534076][T12486] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 924.546700][T12486] usb 5-1: USB disconnect, device number 103 [ 924.576215][ T5712] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 924.593042][T13966] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 925.764824][ T5712] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 925.766076][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 925.766100][ T5712] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 925.767610][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 925.767633][ T5712] usb 4-1: Product: syz [ 925.767647][ T5712] usb 4-1: Manufacturer: syz [ 925.811215][ T5712] iuu_phoenix 4-1:1.0: iuu_phoenix converter detected [ 925.821330][ T5712] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 925.924835][ T5696] usb 2-1: device descriptor read/64, error -110 [ 926.015341][ T5712] usb 4-1: USB disconnect, device number 30 [ 926.026970][ T5712] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 926.031165][ T5712] iuu_phoenix 4-1:1.0: device disconnected [ 926.380828][ T5696] usb 2-1: reset high-speed USB device number 101 using dummy_hcd [ 926.433648][T14713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2342'. [ 927.297245][ T5696] usb 2-1: device descriptor read/64, error -32 [ 927.297496][T14718] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 927.302229][T14718] fuse: Unknown parameter 'group_hd' [ 927.419940][ T31] audit: type=1400 audit(1788509156.480:1940): avc: denied { shutdown } for pid=14721 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 927.454122][T13966] Bluetooth: hci3: unexpected event 0x10 length: 7 > 1 [ 927.461675][T13966] Bluetooth: hci3: hardware error 0x00 [ 927.638040][ T5696] usb 2-1: reset high-speed USB device number 101 using dummy_hcd [ 928.105737][ T5696] usb 2-1: device descriptor read/8, error -32 [ 928.362545][ T5696] usb 2-1: reset high-speed USB device number 101 using dummy_hcd [ 928.375273][ T5696] usb 2-1: device descriptor read/8, error -32 [ 928.606122][ T5696] raw-gadget.1 gadget.1: failed to queue suspend event [ 929.348900][T13526] usb 2-1: USB disconnect, device number 101 [ 929.879529][T13966] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 931.040489][T13526] raw-gadget.1 gadget.1: failed to queue reset event [ 931.105746][T13526] raw-gadget.1 gadget.1: failed to queue resume event [ 931.238402][T13526] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 931.238679][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 931.259786][T13526] raw-gadget.1 gadget.1: failed to queue reset event [ 931.365477][T13526] raw-gadget.1 gadget.1: failed to queue resume event [ 931.515482][T13526] usb 2-1: device descriptor read/64, error -32 [ 931.633754][T13526] raw-gadget.1 gadget.1: failed to queue suspend event [ 931.634102][T13526] raw-gadget.1 gadget.1: failed to queue reset event [ 931.713697][T13526] raw-gadget.1 gadget.1: failed to queue resume event [ 931.841316][T13526] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 931.841955][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 932.054511][T13526] raw-gadget.1 gadget.1: failed to queue reset event [ 932.144513][T13526] raw-gadget.1 gadget.1: failed to queue resume event [ 932.283489][T13526] usb 2-1: device descriptor read/64, error -32 [ 932.395924][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.396001][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.408968][T13526] raw-gadget.1 gadget.1: failed to queue suspend event [ 932.409464][T13526] usb usb2-port1: attempt power cycle [ 932.409569][T13526] raw-gadget.1 gadget.1: failed to queue disconnect event [ 932.409950][T13526] raw-gadget.1 gadget.1: failed to queue reset event [ 932.484739][T13526] raw-gadget.1 gadget.1: failed to queue resume event [ 932.485196][T13526] raw-gadget.1 gadget.1: failed to queue reset event [ 932.693709][T13526] raw-gadget.1 gadget.1: failed to queue resume event [ 932.703428][T12486] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 932.735858][T14759] FAULT_INJECTION: forcing a failure. [ 932.735858][T14759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.753346][ T4917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 932.756354][T13526] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 932.771593][ T4917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 932.788035][ T4917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 932.800382][ T4917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 932.800815][ T4917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 932.801944][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 932.803033][T13526] usb 2-1: device descriptor read/8, error -32 [ 932.851822][T14759] CPU: 0 UID: 0 PID: 14759 Comm: syz.0.2358 Tainted: G L syzkaller #0 PREEMPT(full) [ 932.851854][T14759] Tainted: [L]=SOFTLOCKUP [ 932.851861][T14759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 932.851871][T14759] Call Trace: [ 932.851879][T14759] [ 932.851886][T14759] dump_stack_lvl+0x100/0x190 [ 932.851923][T14759] should_fail_ex.cold+0x5/0xa [ 932.851950][T14759] _copy_from_user+0x2e/0xd0 [ 932.851982][T14759] kstrtouint_from_user+0xd6/0x1d0 [ 932.852004][T14759] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 932.852031][T14759] ? lock_acquire+0x1d1/0x380 [ 932.852059][T14759] proc_fail_nth_write+0x83/0x220 [ 932.852084][T14759] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 932.852112][T14759] vfs_write+0x2aa/0x1050 [ 932.852143][T14759] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 932.852163][T14759] ? lock_acquire+0x1d1/0x380 [ 932.852181][T14759] ? __fget_files+0x34/0x3d0 [ 932.852202][T14759] ? __pfx_vfs_write+0x10/0x10 [ 932.852227][T14759] ? find_held_lock+0x2b/0x80 [ 932.852252][T14759] ? __fget_files+0x215/0x3d0 [ 932.852276][T14759] ? __fget_files+0x21f/0x3d0 [ 932.852301][T14759] ksys_write+0x12a/0x250 [ 932.852316][T14759] ? __pfx_ksys_write+0x10/0x10 [ 932.852341][T14759] do_syscall_64+0x123/0x790 [ 932.852370][T14759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.852390][T14759] RIP: 0033:0x7f6bf1f5e98e [ 932.852408][T14759] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 932.852426][T14759] RSP: 002b:00007f6bf2f26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 932.852448][T14759] RAX: ffffffffffffffda RBX: 00007f6bf2f276c0 RCX: 00007f6bf1f5e98e [ 932.852461][T14759] RDX: 0000000000000001 RSI: 00007f6bf2f270a0 RDI: 0000000000000004 [ 932.852473][T14759] RBP: 00007f6bf2f27090 R08: 0000000000000000 R09: 0000000000000000 [ 932.852485][T14759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.852496][T14759] R13: 00007f6bf2226128 R14: 00007f6bf2226090 R15: 00007fff5f7d15d8 [ 932.852522][T14759] [ 932.904587][T13526] raw-gadget.1 gadget.1: failed to queue suspend event [ 932.904921][T13526] raw-gadget.1 gadget.1: failed to queue reset event [ 932.926704][T12486] usb 5-1: Using ep0 maxpacket: 32 [ 932.937427][T12486] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 932.974512][T12486] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.974540][T12486] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 932.974582][T12486] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 932.974617][T12486] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 932.974651][T12486] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 932.974673][T12486] usb 5-1: config 1 interface 1 has no altsetting 0 [ 932.983769][T13526] raw-gadget.1 gadget.1: failed to queue resume event [ 933.053714][T13526] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 933.072821][T12486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.072852][T12486] usb 5-1: Product: syz [ 933.072867][T12486] usb 5-1: Manufacturer: syz [ 933.072882][T12486] usb 5-1: SerialNumber: syz [ 933.073837][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 933.073924][T13526] usb 2-1: device descriptor read/8, error -32 [ 933.185244][T13526] raw-gadget.1 gadget.1: failed to queue suspend event [ 933.185428][T13526] usb usb2-port1: unable to enumerate USB device [ 933.258430][T14758] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 933.850256][T14771] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 934.836628][T12486] usb 5-1: selecting invalid altsetting 0 [ 934.844384][ T31] audit: type=1400 audit(1788509163.910:1941): avc: denied { listen } for pid=14773 comm="syz.5.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 934.867730][ T31] audit: type=1400 audit(1788509163.930:1942): avc: denied { bind } for pid=14773 comm="syz.5.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 934.869871][ T31] audit: type=1400 audit(1788509163.930:1943): avc: denied { accept } for pid=14773 comm="syz.5.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 934.894409][T13966] Bluetooth: hci0: command tx timeout [ 934.995335][T14760] lo speed is unknown, defaulting to 1000 [ 935.025332][T12486] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 935.327939][ T30] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 935.329049][ T31] audit: type=1400 audit(1788509164.390:1944): avc: denied { write } for pid=14784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.437881][ T31] audit: type=1400 audit(1788509164.500:1945): avc: denied { write } for pid=14797 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.503759][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 935.510319][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2356'. [ 935.520687][ T30] usb 4-1: unable to get BOS descriptor or descriptor too short [ 935.520750][ T30] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 935.543686][ T30] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 935.545140][ T30] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 935.546200][ T30] usb 4-1: config 14 has no interface number 0 [ 935.546224][ T30] usb 4-1: config 14 has no interface number 1 [ 935.546280][ T30] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 935.546306][ T30] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 935.546333][ T30] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 935.546356][ T30] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 935.546378][ T30] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 935.546400][ T30] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 935.546422][ T30] usb 4-1: config 14 interface 57 has no altsetting 0 [ 935.546439][ T30] usb 4-1: config 14 interface 228 has no altsetting 0 [ 935.665271][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.665305][ T30] usb 4-1: Product: syz [ 935.665347][ T30] usb 4-1: Manufacturer: syz [ 935.665361][ T30] usb 4-1: SerialNumber: syz [ 935.708072][ T5689] usb 5-1: USB disconnect, device number 104 [ 936.088399][ T30] legousbtower 4-1:14.57: interrupt endpoints not found [ 936.091152][T14760] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.091302][T14760] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.091400][T14760] bridge_slave_0: entered allmulticast mode [ 936.092586][T14760] bridge_slave_0: entered promiscuous mode [ 936.098612][T14760] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.098770][T14760] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.098912][T14760] bridge_slave_1: entered allmulticast mode [ 936.100255][T14760] bridge_slave_1: entered promiscuous mode [ 936.122007][T14760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.125165][T14760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.127360][ T31] audit: type=1400 audit(1788509165.190:1946): avc: denied { write } for pid=14799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.148475][T14760] team0: Port device team_slave_0 added [ 936.150472][T14760] team0: Port device team_slave_1 added [ 936.170956][T14760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.170974][T14760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.170995][T14760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.172395][T14760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.172407][T14760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.172425][T14760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.210243][T14760] hsr_slave_0: entered promiscuous mode [ 936.211043][T14760] hsr_slave_1: entered promiscuous mode [ 936.211577][T14760] debugfs: 'hsr0' already exists in 'hsr' [ 936.211596][T14760] Cannot create hsr debugfs directory [ 936.423383][ T31] audit: type=1400 audit(1788509165.480:1947): avc: denied { write } for pid=14819 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.562507][ T30] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 936.631773][T14760] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 936.646005][T14760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 936.654648][T14760] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 936.665393][T14760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 936.673303][T14760] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 936.688359][T14760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 936.696679][T14760] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 936.706643][T14760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 936.812884][T14760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.832947][T14760] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.855255][T10262] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.855342][T10262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.882588][T10264] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.882766][T10264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.894657][ T5689] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 936.954786][T13966] Bluetooth: hci0: command tx timeout [ 937.044867][ T5689] usb 5-1: Using ep0 maxpacket: 32 [ 937.050110][ T5689] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 937.052161][ T5689] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.052183][ T5689] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 937.052225][ T5689] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 937.052261][ T5689] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 937.052293][ T5689] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 937.052314][ T5689] usb 5-1: config 1 interface 1 has no altsetting 0 [ 937.056081][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.056101][ T5689] usb 5-1: Product: syz [ 937.056115][ T5689] usb 5-1: Manufacturer: syz [ 937.056130][ T5689] usb 5-1: SerialNumber: syz [ 937.270222][T14760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.316318][ T5689] usb 5-1: selecting invalid altsetting 0 [ 937.498681][T14760] veth0_vlan: entered promiscuous mode [ 937.510002][T14760] veth1_vlan: entered promiscuous mode [ 937.517329][ T5689] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 937.565723][T14760] veth0_macvtap: entered promiscuous mode [ 937.569597][T14760] veth1_macvtap: entered promiscuous mode [ 937.582136][T14760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.587344][T14760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.634267][ T5879] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.635562][ T5879] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.635594][ T5879] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.635621][ T5879] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.781464][T10262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.781508][T10262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.927384][ T5879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.935804][ T5879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.979559][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2364'. [ 938.398367][T14858] batadv_slave_1: entered promiscuous mode [ 938.591332][ T5704] usb 5-1: USB disconnect, device number 105 [ 938.785750][T14852] batadv_slave_1: left promiscuous mode [ 939.577924][T13966] Bluetooth: hci0: command tx timeout [ 939.894288][T14878] batadv_slave_1: entered promiscuous mode [ 940.305889][T14880] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 940.520724][T14875] batadv_slave_1: left promiscuous mode [ 941.770107][T13966] Bluetooth: hci0: command tx timeout [ 942.771290][T14907] batadv_slave_1: entered promiscuous mode [ 942.800466][T14898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2376'. [ 942.903695][ T5689] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 942.985411][T14914] macsec1: entered promiscuous mode [ 943.054621][ T5689] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 943.065141][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.065188][ T5689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.065228][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.104098][ T5689] usb 5-1: config 0 descriptor?? [ 943.119377][T14899] batadv_slave_1: left promiscuous mode [ 943.265434][ T5704] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 943.378224][T14917] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2381'. [ 943.415165][ T5704] usb 7-1: Using ep0 maxpacket: 32 [ 943.422167][ T5704] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 943.433510][ T5704] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 943.434883][ T5704] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 943.434947][ T5704] usb 7-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 943.435024][ T5704] usb 7-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 943.435063][ T5704] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 943.435083][ T5704] usb 7-1: config 1 interface 1 has no altsetting 0 [ 943.450853][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.450879][ T5704] usb 7-1: Product: syz [ 943.450893][ T5704] usb 7-1: Manufacturer: syz [ 943.450907][ T5704] usb 7-1: SerialNumber: syz [ 943.475423][T14922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2381'. [ 943.646197][T14923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.646671][T14923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.733439][T14925] FAULT_INJECTION: forcing a failure. [ 943.733439][T14925] name failslab, interval 1, probability 0, space 0, times 0 [ 943.750368][T14925] CPU: 0 UID: 0 PID: 14925 Comm: syz.5.2383 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.750408][T14925] Tainted: [L]=SOFTLOCKUP [ 943.750417][T14925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 943.750431][T14925] Call Trace: [ 943.750440][T14925] [ 943.750449][T14925] dump_stack_lvl+0x100/0x190 [ 943.750491][T14925] should_fail_ex.cold+0x5/0xa [ 943.750522][T14925] should_failslab+0xc2/0x120 [ 943.750550][T14925] __kmalloc_node_noprof+0xff/0x880 [ 943.750576][T14925] ? mempool_init_node+0x11b/0x6f0 [ 943.750610][T14925] ? __pfx_msgpool_free+0x10/0x10 [ 943.750637][T14925] ? __pfx_msgpool_alloc+0x10/0x10 [ 943.750659][T14925] mempool_init_node+0x11b/0x6f0 [ 943.750691][T14925] ? __pfx_msgpool_free+0x10/0x10 [ 943.750710][T14925] mempool_create_node_noprof+0xe9/0x1b0 [ 943.750738][T14925] ? __pfx_msgpool_alloc+0x10/0x10 [ 943.750762][T14925] ceph_msgpool_init+0xdc/0x1d0 [ 943.750785][T14925] ceph_osdc_init+0x4f1/0xa00 [ 943.750819][T14925] ceph_create_client+0x281/0x370 [ 943.750850][T14925] ceph_get_tree+0x1a4/0x1fd0 [ 943.750880][T14925] ? bpf_lsm_capable+0x9/0x10 [ 943.750910][T14925] ? security_capable+0x80/0x260 [ 943.750940][T14925] vfs_get_tree+0x92/0x320 [ 943.750969][T14925] vfs_cmd_create+0xd7/0x2a0 [ 943.751002][T14925] __do_sys_fsconfig+0x55a/0xcb0 [ 943.751033][T14925] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 943.751093][T14925] do_syscall_64+0x123/0x790 [ 943.751123][T14925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.751147][T14925] RIP: 0033:0x7fc52739e159 [ 943.751168][T14925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.751187][T14925] RSP: 002b:00007fc5255f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 943.751209][T14925] RAX: ffffffffffffffda RBX: 00007fc527625fa0 RCX: 00007fc52739e159 [ 943.751222][T14925] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 943.751241][T14925] RBP: 00007fc527435024 R08: 0000000000000000 R09: 0000000000000000 [ 943.751253][T14925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.751265][T14925] R13: 00007fc527626038 R14: 00007fc527625fa0 R15: 00007ffe8e2f6878 [ 943.751293][T14925] [ 943.848720][ T5704] usb 7-1: selecting invalid altsetting 0 [ 943.996537][ T5689] usbhid 5-1:0.0: can't add hid device: -71 [ 943.996651][ T5689] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 944.015502][ T5689] usb 5-1: USB disconnect, device number 106 [ 944.040891][ T5704] usb 7-1: 1:1: cannot get freq (v2/v3): err -32 [ 944.460615][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2378'. [ 944.547903][ T5704] usb 7-1: USB disconnect, device number 2 [ 944.725493][T14940] FAULT_INJECTION: forcing a failure. [ 944.725493][T14940] name failslab, interval 1, probability 0, space 0, times 0 [ 944.743680][T14940] CPU: 0 UID: 0 PID: 14940 Comm: syz.4.2388 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.743710][T14940] Tainted: [L]=SOFTLOCKUP [ 944.743716][T14940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 944.743734][T14940] Call Trace: [ 944.743741][T14940] [ 944.743749][T14940] dump_stack_lvl+0x100/0x190 [ 944.743784][T14940] should_fail_ex.cold+0x5/0xa [ 944.743803][T14940] should_failslab+0xc2/0x120 [ 944.743819][T14940] kmem_cache_alloc_noprof+0x92/0x6a0 [ 944.743832][T14940] ? do_getname+0x35/0x390 [ 944.743851][T14940] do_getname+0x35/0x390 [ 944.743868][T14940] do_sys_openat2+0xc7/0x1e0 [ 944.743883][T14940] ? __pfx_do_sys_openat2+0x10/0x10 [ 944.743897][T14940] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 944.743914][T14940] ? __fget_files+0x21f/0x3d0 [ 944.743930][T14940] __x64_sys_openat+0x12d/0x210 [ 944.743944][T14940] ? __pfx___x64_sys_openat+0x10/0x10 [ 944.743958][T14940] ? ksys_write+0x1ac/0x250 [ 944.743973][T14940] do_syscall_64+0x123/0x790 [ 944.743988][T14940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.744000][T14940] RIP: 0033:0x7f04d9d9e159 [ 944.744012][T14940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.744023][T14940] RSP: 002b:00007f04dac5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 944.744036][T14940] RAX: ffffffffffffffda RBX: 00007f04da025fa0 RCX: 00007f04d9d9e159 [ 944.744043][T14940] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 944.744051][T14940] RBP: 00007f04dac5c090 R08: 0000000000000000 R09: 0000000000000000 [ 944.744057][T14940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.744064][T14940] R13: 00007f04da026038 R14: 00007f04da025fa0 R15: 00007ffd04fa7318 [ 944.744078][T14940] [ 944.971874][ T31] audit: type=1400 audit(1788509174.030:1948): avc: denied { setopt } for pid=14943 comm="syz.5.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 944.997896][ T31] audit: type=1400 audit(1788509174.060:1949): avc: denied { listen } for pid=14943 comm="syz.5.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 944.999206][ T31] audit: type=1400 audit(1788509174.060:1950): avc: denied { read write } for pid=14943 comm="syz.5.2390" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 944.999530][ T31] audit: type=1400 audit(1788509174.060:1951): avc: denied { open } for pid=14943 comm="syz.5.2390" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 945.000157][ T31] audit: type=1400 audit(1788509174.060:1952): avc: denied { accept } for pid=14943 comm="syz.5.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 945.186903][ T31] audit: type=1400 audit(1788509174.240:1953): avc: denied { create } for pid=14948 comm="syz.6.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 945.242207][T14950] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 25 prio class 2 [ 945.256636][T14950] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.256688][T14950] Buffer I/O error on dev loop8, logical block 0, async page read [ 945.256751][T14950] I/O error, dev loop8, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.256770][T14950] Buffer I/O error on dev loop8, logical block 1, async page read [ 945.256795][T14950] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.256814][T14950] Buffer I/O error on dev loop8, logical block 2, async page read [ 945.256837][T14950] I/O error, dev loop8, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.256855][T14950] Buffer I/O error on dev loop8, logical block 3, async page read [ 945.256877][T14950] I/O error, dev loop8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.256895][T14950] Buffer I/O error on dev loop8, logical block 4, async page read [ 945.256919][T14950] I/O error, dev loop8, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.256936][T14950] Buffer I/O error on dev loop8, logical block 5, async page read [ 945.256959][T14950] I/O error, dev loop8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.256976][T14950] Buffer I/O error on dev loop8, logical block 6, async page read [ 945.256998][T14950] I/O error, dev loop8, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 945.257016][T14950] Buffer I/O error on dev loop8, logical block 7, async page read [ 946.852365][T14961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2395'. [ 947.167514][T14968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2393'. [ 947.609836][T14970] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 948.084134][ T5773] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 948.307368][ T5773] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 948.399118][ T5773] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.621688][ T5773] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.621759][ T5773] usb 7-1: Product: syz [ 948.631871][ T5773] usb 7-1: Manufacturer: syz [ 948.631973][ T5773] usb 7-1: SerialNumber: syz [ 949.943357][ T5773] cdc_ncm 7-1:1.0: bind() failure [ 949.973024][ T5773] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 949.980709][ T5773] cdc_ncm 7-1:1.1: bind() failure [ 949.991899][T14975] syzkaller1: entered promiscuous mode [ 949.991932][T14975] syzkaller1: entered allmulticast mode [ 950.029487][ T5773] usb 7-1: USB disconnect, device number 3 [ 951.332502][ T31] audit: type=1400 audit(1788509180.360:1954): avc: denied { write } for pid=14991 comm="syz.0.2401" name="node" dev="configfs" ino=29693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 951.352784][ T31] audit: type=1400 audit(1788509180.410:1955): avc: denied { read } for pid=14991 comm="syz.0.2401" name="ipv4_address" dev="configfs" ino=44190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 951.470597][ T31] audit: type=1800 audit(1788509180.520:1956): pid=14992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2401" name="ipv4_address" dev="configfs" ino=44190 res=0 errno=0 [ 951.471482][ T31] audit: type=1800 audit(1788509180.530:1957): pid=14995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2401" name="ipv4_port" dev="configfs" ino=44195 res=0 errno=0 [ 952.946900][ T31] audit: type=1800 audit(1788509182.010:1958): pid=14995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2401" name="num" dev="configfs" ino=44265 res=0 errno=0 [ 952.961975][ T31] audit: type=1800 audit(1788509182.020:1959): pid=14995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2401" name="local" dev="configfs" ino=44266 res=0 errno=0 [ 952.976837][ T31] audit: type=1400 audit(1788509182.030:1960): avc: denied { write } for pid=14991 comm="syz.0.2401" name="heartbeat" dev="configfs" ino=29694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 952.996896][ T31] audit: type=1800 audit(1788509182.050:1961): pid=14995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2401" name="dev" dev="configfs" ino=44274 res=0 errno=0 [ 952.997671][ T31] audit: type=1400 audit(1788509182.060:1962): avc: denied { ioctl } for pid=14991 comm="syz.0.2401" path="/477/config/cluster/ocfs2/node/node1/ipv4_port" dev="configfs" ino=44195 ioctlcmd=0x703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 955.900543][ T5773] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 956.091955][ T5773] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 956.117951][ T5773] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.131228][ T5773] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 956.146210][ T5773] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 956.179006][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 956.191851][ T5773] usb 5-1: Product: syz [ 956.191897][ T5773] usb 5-1: Manufacturer: syz [ 956.221023][ T5773] sisusb 5-1:1.0: Invalid USB2VGA device [ 956.227395][ T5773] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 956.386678][T15024] FAULT_INJECTION: forcing a failure. [ 956.386678][T15024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.386737][T15024] CPU: 1 UID: 0 PID: 15024 Comm: syz.3.2402 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.386765][T15024] Tainted: [L]=SOFTLOCKUP [ 956.386773][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 956.386785][T15024] Call Trace: [ 956.386793][T15024] [ 956.386802][T15024] dump_stack_lvl+0x100/0x190 [ 956.386838][T15024] should_fail_ex.cold+0x5/0xa [ 956.386866][T15024] _copy_from_user+0x2e/0xd0 [ 956.386900][T15024] copy_msghdr_from_user+0x9f/0x4c0 [ 956.386931][T15024] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 956.386961][T15024] ? lock_acquire+0x1d1/0x380 [ 956.386982][T15024] ? get_pid_task+0x2a/0x250 [ 956.387011][T15024] ___sys_sendmsg+0x106/0x1e0 [ 956.387036][T15024] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.387063][T15024] ? get_pid_task+0x106/0x250 [ 956.387096][T15024] ? find_held_lock+0x2b/0x80 [ 956.387137][T15024] __sys_sendmsg+0x160/0x210 [ 956.387168][T15024] ? __pfx___sys_sendmsg+0x10/0x10 [ 956.387210][T15024] do_syscall_64+0x123/0x790 [ 956.387236][T15024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.387256][T15024] RIP: 0033:0x7f03de19e159 [ 956.387274][T15024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.387291][T15024] RSP: 002b:00007f03def92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.387311][T15024] RAX: ffffffffffffffda RBX: 00007f03de425fa0 RCX: 00007f03de19e159 [ 956.387323][T15024] RDX: 0000000008004800 RSI: 0000200000000000 RDI: 000000000000000d [ 956.387335][T15024] RBP: 00007f03def92090 R08: 0000000000000000 R09: 0000000000000000 [ 956.387347][T15024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.387358][T15024] R13: 00007f03de426038 R14: 00007f03de425fa0 R15: 00007ffced81c358 [ 956.387382][T15024] [ 956.510151][T15014] lo speed is unknown, defaulting to 1000 [ 956.643295][T15028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2411'. [ 956.852579][T15030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.852958][T15030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.653430][T15047] input: syz1 as /devices/virtual/input/input26 [ 961.571787][T15064] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 961.571866][T15064] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 961.578671][T15064] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 961.600654][T15064] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 961.732047][T15064] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 962.154188][T15072] FAULT_INJECTION: forcing a failure. [ 962.154188][T15072] name failslab, interval 1, probability 0, space 0, times 0 [ 962.154243][T15072] CPU: 1 UID: 0 PID: 15072 Comm: syz.6.2424 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.154270][T15072] Tainted: [L]=SOFTLOCKUP [ 962.154278][T15072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 962.154289][T15072] Call Trace: [ 962.154297][T15072] [ 962.154306][T15072] dump_stack_lvl+0x100/0x190 [ 962.154342][T15072] should_fail_ex.cold+0x5/0xa [ 962.154369][T15072] should_failslab+0xc2/0x120 [ 962.154390][T15072] __kmalloc_noprof+0xfc/0x840 [ 962.154407][T15072] ? __pfx_dynamic_dname+0x10/0x10 [ 962.154426][T15072] ? tomoyo_encode2+0xfb/0x3c0 [ 962.154450][T15072] tomoyo_encode2+0xfb/0x3c0 [ 962.154479][T15072] tomoyo_encode+0x29/0x50 [ 962.154498][T15072] tomoyo_realpath_from_path+0x18c/0x690 [ 962.154524][T15072] tomoyo_path_number_perm+0x23c/0x580 [ 962.154551][T15072] ? tomoyo_path_number_perm+0x22e/0x580 [ 962.154579][T15072] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 962.154616][T15072] ? __lock_acquire+0x4c5/0x1ec0 [ 962.154648][T15072] ? __fget_files+0x34/0x3d0 [ 962.154671][T15072] ? find_held_lock+0x2b/0x80 [ 962.154697][T15072] ? hook_file_ioctl_common+0x140/0x440 [ 962.154726][T15072] ? __fget_files+0x21f/0x3d0 [ 962.154752][T15072] security_file_ioctl+0xd3/0x230 [ 962.154784][T15072] __x64_sys_ioctl+0xb7/0x210 [ 962.154816][T15072] do_syscall_64+0x123/0x790 [ 962.154843][T15072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.154862][T15072] RIP: 0033:0x7efdd779e159 [ 962.154879][T15072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.154897][T15072] RSP: 002b:00007efdd8673028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.154918][T15072] RAX: ffffffffffffffda RBX: 00007efdd7a25fa0 RCX: 00007efdd779e159 [ 962.154931][T15072] RDX: 0000000000000000 RSI: 00000000400452c8 RDI: 0000000000000004 [ 962.154942][T15072] RBP: 00007efdd8673090 R08: 0000000000000000 R09: 0000000000000000 [ 962.154954][T15072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.154967][T15072] R13: 00007efdd7a26038 R14: 00007efdd7a25fa0 R15: 00007ffc6702c2c8 [ 962.154994][T15072] [ 962.156574][T15072] ERROR: Out of memory at tomoyo_realpath_from_path. [ 962.557517][T15069] FAULT_INJECTION: forcing a failure. [ 962.557517][T15069] name failslab, interval 1, probability 0, space 0, times 0 [ 962.557573][T15069] CPU: 0 UID: 0 PID: 15069 Comm: syz.3.2422 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.557598][T15069] Tainted: [L]=SOFTLOCKUP [ 962.557604][T15069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 962.557615][T15069] Call Trace: [ 962.557623][T15069] [ 962.557630][T15069] dump_stack_lvl+0x100/0x190 [ 962.557662][T15069] should_fail_ex.cold+0x5/0xa [ 962.557688][T15069] should_failslab+0xc2/0x120 [ 962.557711][T15069] kmem_cache_alloc_noprof+0x92/0x6a0 [ 962.557729][T15069] ? __pfx_acct_collect+0x10/0x10 [ 962.557759][T15069] ? taskstats_exit+0x6d3/0xca0 [ 962.557782][T15069] taskstats_exit+0x6d3/0xca0 [ 962.557798][T15069] ? __pfx_acct_update_integrals+0x10/0x10 [ 962.557816][T15069] ? __pfx_taskstats_exit+0x10/0x10 [ 962.557835][T15069] ? rcu_read_lock_any_held+0x6a/0x90 [ 962.557864][T15069] do_exit+0x65c/0x2ae0 [ 962.557892][T15069] ? __pfx_do_exit+0x10/0x10 [ 962.557912][T15069] ? do_raw_spin_lock+0x128/0x260 [ 962.557934][T15069] ? find_held_lock+0x2b/0x80 [ 962.557955][T15069] ? get_signal+0x7e0/0x21e0 [ 962.557977][T15069] do_group_exit+0xd5/0x2a0 [ 962.558001][T15069] get_signal+0x1ec7/0x21e0 [ 962.558026][T15069] ? __pfx_get_signal+0x10/0x10 [ 962.558050][T15069] ? do_futex+0x190/0x440 [ 962.558077][T15069] arch_do_signal_or_restart+0x91/0x7e0 [ 962.558110][T15069] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 962.558151][T15069] exit_to_user_mode_loop+0x139/0x700 [ 962.558173][T15069] ? rcu_is_watching+0x13/0xc0 [ 962.558200][T15069] do_syscall_64+0x661/0x790 [ 962.558225][T15069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.558244][T15069] RIP: 0033:0x7f03de19e159 [ 962.558261][T15069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.558279][T15069] RSP: 002b:00007f03def920e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 962.558299][T15069] RAX: fffffffffffffe00 RBX: 00007f03de425fa8 RCX: 00007f03de19e159 [ 962.558312][T15069] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f03de425fa8 [ 962.558324][T15069] RBP: 00007f03de425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 962.558335][T15069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.558348][T15069] R13: 00007f03de426038 R14: 00007ffced81c270 R15: 00007ffced81c358 [ 962.558372][T15069] [ 963.728209][T14849] usb 5-1: USB disconnect, device number 107 [ 964.084846][ T31] audit: type=1326 audit(1788509193.140:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15102 comm="syz.4.2432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 964.114817][ T31] audit: type=1326 audit(1788509193.180:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15102 comm="syz.4.2432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 964.146277][ T31] audit: type=1326 audit(1788509193.210:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15102 comm="syz.4.2432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 964.184688][ T31] audit: type=1326 audit(1788509193.250:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15102 comm="syz.4.2432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 964.184772][ T31] audit: type=1326 audit(1788509193.250:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15102 comm="syz.4.2432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 964.212228][ T31] audit: type=1326 audit(1788509193.250:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15102 comm="syz.4.2432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 964.212296][ T31] audit: type=1326 audit(1788509193.250:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15102 comm="syz.4.2432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 964.212333][ T31] audit: type=1326 audit(1788509193.250:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15102 comm="syz.4.2432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 964.212371][ T31] audit: type=1326 audit(1788509193.250:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15102 comm="syz.4.2432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 964.212408][ T31] audit: type=1326 audit(1788509193.250:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15102 comm="syz.4.2432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d9d9e159 code=0x7ffc0000 [ 964.401733][T15096] FAULT_INJECTION: forcing a failure. [ 964.401733][T15096] name failslab, interval 1, probability 0, space 0, times 0 [ 964.401774][T15096] CPU: 0 UID: 0 PID: 15096 Comm: syz.6.2428 Tainted: G L syzkaller #0 PREEMPT(full) [ 964.401799][T15096] Tainted: [L]=SOFTLOCKUP [ 964.401806][T15096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 964.401816][T15096] Call Trace: [ 964.401823][T15096] [ 964.401830][T15096] dump_stack_lvl+0x100/0x190 [ 964.401863][T15096] should_fail_ex.cold+0x5/0xa [ 964.401887][T15096] should_failslab+0xc2/0x120 [ 964.401909][T15096] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 964.401928][T15096] ? __alloc_skb+0x5b7/0x710 [ 964.401953][T15096] ? __alloc_skb+0x140/0x710 [ 964.401979][T15096] __alloc_skb+0x140/0x710 [ 964.402001][T15096] ? __alloc_skb+0x5b7/0x710 [ 964.402024][T15096] ? __pfx___alloc_skb+0x10/0x10 [ 964.402060][T15096] netlink_alloc_large_skb+0x69/0x150 [ 964.402090][T15096] netlink_sendmsg+0x680/0xda0 [ 964.402118][T15096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.402144][T15096] ? selinux_socket_sendmsg+0x198/0x2f0 [ 964.402174][T15096] sock_write_iter+0x53a/0x5b0 [ 964.402195][T15096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.402218][T15096] ? __pfx_sock_write_iter+0x10/0x10 [ 964.402244][T15096] ? __pfx___file_has_perm+0x10/0x10 [ 964.402272][T15096] do_iter_readv_writev+0x6f7/0x930 [ 964.402299][T15096] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 964.402321][T15096] ? selinux_file_permission+0x8f/0x6d0 [ 964.402349][T15096] ? bpf_lsm_file_permission+0x9/0x10 [ 964.402369][T15096] ? security_file_permission+0x76/0x210 [ 964.402388][T15096] ? rw_verify_area+0xce/0x6d0 [ 964.402413][T15096] vfs_writev+0x360/0xdd0 [ 964.402438][T15096] ? __lock_acquire+0x4c5/0x1ec0 [ 964.402459][T15096] ? __pfx_vfs_writev+0x10/0x10 [ 964.402487][T15096] ? lock_acquire+0x1d1/0x380 [ 964.402503][T15096] ? __fget_files+0x34/0x3d0 [ 964.402531][T15096] ? __fget_files+0x21f/0x3d0 [ 964.402555][T15096] ? do_writev+0x28a/0x340 [ 964.402576][T15096] do_writev+0x28a/0x340 [ 964.402600][T15096] ? __pfx_do_writev+0x10/0x10 [ 964.402629][T15096] do_syscall_64+0x123/0x790 [ 964.402651][T15096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.402669][T15096] RIP: 0033:0x7efdd779e159 [ 964.402685][T15096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.402700][T15096] RSP: 002b:00007efdd8673028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 964.402719][T15096] RAX: ffffffffffffffda RBX: 00007efdd7a25fa0 RCX: 00007efdd779e159 [ 964.402730][T15096] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000003 [ 964.402741][T15096] RBP: 00007efdd8673090 R08: 0000000000000000 R09: 0000000000000000 [ 964.402751][T15096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.402760][T15096] R13: 00007efdd7a26038 R14: 00007efdd7a25fa0 R15: 00007ffc6702c2c8 [ 964.402782][T15096] [ 965.883199][T15118] bridge_slave_0: left allmulticast mode [ 965.883259][T15118] bridge_slave_0: left promiscuous mode [ 965.884834][T15118] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.912319][T15118] bridge_slave_1: left allmulticast mode [ 965.912382][T15118] bridge_slave_1: left promiscuous mode [ 965.918642][T15118] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.990900][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2435'. [ 966.007970][T15118] team0: Port device team_slave_0 removed [ 966.027560][T15118] team0: Port device team_slave_1 removed [ 966.034305][T15118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.034346][T15118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.058109][T15118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.058149][T15118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.080192][T15118] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 966.096852][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2435'. [ 966.932827][T15132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2438'. [ 968.874760][ T32] INFO: task kworker/1:4:5711 blocked for more than 144 seconds. [ 968.884122][ T32] Tainted: G L syzkaller #0 [ 968.884169][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 968.884181][ T32] task:kworker/1:4 state:D stack:22072 pid:5711 tgid:5 ** replaying previous printk message ** [ 968.884181][ T32] task:kworker/1:4 state:D stack:22072 pid:5711 tgid:5711 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 968.884268][ T32] Workqueue: events_freezable mmc_rescan [ 968.884316][ T32] Call Trace: [ 968.884325][ T32] [ 968.884339][ T32] __schedule+0x1259/0x6920 [ 968.884369][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 968.884407][ T32] ? __pfx___schedule+0x10/0x10 [ 968.884426][ T32] ? find_held_lock+0x2b/0x80 [ 968.884453][ T32] ? schedule+0x225/0x2c0 [ 968.884474][ T32] schedule+0xdd/0x2c0 [ 968.884494][ T32] schedule_timeout+0x1b2/0x280 [ 968.884518][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 968.884549][ T32] ? mark_held_locks+0x40/0x70 [ 968.884571][ T32] __wait_for_common+0x2e7/0x4c0 [ 968.884590][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 968.884617][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 968.884637][ T32] ? led_trigger_event+0x60/0x270 [ 968.884668][ T32] mmc_wait_for_req_done+0xcd/0x3d0 [ 968.884698][ T32] mmc_wait_for_req+0x207/0x2c0 [ 968.884720][ T32] mmc_wait_for_cmd+0x154/0x200 [ 968.884742][ T32] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 968.884775][ T32] ? __pfx_mmc_wait_done+0x10/0x10 [ 968.884798][ T32] ? rpm_resume+0x7eb/0x1320 [ 968.884827][ T32] mmc_io_rw_direct_host+0x126/0x330 [ 968.884851][ T32] ? __pfx_mmc_io_rw_direct_host+0x10/0x10 [ 968.884877][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 968.884895][ T32] ? __pm_runtime_resume+0xc3/0x170 [ 968.884912][ T32] ? __mmc_claim_host+0x2e2/0x5f0 [ 968.884933][ T32] sdio_reset+0x92/0x240 [ 968.884953][ T32] ? __pfx_sdio_reset+0x10/0x10 [ 968.884972][ T32] ? mmc_sw_reset+0x80/0xd0 [ 968.884991][ T32] ? __pfx_default_wake_function+0x10/0x10 [ 968.885014][ T32] ? mmc_attach_sd_uhs2+0x2d0/0x590 [ 968.885036][ T32] mmc_rescan+0xba9/0x11c0 [ 968.885085][ T32] process_one_work+0xac7/0x1b10 [ 968.885121][ T32] ? __pfx_process_one_work+0x10/0x10 [ 968.885146][ T32] ? lock_acquire+0x1d1/0x380 [ 968.885169][ T32] ? __pfx_mmc_rescan+0x10/0x10 [ 968.885193][ T32] worker_thread+0x5ef/0xe50 [ 968.885223][ T32] ? __pfx_worker_thread+0x10/0x10 [ 968.885248][ T32] ? kthread+0x13a/0x450 [ 968.885269][ T32] ? __pfx_worker_thread+0x10/0x10 [ 968.885291][ T32] kthread+0x373/0x450 [ 968.885330][ T32] ? __pfx_kthread+0x10/0x10 [ 968.885354][ T32] ret_from_fork+0x730/0xd60 [ 968.885375][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 968.885395][ T32] ? __switch_to+0x800/0x10f0 [ 968.885418][ T32] ? __pfx_kthread+0x10/0x10 [ 968.885441][ T32] ret_from_fork_asm+0x1a/0x30 [ 968.885470][ T32] [ 968.885494][ T32] INFO: task kworker/1:6:7306 blocked for more than 144 seconds. [ 968.885508][ T32] Tainted: G L syzkaller #0 [ 968.885517][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 968.885524][ T32] task:kworker/1:6 state:D stack:22440 pid:7306 tgid:7306 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 968.885575][ T32] Workqueue: usb_hub_wq hub_event [ 968.885598][ T32] Call Trace: [ 968.885603][ T32] [ 968.885613][ T32] __schedule+0x1259/0x6920 [ 968.885635][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 968.885662][ T32] ? __pfx___schedule+0x10/0x10 [ 968.885676][ T32] ? find_held_lock+0x2b/0x80 [ 968.885698][ T32] ? schedule+0x225/0x2c0 [ 968.885718][ T32] schedule+0xdd/0x2c0 [ 968.885734][ T32] schedule_timeout+0x1b2/0x280 [ 968.887831][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 968.887868][ T32] ? mark_held_locks+0x40/0x70 [ 968.887889][ T32] __wait_for_common+0x2e7/0x4c0 [ 968.887907][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 968.887934][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 968.887953][ T32] ? rcu_is_watching+0x13/0xc0 [ 968.887980][ T32] ? __flush_work+0x4ca/0xcb0 [ 968.888005][ T32] __flush_work+0x7c7/0xcb0 [ 968.888030][ T32] ? __timer_delete+0xd1/0x1b0 [ 968.888063][ T32] ? __pfx___flush_work+0x10/0x10 [ 968.888089][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 968.888119][ T32] ? __pfx___might_resched+0x10/0x10 [ 968.888135][ T32] ? _raw_spin_unlock_irq+0x2e/0x50 [ 968.888159][ T32] ? usb_hcd_flush_endpoint+0x359/0x400 [ 968.888185][ T32] cancel_delayed_work_sync+0xd1/0xf0 [ 968.888205][ T32] mmc_stop_host+0xe9/0x400 [ 968.888230][ T32] mmc_remove_host+0x15/0x60 [ 968.888253][ T32] vub300_disconnect+0x12d/0x170 [ 968.888278][ T32] usb_unbind_interface+0x1dd/0x9e0 [ 968.888306][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 968.888328][ T32] device_remove+0x12a/0x180 [ 968.888369][ T32] device_release_driver_internal+0x44e/0x620 [ 968.888392][ T32] bus_remove_device+0x2bc/0x560 [ 968.888417][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 968.888439][ T32] ? __pfx_device_remove_attrs+0x10/0x10 [ 968.888469][ T32] device_del+0x376/0x9b0 [ 968.888497][ T32] ? __pfx_device_del+0x10/0x10 [ 968.888519][ T32] ? kobject_put+0xb9/0x640 [ 968.888547][ T32] usb_disable_device+0x367/0x810 [ 968.888574][ T32] usb_disconnect+0x2e2/0x9a0 [ 968.888608][ T32] hub_event+0x1bb1/0x4420 [ 968.888642][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 968.888663][ T32] ? __pfx_hub_event+0x10/0x10 [ 968.888681][ T32] ? mark_lock+0xea0/0x1020 [ 968.888700][ T32] ? lock_acquire+0x1d1/0x380 [ 968.888716][ T32] ? process_one_work+0xa2c/0x1b10 [ 968.888741][ T32] ? process_one_work+0x906/0x1b10 [ 968.888765][ T32] ? process_one_work+0x906/0x1b10 [ 968.888792][ T32] process_one_work+0xac7/0x1b10 [ 968.888825][ T32] ? __pfx_process_one_work+0x10/0x10 [ 968.888850][ T32] ? lock_acquire+0x1d1/0x380 [ 968.888873][ T32] ? __pfx_hub_event+0x10/0x10 [ 968.888894][ T32] worker_thread+0x5ef/0xe50 [ 968.888923][ T32] ? __pfx_worker_thread+0x10/0x10 [ 968.888948][ T32] ? kthread+0x13a/0x450 [ 968.888968][ T32] ? __pfx_worker_thread+0x10/0x10 [ 968.888991][ T32] kthread+0x373/0x450 [ 968.889011][ T32] ? __pfx_kthread+0x10/0x10 [ 968.889034][ T32] ret_from_fork+0x730/0xd60 [ 968.889059][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 968.889079][ T32] ? __switch_to+0x800/0x10f0 [ 968.889102][ T32] ? __pfx_kthread+0x10/0x10 [ 968.889126][ T32] ret_from_fork_asm+0x1a/0x30 [ 968.889159][ T32] [ 968.892528][ T32] [ 968.892528][ T32] Showing all locks held in the system: [ 968.892551][ T32] locks held by kworker/u8:0/12: 2, on CPU#1: [ 968.892573][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 968.892627][ T32] #1: ffffc90000117d08 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 968.892673][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 968.892692][ T32] #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 968.892736][ T32] #1: ffffffff9bc64c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 968.892789][ T32] locks held by kworker/1:1/30: 6, on CPU#1: [ 968.892801][ T32] #0: ffff8880242e5940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 968.892847][ T32] #1: ffffc90000a57d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 968.892893][ T32] #2: ffff88802ad0c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 968.892934][ T32] #3: ffff88807d4581d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 968.892972][ T32] #4: ffff8880684dd1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 968.893009][ T32] #5: ffffffff9028cb48 (minor_rwsem#2){++++}-{4:4}, at: usb_register_dev+0x11d/0x570 [ 968.893063][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 968.893074][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 968.893199][ T32] locks held by kworker/0:1H/4928: 3, on CPU#0: [ 968.893211][ T32] #0: ffff88801c056d40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 968.893257][ T32] #1: ffffc900040cfd08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 968.893302][ T32] #2: ffff88803443a8e0 (&grp->list_mutex/1){.+.+}-{4:4}, at: snd_seq_deliver_event+0x650/0x930 [ 968.893353][ T32] locks held by getty/5355: 2, on CPU#0: [ 968.893365][ T32] #0: ffff8880347ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 968.893411][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 968.893458][ T32] locks held by kworker/0:3/5595: 6, on CPU#0: [ 968.893471][ T32] #0: ffff8880242e5940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 968.898687][ T32] #1: ffffc90003e67d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 968.898742][ T32] #2: ffff88802ade81d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 968.899494][ T32] #3: ffff88808b41b1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 968.899533][ T32] #4: ffff8880685661a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 968.899572][ T32] #5: ffffffff9028cb48 (minor_rwsem#2){++++}-{4:4}, at: usb_deregister_dev+0x7c/0x210 [ 968.899636][ T32] locks held by kworker/1:4/5711: 2, on CPU#1: [ 968.899648][ T32] #0: ffff88801c056140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 968.899693][ T32] #1: ffffc900042ffd08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 968.899753][ T32] locks held by kworker/0:7/5773: 2, last CPU#0: [ 968.899766][ T32] #0: ffff88801c055d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 968.899813][ T32] #1: ffffc9000461fd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 968.899867][ T32] locks held by kworker/1:6/7306: 5, on CPU#1: [ 968.899880][ T32] #0: ffff8880242e5940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 968.899925][ T32] #1: ffffc9000c68fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 968.899971][ T32] #2: ffff88802ab3a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 968.900023][ T32] #3: ffff8880455ef1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 968.900071][ T32] #4: ffff88807c0511a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 968.900128][ T32] locks held by udevd/13939: 4, on CPU#0: [ 968.900141][ T32] #0: ffff8880367843f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 968.900184][ T32] #1: ffff88804b37b080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 968.900231][ T32] #2: ffff888020771008 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 968.900276][ T32] #3: ffff88807d4581d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 968.900333][ T32] locks held by syz.1.2326/14649: 2, on CPU#1: [ 968.900346][ T32] #0: ffffffff9028cb48 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x23/0x220 [ 968.900392][ T32] #1: ffff8880358b70c8 (&(sisusb->lock)){+.+.}-{4:4}, at: sisusb_open+0xb6/0x4b0 [ 968.900445][ T32] locks held by udevd/14851: 1, last CPU#1: [ 968.900457][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0x90/0x600 [ 968.900503][ T32] locks held by syz.0.2435/15117: 3, last CPU#1: [ 968.900515][ T32] #0: ffffffff90bb70e0 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x44/0x70 [ 968.900558][ T32] #1: ffff888034359cb0 (&mdev->open_mutex){+.+.}-{4:4}, at: snd_seq_oss_midi_close+0xb6/0x4b0 [ 968.900602][ T32] #2: ffff88803443a8e0 (&grp->list_mutex){+.+.}-{4:4}, at: snd_seq_port_disconnect+0x4e5/0x610 [ 968.900643][ T32] locks held by syz.4.2439/15136: 1, on CPU#0: [ 968.900654][ T32] #0: ffffffff90bb70e0 (register_mutex#4){+.+.}-{4:4}, at: odev_open+0x5e/0x90 [ 968.900698][ T32] [ 968.900702][ T32] ============================================= [ 968.900702][ T32] [ 968.900721][ T32] NMI backtrace for cpu 1 [ 968.900737][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 968.900760][ T32] Tainted: [L]=SOFTLOCKUP [ 968.900766][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 968.900776][ T32] Call Trace: [ 968.900783][ T32] [ 968.900790][ T32] dump_stack_lvl+0x100/0x190 [ 968.900816][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 968.900841][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 968.900861][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 968.900889][ T32] sys_info+0x141/0x190 [ 968.900910][ T32] watchdog+0xcb1/0x1030 [ 968.900935][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 968.900954][ T32] ? __pfx_watchdog+0x10/0x10 [ 968.900973][ T32] ? __kthread_parkme+0x18f/0x230 [ 968.900995][ T32] ? kthread+0x13a/0x450 [ 968.901014][ T32] ? __pfx_watchdog+0x10/0x10 [ 968.901030][ T32] kthread+0x373/0x450 [ 968.901055][ T32] ? __pfx_kthread+0x10/0x10 [ 968.901078][ T32] ret_from_fork+0x730/0xd60 [ 968.901097][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 968.901116][ T32] ? __switch_to+0x800/0x10f0 [ 968.901138][ T32] ? __pfx_kthread+0x10/0x10 [ 968.901161][ T32] ret_from_fork_asm+0x1a/0x30 [ 968.901188][ T32] [ 968.901208][ T32] Sending NMI from CPU 1 to CPUs 0: [ 968.901251][ C0] NMI backtrace for cpu 0 [ 968.901264][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.901283][ C0] Tainted: [L]=SOFTLOCKUP [ 968.901289][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 968.901297][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 968.901321][ C0] Code: 07 5c fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 48 1a cf fc eb a2 e8 d1 1a [ 968.901336][ C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 968.901348][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 968.901358][ C0] RDX: 00000000000003fd RSI: ffffffff85afe8d0 RDI: ffffffff9bc64ca0 [ 968.901368][ C0] RBP: ffffffff9bc64c60 R08: 0000000000000001 R09: 000000000000001f [ 968.901377][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 968.901386][ C0] R13: 0000000000000020 R14: fffffbfff378c9e9 R15: dffffc0000000000 [ 968.901396][ C0] FS: 0000000000000000(0000) GS:ffff888123b60000(0000) knlGS:0000000000000000 [ 968.901411][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 968.901421][ C0] CR2: 00007efdd8672ff8 CR3: 000000005be55000 CR4: 00000000003526f0 [ 968.901431][ C0] Call Trace: [ 968.901437][ C0] [ 968.901443][ C0] wait_for_lsr+0x13a/0x210 [ 968.901464][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 968.901481][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 968.901495][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 968.901516][ C0] serial8250_console_write+0xf46/0x1330 [ 968.901535][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 968.901556][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 968.901580][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 968.901604][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 968.901626][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 968.901647][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 968.901667][ C0] ? do_raw_spin_lock+0x90/0x260 [ 968.901687][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 968.901706][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 968.901728][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 968.901748][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 968.901771][ C0] nbcon_kthread_func+0x613/0x7d0 [ 968.901793][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 968.901815][ C0] ? __kthread_parkme+0x18f/0x230 [ 968.901833][ C0] ? kthread+0x13a/0x450 [ 968.901849][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 968.901869][ C0] kthread+0x373/0x450 [ 968.901887][ C0] ? __pfx_kthread+0x10/0x10 [ 968.901905][ C0] ret_from_fork+0x730/0xd60 [ 968.901920][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 968.901936][ C0] ? __switch_to+0x800/0x10f0 [ 968.901954][ C0] ? __pfx_kthread+0x10/0x10 [ 968.901972][ C0] ret_from_fork_asm+0x1a/0x30 [ 968.901991][ C0] [ 968.906925][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 970.443497][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 970.454338][ T32] Tainted: [L]=SOFTLOCKUP [ 970.458674][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 970.468734][ T32] Call Trace: [ 970.472021][ T32] [ 970.474947][ T32] dump_stack_lvl+0x100/0x190 [ 970.479638][ T32] vpanic+0x553/0x970 [ 970.483617][ T32] ? __pfx_vpanic+0x10/0x10 [ 970.488121][ T32] panic+0xd1/0xe0 [ 970.491841][ T32] ? __pfx_panic+0x10/0x10 [ 970.496265][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 970.502446][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 970.508642][ T32] ? watchdog.cold+0x1ec/0x234 [ 970.513412][ T32] watchdog.cold+0x1fd/0x234 [ 970.518008][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 970.523817][ T32] ? __pfx_watchdog+0x10/0x10 [ 970.528529][ T32] ? __kthread_parkme+0x18f/0x230 [ 970.533570][ T32] ? kthread+0x13a/0x450 [ 970.537829][ T32] ? __pfx_watchdog+0x10/0x10 [ 970.542516][ T32] kthread+0x373/0x450 [ 970.546594][ T32] ? __pfx_kthread+0x10/0x10 [ 970.551192][ T32] ret_from_fork+0x730/0xd60 [ 970.555790][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 970.560902][ T32] ? __switch_to+0x800/0x10f0 [ 970.565584][ T32] ? __pfx_kthread+0x10/0x10 [ 970.570182][ T32] ret_from_fork_asm+0x1a/0x30 [ 970.574964][ T32] [ 970.578245][ T32] Kernel Offset: disabled [ 970.582569][ T32] Rebooting in 86400 seconds..